@authup/server-core 1.0.0-beta.52 → 1.0.0-beta.54

package/dist/adapters/http/controllers/entities/key/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","KeyController","service","ctx","getMany","event","actor","data","meta","realmId","getOne","id","add","entity","create","response","status","edit","update","drop","query","force","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/key/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n    EntityCollectionResponse,\n    KeyCreatePayload,\n    KeyUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { Key } from '@authup/core-kit';\nimport type { IKeyService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    applyRouteRealmIDToBody,\n    buildActorContext,\n    getRequestRealmID,\n} from '../../../request/index.ts';\n\nexport type KeyControllerContext = {\n    service: IKeyService,\n};\n\n@DTags('key')\n@DController(['/keys', '/realms/:realmId/keys'])\nexport class KeyController {\n    protected service: IKeyService;\n\n    constructor(ctx: KeyControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IAppEvent,\n    ): Promise<EntityCollectionResponse<Key>> {\n        const actor = buildActorContext(event);\n\n        const { data, meta } = await this.service.getMany(useRequestQuery(event), actor, { realmId: getRequestRealmID(event) });\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<Key> {\n        const actor = buildActorContext(event);\n\n        return this.service.getOne(id, actor, getRequestRealmID(event));\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: KeyCreatePayload,\n        @DContext() event: IAppEvent,\n    ): Promise<Key> {\n        applyRouteRealmIDToBody(event, data);\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: KeyUpdatePayload,\n        @DContext() event: IAppEvent,\n    ): Promise<Key> {\n        const actor = buildActorContext(event);\n\n        return this.service.update(id, data, actor, getRequestRealmID(event));\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<Key> {\n        const actor = buildActorContext(event);\n\n        const query = useRequestQuery(event);\n        const force = query.force === 'true' || query.force === '1';\n\n        const entity = await this.service.delete(id, actor, { force });\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAaa,gBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA2B;EACnC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OACsC;EACtC,MAAME,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAM,EAAEE,MAAMC,SAAS,MAAM,KAAKN,QAAQE,QAAQR,gBAAgBS,KAAAA,GAAQC,OAAO,EAAEG,SAAST,kBAAkBK,KAAAA,EAAO,CAAA;EAErH,OAAO;GACHE;GACAC;EACJ;CACJ;CAEA,MACME,OACF,IACA,OACY;EACZ,MAAMJ,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,QAAQQ,OAAOC,IAAIL,OAAON,kBAAkBK,KAAAA,CAAAA;CAC5D;CAEA,MACMO,IACF,MACA,OACY;EACZd,wBAAwBO,OAAOE,IAAAA;EAC/B,MAAMD,QAAQP,kBAAkBM,KAAAA;EAChC,MAAMQ,SAAS,MAAM,KAAKX,QAAQY,OAAOP,MAAMD,KAAAA;EAE/CD,MAAMU,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,KACF,IACA,MACA,OACY;EACZ,MAAMX,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,QAAQgB,OAAOP,IAAIJ,MAAMD,OAAON,kBAAkBK,KAAAA,CAAAA;CAClE;CAEA,MACMc,KACF,IACA,OACY;EACZ,MAAMb,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAMe,QAAQxB,gBAAgBS,KAAAA;EAC9B,MAAMgB,QAAQD,MAAMC,UAAU,UAAUD,MAAMC,UAAU;EAExD,MAAMR,SAAS,MAAM,KAAKX,QAAQoB,OAAOX,IAAIL,OAAO,EAAEe,MAAM,CAAA;EAE5DhB,MAAMU,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;WAjEehB,uBAAAA,CAAAA;;;;;;;eAcIA,uBAAAA,CAAAA;;;;;;;;YAUHA,uBAAAA,CAAAA;;;;;;;;gBAcIA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAWEA,uBAAAA,CAAAA;;;;;;;;;cAzDR,SAAS,uBAAA,CAAA"}

package/dist/adapters/http/controllers/entities/policy/utils/validation.d.ts

@@ -1,7 +1,7 @@
 import { Container } from 'validup';
 import type { PolicyEntity } from '../../../../../database/domains/index.ts';
 export declare class PolicyValidator extends Container<PolicyEntity & {
-    parent_id?: string | null;
+    parentId?: string | null;
 }> {
     protected initialize(): void;
 }

package/dist/adapters/http/controllers/entities/policy/utils/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/validation.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAI7E,qBAAa,eAAgB,SAAQ,SAAS,CAAC,YAAY,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;IACxF,SAAS,CAAC,UAAU;CAsFvB"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/validation.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAI7E,qBAAa,eAAgB,SAAQ,SAAS,CAAC,YAAY,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;IACvF,SAAS,CAAC,UAAU;CAsFvB"}

package/dist/adapters/http/controllers/entities/policy/utils/validation.mjs

@@ -6,10 +6,10 @@ import "../../../../request/index.mjs";
 import { PolicyAttributesValidator } from "./attributes-validator.mjs";
 import { isPolicyNameValid } from "@authup/core-kit";
 import { BuiltInPolicyType } from "@authup/access";
+import { isObject } from "smob";
 import { Container } from "validup";
 import { createValidator } from "@validup/zod";
 import { z } from "zod";
-import { isObject } from "smob";
 //#region src/adapters/http/controllers/entities/policy/utils/validation.ts
 var PolicyValidator = class extends Container {
 	initialize() {
@@ -30,11 +30,11 @@ var PolicyValidator = class extends Container {
 			group: RequestHandlerOperation.UPDATE,
 			optional: true
 		}, nameValidator);
-		this.mount("display_name", { optional: true }, createValidator(z.string().min(3).max(256).nullable()));
+		this.mount("displayName", { optional: true }, createValidator(z.string().min(3).max(256).nullable()));
 		this.mount("invert", { optional: true }, createValidator(z.boolean()));
 		this.mount("type", { group: RequestHandlerOperation.CREATE }, createValidator(z.string().min(3).max(128)));
-		this.mount("parent_id", { optional: true }, createValidator(z.uuid().nullable()));
-		this.mount("realm_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid().nullable()));
+		this.mount("parentId", { optional: true }, createValidator(z.uuid().nullable()));
+		this.mount("realmId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid().nullable()));
 		this.mount({ optional: true }, new PolicyAttributesValidator({}));
 		this.mount("children", { optional: true }, async (ctx) => {
 			if (!Array.isArray(ctx.value)) return;

package/dist/adapters/http/controllers/entities/policy/utils/validation.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validation.mjs","names":["BuiltInPolicyType","isPolicyNameValid","isObject","Container","createValidator","z","RequestHandlerOperation","PolicyAttributesValidator","PolicyValidator","initialize","nameValidator","string","trim","toLowerCase","min","max","check","ctx","value","throwOnFailure","e","issues","push","input","code","message","Error","mount","group","CREATE","UPDATE","optional","nullable","boolean","uuid","Array","isArray","undefined","data","type","COMPOSITE","promises","map","child","run","flat","path","Promise","all"],"sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/validation.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType } from '@authup/access';\nimport { isPolicyNameValid } from '@authup/core-kit';\nimport { isObject } from 'smob';\nimport type { ValidatorContext } from 'validup';\nimport { Container } from 'validup';\nimport { createValidator } from '@validup/zod';\nimport { z } from 'zod';\nimport type { PolicyEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\nimport { PolicyAttributesValidator } from './attributes-validator.ts';\n\nexport class PolicyValidator extends Container<PolicyEntity & { parent_id?: string | null }> {\n    protected initialize() {\n        super.initialize();\n\n        const nameValidator = createValidator(\n            z.string()\n                .trim()\n                .toLowerCase()\n                .min(3)\n                .max(128)\n                .check((ctx) => {\n                    try {\n                        isPolicyNameValid(ctx.value, { throwOnFailure: true });\n                    } catch (e) {\n                        ctx.issues.push({\n                            input: ctx.value,\n                            code: 'custom',\n                            message: e instanceof Error ? e.message : 'The policy name is not valid.',\n                        });\n                    }\n                }),\n        );\n\n        this.mount('name', { group: RequestHandlerOperation.CREATE }, nameValidator);\n        this.mount('name', {\n            group: RequestHandlerOperation.UPDATE,\n            optional: true,\n        }, nameValidator);\n\n        this.mount(\n            'display_name',\n            { optional: true },\n            createValidator(z.string().min(3).max(256).nullable()),\n        );\n\n        this.mount(\n            'invert',\n            { optional: true },\n            createValidator(z.boolean()),\n        );\n\n        this.mount(\n            'type',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.string().min(3).max(128)),\n        );\n\n        this.mount(\n            'parent_id',\n            { optional: true },\n            createValidator(z.uuid().nullable()),\n        );\n\n        this.mount(\n            'realm_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.uuid().nullable()),\n        );\n\n        this.mount({ optional: true }, new PolicyAttributesValidator({}));\n\n        this.mount(\n            'children',\n            { optional: true },\n            async (ctx: ValidatorContext) => {\n                if (!Array.isArray(ctx.value)) {\n                    // todo: throw error\n                    return undefined;\n                }\n\n                if (\n                    isObject(ctx.data) &&\n                    ctx.data.type !== BuiltInPolicyType.COMPOSITE\n                ) {\n                    return undefined;\n                }\n\n                const promises = ctx.value.map((child) => this.run(child, {\n                    group: ctx.group,\n                    flat: false,\n                    path: ctx.path,\n                }));\n\n                return Promise.all(promises);\n            },\n        );\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAkBA,IAAaQ,kBAAb,cAAqCL,UAAAA;CACvBM,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,gBAAgBN,gBAClBC,EAAEM,OAAM,CAAA,CACHC,KAAI,CAAA,CACJC,YAAW,CAAA,CACXC,IAAI,CAAA,CAAA,CACJC,IAAI,GAAA,CAAA,CACJC,OAAOC,QAAAA;GACJ,IAAI;IACAhB,kBAAkBgB,IAAIC,OAAO,EAAEC,gBAAgB,KAAK,CAAA;GACxD,SAASC,GAAG;IACRH,IAAII,OAAOC,KAAK;KACZC,OAAON,IAAIC;KACXM,MAAM;KACNC,SAASL,aAAaM,QAAQN,EAAEK,UAAU;IAC9C,CAAA;GACJ;EACJ,CAAA,CAAA;EAGR,KAAKE,MAAM,QAAQ,EAAEC,OAAOtB,wBAAwBuB,OAAO,GAAGnB,aAAAA;EAC9D,KAAKiB,MAAM,QAAQ;GACfC,OAAOtB,wBAAwBwB;GAC/BC,UAAU;EACd,GAAGrB,aAAAA;EAEH,KAAKiB,MACD,gBACA,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAEM,OAAM,CAAA,CAAGG,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKiB,SAAQ,CAAA,CAAA;EAGvD,KAAKL,MACD,UACA,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAE4B,QAAO,CAAA,CAAA;EAG7B,KAAKN,MACD,QACA,EAAEC,OAAOtB,wBAAwBuB,OAAO,GACxCzB,gBAAgBC,EAAEM,OAAM,CAAA,CAAGG,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKY,MACD,aACA,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAE6B,KAAI,CAAA,CAAGF,SAAQ,CAAA,CAAA;EAGrC,KAAKL,MACD,YACA,EAAEC,OAAOtB,wBAAwBuB,OAAO,GACxCzB,gBAAgBC,EAAE6B,KAAI,CAAA,CAAGF,SAAQ,CAAA,CAAA;EAGrC,KAAKL,MAAM,EAAEI,UAAU,KAAK,GAAG,IAAIxB,0BAA0B,CAAC,CAAA,CAAA;EAE9D,KAAKoB,MACD,YACA,EAAEI,UAAU,KAAK,GACjB,OAAOd,QAAAA;GACH,IAAI,CAACkB,MAAMC,QAAQnB,IAAIC,KAAK,GAExB;GAGJ,IACIhB,SAASe,IAAIqB,IAAI,KACjBrB,IAAIqB,KAAKC,SAASvC,kBAAkBwC,WAEpC;GAGJ,MAAMC,WAAWxB,IAAIC,MAAMwB,KAAKC,UAAU,KAAKC,IAAID,OAAO;IACtDf,OAAOX,IAAIW;IACXiB,MAAM;IACNC,MAAM7B,IAAI6B;GACd,CAAA,CAAA;GAEA,OAAOC,QAAQC,IAAIP,QAAAA;EACvB,CAAA;CAER;AACJ"}
+{"version":3,"file":"validation.mjs","names":["BuiltInPolicyType","isPolicyNameValid","isObject","Container","createValidator","z","RequestHandlerOperation","PolicyAttributesValidator","PolicyValidator","initialize","nameValidator","string","trim","toLowerCase","min","max","check","ctx","value","throwOnFailure","e","issues","push","input","code","message","Error","mount","group","CREATE","UPDATE","optional","nullable","boolean","uuid","Array","isArray","undefined","data","type","COMPOSITE","promises","map","child","run","flat","path","Promise","all"],"sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/validation.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType } from '@authup/access';\nimport { isPolicyNameValid } from '@authup/core-kit';\nimport { isObject } from 'smob';\nimport type { ValidatorContext } from 'validup';\nimport { Container } from 'validup';\nimport { createValidator } from '@validup/zod';\nimport { z } from 'zod';\nimport type { PolicyEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\nimport { PolicyAttributesValidator } from './attributes-validator.ts';\n\nexport class PolicyValidator extends Container<PolicyEntity & { parentId?: string | null }> {\n    protected initialize() {\n        super.initialize();\n\n        const nameValidator = createValidator(\n            z.string()\n                .trim()\n                .toLowerCase()\n                .min(3)\n                .max(128)\n                .check((ctx) => {\n                    try {\n                        isPolicyNameValid(ctx.value, { throwOnFailure: true });\n                    } catch (e) {\n                        ctx.issues.push({\n                            input: ctx.value,\n                            code: 'custom',\n                            message: e instanceof Error ? e.message : 'The policy name is not valid.',\n                        });\n                    }\n                }),\n        );\n\n        this.mount('name', { group: RequestHandlerOperation.CREATE }, nameValidator);\n        this.mount('name', {\n            group: RequestHandlerOperation.UPDATE,\n            optional: true,\n        }, nameValidator);\n\n        this.mount(\n            'displayName',\n            { optional: true },\n            createValidator(z.string().min(3).max(256).nullable()),\n        );\n\n        this.mount(\n            'invert',\n            { optional: true },\n            createValidator(z.boolean()),\n        );\n\n        this.mount(\n            'type',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.string().min(3).max(128)),\n        );\n\n        this.mount(\n            'parentId',\n            { optional: true },\n            createValidator(z.uuid().nullable()),\n        );\n\n        this.mount(\n            'realmId',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.uuid().nullable()),\n        );\n\n        this.mount({ optional: true }, new PolicyAttributesValidator({}));\n\n        this.mount(\n            'children',\n            { optional: true },\n            async (ctx: ValidatorContext) => {\n                if (!Array.isArray(ctx.value)) {\n                    // todo: throw error\n                    return undefined;\n                }\n\n                if (\n                    isObject(ctx.data) &&\n                    ctx.data.type !== BuiltInPolicyType.COMPOSITE\n                ) {\n                    return undefined;\n                }\n\n                const promises = ctx.value.map((child) => this.run(child, {\n                    group: ctx.group,\n                    flat: false,\n                    path: ctx.path,\n                }));\n\n                return Promise.all(promises);\n            },\n        );\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAkBA,IAAaQ,kBAAb,cAAqCL,UAAAA;CACvBM,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,gBAAgBN,gBAClBC,EAAEM,OAAM,CAAA,CACHC,KAAI,CAAA,CACJC,YAAW,CAAA,CACXC,IAAI,CAAA,CAAA,CACJC,IAAI,GAAA,CAAA,CACJC,OAAOC,QAAAA;GACJ,IAAI;IACAhB,kBAAkBgB,IAAIC,OAAO,EAAEC,gBAAgB,KAAK,CAAA;GACxD,SAASC,GAAG;IACRH,IAAII,OAAOC,KAAK;KACZC,OAAON,IAAIC;KACXM,MAAM;KACNC,SAASL,aAAaM,QAAQN,EAAEK,UAAU;IAC9C,CAAA;GACJ;EACJ,CAAA,CAAA;EAGR,KAAKE,MAAM,QAAQ,EAAEC,OAAOtB,wBAAwBuB,OAAO,GAAGnB,aAAAA;EAC9D,KAAKiB,MAAM,QAAQ;GACfC,OAAOtB,wBAAwBwB;GAC/BC,UAAU;EACd,GAAGrB,aAAAA;EAEH,KAAKiB,MACD,eACA,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAEM,OAAM,CAAA,CAAGG,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKiB,SAAQ,CAAA,CAAA;EAGvD,KAAKL,MACD,UACA,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAE4B,QAAO,CAAA,CAAA;EAG7B,KAAKN,MACD,QACA,EAAEC,OAAOtB,wBAAwBuB,OAAO,GACxCzB,gBAAgBC,EAAEM,OAAM,CAAA,CAAGG,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKY,MACD,YACA,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAE6B,KAAI,CAAA,CAAGF,SAAQ,CAAA,CAAA;EAGrC,KAAKL,MACD,WACA,EAAEC,OAAOtB,wBAAwBuB,OAAO,GACxCzB,gBAAgBC,EAAE6B,KAAI,CAAA,CAAGF,SAAQ,CAAA,CAAA;EAGrC,KAAKL,MAAM,EAAEI,UAAU,KAAK,GAAG,IAAIxB,0BAA0B,CAAC,CAAA,CAAA;EAE9D,KAAKoB,MACD,YACA,EAAEI,UAAU,KAAK,GACjB,OAAOd,QAAAA;GACH,IAAI,CAACkB,MAAMC,QAAQnB,IAAIC,KAAK,GAExB;GAGJ,IACIhB,SAASe,IAAIqB,IAAI,KACjBrB,IAAIqB,KAAKC,SAASvC,kBAAkBwC,WAEpC;GAGJ,MAAMC,WAAWxB,IAAIC,MAAMwB,KAAKC,UAAU,KAAKC,IAAID,OAAO;IACtDf,OAAOX,IAAIW;IACXiB,MAAM;IACNC,MAAM7B,IAAI6B;GACd,CAAA,CAAA;GAEA,OAAOC,QAAQC,IAAIP,QAAAA;EACvB,CAAA;CAER;AACJ"}

package/dist/adapters/http/controllers/entities/realm/module.d.ts

@@ -7,6 +7,8 @@ import type { IRealmService } from '../../../../../core/index.ts';
 import type { KeyEntity } from '../../../../database/domains/index.ts';
 export type RealmControllerOptions = {
     baseURL: string;
+    mtlsBaseURL?: string | null;
+    clientCertificatesEnabled?: boolean;
 };
 export type RealmControllerContext = {
     options: RealmControllerOptions;

package/dist/adapters/http/controllers/entities/realm/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/realm/module.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAE9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EACR,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAMvE,MAAM,MAAM,sBAAsB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACjC,OAAO,EAAE,sBAAsB,CAAC;IAChC,OAAO,EAAE,aAAa,CAAC;IACvB,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;CACxC,CAAC;AAEF,qBAEa,eAAe;IACxB,SAAS,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAE1C,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;IAEjC,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBAEnC,GAAG,EAAE,sBAAsB;IAOjC,OAAO,CACG,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAarC,GAAG,CACI,IAAI,EAAE,kBAAkB,EACrB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAUZ,GAAG,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAK5C,sBAAsB,CACX,EAAE,EAAE,MAAM,GACxB,OAAO,CAAC,sBAAsB,CAAC;IA+D5B,QAAQ,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAMxE,OAAO,CACI,EAAE,EAAE,MAAM,EACP,KAAK,EAAE,MAAM,GAC9B,OAAO,CAAC,gBAAgB,CAAC;IAMtB,IAAI,CACO,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,kBAAkB,EACrB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAcZ,GAAG,CACQ,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,EACnB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAgBZ,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;CAQrB"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/realm/module.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAE9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EACR,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAMvE,MAAM,MAAM,sBAAsB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACjC,OAAO,EAAE,sBAAsB,CAAC;IAChC,OAAO,EAAE,aAAa,CAAC;IACvB,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;CACxC,CAAC;AAEF,qBAEa,eAAe;IACxB,SAAS,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAE1C,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;IAEjC,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBAEnC,GAAG,EAAE,sBAAsB;IAOjC,OAAO,CACG,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAarC,GAAG,CACI,IAAI,EAAE,kBAAkB,EACrB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAUZ,GAAG,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAK5C,sBAAsB,CACX,EAAE,EAAE,MAAM,GACxB,OAAO,CAAC,sBAAsB,CAAC;IA0F5B,QAAQ,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAMxE,OAAO,CACI,EAAE,EAAE,MAAM,EACP,KAAK,EAAE,MAAM,GAC9B,OAAO,CAAC,gBAAgB,CAAC;IAMtB,IAAI,CACO,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,kBAAkB,EACrB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAcZ,GAAG,CACQ,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,EACnB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAgBZ,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;CAQrB"}

package/dist/adapters/http/controllers/entities/realm/module.mjs

@@ -9,7 +9,7 @@ import "../../../../../utils/index.mjs";
 import "../../../middleware/index.mjs";
 import { getJwkRouteHandler, getJwksRouteHandler } from "../../workflows/jwks/handlers/read.mjs";
 import "../../workflows/index.mjs";
-import { OAuth2AuthorizationPrompt, OAuth2AuthorizationResponseType } from "@authup/specs";
+import { OAuth2AuthenticationContextClass, OAuth2AuthorizationPrompt, OAuth2AuthorizationResponseType } from "@authup/specs";
 import { useRequestQuery } from "@routup/basic/query";
 import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/realm/module.ts
@@ -55,6 +55,7 @@ var RealmController = class {
 	async getOpenIdConfiguration(id) {
 		const entity = await this.service.getOne(id);
 		const { baseURL } = this.options;
+		const { mtlsBaseURL, clientCertificatesEnabled = false } = this.options;
 		return {
 			issuer: resolveURL(baseURL, `realms/${entity.name}`).replace(/\/+$/, ""),
 			authorization_endpoint: resolveURL(baseURL, "authorize"),
@@ -67,6 +68,7 @@ var RealmController = class {
 				OAuth2AuthorizationPrompt.CONSENT,
 				OAuth2AuthorizationPrompt.SELECT_ACCOUNT
 			],
+			acr_values_supported: [OAuth2AuthenticationContextClass.PASSWORD, OAuth2AuthenticationContextClass.MFA],
 			subject_types_supported: ["public"],
 			id_token_signing_alg_values_supported: [
 				"HS256",
@@ -78,6 +80,19 @@ var RealmController = class {
 				"none"
 			],
 			token_endpoint: resolveURL(baseURL, "token"),
+			token_endpoint_auth_methods_supported: [
+				"none",
+				"client_secret_basic",
+				"client_secret_post",
+				...clientCertificatesEnabled ? ["tls_client_auth"] : []
+			],
+			...clientCertificatesEnabled ? { tls_client_certificate_bound_access_tokens: true } : {},
+			...mtlsBaseURL ? { mtls_endpoint_aliases: {
+				token_endpoint: resolveURL(mtlsBaseURL, "token"),
+				introspection_endpoint: resolveURL(mtlsBaseURL, "token/introspect"),
+				revocation_endpoint: resolveURL(mtlsBaseURL, "token/revoke"),
+				userinfo_endpoint: resolveURL(mtlsBaseURL, "users/@me")
+			} } : {},
 			introspection_endpoint: resolveURL(baseURL, "token/introspect"),
 			revocation_endpoint: resolveURL(baseURL, "token/revoke"),
 			service_documentation: "https://authup.org/",

package/dist/adapters/http/controllers/entities/realm/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","OAuth2AuthorizationPrompt","OAuth2AuthorizationResponseType","useRequestQuery","getJwkRouteHandler","getJwksRouteHandler","ForceLoggedInMiddleware","buildActorContext","resolveURL","RealmController","options","service","keyRepository","ctx","getMany","event","data","meta","add","actor","entity","create","response","status","get","id","getOne","getOpenIdConfiguration","baseURL","issuer","name","replace","authorization_endpoint","end_session_endpoint","jwks_uri","response_types_supported","CODE","prompt_values_supported","NONE","LOGIN","CONSENT","SELECT_ACCOUNT","subject_types_supported","id_token_signing_alg_values_supported","token_endpoint","introspection_endpoint","revocation_endpoint","service_documentation","userinfo_endpoint","getCerts","getCert","keyId","edit","update","put","created","save","undefined","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/realm/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DPut,\n    DTags,\n} from '@routup/decorators';\nimport type { OAuth2JsonWebKey, OpenIDProviderMetadata } from '@authup/specs';\nimport { OAuth2AuthorizationPrompt, OAuth2AuthorizationResponseType } from '@authup/specs';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { Repository } from 'typeorm';\nimport type {\n    EntityCollectionResponse,\n    RealmCreatePayload,\n    RealmSavePayload,\n    RealmUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { Realm } from '@authup/core-kit';\nimport type { IRealmService } from '../../../../../core/index.ts';\nimport type { KeyEntity } from '../../../../database/domains/index.ts';\nimport { getJwkRouteHandler, getJwksRouteHandler } from '../../workflows/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext } from '../../../request/index.ts';\nimport { resolveURL } from '../../../../../utils/index.ts';\n\nexport type RealmControllerOptions = {\n    baseURL: string\n};\n\nexport type RealmControllerContext = {\n    options: RealmControllerOptions,\n    service: IRealmService,\n    keyRepository: Repository<KeyEntity>,\n};\n\n@DTags('realm')\n@DController('/realms')\nexport class RealmController {\n    protected options: RealmControllerOptions;\n\n    protected service: IRealmService;\n\n    protected keyRepository: Repository<KeyEntity>;\n\n    constructor(ctx: RealmControllerContext) {\n        this.options = ctx.options;\n        this.service = ctx.service;\n        this.keyRepository = ctx.keyRepository;\n    }\n\n    @DGet('', [])\n    async getMany(\n        @DContext() event: IAppEvent,\n    ): Promise<EntityCollectionResponse<Realm>> {\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event));\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: RealmCreatePayload,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DGet('/:id', [])\n    async get(@DPath('id') id: string): Promise<Realm> {\n        return this.service.getOne(id);\n    }\n\n    @DGet('/:id/.well-known/openid-configuration', [])\n    async getOpenIdConfiguration(\n        @DPath('id') id: string,\n    ): Promise<OpenIDProviderMetadata> {\n        const entity = await this.service.getOne(id);\n\n        const { baseURL } = this.options;\n\n        return {\n            issuer: resolveURL(baseURL, `realms/${entity.name}`).replace(/\\/+$/, ''),\n\n            authorization_endpoint: resolveURL(baseURL, 'authorize'),\n\n            end_session_endpoint: resolveURL(baseURL, 'logout'),\n\n            jwks_uri: resolveURL(baseURL, `realms/${entity.name}/jwks`),\n\n            // OAuth 2.1 posture: the authorization endpoint issues codes\n            // only — implicit/hybrid response types were dropped (plan 042).\n            response_types_supported: [\n                OAuth2AuthorizationResponseType.CODE,\n            ],\n\n            // `none` (silent authentication) is handled by the hosted SSR\n            // authorize page (the kit `Authorize.vue`): it either completes a\n            // built_in client's auto-consent silently or redirects the OIDC\n            // error (login_required / consent_required / interaction_required)\n            // to a verified redirect_uri — zero UI. The server GET cannot do\n            // this server-side (auth is header-only; a top-level navigation\n            // carries no bearer), so the SSR page owns it (plan 042 item 10).\n            prompt_values_supported: [\n                OAuth2AuthorizationPrompt.NONE,\n                OAuth2AuthorizationPrompt.LOGIN,\n                OAuth2AuthorizationPrompt.CONSENT,\n                OAuth2AuthorizationPrompt.SELECT_ACCOUNT,\n            ],\n\n            subject_types_supported: [\n                'public',\n            ],\n\n            id_token_signing_alg_values_supported: [\n                'HS256',\n                'HS384',\n                'HS512',\n                'RS256',\n                'RS384',\n                'RS512',\n                'none',\n            ],\n\n            token_endpoint: resolveURL(baseURL, 'token'),\n\n            introspection_endpoint: resolveURL(baseURL, 'token/introspect'),\n\n            revocation_endpoint: resolveURL(baseURL, 'token/revoke'),\n\n            // -----------------------------------------------------------\n\n            service_documentation: 'https://authup.org/',\n\n            userinfo_endpoint: resolveURL(baseURL, 'users/@me'),\n        };\n    }\n\n    @DGet('/:id/jwks', [])\n    async getCerts(@DPath('id') id: string): Promise<{ keys: OAuth2JsonWebKey[] }> {\n        const entity = await this.service.getOne(id);\n        return getJwksRouteHandler(this.keyRepository, entity.id);\n    }\n\n    @DGet('/:id/jwks/:keyId', [])\n    async getCert(\n        @DPath('id') id: string,\n        @DPath('keyId') keyId: string,\n    ): Promise<OAuth2JsonWebKey> {\n        const entity = await this.service.getOne(id);\n        return getJwkRouteHandler(this.keyRepository, keyId, entity.id);\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: RealmUpdatePayload,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.update(\n            id,\n            data,\n            actor,\n        );\n\n        event.response.status = 202;\n\n        return entity;\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async put(\n        @DPath('id') id: string,\n        @DBody() data: RealmSavePayload,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const {\n            entity,\n            created,\n        } = await this.service.save(\n            id || undefined,\n            data,\n            actor,\n        );\n\n        event.response.status = created ? 201 : 202;\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,IAAaiB,kBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEV,YAAYC,KAA6B;EACrC,KAAKH,UAAUG,IAAIH;EACnB,KAAKC,UAAUE,IAAIF;EACnB,KAAKC,gBAAgBC,IAAID;CAC7B;CAEA,MACME,QACF,OACwC;EACxC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQG,QAAQX,gBAAgBY,KAAAA,CAAAA;EAE/C,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACe;EACf,MAAMC,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQU,OAAOL,MAAMG,KAAAA;EAE/CJ,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,IAAI,IAAyC;EAC/C,OAAO,KAAKb,QAAQe,OAAOD,EAAAA;CAC/B;CAEA,MACME,uBACF,IAC+B;EAC/B,MAAMP,SAAS,MAAM,KAAKT,QAAQe,OAAOD,EAAAA;EAEzC,MAAM,EAAEG,YAAY,KAAKlB;EAEzB,OAAO;GACHmB,QAAQrB,WAAWoB,SAAS,UAAUR,OAAOU,MAAM,CAAA,CAAEC,QAAQ,QAAQ,EAAA;GAErEC,wBAAwBxB,WAAWoB,SAAS,WAAA;GAE5CK,sBAAsBzB,WAAWoB,SAAS,QAAA;GAE1CM,UAAU1B,WAAWoB,SAAS,UAAUR,OAAOU,KAAK,MAAM;GAI1DK,0BAA0B,CACtBjC,gCAAgCkC,IAAAA;GAUpCC,yBAAyB;IACrBpC,0BAA0BqC;IAC1BrC,0BAA0BsC;IAC1BtC,0BAA0BuC;IAC1BvC,0BAA0BwC;;GAG9BC,yBAAyB,CACrB,QAAA;GAGJC,uCAAuC;IACnC;IACA;IACA;IACA;IACA;IACA;IACA;;GAGJC,gBAAgBpC,WAAWoB,SAAS,OAAA;GAEpCiB,wBAAwBrC,WAAWoB,SAAS,kBAAA;GAE5CkB,qBAAqBtC,WAAWoB,SAAS,cAAA;GAIzCmB,uBAAuB;GAEvBC,mBAAmBxC,WAAWoB,SAAS,WAAA;EAC3C;CACJ;CAEA,MACMqB,SAAS,IAAgE;EAC3E,MAAM7B,SAAS,MAAM,KAAKT,QAAQe,OAAOD,EAAAA;EACzC,OAAOpB,oBAAoB,KAAKO,eAAeQ,OAAOK,EAAE;CAC5D;CAEA,MACMyB,QACF,IACA,OACyB;EACzB,MAAM9B,SAAS,MAAM,KAAKT,QAAQe,OAAOD,EAAAA;EACzC,OAAOrB,mBAAmB,KAAKQ,eAAeuC,OAAO/B,OAAOK,EAAE;CAClE;CAEA,MACM2B,KACF,IACA,MACA,OACe;EACf,MAAMjC,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQ0C,OAC9B5B,IACAT,MACAG,KAAAA;EAGJJ,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMkC,IACF,IACA,MACA,OACe;EACf,MAAMnC,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAM,EACFK,QACAmC,YACA,MAAM,KAAK5C,QAAQ6C,KACnB/B,MAAMgC,KAAAA,GACNzC,MACAG,KAAAA;EAGJJ,MAAMO,SAASC,SAASgC,UAAU,MAAM;EACxC,OAAOnC;CACX;CAEA,MACMsC,KACF,IACA,OACe;EACf,MAAMvC,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQgD,OAAOlC,IAAIN,KAAAA;EAE7CJ,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;;;;;;;;YApJgBd,uBAAAA,CAAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAkGIA,uBAAAA,CAAAA;;;;;;;;;;;;;eAkBDA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAoBGA,uBAAAA,CAAAA"}
+{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","OAuth2AuthenticationContextClass","OAuth2AuthorizationPrompt","OAuth2AuthorizationResponseType","useRequestQuery","getJwkRouteHandler","getJwksRouteHandler","ForceLoggedInMiddleware","buildActorContext","resolveURL","RealmController","options","service","keyRepository","ctx","getMany","event","data","meta","add","actor","entity","create","response","status","get","id","getOne","getOpenIdConfiguration","baseURL","mtlsBaseURL","clientCertificatesEnabled","issuer","name","replace","authorization_endpoint","end_session_endpoint","jwks_uri","response_types_supported","CODE","prompt_values_supported","NONE","LOGIN","CONSENT","SELECT_ACCOUNT","acr_values_supported","PASSWORD","MFA","subject_types_supported","id_token_signing_alg_values_supported","token_endpoint","token_endpoint_auth_methods_supported","tls_client_certificate_bound_access_tokens","mtls_endpoint_aliases","introspection_endpoint","revocation_endpoint","userinfo_endpoint","service_documentation","getCerts","getCert","keyId","edit","update","put","created","save","undefined","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/realm/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DPut,\n    DTags,\n} from '@routup/decorators';\nimport type { OAuth2JsonWebKey, OpenIDProviderMetadata } from '@authup/specs';\nimport { OAuth2AuthenticationContextClass, OAuth2AuthorizationPrompt, OAuth2AuthorizationResponseType } from '@authup/specs';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { Repository } from 'typeorm';\nimport type {\n    EntityCollectionResponse,\n    RealmCreatePayload,\n    RealmSavePayload,\n    RealmUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { Realm } from '@authup/core-kit';\nimport type { IRealmService } from '../../../../../core/index.ts';\nimport type { KeyEntity } from '../../../../database/domains/index.ts';\nimport { getJwkRouteHandler, getJwksRouteHandler } from '../../workflows/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext } from '../../../request/index.ts';\nimport { resolveURL } from '../../../../../utils/index.ts';\n\nexport type RealmControllerOptions = {\n    baseURL: string,\n    mtlsBaseURL?: string | null,\n    clientCertificatesEnabled?: boolean,\n};\n\nexport type RealmControllerContext = {\n    options: RealmControllerOptions,\n    service: IRealmService,\n    keyRepository: Repository<KeyEntity>,\n};\n\n@DTags('realm')\n@DController('/realms')\nexport class RealmController {\n    protected options: RealmControllerOptions;\n\n    protected service: IRealmService;\n\n    protected keyRepository: Repository<KeyEntity>;\n\n    constructor(ctx: RealmControllerContext) {\n        this.options = ctx.options;\n        this.service = ctx.service;\n        this.keyRepository = ctx.keyRepository;\n    }\n\n    @DGet('', [])\n    async getMany(\n        @DContext() event: IAppEvent,\n    ): Promise<EntityCollectionResponse<Realm>> {\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event));\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: RealmCreatePayload,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DGet('/:id', [])\n    async get(@DPath('id') id: string): Promise<Realm> {\n        return this.service.getOne(id);\n    }\n\n    @DGet('/:id/.well-known/openid-configuration', [])\n    async getOpenIdConfiguration(\n        @DPath('id') id: string,\n    ): Promise<OpenIDProviderMetadata> {\n        const entity = await this.service.getOne(id);\n\n        const { baseURL } = this.options;\n        const { mtlsBaseURL, clientCertificatesEnabled = false } = this.options;\n\n        return {\n            issuer: resolveURL(baseURL, `realms/${entity.name}`).replace(/\\/+$/, ''),\n\n            authorization_endpoint: resolveURL(baseURL, 'authorize'),\n\n            end_session_endpoint: resolveURL(baseURL, 'logout'),\n\n            jwks_uri: resolveURL(baseURL, `realms/${entity.name}/jwks`),\n\n            // OAuth 2.1 posture: the authorization endpoint issues codes\n            // only — implicit/hybrid response types were dropped (plan 042).\n            response_types_supported: [\n                OAuth2AuthorizationResponseType.CODE,\n            ],\n\n            // `none` (silent authentication) is handled by the hosted SSR\n            // authorize page (the kit `Authorize.vue`): it either completes a\n            // built_in client's auto-consent silently or redirects the OIDC\n            // error (login_required / consent_required / interaction_required)\n            // to a verified redirect_uri — zero UI. The server GET cannot do\n            // this server-side (auth is header-only; a top-level navigation\n            // carries no bearer), so the SSR page owns it (plan 042 item 10).\n            prompt_values_supported: [\n                OAuth2AuthorizationPrompt.NONE,\n                OAuth2AuthorizationPrompt.LOGIN,\n                OAuth2AuthorizationPrompt.CONSENT,\n                OAuth2AuthorizationPrompt.SELECT_ACCOUNT,\n            ],\n\n            // two coarse levels only (urn-style — OIDC reserves the bare\n            // \"0\"); `urn:authup:mfa` in `acr_values` acts as a step-up\n            // trigger (plan 050).\n            acr_values_supported: [\n                OAuth2AuthenticationContextClass.PASSWORD,\n                OAuth2AuthenticationContextClass.MFA,\n            ],\n\n            subject_types_supported: [\n                'public',\n            ],\n\n            id_token_signing_alg_values_supported: [\n                'HS256',\n                'HS384',\n                'HS512',\n                'RS256',\n                'RS384',\n                'RS512',\n                'none',\n            ],\n\n            token_endpoint: resolveURL(baseURL, 'token'),\n\n            token_endpoint_auth_methods_supported: [\n                'none',\n                'client_secret_basic',\n                'client_secret_post',\n                ...(clientCertificatesEnabled ? ['tls_client_auth'] : []),\n            ],\n\n            ...(clientCertificatesEnabled ? { tls_client_certificate_bound_access_tokens: true } : {}),\n\n            ...(mtlsBaseURL ? {\n                mtls_endpoint_aliases: {\n                    token_endpoint: resolveURL(mtlsBaseURL, 'token'),\n                    introspection_endpoint: resolveURL(mtlsBaseURL, 'token/introspect'),\n                    revocation_endpoint: resolveURL(mtlsBaseURL, 'token/revoke'),\n                    userinfo_endpoint: resolveURL(mtlsBaseURL, 'users/@me'),\n                },\n            } : {}),\n\n            introspection_endpoint: resolveURL(baseURL, 'token/introspect'),\n\n            revocation_endpoint: resolveURL(baseURL, 'token/revoke'),\n\n            // -----------------------------------------------------------\n\n            service_documentation: 'https://authup.org/',\n\n            userinfo_endpoint: resolveURL(baseURL, 'users/@me'),\n        };\n    }\n\n    @DGet('/:id/jwks', [])\n    async getCerts(@DPath('id') id: string): Promise<{ keys: OAuth2JsonWebKey[] }> {\n        const entity = await this.service.getOne(id);\n        return getJwksRouteHandler(this.keyRepository, entity.id);\n    }\n\n    @DGet('/:id/jwks/:keyId', [])\n    async getCert(\n        @DPath('id') id: string,\n        @DPath('keyId') keyId: string,\n    ): Promise<OAuth2JsonWebKey> {\n        const entity = await this.service.getOne(id);\n        return getJwkRouteHandler(this.keyRepository, keyId, entity.id);\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: RealmUpdatePayload,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.update(\n            id,\n            data,\n            actor,\n        );\n\n        event.response.status = 202;\n\n        return entity;\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async put(\n        @DPath('id') id: string,\n        @DBody() data: RealmSavePayload,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const {\n            entity,\n            created,\n        } = await this.service.save(\n            id || undefined,\n            data,\n            actor,\n        );\n\n        event.response.status = created ? 201 : 202;\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ) : Promise<Realm> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmDA,IAAakB,kBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEV,YAAYC,KAA6B;EACrC,KAAKH,UAAUG,IAAIH;EACnB,KAAKC,UAAUE,IAAIF;EACnB,KAAKC,gBAAgBC,IAAID;CAC7B;CAEA,MACME,QACF,OACwC;EACxC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQG,QAAQX,gBAAgBY,KAAAA,CAAAA;EAE/C,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACe;EACf,MAAMC,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQU,OAAOL,MAAMG,KAAAA;EAE/CJ,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,IAAI,IAAyC;EAC/C,OAAO,KAAKb,QAAQe,OAAOD,EAAAA;CAC/B;CAEA,MACME,uBACF,IAC+B;EAC/B,MAAMP,SAAS,MAAM,KAAKT,QAAQe,OAAOD,EAAAA;EAEzC,MAAM,EAAEG,YAAY,KAAKlB;EACzB,MAAM,EAAEmB,aAAaC,4BAA4B,UAAU,KAAKpB;EAEhE,OAAO;GACHqB,QAAQvB,WAAWoB,SAAS,UAAUR,OAAOY,MAAM,CAAA,CAAEC,QAAQ,QAAQ,EAAA;GAErEC,wBAAwB1B,WAAWoB,SAAS,WAAA;GAE5CO,sBAAsB3B,WAAWoB,SAAS,QAAA;GAE1CQ,UAAU5B,WAAWoB,SAAS,UAAUR,OAAOY,KAAK,MAAM;GAI1DK,0BAA0B,CACtBnC,gCAAgCoC,IAAAA;GAUpCC,yBAAyB;IACrBtC,0BAA0BuC;IAC1BvC,0BAA0BwC;IAC1BxC,0BAA0ByC;IAC1BzC,0BAA0B0C;;GAM9BC,sBAAsB,CAClB5C,iCAAiC6C,UACjC7C,iCAAiC8C,GAAAA;GAGrCC,yBAAyB,CACrB,QAAA;GAGJC,uCAAuC;IACnC;IACA;IACA;IACA;IACA;IACA;IACA;;GAGJC,gBAAgBzC,WAAWoB,SAAS,OAAA;GAEpCsB,uCAAuC;IACnC;IACA;IACA;OACIpB,4BAA4B,CAAC,iBAAA,IAAqB,CAAA;;GAG1D,GAAIA,4BAA4B,EAAEqB,4CAA4C,KAAK,IAAI,CAAC;GAExF,GAAItB,cAAc,EACduB,uBAAuB;IACnBH,gBAAgBzC,WAAWqB,aAAa,OAAA;IACxCwB,wBAAwB7C,WAAWqB,aAAa,kBAAA;IAChDyB,qBAAqB9C,WAAWqB,aAAa,cAAA;IAC7C0B,mBAAmB/C,WAAWqB,aAAa,WAAA;GAC/C,EACJ,IAAI,CAAC;GAELwB,wBAAwB7C,WAAWoB,SAAS,kBAAA;GAE5C0B,qBAAqB9C,WAAWoB,SAAS,cAAA;GAIzC4B,uBAAuB;GAEvBD,mBAAmB/C,WAAWoB,SAAS,WAAA;EAC3C;CACJ;CAEA,MACM6B,SAAS,IAAgE;EAC3E,MAAMrC,SAAS,MAAM,KAAKT,QAAQe,OAAOD,EAAAA;EACzC,OAAOpB,oBAAoB,KAAKO,eAAeQ,OAAOK,EAAE;CAC5D;CAEA,MACMiC,QACF,IACA,OACyB;EACzB,MAAMtC,SAAS,MAAM,KAAKT,QAAQe,OAAOD,EAAAA;EACzC,OAAOrB,mBAAmB,KAAKQ,eAAe+C,OAAOvC,OAAOK,EAAE;CAClE;CAEA,MACMmC,KACF,IACA,MACA,OACe;EACf,MAAMzC,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQkD,OAC9BpC,IACAT,MACAG,KAAAA;EAGJJ,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACM0C,IACF,IACA,MACA,OACe;EACf,MAAM3C,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAM,EACFK,QACA2C,YACA,MAAM,KAAKpD,QAAQqD,KACnBvC,MAAMwC,KAAAA,GACNjD,MACAG,KAAAA;EAGJJ,MAAMO,SAASC,SAASwC,UAAU,MAAM;EACxC,OAAO3C;CACX;CAEA,MACM8C,KACF,IACA,OACe;EACf,MAAM/C,QAAQZ,kBAAkBQ,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQwD,OAAO1C,IAAIN,KAAAA;EAE7CJ,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;;;;;;;;YA/KgBd,uBAAAA,CAAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA6HIA,uBAAAA,CAAAA;;;;;;;;;;;;;eAkBDA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAoBGA,uBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/role-attribute/utils/validation.mjs

@@ -11,7 +11,7 @@ var RoleAttributeRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
 		this.mount("name", { group: RequestHandlerOperation.CREATE }, createValidator(z.string().min(3).max(255)));
-		this.mount("role_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("roleId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
 		this.mount("value", { optional: true }, createValidator(z.string().min(3).max(512).nullable()));
 	}
 };

package/dist/adapters/http/controllers/entities/role-attribute/utils/validation.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","RoleAttributeRequestValidator","initialize","mount","group","CREATE","string","min","max","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/role-attribute/utils/validation.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RoleAttribute } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class RoleAttributeRequestValidator extends Container<\n    RoleAttribute\n> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'name',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.string().min(3).max(255)),\n        );\n\n        this.mount(\n            'role_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.uuid()),\n        );\n\n        this.mount(\n            'value',\n            { optional: true },\n            createValidator(z.string().min(3).max(512).nullable()),\n        );\n    }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,gCAAb,cAAmDH,UAAAA;CAGrCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,QACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKL,MACD,WACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEU,KAAI,CAAA,CAAA;EAG1B,KAAKN,MACD,SACA,EAAEO,UAAU,KAAK,GACjBb,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKG,SAAQ,CAAA,CAAA;CAE3D;AACJ"}
+{"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","RoleAttributeRequestValidator","initialize","mount","group","CREATE","string","min","max","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/role-attribute/utils/validation.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RoleAttribute } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class RoleAttributeRequestValidator extends Container<\n    RoleAttribute\n> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'name',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.string().min(3).max(255)),\n        );\n\n        this.mount(\n            'roleId',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.uuid()),\n        );\n\n        this.mount(\n            'value',\n            { optional: true },\n            createValidator(z.string().min(3).max(512).nullable()),\n        );\n    }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,gCAAb,cAAmDH,UAAAA;CAGrCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,QACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKL,MACD,UACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEU,KAAI,CAAA,CAAA;EAG1B,KAAKN,MACD,SACA,EAAEO,UAAU,KAAK,GACjBb,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKG,SAAQ,CAAA,CAAA;CAE3D;AACJ"}

package/dist/adapters/http/controllers/entities/role-permission/utils/validation.mjs

@@ -10,9 +10,9 @@ import { z } from "zod";
 var RolePermissionRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
-		this.mount("role_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("permission_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("policy_id", { optional: true }, createValidator(z.uuid().nullable()));
+		this.mount("roleId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("permissionId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("policyId", { optional: true }, createValidator(z.uuid().nullable()));
 	}
 };
 //#endregion

package/dist/adapters/http/controllers/entities/role-permission/utils/validation.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","RolePermissionRequestValidator","initialize","mount","group","CREATE","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/role-permission/utils/validation.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RolePermissionEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class RolePermissionRequestValidator extends Container<\n    RolePermissionEntity\n> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'role_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.uuid()),\n        );\n\n        this.mount(\n            'permission_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.uuid()),\n        );\n\n        this.mount(\n            'policy_id',\n            { optional: true },\n            createValidator(z.uuid().nullable()),\n        );\n    }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,iCAAb,cAAoDH,UAAAA;CAGtCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,WACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,iBACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,aACA,EAAEI,UAAU,KAAK,GACjBV,gBAAgBE,EAAEO,KAAI,CAAA,CAAGE,SAAQ,CAAA,CAAA;CAEzC;AACJ"}
+{"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","RolePermissionRequestValidator","initialize","mount","group","CREATE","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/role-permission/utils/validation.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RolePermissionEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class RolePermissionRequestValidator extends Container<\n    RolePermissionEntity\n> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'roleId',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.uuid()),\n        );\n\n        this.mount(\n            'permissionId',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.uuid()),\n        );\n\n        this.mount(\n            'policyId',\n            { optional: true },\n            createValidator(z.uuid().nullable()),\n        );\n    }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,iCAAb,cAAoDH,UAAAA;CAGtCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,UACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,gBACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,YACA,EAAEI,UAAU,KAAK,GACjBV,gBAAgBE,EAAEO,KAAI,CAAA,CAAGE,SAAQ,CAAA,CAAA;CAEzC;AACJ"}

package/dist/adapters/http/controllers/entities/session/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DContext","DController","DDelete","DGet","DPath","DTags","useRequestQuery","isSelfToken","ForceLoggedInMiddleware","buildActorContext","useRequestSessionId","SessionController","service","ctx","getMany","event","actor","data","meta","getOne","id","resolvedId","dropMany","result","deleteMany","query","currentSessionId","response","status","drop","entity","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/session/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DTags,\n} from '@routup/decorators';\nimport type { Session } from '@authup/core-kit';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { EntityCollectionResponse, SessionDeleteManyResponse } from '@authup/core-http-kit';\nimport { isSelfToken } from '../../../../../utils/index.ts';\nimport type { ISessionService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext, useRequestSessionId } from '../../../request/index.ts';\n\nexport type SessionControllerContext = {\n    service: ISessionService,\n};\n\n@DTags('session')\n@DController(['/sessions', '/realms/:realmId/sessions'])\nexport class SessionController {\n    protected service: ISessionService;\n\n    constructor(ctx: SessionControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IAppEvent,\n    ): Promise<EntityCollectionResponse<Session>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<Session> {\n        const actor = buildActorContext(event);\n\n        // `@me` / `@self` resolve to the caller's current session.\n        const resolvedId = isSelfToken(id) ? (useRequestSessionId(event) ?? id) : id;\n\n        return this.service.getOne(resolvedId, actor);\n    }\n\n    @DDelete('', [ForceLoggedInMiddleware])\n    async dropMany(\n        @DContext() event: IAppEvent,\n    ): Promise<SessionDeleteManyResponse> {\n        const actor = buildActorContext(event);\n\n        // A recognized target filter (e.g. `?filter[user_id]=<uuid>`) → admin\n        // force-logout (SESSION_DELETE + per-session realm-match). No filter →\n        // self-service \"log out my other devices\" (keeps the current session).\n        const result = await this.service.deleteMany(actor, {\n            query: useRequestQuery(event),\n            currentSessionId: useRequestSessionId(event),\n        });\n\n        event.response.status = 202;\n        return result;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<Session> {\n        const actor = buildActorContext(event);\n\n        const resolvedId = isSelfToken(id) ? (useRequestSessionId(event) ?? id) : id;\n        const entity = await this.service.delete(resolvedId, actor);\n\n        event.response.status = 202;\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,IAAaW,oBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA+B;EACvC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC0C;EAC1C,MAAME,QAAQP,kBAAkBM,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQR,gBAAgBS,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,OACF,IACA,OACgB;EAChB,MAAMH,QAAQP,kBAAkBM,KAAAA;EAGhC,MAAMM,aAAad,YAAYa,EAAAA,IAAOV,oBAAoBK,KAAAA,KAAUK,KAAMA;EAE1E,OAAO,KAAKR,QAAQO,OAAOE,YAAYL,KAAAA;CAC3C;CAEA,MACMM,SACF,OACkC;EAClC,MAAMN,QAAQP,kBAAkBM,KAAAA;EAKhC,MAAMQ,SAAS,MAAM,KAAKX,QAAQY,WAAWR,OAAO;GAChDS,OAAOnB,gBAAgBS,KAAAA;GACvBW,kBAAkBhB,oBAAoBK,KAAAA;EAC1C,CAAA;EAEAA,MAAMY,SAASC,SAAS;EACxB,OAAOL;CACX;CAEA,MACMM,KACF,IACA,OACgB;EAChB,MAAMb,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAMM,aAAad,YAAYa,EAAAA,IAAOV,oBAAoBK,KAAAA,KAAUK,KAAMA;EAC1E,MAAMU,SAAS,MAAM,KAAKlB,QAAQmB,OAAOV,YAAYL,KAAAA;EAErDD,MAAMY,SAASC,SAAS;EACxB,OAAOE;CACX;AACJ;;WA5DetB,uBAAAA,CAAAA;;;;;;;eAgBIA,uBAAAA,CAAAA;;;;;;;;cAaDA,uBAAAA,CAAAA;;;;;;;kBAkBIA,uBAAAA,CAAAA;;;;;;;;;cAvDR,aAAa,2BAAA,CAAA"}
+{"version":3,"file":"module.mjs","names":["DContext","DController","DDelete","DGet","DPath","DTags","useRequestQuery","isSelfToken","ForceLoggedInMiddleware","buildActorContext","useRequestSessionId","SessionController","service","ctx","getMany","event","actor","data","meta","getOne","id","resolvedId","dropMany","result","deleteMany","query","currentSessionId","response","status","drop","entity","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/session/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DTags,\n} from '@routup/decorators';\nimport type { Session } from '@authup/core-kit';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { EntityCollectionResponse, SessionDeleteManyResponse } from '@authup/core-http-kit';\nimport { isSelfToken } from '../../../../../utils/index.ts';\nimport type { ISessionService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext, useRequestSessionId } from '../../../request/index.ts';\n\nexport type SessionControllerContext = {\n    service: ISessionService,\n};\n\n@DTags('session')\n@DController(['/sessions', '/realms/:realmId/sessions'])\nexport class SessionController {\n    protected service: ISessionService;\n\n    constructor(ctx: SessionControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IAppEvent,\n    ): Promise<EntityCollectionResponse<Session>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<Session> {\n        const actor = buildActorContext(event);\n\n        // `@me` / `@self` resolve to the caller's current session.\n        const resolvedId = isSelfToken(id) ? (useRequestSessionId(event) ?? id) : id;\n\n        return this.service.getOne(resolvedId, actor);\n    }\n\n    @DDelete('', [ForceLoggedInMiddleware])\n    async dropMany(\n        @DContext() event: IAppEvent,\n    ): Promise<SessionDeleteManyResponse> {\n        const actor = buildActorContext(event);\n\n        // A recognized target filter (e.g. `?filter[userId]=<uuid>`) → admin\n        // force-logout (SESSION_DELETE + per-session realm-match). No filter →\n        // self-service \"log out my other devices\" (keeps the current session).\n        const result = await this.service.deleteMany(actor, {\n            query: useRequestQuery(event),\n            currentSessionId: useRequestSessionId(event),\n        });\n\n        event.response.status = 202;\n        return result;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<Session> {\n        const actor = buildActorContext(event);\n\n        const resolvedId = isSelfToken(id) ? (useRequestSessionId(event) ?? id) : id;\n        const entity = await this.service.delete(resolvedId, actor);\n\n        event.response.status = 202;\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,IAAaW,oBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA+B;EACvC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC0C;EAC1C,MAAME,QAAQP,kBAAkBM,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQR,gBAAgBS,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,OACF,IACA,OACgB;EAChB,MAAMH,QAAQP,kBAAkBM,KAAAA;EAGhC,MAAMM,aAAad,YAAYa,EAAAA,IAAOV,oBAAoBK,KAAAA,KAAUK,KAAMA;EAE1E,OAAO,KAAKR,QAAQO,OAAOE,YAAYL,KAAAA;CAC3C;CAEA,MACMM,SACF,OACkC;EAClC,MAAMN,QAAQP,kBAAkBM,KAAAA;EAKhC,MAAMQ,SAAS,MAAM,KAAKX,QAAQY,WAAWR,OAAO;GAChDS,OAAOnB,gBAAgBS,KAAAA;GACvBW,kBAAkBhB,oBAAoBK,KAAAA;EAC1C,CAAA;EAEAA,MAAMY,SAASC,SAAS;EACxB,OAAOL;CACX;CAEA,MACMM,KACF,IACA,OACgB;EAChB,MAAMb,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAMM,aAAad,YAAYa,EAAAA,IAAOV,oBAAoBK,KAAAA,KAAUK,KAAMA;EAC1E,MAAMU,SAAS,MAAM,KAAKlB,QAAQmB,OAAOV,YAAYL,KAAAA;EAErDD,MAAMY,SAASC,SAAS;EACxB,OAAOE;CACX;AACJ;;WA5DetB,uBAAAA,CAAAA;;;;;;;eAgBIA,uBAAAA,CAAAA;;;;;;;;cAaDA,uBAAAA,CAAAA;;;;;;;kBAkBIA,uBAAAA,CAAAA;;;;;;;;;cAvDR,aAAa,2BAAA,CAAA"}

package/dist/adapters/http/controllers/entities/trust-anchor/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/entities/trust-anchor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/trust-anchor/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/entities/trust-anchor/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { TrustAnchorController } from "./module.mjs";
+export { TrustAnchorController };

package/dist/adapters/http/controllers/entities/trust-anchor/module.d.ts

@@ -0,0 +1,17 @@
+import type { EntityCollectionResponse, TrustAnchorCreatePayload, TrustAnchorUpdatePayload } from '@authup/core-http-kit';
+import type { TrustAnchor } from '@authup/core-kit';
+import type { IAppEvent } from 'routup';
+import type { ITrustAnchorService } from '../../../../../core/index.ts';
+export type TrustAnchorControllerContext = {
+    service: ITrustAnchorService;
+};
+export declare class TrustAnchorController {
+    protected service: ITrustAnchorService;
+    constructor(ctx: TrustAnchorControllerContext);
+    getMany(event: IAppEvent): Promise<EntityCollectionResponse<TrustAnchor>>;
+    getOne(id: string, event: IAppEvent): Promise<TrustAnchor>;
+    add(data: TrustAnchorCreatePayload, event: IAppEvent): Promise<TrustAnchor>;
+    edit(id: string, data: TrustAnchorUpdatePayload, event: IAppEvent): Promise<TrustAnchor>;
+    drop(id: string, event: IAppEvent): Promise<TrustAnchor>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/entities/trust-anchor/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/trust-anchor/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAYpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAQxE,MAAM,MAAM,4BAA4B,GAAG;IACvC,OAAO,EAAE,mBAAmB,CAAC;CAChC,CAAC;AAEF,qBAEa,qBAAqB;IAC9B,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC;gBAE3B,GAAG,EAAE,4BAA4B;IAKvC,OAAO,CACG,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAY3C,MAAM,CACK,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,WAAW,CAAC;IAOjB,GAAG,CACI,IAAI,EAAE,wBAAwB,EAC3B,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,WAAW,CAAC;IAWjB,IAAI,CACO,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,wBAAwB,EAC3B,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,WAAW,CAAC;IAOjB,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,WAAW,CAAC;CAQ1B"}

package/dist/adapters/http/controllers/entities/{robot-permission → trust-anchor}/module.mjs

@@ -2,12 +2,13 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { buildActorContext } from "../../../request/helpers/actor.mjs";
+import { applyRouteRealmIDToBody, getRequestRealmID } from "../../../request/helpers/realm-id.mjs";
 import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
 import { useRequestQuery } from "@routup/basic/query";
 import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DTags } from "@routup/decorators";
-//#region src/adapters/http/controllers/entities/robot-permission/module.ts
+//#region src/adapters/http/controllers/entities/trust-anchor/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
 	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -22,20 +23,25 @@ function _ts_param(paramIndex, decorator) {
 		decorator(target, key, paramIndex);
 	};
 }
-var RobotPermissionController = class {
+var TrustAnchorController = class {
 	service;
 	constructor(ctx) {
 		this.service = ctx.service;
 	}
 	async getMany(event) {
 		const actor = buildActorContext(event);
-		const { data, meta } = await this.service.getMany(useRequestQuery(event), actor);
+		const { data, meta } = await this.service.getMany(useRequestQuery(event), actor, { realmId: getRequestRealmID(event) });
 		return {
 			data,
 			meta
 		};
 	}
+	async getOne(id, event) {
+		const actor = buildActorContext(event);
+		return this.service.getOne(id, actor, getRequestRealmID(event));
+	}
 	async add(data, event) {
+		applyRouteRealmIDToBody(event, data);
 		const actor = buildActorContext(event);
 		const entity = await this.service.create(data, actor);
 		event.response.status = 201;
@@ -43,13 +49,7 @@ var RobotPermissionController = class {
 	}
 	async edit(id, data, event) {
 		const actor = buildActorContext(event);
-		const entity = await this.service.update(id, data, actor);
-		event.response.status = 202;
-		return entity;
-	}
-	async getOne(id, event) {
-		const actor = buildActorContext(event);
-		return await this.service.getOne(id, actor);
+		return this.service.update(id, data, actor, getRequestRealmID(event));
 	}
 	async drop(id, event) {
 		const actor = buildActorContext(event);
@@ -64,15 +64,23 @@ _ts_decorate([
 	_ts_metadata("design:type", Function),
 	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
 	_ts_metadata("design:returntype", Promise)
-], RobotPermissionController.prototype, "getMany", null);
+], TrustAnchorController.prototype, "getMany", null);
+_ts_decorate([
+	DGet("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [String, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], TrustAnchorController.prototype, "getOne", null);
 _ts_decorate([
 	DPost("", [ForceLoggedInMiddleware]),
 	_ts_param(0, DBody()),
 	_ts_param(1, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [typeof RobotPermissionCreatePayload === "undefined" ? Object : RobotPermissionCreatePayload, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:paramtypes", [typeof TrustAnchorCreatePayload === "undefined" ? Object : TrustAnchorCreatePayload, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
 	_ts_metadata("design:returntype", Promise)
-], RobotPermissionController.prototype, "add", null);
+], TrustAnchorController.prototype, "add", null);
 _ts_decorate([
 	DPost("/:id", [ForceLoggedInMiddleware]),
 	_ts_param(0, DPath("id")),
@@ -81,19 +89,11 @@ _ts_decorate([
 	_ts_metadata("design:type", Function),
 	_ts_metadata("design:paramtypes", [
 		String,
-		typeof RobotPermissionUpdatePayload === "undefined" ? Object : RobotPermissionUpdatePayload,
+		typeof TrustAnchorUpdatePayload === "undefined" ? Object : TrustAnchorUpdatePayload,
 		typeof IAppEvent === "undefined" ? Object : IAppEvent
 	]),
 	_ts_metadata("design:returntype", Promise)
-], RobotPermissionController.prototype, "edit", null);
-_ts_decorate([
-	DGet("/:id", [ForceLoggedInMiddleware]),
-	_ts_param(0, DPath("id")),
-	_ts_param(1, DContext()),
-	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [String, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
-	_ts_metadata("design:returntype", Promise)
-], RobotPermissionController.prototype, "getOne", null);
+], TrustAnchorController.prototype, "edit", null);
 _ts_decorate([
 	DDelete("/:id", [ForceLoggedInMiddleware]),
 	_ts_param(0, DPath("id")),
@@ -101,14 +101,14 @@ _ts_decorate([
 	_ts_metadata("design:type", Function),
 	_ts_metadata("design:paramtypes", [String, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
 	_ts_metadata("design:returntype", Promise)
-], RobotPermissionController.prototype, "drop", null);
-RobotPermissionController = _ts_decorate([
-	DTags("robot"),
-	DController("/robot-permissions"),
+], TrustAnchorController.prototype, "drop", null);
+TrustAnchorController = _ts_decorate([
+	DTags("trust-anchor"),
+	DController(["/trust-anchors", "/realms/:realmId/trust-anchors"]),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [typeof RobotPermissionControllerContext === "undefined" ? Object : RobotPermissionControllerContext])
-], RobotPermissionController);
+	_ts_metadata("design:paramtypes", [typeof TrustAnchorControllerContext === "undefined" ? Object : TrustAnchorControllerContext])
+], TrustAnchorController);
 //#endregion
-export { RobotPermissionController };
+export { TrustAnchorController };
 
 //# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/entities/trust-anchor/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["useRequestQuery","DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","TrustAnchorController","service","ctx","getMany","event","actor","data","meta","realmId","getOne","id","add","entity","create","response","status","edit","update","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/trust-anchor/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    EntityCollectionResponse,\n    TrustAnchorCreatePayload,\n    TrustAnchorUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { TrustAnchor } from '@authup/core-kit';\nimport { useRequestQuery } from '@routup/basic/query';\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport type { ITrustAnchorService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    applyRouteRealmIDToBody,\n    buildActorContext,\n    getRequestRealmID,\n} from '../../../request/index.ts';\n\nexport type TrustAnchorControllerContext = {\n    service: ITrustAnchorService,\n};\n\n@DTags('trust-anchor')\n@DController(['/trust-anchors', '/realms/:realmId/trust-anchors'])\nexport class TrustAnchorController {\n    protected service: ITrustAnchorService;\n\n    constructor(ctx: TrustAnchorControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IAppEvent,\n    ): Promise<EntityCollectionResponse<TrustAnchor>> {\n        const actor = buildActorContext(event);\n\n        const { data, meta } = await this.service.getMany(useRequestQuery(event), actor, { realmId: getRequestRealmID(event) });\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<TrustAnchor> {\n        const actor = buildActorContext(event);\n\n        return this.service.getOne(id, actor, getRequestRealmID(event));\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: TrustAnchorCreatePayload,\n        @DContext() event: IAppEvent,\n    ): Promise<TrustAnchor> {\n        applyRouteRealmIDToBody(event, data);\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: TrustAnchorUpdatePayload,\n        @DContext() event: IAppEvent,\n    ): Promise<TrustAnchor> {\n        const actor = buildActorContext(event);\n\n        return this.service.update(id, data, actor, getRequestRealmID(event));\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<TrustAnchor> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAkCD,IAAaa,wBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAmC;EAC3C,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC8C;EAC9C,MAAME,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAM,EAAEE,MAAMC,SAAS,MAAM,KAAKN,QAAQE,QAAQhB,gBAAgBiB,KAAAA,GAAQC,OAAO,EAAEG,SAAST,kBAAkBK,KAAAA,EAAO,CAAA;EAErH,OAAO;GACHE;GACAC;EACJ;CACJ;CAEA,MACME,OACF,IACA,OACoB;EACpB,MAAMJ,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,QAAQQ,OAAOC,IAAIL,OAAON,kBAAkBK,KAAAA,CAAAA;CAC5D;CAEA,MACMO,IACF,MACA,OACoB;EACpBd,wBAAwBO,OAAOE,IAAAA;EAC/B,MAAMD,QAAQP,kBAAkBM,KAAAA;EAChC,MAAMQ,SAAS,MAAM,KAAKX,QAAQY,OAAOP,MAAMD,KAAAA;EAE/CD,MAAMU,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,KACF,IACA,MACA,OACoB;EACpB,MAAMX,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,QAAQgB,OAAOP,IAAIJ,MAAMD,OAAON,kBAAkBK,KAAAA,CAAAA;CAClE;CAEA,MACMc,KACF,IACA,OACoB;EACpB,MAAMb,QAAQP,kBAAkBM,KAAAA;EAChC,MAAMQ,SAAS,MAAM,KAAKX,QAAQkB,OAAOT,IAAIL,KAAAA;EAE7CD,MAAMU,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;WA7DehB,uBAAAA,CAAAA;;;;;;;eAcIA,uBAAAA,CAAAA;;;;;;;;YAUHA,uBAAAA,CAAAA;;;;;;;;gBAcIA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAWEA,uBAAAA,CAAAA;;;;;;;;;cAzDR,kBAAkB,gCAAA,CAAA"}

package/dist/adapters/http/controllers/entities/user-attribute/utils/validation.mjs

@@ -11,7 +11,7 @@ var UserAttributeRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
 		this.mount("name", { group: RequestHandlerOperation.CREATE }, createValidator(z.string().min(3).max(255)));
-		this.mount("user_id", {
+		this.mount("userId", {
 			group: RequestHandlerOperation.CREATE,
 			optional: true
 		}, createValidator(z.uuid().nullable()));

package/dist/adapters/http/controllers/entities/user-attribute/utils/validation.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserAttributeRequestValidator","initialize","mount","group","CREATE","string","min","max","optional","uuid","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-attribute/utils/validation.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserAttribute } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserAttributeRequestValidator extends Container<\n    UserAttribute\n> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'name',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.string().min(3).max(255)),\n        );\n\n        this.mount(\n            'user_id',\n            {\n                group: RequestHandlerOperation.CREATE,\n                optional: true,\n            },\n            createValidator(z.uuid().nullable()),\n        );\n\n        this.mount(\n            'value',\n            { optional: true },\n            createValidator(z.string().min(3).max(512).nullable()),\n        );\n    }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,gCAAb,cAAmDH,UAAAA;CAGrCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,QACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKL,MACD,WACA;GACIC,OAAOJ,wBAAwBK;GAC/BI,UAAU;EACd,GACAZ,gBAAgBE,EAAEW,KAAI,CAAA,CAAGC,SAAQ,CAAA,CAAA;EAGrC,KAAKR,MACD,SACA,EAAEM,UAAU,KAAK,GACjBZ,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKG,SAAQ,CAAA,CAAA;CAE3D;AACJ"}
+{"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserAttributeRequestValidator","initialize","mount","group","CREATE","string","min","max","optional","uuid","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-attribute/utils/validation.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserAttribute } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserAttributeRequestValidator extends Container<\n    UserAttribute\n> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'name',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.string().min(3).max(255)),\n        );\n\n        this.mount(\n            'userId',\n            {\n                group: RequestHandlerOperation.CREATE,\n                optional: true,\n            },\n            createValidator(z.uuid().nullable()),\n        );\n\n        this.mount(\n            'value',\n            { optional: true },\n            createValidator(z.string().min(3).max(512).nullable()),\n        );\n    }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,gCAAb,cAAmDH,UAAAA;CAGrCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,QACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKL,MACD,UACA;GACIC,OAAOJ,wBAAwBK;GAC/BI,UAAU;EACd,GACAZ,gBAAgBE,EAAEW,KAAI,CAAA,CAAGC,SAAQ,CAAA,CAAA;EAGrC,KAAKR,MACD,SACA,EAAEM,UAAU,KAAK,GACjBZ,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKG,SAAQ,CAAA,CAAA;CAE3D;AACJ"}

package/dist/adapters/http/controllers/entities/user-authenticator/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/entities/user-authenticator/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/user-authenticator/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/entities/user-authenticator/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { UserAuthenticatorController } from "./module.mjs";
+export { UserAuthenticatorController };

package/dist/adapters/http/controllers/entities/user-authenticator/module.d.ts

@@ -0,0 +1,21 @@
+import type { UserAuthenticator } from '@authup/core-kit';
+import type { IAppEvent } from 'routup';
+import type { EntityCollectionResponse, UserAuthenticatorConfirmPayload, UserAuthenticatorCreatePayload, UserAuthenticatorEnrollResponse } from '@authup/core-http-kit';
+import type { IUserAuthenticatorService } from '../../../../../core/index.ts';
+export type UserAuthenticatorControllerContext = {
+    service: IUserAuthenticatorService;
+};
+export declare class UserAuthenticatorController {
+    protected service: IUserAuthenticatorService;
+    constructor(ctx: UserAuthenticatorControllerContext);
+    /**
+     * `@me` / `@self` resolve to the calling user identity.
+     */
+    protected resolveUserId(id: string, event: IAppEvent): string;
+    getMany(id: string, event: IAppEvent): Promise<EntityCollectionResponse<UserAuthenticator>>;
+    enroll(id: string, data: UserAuthenticatorCreatePayload, event: IAppEvent): Promise<UserAuthenticatorEnrollResponse>;
+    getOne(id: string, deviceId: string, event: IAppEvent): Promise<UserAuthenticator>;
+    confirm(id: string, deviceId: string, data: UserAuthenticatorConfirmPayload, event: IAppEvent): Promise<UserAuthenticator>;
+    drop(id: string, deviceId: string, event: IAppEvent): Promise<UserAuthenticator>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/entities/user-authenticator/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/user-authenticator/module.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EACR,wBAAwB,EACxB,+BAA+B,EAC/B,8BAA8B,EAC9B,+BAA+B,EAClC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAI9E,MAAM,MAAM,kCAAkC,GAAG;IAC7C,OAAO,EAAE,yBAAyB,CAAC;CACtC,CAAC;AAEF,qBAEa,2BAA2B;IACpC,SAAS,CAAC,OAAO,EAAE,yBAAyB,CAAC;gBAEjC,GAAG,EAAE,kCAAkC;IAInD;;OAEG;IACH,SAAS,CAAC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,MAAM;IAiBvD,OAAO,CACI,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IAajD,MAAM,CACK,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,8BAA8B,EACjC,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,+BAA+B,CAAC;IAYrC,MAAM,CACK,EAAE,EAAE,MAAM,EACJ,QAAQ,EAAE,MAAM,EACvB,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,iBAAiB,CAAC;IAQvB,OAAO,CACI,EAAE,EAAE,MAAM,EACJ,QAAQ,EAAE,MAAM,EAC1B,IAAI,EAAE,+BAA+B,EAClC,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,iBAAiB,CAAC;IAYvB,IAAI,CACO,EAAE,EAAE,MAAM,EACJ,QAAQ,EAAE,MAAM,EACvB,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,iBAAiB,CAAC;CAShC"}