@authup/server-core 1.0.0-beta.51 → 1.0.0-beta.53

package/dist/adapters/http/controllers/entities/key/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/entities/key/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/key/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/entities/key/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { KeyController } from "./module.mjs";
+export { KeyController };

package/dist/adapters/http/controllers/entities/key/module.d.ts

@@ -0,0 +1,17 @@
+import type { IAppEvent } from 'routup';
+import type { EntityCollectionResponse, KeyCreatePayload, KeyUpdatePayload } from '@authup/core-http-kit';
+import type { Key } from '@authup/core-kit';
+import type { IKeyService } from '../../../../../core/index.ts';
+export type KeyControllerContext = {
+    service: IKeyService;
+};
+export declare class KeyController {
+    protected service: IKeyService;
+    constructor(ctx: KeyControllerContext);
+    getMany(event: IAppEvent): Promise<EntityCollectionResponse<Key>>;
+    getOne(id: string, event: IAppEvent): Promise<Key>;
+    add(data: KeyCreatePayload, event: IAppEvent): Promise<Key>;
+    edit(id: string, data: KeyUpdatePayload, event: IAppEvent): Promise<Key>;
+    drop(id: string, event: IAppEvent): Promise<Key>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/entities/key/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/key/module.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EACR,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAQhE,MAAM,MAAM,oBAAoB,GAAG;IAC/B,OAAO,EAAE,WAAW,CAAC;CACxB,CAAC;AAEF,qBAEa,aAAa;IACtB,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC;gBAEnB,GAAG,EAAE,oBAAoB;IAK/B,OAAO,CACG,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAqBnC,MAAM,CACK,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC;IAOT,GAAG,CACI,IAAI,EAAE,gBAAgB,EACnB,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC;IAWT,IAAI,CACO,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,EACnB,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC;IAOT,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC;CAYlB"}

package/dist/adapters/http/controllers/entities/key/module.mjs

@@ -0,0 +1,122 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { buildActorContext } from "../../../request/helpers/actor.mjs";
+import { applyRouteRealmIDToBody, getRequestRealmID } from "../../../request/helpers/realm-id.mjs";
+import "../../../request/index.mjs";
+import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
+import "../../../middleware/index.mjs";
+import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DTags } from "@routup/decorators";
+//#region src/adapters/http/controllers/entities/key/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var KeyController = class {
+	service;
+	constructor(ctx) {
+		this.service = ctx.service;
+	}
+	async getMany(event) {
+		const actor = buildActorContext(event);
+		const query = useRequestQuery(event);
+		const realmId = getRequestRealmID(event);
+		if (realmId) query.filter = {
+			...query.filter && typeof query.filter === "object" ? query.filter : {},
+			realm_id: realmId
+		};
+		const { data, meta } = await this.service.getMany(query, actor);
+		return {
+			data,
+			meta
+		};
+	}
+	async getOne(id, event) {
+		const actor = buildActorContext(event);
+		return this.service.getOne(id, actor, getRequestRealmID(event));
+	}
+	async add(data, event) {
+		applyRouteRealmIDToBody(event, data);
+		const actor = buildActorContext(event);
+		const entity = await this.service.create(data, actor);
+		event.response.status = 201;
+		return entity;
+	}
+	async edit(id, data, event) {
+		const actor = buildActorContext(event);
+		return this.service.update(id, data, actor, getRequestRealmID(event));
+	}
+	async drop(id, event) {
+		const actor = buildActorContext(event);
+		const query = useRequestQuery(event);
+		const force = query.force === "true" || query.force === "1";
+		const entity = await this.service.delete(id, actor, { force });
+		event.response.status = 202;
+		return entity;
+	}
+};
+_ts_decorate([
+	DGet("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], KeyController.prototype, "getMany", null);
+_ts_decorate([
+	DGet("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [String, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], KeyController.prototype, "getOne", null);
+_ts_decorate([
+	DPost("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DBody()),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof KeyCreatePayload === "undefined" ? Object : KeyCreatePayload, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], KeyController.prototype, "add", null);
+_ts_decorate([
+	DPost("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		typeof KeyUpdatePayload === "undefined" ? Object : KeyUpdatePayload,
+		typeof IAppEvent === "undefined" ? Object : IAppEvent
+	]),
+	_ts_metadata("design:returntype", Promise)
+], KeyController.prototype, "edit", null);
+_ts_decorate([
+	DDelete("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [String, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], KeyController.prototype, "drop", null);
+KeyController = _ts_decorate([
+	DTags("key"),
+	DController(["/keys", "/realms/:realmId/keys"]),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof KeyControllerContext === "undefined" ? Object : KeyControllerContext])
+], KeyController);
+//#endregion
+export { KeyController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/entities/key/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","KeyController","service","ctx","getMany","event","actor","query","realmId","filter","realm_id","data","meta","getOne","id","add","entity","create","response","status","edit","update","drop","force","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/key/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n    EntityCollectionResponse,\n    KeyCreatePayload,\n    KeyUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { Key } from '@authup/core-kit';\nimport type { IKeyService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    applyRouteRealmIDToBody,\n    buildActorContext,\n    getRequestRealmID,\n} from '../../../request/index.ts';\n\nexport type KeyControllerContext = {\n    service: IKeyService,\n};\n\n@DTags('key')\n@DController(['/keys', '/realms/:realmId/keys'])\nexport class KeyController {\n    protected service: IKeyService;\n\n    constructor(ctx: KeyControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IAppEvent,\n    ): Promise<EntityCollectionResponse<Key>> {\n        const actor = buildActorContext(event);\n\n        const query = useRequestQuery(event);\n        const realmId = getRequestRealmID(event);\n        if (realmId) {\n            query.filter = {\n                ...(query.filter && typeof query.filter === 'object' ? query.filter : {}),\n                realm_id: realmId,\n            };\n        }\n\n        const { data, meta } = await this.service.getMany(query, actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<Key> {\n        const actor = buildActorContext(event);\n\n        return this.service.getOne(id, actor, getRequestRealmID(event));\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: KeyCreatePayload,\n        @DContext() event: IAppEvent,\n    ): Promise<Key> {\n        applyRouteRealmIDToBody(event, data);\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: KeyUpdatePayload,\n        @DContext() event: IAppEvent,\n    ): Promise<Key> {\n        const actor = buildActorContext(event);\n\n        return this.service.update(id, data, actor, getRequestRealmID(event));\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<Key> {\n        const actor = buildActorContext(event);\n\n        const query = useRequestQuery(event);\n        const force = query.force === 'true' || query.force === '1';\n\n        const entity = await this.service.delete(id, actor, { force });\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAaa,gBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA2B;EACnC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OACsC;EACtC,MAAME,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAME,QAAQX,gBAAgBS,KAAAA;EAC9B,MAAMG,UAAUR,kBAAkBK,KAAAA;EAClC,IAAIG,SACAD,MAAME,SAAS;GACX,GAAIF,MAAME,UAAU,OAAOF,MAAME,WAAW,WAAWF,MAAME,SAAS,CAAC;GACvEC,UAAUF;EACd;EAGJ,MAAM,EAAEG,MAAMC,SAAS,MAAM,KAAKV,QAAQE,QAAQG,OAAOD,KAAAA;EAEzD,OAAO;GACHK;GACAC;EACJ;CACJ;CAEA,MACMC,OACF,IACA,OACY;EACZ,MAAMP,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,QAAQW,OAAOC,IAAIR,OAAON,kBAAkBK,KAAAA,CAAAA;CAC5D;CAEA,MACMU,IACF,MACA,OACY;EACZjB,wBAAwBO,OAAOM,IAAAA;EAC/B,MAAML,QAAQP,kBAAkBM,KAAAA;EAChC,MAAMW,SAAS,MAAM,KAAKd,QAAQe,OAAON,MAAML,KAAAA;EAE/CD,MAAMa,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,KACF,IACA,MACA,OACY;EACZ,MAAMd,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,QAAQmB,OAAOP,IAAIH,MAAML,OAAON,kBAAkBK,KAAAA,CAAAA;CAClE;CAEA,MACMiB,KACF,IACA,OACY;EACZ,MAAMhB,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAME,QAAQX,gBAAgBS,KAAAA;EAC9B,MAAMkB,QAAQhB,MAAMgB,UAAU,UAAUhB,MAAMgB,UAAU;EAExD,MAAMP,SAAS,MAAM,KAAKd,QAAQsB,OAAOV,IAAIR,OAAO,EAAEiB,MAAM,CAAA;EAE5DlB,MAAMa,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;WA1EenB,uBAAAA,CAAAA;;;;;;;eAuBIA,uBAAAA,CAAAA;;;;;;;;YAUHA,uBAAAA,CAAAA;;;;;;;;gBAcIA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAWEA,uBAAAA,CAAAA;;;;;;;;;cAlER,SAAS,uBAAA,CAAA"}

package/dist/adapters/http/controllers/entities/permission/module.mjs

@@ -7,8 +7,8 @@ import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
 import { serializeError } from "@authup/errors";
-import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/permission/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;

package/dist/adapters/http/controllers/entities/permission-policy/module.mjs

@@ -5,8 +5,8 @@ import { buildActorContext } from "../../../request/helpers/actor.mjs";
 import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
-import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DTags } from "@routup/decorators";
 import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/permission-policy/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;

package/dist/adapters/http/controllers/entities/policy/module.mjs

@@ -7,8 +7,8 @@ import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
 import { serializeError } from "@authup/errors";
-import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/policy/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;

package/dist/adapters/http/controllers/entities/policy/utils/validation.mjs

@@ -6,10 +6,10 @@ import "../../../../request/index.mjs";
 import { PolicyAttributesValidator } from "./attributes-validator.mjs";
 import { isPolicyNameValid } from "@authup/core-kit";
 import { BuiltInPolicyType } from "@authup/access";
+import { isObject } from "smob";
 import { Container } from "validup";
 import { createValidator } from "@validup/zod";
 import { z } from "zod";
-import { isObject } from "smob";
 //#region src/adapters/http/controllers/entities/policy/utils/validation.ts
 var PolicyValidator = class extends Container {
 	initialize() {

package/dist/adapters/http/controllers/entities/realm/module.d.ts

@@ -7,6 +7,8 @@ import type { IRealmService } from '../../../../../core/index.ts';
 import type { KeyEntity } from '../../../../database/domains/index.ts';
 export type RealmControllerOptions = {
     baseURL: string;
+    mtlsBaseURL?: string | null;
+    clientCertificatesEnabled?: boolean;
 };
 export type RealmControllerContext = {
     options: RealmControllerOptions;

package/dist/adapters/http/controllers/entities/realm/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/realm/module.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAE9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EACR,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAMvE,MAAM,MAAM,sBAAsB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACjC,OAAO,EAAE,sBAAsB,CAAC;IAChC,OAAO,EAAE,aAAa,CAAC;IACvB,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;CACxC,CAAC;AAEF,qBAEa,eAAe;IACxB,SAAS,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAE1C,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;IAEjC,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBAEnC,GAAG,EAAE,sBAAsB;IAOjC,OAAO,CACG,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAarC,GAAG,CACI,IAAI,EAAE,kBAAkB,EACrB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAUZ,GAAG,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAK5C,sBAAsB,CACX,EAAE,EAAE,MAAM,GACxB,OAAO,CAAC,sBAAsB,CAAC;IA+C5B,QAAQ,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAMxE,OAAO,CACI,EAAE,EAAE,MAAM,EACP,KAAK,EAAE,MAAM,GAC9B,OAAO,CAAC,gBAAgB,CAAC;IAMtB,IAAI,CACO,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,kBAAkB,EACrB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAcZ,GAAG,CACQ,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,EACnB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAgBZ,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;CAQrB"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/realm/module.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAE9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EACR,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAMvE,MAAM,MAAM,sBAAsB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACjC,OAAO,EAAE,sBAAsB,CAAC;IAChC,OAAO,EAAE,aAAa,CAAC;IACvB,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;CACxC,CAAC;AAEF,qBAEa,eAAe;IACxB,SAAS,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAE1C,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;IAEjC,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBAEnC,GAAG,EAAE,sBAAsB;IAOjC,OAAO,CACG,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAarC,GAAG,CACI,IAAI,EAAE,kBAAkB,EACrB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAUZ,GAAG,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAK5C,sBAAsB,CACX,EAAE,EAAE,MAAM,GACxB,OAAO,CAAC,sBAAsB,CAAC;IA0F5B,QAAQ,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAMxE,OAAO,CACI,EAAE,EAAE,MAAM,EACP,KAAK,EAAE,MAAM,GAC9B,OAAO,CAAC,gBAAgB,CAAC;IAMtB,IAAI,CACO,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,kBAAkB,EACrB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAcZ,GAAG,CACQ,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,EACnB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAgBZ,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;CAQrB"}

package/dist/adapters/http/controllers/entities/realm/module.mjs

@@ -3,15 +3,15 @@ import "node:url";
 import.meta.url;
 import { buildActorContext } from "../../../request/helpers/actor.mjs";
 import "../../../request/index.mjs";
+import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import { resolveURL } from "../../../../../utils/url.mjs";
 import "../../../../../utils/index.mjs";
-import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
 import { getJwkRouteHandler, getJwksRouteHandler } from "../../workflows/jwks/handlers/read.mjs";
 import "../../workflows/index.mjs";
-import { OAuth2AuthorizationResponseType } from "@authup/specs";
-import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
+import { OAuth2AuthenticationContextClass, OAuth2AuthorizationPrompt, OAuth2AuthorizationResponseType } from "@authup/specs";
 import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/realm/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -55,15 +55,20 @@ var RealmController = class {
 	async getOpenIdConfiguration(id) {
 		const entity = await this.service.getOne(id);
 		const { baseURL } = this.options;
+		const { mtlsBaseURL, clientCertificatesEnabled = false } = this.options;
 		return {
 			issuer: resolveURL(baseURL, `realms/${entity.name}`).replace(/\/+$/, ""),
 			authorization_endpoint: resolveURL(baseURL, "authorize"),
+			end_session_endpoint: resolveURL(baseURL, "logout"),
 			jwks_uri: resolveURL(baseURL, `realms/${entity.name}/jwks`),
-			response_types_supported: [
-				OAuth2AuthorizationResponseType.CODE,
-				OAuth2AuthorizationResponseType.TOKEN,
-				OAuth2AuthorizationResponseType.NONE
+			response_types_supported: [OAuth2AuthorizationResponseType.CODE],
+			prompt_values_supported: [
+				OAuth2AuthorizationPrompt.NONE,
+				OAuth2AuthorizationPrompt.LOGIN,
+				OAuth2AuthorizationPrompt.CONSENT,
+				OAuth2AuthorizationPrompt.SELECT_ACCOUNT
 			],
+			acr_values_supported: [OAuth2AuthenticationContextClass.PASSWORD, OAuth2AuthenticationContextClass.MFA],
 			subject_types_supported: ["public"],
 			id_token_signing_alg_values_supported: [
 				"HS256",
@@ -75,8 +80,21 @@ var RealmController = class {
 				"none"
 			],
 			token_endpoint: resolveURL(baseURL, "token"),
+			token_endpoint_auth_methods_supported: [
+				"none",
+				"client_secret_basic",
+				"client_secret_post",
+				...clientCertificatesEnabled ? ["tls_client_auth"] : []
+			],
+			...clientCertificatesEnabled ? { tls_client_certificate_bound_access_tokens: true } : {},
+			...mtlsBaseURL ? { mtls_endpoint_aliases: {
+				token_endpoint: resolveURL(mtlsBaseURL, "token"),
+				introspection_endpoint: resolveURL(mtlsBaseURL, "token/introspect"),
+				revocation_endpoint: resolveURL(mtlsBaseURL, "token/revoke"),
+				userinfo_endpoint: resolveURL(mtlsBaseURL, "users/@me")
+			} } : {},
 			introspection_endpoint: resolveURL(baseURL, "token/introspect"),
-			revocation_endpoint: resolveURL(baseURL, "token"),
+			revocation_endpoint: resolveURL(baseURL, "token/revoke"),
 			service_documentation: "https://authup.org/",
 			userinfo_endpoint: resolveURL(baseURL, "users/@me")
 		};

package/dist/adapters/http/controllers/entities/realm/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","OAuth2AuthorizationResponseType","useRequestQuery","getJwkRouteHandler","getJwksRouteHandler","ForceLoggedInMiddleware","buildActorContext","resolveURL","RealmController","options","service","keyRepository","ctx","getMany","event","data","meta","add","actor","entity","create","response","status","get","id","getOne","getOpenIdConfiguration","baseURL","issuer","name","replace","authorization_endpoint","jwks_uri","response_types_supported","CODE","TOKEN","NONE","subject_types_supported","id_token_signing_alg_values_supported","token_endpoint","introspection_endpoint","revocation_endpoint","service_documentation","userinfo_endpoint","getCerts","getCert","keyId","edit","update","put","created","save","undefined","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/realm/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DPut,\n    DTags,\n} from '@routup/decorators';\nimport type { OAuth2JsonWebKey, OpenIDProviderMetadata } from '@authup/specs';\nimport { OAuth2AuthorizationResponseType } from '@authup/specs';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { Repository } from 'typeorm';\nimport type {\n    EntityCollectionResponse,\n    RealmCreatePayload,\n    RealmSavePayload,\n    RealmUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { Realm } from '@authup/core-kit';\nimport type { IRealmService } from '../../../../../core/index.ts';\nimport type { KeyEntity } from '../../../../database/domains/index.ts';\nimport { getJwkRouteHandler, getJwksRouteHandler } from '../../workflows/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext } from '../../../request/index.ts';\nimport { resolveURL } from '../../../../../utils/index.ts';\n\nexport type RealmControllerOptions = {\n    baseURL: string\n};\n\nexport type RealmControllerContext = {\n    options: RealmControllerOptions,\n    service: IRealmService,\n    keyRepository: Repository<KeyEntity>,\n};\n\n@DTags('realm')\n@DController('/realms')\nexport class RealmController {\n    protected options: RealmControllerOptions;\n\n    protected service: IRealmService;\n\n    protected keyRepository: Repository<KeyEntity>;\n\n    constructor(ctx: RealmControllerContext) {\n        this.options = ctx.options;\n        this.service = ctx.service;\n        this.keyRepository = ctx.keyRepository;\n    }\n\n    @DGet('', [])\n    async getMany(\n        @DContext() event: IAppEvent,\n    ): Promise<EntityCollectionResponse<Realm>> {\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event));\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: RealmCreatePayload,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DGet('/:id', [])\n    async get(@DPath('id') id: string): Promise<Realm> {\n        return this.service.getOne(id);\n    }\n\n    @DGet('/:id/.well-known/openid-configuration', [])\n    async getOpenIdConfiguration(\n        @DPath('id') id: string,\n    ): Promise<OpenIDProviderMetadata> {\n        const entity = await this.service.getOne(id);\n\n        const { baseURL } = this.options;\n\n        return {\n            issuer: resolveURL(baseURL, `realms/${entity.name}`).replace(/\\/+$/, ''),\n\n            authorization_endpoint: resolveURL(baseURL, 'authorize'),\n\n            jwks_uri: resolveURL(baseURL, `realms/${entity.name}/jwks`),\n\n            response_types_supported: [\n                OAuth2AuthorizationResponseType.CODE,\n                OAuth2AuthorizationResponseType.TOKEN,\n                OAuth2AuthorizationResponseType.NONE,\n            ],\n\n            subject_types_supported: [\n                'public',\n            ],\n\n            id_token_signing_alg_values_supported: [\n                'HS256',\n                'HS384',\n                'HS512',\n                'RS256',\n                'RS384',\n                'RS512',\n                'none',\n            ],\n\n            token_endpoint: resolveURL(baseURL, 'token'),\n\n            introspection_endpoint: resolveURL(baseURL, 'token/introspect'),\n\n            revocation_endpoint: resolveURL(baseURL, 'token'),\n\n            // -----------------------------------------------------------\n\n            service_documentation: 'https://authup.org/',\n\n            userinfo_endpoint: resolveURL(baseURL, 'users/@me'),\n        };\n    }\n\n    @DGet('/:id/jwks', [])\n    async getCerts(@DPath('id') id: string): Promise<{ keys: OAuth2JsonWebKey[] }> {\n        const entity = await this.service.getOne(id);\n        return getJwksRouteHandler(this.keyRepository, entity.id);\n    }\n\n    @DGet('/:id/jwks/:keyId', [])\n    async getCert(\n        @DPath('id') id: string,\n        @DPath('keyId') keyId: string,\n    ): Promise<OAuth2JsonWebKey> {\n        const entity = await this.service.getOne(id);\n        return getJwkRouteHandler(this.keyRepository, keyId, entity.id);\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: RealmUpdatePayload,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.update(\n            id,\n            data,\n            actor,\n        );\n\n        event.response.status = 202;\n\n        return entity;\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async put(\n        @DPath('id') id: string,\n        @DBody() data: RealmSavePayload,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const {\n            entity,\n            created,\n        } = await this.service.save(\n            id || undefined,\n            data,\n            actor,\n        );\n\n        event.response.status = created ? 201 : 202;\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,IAAagB,kBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEV,YAAYC,KAA6B;EACrC,KAAKH,UAAUG,IAAIH;EACnB,KAAKC,UAAUE,IAAIF;EACnB,KAAKC,gBAAgBC,IAAID;CAC7B;CAEA,MACME,QACF,OACwC;EACxC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQG,QAAQX,gBAAgBY,KAAAA,CAAAA;EAE/C,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACe;EACf,MAAMC,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQU,OAAOL,MAAMG,KAAAA;EAE/CJ,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,IAAI,IAAyC;EAC/C,OAAO,KAAKb,QAAQe,OAAOD,EAAAA;CAC/B;CAEA,MACME,uBACF,IAC+B;EAC/B,MAAMP,SAAS,MAAM,KAAKT,QAAQe,OAAOD,EAAAA;EAEzC,MAAM,EAAEG,YAAY,KAAKlB;EAEzB,OAAO;GACHmB,QAAQrB,WAAWoB,SAAS,UAAUR,OAAOU,MAAM,CAAA,CAAEC,QAAQ,QAAQ,EAAA;GAErEC,wBAAwBxB,WAAWoB,SAAS,WAAA;GAE5CK,UAAUzB,WAAWoB,SAAS,UAAUR,OAAOU,KAAK,MAAM;GAE1DI,0BAA0B;IACtBhC,gCAAgCiC;IAChCjC,gCAAgCkC;IAChClC,gCAAgCmC;;GAGpCC,yBAAyB,CACrB,QAAA;GAGJC,uCAAuC;IACnC;IACA;IACA;IACA;IACA;IACA;IACA;;GAGJC,gBAAgBhC,WAAWoB,SAAS,OAAA;GAEpCa,wBAAwBjC,WAAWoB,SAAS,kBAAA;GAE5Cc,qBAAqBlC,WAAWoB,SAAS,OAAA;GAIzCe,uBAAuB;GAEvBC,mBAAmBpC,WAAWoB,SAAS,WAAA;EAC3C;CACJ;CAEA,MACMiB,SAAS,IAAgE;EAC3E,MAAMzB,SAAS,MAAM,KAAKT,QAAQe,OAAOD,EAAAA;EACzC,OAAOpB,oBAAoB,KAAKO,eAAeQ,OAAOK,EAAE;CAC5D;CAEA,MACMqB,QACF,IACA,OACyB;EACzB,MAAM1B,SAAS,MAAM,KAAKT,QAAQe,OAAOD,EAAAA;EACzC,OAAOrB,mBAAmB,KAAKQ,eAAemC,OAAO3B,OAAOK,EAAE;CAClE;CAEA,MACMuB,KACF,IACA,MACA,OACe;EACf,MAAM7B,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQsC,OAC9BxB,IACAT,MACAG,KAAAA;EAGJJ,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACM8B,IACF,IACA,MACA,OACe;EACf,MAAM/B,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAM,EACFK,QACA+B,YACA,MAAM,KAAKxC,QAAQyC,KACnB3B,MAAM4B,KAAAA,GACNrC,MACAG,KAAAA;EAGJJ,MAAMO,SAASC,SAAS4B,UAAU,MAAM;EACxC,OAAO/B;CACX;CAEA,MACMkC,KACF,IACA,OACe;EACf,MAAMnC,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQ4C,OAAO9B,IAAIN,KAAAA;EAE7CJ,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;;;;;;;;YApIgBd,uBAAAA,CAAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAkFIA,uBAAAA,CAAAA;;;;;;;;;;;;;eAkBDA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAoBGA,uBAAAA,CAAAA"}
+{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","OAuth2AuthenticationContextClass","OAuth2AuthorizationPrompt","OAuth2AuthorizationResponseType","useRequestQuery","getJwkRouteHandler","getJwksRouteHandler","ForceLoggedInMiddleware","buildActorContext","resolveURL","RealmController","options","service","keyRepository","ctx","getMany","event","data","meta","add","actor","entity","create","response","status","get","id","getOne","getOpenIdConfiguration","baseURL","mtlsBaseURL","clientCertificatesEnabled","issuer","name","replace","authorization_endpoint","end_session_endpoint","jwks_uri","response_types_supported","CODE","prompt_values_supported","NONE","LOGIN","CONSENT","SELECT_ACCOUNT","acr_values_supported","PASSWORD","MFA","subject_types_supported","id_token_signing_alg_values_supported","token_endpoint","token_endpoint_auth_methods_supported","tls_client_certificate_bound_access_tokens","mtls_endpoint_aliases","introspection_endpoint","revocation_endpoint","userinfo_endpoint","service_documentation","getCerts","getCert","keyId","edit","update","put","created","save","undefined","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/realm/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DPut,\n    DTags,\n} from '@routup/decorators';\nimport type { OAuth2JsonWebKey, OpenIDProviderMetadata } from '@authup/specs';\nimport { OAuth2AuthenticationContextClass, OAuth2AuthorizationPrompt, OAuth2AuthorizationResponseType } from '@authup/specs';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { Repository } from 'typeorm';\nimport type {\n    EntityCollectionResponse,\n    RealmCreatePayload,\n    RealmSavePayload,\n    RealmUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { Realm } from '@authup/core-kit';\nimport type { IRealmService } from '../../../../../core/index.ts';\nimport type { KeyEntity } from '../../../../database/domains/index.ts';\nimport { getJwkRouteHandler, getJwksRouteHandler } from '../../workflows/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext } from '../../../request/index.ts';\nimport { resolveURL } from '../../../../../utils/index.ts';\n\nexport type RealmControllerOptions = {\n    baseURL: string,\n    mtlsBaseURL?: string | null,\n    clientCertificatesEnabled?: boolean,\n};\n\nexport type RealmControllerContext = {\n    options: RealmControllerOptions,\n    service: IRealmService,\n    keyRepository: Repository<KeyEntity>,\n};\n\n@DTags('realm')\n@DController('/realms')\nexport class RealmController {\n    protected options: RealmControllerOptions;\n\n    protected service: IRealmService;\n\n    protected keyRepository: Repository<KeyEntity>;\n\n    constructor(ctx: RealmControllerContext) {\n        this.options = ctx.options;\n        this.service = ctx.service;\n        this.keyRepository = ctx.keyRepository;\n    }\n\n    @DGet('', [])\n    async getMany(\n        @DContext() event: IAppEvent,\n    ): Promise<EntityCollectionResponse<Realm>> {\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event));\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: RealmCreatePayload,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DGet('/:id', [])\n    async get(@DPath('id') id: string): Promise<Realm> {\n        return this.service.getOne(id);\n    }\n\n    @DGet('/:id/.well-known/openid-configuration', [])\n    async getOpenIdConfiguration(\n        @DPath('id') id: string,\n    ): Promise<OpenIDProviderMetadata> {\n        const entity = await this.service.getOne(id);\n\n        const { baseURL } = this.options;\n        const { mtlsBaseURL, clientCertificatesEnabled = false } = this.options;\n\n        return {\n            issuer: resolveURL(baseURL, `realms/${entity.name}`).replace(/\\/+$/, ''),\n\n            authorization_endpoint: resolveURL(baseURL, 'authorize'),\n\n            end_session_endpoint: resolveURL(baseURL, 'logout'),\n\n            jwks_uri: resolveURL(baseURL, `realms/${entity.name}/jwks`),\n\n            // OAuth 2.1 posture: the authorization endpoint issues codes\n            // only — implicit/hybrid response types were dropped (plan 042).\n            response_types_supported: [\n                OAuth2AuthorizationResponseType.CODE,\n            ],\n\n            // `none` (silent authentication) is handled by the hosted SSR\n            // authorize page (the kit `Authorize.vue`): it either completes a\n            // built_in client's auto-consent silently or redirects the OIDC\n            // error (login_required / consent_required / interaction_required)\n            // to a verified redirect_uri — zero UI. The server GET cannot do\n            // this server-side (auth is header-only; a top-level navigation\n            // carries no bearer), so the SSR page owns it (plan 042 item 10).\n            prompt_values_supported: [\n                OAuth2AuthorizationPrompt.NONE,\n                OAuth2AuthorizationPrompt.LOGIN,\n                OAuth2AuthorizationPrompt.CONSENT,\n                OAuth2AuthorizationPrompt.SELECT_ACCOUNT,\n            ],\n\n            // two coarse levels only (urn-style — OIDC reserves the bare\n            // \"0\"); `urn:authup:mfa` in `acr_values` acts as a step-up\n            // trigger (plan 050).\n            acr_values_supported: [\n                OAuth2AuthenticationContextClass.PASSWORD,\n                OAuth2AuthenticationContextClass.MFA,\n            ],\n\n            subject_types_supported: [\n                'public',\n            ],\n\n            id_token_signing_alg_values_supported: [\n                'HS256',\n                'HS384',\n                'HS512',\n                'RS256',\n                'RS384',\n                'RS512',\n                'none',\n            ],\n\n            token_endpoint: resolveURL(baseURL, 'token'),\n\n            token_endpoint_auth_methods_supported: [\n                'none',\n                'client_secret_basic',\n                'client_secret_post',\n                ...(clientCertificatesEnabled ? ['tls_client_auth'] : []),\n            ],\n\n            ...(clientCertificatesEnabled ? { tls_client_certificate_bound_access_tokens: true } : {}),\n\n            ...(mtlsBaseURL ? {\n                mtls_endpoint_aliases: {\n                    token_endpoint: resolveURL(mtlsBaseURL, 'token'),\n                    introspection_endpoint: resolveURL(mtlsBaseURL, 'token/introspect'),\n                    revocation_endpoint: resolveURL(mtlsBaseURL, 'token/revoke'),\n                    userinfo_endpoint: resolveURL(mtlsBaseURL, 'users/@me'),\n                },\n            } : {}),\n\n            introspection_endpoint: resolveURL(baseURL, 'token/introspect'),\n\n            revocation_endpoint: resolveURL(baseURL, 'token/revoke'),\n\n            // -----------------------------------------------------------\n\n            service_documentation: 'https://authup.org/',\n\n            userinfo_endpoint: resolveURL(baseURL, 'users/@me'),\n        };\n    }\n\n    @DGet('/:id/jwks', [])\n    async getCerts(@DPath('id') id: string): Promise<{ keys: OAuth2JsonWebKey[] }> {\n        const entity = await this.service.getOne(id);\n        return getJwksRouteHandler(this.keyRepository, entity.id);\n    }\n\n    @DGet('/:id/jwks/:keyId', [])\n    async getCert(\n        @DPath('id') id: string,\n        @DPath('keyId') keyId: string,\n    ): Promise<OAuth2JsonWebKey> {\n        const entity = await this.service.getOne(id);\n        return getJwkRouteHandler(this.keyRepository, keyId, entity.id);\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: RealmUpdatePayload,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.update(\n            id,\n            data,\n            actor,\n        );\n\n        event.response.status = 202;\n\n        return entity;\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async put(\n        @DPath('id') id: string,\n        @DBody() data: RealmSavePayload,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const {\n            entity,\n            created,\n        } = await this.service.save(\n            id || undefined,\n            data,\n            actor,\n        );\n\n        event.response.status = created ? 201 : 202;\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmDA,IAAakB,kBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEV,YAAYC,KAA6B;EACrC,KAAKH,UAAUG,IAAIH;EACnB,KAAKC,UAAUE,IAAIF;EACnB,KAAKC,gBAAgBC,IAAID;CAC7B;CAEA,MACME,QACF,OACwC;EACxC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQG,QAAQX,gBAAgBY,KAAAA,CAAAA;EAE/C,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACe;EACf,MAAMC,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQU,OAAOL,MAAMG,KAAAA;EAE/CJ,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,IAAI,IAAyC;EAC/C,OAAO,KAAKb,QAAQe,OAAOD,EAAAA;CAC/B;CAEA,MACME,uBACF,IAC+B;EAC/B,MAAMP,SAAS,MAAM,KAAKT,QAAQe,OAAOD,EAAAA;EAEzC,MAAM,EAAEG,YAAY,KAAKlB;EACzB,MAAM,EAAEmB,aAAaC,4BAA4B,UAAU,KAAKpB;EAEhE,OAAO;GACHqB,QAAQvB,WAAWoB,SAAS,UAAUR,OAAOY,MAAM,CAAA,CAAEC,QAAQ,QAAQ,EAAA;GAErEC,wBAAwB1B,WAAWoB,SAAS,WAAA;GAE5CO,sBAAsB3B,WAAWoB,SAAS,QAAA;GAE1CQ,UAAU5B,WAAWoB,SAAS,UAAUR,OAAOY,KAAK,MAAM;GAI1DK,0BAA0B,CACtBnC,gCAAgCoC,IAAAA;GAUpCC,yBAAyB;IACrBtC,0BAA0BuC;IAC1BvC,0BAA0BwC;IAC1BxC,0BAA0ByC;IAC1BzC,0BAA0B0C;;GAM9BC,sBAAsB,CAClB5C,iCAAiC6C,UACjC7C,iCAAiC8C,GAAAA;GAGrCC,yBAAyB,CACrB,QAAA;GAGJC,uCAAuC;IACnC;IACA;IACA;IACA;IACA;IACA;IACA;;GAGJC,gBAAgBzC,WAAWoB,SAAS,OAAA;GAEpCsB,uCAAuC;IACnC;IACA;IACA;OACIpB,4BAA4B,CAAC,iBAAA,IAAqB,CAAA;;GAG1D,GAAIA,4BAA4B,EAAEqB,4CAA4C,KAAK,IAAI,CAAC;GAExF,GAAItB,cAAc,EACduB,uBAAuB;IACnBH,gBAAgBzC,WAAWqB,aAAa,OAAA;IACxCwB,wBAAwB7C,WAAWqB,aAAa,kBAAA;IAChDyB,qBAAqB9C,WAAWqB,aAAa,cAAA;IAC7C0B,mBAAmB/C,WAAWqB,aAAa,WAAA;GAC/C,EACJ,IAAI,CAAC;GAELwB,wBAAwB7C,WAAWoB,SAAS,kBAAA;GAE5C0B,qBAAqB9C,WAAWoB,SAAS,cAAA;GAIzC4B,uBAAuB;GAEvBD,mBAAmB/C,WAAWoB,SAAS,WAAA;EAC3C;CACJ;CAEA,MACM6B,SAAS,IAAgE;EAC3E,MAAMrC,SAAS,MAAM,KAAKT,QAAQe,OAAOD,EAAAA;EACzC,OAAOpB,oBAAoB,KAAKO,eAAeQ,OAAOK,EAAE;CAC5D;CAEA,MACMiC,QACF,IACA,OACyB;EACzB,MAAMtC,SAAS,MAAM,KAAKT,QAAQe,OAAOD,EAAAA;EACzC,OAAOrB,mBAAmB,KAAKQ,eAAe+C,OAAOvC,OAAOK,EAAE;CAClE;CAEA,MACMmC,KACF,IACA,MACA,OACe;EACf,MAAMzC,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQkD,OAC9BpC,IACAT,MACAG,KAAAA;EAGJJ,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACM0C,IACF,IACA,MACA,OACe;EACf,MAAM3C,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAM,EACFK,QACA2C,YACA,MAAM,KAAKpD,QAAQqD,KACnBvC,MAAMwC,KAAAA,GACNjD,MACAG,KAAAA;EAGJJ,MAAMO,SAASC,SAASwC,UAAU,MAAM;EACxC,OAAO3C;CACX;CAEA,MACM8C,KACF,IACA,OACe;EACf,MAAM/C,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQwD,OAAO1C,IAAIN,KAAAA;EAE7CJ,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;;;;;;;;YA/KgBd,uBAAAA,CAAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA6HIA,uBAAAA,CAAAA;;;;;;;;;;;;;eAkBDA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAoBGA,uBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/robot/module.mjs

@@ -10,15 +10,15 @@ import { buildActorContext } from "../../../request/helpers/actor.mjs";
 import { applyRouteRealmIDToBody, getRequestRealmID } from "../../../request/helpers/realm-id.mjs";
 import { useRequestScopes } from "../../../request/helpers/scopes.mjs";
 import "../../../request/index.mjs";
+import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import { isSelfToken } from "../../../../../utils/self-id.mjs";
 import "../../../../../utils/index.mjs";
-import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
 import { isUUID } from "@authup/kit";
 import { EntityNotFoundError } from "@authup/errors";
 import { OAuth2SubKind } from "@authup/specs";
-import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/robot/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;

package/dist/adapters/http/controllers/entities/robot-permission/module.mjs

@@ -5,8 +5,8 @@ import { buildActorContext } from "../../../request/helpers/actor.mjs";
 import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
-import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DTags } from "@routup/decorators";
 import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/robot-permission/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;

package/dist/adapters/http/controllers/entities/robot-role/module.mjs

@@ -5,8 +5,8 @@ import { buildActorContext } from "../../../request/helpers/actor.mjs";
 import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
-import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DTags } from "@routup/decorators";
 import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/robot-role/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;

package/dist/adapters/http/controllers/entities/role/module.mjs

@@ -5,8 +5,8 @@ import { buildActorContext } from "../../../request/helpers/actor.mjs";
 import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
-import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/role/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;

package/dist/adapters/http/controllers/entities/role-attribute/module.mjs

@@ -5,8 +5,8 @@ import { buildActorContext } from "../../../request/helpers/actor.mjs";
 import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
-import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DTags } from "@routup/decorators";
 import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/role-attribute/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;

package/dist/adapters/http/controllers/entities/role-permission/module.mjs

@@ -5,8 +5,8 @@ import { buildActorContext } from "../../../request/helpers/actor.mjs";
 import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
-import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DTags } from "@routup/decorators";
 import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/role-permission/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;

package/dist/adapters/http/controllers/entities/scope/module.mjs

@@ -5,8 +5,8 @@ import { buildActorContext } from "../../../request/helpers/actor.mjs";
 import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
-import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/scope/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;

package/dist/adapters/http/controllers/entities/session/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/entities/session/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/session/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/entities/session/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { SessionController } from "./module.mjs";
+export { SessionController };

package/dist/adapters/http/controllers/entities/session/module.d.ts

@@ -0,0 +1,16 @@
+import type { Session } from '@authup/core-kit';
+import type { IAppEvent } from 'routup';
+import type { EntityCollectionResponse, SessionDeleteManyResponse } from '@authup/core-http-kit';
+import type { ISessionService } from '../../../../../core/index.ts';
+export type SessionControllerContext = {
+    service: ISessionService;
+};
+export declare class SessionController {
+    protected service: ISessionService;
+    constructor(ctx: SessionControllerContext);
+    getMany(event: IAppEvent): Promise<EntityCollectionResponse<Session>>;
+    getOne(id: string, event: IAppEvent): Promise<Session>;
+    dropMany(event: IAppEvent): Promise<SessionDeleteManyResponse>;
+    drop(id: string, event: IAppEvent): Promise<Session>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/entities/session/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/session/module.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAEjG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAIpE,MAAM,MAAM,wBAAwB,GAAG;IACnC,OAAO,EAAE,eAAe,CAAC;CAC5B,CAAC;AAEF,qBAEa,iBAAiB;IAC1B,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;gBAEvB,GAAG,EAAE,wBAAwB;IAKnC,OAAO,CACG,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAcvC,MAAM,CACK,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,OAAO,CAAC;IAUb,QAAQ,CACE,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,yBAAyB,CAAC;IAgB/B,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,OAAO,CAAC;CAStB"}

package/dist/adapters/http/controllers/entities/session/module.mjs

@@ -0,0 +1,102 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { buildActorContext } from "../../../request/helpers/actor.mjs";
+import { useRequestSessionId } from "../../../request/helpers/session-id.mjs";
+import "../../../request/index.mjs";
+import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
+import { isSelfToken } from "../../../../../utils/self-id.mjs";
+import "../../../../../utils/index.mjs";
+import "../../../middleware/index.mjs";
+import { useRequestQuery } from "@routup/basic/query";
+import { DContext, DController, DDelete, DGet, DPath, DTags } from "@routup/decorators";
+//#region src/adapters/http/controllers/entities/session/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var SessionController = class {
+	service;
+	constructor(ctx) {
+		this.service = ctx.service;
+	}
+	async getMany(event) {
+		const actor = buildActorContext(event);
+		const { data, meta } = await this.service.getMany(useRequestQuery(event), actor);
+		return {
+			data,
+			meta
+		};
+	}
+	async getOne(id, event) {
+		const actor = buildActorContext(event);
+		const resolvedId = isSelfToken(id) ? useRequestSessionId(event) ?? id : id;
+		return this.service.getOne(resolvedId, actor);
+	}
+	async dropMany(event) {
+		const actor = buildActorContext(event);
+		const result = await this.service.deleteMany(actor, {
+			query: useRequestQuery(event),
+			currentSessionId: useRequestSessionId(event)
+		});
+		event.response.status = 202;
+		return result;
+	}
+	async drop(id, event) {
+		const actor = buildActorContext(event);
+		const resolvedId = isSelfToken(id) ? useRequestSessionId(event) ?? id : id;
+		const entity = await this.service.delete(resolvedId, actor);
+		event.response.status = 202;
+		return entity;
+	}
+};
+_ts_decorate([
+	DGet("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], SessionController.prototype, "getMany", null);
+_ts_decorate([
+	DGet("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [String, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], SessionController.prototype, "getOne", null);
+_ts_decorate([
+	DDelete("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], SessionController.prototype, "dropMany", null);
+_ts_decorate([
+	DDelete("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [String, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], SessionController.prototype, "drop", null);
+SessionController = _ts_decorate([
+	DTags("session"),
+	DController(["/sessions", "/realms/:realmId/sessions"]),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof SessionControllerContext === "undefined" ? Object : SessionControllerContext])
+], SessionController);
+//#endregion
+export { SessionController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/entities/session/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DContext","DController","DDelete","DGet","DPath","DTags","useRequestQuery","isSelfToken","ForceLoggedInMiddleware","buildActorContext","useRequestSessionId","SessionController","service","ctx","getMany","event","actor","data","meta","getOne","id","resolvedId","dropMany","result","deleteMany","query","currentSessionId","response","status","drop","entity","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/session/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DTags,\n} from '@routup/decorators';\nimport type { Session } from '@authup/core-kit';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { EntityCollectionResponse, SessionDeleteManyResponse } from '@authup/core-http-kit';\nimport { isSelfToken } from '../../../../../utils/index.ts';\nimport type { ISessionService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext, useRequestSessionId } from '../../../request/index.ts';\n\nexport type SessionControllerContext = {\n    service: ISessionService,\n};\n\n@DTags('session')\n@DController(['/sessions', '/realms/:realmId/sessions'])\nexport class SessionController {\n    protected service: ISessionService;\n\n    constructor(ctx: SessionControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IAppEvent,\n    ): Promise<EntityCollectionResponse<Session>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<Session> {\n        const actor = buildActorContext(event);\n\n        // `@me` / `@self` resolve to the caller's current session.\n        const resolvedId = isSelfToken(id) ? (useRequestSessionId(event) ?? id) : id;\n\n        return this.service.getOne(resolvedId, actor);\n    }\n\n    @DDelete('', [ForceLoggedInMiddleware])\n    async dropMany(\n        @DContext() event: IAppEvent,\n    ): Promise<SessionDeleteManyResponse> {\n        const actor = buildActorContext(event);\n\n        // A recognized target filter (e.g. `?filter[user_id]=<uuid>`) → admin\n        // force-logout (SESSION_DELETE + per-session realm-match). No filter →\n        // self-service \"log out my other devices\" (keeps the current session).\n        const result = await this.service.deleteMany(actor, {\n            query: useRequestQuery(event),\n            currentSessionId: useRequestSessionId(event),\n        });\n\n        event.response.status = 202;\n        return result;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<Session> {\n        const actor = buildActorContext(event);\n\n        const resolvedId = isSelfToken(id) ? (useRequestSessionId(event) ?? id) : id;\n        const entity = await this.service.delete(resolvedId, actor);\n\n        event.response.status = 202;\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,IAAaW,oBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA+B;EACvC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC0C;EAC1C,MAAME,QAAQP,kBAAkBM,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQR,gBAAgBS,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,OACF,IACA,OACgB;EAChB,MAAMH,QAAQP,kBAAkBM,KAAAA;EAGhC,MAAMM,aAAad,YAAYa,EAAAA,IAAOV,oBAAoBK,KAAAA,KAAUK,KAAMA;EAE1E,OAAO,KAAKR,QAAQO,OAAOE,YAAYL,KAAAA;CAC3C;CAEA,MACMM,SACF,OACkC;EAClC,MAAMN,QAAQP,kBAAkBM,KAAAA;EAKhC,MAAMQ,SAAS,MAAM,KAAKX,QAAQY,WAAWR,OAAO;GAChDS,OAAOnB,gBAAgBS,KAAAA;GACvBW,kBAAkBhB,oBAAoBK,KAAAA;EAC1C,CAAA;EAEAA,MAAMY,SAASC,SAAS;EACxB,OAAOL;CACX;CAEA,MACMM,KACF,IACA,OACgB;EAChB,MAAMb,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAMM,aAAad,YAAYa,EAAAA,IAAOV,oBAAoBK,KAAAA,KAAUK,KAAMA;EAC1E,MAAMU,SAAS,MAAM,KAAKlB,QAAQmB,OAAOV,YAAYL,KAAAA;EAErDD,MAAMY,SAASC,SAAS;EACxB,OAAOE;CACX;AACJ;;WA5DetB,uBAAAA,CAAAA;;;;;;;eAgBIA,uBAAAA,CAAAA;;;;;;;;cAaDA,uBAAAA,CAAAA;;;;;;;kBAkBIA,uBAAAA,CAAAA;;;;;;;;;cAvDR,aAAa,2BAAA,CAAA"}

package/dist/adapters/http/controllers/entities/trust-anchor/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map