npm - @authup/server-core - Versions diffs - 1.0.0-beta.53 → 1.0.0-beta.54 - Mend

@authup/server-core 1.0.0-beta.53 → 1.0.0-beta.54

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1152) hide show

package/dist/adapters/http/controllers/entities/client-permission/utils/validation.mjs CHANGED Viewed

@@ -10,9 +10,9 @@ import { z } from "zod";
 var ClientPermissionRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
-		this.mount("client_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("permission_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("policy_id", { optional: true }, createValidator(z.uuid().nullable()));
+		this.mount("clientId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("permissionId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("policyId", { optional: true }, createValidator(z.uuid().nullable()));
 	}
 };
 //#endregion

package/dist/adapters/http/controllers/entities/client-permission/utils/validation.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","ClientPermissionRequestValidator","initialize","mount","group","CREATE","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/client-permission/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { ClientPermissionEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class ClientPermissionRequestValidator extends Container<\n ClientPermissionEntity\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n '~~client_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n '~~permission_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n '~~policy_id~~',\n { optional: true },\n createValidator(z.uuid().nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,mCAAb,cAAsDH,UAAAA;CAGxCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,~~aACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,~~iBACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,~~aACA~~,EAAEI,UAAU,KAAK,GACjBV,gBAAgBE,EAAEO,KAAI,CAAA,CAAGE,SAAQ,CAAA,CAAA;CAEzC;AACJ"}
1	+ {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","ClientPermissionRequestValidator","initialize","mount","group","CREATE","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/client-permission/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { ClientPermissionEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class ClientPermissionRequestValidator extends Container<\n ClientPermissionEntity\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'clientId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'permissionId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'policyId',\n { optional: true },\n createValidator(z.uuid().nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,mCAAb,cAAsDH,UAAAA;CAGxCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,YACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,gBACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,YACA,EAAEI,UAAU,KAAK,GACjBV,gBAAgBE,EAAEO,KAAI,CAAA,CAAGE,SAAQ,CAAA,CAAA;CAEzC;AACJ"}

package/dist/adapters/http/controllers/entities/client-role/utils/validation.mjs CHANGED Viewed

@@ -10,8 +10,8 @@ import { z } from "zod";
 var ClientRoleRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
-		this.mount("client_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("role_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("clientId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("roleId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
 	}
 };
 //#endregion

package/dist/adapters/http/controllers/entities/client-role/utils/validation.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","ClientRoleRequestValidator","initialize","mount","group","CREATE","uuid"],"sources":["../../../../../../../src/adapters/http/controllers/entities/client-role/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { ClientRole } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class ClientRoleRequestValidator extends Container<\n ClientRole\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n '~~client_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n '~~role_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,6BAAb,cAAgDH,UAAAA;CAGlCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,~~aACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,~~WACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;CAE9B;AACJ"}
1	+ {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","ClientRoleRequestValidator","initialize","mount","group","CREATE","uuid"],"sources":["../../../../../../../src/adapters/http/controllers/entities/client-role/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { ClientRole } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class ClientRoleRequestValidator extends Container<\n ClientRole\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'clientId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'roleId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,6BAAb,cAAgDH,UAAAA;CAGlCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,YACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,UACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;CAE9B;AACJ"}

package/dist/adapters/http/controllers/entities/client-scope/utils/validator.mjs CHANGED Viewed

@@ -10,8 +10,8 @@ import { z } from "zod";
 var ClientScopeRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
-		this.mount("client_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("scope_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("clientId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("scopeId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
 	}
 };
 //#endregion

package/dist/adapters/http/controllers/entities/client-scope/utils/validator.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validator.mjs","names":["createValidator","Container","z","RequestHandlerOperation","ClientScopeRequestValidator","initialize","mount","group","CREATE","uuid"],"sources":["../../../../../../../src/adapters/http/controllers/entities/client-scope/utils/validator.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { ClientScopeEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class ClientScopeRequestValidator extends Container<ClientScopeEntity> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n '~~client_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n '~~scope_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,8BAAb,cAAiDH,UAAAA;CACnCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,~~aACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,~~YACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;CAE9B;AACJ"}
1	+ {"version":3,"file":"validator.mjs","names":["createValidator","Container","z","RequestHandlerOperation","ClientScopeRequestValidator","initialize","mount","group","CREATE","uuid"],"sources":["../../../../../../../src/adapters/http/controllers/entities/client-scope/utils/validator.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { ClientScopeEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class ClientScopeRequestValidator extends Container<ClientScopeEntity> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'clientId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'scopeId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,8BAAb,cAAiDH,UAAAA;CACnCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,YACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,WACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;CAE9B;AACJ"}

package/dist/adapters/http/controllers/entities/identity-provider/module.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/module.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAMxC,OAAO,KAAK,EAAE,gBAAgB,EAAkC,MAAM,kBAAkB,CAAC;AAiBzF,OAAO,KAAK,EACR,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,6BAA6B,EAChC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EACR,+BAA+B,EAC/B,2BAA2B,EAC3B,4BAA4B,EAC5B,8BAA8B,EAC9B,uCAAuC,EACvC,gCAAgC,EAChC,uBAAuB,EACvB,gBAAgB,EAEnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,uCAAuC,~~EAG1C~~,MAAM,8BAA8B,CAAC;~~AAWtC~~,OAAO,KAAK,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAEvG,qBAEa,0BAA0B;IACnC,SAAS,CAAC,OAAO,EAAE,iCAAiC,CAAC;IAErD,SAAS,CAAC,UAAU,EAAE,2BAA2B,CAAC;IAElD,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAE5C,SAAS,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;IAEpD,SAAS,CAAC,cAAc,EAAE,+BAA+B,CAAC;IAE1D,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,oBAAoB,EAAG,uCAAuC,CAAC;IAEzE,SAAS,CAAC,YAAY,EAAG,gCAAgC,CAAC;IAE1D,SAAS,CAAC,UAAU,EAAG,8BAA8B,CAAC;IAEtD,SAAS,CAAC,qBAAqB,CAAC,EAAG,4BAA4B,CAAC;gBAIpD,GAAG,EAAE,iCAAiC;IAgB5C,YAAY,CACF,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;~~IA+BhD~~,WAAW,CACA,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,gBAAgB,CAAC;IA0BtB,YAAY,CACD,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,6BAA6B,EAChC,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAKvB,GAAG,CACQ,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,2BAA2B,EAC9B,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAKvB,YAAY,CACD,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IA6BvB,WAAW,CACJ,IAAI,EAAE,6BAA6B,EAChC,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAOvB,YAAY,CACD,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;IAgD1B,WAAW,CACA,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;YAyGlB,KAAK;IA6FnB,OAAO,CAAC,uBAAuB;YAmBjB,OAAO;YAYP,sBAAsB;YAWtB,wBAAwB;CAWzC"}
1	+ {"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/module.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAMxC,OAAO,KAAK,EAAE,gBAAgB,EAAkC,MAAM,kBAAkB,CAAC;AAiBzF,OAAO,KAAK,EACR,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,6BAA6B,EAChC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EACR,+BAA+B,EAC/B,2BAA2B,EAC3B,4BAA4B,EAC5B,8BAA8B,EAC9B,uCAAuC,EACvC,gCAAgC,EAChC,uBAAuB,EACvB,gBAAgB,EAEnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,uCAAuC,EAK1C,MAAM,8BAA8B,CAAC;AAYtC,OAAO,KAAK,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAEvG,qBAEa,0BAA0B;IACnC,SAAS,CAAC,OAAO,EAAE,iCAAiC,CAAC;IAErD,SAAS,CAAC,UAAU,EAAE,2BAA2B,CAAC;IAElD,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAE5C,SAAS,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;IAEpD,SAAS,CAAC,cAAc,EAAE,+BAA+B,CAAC;IAE1D,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,oBAAoB,EAAG,uCAAuC,CAAC;IAEzE,SAAS,CAAC,YAAY,EAAG,gCAAgC,CAAC;IAE1D,SAAS,CAAC,UAAU,EAAG,8BAA8B,CAAC;IAEtD,SAAS,CAAC,qBAAqB,CAAC,EAAG,4BAA4B,CAAC;gBAIpD,GAAG,EAAE,iCAAiC;IAgB5C,YAAY,CACF,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IAoChD,WAAW,CACA,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,gBAAgB,CAAC;IA0BtB,YAAY,CACD,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,6BAA6B,EAChC,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAKvB,GAAG,CACQ,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,2BAA2B,EAC9B,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAKvB,YAAY,CACD,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IA6BvB,WAAW,CACJ,IAAI,EAAE,6BAA6B,EAChC,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAOvB,YAAY,CACD,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;IAgD1B,WAAW,CACA,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;YAyGlB,KAAK;IA6FnB,OAAO,CAAC,uBAAuB;YAmBjB,OAAO;YAYP,sBAAsB;YAWtB,wBAAwB;CAWzC"}

package/dist/adapters/http/controllers/entities/identity-provider/module.mjs CHANGED Viewed

@@ -1,12 +1,15 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { identityProviderSchema } from "../../../../../core/entities/identity-provider/schema.mjs";
+import { decodeQuery } from "../../../../../core/query/module.mjs";
 import { OAuth2AuthorizationCodeRequestValidator } from "../../../../../core/oauth2/authorization/code-request/validator.mjs";
 import { toIdentityPolicyData } from "../../../../../core/identity/permission/identity-policy-data.mjs";
 import { createIdentityProviderOAuth2Authenticator } from "../../../../../core/identity/provider/authentication/factory.mjs";
 import "../../../../../core/index.mjs";
 import { useRequestPermissionEvaluator } from "../../../request/permission/helper.mjs";
 import { useRequestIdentityOrFail } from "../../../request/helpers/identity.mjs";
+import { buildActorContext } from "../../../request/helpers/actor.mjs";
 import { getBodyRealmID } from "../../../request/helpers/body-realm-id.mjs";
 import { getRequestParamID, useRequestParamID } from "../../../request/helpers/param-id.mjs";
 import { applyRouteRealmIDToBody, getRequestRealmID } from "../../../request/helpers/realm-id.mjs";
@@ -64,7 +67,10 @@ var IdentityProviderController = class {
 		this.accessPolicyEvaluator = ctx.accessPolicyEvaluator;
 	}
 	async getProviders(event) {
-		const { data, meta } = await this.repository.findMany(useRequestQuery(event));
+		const { data, meta } = await this.repository.findMany(await decodeQuery(useRequestQuery(event), {
+			schema: identityProviderSchema,
+			actor: buildActorContext(event)
+		}));
 		try {
 			const permissionEvaluator = useRequestPermissionEvaluator(event);
 			await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_READ });
@@ -73,7 +79,7 @@ var IdentityProviderController = class {
 					name: PermissionName.IDENTITY_PROVIDER_READ,
 					data: definePolicyData({
 						[BuiltInPolicyType.ATTRIBUTES]: datum,
-						[BuiltInPolicyType.REALM_MATCH]: datum.realm_id ?? null
+						[BuiltInPolicyType.REALM_MATCH]: datum.realmId ?? null
 					})
 				});
 			} catch {}
@@ -92,7 +98,7 @@ var IdentityProviderController = class {
 				name: PermissionName.IDENTITY_PROVIDER_READ,
 				data: definePolicyData({
 					[BuiltInPolicyType.ATTRIBUTES]: entity,
-					[BuiltInPolicyType.REALM_MATCH]: entity.realm_id ?? null
+					[BuiltInPolicyType.REALM_MATCH]: entity.realmId ?? null
 				})
 			});
 		} catch {}
@@ -114,7 +120,7 @@ var IdentityProviderController = class {
 			name: PermissionName.IDENTITY_PROVIDER_DELETE,
 			data: definePolicyData({
 				[BuiltInPolicyType.ATTRIBUTES]: entity,
-				[BuiltInPolicyType.REALM_MATCH]: entity.realm_id ?? null
+				[BuiltInPolicyType.REALM_MATCH]: entity.realmId ?? null
 			})
 		});
 		const { id: entityId } = entity;
@@ -147,7 +153,7 @@ var IdentityProviderController = class {
 			}
 			const codeRequestValidated = await this.codeRequestValidator.run(codeRequestDecoded);
 			const data = await this.codeRequestVerifier.verify(codeRequestValidated);
-			if (data.client.realm_id && entity.realm_id && entity.realm_id !== data.client.realm_id) throw OAuth2RequestError.malformed("The provider and client realm do not match.");
+			if (data.client.realmId && entity.realmId && entity.realmId !== data.client.realmId) throw OAuth2RequestError.malformed("The provider and client realm do not match.");
 			codeRequest = data.data;
 		}
 		parameters.state = await this.saveAuthorizationState(event, codeRequest);
@@ -158,7 +164,7 @@ var IdentityProviderController = class {
 		const entity = await this.resolve(id);
 		if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) throw new Error(`The provider protocol ${entity.protocol} is not valid.`);
 		const data = await this.verifyAuthorizationState(event);
-		if (entity.realm_id && data.codeRequest && data.codeRequest.realm_id && data.codeRequest.realm_id !== entity.realm_id) throw OAuth2RequestError.malformed("The provider and client realm do not match.");
+		if (entity.realmId && data.codeRequest && data.codeRequest.realm_id && data.codeRequest.realm_id !== entity.realmId) throw OAuth2RequestError.malformed("The provider and client realm do not match.");
 		const { code } = useRequestQuery(event);
 		const user = await createIdentityProviderOAuth2Authenticator({
 			accountManager: this.accountManager,
@@ -168,10 +174,10 @@ var IdentityProviderController = class {
 				clientId: data.codeRequest?.client_id
 			}
 		}).authenticate(code);
-		const realm = await this.realmRepository.resolve(entity.realm_id, true);
+		const realm = await this.realmRepository.resolve(entity.realmId, true);
 		if (data.codeRequest?.client_id) {
 			const client = await this.clientRepository.findOneByIdOrName(data.codeRequest.client_id, data.codeRequest.realm_id);
-			if (client?.access_policy_id) {
+			if (client?.accessPolicyId) {
 				let allowed = false;
 				const subject = toIdentityPolicyData({
 					type: IdentityType.USER,
@@ -180,7 +186,7 @@ var IdentityProviderController = class {
 						realm
 					}
 				});
-				if (this.accessPolicyEvaluator && subject) allowed = await this.accessPolicyEvaluator.evaluate(client.access_policy_id, subject);
+				if (this.accessPolicyEvaluator && subject) allowed = await this.accessPolicyEvaluator.evaluate(client.accessPolicyId, subject);
 				if (!allowed) {
 					const url = this.buildHostedAuthorizeURL(data.codeRequest);
 					url.searchParams.set("error", OAuth2ErrorCode.ACCESS_DENIED);
@@ -220,7 +226,7 @@ var IdentityProviderController = class {
 			const where = {};
 			if (isUUID(id)) where.id = id;
 			else where.name = id;
-			if (realmId) where.realm_id = realmId;
+			if (realmId) where.realmId = realmId;
 			entity = await this.repository.findOneBy(where);
 			if (!entity && options.updateOnly) throw new EntityNotFoundError();
 		} else if (options.updateOnly) throw new EntityNotFoundError();
@@ -242,16 +248,16 @@ var IdentityProviderController = class {
 					...entity,
 					...data
 				},
-				[BuiltInPolicyType.REALM_MATCH]: data.realm_id ?? entity.realm_id ?? null
+				[BuiltInPolicyType.REALM_MATCH]: data.realmId ?? entity.realmId ?? null
 			})
 		});
 		else {
-			if (!data.realm_id) data.realm_id = useRequestIdentityOrFail(event).realmId;
+			if (!data.realmId) data.realmId = useRequestIdentityOrFail(event).realmId;
 			await permissionEvaluator.evaluate({
 				name: PermissionName.IDENTITY_PROVIDER_CREATE,
 				data: definePolicyData({
 					[BuiltInPolicyType.ATTRIBUTES]: data,
-					[BuiltInPolicyType.REALM_MATCH]: data.realm_id ?? null
+					[BuiltInPolicyType.REALM_MATCH]: data.realmId ?? null
 				})
 			});
 		}

package/dist/adapters/http/controllers/entities/identity-provider/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["BuiltInPolicyType","definePolicyData","ValidatorGroup","base64URLDecode","isUUID","DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","getRequestHeader","getRequestIP","sendRedirect","IdentityProviderAttributesValidator","IdentityProviderValidator","IdentityType","PermissionName","SessionAuthMethod","isOAuth2IdentityProvider","isOpenIDIdentityProvider","BadRequestError","EntityNotFoundError","resolveURL","useRequestQuery","readRequestBody","OAuth2ErrorCode","OAuth2RequestError","URL","OAuth2AuthorizationCodeRequestValidator","createIdentityProviderOAuth2Authenticator","toIdentityPolicyData","applyRouteRealmIDToBody","getBodyRealmID","getRequestParamID","getRequestRealmID","useRequestIdentityOrFail","useRequestParamID","useRequestPermissionEvaluator","ForceLoggedInMiddleware","IdentityProviderController","options","repository","realmRepository","clientRepository","accountManager","codeRequestVerifier","codeRequestValidator","stateManager","codeIssuer","accessPolicyEvaluator","ctx","getProviders","event","data","meta","findMany","permissionEvaluator","preEvaluate","name","IDENTITY_PROVIDER_READ","datum","evaluate","ATTRIBUTES","REALM_MATCH","realm_id","getProvider","id","paramId","entity","findOneByIdOrName","editProvider","user","write","updateOnly","put","dropProvider","IDENTITY_PROVIDER_DELETE","findOneBy","entityId","remove","response","status","addProvider","authorizeOut","_id","resolve","authenticator","provider","baseURL","parameters","codeRequest","query","codeRequestDecoded","JSON","parse","malformed","codeRequestValidated","run","verify","client","state","saveAuthorizationState","buildRedirectURL","authorizeIn","Error","protocol","verifyAuthorizationState","code","clientId","client_id","authenticate","realm","access_policy_id","allowed","subject","type","USER","url","buildHostedAuthorizeURL","searchParams","set","ACCESS_DENIED","href","authorizationCode","issue","response_type","redirect_uri","scope","authMethod","EXTERNAL","group","body","realmId","where","IDENTITY_PROVIDER_UPDATE","UPDATE","IDENTITY_PROVIDER_CREATE","CREATE","validator","attributesValidator","attributes","validateJoinColumns","identity","checkUniqueness","undefined","merge","saveWithEA","create","codeRequestKeys","Object","keys","codeRequestKey_","codeRequestKey","codeRequestValue","String","findOneById","save","ip","trustProxy","userAgent","stateInvalid"],"sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/module.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, definePolicyData } from '@authup/access';\nimport { ValidatorGroup, base64URLDecode, isUUID } from '@authup/kit';\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DPut,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport {\n getRequestHeader,\n getRequestIP,\n sendRedirect,\n} from 'routup';\nimport type { IdentityProvider, OAuth2AuthorizationCodeRequest } from '@authup/core-kit';\nimport {\n\n IdentityProviderAttributesValidator,\n IdentityProviderValidator,\n IdentityType,\n PermissionName,\n SessionAuthMethod,\n isOAuth2IdentityProvider,\n isOpenIDIdentityProvider,\n} from '@authup/core-kit';\nimport { BadRequestError, EntityNotFoundError } from '@authup/errors';\nimport { resolveURL } from '../../../../../utils/index.ts';\nimport type { AuthorizeParameters } from '@hapic/oauth2';\nimport { useRequestQuery } from '@routup/basic/query';\nimport { readRequestBody } from '@routup/basic/body';\nimport { OAuth2ErrorCode, OAuth2RequestError } from '@authup/specs';\nimport type {\n EntityCollectionResponse,\n IdentityProviderCreatePayload,\n IdentityProviderSavePayload,\n IdentityProviderUpdatePayload,\n} from '@authup/core-http-kit';\nimport { URL } from 'node:url';\nimport type {\n IIdentityProviderAccountManager,\n IIdentityProviderRepository,\n IOAuth2AccessPolicyEvaluator,\n IOAuth2AuthorizationCodeIssuer,\n IOAuth2AuthorizationCodeRequestVerifier,\n IOAuth2AuthorizationStateManager,\n IOAuth2ClientRepository,\n IRealmRepository,\n OAuth2AuthorizationState,\n} from '../../../../../core/index.ts';\nimport {\n OAuth2AuthorizationCodeRequestValidator,\n createIdentityProviderOAuth2Authenticator,\n toIdentityPolicyData,\n} from '../../../../../core/index.ts';\nimport {\n applyRouteRealmIDToBody,\n getBodyRealmID,\n getRequestParamID,\n getRequestRealmID,\n useRequestIdentityOrFail,\n useRequestParamID,\n useRequestPermissionEvaluator,\n} from '../../../request/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport type { IdentityProviderControllerContext, IdentityProviderControllerOptions } from './types.ts';\n\n@DTags('identity')\n@DController(['/identity-providers', '/realms/:realmId/identity-providers'])\nexport class IdentityProviderController {\n protected options: IdentityProviderControllerOptions;\n\n protected repository: IIdentityProviderRepository;\n\n protected realmRepository: IRealmRepository;\n\n protected clientRepository: IOAuth2ClientRepository;\n\n protected accountManager: IIdentityProviderAccountManager;\n\n protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n protected codeRequestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n protected stateManager : IOAuth2AuthorizationStateManager;\n\n protected codeIssuer : IOAuth2AuthorizationCodeIssuer;\n\n protected accessPolicyEvaluator? : IOAuth2AccessPolicyEvaluator;\n\n // ---------------------------------------------------------\n\n constructor(ctx: IdentityProviderControllerContext) {\n this.options = ctx.options;\n this.repository = ctx.repository;\n this.realmRepository = ctx.realmRepository;\n this.clientRepository = ctx.clientRepository;\n this.accountManager = ctx.accountManager;\n this.codeIssuer = ctx.codeIssuer;\n this.codeRequestVerifier = ctx.codeRequestVerifier;\n this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();\n this.stateManager = ctx.stateManager;\n this.accessPolicyEvaluator = ctx.accessPolicyEvaluator;\n }\n\n // ---------------------------------------------------------\n\n @DGet('', [])\n async getProviders(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<IdentityProvider>> {\n const {\n data,\n meta,\n } = await this.repository.findMany(useRequestQuery(event));\n\n try {\n const permissionEvaluator = useRequestPermissionEvaluator(event);\n await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_READ });\n\n for (const datum of data) {\n try {\n await permissionEvaluator.evaluate({\n name: PermissionName.IDENTITY_PROVIDER_READ,\n data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: datum, [BuiltInPolicyType.REALM_MATCH]: datum.realm_id ?? null }),\n });\n } catch {\n // do nothing\n }\n }\n } catch {\n // do nothing\n }\n\n return {\n data,\n meta,\n };\n }\n\n @DGet('/:id', [])\n async getProvider(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<IdentityProvider> {\n const paramId = useRequestParamID(event, { isUUID: false });\n\n const entity = await this.repository.findOneByIdOrName(\n paramId,\n getRequestRealmID(event),\n );\n\n if (!entity) {\n throw new EntityNotFoundError();\n }\n\n try {\n const permissionEvaluator = useRequestPermissionEvaluator(event);\n await permissionEvaluator.evaluate({\n name: PermissionName.IDENTITY_PROVIDER_READ,\n data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity, [BuiltInPolicyType.REALM_MATCH]: entity.realm_id ?? null }),\n });\n } catch {\n // do nothing\n }\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async editProvider(\n @DPath('id') id: string,\n @DBody() user: IdentityProviderUpdatePayload,\n @DContext() event: IAppEvent,\n ) : Promise<IdentityProvider> {\n return this.write(event, { updateOnly: true });\n }\n\n @DPut('/:id', [ForceLoggedInMiddleware])\n async put(\n @DPath('id') id: string,\n @DBody() user: IdentityProviderSavePayload,\n @DContext() event: IAppEvent,\n ) : Promise<IdentityProvider> {\n return this.write(event);\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async dropProvider(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ) : Promise<IdentityProvider> {\n const paramId = useRequestParamID(event);\n\n const permissionEvaluator = useRequestPermissionEvaluator(event);\n await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_DELETE });\n\n const entity = await this.repository.findOneBy({ id: paramId });\n\n if (!entity) {\n throw new EntityNotFoundError();\n }\n\n await permissionEvaluator.evaluate({\n name: PermissionName.IDENTITY_PROVIDER_DELETE,\n data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity, [BuiltInPolicyType.REALM_MATCH]: entity.realm_id ?? null }),\n });\n\n const { id: entityId } = entity;\n\n await this.repository.remove(entity);\n\n entity.id = entityId;\n\n event.response.status = 202;\n\n return entity;\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async addProvider(\n @DBody() user: IdentityProviderCreatePayload,\n @DContext() event: IAppEvent,\n ) : Promise<IdentityProvider> {\n return this.write(event);\n }\n\n // ---------------------------------------------------------\n\n @DGet('/:id/authorize-out', [])\n async authorizeOut(\n @DPath('id') _id: string,\n @DContext() event: IAppEvent,\n ) {\n const id = useRequestParamID(event);\n const entity = await this.resolve(id);\n\n if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) {\n throw new BadRequestError('Only an identity-provider based on the oauth protocol supports authorize redirect.');\n }\n\n const authenticator = createIdentityProviderOAuth2Authenticator({\n accountManager: this.accountManager,\n provider: entity,\n options: { baseURL: this.options.baseURL },\n });\n\n const parameters : AuthorizeParameters = {};\n\n let codeRequest: OAuth2AuthorizationCodeRequest \| undefined;\n const query = useRequestQuery(event);\n if (typeof query.codeRequest === 'string') {\n let codeRequestDecoded: OAuth2AuthorizationCodeRequest;\n\n try {\n codeRequestDecoded = JSON.parse(base64URLDecode(query.codeRequest));\n } catch {\n throw OAuth2RequestError.malformed('The code request is malformed and can not be parsed.');\n }\n\n const codeRequestValidated = await this.codeRequestValidator.run(codeRequestDecoded);\n const data = await this.codeRequestVerifier.verify(codeRequestValidated);\n\n if (\n data.client.realm_id &&\n entity.realm_id &&\n entity.realm_id !== data.client.realm_id\n ) {\n throw OAuth2RequestError.malformed('The provider and client realm do not match.');\n }\n\n codeRequest = data.data;\n }\n\n parameters.state = await this.saveAuthorizationState(event, codeRequest);\n\n return sendRedirect(event, authenticator.buildRedirectURL(parameters));\n }\n\n @DGet('/:id/authorize-in', [])\n async authorizeIn(\n @DPath('id') _id: string,\n @DContext() event: IAppEvent,\n ) {\n const id = useRequestParamID(event);\n\n const entity = await this.resolve(id);\n\n if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) {\n throw new Error(`The provider protocol ${entity.protocol} is not valid.`);\n }\n\n const data = await this.verifyAuthorizationState(event);\n if (\n entity.realm_id &&\n data.codeRequest &&\n data.codeRequest.realm_id &&\n data.codeRequest.realm_id !== entity.realm_id\n ) {\n throw OAuth2RequestError.malformed('The provider and client realm do not match.');\n }\n\n const { code } = useRequestQuery(event);\n\n const authenticator = createIdentityProviderOAuth2Authenticator({\n accountManager: this.accountManager,\n provider: entity,\n options: {\n baseURL: this.options.baseURL,\n clientId: data.codeRequest?.client_id,\n },\n });\n\n const user = await authenticator.authenticate(code);\n\n const realm = await this.realmRepository.resolve(entity.realm_id, true);\n\n // Application access policy (plan 052), federated leg: the callback\n // never redirects to the RP directly — a denial bounces back to the\n // hosted authorize page with error=access_denied, so no\n // redirectUriVerified threading through the state blob is needed.\n // A policy id with no wired evaluator denies (fail closed); a\n // since-deleted client is skipped (the /token backstop still covers it).\n if (data.codeRequest?.client_id) {\n const client = await this.clientRepository.findOneByIdOrName(\n data.codeRequest.client_id,\n data.codeRequest.realm_id,\n );\n\n if (client?.access_policy_id) {\n let allowed = false;\n\n const subject = toIdentityPolicyData({\n type: IdentityType.USER,\n data: {\n ...user,\n realm,\n },\n });\n if (this.accessPolicyEvaluator && subject) {\n allowed = await this.accessPolicyEvaluator.evaluate(\n client.access_policy_id,\n subject,\n );\n }\n\n if (!allowed) {\n const url = this.buildHostedAuthorizeURL(data.codeRequest);\n url.searchParams.set('error', OAuth2ErrorCode.ACCESS_DENIED);\n\n return sendRedirect(event, url.href);\n }\n }\n }\n\n const authorizationCode = await this.codeIssuer.issue(\n {\n response_type: 'code',\n client_id: data.codeRequest?.client_id,\n redirect_uri: data.codeRequest?.redirect_uri,\n scope: data.codeRequest?.scope,\n },\n {\n type: IdentityType.USER,\n data: {\n ...user,\n realm,\n },\n },\n { authMethod: SessionAuthMethod.EXTERNAL },\n );\n\n if (data.codeRequest) {\n const url = this.buildHostedAuthorizeURL(data.codeRequest);\n url.searchParams.set('code', authorizationCode.id);\n\n return sendRedirect(event, url.href);\n }\n\n const url = new URL(this.options.baseURL);\n url.searchParams.set('code', authorizationCode.id);\n\n return sendRedirect(event, url.href);\n }\n\n // ---------------------------------------------------------\n\n private async write(event: IAppEvent, options: {\n updateOnly?: boolean\n } = {}): Promise<IdentityProvider> {\n let group: string;\n const id = getRequestParamID(event, { isUUID: false });\n const body = await readRequestBody(event);\n applyRouteRealmIDToBody(event, body);\n const realmId = getRequestRealmID(event) ?? getBodyRealmID(body);\n\n let entity: IdentityProvider \| null \| undefined;\n if (id) {\n const where: Record<string, any> = {};\n if (isUUID(id)) {\n where.id = id;\n } else {\n where.name = id;\n }\n\n if (realmId) {\n where.realm_id = realmId;\n }\n\n entity = await this.repository.findOneBy(where);\n if (!entity && options.updateOnly) {\n throw new EntityNotFoundError();\n }\n } else if (options.updateOnly) {\n throw new EntityNotFoundError();\n }\n\n const permissionEvaluator = useRequestPermissionEvaluator(event);\n if (entity) {\n await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_UPDATE });\n\n group = ValidatorGroup.UPDATE;\n } else {\n await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_CREATE });\n\n group = ValidatorGroup.CREATE;\n }\n\n const validator = new IdentityProviderValidator();\n const data = await validator.run(body, { group });\n\n const attributesValidator = new IdentityProviderAttributesValidator();\n const attributes = await attributesValidator.run(body);\n\n await this.repository.validateJoinColumns(data);\n\n if (entity) {\n await permissionEvaluator.evaluate({\n name: PermissionName.IDENTITY_PROVIDER_UPDATE,\n data: definePolicyData({\n [BuiltInPolicyType.ATTRIBUTES]: {\n ...entity,\n ...data,\n },\n [BuiltInPolicyType.REALM_MATCH]: data.realm_id ?? entity.realm_id ?? null,\n }),\n });\n } else {\n if (!data.realm_id) {\n const identity = useRequestIdentityOrFail(event);\n data.realm_id = identity.realmId;\n }\n\n await permissionEvaluator.evaluate({\n name: PermissionName.IDENTITY_PROVIDER_CREATE,\n data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: data, [BuiltInPolicyType.REALM_MATCH]: data.realm_id ?? null }),\n });\n }\n\n await this.repository.checkUniqueness(data, entity \|\| undefined);\n\n if (entity) {\n entity = this.repository.merge(entity, data);\n await this.repository.saveWithEA(entity, attributes);\n\n event.response.status = 202;\n\n return entity;\n }\n\n entity = this.repository.create(data);\n await this.repository.saveWithEA(entity, attributes);\n\n event.response.status = 201;\n\n return entity;\n }\n\n // ---------------------------------------------------------\n\n private buildHostedAuthorizeURL(codeRequest: OAuth2AuthorizationCodeRequest): URL {\n const url = new URL(resolveURL(this.options.baseURL, 'authorize'));\n\n const codeRequestKeys = Object.keys(codeRequest);\n for (const codeRequestKey_ of codeRequestKeys) {\n const codeRequestKey = codeRequestKey_ as keyof OAuth2AuthorizationCodeRequest;\n const codeRequestValue = codeRequest[codeRequestKey];\n // Preserve meaningful falsy values (e.g. max_age=0, which OIDC\n // treats as prompt=login) — only skip absent ones.\n if (typeof codeRequestValue !== 'undefined' && codeRequestValue !== null) {\n url.searchParams.set(codeRequestKey, String(codeRequestValue));\n }\n }\n\n return url;\n }\n\n // ---------------------------------------------------------\n\n private async resolve(id: string) {\n const entity = await this.repository.findOneById(id);\n\n if (!entity) {\n throw new EntityNotFoundError();\n }\n\n return entity;\n }\n\n // ---------------------------------------------------------\n\n private async saveAuthorizationState(\n event: IAppEvent,\n codeRequest?: OAuth2AuthorizationCodeRequest,\n ) : Promise<string> {\n return this.stateManager.save({\n codeRequest,\n ip: getRequestIP(event, { trustProxy: true }) ?? '',\n userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n });\n }\n\n private async verifyAuthorizationState(event: IAppEvent): Promise<OAuth2AuthorizationState> {\n const query = useRequestQuery(event);\n if (typeof query.state !== 'string') {\n throw OAuth2RequestError.stateInvalid();\n }\n\n return this.stateManager.verify(query.state, {\n ip: getRequestIP(event, { trustProxy: true }) ?? '',\n userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n });\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgFA,IAAa2C,6BAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAwC;EAChD,KAAKV,UAAUU,IAAIV;EACnB,KAAKC,aAAaS,IAAIT;EACtB,KAAKC,kBAAkBQ,IAAIR;EAC3B,KAAKC,mBAAmBO,IAAIP;EAC5B,KAAKC,iBAAiBM,IAAIN;EAC1B,KAAKI,aAAaE,IAAIF;EACtB,KAAKH,sBAAsBK,IAAIL;EAC/B,KAAKC,uBAAuB,IAAIlB,wCAAAA;EAChC,KAAKmB,eAAeG,IAAIH;EACxB,KAAKE,wBAAwBC,IAAID;CACrC;CAIA,MACME,aACF,OACmD;EACnD,MAAM,EACFE,MACAC,SACA,MAAM,KAAKb,WAAWc,SAAShC,gBAAgB6B,KAAAA,CAAAA;EAEnD,IAAI;GACA,MAAMI,sBAAsBnB,8BAA8Be,KAAAA;GAC1D,MAAMI,oBAAoBC,YAAY,EAAEC,MAAM1C,eAAe2C,uBAAuB,CAAA;GAEpF,KAAK,MAAMC,SAASP,MAChB,IAAI;IACA,MAAMG,oBAAoBK,SAAS;KAC/BH,MAAM1C,eAAe2C;KACrBN,MAAMxD,iBAAiB;OAAGD,kBAAkBkE,aAAaF;OAAQhE,kBAAkBmE,cAAcH,MAAMI,YAAY;KAAK,CAAA;IAC5H,CAAA;GACJ,QAAQ,CAER;EAER,QAAQ,CAER;EAEA,OAAO;GACHX;GACAC;EACJ;CACJ;CAEA,MACMW,YACF,IACA,OACyB;EACzB,MAAME,UAAU/B,kBAAkBgB,OAAO,EAAEpD,QAAQ,MAAM,CAAA;EAEzD,MAAMoE,SAAS,MAAM,KAAK3B,WAAW4B,kBACjCF,SACAjC,kBAAkBkB,KAAAA,CAAAA;EAGtB,IAAI,CAACgB,QACD,MAAM,IAAI/C,oBAAAA;EAGd,IAAI;GAEA,MAD4BgB,8BAA8Be,KACpDI,CAAAA,CAAoBK,SAAS;IAC/BH,MAAM1C,eAAe2C;IACrBN,MAAMxD,iBAAiB;MAAGD,kBAAkBkE,aAAaM;MAASxE,kBAAkBmE,cAAcK,OAAOJ,YAAY;IAAK,CAAA;GAC9H,CAAA;EACJ,QAAQ,CAER;EAEA,OAAOI;CACX;CAEA,MACME,aACF,IACA,MACA,OAC0B;EAC1B,OAAO,KAAKE,MAAMpB,OAAO,EAAEqB,YAAY,KAAK,CAAA;CAChD;CAEA,MACMC,IACF,IACA,MACA,OAC0B;EAC1B,OAAO,KAAKF,MAAMpB,KAAAA;CACtB;CAEA,MACMuB,aACF,IACA,OAC0B;EAC1B,MAAMR,UAAU/B,kBAAkBgB,KAAAA;EAElC,MAAMI,sBAAsBnB,8BAA8Be,KAAAA;EAC1D,MAAMI,oBAAoBC,YAAY,EAAEC,MAAM1C,eAAe4D,yBAAyB,CAAA;EAEtF,MAAMR,SAAS,MAAM,KAAK3B,WAAWoC,UAAU,EAAEX,IAAIC,QAAQ,CAAA;EAE7D,IAAI,CAACC,QACD,MAAM,IAAI/C,oBAAAA;EAGd,MAAMmC,oBAAoBK,SAAS;GAC/BH,MAAM1C,eAAe4D;GACrBvB,MAAMxD,iBAAiB;KAAGD,kBAAkBkE,aAAaM;KAASxE,kBAAkBmE,cAAcK,OAAOJ,YAAY;GAAK,CAAA;EAC9H,CAAA;EAEA,MAAM,EAAEE,IAAIY,aAAaV;EAEzB,MAAM,KAAK3B,WAAWsC,OAAOX,MAAAA;EAE7BA,OAAOF,KAAKY;EAEZ1B,MAAM4B,SAASC,SAAS;EAExB,OAAOb;CACX;CAEA,MACMc,YACF,MACA,OAC0B;EAC1B,OAAO,KAAKV,MAAMpB,KAAAA;CACtB;CAIA,MACM+B,aACF,KACA,OACF;EACE,MAAMjB,KAAK9B,kBAAkBgB,KAAAA;EAC7B,MAAMgB,SAAS,MAAM,KAAKiB,QAAQnB,EAAAA;EAElC,IAAI,CAAChD,yBAAyBkD,MAAAA,KAAW,CAACjD,yBAAyBiD,MAAAA,GAC/D,MAAM,IAAIhD,gBAAgB,oFAAA;EAG9B,MAAMkE,gBAAgBzD,0CAA0C;GAC5De,gBAAgB,KAAKA;GACrB2C,UAAUnB;GACV5B,SAAS,EAAEgD,SAAS,KAAKhD,QAAQgD,QAAQ;EAC7C,CAAA;EAEA,MAAMC,aAAmC,CAAC;EAE1C,IAAIC;EACJ,MAAMC,QAAQpE,gBAAgB6B,KAAAA;EAC9B,IAAI,OAAOuC,MAAMD,gBAAgB,UAAU;GACvC,IAAIE;GAEJ,IAAI;IACAA,qBAAqBC,KAAKC,MAAM/F,gBAAgB4F,MAAMD,WAAW,CAAA;GACrE,QAAQ;IACJ,MAAMhE,mBAAmBqE,UAAU,sDAAA;GACvC;GAEA,MAAMC,uBAAuB,MAAM,KAAKlD,qBAAqBmD,IAAIL,kBAAAA;GACjE,MAAMvC,OAAO,MAAM,KAAKR,oBAAoBqD,OAAOF,oBAAAA;GAEnD,IACI3C,KAAK8C,OAAOnC,YACZI,OAAOJ,YACPI,OAAOJ,aAAaX,KAAK8C,OAAOnC,UAEhC,MAAMtC,mBAAmBqE,UAAU,6CAAA;GAGvCL,cAAcrC,KAAKA;EACvB;EAEAoC,WAAWW,QAAQ,MAAM,KAAKC,uBAAuBjD,OAAOsC,WAAAA;EAE5D,OAAO9E,aAAawC,OAAOkC,cAAcgB,iBAAiBb,UAAAA,CAAAA;CAC9D;CAEA,MACMc,YACF,KACA,OACF;EACE,MAAMrC,KAAK9B,kBAAkBgB,KAAAA;EAE7B,MAAMgB,SAAS,MAAM,KAAKiB,QAAQnB,EAAAA;EAElC,IAAI,CAAChD,yBAAyBkD,MAAAA,KAAW,CAACjD,yBAAyBiD,MAAAA,GAC/D,MAAM,IAAIoC,MAAM,yBAAyBpC,OAAOqC,SAAS,eAAe;EAG5E,MAAMpD,OAAO,MAAM,KAAKqD,yBAAyBtD,KAAAA;EACjD,IACIgB,OAAOJ,YACPX,KAAKqC,eACLrC,KAAKqC,YAAY1B,YACjBX,KAAKqC,YAAY1B,aAAaI,OAAOJ,UAErC,MAAMtC,mBAAmBqE,UAAU,6CAAA;EAGvC,MAAM,EAAEY,SAASpF,gBAAgB6B,KAAAA;EAWjC,MAAMmB,OAAO,MATS1C,0CAA0C;GAC5De,gBAAgB,KAAKA;GACrB2C,UAAUnB;GACV5B,SAAS;IACLgD,SAAS,KAAKhD,QAAQgD;IACtBoB,UAAUvD,KAAKqC,aAAamB;GAChC;EACJ,CAEmBvB,CAAAA,CAAcwB,aAAaH,IAAAA;EAE9C,MAAMI,QAAQ,MAAM,KAAKrE,gBAAgB2C,QAAQjB,OAAOJ,UAAU,IAAA;EAQlE,IAAIX,KAAKqC,aAAamB,WAAW;GAC7B,MAAMV,SAAS,MAAM,KAAKxD,iBAAiB0B,kBACvChB,KAAKqC,YAAYmB,WACjBxD,KAAKqC,YAAY1B,QAAQ;GAG7B,IAAImC,QAAQa,kBAAkB;IAC1B,IAAIC,UAAU;IAEd,MAAMC,UAAUpF,qBAAqB;KACjCqF,MAAMpG,aAAaqG;KACnB/D,MAAM;MACF,GAAGkB;MACHwC;KACJ;IACJ,CAAA;IACA,IAAI,KAAK9D,yBAAyBiE,SAC9BD,UAAU,MAAM,KAAKhE,sBAAsBY,SACvCsC,OAAOa,kBACPE,OAAAA;IAIR,IAAI,CAACD,SAAS;KACV,MAAMI,MAAM,KAAKC,wBAAwBjE,KAAKqC,WAAW;KACzD2B,IAAIE,aAAaC,IAAI,SAAS/F,gBAAgBgG,aAAa;KAE3D,OAAO7G,aAAawC,OAAOiE,IAAIK,IAAI;IACvC;GACJ;EACJ;EAEA,MAAMC,oBAAoB,MAAM,KAAK3E,WAAW4E,MAC5C;GACIC,eAAe;GACfhB,WAAWxD,KAAKqC,aAAamB;GAC7BiB,cAAczE,KAAKqC,aAAaoC;GAChCC,OAAO1E,KAAKqC,aAAaqC;EAC7B,GACA;GACIZ,MAAMpG,aAAaqG;GACnB/D,MAAM;IACF,GAAGkB;IACHwC;GACJ;EACJ,GACA,EAAEiB,YAAY/G,kBAAkBgH,SAAS,CAAA;EAG7C,IAAI5E,KAAKqC,aAAa;GAClB,MAAM2B,MAAM,KAAKC,wBAAwBjE,KAAKqC,WAAW;GACzD2B,IAAIE,aAAaC,IAAI,QAAQG,kBAAkBzD,EAAE;GAEjD,OAAOtD,aAAawC,OAAOiE,IAAIK,IAAI;EACvC;EAEA,MAAML,MAAM,IAAI1F,IAAI,KAAKa,QAAQgD,OAAO;EACxC6B,IAAIE,aAAaC,IAAI,QAAQG,kBAAkBzD,EAAE;EAEjD,OAAOtD,aAAawC,OAAOiE,IAAIK,IAAI;CACvC;CAIA,MAAclD,MAAMpB,OAAkBZ,UAElC,CAAC,GAA8B;EAC/B,IAAI0F;EACJ,MAAMhE,KAAKjC,kBAAkBmB,OAAO,EAAEpD,QAAQ,MAAM,CAAA;EACpD,MAAMmI,OAAO,MAAM3G,gBAAgB4B,KAAAA;EACnCrB,wBAAwBqB,OAAO+E,IAAAA;EAC/B,MAAMC,UAAUlG,kBAAkBkB,KAAAA,KAAUpB,eAAemG,IAAAA;EAE3D,IAAI/D;EACJ,IAAIF,IAAI;GACJ,MAAMmE,QAA6B,CAAC;GACpC,IAAIrI,OAAOkE,EAAAA,GACPmE,MAAMnE,KAAKA;QAEXmE,MAAM3E,OAAOQ;GAGjB,IAAIkE,SACAC,MAAMrE,WAAWoE;GAGrBhE,SAAS,MAAM,KAAK3B,WAAWoC,UAAUwD,KAAAA;GACzC,IAAI,CAACjE,UAAU5B,QAAQiC,YACnB,MAAM,IAAIpD,oBAAAA;EAElB,OAAO,IAAImB,QAAQiC,YACf,MAAM,IAAIpD,oBAAAA;EAGd,MAAMmC,sBAAsBnB,8BAA8Be,KAAAA;EAC1D,IAAIgB,QAAQ;GACR,MAAMZ,oBAAoBC,YAAY,EAAEC,MAAM1C,eAAesH,yBAAyB,CAAA;GAEtFJ,QAAQpI,eAAeyI;EAC3B,OAAO;GACH,MAAM/E,oBAAoBC,YAAY,EAAEC,MAAM1C,eAAewH,yBAAyB,CAAA;GAEtFN,QAAQpI,eAAe2I;EAC3B;EAGA,MAAMpF,OAAO,MAAMqF,IADG5H,0BACH4H,CAAAA,CAAUzC,IAAIkC,MAAM,EAAED,MAAM,CAAA;EAG/C,MAAMU,aAAa,MAAMD,IADO9H,oCACP8H,CAAAA,CAAoB1C,IAAIkC,IAAAA;EAEjD,MAAM,KAAK1F,WAAWoG,oBAAoBxF,IAAAA;EAE1C,IAAIe,QACA,MAAMZ,oBAAoBK,SAAS;GAC/BH,MAAM1C,eAAesH;GACrBjF,MAAMxD,iBAAiB;KAClBD,kBAAkBkE,aAAa;KAC5B,GAAGM;KACH,GAAGf;IACP;KACCzD,kBAAkBmE,cAAcV,KAAKW,YAAYI,OAAOJ,YAAY;GACzE,CAAA;EACJ,CAAA;OACG;GACH,IAAI,CAACX,KAAKW,UAENX,KAAKW,WADY7B,yBAAyBiB,KAC1B0F,CAAAA,CAASV;GAG7B,MAAM5E,oBAAoBK,SAAS;IAC/BH,MAAM1C,eAAewH;IACrBnF,MAAMxD,iBAAiB;MAAGD,kBAAkBkE,aAAaT;MAAOzD,kBAAkBmE,cAAcV,KAAKW,YAAY;IAAK,CAAA;GAC1H,CAAA;EACJ;EAEA,MAAM,KAAKvB,WAAWsG,gBAAgB1F,MAAMe,UAAU4E,KAAAA,CAAAA;EAEtD,IAAI5E,QAAQ;GACRA,SAAS,KAAK3B,WAAWwG,MAAM7E,QAAQf,IAAAA;GACvC,MAAM,KAAKZ,WAAWyG,WAAW9E,QAAQwE,UAAAA;GAEzCxF,MAAM4B,SAASC,SAAS;GAExB,OAAOb;EACX;EAEAA,SAAS,KAAK3B,WAAW0G,OAAO9F,IAAAA;EAChC,MAAM,KAAKZ,WAAWyG,WAAW9E,QAAQwE,UAAAA;EAEzCxF,MAAM4B,SAASC,SAAS;EAExB,OAAOb;CACX;CAIQkD,wBAAwB5B,aAAkD;EAC9E,MAAM2B,MAAM,IAAI1F,IAAIL,WAAW,KAAKkB,QAAQgD,SAAS,WAAA,CAAA;EAErD,MAAM4D,kBAAkBC,OAAOC,KAAK5D,WAAAA;EACpC,KAAK,MAAM6D,mBAAmBH,iBAAiB;GAC3C,MAAMI,iBAAiBD;GACvB,MAAME,mBAAmB/D,YAAY8D;GAGrC,IAAI,OAAOC,qBAAqB,eAAeA,qBAAqB,MAChEpC,IAAIE,aAAaC,IAAIgC,gBAAgBE,OAAOD,gBAAAA,CAAAA;EAEpD;EAEA,OAAOpC;CACX;CAIA,MAAchC,QAAQnB,IAAY;EAC9B,MAAME,SAAS,MAAM,KAAK3B,WAAWkH,YAAYzF,EAAAA;EAEjD,IAAI,CAACE,QACD,MAAM,IAAI/C,oBAAAA;EAGd,OAAO+C;CACX;CAIA,MAAciC,uBACVjD,OACAsC,aACgB;EAChB,OAAO,KAAK3C,aAAa6G,KAAK;GAC1BlE;GACAmE,IAAIlJ,aAAayC,OAAO,EAAE0G,YAAY,KAAK,CAAA,KAAM;GACjDC,WAAWrJ,iBAAiB0C,OAAO,YAAA,KAAiB4F,KAAAA;EACxD,CAAA;CACJ;CAEA,MAActC,yBAAyBtD,OAAqD;EACxF,MAAMuC,QAAQpE,gBAAgB6B,KAAAA;EAC9B,IAAI,OAAOuC,MAAMS,UAAU,UACvB,MAAM1E,mBAAmBsI,aAAY;EAGzC,OAAO,KAAKjH,aAAamD,OAAOP,MAAMS,OAAO;GACzCyD,IAAIlJ,aAAayC,OAAO,EAAE0G,YAAY,KAAK,CAAA,KAAM;GACjDC,WAAWrJ,iBAAiB0C,OAAO,YAAA,KAAiB4F,KAAAA;EACxD,CAAA;CACJ;AACJ;;;;;;;;;;;;;;;;;gBA5WoB1G,uBAAAA,CAAAA;;;;;;;;;;;;;eASDA,uBAAAA,CAAAA;;;;;;;;;;;;;kBASGA,uBAAAA,CAAAA;;;;;;;;YAgCNA,uBAAAA,CAAAA;;;;;;;;;;;;;;;;;;;;;;;;;cAvJF,uBAAuB,qCAAA,CAAA"}
1	+ {"version":3,"file":"module.mjs","names":["BuiltInPolicyType","definePolicyData","ValidatorGroup","base64URLDecode","isUUID","DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","getRequestHeader","getRequestIP","sendRedirect","IdentityProviderAttributesValidator","IdentityProviderValidator","IdentityType","PermissionName","SessionAuthMethod","isOAuth2IdentityProvider","isOpenIDIdentityProvider","BadRequestError","EntityNotFoundError","resolveURL","useRequestQuery","readRequestBody","OAuth2ErrorCode","OAuth2RequestError","URL","OAuth2AuthorizationCodeRequestValidator","createIdentityProviderOAuth2Authenticator","decodeQuery","identityProviderSchema","toIdentityPolicyData","applyRouteRealmIDToBody","buildActorContext","getBodyRealmID","getRequestParamID","getRequestRealmID","useRequestIdentityOrFail","useRequestParamID","useRequestPermissionEvaluator","ForceLoggedInMiddleware","IdentityProviderController","options","repository","realmRepository","clientRepository","accountManager","codeRequestVerifier","codeRequestValidator","stateManager","codeIssuer","accessPolicyEvaluator","ctx","getProviders","event","data","meta","findMany","schema","actor","permissionEvaluator","preEvaluate","name","IDENTITY_PROVIDER_READ","datum","evaluate","ATTRIBUTES","REALM_MATCH","realmId","getProvider","id","paramId","entity","findOneByIdOrName","editProvider","user","write","updateOnly","put","dropProvider","IDENTITY_PROVIDER_DELETE","findOneBy","entityId","remove","response","status","addProvider","authorizeOut","_id","resolve","authenticator","provider","baseURL","parameters","codeRequest","query","codeRequestDecoded","JSON","parse","malformed","codeRequestValidated","run","verify","client","state","saveAuthorizationState","buildRedirectURL","authorizeIn","Error","protocol","verifyAuthorizationState","realm_id","code","clientId","client_id","authenticate","realm","accessPolicyId","allowed","subject","type","USER","url","buildHostedAuthorizeURL","searchParams","set","ACCESS_DENIED","href","authorizationCode","issue","response_type","redirect_uri","scope","authMethod","EXTERNAL","group","body","where","IDENTITY_PROVIDER_UPDATE","UPDATE","IDENTITY_PROVIDER_CREATE","CREATE","validator","attributesValidator","attributes","validateJoinColumns","identity","checkUniqueness","undefined","merge","saveWithEA","create","codeRequestKeys","Object","keys","codeRequestKey_","codeRequestKey","codeRequestValue","String","findOneById","save","ip","trustProxy","userAgent","stateInvalid"],"sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/module.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, definePolicyData } from '@authup/access';\nimport { ValidatorGroup, base64URLDecode, isUUID } from '@authup/kit';\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DPut,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport {\n getRequestHeader,\n getRequestIP,\n sendRedirect,\n} from 'routup';\nimport type { IdentityProvider, OAuth2AuthorizationCodeRequest } from '@authup/core-kit';\nimport {\n\n IdentityProviderAttributesValidator,\n IdentityProviderValidator,\n IdentityType,\n PermissionName,\n SessionAuthMethod,\n isOAuth2IdentityProvider,\n isOpenIDIdentityProvider,\n} from '@authup/core-kit';\nimport { BadRequestError, EntityNotFoundError } from '@authup/errors';\nimport { resolveURL } from '../../../../../utils/index.ts';\nimport type { AuthorizeParameters } from '@hapic/oauth2';\nimport { useRequestQuery } from '@routup/basic/query';\nimport { readRequestBody } from '@routup/basic/body';\nimport { OAuth2ErrorCode, OAuth2RequestError } from '@authup/specs';\nimport type {\n EntityCollectionResponse,\n IdentityProviderCreatePayload,\n IdentityProviderSavePayload,\n IdentityProviderUpdatePayload,\n} from '@authup/core-http-kit';\nimport { URL } from 'node:url';\nimport type {\n IIdentityProviderAccountManager,\n IIdentityProviderRepository,\n IOAuth2AccessPolicyEvaluator,\n IOAuth2AuthorizationCodeIssuer,\n IOAuth2AuthorizationCodeRequestVerifier,\n IOAuth2AuthorizationStateManager,\n IOAuth2ClientRepository,\n IRealmRepository,\n OAuth2AuthorizationState,\n} from '../../../../../core/index.ts';\nimport {\n OAuth2AuthorizationCodeRequestValidator,\n createIdentityProviderOAuth2Authenticator,\n decodeQuery,\n identityProviderSchema,\n toIdentityPolicyData,\n} from '../../../../../core/index.ts';\nimport {\n applyRouteRealmIDToBody,\n buildActorContext,\n getBodyRealmID,\n getRequestParamID,\n getRequestRealmID,\n useRequestIdentityOrFail,\n useRequestParamID,\n useRequestPermissionEvaluator,\n} from '../../../request/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport type { IdentityProviderControllerContext, IdentityProviderControllerOptions } from './types.ts';\n\n@DTags('identity')\n@DController(['/identity-providers', '/realms/:realmId/identity-providers'])\nexport class IdentityProviderController {\n protected options: IdentityProviderControllerOptions;\n\n protected repository: IIdentityProviderRepository;\n\n protected realmRepository: IRealmRepository;\n\n protected clientRepository: IOAuth2ClientRepository;\n\n protected accountManager: IIdentityProviderAccountManager;\n\n protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n protected codeRequestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n protected stateManager : IOAuth2AuthorizationStateManager;\n\n protected codeIssuer : IOAuth2AuthorizationCodeIssuer;\n\n protected accessPolicyEvaluator? : IOAuth2AccessPolicyEvaluator;\n\n // ---------------------------------------------------------\n\n constructor(ctx: IdentityProviderControllerContext) {\n this.options = ctx.options;\n this.repository = ctx.repository;\n this.realmRepository = ctx.realmRepository;\n this.clientRepository = ctx.clientRepository;\n this.accountManager = ctx.accountManager;\n this.codeIssuer = ctx.codeIssuer;\n this.codeRequestVerifier = ctx.codeRequestVerifier;\n this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();\n this.stateManager = ctx.stateManager;\n this.accessPolicyEvaluator = ctx.accessPolicyEvaluator;\n }\n\n // ---------------------------------------------------------\n\n @DGet('', [])\n async getProviders(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<IdentityProvider>> {\n const {\n data,\n meta,\n } = await this.repository.findMany(\n await decodeQuery(useRequestQuery(event), {\n schema: identityProviderSchema,\n actor: buildActorContext(event),\n }),\n );\n\n try {\n const permissionEvaluator = useRequestPermissionEvaluator(event);\n await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_READ });\n\n for (const datum of data) {\n try {\n await permissionEvaluator.evaluate({\n name: PermissionName.IDENTITY_PROVIDER_READ,\n data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: datum, [BuiltInPolicyType.REALM_MATCH]: datum.realmId ?? null }),\n });\n } catch {\n // do nothing\n }\n }\n } catch {\n // do nothing\n }\n\n return {\n data,\n meta,\n };\n }\n\n @DGet('/:id', [])\n async getProvider(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<IdentityProvider> {\n const paramId = useRequestParamID(event, { isUUID: false });\n\n const entity = await this.repository.findOneByIdOrName(\n paramId,\n getRequestRealmID(event),\n );\n\n if (!entity) {\n throw new EntityNotFoundError();\n }\n\n try {\n const permissionEvaluator = useRequestPermissionEvaluator(event);\n await permissionEvaluator.evaluate({\n name: PermissionName.IDENTITY_PROVIDER_READ,\n data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity, [BuiltInPolicyType.REALM_MATCH]: entity.realmId ?? null }),\n });\n } catch {\n // do nothing\n }\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async editProvider(\n @DPath('id') id: string,\n @DBody() user: IdentityProviderUpdatePayload,\n @DContext() event: IAppEvent,\n ) : Promise<IdentityProvider> {\n return this.write(event, { updateOnly: true });\n }\n\n @DPut('/:id', [ForceLoggedInMiddleware])\n async put(\n @DPath('id') id: string,\n @DBody() user: IdentityProviderSavePayload,\n @DContext() event: IAppEvent,\n ) : Promise<IdentityProvider> {\n return this.write(event);\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async dropProvider(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ) : Promise<IdentityProvider> {\n const paramId = useRequestParamID(event);\n\n const permissionEvaluator = useRequestPermissionEvaluator(event);\n await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_DELETE });\n\n const entity = await this.repository.findOneBy({ id: paramId });\n\n if (!entity) {\n throw new EntityNotFoundError();\n }\n\n await permissionEvaluator.evaluate({\n name: PermissionName.IDENTITY_PROVIDER_DELETE,\n data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity, [BuiltInPolicyType.REALM_MATCH]: entity.realmId ?? null }),\n });\n\n const { id: entityId } = entity;\n\n await this.repository.remove(entity);\n\n entity.id = entityId;\n\n event.response.status = 202;\n\n return entity;\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async addProvider(\n @DBody() user: IdentityProviderCreatePayload,\n @DContext() event: IAppEvent,\n ) : Promise<IdentityProvider> {\n return this.write(event);\n }\n\n // ---------------------------------------------------------\n\n @DGet('/:id/authorize-out', [])\n async authorizeOut(\n @DPath('id') _id: string,\n @DContext() event: IAppEvent,\n ) {\n const id = useRequestParamID(event);\n const entity = await this.resolve(id);\n\n if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) {\n throw new BadRequestError('Only an identity-provider based on the oauth protocol supports authorize redirect.');\n }\n\n const authenticator = createIdentityProviderOAuth2Authenticator({\n accountManager: this.accountManager,\n provider: entity,\n options: { baseURL: this.options.baseURL },\n });\n\n const parameters : AuthorizeParameters = {};\n\n let codeRequest: OAuth2AuthorizationCodeRequest \| undefined;\n const query = useRequestQuery(event);\n if (typeof query.codeRequest === 'string') {\n let codeRequestDecoded: OAuth2AuthorizationCodeRequest;\n\n try {\n codeRequestDecoded = JSON.parse(base64URLDecode(query.codeRequest));\n } catch {\n throw OAuth2RequestError.malformed('The code request is malformed and can not be parsed.');\n }\n\n const codeRequestValidated = await this.codeRequestValidator.run(codeRequestDecoded);\n const data = await this.codeRequestVerifier.verify(codeRequestValidated);\n\n if (\n data.client.realmId &&\n entity.realmId &&\n entity.realmId !== data.client.realmId\n ) {\n throw OAuth2RequestError.malformed('The provider and client realm do not match.');\n }\n\n codeRequest = data.data;\n }\n\n parameters.state = await this.saveAuthorizationState(event, codeRequest);\n\n return sendRedirect(event, authenticator.buildRedirectURL(parameters));\n }\n\n @DGet('/:id/authorize-in', [])\n async authorizeIn(\n @DPath('id') _id: string,\n @DContext() event: IAppEvent,\n ) {\n const id = useRequestParamID(event);\n\n const entity = await this.resolve(id);\n\n if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) {\n throw new Error(`The provider protocol ${entity.protocol} is not valid.`);\n }\n\n const data = await this.verifyAuthorizationState(event);\n if (\n entity.realmId &&\n data.codeRequest &&\n data.codeRequest.realm_id &&\n data.codeRequest.realm_id !== entity.realmId\n ) {\n throw OAuth2RequestError.malformed('The provider and client realm do not match.');\n }\n\n const { code } = useRequestQuery(event);\n\n const authenticator = createIdentityProviderOAuth2Authenticator({\n accountManager: this.accountManager,\n provider: entity,\n options: {\n baseURL: this.options.baseURL,\n clientId: data.codeRequest?.client_id,\n },\n });\n\n const user = await authenticator.authenticate(code);\n\n const realm = await this.realmRepository.resolve(entity.realmId, true);\n\n // Application access policy (plan 052), federated leg: the callback\n // never redirects to the RP directly — a denial bounces back to the\n // hosted authorize page with error=access_denied, so no\n // redirectUriVerified threading through the state blob is needed.\n // A policy id with no wired evaluator denies (fail closed); a\n // since-deleted client is skipped (the /token backstop still covers it).\n if (data.codeRequest?.client_id) {\n const client = await this.clientRepository.findOneByIdOrName(\n data.codeRequest.client_id,\n data.codeRequest.realm_id,\n );\n\n if (client?.accessPolicyId) {\n let allowed = false;\n\n const subject = toIdentityPolicyData({\n type: IdentityType.USER,\n data: {\n ...user,\n realm,\n },\n });\n if (this.accessPolicyEvaluator && subject) {\n allowed = await this.accessPolicyEvaluator.evaluate(\n client.accessPolicyId,\n subject,\n );\n }\n\n if (!allowed) {\n const url = this.buildHostedAuthorizeURL(data.codeRequest);\n url.searchParams.set('error', OAuth2ErrorCode.ACCESS_DENIED);\n\n return sendRedirect(event, url.href);\n }\n }\n }\n\n const authorizationCode = await this.codeIssuer.issue(\n {\n response_type: 'code',\n client_id: data.codeRequest?.client_id,\n redirect_uri: data.codeRequest?.redirect_uri,\n scope: data.codeRequest?.scope,\n },\n {\n type: IdentityType.USER,\n data: {\n ...user,\n realm,\n },\n },\n { authMethod: SessionAuthMethod.EXTERNAL },\n );\n\n if (data.codeRequest) {\n const url = this.buildHostedAuthorizeURL(data.codeRequest);\n url.searchParams.set('code', authorizationCode.id);\n\n return sendRedirect(event, url.href);\n }\n\n const url = new URL(this.options.baseURL);\n url.searchParams.set('code', authorizationCode.id);\n\n return sendRedirect(event, url.href);\n }\n\n // ---------------------------------------------------------\n\n private async write(event: IAppEvent, options: {\n updateOnly?: boolean\n } = {}): Promise<IdentityProvider> {\n let group: string;\n const id = getRequestParamID(event, { isUUID: false });\n const body = await readRequestBody(event);\n applyRouteRealmIDToBody(event, body);\n const realmId = getRequestRealmID(event) ?? getBodyRealmID(body);\n\n let entity: IdentityProvider \| null \| undefined;\n if (id) {\n const where: Record<string, any> = {};\n if (isUUID(id)) {\n where.id = id;\n } else {\n where.name = id;\n }\n\n if (realmId) {\n where.realmId = realmId;\n }\n\n entity = await this.repository.findOneBy(where);\n if (!entity && options.updateOnly) {\n throw new EntityNotFoundError();\n }\n } else if (options.updateOnly) {\n throw new EntityNotFoundError();\n }\n\n const permissionEvaluator = useRequestPermissionEvaluator(event);\n if (entity) {\n await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_UPDATE });\n\n group = ValidatorGroup.UPDATE;\n } else {\n await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_CREATE });\n\n group = ValidatorGroup.CREATE;\n }\n\n const validator = new IdentityProviderValidator();\n const data = await validator.run(body, { group });\n\n const attributesValidator = new IdentityProviderAttributesValidator();\n const attributes = await attributesValidator.run(body);\n\n await this.repository.validateJoinColumns(data);\n\n if (entity) {\n await permissionEvaluator.evaluate({\n name: PermissionName.IDENTITY_PROVIDER_UPDATE,\n data: definePolicyData({\n [BuiltInPolicyType.ATTRIBUTES]: {\n ...entity,\n ...data,\n },\n [BuiltInPolicyType.REALM_MATCH]: data.realmId ?? entity.realmId ?? null,\n }),\n });\n } else {\n if (!data.realmId) {\n const identity = useRequestIdentityOrFail(event);\n data.realmId = identity.realmId;\n }\n\n await permissionEvaluator.evaluate({\n name: PermissionName.IDENTITY_PROVIDER_CREATE,\n data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: data, [BuiltInPolicyType.REALM_MATCH]: data.realmId ?? null }),\n });\n }\n\n await this.repository.checkUniqueness(data, entity \|\| undefined);\n\n if (entity) {\n entity = this.repository.merge(entity, data);\n await this.repository.saveWithEA(entity, attributes);\n\n event.response.status = 202;\n\n return entity;\n }\n\n entity = this.repository.create(data);\n await this.repository.saveWithEA(entity, attributes);\n\n event.response.status = 201;\n\n return entity;\n }\n\n // ---------------------------------------------------------\n\n private buildHostedAuthorizeURL(codeRequest: OAuth2AuthorizationCodeRequest): URL {\n const url = new URL(resolveURL(this.options.baseURL, 'authorize'));\n\n const codeRequestKeys = Object.keys(codeRequest);\n for (const codeRequestKey_ of codeRequestKeys) {\n const codeRequestKey = codeRequestKey_ as keyof OAuth2AuthorizationCodeRequest;\n const codeRequestValue = codeRequest[codeRequestKey];\n // Preserve meaningful falsy values (e.g. max_age=0, which OIDC\n // treats as prompt=login) — only skip absent ones.\n if (typeof codeRequestValue !== 'undefined' && codeRequestValue !== null) {\n url.searchParams.set(codeRequestKey, String(codeRequestValue));\n }\n }\n\n return url;\n }\n\n // ---------------------------------------------------------\n\n private async resolve(id: string) {\n const entity = await this.repository.findOneById(id);\n\n if (!entity) {\n throw new EntityNotFoundError();\n }\n\n return entity;\n }\n\n // ---------------------------------------------------------\n\n private async saveAuthorizationState(\n event: IAppEvent,\n codeRequest?: OAuth2AuthorizationCodeRequest,\n ) : Promise<string> {\n return this.stateManager.save({\n codeRequest,\n ip: getRequestIP(event, { trustProxy: true }) ?? '',\n userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n });\n }\n\n private async verifyAuthorizationState(event: IAppEvent): Promise<OAuth2AuthorizationState> {\n const query = useRequestQuery(event);\n if (typeof query.state !== 'string') {\n throw OAuth2RequestError.stateInvalid();\n }\n\n return this.stateManager.verify(query.state, {\n ip: getRequestIP(event, { trustProxy: true }) ?? '',\n userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n });\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmFA,IAAa8C,6BAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAwC;EAChD,KAAKV,UAAUU,IAAIV;EACnB,KAAKC,aAAaS,IAAIT;EACtB,KAAKC,kBAAkBQ,IAAIR;EAC3B,KAAKC,mBAAmBO,IAAIP;EAC5B,KAAKC,iBAAiBM,IAAIN;EAC1B,KAAKI,aAAaE,IAAIF;EACtB,KAAKH,sBAAsBK,IAAIL;EAC/B,KAAKC,uBAAuB,IAAIrB,wCAAAA;EAChC,KAAKsB,eAAeG,IAAIH;EACxB,KAAKE,wBAAwBC,IAAID;CACrC;CAIA,MACME,aACF,OACmD;EACnD,MAAM,EACFE,MACAC,SACA,MAAM,KAAKb,WAAWc,SACtB,MAAM5B,YAAYP,gBAAgBgC,KAAAA,GAAQ;GACtCI,QAAQ5B;GACR6B,OAAO1B,kBAAkBqB,KAAAA;EAC7B,CAAA,CAAA;EAGJ,IAAI;GACA,MAAMM,sBAAsBrB,8BAA8Be,KAAAA;GAC1D,MAAMM,oBAAoBC,YAAY,EAAEC,MAAM/C,eAAegD,uBAAuB,CAAA;GAEpF,KAAK,MAAMC,SAAST,MAChB,IAAI;IACA,MAAMK,oBAAoBK,SAAS;KAC/BH,MAAM/C,eAAegD;KACrBR,MAAM3D,iBAAiB;OAAGD,kBAAkBuE,aAAaF;OAAQrE,kBAAkBwE,cAAcH,MAAMI,WAAW;KAAK,CAAA;IAC3H,CAAA;GACJ,QAAQ,CAER;EAER,QAAQ,CAER;EAEA,OAAO;GACHb;GACAC;EACJ;CACJ;CAEA,MACMa,YACF,IACA,OACyB;EACzB,MAAME,UAAUjC,kBAAkBgB,OAAO,EAAEvD,QAAQ,MAAM,CAAA;EAEzD,MAAMyE,SAAS,MAAM,KAAK7B,WAAW8B,kBACjCF,SACAnC,kBAAkBkB,KAAAA,CAAAA;EAGtB,IAAI,CAACkB,QACD,MAAM,IAAIpD,oBAAAA;EAGd,IAAI;GAEA,MAD4BmB,8BAA8Be,KACpDM,CAAAA,CAAoBK,SAAS;IAC/BH,MAAM/C,eAAegD;IACrBR,MAAM3D,iBAAiB;MAAGD,kBAAkBuE,aAAaM;MAAS7E,kBAAkBwE,cAAcK,OAAOJ,WAAW;IAAK,CAAA;GAC7H,CAAA;EACJ,QAAQ,CAER;EAEA,OAAOI;CACX;CAEA,MACME,aACF,IACA,MACA,OAC0B;EAC1B,OAAO,KAAKE,MAAMtB,OAAO,EAAEuB,YAAY,KAAK,CAAA;CAChD;CAEA,MACMC,IACF,IACA,MACA,OAC0B;EAC1B,OAAO,KAAKF,MAAMtB,KAAAA;CACtB;CAEA,MACMyB,aACF,IACA,OAC0B;EAC1B,MAAMR,UAAUjC,kBAAkBgB,KAAAA;EAElC,MAAMM,sBAAsBrB,8BAA8Be,KAAAA;EAC1D,MAAMM,oBAAoBC,YAAY,EAAEC,MAAM/C,eAAeiE,yBAAyB,CAAA;EAEtF,MAAMR,SAAS,MAAM,KAAK7B,WAAWsC,UAAU,EAAEX,IAAIC,QAAQ,CAAA;EAE7D,IAAI,CAACC,QACD,MAAM,IAAIpD,oBAAAA;EAGd,MAAMwC,oBAAoBK,SAAS;GAC/BH,MAAM/C,eAAeiE;GACrBzB,MAAM3D,iBAAiB;KAAGD,kBAAkBuE,aAAaM;KAAS7E,kBAAkBwE,cAAcK,OAAOJ,WAAW;GAAK,CAAA;EAC7H,CAAA;EAEA,MAAM,EAAEE,IAAIY,aAAaV;EAEzB,MAAM,KAAK7B,WAAWwC,OAAOX,MAAAA;EAE7BA,OAAOF,KAAKY;EAEZ5B,MAAM8B,SAASC,SAAS;EAExB,OAAOb;CACX;CAEA,MACMc,YACF,MACA,OAC0B;EAC1B,OAAO,KAAKV,MAAMtB,KAAAA;CACtB;CAIA,MACMiC,aACF,KACA,OACF;EACE,MAAMjB,KAAKhC,kBAAkBgB,KAAAA;EAC7B,MAAMkB,SAAS,MAAM,KAAKiB,QAAQnB,EAAAA;EAElC,IAAI,CAACrD,yBAAyBuD,MAAAA,KAAW,CAACtD,yBAAyBsD,MAAAA,GAC/D,MAAM,IAAIrD,gBAAgB,oFAAA;EAG9B,MAAMuE,gBAAgB9D,0CAA0C;GAC5DkB,gBAAgB,KAAKA;GACrB6C,UAAUnB;GACV9B,SAAS,EAAEkD,SAAS,KAAKlD,QAAQkD,QAAQ;EAC7C,CAAA;EAEA,MAAMC,aAAmC,CAAC;EAE1C,IAAIC;EACJ,MAAMC,QAAQzE,gBAAgBgC,KAAAA;EAC9B,IAAI,OAAOyC,MAAMD,gBAAgB,UAAU;GACvC,IAAIE;GAEJ,IAAI;IACAA,qBAAqBC,KAAKC,MAAMpG,gBAAgBiG,MAAMD,WAAW,CAAA;GACrE,QAAQ;IACJ,MAAMrE,mBAAmB0E,UAAU,sDAAA;GACvC;GAEA,MAAMC,uBAAuB,MAAM,KAAKpD,qBAAqBqD,IAAIL,kBAAAA;GACjE,MAAMzC,OAAO,MAAM,KAAKR,oBAAoBuD,OAAOF,oBAAAA;GAEnD,IACI7C,KAAKgD,OAAOnC,WACZI,OAAOJ,WACPI,OAAOJ,YAAYb,KAAKgD,OAAOnC,SAE/B,MAAM3C,mBAAmB0E,UAAU,6CAAA;GAGvCL,cAAcvC,KAAKA;EACvB;EAEAsC,WAAWW,QAAQ,MAAM,KAAKC,uBAAuBnD,OAAOwC,WAAAA;EAE5D,OAAOnF,aAAa2C,OAAOoC,cAAcgB,iBAAiBb,UAAAA,CAAAA;CAC9D;CAEA,MACMc,YACF,KACA,OACF;EACE,MAAMrC,KAAKhC,kBAAkBgB,KAAAA;EAE7B,MAAMkB,SAAS,MAAM,KAAKiB,QAAQnB,EAAAA;EAElC,IAAI,CAACrD,yBAAyBuD,MAAAA,KAAW,CAACtD,yBAAyBsD,MAAAA,GAC/D,MAAM,IAAIoC,MAAM,yBAAyBpC,OAAOqC,SAAS,eAAe;EAG5E,MAAMtD,OAAO,MAAM,KAAKuD,yBAAyBxD,KAAAA;EACjD,IACIkB,OAAOJ,WACPb,KAAKuC,eACLvC,KAAKuC,YAAYiB,YACjBxD,KAAKuC,YAAYiB,aAAavC,OAAOJ,SAErC,MAAM3C,mBAAmB0E,UAAU,6CAAA;EAGvC,MAAM,EAAEa,SAAS1F,gBAAgBgC,KAAAA;EAWjC,MAAMqB,OAAO,MATS/C,0CAA0C;GAC5DkB,gBAAgB,KAAKA;GACrB6C,UAAUnB;GACV9B,SAAS;IACLkD,SAAS,KAAKlD,QAAQkD;IACtBqB,UAAU1D,KAAKuC,aAAaoB;GAChC;EACJ,CAEmBxB,CAAAA,CAAcyB,aAAaH,IAAAA;EAE9C,MAAMI,QAAQ,MAAM,KAAKxE,gBAAgB6C,QAAQjB,OAAOJ,SAAS,IAAA;EAQjE,IAAIb,KAAKuC,aAAaoB,WAAW;GAC7B,MAAMX,SAAS,MAAM,KAAK1D,iBAAiB4B,kBACvClB,KAAKuC,YAAYoB,WACjB3D,KAAKuC,YAAYiB,QAAQ;GAG7B,IAAIR,QAAQc,gBAAgB;IACxB,IAAIC,UAAU;IAEd,MAAMC,UAAUxF,qBAAqB;KACjCyF,MAAM1G,aAAa2G;KACnBlE,MAAM;MACF,GAAGoB;MACHyC;KACJ;IACJ,CAAA;IACA,IAAI,KAAKjE,yBAAyBoE,SAC9BD,UAAU,MAAM,KAAKnE,sBAAsBc,SACvCsC,OAAOc,gBACPE,OAAAA;IAIR,IAAI,CAACD,SAAS;KACV,MAAMI,MAAM,KAAKC,wBAAwBpE,KAAKuC,WAAW;KACzD4B,IAAIE,aAAaC,IAAI,SAASrG,gBAAgBsG,aAAa;KAE3D,OAAOnH,aAAa2C,OAAOoE,IAAIK,IAAI;IACvC;GACJ;EACJ;EAEA,MAAMC,oBAAoB,MAAM,KAAK9E,WAAW+E,MAC5C;GACIC,eAAe;GACfhB,WAAW3D,KAAKuC,aAAaoB;GAC7BiB,cAAc5E,KAAKuC,aAAaqC;GAChCC,OAAO7E,KAAKuC,aAAasC;EAC7B,GACA;GACIZ,MAAM1G,aAAa2G;GACnBlE,MAAM;IACF,GAAGoB;IACHyC;GACJ;EACJ,GACA,EAAEiB,YAAYrH,kBAAkBsH,SAAS,CAAA;EAG7C,IAAI/E,KAAKuC,aAAa;GAClB,MAAM4B,MAAM,KAAKC,wBAAwBpE,KAAKuC,WAAW;GACzD4B,IAAIE,aAAaC,IAAI,QAAQG,kBAAkB1D,EAAE;GAEjD,OAAO3D,aAAa2C,OAAOoE,IAAIK,IAAI;EACvC;EAEA,MAAML,MAAM,IAAIhG,IAAI,KAAKgB,QAAQkD,OAAO;EACxC8B,IAAIE,aAAaC,IAAI,QAAQG,kBAAkB1D,EAAE;EAEjD,OAAO3D,aAAa2C,OAAOoE,IAAIK,IAAI;CACvC;CAIA,MAAcnD,MAAMtB,OAAkBZ,UAElC,CAAC,GAA8B;EAC/B,IAAI6F;EACJ,MAAMjE,KAAKnC,kBAAkBmB,OAAO,EAAEvD,QAAQ,MAAM,CAAA;EACpD,MAAMyI,OAAO,MAAMjH,gBAAgB+B,KAAAA;EACnCtB,wBAAwBsB,OAAOkF,IAAAA;EAC/B,MAAMpE,UAAUhC,kBAAkBkB,KAAAA,KAAUpB,eAAesG,IAAAA;EAE3D,IAAIhE;EACJ,IAAIF,IAAI;GACJ,MAAMmE,QAA6B,CAAC;GACpC,IAAI1I,OAAOuE,EAAAA,GACPmE,MAAMnE,KAAKA;QAEXmE,MAAM3E,OAAOQ;GAGjB,IAAIF,SACAqE,MAAMrE,UAAUA;GAGpBI,SAAS,MAAM,KAAK7B,WAAWsC,UAAUwD,KAAAA;GACzC,IAAI,CAACjE,UAAU9B,QAAQmC,YACnB,MAAM,IAAIzD,oBAAAA;EAElB,OAAO,IAAIsB,QAAQmC,YACf,MAAM,IAAIzD,oBAAAA;EAGd,MAAMwC,sBAAsBrB,8BAA8Be,KAAAA;EAC1D,IAAIkB,QAAQ;GACR,MAAMZ,oBAAoBC,YAAY,EAAEC,MAAM/C,eAAe2H,yBAAyB,CAAA;GAEtFH,QAAQ1I,eAAe8I;EAC3B,OAAO;GACH,MAAM/E,oBAAoBC,YAAY,EAAEC,MAAM/C,eAAe6H,yBAAyB,CAAA;GAEtFL,QAAQ1I,eAAegJ;EAC3B;EAGA,MAAMtF,OAAO,MAAMuF,IADGjI,0BACHiI,CAAAA,CAAUzC,IAAImC,MAAM,EAAED,MAAM,CAAA;EAG/C,MAAMS,aAAa,MAAMD,IADOnI,oCACPmI,CAAAA,CAAoB1C,IAAImC,IAAAA;EAEjD,MAAM,KAAK7F,WAAWsG,oBAAoB1F,IAAAA;EAE1C,IAAIiB,QACA,MAAMZ,oBAAoBK,SAAS;GAC/BH,MAAM/C,eAAe2H;GACrBnF,MAAM3D,iBAAiB;KAClBD,kBAAkBuE,aAAa;KAC5B,GAAGM;KACH,GAAGjB;IACP;KACC5D,kBAAkBwE,cAAcZ,KAAKa,WAAWI,OAAOJ,WAAW;GACvE,CAAA;EACJ,CAAA;OACG;GACH,IAAI,CAACb,KAAKa,SAENb,KAAKa,UADY/B,yBAAyBiB,KAC3B4F,CAAAA,CAAS9E;GAG5B,MAAMR,oBAAoBK,SAAS;IAC/BH,MAAM/C,eAAe6H;IACrBrF,MAAM3D,iBAAiB;MAAGD,kBAAkBuE,aAAaX;MAAO5D,kBAAkBwE,cAAcZ,KAAKa,WAAW;IAAK,CAAA;GACzH,CAAA;EACJ;EAEA,MAAM,KAAKzB,WAAWwG,gBAAgB5F,MAAMiB,UAAU4E,KAAAA,CAAAA;EAEtD,IAAI5E,QAAQ;GACRA,SAAS,KAAK7B,WAAW0G,MAAM7E,QAAQjB,IAAAA;GACvC,MAAM,KAAKZ,WAAW2G,WAAW9E,QAAQwE,UAAAA;GAEzC1F,MAAM8B,SAASC,SAAS;GAExB,OAAOb;EACX;EAEAA,SAAS,KAAK7B,WAAW4G,OAAOhG,IAAAA;EAChC,MAAM,KAAKZ,WAAW2G,WAAW9E,QAAQwE,UAAAA;EAEzC1F,MAAM8B,SAASC,SAAS;EAExB,OAAOb;CACX;CAIQmD,wBAAwB7B,aAAkD;EAC9E,MAAM4B,MAAM,IAAIhG,IAAIL,WAAW,KAAKqB,QAAQkD,SAAS,WAAA,CAAA;EAErD,MAAM4D,kBAAkBC,OAAOC,KAAK5D,WAAAA;EACpC,KAAK,MAAM6D,mBAAmBH,iBAAiB;GAC3C,MAAMI,iBAAiBD;GACvB,MAAME,mBAAmB/D,YAAY8D;GAGrC,IAAI,OAAOC,qBAAqB,eAAeA,qBAAqB,MAChEnC,IAAIE,aAAaC,IAAI+B,gBAAgBE,OAAOD,gBAAAA,CAAAA;EAEpD;EAEA,OAAOnC;CACX;CAIA,MAAcjC,QAAQnB,IAAY;EAC9B,MAAME,SAAS,MAAM,KAAK7B,WAAWoH,YAAYzF,EAAAA;EAEjD,IAAI,CAACE,QACD,MAAM,IAAIpD,oBAAAA;EAGd,OAAOoD;CACX;CAIA,MAAciC,uBACVnD,OACAwC,aACgB;EAChB,OAAO,KAAK7C,aAAa+G,KAAK;GAC1BlE;GACAmE,IAAIvJ,aAAa4C,OAAO,EAAE4G,YAAY,KAAK,CAAA,KAAM;GACjDC,WAAW1J,iBAAiB6C,OAAO,YAAA,KAAiB8F,KAAAA;EACxD,CAAA;CACJ;CAEA,MAActC,yBAAyBxD,OAAqD;EACxF,MAAMyC,QAAQzE,gBAAgBgC,KAAAA;EAC9B,IAAI,OAAOyC,MAAMS,UAAU,UACvB,MAAM/E,mBAAmB2I,aAAY;EAGzC,OAAO,KAAKnH,aAAaqD,OAAOP,MAAMS,OAAO;GACzCyD,IAAIvJ,aAAa4C,OAAO,EAAE4G,YAAY,KAAK,CAAA,KAAM;GACjDC,WAAW1J,iBAAiB6C,OAAO,YAAA,KAAiB8F,KAAAA;EACxD,CAAA;CACJ;AACJ;;;;;;;;;;;;;;;;;gBA5WoB5G,uBAAAA,CAAAA;;;;;;;;;;;;;eASDA,uBAAAA,CAAAA;;;;;;;;;;;;;kBASGA,uBAAAA,CAAAA;;;;;;;;YAgCNA,uBAAAA,CAAAA;;;;;;;;;;;;;;;;;;;;;;;;;cA5JF,uBAAuB,qCAAA,CAAA"}

package/dist/adapters/http/controllers/entities/index.d.ts CHANGED Viewed

@@ -10,9 +10,6 @@ export * from './key/index.ts';
 export * from './permission/index.ts';
 export * from './permission-policy/index.ts';
 export * from './realm/index.ts';
-export * from './robot/index.ts';
-export * from './robot-permission/index.ts';
-export * from './robot-role/index.ts';
 export * from './role/index.ts';
 export * from './role-attribute/index.ts';
 export * from './role-permission/index.ts';

package/dist/adapters/http/controllers/entities/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/controllers/entities/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kCAAkC,CAAC;AACjD,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,~~kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,~~iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/controllers/entities/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kCAAkC,CAAC;AACjD,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC"}

package/dist/adapters/http/controllers/entities/index.mjs CHANGED Viewed

@@ -28,14 +28,6 @@ import { PermissionPolicyController } from "./permission-policy/module.mjs";
 import "./permission-policy/index.mjs";
 import { RealmController } from "./realm/module.mjs";
 import "./realm/index.mjs";
-import { RobotController } from "./robot/module.mjs";
-import "./robot/index.mjs";
-import { RobotPermissionController } from "./robot-permission/module.mjs";
-import { RobotPermissionRequestValidator } from "./robot-permission/utils/validation.mjs";
-import "./robot-permission/index.mjs";
-import { RobotRoleController } from "./robot-role/module.mjs";
-import { RobotRoleRequestValidator } from "./robot-role/utils/validation.mjs";
-import "./robot-role/index.mjs";
 import { RoleController } from "./role/module.mjs";
 import "./role/index.mjs";
 import { RoleAttributeController } from "./role-attribute/module.mjs";
@@ -67,4 +59,4 @@ import "./user-permission/index.mjs";
 import { UserRoleController } from "./user-role/module.mjs";
 import { UserRoleRequestValidator } from "./user-role/utils/validation.mjs";
 import "./user-role/index.mjs";
-export { ClientController, ClientPermissionController, ClientPermissionRequestValidator, ClientRoleController, ClientRoleRequestValidator, ClientScopeController, ClientScopeRequestValidator, ConsentController, EventController, IdentityProviderController, IdentityProviderRoleMappingController, KeyController, PermissionController, PermissionPolicyController, PolicyAttributesValidator, PolicyController, PolicyValidator, RealmController, RobotController, RobotPermissionController, RobotPermissionRequestValidator, RobotRoleController, RobotRoleRequestValidator, RoleAttributeController, RoleAttributeRequestValidator, RoleController, RolePermissionController, RolePermissionRequestValidator, ScopeController, SessionController, TrustAnchorController, UserAttributeController, UserAttributeRequestValidator, UserAuthenticatorController, UserController, UserPermissionController, UserPermissionRequestValidator, UserRoleController, UserRoleRequestValidator };
+export { ClientController, ClientPermissionController, ClientPermissionRequestValidator, ClientRoleController, ClientRoleRequestValidator, ClientScopeController, ClientScopeRequestValidator, ConsentController, EventController, IdentityProviderController, IdentityProviderRoleMappingController, KeyController, PermissionController, PermissionPolicyController, PolicyAttributesValidator, PolicyController, PolicyValidator, RealmController, RoleAttributeController, RoleAttributeRequestValidator, RoleController, RolePermissionController, RolePermissionRequestValidator, ScopeController, SessionController, TrustAnchorController, UserAttributeController, UserAttributeRequestValidator, UserAuthenticatorController, UserController, UserPermissionController, UserPermissionRequestValidator, UserRoleController, UserRoleRequestValidator };

package/dist/adapters/http/controllers/entities/key/module.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/key/module.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EACR,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAQhE,MAAM,MAAM,oBAAoB,GAAG;IAC/B,OAAO,EAAE,WAAW,CAAC;CACxB,CAAC;AAEF,qBAEa,aAAa;IACtB,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC;gBAEnB,GAAG,EAAE,oBAAoB;IAK/B,OAAO,CACG,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;~~IAqBnC~~,MAAM,CACK,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC;IAOT,GAAG,CACI,IAAI,EAAE,gBAAgB,EACnB,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC;IAWT,IAAI,CACO,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,EACnB,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC;IAOT,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC;CAYlB"}
1	+ {"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/key/module.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EACR,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAQhE,MAAM,MAAM,oBAAoB,GAAG;IAC/B,OAAO,EAAE,WAAW,CAAC;CACxB,CAAC;AAEF,qBAEa,aAAa;IACtB,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC;gBAEnB,GAAG,EAAE,oBAAoB;IAK/B,OAAO,CACG,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAYnC,MAAM,CACK,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC;IAOT,GAAG,CACI,IAAI,EAAE,gBAAgB,EACnB,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC;IAWT,IAAI,CACO,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,EACnB,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC;IAOT,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC;CAYlB"}

package/dist/adapters/http/controllers/entities/key/module.mjs CHANGED Viewed

@@ -30,13 +30,7 @@ var KeyController = class {
 	}
 	async getMany(event) {
 		const actor = buildActorContext(event);
-		const query = useRequestQuery(event);
-		const realmId = getRequestRealmID(event);
-		if (realmId) query.filter = {
-			...query.filter && typeof query.filter === "object" ? query.filter : {},
-			realm_id: realmId
-		};
-		const { data, meta } = await this.service.getMany(query, actor);
+		const { data, meta } = await this.service.getMany(useRequestQuery(event), actor, { realmId: getRequestRealmID(event) });
 		return {
 			data,
 			meta

package/dist/adapters/http/controllers/entities/key/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","KeyController","service","ctx","getMany","event","actor","~~query~~","~~realmId~~","~~filter~~","~~realm_id","data","meta","~~getOne","id","add","entity","create","response","status","edit","update","drop","force","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/key/module.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n KeyCreatePayload,\n KeyUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { Key } from '@authup/core-kit';\nimport type { IKeyService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n applyRouteRealmIDToBody,\n buildActorContext,\n getRequestRealmID,\n} from '../../../request/index.ts';\n\nexport type KeyControllerContext = {\n service: IKeyService,\n};\n\n@DTags('key')\n@DController(['/keys', '/realms/:realmId/keys'])\nexport class KeyController {\n protected service: IKeyService;\n\n constructor(ctx: KeyControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<Key>> {\n const actor = buildActorContext(event);\n\n const ~~query = useRequestQuery(event);\n const realmId = getRequestRealmID(event);\n if (realmId)~~ {~~\n query.filter~~ ~~= {\n ...(query.filter && typeof query.filter === 'object' ? query.filter : {}),\n realm_id: realmId,\n };\n }\n\n const {~~ data, meta } = await this.service.getMany(~~query~~, actor);\n\n return {\n data,\n meta,\n };\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<Key> {\n const actor = buildActorContext(event);\n\n return this.service.getOne(id, actor, getRequestRealmID(event));\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: KeyCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<Key> {\n applyRouteRealmIDToBody(event, data);\n const actor = buildActorContext(event);\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async edit(\n @DPath('id') id: string,\n @DBody() data: KeyUpdatePayload,\n @DContext() event: IAppEvent,\n ): Promise<Key> {\n const actor = buildActorContext(event);\n\n return this.service.update(id, data, actor, getRequestRealmID(event));\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<Key> {\n const actor = buildActorContext(event);\n\n const query = useRequestQuery(event);\n const force = query.force === 'true' \|\| query.force === '1';\n\n const entity = await this.service.delete(id, actor, { force });\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAaa,gBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA2B;EACnC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OACsC;EACtC,MAAME,QAAQP,kBAAkBM,KAAAA;EAEhC,~~MAAME~~,~~QAAQX~~,~~gBAAgBS~~,~~KAAAA;EAC9B,MAAMG,UAAUR,kBAAkBK,KAAAA;EAClC,IAAIG,SACAD,MAAME,~~SAAS~~;GACX~~,~~GAAIF~~,~~MAAME~~,~~UAAU~~,~~OAAOF~~,~~MAAME~~,~~WAAW~~,~~WAAWF~~,~~MAAME~~,~~SAAS,CAAC;GACvEC,UAAUF;EACd;EAGJ,MAAM,~~EAAEG,~~MAAMC~~,~~SAAS~~,~~MAAM~~,~~KAAKV~~,~~QAAQE,QAAQG,OAAOD,KAAAA~~;~~EAEzD~~,OAAO;~~GACHK~~;GACAC;EACJ;CACJ;CAEA,~~MACMC~~,OACF,IACA,OACY;EACZ,~~MAAMP~~,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,~~QAAQW~~,OAAOC,~~IAAIR~~,OAAON,kBAAkBK,KAAAA,CAAAA;CAC5D;CAEA,~~MACMU~~,IACF,MACA,OACY;~~EACZjB~~,wBAAwBO,~~OAAOM~~,IAAAA;EAC/B,~~MAAML~~,QAAQP,kBAAkBM,KAAAA;EAChC,~~MAAMW~~,SAAS,MAAM,~~KAAKd~~,~~QAAQe~~,~~OAAON~~,~~MAAML~~,KAAAA;EAE/CD,~~MAAMa~~,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,KACF,IACA,MACA,OACY;EACZ,~~MAAMd~~,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,~~QAAQmB~~,OAAOP,~~IAAIH~~,~~MAAML~~,OAAON,kBAAkBK,KAAAA,CAAAA;CAClE;CAEA,~~MACMiB~~,KACF,IACA,OACY;EACZ,~~MAAMhB~~,QAAQP,kBAAkBM,KAAAA;EAEhC,~~MAAME~~,~~QAAQX~~,gBAAgBS,KAAAA;EAC9B,~~MAAMkB~~,~~QAAQhB~~,~~MAAMgB~~,UAAU,~~UAAUhB~~,~~MAAMgB~~,UAAU;EAExD,~~MAAMP~~,SAAS,MAAM,~~KAAKd~~,~~QAAQsB~~,~~OAAOV~~,~~IAAIR~~,OAAO,~~EAAEiB~~,MAAM,CAAA;~~EAE5DlB~~,~~MAAMa~~,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;~~WA1EenB~~,uBAAAA,CAAAA;;;;;;;~~eAuBIA~~,uBAAAA,CAAAA;;;;;;;;YAUHA,uBAAAA,CAAAA;;;;;;;;gBAcIA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAWEA,uBAAAA,CAAAA;;;;;;;;;~~cAlER~~,SAAS,uBAAA,CAAA"}
1	+ {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","KeyController","service","ctx","getMany","event","actor","data","meta","realmId","getOne","id","add","entity","create","response","status","edit","update","drop","query","force","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/key/module.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n KeyCreatePayload,\n KeyUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { Key } from '@authup/core-kit';\nimport type { IKeyService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n applyRouteRealmIDToBody,\n buildActorContext,\n getRequestRealmID,\n} from '../../../request/index.ts';\n\nexport type KeyControllerContext = {\n service: IKeyService,\n};\n\n@DTags('key')\n@DController(['/keys', '/realms/:realmId/keys'])\nexport class KeyController {\n protected service: IKeyService;\n\n constructor(ctx: KeyControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<Key>> {\n const actor = buildActorContext(event);\n\n const { data, meta } = await this.service.getMany(useRequestQuery(event), actor, { realmId: getRequestRealmID(event) });\n\n return {\n data,\n meta,\n };\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<Key> {\n const actor = buildActorContext(event);\n\n return this.service.getOne(id, actor, getRequestRealmID(event));\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: KeyCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<Key> {\n applyRouteRealmIDToBody(event, data);\n const actor = buildActorContext(event);\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async edit(\n @DPath('id') id: string,\n @DBody() data: KeyUpdatePayload,\n @DContext() event: IAppEvent,\n ): Promise<Key> {\n const actor = buildActorContext(event);\n\n return this.service.update(id, data, actor, getRequestRealmID(event));\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<Key> {\n const actor = buildActorContext(event);\n\n const query = useRequestQuery(event);\n const force = query.force === 'true' \|\| query.force === '1';\n\n const entity = await this.service.delete(id, actor, { force });\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAaa,gBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA2B;EACnC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OACsC;EACtC,MAAME,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAM,EAAEE,MAAMC,SAAS,MAAM,KAAKN,QAAQE,QAAQR,gBAAgBS,KAAAA,GAAQC,OAAO,EAAEG,SAAST,kBAAkBK,KAAAA,EAAO,CAAA;EAErH,OAAO;GACHE;GACAC;EACJ;CACJ;CAEA,MACME,OACF,IACA,OACY;EACZ,MAAMJ,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,QAAQQ,OAAOC,IAAIL,OAAON,kBAAkBK,KAAAA,CAAAA;CAC5D;CAEA,MACMO,IACF,MACA,OACY;EACZd,wBAAwBO,OAAOE,IAAAA;EAC/B,MAAMD,QAAQP,kBAAkBM,KAAAA;EAChC,MAAMQ,SAAS,MAAM,KAAKX,QAAQY,OAAOP,MAAMD,KAAAA;EAE/CD,MAAMU,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,KACF,IACA,MACA,OACY;EACZ,MAAMX,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,QAAQgB,OAAOP,IAAIJ,MAAMD,OAAON,kBAAkBK,KAAAA,CAAAA;CAClE;CAEA,MACMc,KACF,IACA,OACY;EACZ,MAAMb,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAMe,QAAQxB,gBAAgBS,KAAAA;EAC9B,MAAMgB,QAAQD,MAAMC,UAAU,UAAUD,MAAMC,UAAU;EAExD,MAAMR,SAAS,MAAM,KAAKX,QAAQoB,OAAOX,IAAIL,OAAO,EAAEe,MAAM,CAAA;EAE5DhB,MAAMU,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;WAjEehB,uBAAAA,CAAAA;;;;;;;eAcIA,uBAAAA,CAAAA;;;;;;;;YAUHA,uBAAAA,CAAAA;;;;;;;;gBAcIA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAWEA,uBAAAA,CAAAA;;;;;;;;;cAzDR,SAAS,uBAAA,CAAA"}

package/dist/adapters/http/controllers/entities/policy/utils/validation.d.ts CHANGED Viewed

@@ -1,7 +1,7 @@
 import { Container } from 'validup';
 import type { PolicyEntity } from '../../../../../database/domains/index.ts';
 export declare class PolicyValidator extends Container<PolicyEntity & {
-    parent_id?: string | null;
+    parentId?: string | null;
 }> {
     protected initialize(): void;
 }

package/dist/adapters/http/controllers/entities/policy/utils/validation.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/validation.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAI7E,qBAAa,eAAgB,SAAQ,SAAS,CAAC,YAAY,GAAG;IAAE,~~SAAS~~,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;~~IACxF~~,SAAS,CAAC,UAAU;CAsFvB"}
1	+ {"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/validation.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAI7E,qBAAa,eAAgB,SAAQ,SAAS,CAAC,YAAY,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;IACvF,SAAS,CAAC,UAAU;CAsFvB"}

package/dist/adapters/http/controllers/entities/policy/utils/validation.mjs CHANGED Viewed

@@ -30,11 +30,11 @@ var PolicyValidator = class extends Container {
 			group: RequestHandlerOperation.UPDATE,
 			optional: true
 		}, nameValidator);
-		this.mount("display_name", { optional: true }, createValidator(z.string().min(3).max(256).nullable()));
+		this.mount("displayName", { optional: true }, createValidator(z.string().min(3).max(256).nullable()));
 		this.mount("invert", { optional: true }, createValidator(z.boolean()));
 		this.mount("type", { group: RequestHandlerOperation.CREATE }, createValidator(z.string().min(3).max(128)));
-		this.mount("parent_id", { optional: true }, createValidator(z.uuid().nullable()));
-		this.mount("realm_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid().nullable()));
+		this.mount("parentId", { optional: true }, createValidator(z.uuid().nullable()));
+		this.mount("realmId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid().nullable()));
 		this.mount({ optional: true }, new PolicyAttributesValidator({}));
 		this.mount("children", { optional: true }, async (ctx) => {
 			if (!Array.isArray(ctx.value)) return;

package/dist/adapters/http/controllers/entities/policy/utils/validation.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validation.mjs","names":["BuiltInPolicyType","isPolicyNameValid","isObject","Container","createValidator","z","RequestHandlerOperation","PolicyAttributesValidator","PolicyValidator","initialize","nameValidator","string","trim","toLowerCase","min","max","check","ctx","value","throwOnFailure","e","issues","push","input","code","message","Error","mount","group","CREATE","UPDATE","optional","nullable","boolean","uuid","Array","isArray","undefined","data","type","COMPOSITE","promises","map","child","run","flat","path","Promise","all"],"sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType } from '@authup/access';\nimport { isPolicyNameValid } from '@authup/core-kit';\nimport { isObject } from 'smob';\nimport type { ValidatorContext } from 'validup';\nimport { Container } from 'validup';\nimport { createValidator } from '@validup/zod';\nimport { z } from 'zod';\nimport type { PolicyEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\nimport { PolicyAttributesValidator } from './attributes-validator.ts';\n\nexport class PolicyValidator extends Container<PolicyEntity & { ~~parent_id~~?: string \| null }> {\n protected initialize() {\n super.initialize();\n\n const nameValidator = createValidator(\n z.string()\n .trim()\n .toLowerCase()\n .min(3)\n .max(128)\n .check((ctx) => {\n try {\n isPolicyNameValid(ctx.value, { throwOnFailure: true });\n } catch (e) {\n ctx.issues.push({\n input: ctx.value,\n code: 'custom',\n message: e instanceof Error ? e.message : 'The policy name is not valid.',\n });\n }\n }),\n );\n\n this.mount('name', { group: RequestHandlerOperation.CREATE }, nameValidator);\n this.mount('name', {\n group: RequestHandlerOperation.UPDATE,\n optional: true,\n }, nameValidator);\n\n this.mount(\n '~~display_name~~',\n { optional: true },\n createValidator(z.string().min(3).max(256).nullable()),\n );\n\n this.mount(\n 'invert',\n { optional: true },\n createValidator(z.boolean()),\n );\n\n this.mount(\n 'type',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.string().min(3).max(128)),\n );\n\n this.mount(\n '~~parent_id~~',\n { optional: true },\n createValidator(z.uuid().nullable()),\n );\n\n this.mount(\n '~~realm_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid().nullable()),\n );\n\n this.mount({ optional: true }, new PolicyAttributesValidator({}));\n\n this.mount(\n 'children',\n { optional: true },\n async (ctx: ValidatorContext) => {\n if (!Array.isArray(ctx.value)) {\n // todo: throw error\n return undefined;\n }\n\n if (\n isObject(ctx.data) &&\n ctx.data.type !== BuiltInPolicyType.COMPOSITE\n ) {\n return undefined;\n }\n\n const promises = ctx.value.map((child) => this.run(child, {\n group: ctx.group,\n flat: false,\n path: ctx.path,\n }));\n\n return Promise.all(promises);\n },\n );\n }\n}\n"],"mappings":";;;;;;;;;;;;;AAkBA,IAAaQ,kBAAb,cAAqCL,UAAAA;CACvBM,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,gBAAgBN,gBAClBC,EAAEM,OAAM,CAAA,CACHC,KAAI,CAAA,CACJC,YAAW,CAAA,CACXC,IAAI,CAAA,CAAA,CACJC,IAAI,GAAA,CAAA,CACJC,OAAOC,QAAAA;GACJ,IAAI;IACAhB,kBAAkBgB,IAAIC,OAAO,EAAEC,gBAAgB,KAAK,CAAA;GACxD,SAASC,GAAG;IACRH,IAAII,OAAOC,KAAK;KACZC,OAAON,IAAIC;KACXM,MAAM;KACNC,SAASL,aAAaM,QAAQN,EAAEK,UAAU;IAC9C,CAAA;GACJ;EACJ,CAAA,CAAA;EAGR,KAAKE,MAAM,QAAQ,EAAEC,OAAOtB,wBAAwBuB,OAAO,GAAGnB,aAAAA;EAC9D,KAAKiB,MAAM,QAAQ;GACfC,OAAOtB,wBAAwBwB;GAC/BC,UAAU;EACd,GAAGrB,aAAAA;EAEH,KAAKiB,MACD,~~gBACA~~,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAEM,OAAM,CAAA,CAAGG,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKiB,SAAQ,CAAA,CAAA;EAGvD,KAAKL,MACD,UACA,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAE4B,QAAO,CAAA,CAAA;EAG7B,KAAKN,MACD,QACA,EAAEC,OAAOtB,wBAAwBuB,OAAO,GACxCzB,gBAAgBC,EAAEM,OAAM,CAAA,CAAGG,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKY,MACD,~~aACA~~,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAE6B,KAAI,CAAA,CAAGF,SAAQ,CAAA,CAAA;EAGrC,KAAKL,MACD,~~YACA~~,EAAEC,OAAOtB,wBAAwBuB,OAAO,GACxCzB,gBAAgBC,EAAE6B,KAAI,CAAA,CAAGF,SAAQ,CAAA,CAAA;EAGrC,KAAKL,MAAM,EAAEI,UAAU,KAAK,GAAG,IAAIxB,0BAA0B,CAAC,CAAA,CAAA;EAE9D,KAAKoB,MACD,YACA,EAAEI,UAAU,KAAK,GACjB,OAAOd,QAAAA;GACH,IAAI,CAACkB,MAAMC,QAAQnB,IAAIC,KAAK,GAExB;GAGJ,IACIhB,SAASe,IAAIqB,IAAI,KACjBrB,IAAIqB,KAAKC,SAASvC,kBAAkBwC,WAEpC;GAGJ,MAAMC,WAAWxB,IAAIC,MAAMwB,KAAKC,UAAU,KAAKC,IAAID,OAAO;IACtDf,OAAOX,IAAIW;IACXiB,MAAM;IACNC,MAAM7B,IAAI6B;GACd,CAAA,CAAA;GAEA,OAAOC,QAAQC,IAAIP,QAAAA;EACvB,CAAA;CAER;AACJ"}
1	+ {"version":3,"file":"validation.mjs","names":["BuiltInPolicyType","isPolicyNameValid","isObject","Container","createValidator","z","RequestHandlerOperation","PolicyAttributesValidator","PolicyValidator","initialize","nameValidator","string","trim","toLowerCase","min","max","check","ctx","value","throwOnFailure","e","issues","push","input","code","message","Error","mount","group","CREATE","UPDATE","optional","nullable","boolean","uuid","Array","isArray","undefined","data","type","COMPOSITE","promises","map","child","run","flat","path","Promise","all"],"sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType } from '@authup/access';\nimport { isPolicyNameValid } from '@authup/core-kit';\nimport { isObject } from 'smob';\nimport type { ValidatorContext } from 'validup';\nimport { Container } from 'validup';\nimport { createValidator } from '@validup/zod';\nimport { z } from 'zod';\nimport type { PolicyEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\nimport { PolicyAttributesValidator } from './attributes-validator.ts';\n\nexport class PolicyValidator extends Container<PolicyEntity & { parentId?: string \| null }> {\n protected initialize() {\n super.initialize();\n\n const nameValidator = createValidator(\n z.string()\n .trim()\n .toLowerCase()\n .min(3)\n .max(128)\n .check((ctx) => {\n try {\n isPolicyNameValid(ctx.value, { throwOnFailure: true });\n } catch (e) {\n ctx.issues.push({\n input: ctx.value,\n code: 'custom',\n message: e instanceof Error ? e.message : 'The policy name is not valid.',\n });\n }\n }),\n );\n\n this.mount('name', { group: RequestHandlerOperation.CREATE }, nameValidator);\n this.mount('name', {\n group: RequestHandlerOperation.UPDATE,\n optional: true,\n }, nameValidator);\n\n this.mount(\n 'displayName',\n { optional: true },\n createValidator(z.string().min(3).max(256).nullable()),\n );\n\n this.mount(\n 'invert',\n { optional: true },\n createValidator(z.boolean()),\n );\n\n this.mount(\n 'type',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.string().min(3).max(128)),\n );\n\n this.mount(\n 'parentId',\n { optional: true },\n createValidator(z.uuid().nullable()),\n );\n\n this.mount(\n 'realmId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid().nullable()),\n );\n\n this.mount({ optional: true }, new PolicyAttributesValidator({}));\n\n this.mount(\n 'children',\n { optional: true },\n async (ctx: ValidatorContext) => {\n if (!Array.isArray(ctx.value)) {\n // todo: throw error\n return undefined;\n }\n\n if (\n isObject(ctx.data) &&\n ctx.data.type !== BuiltInPolicyType.COMPOSITE\n ) {\n return undefined;\n }\n\n const promises = ctx.value.map((child) => this.run(child, {\n group: ctx.group,\n flat: false,\n path: ctx.path,\n }));\n\n return Promise.all(promises);\n },\n );\n }\n}\n"],"mappings":";;;;;;;;;;;;;AAkBA,IAAaQ,kBAAb,cAAqCL,UAAAA;CACvBM,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,gBAAgBN,gBAClBC,EAAEM,OAAM,CAAA,CACHC,KAAI,CAAA,CACJC,YAAW,CAAA,CACXC,IAAI,CAAA,CAAA,CACJC,IAAI,GAAA,CAAA,CACJC,OAAOC,QAAAA;GACJ,IAAI;IACAhB,kBAAkBgB,IAAIC,OAAO,EAAEC,gBAAgB,KAAK,CAAA;GACxD,SAASC,GAAG;IACRH,IAAII,OAAOC,KAAK;KACZC,OAAON,IAAIC;KACXM,MAAM;KACNC,SAASL,aAAaM,QAAQN,EAAEK,UAAU;IAC9C,CAAA;GACJ;EACJ,CAAA,CAAA;EAGR,KAAKE,MAAM,QAAQ,EAAEC,OAAOtB,wBAAwBuB,OAAO,GAAGnB,aAAAA;EAC9D,KAAKiB,MAAM,QAAQ;GACfC,OAAOtB,wBAAwBwB;GAC/BC,UAAU;EACd,GAAGrB,aAAAA;EAEH,KAAKiB,MACD,eACA,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAEM,OAAM,CAAA,CAAGG,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKiB,SAAQ,CAAA,CAAA;EAGvD,KAAKL,MACD,UACA,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAE4B,QAAO,CAAA,CAAA;EAG7B,KAAKN,MACD,QACA,EAAEC,OAAOtB,wBAAwBuB,OAAO,GACxCzB,gBAAgBC,EAAEM,OAAM,CAAA,CAAGG,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKY,MACD,YACA,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAE6B,KAAI,CAAA,CAAGF,SAAQ,CAAA,CAAA;EAGrC,KAAKL,MACD,WACA,EAAEC,OAAOtB,wBAAwBuB,OAAO,GACxCzB,gBAAgBC,EAAE6B,KAAI,CAAA,CAAGF,SAAQ,CAAA,CAAA;EAGrC,KAAKL,MAAM,EAAEI,UAAU,KAAK,GAAG,IAAIxB,0BAA0B,CAAC,CAAA,CAAA;EAE9D,KAAKoB,MACD,YACA,EAAEI,UAAU,KAAK,GACjB,OAAOd,QAAAA;GACH,IAAI,CAACkB,MAAMC,QAAQnB,IAAIC,KAAK,GAExB;GAGJ,IACIhB,SAASe,IAAIqB,IAAI,KACjBrB,IAAIqB,KAAKC,SAASvC,kBAAkBwC,WAEpC;GAGJ,MAAMC,WAAWxB,IAAIC,MAAMwB,KAAKC,UAAU,KAAKC,IAAID,OAAO;IACtDf,OAAOX,IAAIW;IACXiB,MAAM;IACNC,MAAM7B,IAAI6B;GACd,CAAA,CAAA;GAEA,OAAOC,QAAQC,IAAIP,QAAAA;EACvB,CAAA;CAER;AACJ"}

package/dist/adapters/http/controllers/entities/role-attribute/utils/validation.mjs CHANGED Viewed

@@ -11,7 +11,7 @@ var RoleAttributeRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
 		this.mount("name", { group: RequestHandlerOperation.CREATE }, createValidator(z.string().min(3).max(255)));
-		this.mount("role_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("roleId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
 		this.mount("value", { optional: true }, createValidator(z.string().min(3).max(512).nullable()));
 	}
 };

package/dist/adapters/http/controllers/entities/role-attribute/utils/validation.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","RoleAttributeRequestValidator","initialize","mount","group","CREATE","string","min","max","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/role-attribute/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RoleAttribute } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class RoleAttributeRequestValidator extends Container<\n RoleAttribute\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'name',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.string().min(3).max(255)),\n );\n\n this.mount(\n '~~role_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'value',\n { optional: true },\n createValidator(z.string().min(3).max(512).nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,gCAAb,cAAmDH,UAAAA;CAGrCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,QACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKL,MACD,~~WACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEU,KAAI,CAAA,CAAA;EAG1B,KAAKN,MACD,SACA,EAAEO,UAAU,KAAK,GACjBb,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKG,SAAQ,CAAA,CAAA;CAE3D;AACJ"}
1	+ {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","RoleAttributeRequestValidator","initialize","mount","group","CREATE","string","min","max","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/role-attribute/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RoleAttribute } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class RoleAttributeRequestValidator extends Container<\n RoleAttribute\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'name',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.string().min(3).max(255)),\n );\n\n this.mount(\n 'roleId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'value',\n { optional: true },\n createValidator(z.string().min(3).max(512).nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,gCAAb,cAAmDH,UAAAA;CAGrCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,QACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKL,MACD,UACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEU,KAAI,CAAA,CAAA;EAG1B,KAAKN,MACD,SACA,EAAEO,UAAU,KAAK,GACjBb,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKG,SAAQ,CAAA,CAAA;CAE3D;AACJ"}

package/dist/adapters/http/controllers/entities/role-permission/utils/validation.mjs CHANGED Viewed

@@ -10,9 +10,9 @@ import { z } from "zod";
 var RolePermissionRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
-		this.mount("role_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("permission_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("policy_id", { optional: true }, createValidator(z.uuid().nullable()));
+		this.mount("roleId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("permissionId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("policyId", { optional: true }, createValidator(z.uuid().nullable()));
 	}
 };
 //#endregion

package/dist/adapters/http/controllers/entities/role-permission/utils/validation.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","RolePermissionRequestValidator","initialize","mount","group","CREATE","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/role-permission/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RolePermissionEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class RolePermissionRequestValidator extends Container<\n RolePermissionEntity\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n '~~role_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n '~~permission_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n '~~policy_id~~',\n { optional: true },\n createValidator(z.uuid().nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,iCAAb,cAAoDH,UAAAA;CAGtCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,~~WACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,~~iBACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,~~aACA~~,EAAEI,UAAU,KAAK,GACjBV,gBAAgBE,EAAEO,KAAI,CAAA,CAAGE,SAAQ,CAAA,CAAA;CAEzC;AACJ"}
1	+ {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","RolePermissionRequestValidator","initialize","mount","group","CREATE","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/role-permission/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RolePermissionEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class RolePermissionRequestValidator extends Container<\n RolePermissionEntity\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'roleId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'permissionId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'policyId',\n { optional: true },\n createValidator(z.uuid().nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,iCAAb,cAAoDH,UAAAA;CAGtCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,UACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,gBACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,YACA,EAAEI,UAAU,KAAK,GACjBV,gBAAgBE,EAAEO,KAAI,CAAA,CAAGE,SAAQ,CAAA,CAAA;CAEzC;AACJ"}