npm - @authup/server-core - Versions diffs - 1.0.0-beta.53 → 1.0.0-beta.54 - Mend

@authup/server-core 1.0.0-beta.53 → 1.0.0-beta.54

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1152) hide show

package/dist/adapters/http/controllers/entities/session/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["DContext","DController","DDelete","DGet","DPath","DTags","useRequestQuery","isSelfToken","ForceLoggedInMiddleware","buildActorContext","useRequestSessionId","SessionController","service","ctx","getMany","event","actor","data","meta","getOne","id","resolvedId","dropMany","result","deleteMany","query","currentSessionId","response","status","drop","entity","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/session/module.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DTags,\n} from '@routup/decorators';\nimport type { Session } from '@authup/core-kit';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { EntityCollectionResponse, SessionDeleteManyResponse } from '@authup/core-http-kit';\nimport { isSelfToken } from '../../../../../utils/index.ts';\nimport type { ISessionService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext, useRequestSessionId } from '../../../request/index.ts';\n\nexport type SessionControllerContext = {\n service: ISessionService,\n};\n\n@DTags('session')\n@DController(['/sessions', '/realms/:realmId/sessions'])\nexport class SessionController {\n protected service: ISessionService;\n\n constructor(ctx: SessionControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<Session>> {\n const actor = buildActorContext(event);\n const {\n data,\n meta,\n } = await this.service.getMany(useRequestQuery(event), actor);\n\n return {\n data,\n meta,\n };\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<Session> {\n const actor = buildActorContext(event);\n\n // `@me` / `@self` resolve to the caller's current session.\n const resolvedId = isSelfToken(id) ? (useRequestSessionId(event) ?? id) : id;\n\n return this.service.getOne(resolvedId, actor);\n }\n\n @DDelete('', [ForceLoggedInMiddleware])\n async dropMany(\n @DContext() event: IAppEvent,\n ): Promise<SessionDeleteManyResponse> {\n const actor = buildActorContext(event);\n\n // A recognized target filter (e.g. `?filter[~~user_id~~]=<uuid>`) → admin\n // force-logout (SESSION_DELETE + per-session realm-match). No filter →\n // self-service \"log out my other devices\" (keeps the current session).\n const result = await this.service.deleteMany(actor, {\n query: useRequestQuery(event),\n currentSessionId: useRequestSessionId(event),\n });\n\n event.response.status = 202;\n return result;\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<Session> {\n const actor = buildActorContext(event);\n\n const resolvedId = isSelfToken(id) ? (useRequestSessionId(event) ?? id) : id;\n const entity = await this.service.delete(resolvedId, actor);\n\n event.response.status = 202;\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,IAAaW,oBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA+B;EACvC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC0C;EAC1C,MAAME,QAAQP,kBAAkBM,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQR,gBAAgBS,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,OACF,IACA,OACgB;EAChB,MAAMH,QAAQP,kBAAkBM,KAAAA;EAGhC,MAAMM,aAAad,YAAYa,EAAAA,IAAOV,oBAAoBK,KAAAA,KAAUK,KAAMA;EAE1E,OAAO,KAAKR,QAAQO,OAAOE,YAAYL,KAAAA;CAC3C;CAEA,MACMM,SACF,OACkC;EAClC,MAAMN,QAAQP,kBAAkBM,KAAAA;EAKhC,MAAMQ,SAAS,MAAM,KAAKX,QAAQY,WAAWR,OAAO;GAChDS,OAAOnB,gBAAgBS,KAAAA;GACvBW,kBAAkBhB,oBAAoBK,KAAAA;EAC1C,CAAA;EAEAA,MAAMY,SAASC,SAAS;EACxB,OAAOL;CACX;CAEA,MACMM,KACF,IACA,OACgB;EAChB,MAAMb,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAMM,aAAad,YAAYa,EAAAA,IAAOV,oBAAoBK,KAAAA,KAAUK,KAAMA;EAC1E,MAAMU,SAAS,MAAM,KAAKlB,QAAQmB,OAAOV,YAAYL,KAAAA;EAErDD,MAAMY,SAASC,SAAS;EACxB,OAAOE;CACX;AACJ;;WA5DetB,uBAAAA,CAAAA;;;;;;;eAgBIA,uBAAAA,CAAAA;;;;;;;;cAaDA,uBAAAA,CAAAA;;;;;;;kBAkBIA,uBAAAA,CAAAA;;;;;;;;;cAvDR,aAAa,2BAAA,CAAA"}
1	+ {"version":3,"file":"module.mjs","names":["DContext","DController","DDelete","DGet","DPath","DTags","useRequestQuery","isSelfToken","ForceLoggedInMiddleware","buildActorContext","useRequestSessionId","SessionController","service","ctx","getMany","event","actor","data","meta","getOne","id","resolvedId","dropMany","result","deleteMany","query","currentSessionId","response","status","drop","entity","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/session/module.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DTags,\n} from '@routup/decorators';\nimport type { Session } from '@authup/core-kit';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { EntityCollectionResponse, SessionDeleteManyResponse } from '@authup/core-http-kit';\nimport { isSelfToken } from '../../../../../utils/index.ts';\nimport type { ISessionService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext, useRequestSessionId } from '../../../request/index.ts';\n\nexport type SessionControllerContext = {\n service: ISessionService,\n};\n\n@DTags('session')\n@DController(['/sessions', '/realms/:realmId/sessions'])\nexport class SessionController {\n protected service: ISessionService;\n\n constructor(ctx: SessionControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<Session>> {\n const actor = buildActorContext(event);\n const {\n data,\n meta,\n } = await this.service.getMany(useRequestQuery(event), actor);\n\n return {\n data,\n meta,\n };\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<Session> {\n const actor = buildActorContext(event);\n\n // `@me` / `@self` resolve to the caller's current session.\n const resolvedId = isSelfToken(id) ? (useRequestSessionId(event) ?? id) : id;\n\n return this.service.getOne(resolvedId, actor);\n }\n\n @DDelete('', [ForceLoggedInMiddleware])\n async dropMany(\n @DContext() event: IAppEvent,\n ): Promise<SessionDeleteManyResponse> {\n const actor = buildActorContext(event);\n\n // A recognized target filter (e.g. `?filter[userId]=<uuid>`) → admin\n // force-logout (SESSION_DELETE + per-session realm-match). No filter →\n // self-service \"log out my other devices\" (keeps the current session).\n const result = await this.service.deleteMany(actor, {\n query: useRequestQuery(event),\n currentSessionId: useRequestSessionId(event),\n });\n\n event.response.status = 202;\n return result;\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<Session> {\n const actor = buildActorContext(event);\n\n const resolvedId = isSelfToken(id) ? (useRequestSessionId(event) ?? id) : id;\n const entity = await this.service.delete(resolvedId, actor);\n\n event.response.status = 202;\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,IAAaW,oBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA+B;EACvC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC0C;EAC1C,MAAME,QAAQP,kBAAkBM,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQR,gBAAgBS,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,OACF,IACA,OACgB;EAChB,MAAMH,QAAQP,kBAAkBM,KAAAA;EAGhC,MAAMM,aAAad,YAAYa,EAAAA,IAAOV,oBAAoBK,KAAAA,KAAUK,KAAMA;EAE1E,OAAO,KAAKR,QAAQO,OAAOE,YAAYL,KAAAA;CAC3C;CAEA,MACMM,SACF,OACkC;EAClC,MAAMN,QAAQP,kBAAkBM,KAAAA;EAKhC,MAAMQ,SAAS,MAAM,KAAKX,QAAQY,WAAWR,OAAO;GAChDS,OAAOnB,gBAAgBS,KAAAA;GACvBW,kBAAkBhB,oBAAoBK,KAAAA;EAC1C,CAAA;EAEAA,MAAMY,SAASC,SAAS;EACxB,OAAOL;CACX;CAEA,MACMM,KACF,IACA,OACgB;EAChB,MAAMb,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAMM,aAAad,YAAYa,EAAAA,IAAOV,oBAAoBK,KAAAA,KAAUK,KAAMA;EAC1E,MAAMU,SAAS,MAAM,KAAKlB,QAAQmB,OAAOV,YAAYL,KAAAA;EAErDD,MAAMY,SAASC,SAAS;EACxB,OAAOE;CACX;AACJ;;WA5DetB,uBAAAA,CAAAA;;;;;;;eAgBIA,uBAAAA,CAAAA;;;;;;;;cAaDA,uBAAAA,CAAAA;;;;;;;kBAkBIA,uBAAAA,CAAAA;;;;;;;;;cAvDR,aAAa,2BAAA,CAAA"}

package/dist/adapters/http/controllers/entities/trust-anchor/module.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/trust-anchor/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAYpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAQxE,MAAM,MAAM,4BAA4B,GAAG;IACvC,OAAO,EAAE,mBAAmB,CAAC;CAChC,CAAC;AAEF,qBAEa,qBAAqB;IAC9B,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC;gBAE3B,GAAG,EAAE,4BAA4B;IAKvC,OAAO,CACG,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;~~IAqB3C~~,MAAM,CACK,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,WAAW,CAAC;IAOjB,GAAG,CACI,IAAI,EAAE,wBAAwB,EAC3B,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,WAAW,CAAC;IAWjB,IAAI,CACO,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,wBAAwB,EAC3B,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,WAAW,CAAC;IAOjB,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,WAAW,CAAC;CAQ1B"}
1	+ {"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/trust-anchor/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAYpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAQxE,MAAM,MAAM,4BAA4B,GAAG;IACvC,OAAO,EAAE,mBAAmB,CAAC;CAChC,CAAC;AAEF,qBAEa,qBAAqB;IAC9B,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC;gBAE3B,GAAG,EAAE,4BAA4B;IAKvC,OAAO,CACG,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAY3C,MAAM,CACK,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,WAAW,CAAC;IAOjB,GAAG,CACI,IAAI,EAAE,wBAAwB,EAC3B,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,WAAW,CAAC;IAWjB,IAAI,CACO,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,wBAAwB,EAC3B,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,WAAW,CAAC;IAOjB,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,WAAW,CAAC;CAQ1B"}

package/dist/adapters/http/controllers/entities/trust-anchor/module.mjs CHANGED Viewed

@@ -30,13 +30,7 @@ var TrustAnchorController = class {
 	}
 	async getMany(event) {
 		const actor = buildActorContext(event);
-		const query = useRequestQuery(event);
-		const realmId = getRequestRealmID(event);
-		if (realmId) query.filter = {
-			...query.filter && typeof query.filter === "object" ? query.filter : {},
-			realm_id: realmId
-		};
-		const { data, meta } = await this.service.getMany(query, actor);
+		const { data, meta } = await this.service.getMany(useRequestQuery(event), actor, { realmId: getRequestRealmID(event) });
 		return {
 			data,
 			meta

package/dist/adapters/http/controllers/entities/trust-anchor/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["useRequestQuery","DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","TrustAnchorController","service","ctx","getMany","event","actor","~~query~~","~~realmId~~","~~filter~~","~~realm_id","data","meta","~~getOne","id","add","entity","create","response","status","edit","update","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/trust-anchor/module.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n EntityCollectionResponse,\n TrustAnchorCreatePayload,\n TrustAnchorUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { TrustAnchor } from '@authup/core-kit';\nimport { useRequestQuery } from '@routup/basic/query';\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport type { ITrustAnchorService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n applyRouteRealmIDToBody,\n buildActorContext,\n getRequestRealmID,\n} from '../../../request/index.ts';\n\nexport type TrustAnchorControllerContext = {\n service: ITrustAnchorService,\n};\n\n@DTags('trust-anchor')\n@DController(['/trust-anchors', '/realms/:realmId/trust-anchors'])\nexport class TrustAnchorController {\n protected service: ITrustAnchorService;\n\n constructor(ctx: TrustAnchorControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<TrustAnchor>> {\n const actor = buildActorContext(event);\n\n const ~~query = useRequestQuery(event);\n const realmId = getRequestRealmID(event);\n if (realmId)~~ {~~\n query.filter~~ ~~= {\n ...(query.filter && typeof query.filter === 'object' ? query.filter : {}),\n realm_id: realmId,\n };\n }\n\n const {~~ data, meta } = await this.service.getMany(~~query~~, actor);\n\n return {\n data,\n meta,\n };\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n const actor = buildActorContext(event);\n\n return this.service.getOne(id, actor, getRequestRealmID(event));\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: TrustAnchorCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n applyRouteRealmIDToBody(event, data);\n const actor = buildActorContext(event);\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async edit(\n @DPath('id') id: string,\n @DBody() data: TrustAnchorUpdatePayload,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n const actor = buildActorContext(event);\n\n return this.service.update(id, data, actor, getRequestRealmID(event));\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n const actor = buildActorContext(event);\n const entity = await this.service.delete(id, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAkCD,IAAaa,wBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAmC;EAC3C,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC8C;EAC9C,MAAME,QAAQP,kBAAkBM,KAAAA;EAEhC,~~MAAME~~,~~QAAQnB~~,~~gBAAgBiB~~,~~KAAAA;EAC9B,MAAMG,UAAUR,kBAAkBK,KAAAA;EAClC,IAAIG,SACAD,MAAME,~~SAAS~~;GACX~~,~~GAAIF~~,~~MAAME~~,~~UAAU~~,~~OAAOF~~,~~MAAME~~,~~WAAW~~,~~WAAWF~~,~~MAAME~~,~~SAAS,CAAC;GACvEC,UAAUF;EACd;EAGJ,MAAM,~~EAAEG,~~MAAMC~~,~~SAAS~~,~~MAAM~~,~~KAAKV~~,~~QAAQE,QAAQG,OAAOD,KAAAA~~;~~EAEzD~~,OAAO;~~GACHK~~;GACAC;EACJ;CACJ;CAEA,~~MACMC~~,OACF,IACA,OACoB;EACpB,~~MAAMP~~,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,~~QAAQW~~,OAAOC,~~IAAIR~~,OAAON,kBAAkBK,KAAAA,CAAAA;CAC5D;CAEA,~~MACMU~~,IACF,MACA,OACoB;~~EACpBjB~~,wBAAwBO,~~OAAOM~~,IAAAA;EAC/B,~~MAAML~~,QAAQP,kBAAkBM,KAAAA;EAChC,~~MAAMW~~,SAAS,MAAM,~~KAAKd~~,~~QAAQe~~,~~OAAON~~,~~MAAML~~,KAAAA;EAE/CD,~~MAAMa~~,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,KACF,IACA,MACA,OACoB;EACpB,~~MAAMd~~,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,~~QAAQmB~~,OAAOP,~~IAAIH~~,~~MAAML~~,OAAON,kBAAkBK,KAAAA,CAAAA;CAClE;CAEA,~~MACMiB~~,KACF,IACA,OACoB;EACpB,~~MAAMhB~~,QAAQP,kBAAkBM,KAAAA;EAChC,~~MAAMW~~,SAAS,MAAM,~~KAAKd~~,~~QAAQqB~~,OAAOT,~~IAAIR~~,KAAAA;EAE7CD,~~MAAMa~~,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;~~WAtEenB~~,uBAAAA,CAAAA;;;;;;;~~eAuBIA~~,uBAAAA,CAAAA;;;;;;;;YAUHA,uBAAAA,CAAAA;;;;;;;;gBAcIA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAWEA,uBAAAA,CAAAA;;;;;;;;;~~cAlER~~,kBAAkB,gCAAA,CAAA"}
1	+ {"version":3,"file":"module.mjs","names":["useRequestQuery","DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","TrustAnchorController","service","ctx","getMany","event","actor","data","meta","realmId","getOne","id","add","entity","create","response","status","edit","update","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/trust-anchor/module.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n EntityCollectionResponse,\n TrustAnchorCreatePayload,\n TrustAnchorUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { TrustAnchor } from '@authup/core-kit';\nimport { useRequestQuery } from '@routup/basic/query';\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport type { ITrustAnchorService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n applyRouteRealmIDToBody,\n buildActorContext,\n getRequestRealmID,\n} from '../../../request/index.ts';\n\nexport type TrustAnchorControllerContext = {\n service: ITrustAnchorService,\n};\n\n@DTags('trust-anchor')\n@DController(['/trust-anchors', '/realms/:realmId/trust-anchors'])\nexport class TrustAnchorController {\n protected service: ITrustAnchorService;\n\n constructor(ctx: TrustAnchorControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<TrustAnchor>> {\n const actor = buildActorContext(event);\n\n const { data, meta } = await this.service.getMany(useRequestQuery(event), actor, { realmId: getRequestRealmID(event) });\n\n return {\n data,\n meta,\n };\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n const actor = buildActorContext(event);\n\n return this.service.getOne(id, actor, getRequestRealmID(event));\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: TrustAnchorCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n applyRouteRealmIDToBody(event, data);\n const actor = buildActorContext(event);\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async edit(\n @DPath('id') id: string,\n @DBody() data: TrustAnchorUpdatePayload,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n const actor = buildActorContext(event);\n\n return this.service.update(id, data, actor, getRequestRealmID(event));\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n const actor = buildActorContext(event);\n const entity = await this.service.delete(id, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAkCD,IAAaa,wBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAmC;EAC3C,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC8C;EAC9C,MAAME,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAM,EAAEE,MAAMC,SAAS,MAAM,KAAKN,QAAQE,QAAQhB,gBAAgBiB,KAAAA,GAAQC,OAAO,EAAEG,SAAST,kBAAkBK,KAAAA,EAAO,CAAA;EAErH,OAAO;GACHE;GACAC;EACJ;CACJ;CAEA,MACME,OACF,IACA,OACoB;EACpB,MAAMJ,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,QAAQQ,OAAOC,IAAIL,OAAON,kBAAkBK,KAAAA,CAAAA;CAC5D;CAEA,MACMO,IACF,MACA,OACoB;EACpBd,wBAAwBO,OAAOE,IAAAA;EAC/B,MAAMD,QAAQP,kBAAkBM,KAAAA;EAChC,MAAMQ,SAAS,MAAM,KAAKX,QAAQY,OAAOP,MAAMD,KAAAA;EAE/CD,MAAMU,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,KACF,IACA,MACA,OACoB;EACpB,MAAMX,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,QAAQgB,OAAOP,IAAIJ,MAAMD,OAAON,kBAAkBK,KAAAA,CAAAA;CAClE;CAEA,MACMc,KACF,IACA,OACoB;EACpB,MAAMb,QAAQP,kBAAkBM,KAAAA;EAChC,MAAMQ,SAAS,MAAM,KAAKX,QAAQkB,OAAOT,IAAIL,KAAAA;EAE7CD,MAAMU,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;WA7DehB,uBAAAA,CAAAA;;;;;;;eAcIA,uBAAAA,CAAAA;;;;;;;;YAUHA,uBAAAA,CAAAA;;;;;;;;gBAcIA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAWEA,uBAAAA,CAAAA;;;;;;;;;cAzDR,kBAAkB,gCAAA,CAAA"}

package/dist/adapters/http/controllers/entities/user-attribute/utils/validation.mjs CHANGED Viewed

@@ -11,7 +11,7 @@ var UserAttributeRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
 		this.mount("name", { group: RequestHandlerOperation.CREATE }, createValidator(z.string().min(3).max(255)));
-		this.mount("user_id", {
+		this.mount("userId", {
 			group: RequestHandlerOperation.CREATE,
 			optional: true
 		}, createValidator(z.uuid().nullable()));

package/dist/adapters/http/controllers/entities/user-attribute/utils/validation.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserAttributeRequestValidator","initialize","mount","group","CREATE","string","min","max","optional","uuid","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-attribute/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserAttribute } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserAttributeRequestValidator extends Container<\n UserAttribute\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'name',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.string().min(3).max(255)),\n );\n\n this.mount(\n '~~user_id~~',\n {\n group: RequestHandlerOperation.CREATE,\n optional: true,\n },\n createValidator(z.uuid().nullable()),\n );\n\n this.mount(\n 'value',\n { optional: true },\n createValidator(z.string().min(3).max(512).nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,gCAAb,cAAmDH,UAAAA;CAGrCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,QACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKL,MACD,~~WACA~~;GACIC,OAAOJ,wBAAwBK;GAC/BI,UAAU;EACd,GACAZ,gBAAgBE,EAAEW,KAAI,CAAA,CAAGC,SAAQ,CAAA,CAAA;EAGrC,KAAKR,MACD,SACA,EAAEM,UAAU,KAAK,GACjBZ,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKG,SAAQ,CAAA,CAAA;CAE3D;AACJ"}
1	+ {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserAttributeRequestValidator","initialize","mount","group","CREATE","string","min","max","optional","uuid","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-attribute/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserAttribute } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserAttributeRequestValidator extends Container<\n UserAttribute\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'name',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.string().min(3).max(255)),\n );\n\n this.mount(\n 'userId',\n {\n group: RequestHandlerOperation.CREATE,\n optional: true,\n },\n createValidator(z.uuid().nullable()),\n );\n\n this.mount(\n 'value',\n { optional: true },\n createValidator(z.string().min(3).max(512).nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,gCAAb,cAAmDH,UAAAA;CAGrCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,QACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKL,MACD,UACA;GACIC,OAAOJ,wBAAwBK;GAC/BI,UAAU;EACd,GACAZ,gBAAgBE,EAAEW,KAAI,CAAA,CAAGC,SAAQ,CAAA,CAAA;EAGrC,KAAKR,MACD,SACA,EAAEM,UAAU,KAAK,GACjBZ,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKG,SAAQ,CAAA,CAAA;CAE3D;AACJ"}

package/dist/adapters/http/controllers/entities/user-authenticator/module.mjs CHANGED Viewed

@@ -56,7 +56,7 @@ var UserAuthenticatorController = class {
 		const userId = this.resolveUserId(id, event);
 		const result = await this.service.enroll({
 			...data,
-			user_id: userId
+			userId
 		}, actor);
 		event.response.status = 201;
 		return result;

package/dist/adapters/http/controllers/entities/user-authenticator/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","IdentityType","BadRequestError","useRequestQuery","isSelfToken","ForceLoggedInMiddleware","buildActorContext","useRequestIdentity","UserAuthenticatorController","service","ctx","resolveUserId","id","event","identity","type","USER","getMany","actor","userId","data","meta","enroll","result","~~user_id","~~response","status","getOne","deviceId","confirm","code","drop","entity","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/user-authenticator/module.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n /\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport { IdentityType } from '@authup/core-kit';\nimport type { UserAuthenticator } from '@authup/core-kit';\nimport { BadRequestError } from '@authup/errors';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n UserAuthenticatorConfirmPayload,\n UserAuthenticatorCreatePayload,\n UserAuthenticatorEnrollResponse,\n} from '@authup/core-http-kit';\nimport { isSelfToken } from '../../../../../utils/index.ts';\nimport type { IUserAuthenticatorService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext, useRequestIdentity } from '../../../request/index.ts';\n\nexport type UserAuthenticatorControllerContext = {\n service: IUserAuthenticatorService,\n};\n\n@DTags('userAuthenticator')\n@DController('/users/:id/authenticators')\nexport class UserAuthenticatorController {\n protected service: IUserAuthenticatorService;\n\n constructor(ctx: UserAuthenticatorControllerContext) {\n this.service = ctx.service;\n }\n\n /\n `@me` / `@self` resolve to the calling user identity.\n */\n protected resolveUserId(id: string, event: IAppEvent): string {\n if (isSelfToken(id)) {\n const identity = useRequestIdentity(event);\n if (identity && identity.type === IdentityType.USER) {\n return identity.id;\n }\n\n // A non-user identity (client~~/robot~~) has no authenticator\n // namespace — fail loud instead of letting the literal token\n // fall through and silently match zero rows.\n throw new BadRequestError('The @me/@self token can only be used by a user identity.');\n }\n\n return id;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<UserAuthenticator>> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n const { data, meta } = await this.service.getMany(useRequestQuery(event), actor, { userId });\n\n return {\n data,\n meta,\n };\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async enroll(\n @DPath('id') id: string,\n @DBody() data: UserAuthenticatorCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticatorEnrollResponse> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n // route wins silently over body\n const result = await this.service.enroll({ ...data, ~~user_id:~~ userId }, actor);\n\n event.response.status = 201;\n return result;\n }\n\n @DGet('/:deviceId', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DPath('deviceId') deviceId: string,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticator> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n return this.service.getOne(deviceId, actor, { userId });\n }\n\n @DPost('/:deviceId/confirm', [ForceLoggedInMiddleware])\n async confirm(\n @DPath('id') id: string,\n @DPath('deviceId') deviceId: string,\n @DBody() data: UserAuthenticatorConfirmPayload,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticator> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n if (!data \|\| typeof data.code !== 'string' \|\| !data.code) {\n throw new BadRequestError('A code must be provided.');\n }\n\n return this.service.confirm(deviceId, data.code, actor, { userId });\n }\n\n @DDelete('/:deviceId', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DPath('deviceId') deviceId: string,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticator> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n const entity = await this.service.delete(deviceId, actor, { userId });\n\n event.response.status = 202;\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAae,8BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAyC;EACjD,KAAKD,UAAUC,IAAID;CACvB;;;IAKA,cAAwBG,IAAYC,OAA0B;EAC1D,IAAIT,YAAYQ,EAAAA,GAAK;GACjB,MAAME,WAAWP,mBAAmBM,KAAAA;GACpC,IAAIC,YAAYA,SAASC,SAASd,aAAae,MAC3C,OAAOF,SAASF;GAMpB,MAAM,IAAIV,gBAAgB,0DAAA;EAC9B;EAEA,OAAOU;CACX;CAEA,MACMK,QACF,IACA,OACoD;EACpD,MAAMC,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,MAAM,EAAEO,MAAMC,SAAS,MAAM,KAAKZ,QAAQQ,QAAQd,gBAAgBU,KAAAA,GAAQK,OAAO,EAAEC,OAAO,CAAA;EAE1F,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,OACF,IACA,MACA,OACwC;EACxC,MAAMJ,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAGtC,MAAMU,SAAS,MAAM,KAAKd,QAAQa,OAAO;GAAE,GAAGF;~~GAAMI,SAASL~~;EAAO,GAAGD,KAAAA;~~EAEvEL~~,~~MAAMY~~,SAASC,SAAS;EACxB,~~OAAOH~~;CACX;CAEA,~~MACMI~~,OACF,IACA,UACA,OAC0B;EAC1B,~~MAAMT~~,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,OAAO,KAAKJ,~~QAAQkB~~,OAAOC,~~UAAUV~~,OAAO,EAAEC,OAAO,CAAA;CACzD;CAEA,~~MACMU~~,QACF,IACA,UACA,MACA,OAC0B;EAC1B,~~MAAMX~~,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,IAAI,CAACO,QAAQ,OAAOA,~~KAAKU~~,SAAS,YAAY,~~CAACV~~,~~KAAKU~~,MAChD,MAAM,~~IAAI5B~~,gBAAgB,0BAAA;EAG9B,OAAO,KAAKO,~~QAAQoB~~,QAAQD,~~UAAUR~~,~~KAAKU~~,~~MAAMZ~~,OAAO,EAAEC,OAAO,CAAA;CACrE;CAEA,~~MACMY~~,KACF,IACA,UACA,OAC0B;EAC1B,~~MAAMb~~,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,~~MAAMmB~~,SAAS,MAAM,~~KAAKvB~~,~~QAAQwB~~,OAAOL,~~UAAUV~~,OAAO,EAAEC,OAAO,CAAA;EAEnEN,~~MAAMY~~,SAASC,SAAS;EACxB,OAAOM;CACX;AACJ;;~~WA3Ee3B~~,uBAAAA,CAAAA;;;;;;;;YAgBCA,uBAAAA,CAAAA;;;;;;;;;;;;;qBAgBSA,uBAAAA,CAAAA;;;;;;;;;;;;;8BAYSA,uBAAAA,CAAAA;;;;;;;;;;;;;;;wBAiBNA,uBAAAA,CAAAA"}
1	+ {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","IdentityType","BadRequestError","useRequestQuery","isSelfToken","ForceLoggedInMiddleware","buildActorContext","useRequestIdentity","UserAuthenticatorController","service","ctx","resolveUserId","id","event","identity","type","USER","getMany","actor","userId","data","meta","enroll","result","response","status","getOne","deviceId","confirm","code","drop","entity","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/user-authenticator/module.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n /\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport { IdentityType } from '@authup/core-kit';\nimport type { UserAuthenticator } from '@authup/core-kit';\nimport { BadRequestError } from '@authup/errors';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n UserAuthenticatorConfirmPayload,\n UserAuthenticatorCreatePayload,\n UserAuthenticatorEnrollResponse,\n} from '@authup/core-http-kit';\nimport { isSelfToken } from '../../../../../utils/index.ts';\nimport type { IUserAuthenticatorService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext, useRequestIdentity } from '../../../request/index.ts';\n\nexport type UserAuthenticatorControllerContext = {\n service: IUserAuthenticatorService,\n};\n\n@DTags('userAuthenticator')\n@DController('/users/:id/authenticators')\nexport class UserAuthenticatorController {\n protected service: IUserAuthenticatorService;\n\n constructor(ctx: UserAuthenticatorControllerContext) {\n this.service = ctx.service;\n }\n\n /\n `@me` / `@self` resolve to the calling user identity.\n */\n protected resolveUserId(id: string, event: IAppEvent): string {\n if (isSelfToken(id)) {\n const identity = useRequestIdentity(event);\n if (identity && identity.type === IdentityType.USER) {\n return identity.id;\n }\n\n // A non-user identity (client) has no authenticator\n // namespace — fail loud instead of letting the literal token\n // fall through and silently match zero rows.\n throw new BadRequestError('The @me/@self token can only be used by a user identity.');\n }\n\n return id;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<UserAuthenticator>> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n const { data, meta } = await this.service.getMany(useRequestQuery(event), actor, { userId });\n\n return {\n data,\n meta,\n };\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async enroll(\n @DPath('id') id: string,\n @DBody() data: UserAuthenticatorCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticatorEnrollResponse> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n // route wins silently over body\n const result = await this.service.enroll({ ...data, userId }, actor);\n\n event.response.status = 201;\n return result;\n }\n\n @DGet('/:deviceId', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DPath('deviceId') deviceId: string,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticator> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n return this.service.getOne(deviceId, actor, { userId });\n }\n\n @DPost('/:deviceId/confirm', [ForceLoggedInMiddleware])\n async confirm(\n @DPath('id') id: string,\n @DPath('deviceId') deviceId: string,\n @DBody() data: UserAuthenticatorConfirmPayload,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticator> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n if (!data \|\| typeof data.code !== 'string' \|\| !data.code) {\n throw new BadRequestError('A code must be provided.');\n }\n\n return this.service.confirm(deviceId, data.code, actor, { userId });\n }\n\n @DDelete('/:deviceId', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DPath('deviceId') deviceId: string,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticator> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n const entity = await this.service.delete(deviceId, actor, { userId });\n\n event.response.status = 202;\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAae,8BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAyC;EACjD,KAAKD,UAAUC,IAAID;CACvB;;;IAKA,cAAwBG,IAAYC,OAA0B;EAC1D,IAAIT,YAAYQ,EAAAA,GAAK;GACjB,MAAME,WAAWP,mBAAmBM,KAAAA;GACpC,IAAIC,YAAYA,SAASC,SAASd,aAAae,MAC3C,OAAOF,SAASF;GAMpB,MAAM,IAAIV,gBAAgB,0DAAA;EAC9B;EAEA,OAAOU;CACX;CAEA,MACMK,QACF,IACA,OACoD;EACpD,MAAMC,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,MAAM,EAAEO,MAAMC,SAAS,MAAM,KAAKZ,QAAQQ,QAAQd,gBAAgBU,KAAAA,GAAQK,OAAO,EAAEC,OAAO,CAAA;EAE1F,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,OACF,IACA,MACA,OACwC;EACxC,MAAMJ,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAGtC,MAAMU,SAAS,MAAM,KAAKd,QAAQa,OAAO;GAAE,GAAGF;GAAMD;EAAO,GAAGD,KAAAA;EAE9DL,MAAMW,SAASC,SAAS;EACxB,OAAOF;CACX;CAEA,MACMG,OACF,IACA,UACA,OAC0B;EAC1B,MAAMR,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,OAAO,KAAKJ,QAAQiB,OAAOC,UAAUT,OAAO,EAAEC,OAAO,CAAA;CACzD;CAEA,MACMS,QACF,IACA,UACA,MACA,OAC0B;EAC1B,MAAMV,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,IAAI,CAACO,QAAQ,OAAOA,KAAKS,SAAS,YAAY,CAACT,KAAKS,MAChD,MAAM,IAAI3B,gBAAgB,0BAAA;EAG9B,OAAO,KAAKO,QAAQmB,QAAQD,UAAUP,KAAKS,MAAMX,OAAO,EAAEC,OAAO,CAAA;CACrE;CAEA,MACMW,KACF,IACA,UACA,OAC0B;EAC1B,MAAMZ,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,MAAMkB,SAAS,MAAM,KAAKtB,QAAQuB,OAAOL,UAAUT,OAAO,EAAEC,OAAO,CAAA;EAEnEN,MAAMW,SAASC,SAAS;EACxB,OAAOM;CACX;AACJ;;WA3Ee1B,uBAAAA,CAAAA;;;;;;;;YAgBCA,uBAAAA,CAAAA;;;;;;;;;;;;;qBAgBSA,uBAAAA,CAAAA;;;;;;;;;;;;;8BAYSA,uBAAAA,CAAAA;;;;;;;;;;;;;;;wBAiBNA,uBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/user-permission/utils/validation.mjs CHANGED Viewed

@@ -10,9 +10,9 @@ import { z } from "zod";
 var UserPermissionRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
-		this.mount("user_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("permission_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("policy_id", { optional: true }, createValidator(z.uuid().nullable()));
+		this.mount("userId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("permissionId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("policyId", { optional: true }, createValidator(z.uuid().nullable()));
 	}
 };
 //#endregion

package/dist/adapters/http/controllers/entities/user-permission/utils/validation.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserPermissionRequestValidator","initialize","mount","group","CREATE","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-permission/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserPermissionEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserPermissionRequestValidator extends Container<\n UserPermissionEntity\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n '~~user_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n '~~permission_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n '~~policy_id~~',\n { optional: true },\n createValidator(z.uuid().nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,iCAAb,cAAoDH,UAAAA;CAGtCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,~~WACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,~~iBACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,~~aACA~~,EAAEI,UAAU,KAAK,GACjBV,gBAAgBE,EAAEO,KAAI,CAAA,CAAGE,SAAQ,CAAA,CAAA;CAEzC;AACJ"}
1	+ {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserPermissionRequestValidator","initialize","mount","group","CREATE","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-permission/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserPermissionEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserPermissionRequestValidator extends Container<\n UserPermissionEntity\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'userId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'permissionId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'policyId',\n { optional: true },\n createValidator(z.uuid().nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,iCAAb,cAAoDH,UAAAA;CAGtCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,UACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,gBACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,YACA,EAAEI,UAAU,KAAK,GACjBV,gBAAgBE,EAAEO,KAAI,CAAA,CAAGE,SAAQ,CAAA,CAAA;CAEzC;AACJ"}

package/dist/adapters/http/controllers/entities/user-role/utils/validation.mjs CHANGED Viewed

@@ -10,8 +10,8 @@ import { z } from "zod";
 var UserRoleRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
-		this.mount("user_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("role_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("userId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("roleId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
 	}
 };
 //#endregion

package/dist/adapters/http/controllers/entities/user-role/utils/validation.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserRoleRequestValidator","initialize","mount","group","CREATE","uuid"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-role/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserRoleEntity } from '../../../../../database/domains/index.ts';\n\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserRoleRequestValidator extends Container<\n UserRoleEntity\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n '~~user_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n '~~role_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAcA,IAAaI,2BAAb,cAA8CH,UAAAA;CAGhCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,~~WACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,~~WACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;CAE9B;AACJ"}
1	+ {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserRoleRequestValidator","initialize","mount","group","CREATE","uuid"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-role/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserRoleEntity } from '../../../../../database/domains/index.ts';\n\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserRoleRequestValidator extends Container<\n UserRoleEntity\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'userId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'roleId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAcA,IAAaI,2BAAb,cAA8CH,UAAAA;CAGhCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,UACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,UACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;CAE9B;AACJ"}

package/dist/adapters/http/controllers/index.mjs CHANGED Viewed

@@ -29,11 +29,6 @@ import { StatusController } from "./workflows/status/module.mjs";
 import { TokenController } from "./workflows/token/module.mjs";
 import "./workflows/index.mjs";
 import { RealmController } from "./entities/realm/module.mjs";
-import { RobotController } from "./entities/robot/module.mjs";
-import { RobotPermissionController } from "./entities/robot-permission/module.mjs";
-import { RobotPermissionRequestValidator } from "./entities/robot-permission/utils/validation.mjs";
-import { RobotRoleController } from "./entities/robot-role/module.mjs";
-import { RobotRoleRequestValidator } from "./entities/robot-role/utils/validation.mjs";
 import { RoleController } from "./entities/role/module.mjs";
 import { RoleAttributeController } from "./entities/role-attribute/module.mjs";
 import { RoleAttributeRequestValidator } from "./entities/role-attribute/utils/validation.mjs";
@@ -54,4 +49,4 @@ import { UserPermissionRequestValidator } from "./entities/user-permission/utils
 import { UserRoleController } from "./entities/user-role/module.mjs";
 import { UserRoleRequestValidator } from "./entities/user-role/utils/validation.mjs";
 import "./entities/index.mjs";
-export { ActivateController, AuthenticatorChallengeController, AuthorizeController, ClientController, ClientPermissionController, ClientPermissionRequestValidator, ClientRoleController, ClientRoleRequestValidator, ClientScopeController, ClientScopeRequestValidator, ConsentController, EventController, IdentityProviderController, IdentityProviderRoleMappingController, JwkController, KeyController, LogoutController, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionPolicyController, PolicyAttributesValidator, PolicyController, PolicyValidator, RealmController, RegisterController, RobotController, RobotPermissionController, RobotPermissionRequestValidator, RobotRoleController, RobotRoleRequestValidator, RoleAttributeController, RoleAttributeRequestValidator, RoleController, RolePermissionController, RolePermissionRequestValidator, ScopeController, SessionController, StatusController, TokenController, TrustAnchorController, UserAttributeController, UserAttributeRequestValidator, UserAuthenticatorController, UserController, UserPermissionController, UserPermissionRequestValidator, UserRoleController, UserRoleRequestValidator, getJwkRouteHandler, getJwksRouteHandler };
+export { ActivateController, AuthenticatorChallengeController, AuthorizeController, ClientController, ClientPermissionController, ClientPermissionRequestValidator, ClientRoleController, ClientRoleRequestValidator, ClientScopeController, ClientScopeRequestValidator, ConsentController, EventController, IdentityProviderController, IdentityProviderRoleMappingController, JwkController, KeyController, LogoutController, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionPolicyController, PolicyAttributesValidator, PolicyController, PolicyValidator, RealmController, RegisterController, RoleAttributeController, RoleAttributeRequestValidator, RoleController, RolePermissionController, RolePermissionRequestValidator, ScopeController, SessionController, StatusController, TokenController, TrustAnchorController, UserAttributeController, UserAttributeRequestValidator, UserAuthenticatorController, UserController, UserPermissionController, UserPermissionRequestValidator, UserRoleController, UserRoleRequestValidator, getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/authorize/module.mjs CHANGED Viewed

@@ -86,16 +86,16 @@ var AuthorizeController = class {
 			client = {
 				id: result.client.id,
 				name: result.client.name,
-				display_name: result.client.display_name,
-				built_in: result.client.built_in,
-				created_at: result.client.created_at
+				displayName: result.client.displayName,
+				builtIn: result.client.builtIn,
+				createdAt: result.client.createdAt
 			};
 			scopes = result.scopes;
 			redirectUriVerified = result.redirectUriVerified;
 			if (result.client.realm) realm = {
 				id: result.client.realm.id,
 				name: result.client.realm.name,
-				display_name: result.client.realm.display_name
+				displayName: result.client.realm.displayName
 			};
 			codeRequest = result.data;
 		} catch (e) {

package/dist/adapters/http/controllers/workflows/authorize/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["DContext","DController","DGet","DPost","URL","useRequestQuery","OAuth2AccessDeniedError","OAuth2ErrorCode","isOAuth2AccessDeniedError","ForceUserLoggedInMiddleware","HTTPOAuth2Authorizer","renderUIPage","readFromLocations","OAuth2AuthorizationCodeRequestValidator","sanitizeError","AuthorizeController","options","codeRequestVerifier","codeRequestValidator","authorizer","ctx","codeIssuer","sessionManager","eventService","metrics","promptLoginMaxAge","mfaFreshnessMaxAge","mfaChallengeProvider","accessPolicyEvaluator","consentService","logger","confirm","event","result","authorizeWithRequest","url","redirectUri","state","searchParams","set","authorizationCode","href","e","ACCESS_DENIED","serve","codeRequest","client","scopes","realm","redirectUriVerified","error","merged","data","run","verify","id","name","display_name","built_in","created_at","normalized","message","query","forClient","requestURL","request","payload","config","baseURL","features","requestPath","pathname","search"],"sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"sourcesContent":["/\n Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DContext,\n DController,\n DGet,\n DPost,\n} from '@routup/decorators';\nimport { URL } from 'node:url';\n\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n Client,\n OAuth2AuthorizationCodeRequest,\n Realm,\n Scope,\n} from '@authup/core-kit';\nimport { OAuth2AccessDeniedError, OAuth2ErrorCode, isOAuth2AccessDeniedError } from '@authup/specs';\nimport { ForceUserLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';\nimport { renderUIPage } from '../../../ui/index.ts';\nimport { readFromLocations } from '../../../request/index.ts';\nimport type { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';\nimport { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';\nimport { sanitizeError } from '../../../../../utils/index.ts';\n\ntype RealmSummary = Pick<Realm, 'id' \| 'name' \| 'display_name'>;\ntype ClientSummary = Pick<Client, 'id' \| 'name' \| 'display_name' \| 'built_in' \| 'created_at'>;\n\n@DController('/authorize')\nexport class AuthorizeController {\n // todo: maybe /realms/<realm>/protocol/openid-connect/authorize\n // todo: maybe /realms/<realm>/[...]/authorize\n\n protected options: AuthorizeControllerOptions;\n\n protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n protected codeRequestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n protected authorizer: HTTPOAuth2Authorizer;\n\n // ---------------------------------------------------------\n\n constructor(ctx: AuthorizeControllerContext) {\n this.options = ctx.options;\n\n this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();\n\n this.authorizer = new HTTPOAuth2Authorizer({\n codeRequestVerifier: this.codeRequestVerifier,\n codeIssuer: ctx.codeIssuer,\n sessionManager: ctx.sessionManager,\n eventService: ctx.eventService,\n metrics: ctx.metrics,\n promptLoginMaxAge: ctx.options.promptLoginMaxAge,\n mfaFreshnessMaxAge: ctx.options.mfaFreshnessMaxAge,\n mfaChallengeProvider: ctx.mfaChallengeProvider,\n accessPolicyEvaluator: ctx.accessPolicyEvaluator,\n consentService: ctx.consentService,\n logger: ctx.logger,\n });\n }\n\n // ---------------------------------------------------------\n\n @DPost('', [ForceUserLoggedInMiddleware])\n async confirm(@DContext() event: IAppEvent): Promise<{ url: string }> {\n try {\n const result = await this.authorizer.authorizeWithRequest(event);\n\n const url = new URL(result.redirectUri);\n if (result.state) {\n url.searchParams.set('state', result.state);\n }\n\n if (result.authorizationCode) {\n url.searchParams.set('code', result.authorizationCode);\n }\n\n return { url: url.href };\n } catch (e) {\n // Access-policy denial (plan 052): with a pattern-verified\n // redirect_uri the denial is answered as an error redirect\n // (RFC 6749 §4.1.2.1) — the kit navigates the returned url like\n // any success. Unverified → rethrow → 400 body → interactive\n // denial card.\n if (isOAuth2AccessDeniedError(e) && e.redirectUri) {\n const url = new URL(e.redirectUri);\n url.searchParams.set('error', OAuth2ErrorCode.ACCESS_DENIED);\n if (e.state) {\n url.searchParams.set('state', e.state);\n }\n\n return { url: url.href };\n }\n\n throw e;\n }\n }\n\n @DGet('', [])\n async serve(@DContext() event: IAppEvent): Promise<string> {\n let codeRequest : OAuth2AuthorizationCodeRequest \| undefined;\n\n let client : ClientSummary \| undefined;\n let scopes : Scope[] \| undefined;\n\n // Target realm summary (the client's realm) — the UI names it in the\n // realm-mismatch notice. codeRequest.realm_id is only the id.\n let realm : RealmSummary \| undefined;\n\n // Whether the request redirect_uri matched a registered client pattern —\n // the UI must not offer an automatic \"return to application\" redirect to\n // an unverified (pattern-less-client) redirect_uri.\n let redirectUriVerified = false;\n\n let error : Error \| undefined;\n\n try {\n const merged = await readFromLocations(event, ['body', 'query']);\n const data = await this.codeRequestValidator.run(merged);\n\n const result = await this.codeRequestVerifier.verify(data);\n\n // Trim the client to a deliberate DTO before it reaches the\n // anonymous SSR hydration payload — never disclose redirect_uri\n // patterns (the trusted-origin set), grant_types, internal\n // base/root URLs, auth methods, or the secret storage flags to an\n // unauthenticated visitor. (ClientEntity.secret is additionally\n // select:false, so the secret is never loaded — but the DTO must not\n // rely on that alone: a future entity/query change could unset it.)\n client = {\n id: result.client.id,\n name: result.client.name,\n display_name: result.client.display_name,\n built_in: result.client.built_in,\n created_at: result.client.created_at,\n };\n scopes = result.scopes;\n redirectUriVerified = result.redirectUriVerified;\n\n if (result.client.realm) {\n realm = {\n id: result.client.realm.id,\n name: result.client.realm.name,\n display_name: result.client.realm.display_name,\n };\n }\n\n codeRequest = result.data;\n } catch (e) {\n const normalized = sanitizeError(e);\n error = {\n ...normalized,\n message: normalized.message,\n };\n }\n\n // A recognized `error` query param (the federated-IdP callback\n // redirects back here with error=access_denied on a policy denial)\n // is mapped onto the hydration payload's error — neutral message,\n // never attacker-controlled text.\n if (!error) {\n const query = useRequestQuery(event);\n if (query.error === OAuth2ErrorCode.ACCESS_DENIED) {\n const normalized = sanitizeError(OAuth2AccessDeniedError.forClient());\n error = {\n ...normalized,\n message: normalized.message,\n };\n }\n }\n\n // Path + query of the original request — the SSR page uses it as\n // the same-origin `redirect` parameter on register / password links\n // so those pages can lead back into this authorize request.\n const requestURL = new URL(event.request.url);\n\n return renderUIPage(event, {\n url: '/authorize',\n payload: {\n config: { baseURL: this.options.baseURL },\n data: {\n codeRequest,\n error,\n client,\n scopes,\n realm,\n redirectUriVerified,\n features: this.options.features,\n requestPath: `${requestURL.pathname}${requestURL.search}`,\n },\n },\n });\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,IAAae,sBAAb,MAAaA;CAICC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAiC;EACzC,KAAKJ,UAAUI,IAAIJ;EAEnB,KAAKC,sBAAsBG,IAAIH;EAE/B,KAAKC,uBAAuB,IAAIL,wCAAAA;EAEhC,KAAKM,aAAa,IAAIT,qBAAqB;GACvCO,qBAAqB,KAAKA;GAC1BI,YAAYD,IAAIC;GAChBC,gBAAgBF,IAAIE;GACpBC,cAAcH,IAAIG;GAClBC,SAASJ,IAAII;GACbC,mBAAmBL,IAAIJ,QAAQS;GAC/BC,oBAAoBN,IAAIJ,QAAQU;GAChCC,sBAAsBP,IAAIO;GAC1BC,uBAAuBR,IAAIQ;GAC3BC,gBAAgBT,IAAIS;GACpBC,QAAQV,IAAIU;EAChB,CAAA;CACJ;CAIA,MACMC,QAAQ,OAAwD;EAClE,IAAI;GACA,MAAME,SAAS,MAAM,KAAKd,WAAWe,qBAAqBF,KAAAA;GAE1D,MAAMG,MAAM,IAAI/B,IAAI6B,OAAOG,WAAW;GACtC,IAAIH,OAAOI,OACPF,IAAIG,aAAaC,IAAI,SAASN,OAAOI,KAAK;GAG9C,IAAIJ,OAAOO,mBACPL,IAAIG,aAAaC,IAAI,QAAQN,OAAOO,iBAAiB;GAGzD,OAAO,EAAEL,KAAKA,IAAIM,KAAK;EAC3B,SAASC,GAAG;GAMR,IAAIlC,0BAA0BkC,CAAAA,KAAMA,EAAEN,aAAa;IAC/C,MAAMD,MAAM,IAAI/B,IAAIsC,EAAEN,WAAW;IACjCD,IAAIG,aAAaC,IAAI,SAAShC,gBAAgBoC,aAAa;IAC3D,IAAID,EAAEL,OACFF,IAAIG,aAAaC,IAAI,SAASG,EAAEL,KAAK;IAGzC,OAAO,EAAEF,KAAKA,IAAIM,KAAK;GAC3B;GAEA,MAAMC;EACV;CACJ;CAEA,MACME,MAAM,OAA+C;EACvD,IAAIC;EAEJ,IAAIC;EACJ,IAAIC;EAIJ,IAAIC;EAKJ,IAAIC,sBAAsB;EAE1B,IAAIC;EAEJ,IAAI;GACA,MAAMC,SAAS,MAAMvC,kBAAkBoB,OAAO,CAAC,QAAQ,OAAA,CAAQ;GAC/D,MAAMoB,OAAO,MAAM,KAAKlC,qBAAqBmC,IAAIF,MAAAA;GAEjD,MAAMlB,SAAS,MAAM,KAAKhB,oBAAoBqC,OAAOF,IAAAA;GASrDN,SAAS;IACLS,IAAItB,OAAOa,OAAOS;IAClBC,MAAMvB,OAAOa,OAAOU;IACpBC,cAAcxB,OAAOa,OAAOW;IAC5BC,UAAUzB,OAAOa,OAAOY;IACxBC,YAAY1B,OAAOa,OAAOa;GAC9B;GACAZ,SAASd,OAAOc;GAChBE,sBAAsBhB,OAAOgB;GAE7B,IAAIhB,OAAOa,OAAOE,OACdA,QAAQ;IACJO,IAAItB,OAAOa,OAAOE,MAAMO;IACxBC,MAAMvB,OAAOa,OAAOE,MAAMQ;IAC1BC,cAAcxB,OAAOa,OAAOE,MAAMS;GACtC;GAGJZ,cAAcZ,OAAOmB;EACzB,SAASV,GAAG;GACR,MAAMkB,aAAa9C,cAAc4B,CAAAA;GACjCQ,QAAQ;IACJ,GAAGU;IACHC,SAASD,WAAWC;GACxB;EACJ;EAMA,IAAI,CAACX;OACa7C,gBAAgB2B,KAC1B8B,CAAAA,CAAMZ,UAAU3C,gBAAgBoC,eAAe;IAC/C,MAAMiB,aAAa9C,cAAcR,wBAAwByD,UAAS,CAAA;IAClEb,QAAQ;KACJ,GAAGU;KACHC,SAASD,WAAWC;IACxB;GACJ;;EAMJ,MAAMG,aAAa,IAAI5D,IAAI4B,MAAMiC,QAAQ9B,GAAG;EAE5C,OAAOxB,aAAaqB,OAAO;GACvBG,KAAK;GACL+B,SAAS;IACLC,QAAQ,EAAEC,SAAS,KAAKpD,QAAQoD,QAAQ;IACxChB,MAAM;KACFP;KACAK;KACAJ;KACAC;KACAC;KACAC;KACAoB,UAAU,KAAKrD,QAAQqD;KACvBC,aAAa,GAAGN,WAAWO,WAAWP,WAAWQ;IACrD;GACJ;EACJ,CAAA;CACJ;AACJ;;YAlIgB/D,2BAAAA,CAAAA"}
1	+ {"version":3,"file":"module.mjs","names":["DContext","DController","DGet","DPost","URL","useRequestQuery","OAuth2AccessDeniedError","OAuth2ErrorCode","isOAuth2AccessDeniedError","ForceUserLoggedInMiddleware","HTTPOAuth2Authorizer","renderUIPage","readFromLocations","OAuth2AuthorizationCodeRequestValidator","sanitizeError","AuthorizeController","options","codeRequestVerifier","codeRequestValidator","authorizer","ctx","codeIssuer","sessionManager","eventService","metrics","promptLoginMaxAge","mfaFreshnessMaxAge","mfaChallengeProvider","accessPolicyEvaluator","consentService","logger","confirm","event","result","authorizeWithRequest","url","redirectUri","state","searchParams","set","authorizationCode","href","e","ACCESS_DENIED","serve","codeRequest","client","scopes","realm","redirectUriVerified","error","merged","data","run","verify","id","name","displayName","builtIn","createdAt","normalized","message","query","forClient","requestURL","request","payload","config","baseURL","features","requestPath","pathname","search"],"sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"sourcesContent":["/\n Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DContext,\n DController,\n DGet,\n DPost,\n} from '@routup/decorators';\nimport { URL } from 'node:url';\n\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n Client,\n OAuth2AuthorizationCodeRequest,\n Realm,\n Scope,\n} from '@authup/core-kit';\nimport { OAuth2AccessDeniedError, OAuth2ErrorCode, isOAuth2AccessDeniedError } from '@authup/specs';\nimport { ForceUserLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';\nimport { renderUIPage } from '../../../ui/index.ts';\nimport { readFromLocations } from '../../../request/index.ts';\nimport type { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';\nimport { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';\nimport { sanitizeError } from '../../../../../utils/index.ts';\n\ntype RealmSummary = Pick<Realm, 'id' \| 'name' \| 'displayName'>;\ntype ClientSummary = Pick<Client, 'id' \| 'name' \| 'displayName' \| 'builtIn' \| 'createdAt'>;\n\n@DController('/authorize')\nexport class AuthorizeController {\n // todo: maybe /realms/<realm>/protocol/openid-connect/authorize\n // todo: maybe /realms/<realm>/[...]/authorize\n\n protected options: AuthorizeControllerOptions;\n\n protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n protected codeRequestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n protected authorizer: HTTPOAuth2Authorizer;\n\n // ---------------------------------------------------------\n\n constructor(ctx: AuthorizeControllerContext) {\n this.options = ctx.options;\n\n this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();\n\n this.authorizer = new HTTPOAuth2Authorizer({\n codeRequestVerifier: this.codeRequestVerifier,\n codeIssuer: ctx.codeIssuer,\n sessionManager: ctx.sessionManager,\n eventService: ctx.eventService,\n metrics: ctx.metrics,\n promptLoginMaxAge: ctx.options.promptLoginMaxAge,\n mfaFreshnessMaxAge: ctx.options.mfaFreshnessMaxAge,\n mfaChallengeProvider: ctx.mfaChallengeProvider,\n accessPolicyEvaluator: ctx.accessPolicyEvaluator,\n consentService: ctx.consentService,\n logger: ctx.logger,\n });\n }\n\n // ---------------------------------------------------------\n\n @DPost('', [ForceUserLoggedInMiddleware])\n async confirm(@DContext() event: IAppEvent): Promise<{ url: string }> {\n try {\n const result = await this.authorizer.authorizeWithRequest(event);\n\n const url = new URL(result.redirectUri);\n if (result.state) {\n url.searchParams.set('state', result.state);\n }\n\n if (result.authorizationCode) {\n url.searchParams.set('code', result.authorizationCode);\n }\n\n return { url: url.href };\n } catch (e) {\n // Access-policy denial (plan 052): with a pattern-verified\n // redirect_uri the denial is answered as an error redirect\n // (RFC 6749 §4.1.2.1) — the kit navigates the returned url like\n // any success. Unverified → rethrow → 400 body → interactive\n // denial card.\n if (isOAuth2AccessDeniedError(e) && e.redirectUri) {\n const url = new URL(e.redirectUri);\n url.searchParams.set('error', OAuth2ErrorCode.ACCESS_DENIED);\n if (e.state) {\n url.searchParams.set('state', e.state);\n }\n\n return { url: url.href };\n }\n\n throw e;\n }\n }\n\n @DGet('', [])\n async serve(@DContext() event: IAppEvent): Promise<string> {\n let codeRequest : OAuth2AuthorizationCodeRequest \| undefined;\n\n let client : ClientSummary \| undefined;\n let scopes : Scope[] \| undefined;\n\n // Target realm summary (the client's realm) — the UI names it in the\n // realm-mismatch notice. codeRequest.realm_id is only the id.\n let realm : RealmSummary \| undefined;\n\n // Whether the request redirect_uri matched a registered client pattern —\n // the UI must not offer an automatic \"return to application\" redirect to\n // an unverified (pattern-less-client) redirect_uri.\n let redirectUriVerified = false;\n\n let error : Error \| undefined;\n\n try {\n const merged = await readFromLocations(event, ['body', 'query']);\n const data = await this.codeRequestValidator.run(merged);\n\n const result = await this.codeRequestVerifier.verify(data);\n\n // Trim the client to a deliberate DTO before it reaches the\n // anonymous SSR hydration payload — never disclose redirect_uri\n // patterns (the trusted-origin set), grant_types, internal\n // base/root URLs, auth methods, or the secret storage flags to an\n // unauthenticated visitor. (ClientEntity.secret is additionally\n // select:false, so the secret is never loaded — but the DTO must not\n // rely on that alone: a future entity/query change could unset it.)\n client = {\n id: result.client.id,\n name: result.client.name,\n displayName: result.client.displayName,\n builtIn: result.client.builtIn,\n createdAt: result.client.createdAt,\n };\n scopes = result.scopes;\n redirectUriVerified = result.redirectUriVerified;\n\n if (result.client.realm) {\n realm = {\n id: result.client.realm.id,\n name: result.client.realm.name,\n displayName: result.client.realm.displayName,\n };\n }\n\n codeRequest = result.data;\n } catch (e) {\n const normalized = sanitizeError(e);\n error = {\n ...normalized,\n message: normalized.message,\n };\n }\n\n // A recognized `error` query param (the federated-IdP callback\n // redirects back here with error=access_denied on a policy denial)\n // is mapped onto the hydration payload's error — neutral message,\n // never attacker-controlled text.\n if (!error) {\n const query = useRequestQuery(event);\n if (query.error === OAuth2ErrorCode.ACCESS_DENIED) {\n const normalized = sanitizeError(OAuth2AccessDeniedError.forClient());\n error = {\n ...normalized,\n message: normalized.message,\n };\n }\n }\n\n // Path + query of the original request — the SSR page uses it as\n // the same-origin `redirect` parameter on register / password links\n // so those pages can lead back into this authorize request.\n const requestURL = new URL(event.request.url);\n\n return renderUIPage(event, {\n url: '/authorize',\n payload: {\n config: { baseURL: this.options.baseURL },\n data: {\n codeRequest,\n error,\n client,\n scopes,\n realm,\n redirectUriVerified,\n features: this.options.features,\n requestPath: `${requestURL.pathname}${requestURL.search}`,\n },\n },\n });\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,IAAae,sBAAb,MAAaA;CAICC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAiC;EACzC,KAAKJ,UAAUI,IAAIJ;EAEnB,KAAKC,sBAAsBG,IAAIH;EAE/B,KAAKC,uBAAuB,IAAIL,wCAAAA;EAEhC,KAAKM,aAAa,IAAIT,qBAAqB;GACvCO,qBAAqB,KAAKA;GAC1BI,YAAYD,IAAIC;GAChBC,gBAAgBF,IAAIE;GACpBC,cAAcH,IAAIG;GAClBC,SAASJ,IAAII;GACbC,mBAAmBL,IAAIJ,QAAQS;GAC/BC,oBAAoBN,IAAIJ,QAAQU;GAChCC,sBAAsBP,IAAIO;GAC1BC,uBAAuBR,IAAIQ;GAC3BC,gBAAgBT,IAAIS;GACpBC,QAAQV,IAAIU;EAChB,CAAA;CACJ;CAIA,MACMC,QAAQ,OAAwD;EAClE,IAAI;GACA,MAAME,SAAS,MAAM,KAAKd,WAAWe,qBAAqBF,KAAAA;GAE1D,MAAMG,MAAM,IAAI/B,IAAI6B,OAAOG,WAAW;GACtC,IAAIH,OAAOI,OACPF,IAAIG,aAAaC,IAAI,SAASN,OAAOI,KAAK;GAG9C,IAAIJ,OAAOO,mBACPL,IAAIG,aAAaC,IAAI,QAAQN,OAAOO,iBAAiB;GAGzD,OAAO,EAAEL,KAAKA,IAAIM,KAAK;EAC3B,SAASC,GAAG;GAMR,IAAIlC,0BAA0BkC,CAAAA,KAAMA,EAAEN,aAAa;IAC/C,MAAMD,MAAM,IAAI/B,IAAIsC,EAAEN,WAAW;IACjCD,IAAIG,aAAaC,IAAI,SAAShC,gBAAgBoC,aAAa;IAC3D,IAAID,EAAEL,OACFF,IAAIG,aAAaC,IAAI,SAASG,EAAEL,KAAK;IAGzC,OAAO,EAAEF,KAAKA,IAAIM,KAAK;GAC3B;GAEA,MAAMC;EACV;CACJ;CAEA,MACME,MAAM,OAA+C;EACvD,IAAIC;EAEJ,IAAIC;EACJ,IAAIC;EAIJ,IAAIC;EAKJ,IAAIC,sBAAsB;EAE1B,IAAIC;EAEJ,IAAI;GACA,MAAMC,SAAS,MAAMvC,kBAAkBoB,OAAO,CAAC,QAAQ,OAAA,CAAQ;GAC/D,MAAMoB,OAAO,MAAM,KAAKlC,qBAAqBmC,IAAIF,MAAAA;GAEjD,MAAMlB,SAAS,MAAM,KAAKhB,oBAAoBqC,OAAOF,IAAAA;GASrDN,SAAS;IACLS,IAAItB,OAAOa,OAAOS;IAClBC,MAAMvB,OAAOa,OAAOU;IACpBC,aAAaxB,OAAOa,OAAOW;IAC3BC,SAASzB,OAAOa,OAAOY;IACvBC,WAAW1B,OAAOa,OAAOa;GAC7B;GACAZ,SAASd,OAAOc;GAChBE,sBAAsBhB,OAAOgB;GAE7B,IAAIhB,OAAOa,OAAOE,OACdA,QAAQ;IACJO,IAAItB,OAAOa,OAAOE,MAAMO;IACxBC,MAAMvB,OAAOa,OAAOE,MAAMQ;IAC1BC,aAAaxB,OAAOa,OAAOE,MAAMS;GACrC;GAGJZ,cAAcZ,OAAOmB;EACzB,SAASV,GAAG;GACR,MAAMkB,aAAa9C,cAAc4B,CAAAA;GACjCQ,QAAQ;IACJ,GAAGU;IACHC,SAASD,WAAWC;GACxB;EACJ;EAMA,IAAI,CAACX;OACa7C,gBAAgB2B,KAC1B8B,CAAAA,CAAMZ,UAAU3C,gBAAgBoC,eAAe;IAC/C,MAAMiB,aAAa9C,cAAcR,wBAAwByD,UAAS,CAAA;IAClEb,QAAQ;KACJ,GAAGU;KACHC,SAASD,WAAWC;IACxB;GACJ;;EAMJ,MAAMG,aAAa,IAAI5D,IAAI4B,MAAMiC,QAAQ9B,GAAG;EAE5C,OAAOxB,aAAaqB,OAAO;GACvBG,KAAK;GACL+B,SAAS;IACLC,QAAQ,EAAEC,SAAS,KAAKpD,QAAQoD,QAAQ;IACxChB,MAAM;KACFP;KACAK;KACAJ;KACAC;KACAC;KACAC;KACAoB,UAAU,KAAKrD,QAAQqD;KACvBC,aAAa,GAAGN,WAAWO,WAAWP,WAAWQ;IACrD;GACJ;EACJ,CAAA;CACJ;AACJ;;YAlIgB/D,2BAAAA,CAAAA"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.mjs CHANGED Viewed

@@ -14,19 +14,19 @@ async function getJwksRouteHandler(repository, realmId) {
 			type: In([JWKType.RSA, JWKType.EC]),
 			use: JWKUse.SIGNATURE,
 			status: In([KeyStatus.ACTIVE, KeyStatus.PASSIVE]),
-			...realmId ? { realm_id: realmId } : {}
+			...realmId ? { realmId } : {}
 		},
 		order: { priority: "DESC" }
-	})).filter((entity) => !!entity.encryption_key && !!entity.signature_algorithm).map((entity) => AsymmetricKey.fromBase64({
+	})).filter((entity) => !!entity.encryptionKey && !!entity.signatureAlgorithm).map((entity) => AsymmetricKey.fromBase64({
 		format: "spki",
-		key: entity.encryption_key,
-		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+		key: entity.encryptionKey,
+		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signatureAlgorithm)
 	}).then((container) => container.toJWK()).then(async (key) => {
 		const certificateFields = await buildCertificateJwkFields(entity.certificate);
 		return {
 			...key,
 			kid: entity.id,
-			alg: entity.signature_algorithm,
+			alg: entity.signatureAlgorithm,
 			...certificateFields
 		};
 	}));
@@ -38,20 +38,20 @@ async function getJwkRouteHandler(repository, keyId, realmId) {
 		use: JWKUse.SIGNATURE,
 		status: In([KeyStatus.ACTIVE, KeyStatus.PASSIVE]),
 		id: keyId,
-		...realmId ? { realm_id: realmId } : {}
+		...realmId ? { realmId } : {}
 	} });
 	if (!entity) throw JWKError.notFound(keyId);
-	if (!entity.encryption_key || !entity.signature_algorithm) throw JWKError.encryptionKeyMissing();
+	if (!entity.encryptionKey || !entity.signatureAlgorithm) throw JWKError.encryptionKeyMissing();
 	const jsonWebKey = await (await AsymmetricKey.fromBase64({
 		format: "spki",
-		key: entity.encryption_key,
-		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+		key: entity.encryptionKey,
+		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signatureAlgorithm)
 	})).toJWK();
 	const certificateFields = await buildCertificateJwkFields(entity.certificate);
 	return {
 		...jsonWebKey,
 		kid: entity.id,
-		alg: entity.signature_algorithm,
+		alg: entity.signatureAlgorithm,
 		...certificateFields
 	};
 }

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"read.mjs","names":["KeyStatus","AsymmetricKey","JWKError","JWKType","JWKUse","In","buildCertificateJwkFields","getJwksRouteHandler","repository","realmId","entities","find","where","type","RSA","EC","use","SIGNATURE","status","ACTIVE","PASSIVE","~~realm_id","~~order","priority","promises","filter","entity","~~encryption_key~~","~~signature_algorithm~~","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","then","container","toJWK","certificateFields","certificate","kid","id","alg","keys","Promise","all","getJwkRouteHandler","keyId","findOne","notFound","encryptionKeyMissing","jsonWebKey"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"sourcesContent":["/\n Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { KeyStatus } from '@authup/core-kit';\nimport { AsymmetricKey } from '@authup/server-kit';\nimport type { JWTAlgorithm, OAuth2JsonWebKey } from '@authup/specs';\nimport { JWKError, JWKType, JWKUse } from '@authup/specs';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { KeyEntity } from '../../../../../database/domains/index.ts';\nimport { buildCertificateJwkFields } from '../../../../../../core/index.ts';\n\nexport async function getJwksRouteHandler(\n repository: Repository<KeyEntity>,\n realmId?: string,\n) : Promise<{ keys: OAuth2JsonWebKey[] }> {\n const entities = await repository.find({\n where: {\n type: In([JWKType.RSA, JWKType.EC]),\n use: JWKUse.SIGNATURE,\n // active + passive verify; disabled keys never publish.\n status: In([KeyStatus.ACTIVE, KeyStatus.PASSIVE]),\n ...(realmId ? { ~~realm_id:~~ realmId } : {}),\n },\n order: { priority: 'DESC' },\n });\n\n const promises = entities\n .filter(\n (entity): entity is KeyEntity & { ~~encryption_key~~: string, ~~signature_algorithm~~: `${JWTAlgorithm}` } => !!entity.~~encryption_key~~ &&\n !!entity.~~signature_algorithm~~,\n )\n .map(\n (entity) => AsymmetricKey\n .fromBase64({\n format: 'spki',\n key: entity.~~encryption_key~~,\n options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.~~signature_algorithm~~),\n })\n .then((container) => container.toJWK())\n .then(async (key) => {\n const certificateFields = await buildCertificateJwkFields(entity.certificate);\n\n return {\n ...key,\n kid: entity.id,\n alg: entity.~~signature_algorithm~~,\n ...certificateFields,\n };\n }),\n );\n\n const keys = await Promise.all(promises);\n\n return { keys };\n}\n\nexport async function getJwkRouteHandler(\n repository: Repository<KeyEntity>,\n keyId: string,\n realmId?: string,\n) : Promise<OAuth2JsonWebKey> {\n const entity = await repository.findOne({\n where: {\n type: In([JWKType.RSA, JWKType.EC]),\n use: JWKUse.SIGNATURE,\n status: In([KeyStatus.ACTIVE, KeyStatus.PASSIVE]),\n id: keyId,\n ...(realmId ? { ~~realm_id:~~ realmId } : {}),\n },\n });\n\n if (!entity) {\n throw JWKError.notFound(keyId);\n }\n\n if (!entity.~~encryption_key~~ \|\| !entity.~~signature_algorithm~~) {\n throw JWKError.encryptionKeyMissing();\n }\n\n const container = await AsymmetricKey\n .fromBase64({\n format: 'spki',\n key: entity.~~encryption_key~~,\n options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.~~signature_algorithm~~),\n });\n\n const jsonWebKey = await container.toJWK();\n const certificateFields = await buildCertificateJwkFields(entity.certificate);\n\n return {\n ...jsonWebKey,\n kid: entity.id,\n alg: entity.~~signature_algorithm~~,\n ...certificateFields,\n };\n}\n"],"mappings":";;;;;;;;;;AAgBA,eAAsBO,oBAClBC,YACAC,SAAgB;CAahB,~~MAAMe~~,~~YAAWd~~,MAXMF,WAAWG,KAAK;EACnCC,OAAO;GACHC,MAAMR,GAAG,CAACF,QAAQW,KAAKX,QAAQY,EAAAA,CAAG;GAClCC,KAAKZ,OAAOa;GAEZC,QAAQb,GAAG,CAACL,UAAUmB,QAAQnB,UAAUoB,OAAAA,CAAQ;GAChD,GAAIX,UAAU,~~EAAEY~~,~~UAAUZ,~~QAAQ,IAAI,CAAC;~~EAC3C~~;~~EACAa~~,OAAO,EAAEC,UAAU,OAAO;CAC9B,CAAA,EAAA,CAGKE,QACIC,~~WAAqG~~,CAAC,CAACA,OAAOC,~~kBAC3G~~,CAAC,CAACD,OAAOE,~~mBAAmB~~,CAAA,~~CAEnCC~~,KACIH,~~WAAWzB~~,~~cACP6B~~,WAAW;EACRC,QAAQ;EACRC,KAAKN,OAAOC;EACZM,~~SAAShC~~,~~cAAciC~~,kCAAkCR,OAAOE,~~mBAAmB~~;~~CACvF~~,CAAA,CAAA,CACCO,MAAMC,cAAcA,UAAUC,MAAK,CAAA,CAAA,CACnCF,KAAK,OAAOH,QAAAA;EACT,MAAMM,oBAAoB,~~MAAMhC~~,~~0BAA0BoB~~,OAAOa,WAAW;EAE5E,OAAO;GACH,GAAGP;GACHQ,KAAKd,OAAOe;GACZC,KAAKhB,OAAOE;GACZ,GAAGU;EACP;CACJ,CAAA,CAAA;CAKZ,OAAO,EAAEK,MAAAA,MAFUC,QAAQC,IAAIrB,QAAAA,EAEjB;AAClB;AAEA,eAAsBsB,~~mBAClBtC~~,~~YACAuC~~,~~OACAtC~~,SAAgB;CAEhB,~~MAAMiB~~,SAAS,~~MAAMlB~~,~~WAAWwC~~,QAAQ,~~EACpCpC~~,OAAO;EACHC,MAAMR,GAAG,CAACF,QAAQW,KAAKX,QAAQY,EAAAA,CAAG;EAClCC,KAAKZ,OAAOa;EACZC,QAAQb,GAAG,CAACL,UAAUmB,QAAQnB,UAAUoB,OAAAA,CAAQ;~~EAChDqB~~,IAAIM;EACJ,~~GAAItC~~,UAAU,~~EAAEY~~,~~UAAUZ,~~QAAQ,IAAI,CAAC;~~CAC3C~~,EACJ,CAAA;CAEA,IAAI,~~CAACiB~~,QACD,~~MAAMxB~~,~~SAAS+C~~,SAASF,KAAAA;CAG5B,IAAI,CAACrB,OAAOC,~~kBAAkB~~,CAACD,OAAOE,~~qBAClC~~,~~MAAM1B~~,~~SAASgD~~,qBAAoB;CAUvC,MAAMC,aAAa,OAAMf,~~MAPDnC~~,~~cACnB6B~~,WAAW;EACRC,QAAQ;EACRC,KAAKN,OAAOC;EACZM,~~SAAShC~~,~~cAAciC~~,kCAAkCR,OAAOE,~~mBAAmB~~;~~CACvF~~,CAAA,EAAA,CAE+BS,MAAK;CACxC,MAAMC,oBAAoB,~~MAAMhC~~,~~0BAA0BoB~~,OAAOa,WAAW;CAE5E,OAAO;EACH,GAAGY;EACHX,KAAKd,OAAOe;EACZC,KAAKhB,OAAOE;EACZ,GAAGU;CACP;AACJ"}
1	+ {"version":3,"file":"read.mjs","names":["KeyStatus","AsymmetricKey","JWKError","JWKType","JWKUse","In","buildCertificateJwkFields","getJwksRouteHandler","repository","realmId","entities","find","where","type","RSA","EC","use","SIGNATURE","status","ACTIVE","PASSIVE","order","priority","promises","filter","entity","encryptionKey","signatureAlgorithm","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","then","container","toJWK","certificateFields","certificate","kid","id","alg","keys","Promise","all","getJwkRouteHandler","keyId","findOne","notFound","encryptionKeyMissing","jsonWebKey"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"sourcesContent":["/\n Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { KeyStatus } from '@authup/core-kit';\nimport { AsymmetricKey } from '@authup/server-kit';\nimport type { JWTAlgorithm, OAuth2JsonWebKey } from '@authup/specs';\nimport { JWKError, JWKType, JWKUse } from '@authup/specs';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { KeyEntity } from '../../../../../database/domains/index.ts';\nimport { buildCertificateJwkFields } from '../../../../../../core/index.ts';\n\nexport async function getJwksRouteHandler(\n repository: Repository<KeyEntity>,\n realmId?: string,\n) : Promise<{ keys: OAuth2JsonWebKey[] }> {\n const entities = await repository.find({\n where: {\n type: In([JWKType.RSA, JWKType.EC]),\n use: JWKUse.SIGNATURE,\n // active + passive verify; disabled keys never publish.\n status: In([KeyStatus.ACTIVE, KeyStatus.PASSIVE]),\n ...(realmId ? { realmId } : {}),\n },\n order: { priority: 'DESC' },\n });\n\n const promises = entities\n .filter(\n (entity): entity is KeyEntity & { encryptionKey: string, signatureAlgorithm: `${JWTAlgorithm}` } => !!entity.encryptionKey &&\n !!entity.signatureAlgorithm,\n )\n .map(\n (entity) => AsymmetricKey\n .fromBase64({\n format: 'spki',\n key: entity.encryptionKey,\n options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signatureAlgorithm),\n })\n .then((container) => container.toJWK())\n .then(async (key) => {\n const certificateFields = await buildCertificateJwkFields(entity.certificate);\n\n return {\n ...key,\n kid: entity.id,\n alg: entity.signatureAlgorithm,\n ...certificateFields,\n };\n }),\n );\n\n const keys = await Promise.all(promises);\n\n return { keys };\n}\n\nexport async function getJwkRouteHandler(\n repository: Repository<KeyEntity>,\n keyId: string,\n realmId?: string,\n) : Promise<OAuth2JsonWebKey> {\n const entity = await repository.findOne({\n where: {\n type: In([JWKType.RSA, JWKType.EC]),\n use: JWKUse.SIGNATURE,\n status: In([KeyStatus.ACTIVE, KeyStatus.PASSIVE]),\n id: keyId,\n ...(realmId ? { realmId } : {}),\n },\n });\n\n if (!entity) {\n throw JWKError.notFound(keyId);\n }\n\n if (!entity.encryptionKey \|\| !entity.signatureAlgorithm) {\n throw JWKError.encryptionKeyMissing();\n }\n\n const container = await AsymmetricKey\n .fromBase64({\n format: 'spki',\n key: entity.encryptionKey,\n options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signatureAlgorithm),\n });\n\n const jsonWebKey = await container.toJWK();\n const certificateFields = await buildCertificateJwkFields(entity.certificate);\n\n return {\n ...jsonWebKey,\n kid: entity.id,\n alg: entity.signatureAlgorithm,\n ...certificateFields,\n };\n}\n"],"mappings":";;;;;;;;;;AAgBA,eAAsBO,oBAClBC,YACAC,SAAgB;CAahB,MAAMc,YAAWb,MAXMF,WAAWG,KAAK;EACnCC,OAAO;GACHC,MAAMR,GAAG,CAACF,QAAQW,KAAKX,QAAQY,EAAAA,CAAG;GAClCC,KAAKZ,OAAOa;GAEZC,QAAQb,GAAG,CAACL,UAAUmB,QAAQnB,UAAUoB,OAAAA,CAAQ;GAChD,GAAIX,UAAU,EAAEA,QAAQ,IAAI,CAAC;EACjC;EACAY,OAAO,EAAEC,UAAU,OAAO;CAC9B,CAAA,EAAA,CAGKE,QACIC,WAAmG,CAAC,CAACA,OAAOC,iBACzG,CAAC,CAACD,OAAOE,kBAAkB,CAAA,CAElCC,KACIH,WAAWxB,cACP4B,WAAW;EACRC,QAAQ;EACRC,KAAKN,OAAOC;EACZM,SAAS/B,cAAcgC,kCAAkCR,OAAOE,kBAAkB;CACtF,CAAA,CAAA,CACCO,MAAMC,cAAcA,UAAUC,MAAK,CAAA,CAAA,CACnCF,KAAK,OAAOH,QAAAA;EACT,MAAMM,oBAAoB,MAAM/B,0BAA0BmB,OAAOa,WAAW;EAE5E,OAAO;GACH,GAAGP;GACHQ,KAAKd,OAAOe;GACZC,KAAKhB,OAAOE;GACZ,GAAGU;EACP;CACJ,CAAA,CAAA;CAKZ,OAAO,EAAEK,MAAAA,MAFUC,QAAQC,IAAIrB,QAAAA,EAEjB;AAClB;AAEA,eAAsBsB,mBAClBrC,YACAsC,OACArC,SAAgB;CAEhB,MAAMgB,SAAS,MAAMjB,WAAWuC,QAAQ,EACpCnC,OAAO;EACHC,MAAMR,GAAG,CAACF,QAAQW,KAAKX,QAAQY,EAAAA,CAAG;EAClCC,KAAKZ,OAAOa;EACZC,QAAQb,GAAG,CAACL,UAAUmB,QAAQnB,UAAUoB,OAAAA,CAAQ;EAChDoB,IAAIM;EACJ,GAAIrC,UAAU,EAAEA,QAAQ,IAAI,CAAC;CACjC,EACJ,CAAA;CAEA,IAAI,CAACgB,QACD,MAAMvB,SAAS8C,SAASF,KAAAA;CAG5B,IAAI,CAACrB,OAAOC,iBAAiB,CAACD,OAAOE,oBACjC,MAAMzB,SAAS+C,qBAAoB;CAUvC,MAAMC,aAAa,OAAMf,MAPDlC,cACnB4B,WAAW;EACRC,QAAQ;EACRC,KAAKN,OAAOC;EACZM,SAAS/B,cAAcgC,kCAAkCR,OAAOE,kBAAkB;CACtF,CAAA,EAAA,CAE+BS,MAAK;CACxC,MAAMC,oBAAoB,MAAM/B,0BAA0BmB,OAAOa,WAAW;CAE5E,OAAO;EACH,GAAGY;EACHX,KAAKd,OAAOe;EACZC,KAAKhB,OAAOE;EACZ,GAAGU;CACP;AACJ"}

package/dist/adapters/http/controllers/workflows/jwks/module.mjs CHANGED Viewed

@@ -37,19 +37,19 @@ var JwkController = class {
 				type: In([JWKType.RSA, JWKType.EC]),
 				use: JWKUse.SIGNATURE,
 				status: In([KeyStatus.ACTIVE, KeyStatus.PASSIVE]),
-				...realmId ? { realm_id: realmId } : {}
+				...realmId ? { realmId } : {}
 			},
 			order: { priority: "DESC" }
-		})).filter((entity) => !!entity.encryption_key && !!entity.signature_algorithm).map((entity) => AsymmetricKey.fromBase64({
+		})).filter((entity) => !!entity.encryptionKey && !!entity.signatureAlgorithm).map((entity) => AsymmetricKey.fromBase64({
 			format: "spki",
-			key: entity.encryption_key,
-			options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+			key: entity.encryptionKey,
+			options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signatureAlgorithm)
 		}).then((container) => container.toJWK()).then(async (key) => {
 			const certificateFields = await buildCertificateJwkFields(entity.certificate);
 			return {
 				...key,
 				kid: entity.id,
-				alg: entity.signature_algorithm,
+				alg: entity.signatureAlgorithm,
 				...certificateFields
 			};
 		}));
@@ -63,17 +63,17 @@ var JwkController = class {
 			id
 		} });
 		if (!entity) throw JWKError.notFound(id);
-		if (!entity.encryption_key || !entity.signature_algorithm) throw JWKError.encryptionKeyMissing();
+		if (!entity.encryptionKey || !entity.signatureAlgorithm) throw JWKError.encryptionKeyMissing();
 		const jsonWebKey = await (await AsymmetricKey.fromBase64({
 			format: "spki",
-			key: entity.encryption_key,
-			options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+			key: entity.encryptionKey,
+			options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signatureAlgorithm)
 		})).toJWK();
 		const certificateFields = await buildCertificateJwkFields(entity.certificate);
 		return {
 			...jsonWebKey,
 			kid: entity.id,
-			alg: entity.signature_algorithm,
+			alg: entity.signatureAlgorithm,
 			...certificateFields
 		};
 	}

package/dist/adapters/http/controllers/workflows/jwks/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["KeyStatus","JWKError","JWKType","JWKUse","AsymmetricKey","DContext","DController","DGet","DPath","In","buildCertificateJwkFields","getRequestStringParam","JwkController","repository","ctx","getManyJwks","event","realmId","entities","find","where","type","RSA","EC","use","SIGNATURE","status","ACTIVE","PASSIVE","~~realm_id","~~order","priority","promises","filter","entity","~~encryption_key~~","~~signature_algorithm~~","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","then","container","toJWK","certificateFields","certificate","kid","id","alg","keys","Promise","all","getOneJwks","findOne","notFound","encryptionKeyMissing","jsonWebKey"],"sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"sourcesContent":["/\n Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { KeyStatus } from '@authup/core-kit';\nimport type { JWTAlgorithm, OAuth2JsonWebKey } from '@authup/specs';\nimport { JWKError, JWKType, JWKUse } from '@authup/specs';\nimport { AsymmetricKey } from '@authup/server-kit';\nimport {\n DContext,\n DController,\n DGet,\n DPath,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { KeyEntity } from '../../../../database/domains/index.ts';\nimport { buildCertificateJwkFields } from '../../../../../core/index.ts';\nimport { getRequestStringParam } from '../../../request/index.ts';\n\nexport type JwkControllerContext = {\n repository: Repository<KeyEntity>\n};\n\n@DController('')\nexport class JwkController {\n protected repository: Repository<KeyEntity>;\n\n constructor(ctx: JwkControllerContext) {\n this.repository = ctx.repository;\n }\n\n @DGet('/jwks', [])\n async getManyJwks(\n @DContext() event: IAppEvent,\n ): Promise<{ keys: OAuth2JsonWebKey[] }> {\n const realmId = getRequestStringParam(event, 'realmId');\n\n const entities = await this.repository.find({\n where: {\n type: In([JWKType.RSA, JWKType.EC]),\n use: JWKUse.SIGNATURE,\n // active + passive verify; disabled keys never publish.\n status: In([KeyStatus.ACTIVE, KeyStatus.PASSIVE]),\n ...(realmId ? { ~~realm_id:~~ realmId } : {}),\n },\n order: { priority: 'DESC' },\n });\n\n const promises = entities\n .filter(\n (entity): entity is KeyEntity & { ~~encryption_key~~: string, ~~signature_algorithm~~: `${JWTAlgorithm}` } => !!entity.~~encryption_key~~ &&\n !!entity.~~signature_algorithm~~,\n )\n .map(\n (entity) => AsymmetricKey\n .fromBase64({\n format: 'spki',\n key: entity.~~encryption_key~~,\n options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.~~signature_algorithm~~),\n })\n .then((container) => container.toJWK())\n .then(async (key) => {\n const certificateFields = await buildCertificateJwkFields(entity.certificate);\n\n return {\n ...key,\n kid: entity.id,\n alg: entity.~~signature_algorithm~~,\n ...certificateFields,\n };\n }),\n );\n\n const keys = await Promise.all(promises);\n\n return { keys };\n }\n\n @DGet('/jwks/:id', [])\n async getOneJwks(@DPath('id') id: string): Promise<OAuth2JsonWebKey> {\n const entity = await this.repository.findOne({\n where: {\n type: In([JWKType.RSA, JWKType.EC]),\n use: JWKUse.SIGNATURE,\n status: In([KeyStatus.ACTIVE, KeyStatus.PASSIVE]),\n id,\n },\n });\n\n if (!entity) {\n throw JWKError.notFound(id);\n }\n\n if (!entity.~~encryption_key~~ \|\| !entity.~~signature_algorithm~~) {\n throw JWKError.encryptionKeyMissing();\n }\n\n const container = await AsymmetricKey\n .fromBase64({\n format: 'spki',\n key: entity.~~encryption_key~~,\n options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.~~signature_algorithm~~),\n });\n\n const jsonWebKey = await container.toJWK();\n const certificateFields = await buildCertificateJwkFields(entity.certificate);\n\n return {\n ...jsonWebKey,\n kid: entity.id,\n alg: entity.~~signature_algorithm~~,\n ...certificateFields,\n };\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,IAAaY,gBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA2B;EACnC,KAAKD,aAAaC,IAAID;CAC1B;CAEA,MACME,YACF,OACqC;EACrC,MAAME,UAAUN,sBAAsBK,OAAO,SAAA;EAa7C,~~MAAMgB~~,~~YAAWd~~,MAXM,KAAKL,WAAWM,KAAK;GACxCC,OAAO;IACHC,MAAMZ,GAAG,CAACP,QAAQoB,KAAKpB,QAAQqB,EAAAA,CAAG;IAClCC,KAAKrB,OAAOsB;IAEZC,QAAQjB,GAAG,CAACT,UAAU2B,QAAQ3B,UAAU4B,OAAAA,CAAQ;IAChD,GAAIX,UAAU,~~EAAEY~~,~~UAAUZ,~~QAAQ,IAAI,CAAC;~~GAC3C~~;~~GACAa~~,OAAO,EAAEC,UAAU,OAAO;EAC9B,CAAA,EAAA,CAGKE,QACIC,~~WAAqG~~,CAAC,CAACA,OAAOC,~~kBAC3G~~,CAAC,CAACD,OAAOE,~~mBAAmB~~,CAAA,~~CAEnCC~~,KACIH,~~WAAW9B~~,~~cACPkC~~,WAAW;GACRC,QAAQ;GACRC,KAAKN,OAAOC;GACZM,~~SAASrC~~,~~cAAcsC~~,kCAAkCR,OAAOE,~~mBAAmB~~;~~EACvF~~,CAAA,CAAA,CACCO,MAAMC,cAAcA,UAAUC,MAAK,CAAA,CAAA,CACnCF,KAAK,OAAOH,QAAAA;GACT,MAAMM,oBAAoB,~~MAAMpC~~,~~0BAA0BwB~~,OAAOa,WAAW;GAE5E,OAAO;IACH,GAAGP;IACHQ,KAAKd,OAAOe;IACZC,KAAKhB,OAAOE;IACZ,GAAGU;GACP;EACJ,CAAA,CAAA;EAKZ,OAAO,EAAEK,MAAAA,MAFUC,QAAQC,IAAIrB,QAAAA,EAEjB;CAClB;CAEA,MACMsB,WAAW,IAAoD;EACjE,MAAMpB,SAAS,MAAM,~~KAAKrB~~,~~WAAW0C~~,QAAQ,~~EACzCnC~~,OAAO;GACHC,MAAMZ,GAAG,CAACP,QAAQoB,KAAKpB,QAAQqB,EAAAA,CAAG;GAClCC,KAAKrB,OAAOsB;GACZC,QAAQjB,GAAG,CAACT,UAAU2B,QAAQ3B,UAAU4B,OAAAA,CAAQ;~~GAChDqB~~;EACJ,EACJ,CAAA;EAEA,IAAI,CAACf,QACD,~~MAAMjC~~,~~SAASuD~~,SAASP,EAAAA;EAG5B,IAAI,CAACf,OAAOC,~~kBAAkB~~,CAACD,OAAOE,~~qBAClC~~,~~MAAMnC~~,~~SAASwD~~,qBAAoB;EAUvC,MAAMC,aAAa,OAAMd,~~MAPDxC~~,~~cACnBkC~~,WAAW;GACRC,QAAQ;GACRC,KAAKN,OAAOC;GACZM,~~SAASrC~~,~~cAAcsC~~,kCAAkCR,OAAOE,~~mBAAmB~~;~~EACvF~~,CAAA,EAAA,CAE+BS,MAAK;EACxC,MAAMC,oBAAoB,~~MAAMpC~~,~~0BAA0BwB~~,OAAOa,WAAW;EAE5E,OAAO;GACH,GAAGW;GACHV,KAAKd,OAAOe;GACZC,KAAKhB,OAAOE;GACZ,GAAGU;EACP;CACJ;AACJ"}
1	+ {"version":3,"file":"module.mjs","names":["KeyStatus","JWKError","JWKType","JWKUse","AsymmetricKey","DContext","DController","DGet","DPath","In","buildCertificateJwkFields","getRequestStringParam","JwkController","repository","ctx","getManyJwks","event","realmId","entities","find","where","type","RSA","EC","use","SIGNATURE","status","ACTIVE","PASSIVE","order","priority","promises","filter","entity","encryptionKey","signatureAlgorithm","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","then","container","toJWK","certificateFields","certificate","kid","id","alg","keys","Promise","all","getOneJwks","findOne","notFound","encryptionKeyMissing","jsonWebKey"],"sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"sourcesContent":["/\n Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { KeyStatus } from '@authup/core-kit';\nimport type { JWTAlgorithm, OAuth2JsonWebKey } from '@authup/specs';\nimport { JWKError, JWKType, JWKUse } from '@authup/specs';\nimport { AsymmetricKey } from '@authup/server-kit';\nimport {\n DContext,\n DController,\n DGet,\n DPath,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { KeyEntity } from '../../../../database/domains/index.ts';\nimport { buildCertificateJwkFields } from '../../../../../core/index.ts';\nimport { getRequestStringParam } from '../../../request/index.ts';\n\nexport type JwkControllerContext = {\n repository: Repository<KeyEntity>\n};\n\n@DController('')\nexport class JwkController {\n protected repository: Repository<KeyEntity>;\n\n constructor(ctx: JwkControllerContext) {\n this.repository = ctx.repository;\n }\n\n @DGet('/jwks', [])\n async getManyJwks(\n @DContext() event: IAppEvent,\n ): Promise<{ keys: OAuth2JsonWebKey[] }> {\n const realmId = getRequestStringParam(event, 'realmId');\n\n const entities = await this.repository.find({\n where: {\n type: In([JWKType.RSA, JWKType.EC]),\n use: JWKUse.SIGNATURE,\n // active + passive verify; disabled keys never publish.\n status: In([KeyStatus.ACTIVE, KeyStatus.PASSIVE]),\n ...(realmId ? { realmId } : {}),\n },\n order: { priority: 'DESC' },\n });\n\n const promises = entities\n .filter(\n (entity): entity is KeyEntity & { encryptionKey: string, signatureAlgorithm: `${JWTAlgorithm}` } => !!entity.encryptionKey &&\n !!entity.signatureAlgorithm,\n )\n .map(\n (entity) => AsymmetricKey\n .fromBase64({\n format: 'spki',\n key: entity.encryptionKey,\n options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signatureAlgorithm),\n })\n .then((container) => container.toJWK())\n .then(async (key) => {\n const certificateFields = await buildCertificateJwkFields(entity.certificate);\n\n return {\n ...key,\n kid: entity.id,\n alg: entity.signatureAlgorithm,\n ...certificateFields,\n };\n }),\n );\n\n const keys = await Promise.all(promises);\n\n return { keys };\n }\n\n @DGet('/jwks/:id', [])\n async getOneJwks(@DPath('id') id: string): Promise<OAuth2JsonWebKey> {\n const entity = await this.repository.findOne({\n where: {\n type: In([JWKType.RSA, JWKType.EC]),\n use: JWKUse.SIGNATURE,\n status: In([KeyStatus.ACTIVE, KeyStatus.PASSIVE]),\n id,\n },\n });\n\n if (!entity) {\n throw JWKError.notFound(id);\n }\n\n if (!entity.encryptionKey \|\| !entity.signatureAlgorithm) {\n throw JWKError.encryptionKeyMissing();\n }\n\n const container = await AsymmetricKey\n .fromBase64({\n format: 'spki',\n key: entity.encryptionKey,\n options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signatureAlgorithm),\n });\n\n const jsonWebKey = await container.toJWK();\n const certificateFields = await buildCertificateJwkFields(entity.certificate);\n\n return {\n ...jsonWebKey,\n kid: entity.id,\n alg: entity.signatureAlgorithm,\n ...certificateFields,\n };\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,IAAaY,gBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA2B;EACnC,KAAKD,aAAaC,IAAID;CAC1B;CAEA,MACME,YACF,OACqC;EACrC,MAAME,UAAUN,sBAAsBK,OAAO,SAAA;EAa7C,MAAMe,YAAWb,MAXM,KAAKL,WAAWM,KAAK;GACxCC,OAAO;IACHC,MAAMZ,GAAG,CAACP,QAAQoB,KAAKpB,QAAQqB,EAAAA,CAAG;IAClCC,KAAKrB,OAAOsB;IAEZC,QAAQjB,GAAG,CAACT,UAAU2B,QAAQ3B,UAAU4B,OAAAA,CAAQ;IAChD,GAAIX,UAAU,EAAEA,QAAQ,IAAI,CAAC;GACjC;GACAY,OAAO,EAAEC,UAAU,OAAO;EAC9B,CAAA,EAAA,CAGKE,QACIC,WAAmG,CAAC,CAACA,OAAOC,iBACzG,CAAC,CAACD,OAAOE,kBAAkB,CAAA,CAElCC,KACIH,WAAW7B,cACPiC,WAAW;GACRC,QAAQ;GACRC,KAAKN,OAAOC;GACZM,SAASpC,cAAcqC,kCAAkCR,OAAOE,kBAAkB;EACtF,CAAA,CAAA,CACCO,MAAMC,cAAcA,UAAUC,MAAK,CAAA,CAAA,CACnCF,KAAK,OAAOH,QAAAA;GACT,MAAMM,oBAAoB,MAAMnC,0BAA0BuB,OAAOa,WAAW;GAE5E,OAAO;IACH,GAAGP;IACHQ,KAAKd,OAAOe;IACZC,KAAKhB,OAAOE;IACZ,GAAGU;GACP;EACJ,CAAA,CAAA;EAKZ,OAAO,EAAEK,MAAAA,MAFUC,QAAQC,IAAIrB,QAAAA,EAEjB;CAClB;CAEA,MACMsB,WAAW,IAAoD;EACjE,MAAMpB,SAAS,MAAM,KAAKpB,WAAWyC,QAAQ,EACzClC,OAAO;GACHC,MAAMZ,GAAG,CAACP,QAAQoB,KAAKpB,QAAQqB,EAAAA,CAAG;GAClCC,KAAKrB,OAAOsB;GACZC,QAAQjB,GAAG,CAACT,UAAU2B,QAAQ3B,UAAU4B,OAAAA,CAAQ;GAChDoB;EACJ,EACJ,CAAA;EAEA,IAAI,CAACf,QACD,MAAMhC,SAASsD,SAASP,EAAAA;EAG5B,IAAI,CAACf,OAAOC,iBAAiB,CAACD,OAAOE,oBACjC,MAAMlC,SAASuD,qBAAoB;EAUvC,MAAMC,aAAa,OAAMd,MAPDvC,cACnBiC,WAAW;GACRC,QAAQ;GACRC,KAAKN,OAAOC;GACZM,SAASpC,cAAcqC,kCAAkCR,OAAOE,kBAAkB;EACtF,CAAA,EAAA,CAE+BS,MAAK;EACxC,MAAMC,oBAAoB,MAAMnC,0BAA0BuB,OAAOa,WAAW;EAE5E,OAAO;GACH,GAAGW;GACHV,KAAKd,OAAOe;GACZC,KAAKhB,OAAOE;GACZ,GAAGU;EACP;CACJ;AACJ"}

package/dist/adapters/http/controllers/workflows/status/module.mjs CHANGED Viewed

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { PACKAGE_PATH } from "../../../../../path.mjs";
 import path from "node:path";
-import { load } from "locter";
+import { read } from "locter";
 import { DController, DGet } from "@routup/decorators";
 //#region src/adapters/http/controllers/workflows/status/module.ts
 function _ts_decorate(decorators, target, key, desc) {
@@ -22,7 +22,7 @@ var StatusController = class {
 		this.options = ctx.options;
 	}
 	resolveVersion() {
-		if (!this.versionPromise) this.versionPromise = load(path.join(PACKAGE_PATH, "package.json")).then((pkgJson) => pkgJson.version);
+		if (!this.versionPromise) this.versionPromise = read(path.join(PACKAGE_PATH, "package.json")).then((pkgJson) => pkgJson.version);
 		return this.versionPromise;
 	}
 	async status() {

package/dist/adapters/http/controllers/workflows/status/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["DController","DGet","~~load~~","path","PACKAGE_PATH","StatusController","options","versionPromise","ctx","resolveVersion","join","then","pkgJson","version","status","date","Date","toISOString","features"],"sources":["../../../../../../src/adapters/http/controllers/workflows/status/module.ts"],"sourcesContent":["/\n Copyright (c) 2022-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { StatusResponse, StatusResponseFeatures } from '@authup/core-http-kit';\nimport {\n DController,\n DGet,\n} from '@routup/decorators';\nimport { ~~load~~ } from 'locter';\nimport path from 'node:path';\nimport { PACKAGE_PATH } from '../../../../../path.ts';\n\nexport type StatusControllerOptions = {\n features: StatusResponseFeatures,\n};\n\nexport type StatusControllerContext = {\n options: StatusControllerOptions,\n};\n\n@DController('')\nexport class StatusController {\n protected options: StatusControllerOptions;\n\n // The version is constant for the process lifetime — read package.json\n // once and memoize instead of on every GET /.\n protected versionPromise: Promise<string> \| undefined;\n\n constructor(ctx: StatusControllerContext) {\n this.options = ctx.options;\n }\n\n protected resolveVersion(): Promise<string> {\n if (!this.versionPromise) {\n this.versionPromise = ~~load~~(path.join(PACKAGE_PATH, 'package.json'))\n .then((pkgJson) => pkgJson.version);\n }\n\n return this.versionPromise;\n }\n\n @DGet('/', [])\n async status(): Promise<StatusResponse> {\n return {\n version: await this.resolveVersion(),\n date: new Date().toISOString(),\n features: this.options.features,\n };\n }\n}\n"],"mappings":";;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;AAoBD,IAAaK,mBAAb,MAAaA;CACCC;CAIAC;CAEV,YAAYC,KAA8B;EACtC,KAAKF,UAAUE,IAAIF;CACvB;CAEUG,iBAAkC;EACxC,IAAI,CAAC,KAAKF,gBACN,KAAKA,iBAAiBL,KAAKC,KAAKO,KAAKN,cAAc,cAAA,CAAA,CAAA,CAC9CO,MAAMC,~~YAAYA~~,QAAQC,OAAO;~~EAG1C~~,OAAO,KAAKN;CAChB;CAEA,MACMO,SAAkC;EACpC,OAAO;GACHD,SAAS,MAAM,KAAKJ,eAAc;GAClCM,uBAAM,IAAIC,KAAAA,EAAAA,CAAOC,YAAW;GAC5BC,UAAU,KAAKZ,QAAQY;EAC3B;CACJ;AACJ"}
1	+ {"version":3,"file":"module.mjs","names":["DController","DGet","read","path","PACKAGE_PATH","StatusController","options","versionPromise","ctx","resolveVersion","join","then","pkgJson","version","status","date","Date","toISOString","features"],"sources":["../../../../../../src/adapters/http/controllers/workflows/status/module.ts"],"sourcesContent":["/\n Copyright (c) 2022-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { StatusResponse, StatusResponseFeatures } from '@authup/core-http-kit';\nimport {\n DController,\n DGet,\n} from '@routup/decorators';\nimport { read } from 'locter';\nimport path from 'node:path';\nimport { PACKAGE_PATH } from '../../../../../path.ts';\n\nexport type StatusControllerOptions = {\n features: StatusResponseFeatures,\n};\n\nexport type StatusControllerContext = {\n options: StatusControllerOptions,\n};\n\n@DController('')\nexport class StatusController {\n protected options: StatusControllerOptions;\n\n // The version is constant for the process lifetime — read package.json\n // once and memoize instead of on every GET /.\n protected versionPromise: Promise<string> \| undefined;\n\n constructor(ctx: StatusControllerContext) {\n this.options = ctx.options;\n }\n\n protected resolveVersion(): Promise<string> {\n if (!this.versionPromise) {\n this.versionPromise = read(path.join(PACKAGE_PATH, 'package.json'))\n .then((pkgJson: { version: string }) => pkgJson.version);\n }\n\n return this.versionPromise;\n }\n\n @DGet('/', [])\n async status(): Promise<StatusResponse> {\n return {\n version: await this.resolveVersion(),\n date: new Date().toISOString(),\n features: this.options.features,\n };\n }\n}\n"],"mappings":";;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;AAoBD,IAAaK,mBAAb,MAAaA;CACCC;CAIAC;CAEV,YAAYC,KAA8B;EACtC,KAAKF,UAAUE,IAAIF;CACvB;CAEUG,iBAAkC;EACxC,IAAI,CAAC,KAAKF,gBACN,KAAKA,iBAAiBL,KAAKC,KAAKO,KAAKN,cAAc,cAAA,CAAA,CAAA,CAC9CO,MAAMC,YAAiCA,QAAQC,OAAO;EAG/D,OAAO,KAAKN;CAChB;CAEA,MACMO,SAAkC;EACpC,OAAO;GACHD,SAAS,MAAM,KAAKJ,eAAc;GAClCM,uBAAM,IAAIC,KAAAA,EAAAA,CAAOC,YAAW;GAC5BC,UAAU,KAAKZ,QAAQY;EAC3B;CACJ;AACJ"}

package/dist/adapters/http/controllers/workflows/token/module.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,gCAAgC,EAAyB,MAAM,eAAe,CAAC;AACvH,OAAO,EAA4C,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAQ3F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGxC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,KAAK,EACR,gBAAgB,EAChB,2BAA2B,EAC3B,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACvB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;~~AAWnE~~,qBAEa,eAAe;IACxB,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAEjD,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IAEhD,SAAS,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAE9C,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAE5C,SAAS,CAAC,gBAAgB,EAAG,iBAAiB,CAAC;IAE/C,SAAS,CAAC,0BAA0B,EAAG,2BAA2B,CAAC;IAEnE,SAAS,CAAC,OAAO,CAAC,EAAG,gBAAgB,CAAC;IAEtC,SAAS,CAAC,WAAW,EAAG,MAAM,CAAC,GAAG,gBAAgB,EAAE,EAAE,gBAAgB,CAAC,CAAC;gBAI5D,GAAG,EAAE,sBAAsB;~~IAqEjC~~,aAAa,CAAa,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,gCAAgC,CAAC;IAKtF,cAAc,CACJ,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,gCAAgC,CAAC;IA4DtC,WAAW,CACD,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,IAAI,CAAC;IA+BV,WAAW,CAAa,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAiBrF"}
1	+ {"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,gCAAgC,EAAyB,MAAM,eAAe,CAAC;AACvH,OAAO,EAA4C,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAQ3F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGxC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,KAAK,EACR,gBAAgB,EAChB,2BAA2B,EAC3B,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACvB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAUnE,qBAEa,eAAe;IACxB,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAEjD,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IAEhD,SAAS,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAE9C,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAE5C,SAAS,CAAC,gBAAgB,EAAG,iBAAiB,CAAC;IAE/C,SAAS,CAAC,0BAA0B,EAAG,2BAA2B,CAAC;IAEnE,SAAS,CAAC,OAAO,CAAC,EAAG,gBAAgB,CAAC;IAEtC,SAAS,CAAC,WAAW,EAAG,MAAM,CAAC,GAAG,gBAAgB,EAAE,EAAE,gBAAgB,CAAC,CAAC;gBAI5D,GAAG,EAAE,sBAAsB;IAgEjC,aAAa,CAAa,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,gCAAgC,CAAC;IAKtF,cAAc,CACJ,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,gCAAgC,CAAC;IA4DtC,WAAW,CACD,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,IAAI,CAAC;IA+BV,WAAW,CAAa,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAiBrF"}

package/dist/adapters/http/controllers/workflows/token/module.mjs CHANGED Viewed

@@ -8,7 +8,6 @@ import { HTTPOAuth2AuthorizeGrant } from "../../../adapters/oauth2/grant-types/a
 import { HTTPClientCredentialsGrant } from "../../../adapters/oauth2/grant-types/client-credentials.mjs";
 import { HTTPPasswordGrant } from "../../../adapters/oauth2/grant-types/password.mjs";
 import { HTTPOAuth2RefreshTokenGrant } from "../../../adapters/oauth2/grant-types/refresh_token.mjs";
-import { HTTPRobotCredentialsGrant } from "../../../adapters/oauth2/grant-types/robot-credentials.mjs";
 import "../../../adapters/index.mjs";
 import { toOAuth2Error } from "../../../../../core/oauth2/helpers/error.mjs";
 import "../../../../../core/oauth2/helpers/index.mjs";
@@ -68,11 +67,6 @@ var TokenController = class {
 				sessionManager: ctx.sessionManager,
 				certificateSource: ctx.certificateSource
 			}),
-			[OAuth2TokenGrant.ROBOT_CREDENTIALS]: new HTTPRobotCredentialsGrant({
-				accessTokenIssuer: ctx.accessTokenIssuer,
-				authenticator: ctx.robotAuthenticator,
-				sessionManager: ctx.sessionManager
-			}),
 			[OAuth2TokenGrant.PASSWORD]: new HTTPPasswordGrant({
 				accessTokenIssuer: ctx.accessTokenIssuer,
 				refreshTokenIssuer: ctx.refreshTokenIssuer,
@@ -131,8 +125,8 @@ var TokenController = class {
 					const key = buildPermissionKey(binding.permission);
 					if (!acc[key]) acc[key] = {
 						name: binding.permission.name,
-						client_id: binding.permission.client_id,
-						realm_id: binding.permission.realm_id
+						client_id: binding.permission.clientId,
+						realm_id: binding.permission.realmId
 					};
 					return acc;
 				}, {})),