@authup/server-core 1.0.0-beta.52 → 1.0.0-beta.54

package/dist/app/modules/identity/repositories/client.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"client.mjs","names":["buildRedisKeyPath","isUUID","CachePrefix","ClientIdentityRepository","repository","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","databaseName","cache","prefix","CLIENT","getOne"],"sources":["../../../../../src/app/modules/identity/repositories/client.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Client } from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport type { IClientIdentityRepository } from '../../../../core/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport class ClientIdentityRepository implements IClientIdentityRepository {\n    private readonly repository: Repository<Client>;\n\n    constructor(repository: Repository<Client>) {\n        this.repository = repository;\n    }\n\n    async findOneById(id: string): Promise<Client | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<Client | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Client | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Client | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<Client | null> {\n        const query = this.repository.createQueryBuilder('client')\n            .leftJoinAndSelect('client.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('client.id = :id', { id: key });\n        } else {\n            query.where('client.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('client.realm_id = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`client.${column.databaseName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.CLIENT,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        return query.getOne();\n    }\n}\n"],"mappings":";;;;;;;;AAcA,IAAaG,2BAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAgC;EACxC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,YAAYC,IAAoC;EAClD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAwC;EACpE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAwC;EAC9E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAoD;EAChE,OAAO,KAAKT,WAAWQ,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA4C;EACxE,MAAMC,QAAQ,KAAKZ,WAAWa,mBAAmB,QAAA,CAAA,CAC5CC,kBAAkB,gBAAgB,OAAA;EAEvC,MAAMC,OAAOlB,OAAOa,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,mBAAmB,EAAEP,IAAIQ,IAAI,CAAA;OACtC;GACHE,MAAMH,MAAM,uBAAuB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAEpE,IAAIP,UACA,IAAId,OAAOc,QAAAA,GACPC,MAAMO,SAAS,8BAA8B,EAAEC,SAAST,SAAS,CAAA;QAEjEC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EACA,MAAM,EAAEI,YAAY,KAAKtB,WAAWuB;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,UAAUF,OAAOG,cAAc;EAIvD,IAAIZ,MACAH,MAAMgB,MACFhC,kBAAkB;GACdiC,QAAQ/B,YAAYgC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,OAAOE,MAAMmB,OAAM;CACvB;AACJ"}
+{"version":3,"file":"client.mjs","names":["buildRedisKeyPath","isUUID","CachePrefix","ClientIdentityRepository","repository","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","propertyName","cache","prefix","CLIENT","getOne"],"sources":["../../../../../src/app/modules/identity/repositories/client.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Client } from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport type { IClientIdentityRepository } from '../../../../core/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport class ClientIdentityRepository implements IClientIdentityRepository {\n    private readonly repository: Repository<Client>;\n\n    constructor(repository: Repository<Client>) {\n        this.repository = repository;\n    }\n\n    async findOneById(id: string): Promise<Client | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<Client | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Client | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Client | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<Client | null> {\n        const query = this.repository.createQueryBuilder('client')\n            .leftJoinAndSelect('client.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('client.id = :id', { id: key });\n        } else {\n            query.where('client.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('client.realmId = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`client.${column.propertyName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.CLIENT,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        return query.getOne();\n    }\n}\n"],"mappings":";;;;;;;;AAcA,IAAaG,2BAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAgC;EACxC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,YAAYC,IAAoC;EAClD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAwC;EACpE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAwC;EAC9E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAoD;EAChE,OAAO,KAAKT,WAAWQ,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA4C;EACxE,MAAMC,QAAQ,KAAKZ,WAAWa,mBAAmB,QAAA,CAAA,CAC5CC,kBAAkB,gBAAgB,OAAA;EAEvC,MAAMC,OAAOlB,OAAOa,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,mBAAmB,EAAEP,IAAIQ,IAAI,CAAA;OACtC;GACHE,MAAMH,MAAM,uBAAuB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAEpE,IAAIP,UACA,IAAId,OAAOc,QAAAA,GACPC,MAAMO,SAAS,6BAA6B,EAAEC,SAAST,SAAS,CAAA;QAEhEC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EACA,MAAM,EAAEI,YAAY,KAAKtB,WAAWuB;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,UAAUF,OAAOG,cAAc;EAIvD,IAAIZ,MACAH,MAAMgB,MACFhC,kBAAkB;GACdiC,QAAQ/B,YAAYgC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,OAAOE,MAAMmB,OAAM;CACvB;AACJ"}

package/dist/app/modules/identity/repositories/index.d.ts

@@ -1,5 +1,4 @@
 export * from './provider/index.ts';
 export * from './client.ts';
-export * from './robot.ts';
 export * from './user.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/app/modules/identity/repositories/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/identity/repositories/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AAEpC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/identity/repositories/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AAEpC,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC"}

package/dist/app/modules/identity/repositories/index.mjs

@@ -7,6 +7,5 @@ import { IdentityProviderPermissionMappingRepository } from "./provider/mapper/p
 import { IdentityProviderRoleMappingRepository } from "./provider/mapper/role.mjs";
 import "./provider/index.mjs";
 import { ClientIdentityRepository } from "./client.mjs";
-import { RobotIdentityRepository } from "./robot.mjs";
 import { UserIdentityRepository } from "./user.mjs";
-export { ClientIdentityRepository, IdentityProviderAccountRepository, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRoleMappingRepository, RobotIdentityRepository, UserIdentityRepository };
+export { ClientIdentityRepository, IdentityProviderAccountRepository, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRoleMappingRepository, UserIdentityRepository };

package/dist/app/modules/identity/repositories/provider/account/module.mjs

@@ -12,10 +12,10 @@ var IdentityProviderAccountRepository = class {
 	async findOneByProviderIdentity(identity) {
 		return this.dataSource.getRepository(IdentityProviderAccountEntity).findOne({
 			where: {
-				provider_user_id: identity.id,
-				provider_id: identity.provider.id
+				providerUserId: identity.id,
+				providerId: identity.provider.id
 			},
-			relations: ["user"]
+			relations: { user: true }
 		});
 	}
 	async save(entity) {

package/dist/app/modules/identity/repositories/provider/account/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["IdentityProviderAccountEntity","IdentityProviderAccountRepository","dataSource","findOneByProviderIdentity","identity","repository","getRepository","findOne","where","provider_user_id","id","provider_id","provider","relations","save","entity"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/account/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderAccount } from '@authup/core-kit';\nimport type { DataSource, DeepPartial } from 'typeorm';\nimport type { IIdentityProviderAccountRepository, IdentityProviderIdentity } from '../../../../../../core/index.ts';\nimport { IdentityProviderAccountEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderAccountRepository implements IIdentityProviderAccountRepository {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findOneByProviderIdentity(identity: IdentityProviderIdentity): Promise<IdentityProviderAccount | null> {\n        const repository = this.dataSource.getRepository(IdentityProviderAccountEntity);\n\n        return repository.findOne({\n            where: {\n                provider_user_id: identity.id,\n                provider_id: identity.provider.id,\n            },\n            relations: ['user'],\n        });\n    }\n\n    async save(entity: DeepPartial<IdentityProviderAccount>): Promise<IdentityProviderAccount> {\n        const repository = this.dataSource.getRepository(IdentityProviderAccountEntity);\n\n        return repository.save(entity);\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,oCAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,0BAA0BC,UAA6E;EAGzG,OAFmB,KAAKF,WAAWI,cAAcN,6BAE1CK,CAAAA,CAAWE,QAAQ;GACtBC,OAAO;IACHC,kBAAkBL,SAASM;IAC3BC,aAAaP,SAASQ,SAASF;GACnC;GACAG,WAAW,CAAC,MAAA;EAChB,CAAA;CACJ;CAEA,MAAMC,KAAKC,QAAgF;EAGvF,OAFmB,KAAKb,WAAWI,cAAcN,6BAE1CK,CAAAA,CAAWS,KAAKC,MAAAA;CAC3B;AACJ"}
+{"version":3,"file":"module.mjs","names":["IdentityProviderAccountEntity","IdentityProviderAccountRepository","dataSource","findOneByProviderIdentity","identity","repository","getRepository","findOne","where","providerUserId","id","providerId","provider","relations","user","save","entity"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/account/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderAccount } from '@authup/core-kit';\nimport type { DataSource, DeepPartial } from 'typeorm';\nimport type { IIdentityProviderAccountRepository, IdentityProviderIdentity } from '../../../../../../core/index.ts';\nimport { IdentityProviderAccountEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderAccountRepository implements IIdentityProviderAccountRepository {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findOneByProviderIdentity(identity: IdentityProviderIdentity): Promise<IdentityProviderAccount | null> {\n        const repository = this.dataSource.getRepository(IdentityProviderAccountEntity);\n\n        return repository.findOne({\n            where: {\n                providerUserId: identity.id,\n                providerId: identity.provider.id,\n            },\n            relations: { user: true },\n        });\n    }\n\n    async save(entity: DeepPartial<IdentityProviderAccount>): Promise<IdentityProviderAccount> {\n        const repository = this.dataSource.getRepository(IdentityProviderAccountEntity);\n\n        return repository.save(entity);\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,oCAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,0BAA0BC,UAA6E;EAGzG,OAFmB,KAAKF,WAAWI,cAAcN,6BAE1CK,CAAAA,CAAWE,QAAQ;GACtBC,OAAO;IACHC,gBAAgBL,SAASM;IACzBC,YAAYP,SAASQ,SAASF;GAClC;GACAG,WAAW,EAAEC,MAAM,KAAK;EAC5B,CAAA;CACJ;CAEA,MAAMC,KAAKC,QAAgF;EAGvF,OAFmB,KAAKd,WAAWI,cAAcN,6BAE1CK,CAAAA,CAAWU,KAAKC,MAAAA;CAC3B;AACJ"}

package/dist/app/modules/identity/repositories/provider/mapper/attribute.mjs

@@ -10,7 +10,7 @@ var IdentityProviderAttributeMappingRepository = class {
 		this.dataSource = dataSource;
 	}
 	async findByProviderId(providerId) {
-		return this.dataSource.getRepository(IdentityProviderAttributeMappingEntity).findBy({ provider_id: providerId });
+		return this.dataSource.getRepository(IdentityProviderAttributeMappingEntity).findBy({ providerId });
 	}
 };
 //#endregion

package/dist/app/modules/identity/repositories/provider/mapper/attribute.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"attribute.mjs","names":["IdentityProviderAttributeMappingEntity","IdentityProviderAttributeMappingRepository","dataSource","findByProviderId","providerId","repository","getRepository","findBy","provider_id"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/mapper/attribute.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderAttributeMapping } from '@authup/core-kit';\nimport type { DataSource } from 'typeorm';\nimport type { IIdentityProviderAttributeMappingRepository } from '../../../../../../core/index.ts';\nimport { IdentityProviderAttributeMappingEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderAttributeMappingRepository implements IIdentityProviderAttributeMappingRepository {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findByProviderId(providerId: string): Promise<IdentityProviderAttributeMapping[]> {\n        const repository = this.dataSource.getRepository(IdentityProviderAttributeMappingEntity);\n\n        return repository.findBy({ provider_id: providerId });\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,6CAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,iBAAiBC,YAAiE;EAGpF,OAFmB,KAAKF,WAAWI,cAAcN,sCAE1CK,CAAAA,CAAWE,OAAO,EAAEC,aAAaJ,WAAW,CAAA;CACvD;AACJ"}
+{"version":3,"file":"attribute.mjs","names":["IdentityProviderAttributeMappingEntity","IdentityProviderAttributeMappingRepository","dataSource","findByProviderId","providerId","repository","getRepository","findBy"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/mapper/attribute.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderAttributeMapping } from '@authup/core-kit';\nimport type { DataSource } from 'typeorm';\nimport type { IIdentityProviderAttributeMappingRepository } from '../../../../../../core/index.ts';\nimport { IdentityProviderAttributeMappingEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderAttributeMappingRepository implements IIdentityProviderAttributeMappingRepository {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findByProviderId(providerId: string): Promise<IdentityProviderAttributeMapping[]> {\n        const repository = this.dataSource.getRepository(IdentityProviderAttributeMappingEntity);\n\n        return repository.findBy({ providerId });\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,6CAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,iBAAiBC,YAAiE;EAGpF,OAFmB,KAAKF,WAAWI,cAAcN,sCAE1CK,CAAAA,CAAWE,OAAO,EAAEH,WAAW,CAAA;CAC1C;AACJ"}

package/dist/app/modules/identity/repositories/provider/mapper/permission.mjs

@@ -10,7 +10,7 @@ var IdentityProviderPermissionMappingRepository = class {
 		this.dataSource = dataSource;
 	}
 	async findByProviderId(providerId) {
-		return this.dataSource.getRepository(IdentityProviderPermissionMappingEntity).findBy({ provider_id: providerId });
+		return this.dataSource.getRepository(IdentityProviderPermissionMappingEntity).findBy({ providerId });
 	}
 };
 //#endregion

package/dist/app/modules/identity/repositories/provider/mapper/permission.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"permission.mjs","names":["IdentityProviderPermissionMappingEntity","IdentityProviderPermissionMappingRepository","dataSource","findByProviderId","providerId","repository","getRepository","findBy","provider_id"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/mapper/permission.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderPermissionMapping } from '@authup/core-kit';\nimport type { DataSource } from 'typeorm';\nimport type { IIdentityProviderPermissionMappingRepository } from '../../../../../../core/index.ts';\nimport { IdentityProviderPermissionMappingEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderPermissionMappingRepository implements IIdentityProviderPermissionMappingRepository {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findByProviderId(providerId: string): Promise<IdentityProviderPermissionMapping[]> {\n        const repository = this.dataSource.getRepository(IdentityProviderPermissionMappingEntity);\n\n        return repository.findBy({ provider_id: providerId });\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,8CAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,iBAAiBC,YAAkE;EAGrF,OAFmB,KAAKF,WAAWI,cAAcN,uCAE1CK,CAAAA,CAAWE,OAAO,EAAEC,aAAaJ,WAAW,CAAA;CACvD;AACJ"}
+{"version":3,"file":"permission.mjs","names":["IdentityProviderPermissionMappingEntity","IdentityProviderPermissionMappingRepository","dataSource","findByProviderId","providerId","repository","getRepository","findBy"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/mapper/permission.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderPermissionMapping } from '@authup/core-kit';\nimport type { DataSource } from 'typeorm';\nimport type { IIdentityProviderPermissionMappingRepository } from '../../../../../../core/index.ts';\nimport { IdentityProviderPermissionMappingEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderPermissionMappingRepository implements IIdentityProviderPermissionMappingRepository {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findByProviderId(providerId: string): Promise<IdentityProviderPermissionMapping[]> {\n        const repository = this.dataSource.getRepository(IdentityProviderPermissionMappingEntity);\n\n        return repository.findBy({ providerId });\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,8CAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,iBAAiBC,YAAkE;EAGrF,OAFmB,KAAKF,WAAWI,cAAcN,uCAE1CK,CAAAA,CAAWE,OAAO,EAAEH,WAAW,CAAA;CAC1C;AACJ"}

package/dist/app/modules/identity/repositories/provider/mapper/role.mjs

@@ -10,7 +10,7 @@ var IdentityProviderRoleMappingRepository = class {
 		this.dataSource = dataSource;
 	}
 	async findByProviderId(providerId) {
-		return this.dataSource.getRepository(IdentityProviderRoleMappingEntity).findBy({ provider_id: providerId });
+		return this.dataSource.getRepository(IdentityProviderRoleMappingEntity).findBy({ providerId });
 	}
 };
 //#endregion

package/dist/app/modules/identity/repositories/provider/mapper/role.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"role.mjs","names":["IdentityProviderRoleMappingEntity","IdentityProviderRoleMappingRepository","dataSource","findByProviderId","providerId","repository","getRepository","findBy","provider_id"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/mapper/role.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderRoleMapping } from '@authup/core-kit';\nimport type { DataSource } from 'typeorm';\nimport type { IIdentityProviderRoleMappingFinder } from '../../../../../../core/index.ts';\nimport { IdentityProviderRoleMappingEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderRoleMappingRepository implements IIdentityProviderRoleMappingFinder {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findByProviderId(providerId: string): Promise<IdentityProviderRoleMapping[]> {\n        const repository = this.dataSource.getRepository(IdentityProviderRoleMappingEntity);\n\n        return repository.findBy({ provider_id: providerId });\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,wCAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,iBAAiBC,YAA4D;EAG/E,OAFmB,KAAKF,WAAWI,cAAcN,iCAE1CK,CAAAA,CAAWE,OAAO,EAAEC,aAAaJ,WAAW,CAAA;CACvD;AACJ"}
+{"version":3,"file":"role.mjs","names":["IdentityProviderRoleMappingEntity","IdentityProviderRoleMappingRepository","dataSource","findByProviderId","providerId","repository","getRepository","findBy"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/mapper/role.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderRoleMapping } from '@authup/core-kit';\nimport type { DataSource } from 'typeorm';\nimport type { IIdentityProviderRoleMappingFinder } from '../../../../../../core/index.ts';\nimport { IdentityProviderRoleMappingEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderRoleMappingRepository implements IIdentityProviderRoleMappingFinder {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findByProviderId(providerId: string): Promise<IdentityProviderRoleMapping[]> {\n        const repository = this.dataSource.getRepository(IdentityProviderRoleMappingEntity);\n\n        return repository.findBy({ providerId });\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,wCAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,iBAAiBC,YAA4D;EAG/E,OAFmB,KAAKF,WAAWI,cAAcN,iCAE1CK,CAAAA,CAAWE,OAAO,EAAEH,WAAW,CAAA;CAC1C;AACJ"}

package/dist/app/modules/identity/repositories/user.mjs

@@ -36,11 +36,11 @@ var UserIdentityRepository = class {
 		if (isId) query.where("user.id = :id", { id: key });
 		else {
 			query.where("user.name = :name", { name: key.trim().toLowerCase() });
-			if (realmKey) if (isUUID(realmKey)) query.andWhere("user.realm_id = :realmId", { realmId: realmKey });
+			if (realmKey) if (isUUID(realmKey)) query.andWhere("user.realmId = :realmId", { realmId: realmKey });
 			else query.andWhere("realm.name = :realmName", { realmName: realmKey.trim().toLowerCase() });
 		}
 		const { columns } = this.repository.metadata;
-		for (const column of columns) if (!column.isSelect) query.addSelect(`user.${column.databaseName}`);
+		for (const column of columns) if (!column.isSelect) query.addSelect(`user.${column.propertyName}`);
 		if (isId) query.cache(buildRedisKeyPath({
 			prefix: CachePrefix.USER,
 			key
@@ -58,24 +58,24 @@ var UserIdentityRepository = class {
 		const ids = items.map((item) => item.value);
 		const idsToDelete = items.filter((item) => item.operation === IdentityProviderMapperOperation.DELETE).map((item) => item.value);
 		const entities = await repository.findBy({
-			user_id: user.id,
-			permission_id: In(ids)
+			userId: user.id,
+			permissionId: In(ids)
 		});
 		const entitiesToDelete = [];
 		for (const entity of entities) {
-			if (idsToDelete.indexOf(entity.permission_id) === -1) continue;
+			if (idsToDelete.indexOf(entity.permissionId) === -1) continue;
 			entitiesToDelete.push(entity);
 		}
 		if (entitiesToDelete.length > 0) await repository.remove(entitiesToDelete);
 		const entitiesToCreate = [];
 		for (const item of items) {
 			if (item.operation !== IdentityProviderMapperOperation.CREATE) continue;
-			if (entities.findIndex((entity) => entity.permission_id === item.value) !== -1) continue;
+			if (entities.findIndex((entity) => entity.permissionId === item.value) !== -1) continue;
 			const entity = repository.create({
-				user_id: user.id,
-				user_realm_id: user.realm_id,
-				permission_id: item.value,
-				permission_realm_id: item.realmId
+				userId: user.id,
+				userRealmId: user.realmId,
+				permissionId: item.value,
+				permissionRealmId: item.realmId
 			});
 			entitiesToCreate.push(entity);
 		}
@@ -86,24 +86,24 @@ var UserIdentityRepository = class {
 		const ids = items.map((item) => item.value);
 		const idsToDelete = items.filter((item) => item.operation === IdentityProviderMapperOperation.DELETE).map((item) => item.value);
 		const entities = await repository.findBy({
-			user_id: user.id,
-			role_id: In(ids)
+			userId: user.id,
+			roleId: In(ids)
 		});
 		const entitiesToDelete = [];
 		for (const entity of entities) {
-			if (idsToDelete.indexOf(entity.role_id) === -1) continue;
+			if (idsToDelete.indexOf(entity.roleId) === -1) continue;
 			entitiesToDelete.push(entity);
 		}
 		if (entitiesToDelete.length > 0) await repository.remove(entitiesToDelete);
 		const entitiesToCreate = [];
 		for (const item of items) {
 			if (item.operation !== IdentityProviderMapperOperation.CREATE) continue;
-			if (entities.findIndex((entity) => entity.role_id === item.value) !== -1) continue;
+			if (entities.findIndex((entity) => entity.roleId === item.value) !== -1) continue;
 			const entity = repository.create({
-				user_id: user.id,
-				user_realm_id: user.realm_id,
-				role_id: item.value,
-				role_realm_id: item.realmId
+				userId: user.id,
+				userRealmId: user.realmId,
+				roleId: item.value,
+				roleRealmId: item.realmId
 			});
 			entitiesToCreate.push(entity);
 		}

package/dist/app/modules/identity/repositories/user.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"user.mjs","names":["isUUID","buildRedisKeyPath","In","IdentityProviderMapperOperation","CachePrefix","UserIdentityRepository","repository","userPermissionRepository","userRoleRepository","ctx","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","databaseName","cache","prefix","USER","entity","getOne","extendOneWithEA","saveOneWithEA","user","extraAttributes","create","savePermissions","items","ids","map","item","value","idsToDelete","filter","operation","DELETE","entities","findBy","user_id","permission_id","entitiesToDelete","index","indexOf","push","length","remove","entitiesToCreate","CREATE","findIndex","user_realm_id","realm_id","permission_realm_id","save","saveRoles","role_id","role_realm_id"],"sources":["../../../../../src/app/modules/identity/repositories/user.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User, UserPermission, UserRole } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { IUserIdentityRepository, IdentityProviderMapperElement } from '../../../../core/index.ts';\nimport { IdentityProviderMapperOperation } from '../../../../core/index.ts';\nimport type { UserRepository } from '../../../../adapters/database/domains/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport type UserIdentityRepositoryContext = {\n    repository: UserRepository,\n    userPermissionRepository: Repository<UserPermission>,\n    userRoleRepository: Repository<UserRole>,\n};\n\nexport class UserIdentityRepository implements IUserIdentityRepository {\n    private readonly repository: UserRepository;\n\n    private readonly userPermissionRepository: Repository<UserPermission>;\n\n    private readonly userRoleRepository: Repository<UserRole>;\n\n    constructor(ctx: UserIdentityRepositoryContext) {\n        this.repository = ctx.repository;\n        this.userPermissionRepository = ctx.userPermissionRepository;\n        this.userRoleRepository = ctx.userRoleRepository;\n    }\n\n    async findOneById(id: string): Promise<User | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<User | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<User | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<User | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<User | null> {\n        const query = this.repository.createQueryBuilder('user')\n            .leftJoinAndSelect('user.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('user.id = :id', { id: key });\n        } else {\n            query.where('user.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('user.realm_id = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`user.${column.databaseName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.USER,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        const entity = await query.getOne();\n        if (entity) {\n            return this.repository.extendOneWithEA(entity);\n        }\n\n        return null;\n    }\n\n    async saveOneWithEA(user: Partial<User>, extraAttributes: Record<string, any>): Promise<User> {\n        const entity = this.repository.create(user);\n        return this.repository.saveOneWithEA(entity, extraAttributes);\n    }\n\n    async savePermissions(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userPermissionRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            user_id: user.id,\n            permission_id: In(ids),\n        });\n\n        const entitiesToDelete : UserPermission[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.permission_id);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserPermission[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex(\n                (entity) => entity.permission_id === item.value,\n            );\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                user_id: user.id,\n                user_realm_id: user.realm_id,\n                permission_id: item.value as string,\n                permission_realm_id: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n\n    async saveRoles(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userRoleRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            user_id: user.id,\n            role_id: In(ids),\n        });\n\n        const entitiesToDelete : UserRole[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.role_id);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserRole[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex((entity) => entity.role_id === item.value);\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                user_id: user.id,\n                user_realm_id: user.realm_id,\n                role_id: item.value as string,\n                role_realm_id: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;AAuBA,IAAaK,yBAAb,MAAaA;CACQC;CAEAC;CAEAC;CAEjB,YAAYC,KAAoC;EAC5C,KAAKH,aAAaG,IAAIH;EACtB,KAAKC,2BAA2BE,IAAIF;EACpC,KAAKC,qBAAqBC,IAAID;CAClC;CAEA,MAAME,YAAYC,IAAkC;EAChD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAsC;EAClE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAsC;EAC5E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAkD;EAC9D,OAAO,KAAKZ,WAAWW,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA0C;EACtE,MAAMC,QAAQ,KAAKf,WAAWgB,mBAAmB,MAAA,CAAA,CAC5CC,kBAAkB,cAAc,OAAA;EAErC,MAAMC,OAAOxB,OAAOmB,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,iBAAiB,EAAEP,IAAIQ,IAAI,CAAA;OACpC;GACHE,MAAMH,MAAM,qBAAqB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAElE,IAAIP,UACA,IAAIpB,OAAOoB,QAAAA,GACPC,MAAMO,SAAS,4BAA4B,EAAEC,SAAST,SAAS,CAAA;QAE/DC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EAEA,MAAM,EAAEI,YAAY,KAAKzB,WAAW0B;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,QAAQF,OAAOG,cAAc;EAIrD,IAAIZ,MACAH,MAAMgB,MACFpC,kBAAkB;GACdqC,QAAQlC,YAAYmC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,MAAMqB,SAAS,MAAMnB,MAAMoB,OAAM;EACjC,IAAID,QACA,OAAO,KAAKlC,WAAWoC,gBAAgBF,MAAAA;EAG3C,OAAO;CACX;CAEA,MAAMG,cAAcC,MAAqBC,iBAAqD;EAC1F,MAAML,SAAS,KAAKlC,WAAWwC,OAAOF,IAAAA;EACtC,OAAO,KAAKtC,WAAWqC,cAAcH,QAAQK,eAAAA;CACjD;CAEA,MAAME,gBAAgBH,MAAYI,OAAuD;EACrF,MAAM,EAAEzC,0BAA0BD,eAAe;EAEjD,MAAM2C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcpD,gCAAgCqD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMnD,WAAWoD,OAAO;GACrCC,SAASf,KAAKjC;GACdiD,eAAe1D,GAAG+C,GAAAA;EACtB,CAAA;EAEA,MAAMY,mBAAsC,CAAA;EAC5C,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOoB,aACrCE,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAM3D,WAAW4D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAsC,CAAA;EAC5C,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcpD,gCAAgCiE,QACnD;GAMJ,IAHcX,SAASY,WAClB7B,WAAWA,OAAOoB,kBAAkBT,KAAKC,KAE1CU,MAAU,IACV;GAGJ,MAAMtB,SAASlC,WAAWwC,OAAO;IAC7Ba,SAASf,KAAKjC;IACd2D,eAAe1B,KAAK2B;IACpBX,eAAeT,KAAKC;IACpBoB,qBAAqBrB,KAAKtB;GAC9B,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAM3D,WAAWmE,KAAKN,gBAAAA;CAE9B;CAEA,MAAMO,UAAU9B,MAAYI,OAAuD;EAC/E,MAAM,EAAExC,oBAAoBF,eAAe;EAE3C,MAAM2C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcpD,gCAAgCqD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMnD,WAAWoD,OAAO;GACrCC,SAASf,KAAKjC;GACdgE,SAASzE,GAAG+C,GAAAA;EAChB,CAAA;EAEA,MAAMY,mBAAgC,CAAA;EACtC,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOmC,OACrCb,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAM3D,WAAW4D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAgC,CAAA;EACtC,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcpD,gCAAgCiE,QACnD;GAIJ,IADcX,SAASY,WAAW7B,WAAWA,OAAOmC,YAAYxB,KAAKC,KACjEU,MAAU,IACV;GAGJ,MAAMtB,SAASlC,WAAWwC,OAAO;IAC7Ba,SAASf,KAAKjC;IACd2D,eAAe1B,KAAK2B;IACpBI,SAASxB,KAAKC;IACdwB,eAAezB,KAAKtB;GACxB,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAM3D,WAAWmE,KAAKN,gBAAAA;CAE9B;AACJ"}
+{"version":3,"file":"user.mjs","names":["isUUID","buildRedisKeyPath","In","IdentityProviderMapperOperation","CachePrefix","UserIdentityRepository","repository","userPermissionRepository","userRoleRepository","ctx","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","propertyName","cache","prefix","USER","entity","getOne","extendOneWithEA","saveOneWithEA","user","extraAttributes","create","savePermissions","items","ids","map","item","value","idsToDelete","filter","operation","DELETE","entities","findBy","userId","permissionId","entitiesToDelete","index","indexOf","push","length","remove","entitiesToCreate","CREATE","findIndex","userRealmId","permissionRealmId","save","saveRoles","roleId","roleRealmId"],"sources":["../../../../../src/app/modules/identity/repositories/user.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User, UserPermission, UserRole } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { IUserIdentityRepository, IdentityProviderMapperElement } from '../../../../core/index.ts';\nimport { IdentityProviderMapperOperation } from '../../../../core/index.ts';\nimport type { UserRepository } from '../../../../adapters/database/domains/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport type UserIdentityRepositoryContext = {\n    repository: UserRepository,\n    userPermissionRepository: Repository<UserPermission>,\n    userRoleRepository: Repository<UserRole>,\n};\n\nexport class UserIdentityRepository implements IUserIdentityRepository {\n    private readonly repository: UserRepository;\n\n    private readonly userPermissionRepository: Repository<UserPermission>;\n\n    private readonly userRoleRepository: Repository<UserRole>;\n\n    constructor(ctx: UserIdentityRepositoryContext) {\n        this.repository = ctx.repository;\n        this.userPermissionRepository = ctx.userPermissionRepository;\n        this.userRoleRepository = ctx.userRoleRepository;\n    }\n\n    async findOneById(id: string): Promise<User | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<User | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<User | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<User | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<User | null> {\n        const query = this.repository.createQueryBuilder('user')\n            .leftJoinAndSelect('user.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('user.id = :id', { id: key });\n        } else {\n            query.where('user.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('user.realmId = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`user.${column.propertyName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.USER,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        const entity = await query.getOne();\n        if (entity) {\n            return this.repository.extendOneWithEA(entity);\n        }\n\n        return null;\n    }\n\n    async saveOneWithEA(user: Partial<User>, extraAttributes: Record<string, any>): Promise<User> {\n        const entity = this.repository.create(user);\n        return this.repository.saveOneWithEA(entity, extraAttributes);\n    }\n\n    async savePermissions(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userPermissionRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            userId: user.id,\n            permissionId: In(ids),\n        });\n\n        const entitiesToDelete : UserPermission[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.permissionId);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserPermission[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex(\n                (entity) => entity.permissionId === item.value,\n            );\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                userId: user.id,\n                userRealmId: user.realmId,\n                permissionId: item.value as string,\n                permissionRealmId: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n\n    async saveRoles(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userRoleRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            userId: user.id,\n            roleId: In(ids),\n        });\n\n        const entitiesToDelete : UserRole[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.roleId);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserRole[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex((entity) => entity.roleId === item.value);\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                userId: user.id,\n                userRealmId: user.realmId,\n                roleId: item.value as string,\n                roleRealmId: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;AAuBA,IAAaK,yBAAb,MAAaA;CACQC;CAEAC;CAEAC;CAEjB,YAAYC,KAAoC;EAC5C,KAAKH,aAAaG,IAAIH;EACtB,KAAKC,2BAA2BE,IAAIF;EACpC,KAAKC,qBAAqBC,IAAID;CAClC;CAEA,MAAME,YAAYC,IAAkC;EAChD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAsC;EAClE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAsC;EAC5E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAkD;EAC9D,OAAO,KAAKZ,WAAWW,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA0C;EACtE,MAAMC,QAAQ,KAAKf,WAAWgB,mBAAmB,MAAA,CAAA,CAC5CC,kBAAkB,cAAc,OAAA;EAErC,MAAMC,OAAOxB,OAAOmB,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,iBAAiB,EAAEP,IAAIQ,IAAI,CAAA;OACpC;GACHE,MAAMH,MAAM,qBAAqB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAElE,IAAIP,UACA,IAAIpB,OAAOoB,QAAAA,GACPC,MAAMO,SAAS,2BAA2B,EAAEC,SAAST,SAAS,CAAA;QAE9DC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EAEA,MAAM,EAAEI,YAAY,KAAKzB,WAAW0B;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,QAAQF,OAAOG,cAAc;EAIrD,IAAIZ,MACAH,MAAMgB,MACFpC,kBAAkB;GACdqC,QAAQlC,YAAYmC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,MAAMqB,SAAS,MAAMnB,MAAMoB,OAAM;EACjC,IAAID,QACA,OAAO,KAAKlC,WAAWoC,gBAAgBF,MAAAA;EAG3C,OAAO;CACX;CAEA,MAAMG,cAAcC,MAAqBC,iBAAqD;EAC1F,MAAML,SAAS,KAAKlC,WAAWwC,OAAOF,IAAAA;EACtC,OAAO,KAAKtC,WAAWqC,cAAcH,QAAQK,eAAAA;CACjD;CAEA,MAAME,gBAAgBH,MAAYI,OAAuD;EACrF,MAAM,EAAEzC,0BAA0BD,eAAe;EAEjD,MAAM2C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcpD,gCAAgCqD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMnD,WAAWoD,OAAO;GACrCC,QAAQf,KAAKjC;GACbiD,cAAc1D,GAAG+C,GAAAA;EACrB,CAAA;EAEA,MAAMY,mBAAsC,CAAA;EAC5C,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOoB,YACrCE,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAM3D,WAAW4D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAsC,CAAA;EAC5C,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcpD,gCAAgCiE,QACnD;GAMJ,IAHcX,SAASY,WAClB7B,WAAWA,OAAOoB,iBAAiBT,KAAKC,KAEzCU,MAAU,IACV;GAGJ,MAAMtB,SAASlC,WAAWwC,OAAO;IAC7Ba,QAAQf,KAAKjC;IACb2D,aAAa1B,KAAKf;IAClB+B,cAAcT,KAAKC;IACnBmB,mBAAmBpB,KAAKtB;GAC5B,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAM3D,WAAWkE,KAAKL,gBAAAA;CAE9B;CAEA,MAAMM,UAAU7B,MAAYI,OAAuD;EAC/E,MAAM,EAAExC,oBAAoBF,eAAe;EAE3C,MAAM2C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcpD,gCAAgCqD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMnD,WAAWoD,OAAO;GACrCC,QAAQf,KAAKjC;GACb+D,QAAQxE,GAAG+C,GAAAA;EACf,CAAA;EAEA,MAAMY,mBAAgC,CAAA;EACtC,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOkC,MACrCZ,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAM3D,WAAW4D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAgC,CAAA;EACtC,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcpD,gCAAgCiE,QACnD;GAIJ,IADcX,SAASY,WAAW7B,WAAWA,OAAOkC,WAAWvB,KAAKC,KAChEU,MAAU,IACV;GAGJ,MAAMtB,SAASlC,WAAWwC,OAAO;IAC7Ba,QAAQf,KAAKjC;IACb2D,aAAa1B,KAAKf;IAClB6C,QAAQvB,KAAKC;IACbuB,aAAaxB,KAAKtB;GACtB,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAM3D,WAAWkE,KAAKL,gBAAAA;CAE9B;AACJ"}

package/dist/app/modules/index.d.ts

@@ -6,6 +6,7 @@ export * from './http/index.ts';
 export * from './identity/index.ts';
 export * from './ldap/index.ts';
 export * from './logger/index.ts';
+export * from './metrics/index.ts';
 export * from './oauth2/index.ts';
 export * from './cache/index.ts';
 export * from './provisioning/index.ts';

package/dist/app/modules/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/app/modules/index.ts"],"names":[],"mappings":"AAOA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/app/modules/index.ts"],"names":[],"mappings":"AAOA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,gBAAgB,CAAC"}

package/dist/app/modules/index.mjs

@@ -13,37 +13,41 @@ import "./cache/index.mjs";
 import { SessionRepository } from "./authentication/repositories/session.mjs";
 import { AuthenticationModule } from "./authentication/module.mjs";
 import "./authentication/index.mjs";
-import { DatabaseInjectionKey } from "./database/constants.mjs";
-import { LoggerInjectionKey } from "./logger/constants.mjs";
-import { LoggerModule } from "./logger/module.mjs";
-import "./logger/index.mjs";
-import { DatabaseModule } from "./database/module.mjs";
 import { RealmRepositoryAdapter } from "./database/repositories/realm/repository.mjs";
 import { ClientRepositoryAdapter } from "./database/repositories/client/repository.mjs";
 import { ClientPermissionRepositoryAdapter } from "./database/repositories/client-permission/repository.mjs";
 import { ClientRoleRepositoryAdapter } from "./database/repositories/client-role/repository.mjs";
 import { ClientScopeRepositoryAdapter } from "./database/repositories/client-scope/repository.mjs";
+import { EventRepositoryAdapter } from "./database/repositories/event/repository.mjs";
 import { IdentityProviderRepositoryAdapter } from "./database/repositories/identity-provider/repository.mjs";
+import { KeyRepositoryAdapter } from "./database/repositories/key/repository.mjs";
 import { PermissionRepositoryAdapter } from "./database/repositories/permission/repository.mjs";
 import { PermissionPolicyRepositoryAdapter } from "./database/repositories/permission-policy/repository.mjs";
 import { PermissionDatabaseProvider } from "./database/repositories/permission-provider/module.mjs";
 import { PolicyRepositoryAdapter } from "./database/repositories/policy/repository.mjs";
-import { RobotRepositoryAdapter } from "./database/repositories/robot/repository.mjs";
-import { RobotPermissionRepositoryAdapter } from "./database/repositories/robot-permission/repository.mjs";
-import { RobotRoleRepositoryAdapter } from "./database/repositories/robot-role/repository.mjs";
 import { RoleRepositoryAdapter } from "./database/repositories/role/repository.mjs";
 import { RoleAttributeRepositoryAdapter } from "./database/repositories/role-attribute/repository.mjs";
 import { RolePermissionRepositoryAdapter } from "./database/repositories/role-permission/repository.mjs";
 import { ScopeRepositoryAdapter } from "./database/repositories/scope/repository.mjs";
+import { TrustAnchorRepositoryAdapter } from "./database/repositories/trust-anchor/repository.mjs";
 import { UserRepositoryAdapter } from "./database/repositories/user/repository.mjs";
 import { UserAttributeRepositoryAdapter } from "./database/repositories/user-attribute/repository.mjs";
+import { UserAuthenticatorRepositoryAdapter } from "./database/repositories/user-authenticator/repository.mjs";
 import { UserPermissionRepositoryAdapter } from "./database/repositories/user-permission/repository.mjs";
 import { UserRoleRepositoryAdapter } from "./database/repositories/user-role/repository.mjs";
 import { IdentityProviderRoleMappingRepositoryAdapter } from "./database/repositories/identity-provider-role-mapping/repository.mjs";
+import { DatabaseInjectionKey } from "./database/constants.mjs";
+import { LoggerInjectionKey } from "./logger/constants.mjs";
+import { LoggerModule } from "./logger/module.mjs";
+import "./logger/index.mjs";
+import { DatabaseModule } from "./database/module.mjs";
 import "./database/index.mjs";
 import { ComponentsModule } from "./components/module.mjs";
 import "./components/index.mjs";
 import { HTTPInjectionKey } from "./http/constants.mjs";
+import { MetricsInjectionKey } from "./metrics/constants.mjs";
+import { PromAuthFlowMetrics } from "./metrics/prom.mjs";
+import "./metrics/index.mjs";
 import { OAuth2InjectionToken } from "./oauth2/constants.mjs";
 import { IdentityInjectionKey } from "./identity/constants.mjs";
 import { IdentityProviderAccountRepository } from "./identity/repositories/provider/account/module.mjs";
@@ -51,7 +55,6 @@ import { IdentityProviderAttributeMappingRepository } from "./identity/repositor
 import { IdentityProviderPermissionMappingRepository } from "./identity/repositories/provider/mapper/permission.mjs";
 import { IdentityProviderRoleMappingRepository } from "./identity/repositories/provider/mapper/role.mjs";
 import { ClientIdentityRepository } from "./identity/repositories/client.mjs";
-import { RobotIdentityRepository } from "./identity/repositories/robot.mjs";
 import { UserIdentityRepository } from "./identity/repositories/user.mjs";
 import { LDAPInjectionKey } from "./ldap/constants.mjs";
 import { LdapModule } from "./ldap/module.mjs";
@@ -72,4 +75,4 @@ import { ProvisionerModule } from "./provisioning/module.mjs";
 import "./provisioning/index.mjs";
 import { RuntimeModule } from "./runtime/module.mjs";
 import "./runtime/index.mjs";
-export { AuthenticationInjectionKey, AuthenticationModule, CacheInjectionKey, CacheModule, ClientIdentityRepository, ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DatabaseInjectionKey, DatabaseModule, DefaultProvisioningSource, FileProvisioningSource, HTTPInjectionKey, HTTPModule, IdentityInjectionKey, IdentityModule, IdentityProviderAccountRepository, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, LDAPInjectionKey, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, ProvisionerModule, RealmRepositoryAdapter, RobotIdentityRepository, RobotPermissionRepositoryAdapter, RobotRepositoryAdapter, RobotRoleRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, RuntimeModule, ScopeRepositoryAdapter, SessionRepository, UserAttributeRepositoryAdapter, UserIdentityRepository, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter, expandToOrigins, getAppOrigins };
+export { AuthenticationInjectionKey, AuthenticationModule, CacheInjectionKey, CacheModule, ClientIdentityRepository, ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DatabaseInjectionKey, DatabaseModule, DefaultProvisioningSource, EventRepositoryAdapter, FileProvisioningSource, HTTPInjectionKey, HTTPModule, IdentityInjectionKey, IdentityModule, IdentityProviderAccountRepository, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, KeyRepositoryAdapter, LDAPInjectionKey, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, MetricsInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, PromAuthFlowMetrics, ProvisionerModule, RealmRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, RuntimeModule, ScopeRepositoryAdapter, SessionRepository, TrustAnchorRepositoryAdapter, UserAttributeRepositoryAdapter, UserAuthenticatorRepositoryAdapter, UserIdentityRepository, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter, expandToOrigins, getAppOrigins };

package/dist/app/modules/mail/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/mail/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAMrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAExC,qBAAa,UAAW,YAAW,OAAO;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;;IAO1B,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAYpD"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/mail/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAMrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAExC,qBAAa,UAAW,YAAW,OAAO;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;;IAO1B,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAoBpD"}

package/dist/app/modules/mail/module.mjs

@@ -19,7 +19,8 @@ var MailModule = class {
 		this.dependencies = [ModuleName.CONFIG];
 	}
 	async setup(container) {
-		container.register(MailTemplateRendererInjectionKey, { useFactory: () => new MailTemplateRenderer() });
+		if (!container.has(MailTemplateRendererInjectionKey)) container.register(MailTemplateRendererInjectionKey, { useFactory: () => new MailTemplateRenderer() });
+		if (container.has(MailInjectionKey)) return;
 		const result = container.tryResolve(ConfigInjectionKey);
 		if (!result.success || !result.data.smtp) {
 			container.register(MailInjectionKey, { useFactory: () => new VoidMailClientAdapter() });

package/dist/app/modules/mail/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["ModuleName","MailTemplateRenderer","SMTPMailClientAdapter","VoidMailClientAdapter","MailInjectionKey","MailTemplateRendererInjectionKey","ConfigInjectionKey","MailModule","name","dependencies","MAIL","CONFIG","setup","container","register","useFactory","result","tryResolve","success","data","smtp"],"sources":["../../../../src/app/modules/mail/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { MailTemplateRenderer } from '../../../core/index.ts';\nimport { SMTPMailClientAdapter, VoidMailClientAdapter } from './adapter/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from './constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IContainer } from 'eldin';\n\nexport class MailModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.MAIL;\n        this.dependencies = [ModuleName.CONFIG];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        container.register(MailTemplateRendererInjectionKey, { useFactory: () => new MailTemplateRenderer() });\n\n        const result = container.tryResolve(ConfigInjectionKey);\n        if (!result.success || !result.data.smtp) {\n            container.register(MailInjectionKey, { useFactory: () => new VoidMailClientAdapter() });\n\n            return;\n        }\n\n        container.register(MailInjectionKey, { useFactory: () => new SMTPMailClientAdapter(result.data.smtp) });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAeA,IAAaO,aAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOR,WAAWU;EACvB,KAAKD,eAAe,CAACT,WAAWW,MAAAA;CACpC;CAEA,MAAMC,MAAMC,WAAsC;EAC9CA,UAAUC,SAAST,kCAAkC,EAAEU,kBAAkB,IAAId,qBAAAA,EAAuB,CAAA;EAEpG,MAAMe,SAASH,UAAUI,WAAWX,kBAAAA;EACpC,IAAI,CAACU,OAAOE,WAAW,CAACF,OAAOG,KAAKC,MAAM;GACtCP,UAAUC,SAASV,kBAAkB,EAAEW,kBAAkB,IAAIZ,sBAAAA,EAAwB,CAAA;GAErF;EACJ;EAEAU,UAAUC,SAASV,kBAAkB,EAAEW,kBAAkB,IAAIb,sBAAsBc,OAAOG,KAAKC,IAAI,EAAE,CAAA;CACzG;AACJ"}
+{"version":3,"file":"module.mjs","names":["ModuleName","MailTemplateRenderer","SMTPMailClientAdapter","VoidMailClientAdapter","MailInjectionKey","MailTemplateRendererInjectionKey","ConfigInjectionKey","MailModule","name","dependencies","MAIL","CONFIG","setup","container","has","register","useFactory","result","tryResolve","success","data","smtp"],"sources":["../../../../src/app/modules/mail/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { MailTemplateRenderer } from '../../../core/index.ts';\nimport { SMTPMailClientAdapter, VoidMailClientAdapter } from './adapter/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from './constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IContainer } from 'eldin';\n\nexport class MailModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.MAIL;\n        this.dependencies = [ModuleName.CONFIG];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        if (!container.has(MailTemplateRendererInjectionKey)) {\n            container.register(MailTemplateRendererInjectionKey, { useFactory: () => new MailTemplateRenderer() });\n        }\n\n        // A pre-registered client wins (test injection — mirrors the\n        // UIHttpClient pattern), so a fake can capture mailed OTP codes.\n        if (container.has(MailInjectionKey)) {\n            return;\n        }\n\n        const result = container.tryResolve(ConfigInjectionKey);\n        if (!result.success || !result.data.smtp) {\n            container.register(MailInjectionKey, { useFactory: () => new VoidMailClientAdapter() });\n\n            return;\n        }\n\n        container.register(MailInjectionKey, { useFactory: () => new SMTPMailClientAdapter(result.data.smtp) });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAeA,IAAaO,aAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOR,WAAWU;EACvB,KAAKD,eAAe,CAACT,WAAWW,MAAAA;CACpC;CAEA,MAAMC,MAAMC,WAAsC;EAC9C,IAAI,CAACA,UAAUC,IAAIT,gCAAAA,GACfQ,UAAUE,SAASV,kCAAkC,EAAEW,kBAAkB,IAAIf,qBAAAA,EAAuB,CAAA;EAKxG,IAAIY,UAAUC,IAAIV,gBAAAA,GACd;EAGJ,MAAMa,SAASJ,UAAUK,WAAWZ,kBAAAA;EACpC,IAAI,CAACW,OAAOE,WAAW,CAACF,OAAOG,KAAKC,MAAM;GACtCR,UAAUE,SAASX,kBAAkB,EAAEY,kBAAkB,IAAIb,sBAAAA,EAAwB,CAAA;GAErF;EACJ;EAEAU,UAAUE,SAASX,kBAAkB,EAAEY,kBAAkB,IAAId,sBAAsBe,OAAOG,KAAKC,IAAI,EAAE,CAAA;CACzG;AACJ"}

package/dist/app/modules/metrics/constants.d.ts

@@ -0,0 +1,4 @@
+import { TypedToken } from 'eldin';
+import type { IAuthFlowMetrics } from '../../../core/index.ts';
+export declare const MetricsInjectionKey: TypedToken<IAuthFlowMetrics>;
+//# sourceMappingURL=constants.d.ts.map

package/dist/app/modules/metrics/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/metrics/constants.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,eAAO,MAAM,mBAAmB,8BAA8C,CAAC"}

package/dist/app/modules/metrics/constants.mjs

@@ -0,0 +1,10 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { TypedToken } from "eldin";
+//#region src/app/modules/metrics/constants.ts
+const MetricsInjectionKey = new TypedToken("Metrics");
+//#endregion
+export { MetricsInjectionKey };
+
+//# sourceMappingURL=constants.mjs.map

package/dist/app/modules/metrics/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","names":["TypedToken","MetricsInjectionKey"],"sources":["../../../../src/app/modules/metrics/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TypedToken } from 'eldin';\nimport type { IAuthFlowMetrics } from '../../../core/index.ts';\n\nexport const MetricsInjectionKey = new TypedToken<IAuthFlowMetrics>('Metrics');\n"],"mappings":";;;;;AAUA,MAAaC,sBAAsB,IAAID,WAA6B,SAAA"}

package/dist/app/modules/metrics/index.d.ts

@@ -0,0 +1,3 @@
+export * from './constants.ts';
+export * from './prom.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/metrics/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/metrics/index.ts"],"names":[],"mappings":"AAOA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC"}

package/dist/app/modules/metrics/index.mjs

@@ -0,0 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { MetricsInjectionKey } from "./constants.mjs";
+import { PromAuthFlowMetrics } from "./prom.mjs";
+export { MetricsInjectionKey, PromAuthFlowMetrics };

package/dist/app/modules/metrics/prom.d.ts

@@ -0,0 +1,15 @@
+import { Counter } from 'prom-client';
+import type { OAuth2TokenGrant } from '@authup/specs';
+import type { AuthFlowAuthorizeOutcome, AuthFlowLoginResult, IAuthFlowMetrics } from '../../../core/index.ts';
+export declare class PromAuthFlowMetrics implements IAuthFlowMetrics {
+    protected loginCounter: Counter<'result'>;
+    protected tokenGrantCounter: Counter<'grant_type'>;
+    protected authorizeCounter: Counter<'outcome'>;
+    protected refreshReplayCounter: Counter;
+    constructor();
+    recordLogin(result: AuthFlowLoginResult): void;
+    recordTokenGrant(grantType: `${OAuth2TokenGrant}`): void;
+    recordAuthorize(outcome: AuthFlowAuthorizeOutcome): void;
+    recordRefreshReplay(): void;
+}
+//# sourceMappingURL=prom.d.ts.map

package/dist/app/modules/metrics/prom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/metrics/prom.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAY,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EACR,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EACnB,MAAM,wBAAwB,CAAC;AAuBhC,qBAAa,mBAAoB,YAAW,gBAAgB;IACxD,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE1C,SAAS,CAAC,iBAAiB,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAEnD,SAAS,CAAC,gBAAgB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAE/C,SAAS,CAAC,oBAAoB,EAAE,OAAO,CAAC;;IAwBxC,WAAW,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI;IAI9C,gBAAgB,CAAC,SAAS,EAAE,GAAG,gBAAgB,EAAE,GAAG,IAAI;IAIxD,eAAe,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI;IAIxD,mBAAmB,IAAI,IAAI;CAG9B"}

package/dist/app/modules/metrics/prom.mjs

@@ -0,0 +1,42 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { Counter, register } from "prom-client";
+//#region src/app/modules/metrics/prom.ts
+function getOrCreateCounter(name, help, labelNames = []) {
+	const existing = register.getSingleMetric(name);
+	if (existing) return existing;
+	return new Counter({
+		name,
+		help,
+		labelNames
+	});
+}
+var PromAuthFlowMetrics = class {
+	loginCounter;
+	tokenGrantCounter;
+	authorizeCounter;
+	refreshReplayCounter;
+	constructor() {
+		this.loginCounter = getOrCreateCounter("authup_login_total", "Password-grant login attempts by result.", ["result"]);
+		this.tokenGrantCounter = getOrCreateCounter("authup_token_grant_total", "Successful token grants by grant_type; failures appear in the http_request_duration status codes.", ["grant_type"]);
+		this.authorizeCounter = getOrCreateCounter("authup_authorize_total", "Authorization decisions by outcome.", ["outcome"]);
+		this.refreshReplayCounter = getOrCreateCounter("authup_refresh_replay_total", "Detected refresh-token replays (family revocations).");
+	}
+	recordLogin(result) {
+		this.loginCounter.inc({ result });
+	}
+	recordTokenGrant(grantType) {
+		this.tokenGrantCounter.inc({ grant_type: grantType });
+	}
+	recordAuthorize(outcome) {
+		this.authorizeCounter.inc({ outcome });
+	}
+	recordRefreshReplay() {
+		this.refreshReplayCounter.inc();
+	}
+};
+//#endregion
+export { PromAuthFlowMetrics };
+
+//# sourceMappingURL=prom.mjs.map

package/dist/app/modules/metrics/prom.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom.mjs","names":["Counter","register","getOrCreateCounter","name","help","labelNames","existing","getSingleMetric","PromAuthFlowMetrics","loginCounter","tokenGrantCounter","authorizeCounter","refreshReplayCounter","recordLogin","result","inc","recordTokenGrant","grantType","grant_type","recordAuthorize","outcome","recordRefreshReplay"],"sources":["../../../../src/app/modules/metrics/prom.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Counter, register } from 'prom-client';\nimport type { OAuth2TokenGrant } from '@authup/specs';\nimport type {\n    AuthFlowAuthorizeOutcome,\n    AuthFlowLoginResult,\n    IAuthFlowMetrics,\n} from '../../../core/index.ts';\n\n// Counters are created against prom-client's default registry — the\n// @routup/prometheus handler serves that registry, so no extra wiring is\n// needed. getSingleMetric keeps construction idempotent across app instances\n// in one process (prom-client throws on duplicate metric names).\nfunction getOrCreateCounter<T extends string>(\n    name: string,\n    help: string,\n    labelNames: T[] = [],\n): Counter<T> {\n    const existing = register.getSingleMetric(name);\n    if (existing) {\n        return existing as Counter<T>;\n    }\n\n    return new Counter<T>({\n        name, \n        help, \n        labelNames, \n    });\n}\n\nexport class PromAuthFlowMetrics implements IAuthFlowMetrics {\n    protected loginCounter: Counter<'result'>;\n\n    protected tokenGrantCounter: Counter<'grant_type'>;\n\n    protected authorizeCounter: Counter<'outcome'>;\n\n    protected refreshReplayCounter: Counter;\n\n    constructor() {\n        this.loginCounter = getOrCreateCounter(\n            'authup_login_total',\n            'Password-grant login attempts by result.',\n            ['result'],\n        );\n        this.tokenGrantCounter = getOrCreateCounter(\n            'authup_token_grant_total',\n            'Successful token grants by grant_type; failures appear in the http_request_duration status codes.',\n            ['grant_type'],\n        );\n        this.authorizeCounter = getOrCreateCounter(\n            'authup_authorize_total',\n            'Authorization decisions by outcome.',\n            ['outcome'],\n        );\n        this.refreshReplayCounter = getOrCreateCounter(\n            'authup_refresh_replay_total',\n            'Detected refresh-token replays (family revocations).',\n        );\n    }\n\n    recordLogin(result: AuthFlowLoginResult): void {\n        this.loginCounter.inc({ result });\n    }\n\n    recordTokenGrant(grantType: `${OAuth2TokenGrant}`): void {\n        this.tokenGrantCounter.inc({ grant_type: grantType });\n    }\n\n    recordAuthorize(outcome: AuthFlowAuthorizeOutcome): void {\n        this.authorizeCounter.inc({ outcome });\n    }\n\n    recordRefreshReplay(): void {\n        this.refreshReplayCounter.inc();\n    }\n}\n"],"mappings":";;;;;AAmBA,SAASE,mBACLC,MACAC,MACAC,aAAkB,CAAA,GAAE;CAEpB,MAAMC,WAAWL,SAASM,gBAAgBJ,IAAAA;CAC1C,IAAIG,UACA,OAAOA;CAGX,OAAO,IAAIN,QAAW;EAClBG;EACAC;EACAC;CACJ,CAAA;AACJ;AAEA,IAAaG,sBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,cAAc;EACV,KAAKH,eAAeP,mBAChB,sBACA,4CACA,CAAC,QAAA,CAAS;EAEd,KAAKQ,oBAAoBR,mBACrB,4BACA,qGACA,CAAC,YAAA,CAAa;EAElB,KAAKS,mBAAmBT,mBACpB,0BACA,uCACA,CAAC,SAAA,CAAU;EAEf,KAAKU,uBAAuBV,mBACxB,+BACA,sDAAA;CAER;CAEAW,YAAYC,QAAmC;EAC3C,KAAKL,aAAaM,IAAI,EAAED,OAAO,CAAA;CACnC;CAEAE,iBAAiBC,WAAwC;EACrD,KAAKP,kBAAkBK,IAAI,EAAEG,YAAYD,UAAU,CAAA;CACvD;CAEAE,gBAAgBC,SAAyC;EACrD,KAAKT,iBAAiBI,IAAI,EAAEK,QAAQ,CAAA;CACxC;CAEAC,sBAA4B;EACxB,KAAKT,qBAAqBG,IAAG;CACjC;AACJ"}

package/dist/app/modules/oauth2/constants.d.ts

@@ -1,5 +1,5 @@
 import { TypedToken } from 'eldin';
-import type { IOAuth2AuthorizationCodeIssuer, IOAuth2AuthorizationCodeRepository, IOAuth2AuthorizationCodeRequestVerifier, IOAuth2AuthorizationCodeVerifier, IOAuth2AuthorizationStateManager, IOAuth2AuthorizeStateRepository, IOAuth2ClientRepository, IOAuth2KeyRepository, IOAuth2OpenIDTokenIssuer, IOAuth2ScopeRepository, IOAuth2TokenIssuer, IOAuth2TokenRepository, IOAuth2TokenRevoker, IOAuth2TokenSigner, IOAuth2TokenVerifier, ISessionTokenRepository } from '../../../core/index.ts';
+import type { IConsentRepository, IKeyRepository, IKeyStore, IOAuth2AuthorizationCodeIssuer, IOAuth2AuthorizationCodeRepository, IOAuth2AuthorizationCodeRequestVerifier, IOAuth2AuthorizationCodeVerifier, IOAuth2AuthorizationStateManager, IOAuth2AuthorizeStateRepository, IOAuth2ClientRepository, IOAuth2OpenIDTokenIssuer, IOAuth2ScopeRepository, IOAuth2TokenIssuer, IOAuth2TokenRepository, IOAuth2TokenRevoker, IOAuth2TokenSigner, IOAuth2TokenVerifier, ISessionTokenRepository } from '../../../core/index.ts';
 export declare const OAuth2InjectionToken: {
     readonly ClientRepository: TypedToken<IOAuth2ClientRepository>;
     readonly ScopeRepository: TypedToken<IOAuth2ScopeRepository>;
@@ -9,12 +9,19 @@ export declare const OAuth2InjectionToken: {
     readonly AuthorizationStateManager: TypedToken<IOAuth2AuthorizationStateManager>;
     readonly AuthorizationCodeRequestVerifier: TypedToken<IOAuth2AuthorizationCodeRequestVerifier>;
     readonly AuthorizationStateRepository: TypedToken<IOAuth2AuthorizeStateRepository>;
-    readonly KeyRepository: TypedToken<IOAuth2KeyRepository>;
+    /**
+     * One adapter instance serving both key ports: the material-resolving
+     * store (signer / verifier / realm cipher) and the entity CRUD surface
+     * (key management API).
+     */
+    readonly KeyStore: TypedToken<IKeyStore & IKeyRepository>;
     readonly AccessTokenIssuer: TypedToken<IOAuth2TokenIssuer>;
+    readonly MfaTokenIssuer: TypedToken<IOAuth2TokenIssuer>;
     readonly OpenIDTokenIssuer: TypedToken<IOAuth2OpenIDTokenIssuer>;
     readonly RefreshTokenIssuer: TypedToken<IOAuth2TokenIssuer>;
     readonly TokenRepository: TypedToken<IOAuth2TokenRepository>;
     readonly SessionTokenRepository: TypedToken<ISessionTokenRepository>;
+    readonly ConsentRepository: TypedToken<IConsentRepository>;
     readonly TokenRevoker: TypedToken<IOAuth2TokenRevoker>;
     readonly TokenSigner: TypedToken<IOAuth2TokenSigner>;
     readonly TokenVerifier: TypedToken<IOAuth2TokenVerifier>;

package/dist/app/modules/oauth2/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/oauth2/constants.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,KAAK,EACR,8BAA8B,EAC9B,kCAAkC,EAClC,uCAAuC,EACvC,gCAAgC,EAChC,gCAAgC,EAChC,+BAA+B,EAC/B,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EAC1B,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;CAuBvB,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/oauth2/constants.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,KAAK,EACR,kBAAkB,EAClB,cAAc,EACd,SAAS,EACT,8BAA8B,EAC9B,kCAAkC,EAClC,uCAAuC,EACvC,gCAAgC,EAChC,gCAAgC,EAChC,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EAC1B,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,oBAAoB;;;;;;;;;IAY7B;;;;OAIG;;;;;;;;;;;;CAcG,CAAC"}

package/dist/app/modules/oauth2/constants.mjs

@@ -12,12 +12,18 @@ const OAuth2InjectionToken = {
 	AuthorizationStateManager: new TypedToken("AuthorizationStateManager"),
 	AuthorizationCodeRequestVerifier: new TypedToken("AuthorizationCodeRequestVerifier"),
 	AuthorizationStateRepository: new TypedToken("AuthorizationStateRepository"),
-	KeyRepository: new TypedToken("KeyRepository"),
+	/**
+	* One adapter instance serving both key ports: the material-resolving
+	* store (signer / verifier / realm cipher) and the entity CRUD surface
+	* (key management API).
+	*/ KeyStore: new TypedToken("KeyStore"),
 	AccessTokenIssuer: new TypedToken("AccessTokenIssuer"),
+	MfaTokenIssuer: new TypedToken("MfaTokenIssuer"),
 	OpenIDTokenIssuer: new TypedToken("OpenIDTokenIssuer"),
 	RefreshTokenIssuer: new TypedToken("RefreshTokenIssuer"),
 	TokenRepository: new TypedToken("TokenRepository"),
 	SessionTokenRepository: new TypedToken("SessionTokenRepository"),
+	ConsentRepository: new TypedToken("OAuth2ConsentRepository"),
 	TokenRevoker: new TypedToken("TokenRevoker"),
 	TokenSigner: new TypedToken("TokenSigner"),
 	TokenVerifier: new TypedToken("TokenVerifier")