npm - @authup/server-core - Versions diffs - 1.0.0-beta.53 → 1.0.0-beta.55 - Mend

@authup/server-core 1.0.0-beta.53 → 1.0.0-beta.55

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1255) hide show

package/dist/adapters/http/controllers/entities/trust-anchor/module.mjs CHANGED Viewed

@@ -15,8 +15,8 @@ function _ts_decorate(decorators, target, key, desc) {
 	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
 	return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-function _ts_metadata(k, v) {
-	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+function _ts_metadata(metadataKey, metadataValue) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(metadataKey, metadataValue);
 }
 function _ts_param(paramIndex, decorator) {
 	return function(target, key) {
@@ -30,13 +30,7 @@ var TrustAnchorController = class {
 	}
 	async getMany(event) {
 		const actor = buildActorContext(event);
-		const query = useRequestQuery(event);
-		const realmId = getRequestRealmID(event);
-		if (realmId) query.filter = {
-			...query.filter && typeof query.filter === "object" ? query.filter : {},
-			realm_id: realmId
-		};
-		const { data, meta } = await this.service.getMany(query, actor);
+		const { data, meta } = await this.service.getMany(useRequestQuery(event), actor, { realmId: getRequestRealmID(event) });
 		return {
 			data,
 			meta

package/dist/adapters/http/controllers/entities/trust-anchor/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["useRequestQuery","DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","TrustAnchorController","service","ctx","getMany","event","actor","~~query~~","~~realmId~~","~~filter~~","~~realm_id","data","meta","~~getOne","id","add","entity","create","response","status","edit","update","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/trust-anchor/module.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n EntityCollectionResponse,\n TrustAnchorCreatePayload,\n TrustAnchorUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { TrustAnchor } from '@authup/core-kit';\nimport { useRequestQuery } from '@routup/basic/query';\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport type { ITrustAnchorService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n applyRouteRealmIDToBody,\n buildActorContext,\n getRequestRealmID,\n} from '../../../request/index.ts';\n\nexport type TrustAnchorControllerContext = {\n service: ITrustAnchorService,\n};\n\n@DTags('trust-anchor')\n@DController(['/trust-anchors', '/realms/:realmId/trust-anchors'])\nexport class TrustAnchorController {\n protected service: ITrustAnchorService;\n\n constructor(ctx: TrustAnchorControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<TrustAnchor>> {\n const actor = buildActorContext(event);\n\n const ~~query = useRequestQuery(event);\n const realmId = getRequestRealmID(event);\n if (realmId)~~ {~~\n query.filter~~ ~~= {\n ...(query.filter && typeof query.filter === 'object' ? query.filter : {}),\n realm_id: realmId,\n };\n }\n\n const {~~ data, meta } = await this.service.getMany(~~query~~, actor);\n\n return {\n data,\n meta,\n };\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n const actor = buildActorContext(event);\n\n return this.service.getOne(id, actor, getRequestRealmID(event));\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: TrustAnchorCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n applyRouteRealmIDToBody(event, data);\n const actor = buildActorContext(event);\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async edit(\n @DPath('id') id: string,\n @DBody() data: TrustAnchorUpdatePayload,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n const actor = buildActorContext(event);\n\n return this.service.update(id, data, actor, getRequestRealmID(event));\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n const actor = buildActorContext(event);\n const entity = await this.service.delete(id, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAkCD,IAAaa,wBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAmC;EAC3C,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC8C;EAC9C,MAAME,QAAQP,kBAAkBM,KAAAA;EAEhC,~~MAAME~~,~~QAAQnB~~,~~gBAAgBiB~~,~~KAAAA;EAC9B,MAAMG,UAAUR,kBAAkBK,KAAAA;EAClC,IAAIG,SACAD,MAAME,~~SAAS~~;GACX~~,~~GAAIF~~,~~MAAME~~,~~UAAU~~,~~OAAOF~~,~~MAAME~~,~~WAAW~~,~~WAAWF~~,~~MAAME~~,~~SAAS,CAAC;GACvEC,UAAUF;EACd;EAGJ,MAAM,~~EAAEG,~~MAAMC~~,~~SAAS~~,~~MAAM~~,~~KAAKV~~,~~QAAQE,QAAQG,OAAOD,KAAAA~~;~~EAEzD~~,OAAO;~~GACHK~~;GACAC;EACJ;CACJ;CAEA,~~MACMC~~,OACF,IACA,OACoB;EACpB,~~MAAMP~~,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,~~QAAQW~~,OAAOC,~~IAAIR~~,OAAON,kBAAkBK,KAAAA,CAAAA;CAC5D;CAEA,~~MACMU~~,IACF,MACA,OACoB;~~EACpBjB~~,wBAAwBO,~~OAAOM~~,IAAAA;EAC/B,~~MAAML~~,QAAQP,kBAAkBM,KAAAA;EAChC,~~MAAMW~~,SAAS,MAAM,~~KAAKd~~,~~QAAQe~~,~~OAAON~~,~~MAAML~~,KAAAA;EAE/CD,~~MAAMa~~,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,KACF,IACA,MACA,OACoB;EACpB,~~MAAMd~~,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,~~QAAQmB~~,OAAOP,~~IAAIH~~,~~MAAML~~,OAAON,kBAAkBK,KAAAA,CAAAA;CAClE;CAEA,~~MACMiB~~,KACF,IACA,OACoB;EACpB,~~MAAMhB~~,QAAQP,kBAAkBM,KAAAA;EAChC,~~MAAMW~~,SAAS,MAAM,~~KAAKd~~,~~QAAQqB~~,OAAOT,~~IAAIR~~,KAAAA;EAE7CD,~~MAAMa~~,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;~~WAtEenB~~,uBAAAA,CAAAA;;;;;;;~~eAuBIA~~,uBAAAA,CAAAA;;;;;;;;~~YAUHA~~,uBAAAA,CAAAA;;;;;;;;~~gBAcIA~~,uBAAAA,CAAAA;;;;;;;;;;;;;~~kBAWEA~~,uBAAAA,CAAAA;;;;;;;;;~~cAlER~~,kBAAkB,gCAAA,CAAA"}
1	+ {"version":3,"file":"module.mjs","names":["useRequestQuery","DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","TrustAnchorController","service","ctx","getMany","event","actor","data","meta","realmId","getOne","id","add","entity","create","response","status","edit","update","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/trust-anchor/module.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n EntityCollectionResponse,\n TrustAnchorCreatePayload,\n TrustAnchorUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { TrustAnchor } from '@authup/core-kit';\nimport { useRequestQuery } from '@routup/basic/query';\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport type { ITrustAnchorService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n applyRouteRealmIDToBody,\n buildActorContext,\n getRequestRealmID,\n} from '../../../request/index.ts';\n\nexport type TrustAnchorControllerContext = {\n service: ITrustAnchorService,\n};\n\n@DTags('trust-anchor')\n@DController(['/trust-anchors', '/realms/:realmId/trust-anchors'])\nexport class TrustAnchorController {\n protected service: ITrustAnchorService;\n\n constructor(ctx: TrustAnchorControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<TrustAnchor>> {\n const actor = buildActorContext(event);\n\n const { data, meta } = await this.service.getMany(useRequestQuery(event), actor, { realmId: getRequestRealmID(event) });\n\n return {\n data,\n meta,\n };\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n const actor = buildActorContext(event);\n\n return this.service.getOne(id, actor, getRequestRealmID(event));\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: TrustAnchorCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n applyRouteRealmIDToBody(event, data);\n const actor = buildActorContext(event);\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async edit(\n @DPath('id') id: string,\n @DBody() data: TrustAnchorUpdatePayload,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n const actor = buildActorContext(event);\n\n return this.service.update(id, data, actor, getRequestRealmID(event));\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<TrustAnchor> {\n const actor = buildActorContext(event);\n const entity = await this.service.delete(id, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAkCD,IAAaa,wBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAmC;EAC3C,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC8C;EAC9C,MAAME,QAAQP,kBAAkBM,KAAAA;EAEhC,MAAM,EAAEE,MAAMC,SAAS,MAAM,KAAKN,QAAQE,QAAQhB,gBAAgBiB,KAAAA,GAAQC,OAAO,EAAEG,SAAST,kBAAkBK,KAAAA,EAAO,CAAA;EAErH,OAAO;GACHE;GACAC;EACJ;CACJ;CAEA,MACME,OACF,IACA,OACoB;EACpB,MAAMJ,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,QAAQQ,OAAOC,IAAIL,OAAON,kBAAkBK,KAAAA,CAAAA;CAC5D;CAEA,MACMO,IACF,MACA,OACoB;EACpBd,wBAAwBO,OAAOE,IAAAA;EAC/B,MAAMD,QAAQP,kBAAkBM,KAAAA;EAChC,MAAMQ,SAAS,MAAM,KAAKX,QAAQY,OAAOP,MAAMD,KAAAA;EAE/CD,MAAMU,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,KACF,IACA,MACA,OACoB;EACpB,MAAMX,QAAQP,kBAAkBM,KAAAA;EAEhC,OAAO,KAAKH,QAAQgB,OAAOP,IAAIJ,MAAMD,OAAON,kBAAkBK,KAAAA,CAAAA;CAClE;CAEA,MACMc,KACF,IACA,OACoB;EACpB,MAAMb,QAAQP,kBAAkBM,KAAAA;EAChC,MAAMQ,SAAS,MAAM,KAAKX,QAAQkB,OAAOT,IAAIL,KAAAA;EAE7CD,MAAMU,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;CA7DehB,KAAAA,IAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;CAcIA,KAAAA,QAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;CAUHA,MAAAA,IAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;CAcIA,MAAAA,QAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;;;;;;CAWEA,QAAAA,QAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;;CAzDR,YAAA,CAAA,kBAAkB,gCAAA,CAAA"}

package/dist/adapters/http/controllers/entities/user/module.mjs CHANGED Viewed

@@ -17,8 +17,8 @@ function _ts_decorate(decorators, target, key, desc) {
 	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
 	return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-function _ts_metadata(k, v) {
-	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+function _ts_metadata(metadataKey, metadataValue) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(metadataKey, metadataValue);
 }
 function _ts_param(paramIndex, decorator) {
 	return function(target, key) {

package/dist/adapters/http/controllers/entities/user/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","useRequestQuery","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","isSelfToken","UserController","service","ctx","getMany","event","actor","data","meta","get","id","paramId","identity","type","entity","getOne","add","create","response","status","edit","update","put","created","save","undefined","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/user/module.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DPut,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n UserCreatePayload,\n UserSavePayload,\n UserUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { User } from '@authup/core-kit';\nimport type { IUserService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n applyRouteRealmIDToBody,\n buildActorContext,\n getRequestRealmID,\n} from '../../../request/index.ts';\nimport { isSelfToken } from '../../../../../utils/index.ts';\n\nexport type UserControllerContext = {\n service: IUserService,\n};\n\n@DTags('user')\n@DController(['/users', '/realms/:realmId/users'])\nexport class UserController {\n protected service: IUserService;\n\n constructor(ctx: UserControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<User>> {\n const actor = buildActorContext(event);\n const {\n data,\n meta,\n } = await this.service.getMany(useRequestQuery(event), actor);\n\n return {\n data,\n meta,\n };\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async get(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<User> {\n const actor = buildActorContext(event);\n let paramId = id;\n\n if (\n isSelfToken(paramId) &&\n actor.identity &&\n actor.identity.type === 'user'\n ) {\n paramId = actor.identity.data.id;\n }\n\n const entity = await this.service.getOne(\n paramId,\n actor,\n useRequestQuery(event),\n getRequestRealmID(event),\n );\n\n return entity;\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: UserCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<User> {\n applyRouteRealmIDToBody(event, data);\n const actor = buildActorContext(event);\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async edit(\n @DPath('id') id: string,\n @DBody() data: UserUpdatePayload,\n @DContext() event: IAppEvent,\n ): Promise<User> {\n applyRouteRealmIDToBody(event, data);\n const actor = buildActorContext(event);\n const entity = await this.service.update(\n id,\n data,\n actor,\n );\n\n event.response.status = 202;\n\n return entity;\n }\n\n @DPut('/:id', [ForceLoggedInMiddleware])\n async put(\n @DPath('id') id: string,\n @DBody() data: UserSavePayload,\n @DContext() event: IAppEvent,\n ): Promise<User> {\n applyRouteRealmIDToBody(event, data);\n const actor = buildActorContext(event);\n const {\n entity,\n created,\n } = await this.service.save(\n id \|\| undefined,\n data,\n actor,\n );\n\n event.response.status = created ? 201 : 202;\n return entity;\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<User> {\n const actor = buildActorContext(event);\n const entity = await this.service.delete(id, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CA,IAAae,iBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA4B;EACpC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OACuC;EACvC,MAAME,QAAQR,kBAAkBO,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQT,gBAAgBU,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,IACA,OACa;EACb,MAAMH,QAAQR,kBAAkBO,KAAAA;EAChC,IAAIM,UAAUD;EAEd,IACIV,YAAYW,OAAAA,KACZL,MAAMM,YACNN,MAAMM,SAASC,SAAS,QAExBF,UAAUL,MAAMM,SAASL,KAAKG;EAUlC,OAAOI,MAPc,KAAKZ,QAAQa,OAC9BJ,SACAL,OACAX,gBAAgBU,KAAAA,GAChBN,kBAAkBM,KAAAA,CAAAA;CAI1B;CAEA,MACMW,IACF,MACA,OACa;EACbnB,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMS,SAAS,MAAM,KAAKZ,QAAQe,OAAOV,MAAMD,KAAAA;EAE/CD,MAAMa,SAASC,SAAS;EAExB,OAAOL;CACX;CAEA,MACMM,KACF,IACA,MACA,OACa;EACbvB,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMS,SAAS,MAAM,KAAKZ,QAAQmB,OAC9BX,IACAH,MACAD,KAAAA;EAGJD,MAAMa,SAASC,SAAS;EAExB,OAAOL;CACX;CAEA,MACMQ,IACF,IACA,MACA,OACa;EACbzB,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAM,EACFS,QACAS,YACA,MAAM,KAAKrB,QAAQsB,KACnBd,MAAMe,KAAAA,GACNlB,MACAD,KAAAA;EAGJD,MAAMa,SAASC,SAASI,UAAU,MAAM;EACxC,OAAOT;CACX;CAEA,MACMY,KACF,IACA,OACa;EACb,MAAMpB,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMS,SAAS,MAAM,KAAKZ,QAAQyB,OAAOjB,IAAIJ,KAAAA;EAE7CD,MAAMa,SAASC,SAAS;EAExB,OAAOL;CACX;AACJ;;~~WA5GelB~~,uBAAAA,CAAAA;;;;;;;~~eAgBIA~~,uBAAAA,CAAAA;;;;;;;;~~YA0BHA~~,uBAAAA,CAAAA;;;;;;;;~~gBAcIA~~,uBAAAA,CAAAA;;;;;;;;;;;;;~~eAmBDA~~,uBAAAA,CAAAA;;;;;;;;;;;;;~~kBAqBGA~~,uBAAAA,CAAAA;;;;;;;;;~~cAxGR~~,UAAU,wBAAA,CAAA"}
1	+ {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","useRequestQuery","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","isSelfToken","UserController","service","ctx","getMany","event","actor","data","meta","get","id","paramId","identity","type","entity","getOne","add","create","response","status","edit","update","put","created","save","undefined","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/user/module.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DPut,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n UserCreatePayload,\n UserSavePayload,\n UserUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { User } from '@authup/core-kit';\nimport type { IUserService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n applyRouteRealmIDToBody,\n buildActorContext,\n getRequestRealmID,\n} from '../../../request/index.ts';\nimport { isSelfToken } from '../../../../../utils/index.ts';\n\nexport type UserControllerContext = {\n service: IUserService,\n};\n\n@DTags('user')\n@DController(['/users', '/realms/:realmId/users'])\nexport class UserController {\n protected service: IUserService;\n\n constructor(ctx: UserControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<User>> {\n const actor = buildActorContext(event);\n const {\n data,\n meta,\n } = await this.service.getMany(useRequestQuery(event), actor);\n\n return {\n data,\n meta,\n };\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async get(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<User> {\n const actor = buildActorContext(event);\n let paramId = id;\n\n if (\n isSelfToken(paramId) &&\n actor.identity &&\n actor.identity.type === 'user'\n ) {\n paramId = actor.identity.data.id;\n }\n\n const entity = await this.service.getOne(\n paramId,\n actor,\n useRequestQuery(event),\n getRequestRealmID(event),\n );\n\n return entity;\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: UserCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<User> {\n applyRouteRealmIDToBody(event, data);\n const actor = buildActorContext(event);\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async edit(\n @DPath('id') id: string,\n @DBody() data: UserUpdatePayload,\n @DContext() event: IAppEvent,\n ): Promise<User> {\n applyRouteRealmIDToBody(event, data);\n const actor = buildActorContext(event);\n const entity = await this.service.update(\n id,\n data,\n actor,\n );\n\n event.response.status = 202;\n\n return entity;\n }\n\n @DPut('/:id', [ForceLoggedInMiddleware])\n async put(\n @DPath('id') id: string,\n @DBody() data: UserSavePayload,\n @DContext() event: IAppEvent,\n ): Promise<User> {\n applyRouteRealmIDToBody(event, data);\n const actor = buildActorContext(event);\n const {\n entity,\n created,\n } = await this.service.save(\n id \|\| undefined,\n data,\n actor,\n );\n\n event.response.status = created ? 201 : 202;\n return entity;\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<User> {\n const actor = buildActorContext(event);\n const entity = await this.service.delete(id, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CA,IAAae,iBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA4B;EACpC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OACuC;EACvC,MAAME,QAAQR,kBAAkBO,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQT,gBAAgBU,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,IACA,OACa;EACb,MAAMH,QAAQR,kBAAkBO,KAAAA;EAChC,IAAIM,UAAUD;EAEd,IACIV,YAAYW,OAAAA,KACZL,MAAMM,YACNN,MAAMM,SAASC,SAAS,QAExBF,UAAUL,MAAMM,SAASL,KAAKG;EAUlC,OAAOI,MAPc,KAAKZ,QAAQa,OAC9BJ,SACAL,OACAX,gBAAgBU,KAAAA,GAChBN,kBAAkBM,KAAAA,CAAAA;CAI1B;CAEA,MACMW,IACF,MACA,OACa;EACbnB,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMS,SAAS,MAAM,KAAKZ,QAAQe,OAAOV,MAAMD,KAAAA;EAE/CD,MAAMa,SAASC,SAAS;EAExB,OAAOL;CACX;CAEA,MACMM,KACF,IACA,MACA,OACa;EACbvB,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMS,SAAS,MAAM,KAAKZ,QAAQmB,OAC9BX,IACAH,MACAD,KAAAA;EAGJD,MAAMa,SAASC,SAAS;EAExB,OAAOL;CACX;CAEA,MACMQ,IACF,IACA,MACA,OACa;EACbzB,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAM,EACFS,QACAS,YACA,MAAM,KAAKrB,QAAQsB,KACnBd,MAAMe,KAAAA,GACNlB,MACAD,KAAAA;EAGJD,MAAMa,SAASC,SAASI,UAAU,MAAM;EACxC,OAAOT;CACX;CAEA,MACMY,KACF,IACA,OACa;EACb,MAAMpB,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMS,SAAS,MAAM,KAAKZ,QAAQyB,OAAOjB,IAAIJ,KAAAA;EAE7CD,MAAMa,SAASC,SAAS;EAExB,OAAOL;CACX;AACJ;;CA5GelB,KAAAA,IAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;CAgBIA,KAAAA,QAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;CA0BHA,MAAAA,IAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;CAcIA,MAAAA,QAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;;;;;;CAmBDA,KAAAA,QAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;;;;;;CAqBGA,QAAAA,QAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;;CAxGR,YAAA,CAAA,UAAU,wBAAA,CAAA"}

package/dist/adapters/http/controllers/entities/user-attribute/module.mjs CHANGED Viewed

@@ -14,8 +14,8 @@ function _ts_decorate(decorators, target, key, desc) {
 	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
 	return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-function _ts_metadata(k, v) {
-	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+function _ts_metadata(metadataKey, metadataValue) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(metadataKey, metadataValue);
 }
 function _ts_param(paramIndex, decorator) {
 	return function(target, key) {

package/dist/adapters/http/controllers/entities/user-attribute/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","UserAttributeController","service","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","get","id","getOne","edit","update","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/user-attribute/module.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n UserAttributeCreatePayload,\n UserAttributeUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { UserAttribute } from '@authup/core-kit';\nimport type { IUserAttributeService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext } from '../../../request/index.ts';\n\nexport type UserAttributeControllerContext = {\n service: IUserAttributeService,\n};\n\n@DTags('user')\n@DController('/user-attributes')\nexport class UserAttributeController {\n protected service: IUserAttributeService;\n\n constructor(ctx: UserAttributeControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<UserAttribute>> {\n const actor = buildActorContext(event);\n const {\n data,\n meta,\n } = await this.service.getMany(useRequestQuery(event), actor);\n\n return {\n data,\n meta,\n };\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: UserAttributeCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserAttribute> {\n const actor = buildActorContext(event);\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async get(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<UserAttribute> {\n const actor = buildActorContext(event);\n const entity = await this.service.getOne(id, actor);\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async edit(\n @DPath('id') id: string,\n @DBody() data: UserAttributeUpdatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserAttribute> {\n const actor = buildActorContext(event);\n const entity = await this.service.update(id, data, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<UserAttribute> {\n const actor = buildActorContext(event);\n const entity = await this.service.delete(id, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAmCA,IAAaW,0BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAqC;EAC7C,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OACgD;EAChD,MAAME,QAAQN,kBAAkBK,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQN,gBAAgBO,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACsB;EACtB,MAAMH,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQS,OAAOJ,MAAMD,KAAAA;EAE/CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,IACF,IACA,OACsB;EACtB,MAAMR,QAAQN,kBAAkBK,KAAAA;EAGhC,OAAOK,MAFc,KAAKR,QAAQc,OAAOD,IAAIT,KAAAA;CAGjD;CAEA,MACMW,KACF,IACA,MACA,OACsB;EACtB,MAAMX,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQgB,OAAOH,IAAIR,MAAMD,KAAAA;EAEnDD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMS,KACF,IACA,OACsB;EACtB,MAAMb,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQkB,OAAOL,IAAIT,KAAAA;EAE7CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;~~WAlEeX~~,uBAAAA,CAAAA;;;;;;;~~YAgBCA~~,uBAAAA,CAAAA;;;;;;;;~~eAaGA~~,uBAAAA,CAAAA;;;;;;;;~~gBAWCA~~,uBAAAA,CAAAA;;;;;;;;;;;;;~~kBAcEA~~,uBAAAA,CAAAA"}
1	+ {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","UserAttributeController","service","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","get","id","getOne","edit","update","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/user-attribute/module.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n UserAttributeCreatePayload,\n UserAttributeUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { UserAttribute } from '@authup/core-kit';\nimport type { IUserAttributeService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext } from '../../../request/index.ts';\n\nexport type UserAttributeControllerContext = {\n service: IUserAttributeService,\n};\n\n@DTags('user')\n@DController('/user-attributes')\nexport class UserAttributeController {\n protected service: IUserAttributeService;\n\n constructor(ctx: UserAttributeControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<UserAttribute>> {\n const actor = buildActorContext(event);\n const {\n data,\n meta,\n } = await this.service.getMany(useRequestQuery(event), actor);\n\n return {\n data,\n meta,\n };\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: UserAttributeCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserAttribute> {\n const actor = buildActorContext(event);\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async get(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<UserAttribute> {\n const actor = buildActorContext(event);\n const entity = await this.service.getOne(id, actor);\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async edit(\n @DPath('id') id: string,\n @DBody() data: UserAttributeUpdatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserAttribute> {\n const actor = buildActorContext(event);\n const entity = await this.service.update(id, data, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<UserAttribute> {\n const actor = buildActorContext(event);\n const entity = await this.service.delete(id, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAmCA,IAAaW,0BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAqC;EAC7C,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OACgD;EAChD,MAAME,QAAQN,kBAAkBK,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQN,gBAAgBO,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACsB;EACtB,MAAMH,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQS,OAAOJ,MAAMD,KAAAA;EAE/CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,IACF,IACA,OACsB;EACtB,MAAMR,QAAQN,kBAAkBK,KAAAA;EAGhC,OAAOK,MAFc,KAAKR,QAAQc,OAAOD,IAAIT,KAAAA;CAGjD;CAEA,MACMW,KACF,IACA,MACA,OACsB;EACtB,MAAMX,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQgB,OAAOH,IAAIR,MAAMD,KAAAA;EAEnDD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMS,KACF,IACA,OACsB;EACtB,MAAMb,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQkB,OAAOL,IAAIT,KAAAA;EAE7CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;CAlEeX,KAAAA,IAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;CAgBCA,MAAAA,IAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;CAaGA,KAAAA,QAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;CAWCA,MAAAA,QAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;;;;;;CAcEA,QAAAA,QAAAA,CAAAA,uBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/user-attribute/utils/validation.mjs CHANGED Viewed

@@ -11,7 +11,7 @@ var UserAttributeRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
 		this.mount("name", { group: RequestHandlerOperation.CREATE }, createValidator(z.string().min(3).max(255)));
-		this.mount("user_id", {
+		this.mount("userId", {
 			group: RequestHandlerOperation.CREATE,
 			optional: true
 		}, createValidator(z.uuid().nullable()));

package/dist/adapters/http/controllers/entities/user-attribute/utils/validation.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserAttributeRequestValidator","initialize","mount","group","CREATE","string","min","max","optional","uuid","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-attribute/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserAttribute } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserAttributeRequestValidator extends Container<\n UserAttribute\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'name',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.string().min(3).max(255)),\n );\n\n this.mount(\n '~~user_id~~',\n {\n group: RequestHandlerOperation.CREATE,\n optional: true,\n },\n createValidator(z.uuid().nullable()),\n );\n\n this.mount(\n 'value',\n { optional: true },\n createValidator(z.string().min(3).max(512).nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,gCAAb,cAAmDH,UAAAA;CAGrCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,QACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKL,MACD,~~WACA~~;GACIC,OAAOJ,wBAAwBK;GAC/BI,UAAU;EACd,GACAZ,gBAAgBE,EAAEW,KAAI,CAAA,CAAGC,SAAQ,CAAA,CAAA;EAGrC,KAAKR,MACD,SACA,EAAEM,UAAU,KAAK,GACjBZ,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKG,SAAQ,CAAA,CAAA;CAE3D;AACJ"}
1	+ {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserAttributeRequestValidator","initialize","mount","group","CREATE","string","min","max","optional","uuid","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-attribute/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserAttribute } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserAttributeRequestValidator extends Container<\n UserAttribute\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'name',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.string().min(3).max(255)),\n );\n\n this.mount(\n 'userId',\n {\n group: RequestHandlerOperation.CREATE,\n optional: true,\n },\n createValidator(z.uuid().nullable()),\n );\n\n this.mount(\n 'value',\n { optional: true },\n createValidator(z.string().min(3).max(512).nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,gCAAb,cAAmDH,UAAAA;CAGrCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,QACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKL,MACD,UACA;GACIC,OAAOJ,wBAAwBK;GAC/BI,UAAU;EACd,GACAZ,gBAAgBE,EAAEW,KAAI,CAAA,CAAGC,SAAQ,CAAA,CAAA;EAGrC,KAAKR,MACD,SACA,EAAEM,UAAU,KAAK,GACjBZ,gBAAgBE,EAAEO,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKG,SAAQ,CAAA,CAAA;CAE3D;AACJ"}

package/dist/adapters/http/controllers/entities/user-authenticator/module.mjs CHANGED Viewed

@@ -19,8 +19,8 @@ function _ts_decorate(decorators, target, key, desc) {
 	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
 	return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-function _ts_metadata(k, v) {
-	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+function _ts_metadata(metadataKey, metadataValue) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(metadataKey, metadataValue);
 }
 function _ts_param(paramIndex, decorator) {
 	return function(target, key) {
@@ -56,7 +56,7 @@ var UserAuthenticatorController = class {
 		const userId = this.resolveUserId(id, event);
 		const result = await this.service.enroll({
 			...data,
-			user_id: userId
+			userId
 		}, actor);
 		event.response.status = 201;
 		return result;

package/dist/adapters/http/controllers/entities/user-authenticator/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","IdentityType","BadRequestError","useRequestQuery","isSelfToken","ForceLoggedInMiddleware","buildActorContext","useRequestIdentity","UserAuthenticatorController","service","ctx","resolveUserId","id","event","identity","type","USER","getMany","actor","userId","data","meta","enroll","result","~~user_id","~~response","status","getOne","deviceId","confirm","code","drop","entity","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/user-authenticator/module.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n /\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport { IdentityType } from '@authup/core-kit';\nimport type { UserAuthenticator } from '@authup/core-kit';\nimport { BadRequestError } from '@authup/errors';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n UserAuthenticatorConfirmPayload,\n UserAuthenticatorCreatePayload,\n UserAuthenticatorEnrollResponse,\n} from '@authup/core-http-kit';\nimport { isSelfToken } from '../../../../../utils/index.ts';\nimport type { IUserAuthenticatorService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext, useRequestIdentity } from '../../../request/index.ts';\n\nexport type UserAuthenticatorControllerContext = {\n service: IUserAuthenticatorService,\n};\n\n@DTags('userAuthenticator')\n@DController('/users/:id/authenticators')\nexport class UserAuthenticatorController {\n protected service: IUserAuthenticatorService;\n\n constructor(ctx: UserAuthenticatorControllerContext) {\n this.service = ctx.service;\n }\n\n /\n `@me` / `@self` resolve to the calling user identity.\n */\n protected resolveUserId(id: string, event: IAppEvent): string {\n if (isSelfToken(id)) {\n const identity = useRequestIdentity(event);\n if (identity && identity.type === IdentityType.USER) {\n return identity.id;\n }\n\n // A non-user identity (client~~/robot~~) has no authenticator\n // namespace — fail loud instead of letting the literal token\n // fall through and silently match zero rows.\n throw new BadRequestError('The @me/@self token can only be used by a user identity.');\n }\n\n return id;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<UserAuthenticator>> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n const { data, meta } = await this.service.getMany(useRequestQuery(event), actor, { userId });\n\n return {\n data,\n meta,\n };\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async enroll(\n @DPath('id') id: string,\n @DBody() data: UserAuthenticatorCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticatorEnrollResponse> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n // route wins silently over body\n const result = await this.service.enroll({ ...data, ~~user_id:~~ userId }, actor);\n\n event.response.status = 201;\n return result;\n }\n\n @DGet('/:deviceId', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DPath('deviceId') deviceId: string,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticator> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n return this.service.getOne(deviceId, actor, { userId });\n }\n\n @DPost('/:deviceId/confirm', [ForceLoggedInMiddleware])\n async confirm(\n @DPath('id') id: string,\n @DPath('deviceId') deviceId: string,\n @DBody() data: UserAuthenticatorConfirmPayload,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticator> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n if (!data \|\| typeof data.code !== 'string' \|\| !data.code) {\n throw new BadRequestError('A code must be provided.');\n }\n\n return this.service.confirm(deviceId, data.code, actor, { userId });\n }\n\n @DDelete('/:deviceId', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DPath('deviceId') deviceId: string,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticator> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n const entity = await this.service.delete(deviceId, actor, { userId });\n\n event.response.status = 202;\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAae,8BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAyC;EACjD,KAAKD,UAAUC,IAAID;CACvB;;;IAKA,cAAwBG,IAAYC,OAA0B;EAC1D,IAAIT,YAAYQ,EAAAA,GAAK;GACjB,MAAME,WAAWP,mBAAmBM,KAAAA;GACpC,IAAIC,YAAYA,SAASC,SAASd,aAAae,MAC3C,OAAOF,SAASF;GAMpB,MAAM,IAAIV,gBAAgB,0DAAA;EAC9B;EAEA,OAAOU;CACX;CAEA,MACMK,QACF,IACA,OACoD;EACpD,MAAMC,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,MAAM,EAAEO,MAAMC,SAAS,MAAM,KAAKZ,QAAQQ,QAAQd,gBAAgBU,KAAAA,GAAQK,OAAO,EAAEC,OAAO,CAAA;EAE1F,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,OACF,IACA,MACA,OACwC;EACxC,MAAMJ,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAGtC,MAAMU,SAAS,MAAM,KAAKd,QAAQa,OAAO;GAAE,GAAGF;~~GAAMI,SAASL~~;EAAO,GAAGD,KAAAA;~~EAEvEL~~,~~MAAMY~~,SAASC,SAAS;EACxB,~~OAAOH~~;CACX;CAEA,~~MACMI~~,OACF,IACA,UACA,OAC0B;EAC1B,~~MAAMT~~,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,OAAO,KAAKJ,~~QAAQkB~~,OAAOC,~~UAAUV~~,OAAO,EAAEC,OAAO,CAAA;CACzD;CAEA,~~MACMU~~,QACF,IACA,UACA,MACA,OAC0B;EAC1B,~~MAAMX~~,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,IAAI,CAACO,QAAQ,OAAOA,~~KAAKU~~,SAAS,YAAY,~~CAACV~~,~~KAAKU~~,MAChD,MAAM,~~IAAI5B~~,gBAAgB,0BAAA;EAG9B,OAAO,KAAKO,~~QAAQoB~~,QAAQD,~~UAAUR~~,~~KAAKU~~,~~MAAMZ~~,OAAO,EAAEC,OAAO,CAAA;CACrE;CAEA,~~MACMY~~,KACF,IACA,UACA,OAC0B;EAC1B,~~MAAMb~~,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,~~MAAMmB~~,SAAS,MAAM,~~KAAKvB~~,~~QAAQwB~~,OAAOL,~~UAAUV~~,OAAO,EAAEC,OAAO,CAAA;EAEnEN,~~MAAMY~~,SAASC,SAAS;EACxB,OAAOM;CACX;AACJ;;~~WA3Ee3B~~,uBAAAA,CAAAA;;;;;;;;~~YAgBCA~~,uBAAAA,CAAAA;;;;;;;;;;;;;~~qBAgBSA~~,uBAAAA,CAAAA;;;;;;;;;;;;;~~8BAYSA~~,uBAAAA,CAAAA;;;;;;;;;;;;;;;~~wBAiBNA~~,uBAAAA,CAAAA"}
1	+ {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","IdentityType","BadRequestError","useRequestQuery","isSelfToken","ForceLoggedInMiddleware","buildActorContext","useRequestIdentity","UserAuthenticatorController","service","ctx","resolveUserId","id","event","identity","type","USER","getMany","actor","userId","data","meta","enroll","result","response","status","getOne","deviceId","confirm","code","drop","entity","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/user-authenticator/module.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n /\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport { IdentityType } from '@authup/core-kit';\nimport type { UserAuthenticator } from '@authup/core-kit';\nimport { BadRequestError } from '@authup/errors';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n UserAuthenticatorConfirmPayload,\n UserAuthenticatorCreatePayload,\n UserAuthenticatorEnrollResponse,\n} from '@authup/core-http-kit';\nimport { isSelfToken } from '../../../../../utils/index.ts';\nimport type { IUserAuthenticatorService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext, useRequestIdentity } from '../../../request/index.ts';\n\nexport type UserAuthenticatorControllerContext = {\n service: IUserAuthenticatorService,\n};\n\n@DTags('userAuthenticator')\n@DController('/users/:id/authenticators')\nexport class UserAuthenticatorController {\n protected service: IUserAuthenticatorService;\n\n constructor(ctx: UserAuthenticatorControllerContext) {\n this.service = ctx.service;\n }\n\n /\n `@me` / `@self` resolve to the calling user identity.\n */\n protected resolveUserId(id: string, event: IAppEvent): string {\n if (isSelfToken(id)) {\n const identity = useRequestIdentity(event);\n if (identity && identity.type === IdentityType.USER) {\n return identity.id;\n }\n\n // A non-user identity (client) has no authenticator\n // namespace — fail loud instead of letting the literal token\n // fall through and silently match zero rows.\n throw new BadRequestError('The @me/@self token can only be used by a user identity.');\n }\n\n return id;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<UserAuthenticator>> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n const { data, meta } = await this.service.getMany(useRequestQuery(event), actor, { userId });\n\n return {\n data,\n meta,\n };\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async enroll(\n @DPath('id') id: string,\n @DBody() data: UserAuthenticatorCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticatorEnrollResponse> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n // route wins silently over body\n const result = await this.service.enroll({ ...data, userId }, actor);\n\n event.response.status = 201;\n return result;\n }\n\n @DGet('/:deviceId', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DPath('deviceId') deviceId: string,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticator> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n return this.service.getOne(deviceId, actor, { userId });\n }\n\n @DPost('/:deviceId/confirm', [ForceLoggedInMiddleware])\n async confirm(\n @DPath('id') id: string,\n @DPath('deviceId') deviceId: string,\n @DBody() data: UserAuthenticatorConfirmPayload,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticator> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n if (!data \|\| typeof data.code !== 'string' \|\| !data.code) {\n throw new BadRequestError('A code must be provided.');\n }\n\n return this.service.confirm(deviceId, data.code, actor, { userId });\n }\n\n @DDelete('/:deviceId', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DPath('deviceId') deviceId: string,\n @DContext() event: IAppEvent,\n ): Promise<UserAuthenticator> {\n const actor = buildActorContext(event);\n const userId = this.resolveUserId(id, event);\n\n const entity = await this.service.delete(deviceId, actor, { userId });\n\n event.response.status = 202;\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAae,8BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAyC;EACjD,KAAKD,UAAUC,IAAID;CACvB;;;IAKA,cAAwBG,IAAYC,OAA0B;EAC1D,IAAIT,YAAYQ,EAAAA,GAAK;GACjB,MAAME,WAAWP,mBAAmBM,KAAAA;GACpC,IAAIC,YAAYA,SAASC,SAASd,aAAae,MAC3C,OAAOF,SAASF;GAMpB,MAAM,IAAIV,gBAAgB,0DAAA;EAC9B;EAEA,OAAOU;CACX;CAEA,MACMK,QACF,IACA,OACoD;EACpD,MAAMC,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,MAAM,EAAEO,MAAMC,SAAS,MAAM,KAAKZ,QAAQQ,QAAQd,gBAAgBU,KAAAA,GAAQK,OAAO,EAAEC,OAAO,CAAA;EAE1F,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,OACF,IACA,MACA,OACwC;EACxC,MAAMJ,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAGtC,MAAMU,SAAS,MAAM,KAAKd,QAAQa,OAAO;GAAE,GAAGF;GAAMD;EAAO,GAAGD,KAAAA;EAE9DL,MAAMW,SAASC,SAAS;EACxB,OAAOF;CACX;CAEA,MACMG,OACF,IACA,UACA,OAC0B;EAC1B,MAAMR,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,OAAO,KAAKJ,QAAQiB,OAAOC,UAAUT,OAAO,EAAEC,OAAO,CAAA;CACzD;CAEA,MACMS,QACF,IACA,UACA,MACA,OAC0B;EAC1B,MAAMV,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,IAAI,CAACO,QAAQ,OAAOA,KAAKS,SAAS,YAAY,CAACT,KAAKS,MAChD,MAAM,IAAI3B,gBAAgB,0BAAA;EAG9B,OAAO,KAAKO,QAAQmB,QAAQD,UAAUP,KAAKS,MAAMX,OAAO,EAAEC,OAAO,CAAA;CACrE;CAEA,MACMW,KACF,IACA,UACA,OAC0B;EAC1B,MAAMZ,QAAQZ,kBAAkBO,KAAAA;EAChC,MAAMM,SAAS,KAAKR,cAAcC,IAAIC,KAAAA;EAEtC,MAAMkB,SAAS,MAAM,KAAKtB,QAAQuB,OAAOL,UAAUT,OAAO,EAAEC,OAAO,CAAA;EAEnEN,MAAMW,SAASC,SAAS;EACxB,OAAOM;CACX;AACJ;;CA3Ee1B,KAAAA,IAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;CAgBCA,MAAAA,IAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;;;;;;CAgBSA,KAAAA,cAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;;;;;;CAYSA,MAAAA,sBAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;;;;;;;;CAiBNA,QAAAA,cAAAA,CAAAA,uBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/user-permission/module.mjs CHANGED Viewed

@@ -14,8 +14,8 @@ function _ts_decorate(decorators, target, key, desc) {
 	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
 	return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-function _ts_metadata(k, v) {
-	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+function _ts_metadata(metadataKey, metadataValue) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(metadataKey, metadataValue);
 }
 function _ts_param(paramIndex, decorator) {
 	return function(target, key) {

package/dist/adapters/http/controllers/entities/user-permission/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","UserPermissionController","service","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","edit","id","update","getOne","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/user-permission/module.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n UserPermissionCreatePayload,\n UserPermissionUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { UserPermission } from '@authup/core-kit';\nimport type { IUserPermissionService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext } from '../../../request/index.ts';\n\nexport type UserPermissionControllerContext = {\n service: IUserPermissionService,\n};\n\n@DTags('user')\n@DController('/user-permissions')\nexport class UserPermissionController {\n protected service: IUserPermissionService;\n\n constructor(ctx: UserPermissionControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<UserPermission>> {\n const actor = buildActorContext(event);\n const {\n data,\n meta,\n } = await this.service.getMany(useRequestQuery(event), actor);\n\n return {\n data,\n meta,\n };\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: UserPermissionCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserPermission> {\n const actor = buildActorContext(event);\n\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async edit(\n @DPath('id') id: string,\n @DBody() data: UserPermissionUpdatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserPermission> {\n const actor = buildActorContext(event);\n const entity = await this.service.update(id, data, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<UserPermission> {\n const actor = buildActorContext(event);\n const entity = await this.service.getOne(id, actor);\n\n return entity;\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<UserPermission> {\n const actor = buildActorContext(event);\n const entity = await this.service.delete(id, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAmCA,IAAaW,2BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAsC;EAC9C,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OACiD;EACjD,MAAME,QAAQN,kBAAkBK,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQN,gBAAgBO,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACuB;EACvB,MAAMH,QAAQN,kBAAkBK,KAAAA;EAEhC,MAAMK,SAAS,MAAM,KAAKR,QAAQS,OAAOJ,MAAMD,KAAAA;EAE/CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,KACF,IACA,MACA,OACuB;EACvB,MAAMR,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQc,OAAOD,IAAIR,MAAMD,KAAAA;EAEnDD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMO,OACF,IACA,OACuB;EACvB,MAAMX,QAAQN,kBAAkBK,KAAAA;EAGhC,OAAOK,MAFc,KAAKR,QAAQe,OAAOF,IAAIT,KAAAA;CAGjD;CAEA,MACMY,KACF,IACA,OACuB;EACvB,MAAMZ,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQiB,OAAOJ,IAAIT,KAAAA;EAE7CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;~~WAnEeX~~,uBAAAA,CAAAA;;;;;;;~~YAgBCA~~,uBAAAA,CAAAA;;;;;;;;~~gBAcIA~~,uBAAAA,CAAAA;;;;;;;;;;;;;~~eAcDA~~,uBAAAA,CAAAA;;;;;;;;~~kBAWGA~~,uBAAAA,CAAAA"}
1	+ {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","UserPermissionController","service","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","edit","id","update","getOne","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/user-permission/module.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n UserPermissionCreatePayload,\n UserPermissionUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { UserPermission } from '@authup/core-kit';\nimport type { IUserPermissionService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext } from '../../../request/index.ts';\n\nexport type UserPermissionControllerContext = {\n service: IUserPermissionService,\n};\n\n@DTags('user')\n@DController('/user-permissions')\nexport class UserPermissionController {\n protected service: IUserPermissionService;\n\n constructor(ctx: UserPermissionControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<UserPermission>> {\n const actor = buildActorContext(event);\n const {\n data,\n meta,\n } = await this.service.getMany(useRequestQuery(event), actor);\n\n return {\n data,\n meta,\n };\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: UserPermissionCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserPermission> {\n const actor = buildActorContext(event);\n\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DPost('/:id', [ForceLoggedInMiddleware])\n async edit(\n @DPath('id') id: string,\n @DBody() data: UserPermissionUpdatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserPermission> {\n const actor = buildActorContext(event);\n const entity = await this.service.update(id, data, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<UserPermission> {\n const actor = buildActorContext(event);\n const entity = await this.service.getOne(id, actor);\n\n return entity;\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<UserPermission> {\n const actor = buildActorContext(event);\n const entity = await this.service.delete(id, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAmCA,IAAaW,2BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAsC;EAC9C,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OACiD;EACjD,MAAME,QAAQN,kBAAkBK,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQN,gBAAgBO,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACuB;EACvB,MAAMH,QAAQN,kBAAkBK,KAAAA;EAEhC,MAAMK,SAAS,MAAM,KAAKR,QAAQS,OAAOJ,MAAMD,KAAAA;EAE/CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,KACF,IACA,MACA,OACuB;EACvB,MAAMR,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQc,OAAOD,IAAIR,MAAMD,KAAAA;EAEnDD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMO,OACF,IACA,OACuB;EACvB,MAAMX,QAAQN,kBAAkBK,KAAAA;EAGhC,OAAOK,MAFc,KAAKR,QAAQe,OAAOF,IAAIT,KAAAA;CAGjD;CAEA,MACMY,KACF,IACA,OACuB;EACvB,MAAMZ,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQiB,OAAOJ,IAAIT,KAAAA;EAE7CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;CAnEeX,KAAAA,IAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;CAgBCA,MAAAA,IAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;CAcIA,MAAAA,QAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;;;;;;CAcDA,KAAAA,QAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;CAWGA,QAAAA,QAAAA,CAAAA,uBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/user-permission/utils/validation.mjs CHANGED Viewed

@@ -10,9 +10,9 @@ import { z } from "zod";
 var UserPermissionRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
-		this.mount("user_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("permission_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("policy_id", { optional: true }, createValidator(z.uuid().nullable()));
+		this.mount("userId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("permissionId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("policyId", { optional: true }, createValidator(z.uuid().nullable()));
 	}
 };
 //#endregion

package/dist/adapters/http/controllers/entities/user-permission/utils/validation.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserPermissionRequestValidator","initialize","mount","group","CREATE","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-permission/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserPermissionEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserPermissionRequestValidator extends Container<\n UserPermissionEntity\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n '~~user_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n '~~permission_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n '~~policy_id~~',\n { optional: true },\n createValidator(z.uuid().nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,iCAAb,cAAoDH,UAAAA;CAGtCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,~~WACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,~~iBACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,~~aACA~~,EAAEI,UAAU,KAAK,GACjBV,gBAAgBE,EAAEO,KAAI,CAAA,CAAGE,SAAQ,CAAA,CAAA;CAEzC;AACJ"}
1	+ {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserPermissionRequestValidator","initialize","mount","group","CREATE","uuid","optional","nullable"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-permission/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserPermissionEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserPermissionRequestValidator extends Container<\n UserPermissionEntity\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'userId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'permissionId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'policyId',\n { optional: true },\n createValidator(z.uuid().nullable()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,iCAAb,cAAoDH,UAAAA;CAGtCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,UACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,gBACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,YACA,EAAEI,UAAU,KAAK,GACjBV,gBAAgBE,EAAEO,KAAI,CAAA,CAAGE,SAAQ,CAAA,CAAA;CAEzC;AACJ"}

package/dist/adapters/http/controllers/entities/user-role/module.mjs CHANGED Viewed

@@ -14,8 +14,8 @@ function _ts_decorate(decorators, target, key, desc) {
 	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
 	return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-function _ts_metadata(k, v) {
-	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+function _ts_metadata(metadataKey, metadataValue) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(metadataKey, metadataValue);
 }
 function _ts_param(paramIndex, decorator) {
 	return function(target, key) {

package/dist/adapters/http/controllers/entities/user-role/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","UserRoleController","service","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","getOne","id","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/user-role/module.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n UserRoleCreatePayload,\n} from '@authup/core-http-kit';\nimport type { UserRole } from '@authup/core-kit';\nimport type { IUserRoleService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n buildActorContext,\n} from '../../../request/index.ts';\n\nexport type UserRoleControllerContext = {\n service: IUserRoleService,\n};\n\n@DTags('user')\n@DController('/user-roles')\nexport class UserRoleController {\n protected service: IUserRoleService;\n\n constructor(ctx: UserRoleControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<UserRole>> {\n const actor = buildActorContext(event);\n const {\n data,\n meta,\n } = await this.service.getMany(useRequestQuery(event), actor);\n\n return {\n data,\n meta,\n };\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: UserRoleCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserRole> {\n const actor = buildActorContext(event);\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<UserRole> {\n const actor = buildActorContext(event);\n const entity = await this.service.getOne(id, actor);\n\n return entity;\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<UserRole> {\n const actor = buildActorContext(event);\n const entity = await this.service.delete(id, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAoCA,IAAaW,qBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAgC;EACxC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC2C;EAC3C,MAAME,QAAQN,kBAAkBK,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQN,gBAAgBO,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACiB;EACjB,MAAMH,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQS,OAAOJ,MAAMD,KAAAA;EAE/CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,OACF,IACA,OACiB;EACjB,MAAMR,QAAQN,kBAAkBK,KAAAA;EAGhC,OAAOK,MAFc,KAAKR,QAAQY,OAAOC,IAAIT,KAAAA;CAGjD;CAEA,MACMU,KACF,IACA,OACiB;EACjB,MAAMV,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQe,OAAOF,IAAIT,KAAAA;EAE7CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;~~WApDeX~~,uBAAAA,CAAAA;;;;;;;~~YAgBCA~~,uBAAAA,CAAAA;;;;;;;;~~eAaGA~~,uBAAAA,CAAAA;;;;;;;;~~kBAWGA~~,uBAAAA,CAAAA"}
1	+ {"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","UserRoleController","service","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","getOne","id","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/user-role/module.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DBody,\n DContext,\n DController,\n DDelete,\n DGet,\n DPath,\n DPost,\n DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n EntityCollectionResponse,\n UserRoleCreatePayload,\n} from '@authup/core-http-kit';\nimport type { UserRole } from '@authup/core-kit';\nimport type { IUserRoleService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n buildActorContext,\n} from '../../../request/index.ts';\n\nexport type UserRoleControllerContext = {\n service: IUserRoleService,\n};\n\n@DTags('user')\n@DController('/user-roles')\nexport class UserRoleController {\n protected service: IUserRoleService;\n\n constructor(ctx: UserRoleControllerContext) {\n this.service = ctx.service;\n }\n\n @DGet('', [ForceLoggedInMiddleware])\n async getMany(\n @DContext() event: IAppEvent,\n ): Promise<EntityCollectionResponse<UserRole>> {\n const actor = buildActorContext(event);\n const {\n data,\n meta,\n } = await this.service.getMany(useRequestQuery(event), actor);\n\n return {\n data,\n meta,\n };\n }\n\n @DPost('', [ForceLoggedInMiddleware])\n async add(\n @DBody() data: UserRoleCreatePayload,\n @DContext() event: IAppEvent,\n ): Promise<UserRole> {\n const actor = buildActorContext(event);\n const entity = await this.service.create(data, actor);\n\n event.response.status = 201;\n\n return entity;\n }\n\n @DGet('/:id', [ForceLoggedInMiddleware])\n async getOne(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<UserRole> {\n const actor = buildActorContext(event);\n const entity = await this.service.getOne(id, actor);\n\n return entity;\n }\n\n @DDelete('/:id', [ForceLoggedInMiddleware])\n async drop(\n @DPath('id') id: string,\n @DContext() event: IAppEvent,\n ): Promise<UserRole> {\n const actor = buildActorContext(event);\n const entity = await this.service.delete(id, actor);\n\n event.response.status = 202;\n\n return entity;\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAoCA,IAAaW,qBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAgC;EACxC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC2C;EAC3C,MAAME,QAAQN,kBAAkBK,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQN,gBAAgBO,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACiB;EACjB,MAAMH,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQS,OAAOJ,MAAMD,KAAAA;EAE/CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,OACF,IACA,OACiB;EACjB,MAAMR,QAAQN,kBAAkBK,KAAAA;EAGhC,OAAOK,MAFc,KAAKR,QAAQY,OAAOC,IAAIT,KAAAA;CAGjD;CAEA,MACMU,KACF,IACA,OACiB;EACjB,MAAMV,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQe,OAAOF,IAAIT,KAAAA;EAE7CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;CApDeX,KAAAA,IAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;CAgBCA,MAAAA,IAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;CAaGA,KAAAA,QAAAA,CAAAA,uBAAAA,CAAAA;;;;;;;;CAWGA,QAAAA,QAAAA,CAAAA,uBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/user-role/utils/validation.mjs CHANGED Viewed

@@ -10,8 +10,8 @@ import { z } from "zod";
 var UserRoleRequestValidator = class extends Container {
 	initialize() {
 		super.initialize();
-		this.mount("user_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
-		this.mount("role_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("userId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
+		this.mount("roleId", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid()));
 	}
 };
 //#endregion

package/dist/adapters/http/controllers/entities/user-role/utils/validation.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserRoleRequestValidator","initialize","mount","group","CREATE","uuid"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-role/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserRoleEntity } from '../../../../../database/domains/index.ts';\n\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserRoleRequestValidator extends Container<\n UserRoleEntity\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n '~~user_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n '~~role_id~~',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAcA,IAAaI,2BAAb,cAA8CH,UAAAA;CAGhCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,~~WACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,~~WACA~~,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;CAE9B;AACJ"}
1	+ {"version":3,"file":"validation.mjs","names":["createValidator","Container","z","RequestHandlerOperation","UserRoleRequestValidator","initialize","mount","group","CREATE","uuid"],"sources":["../../../../../../../src/adapters/http/controllers/entities/user-role/utils/validation.ts"],"sourcesContent":["/\n Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserRoleEntity } from '../../../../../database/domains/index.ts';\n\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class UserRoleRequestValidator extends Container<\n UserRoleEntity\n> {\n protected initialize() {\n super.initialize();\n\n this.mount(\n 'userId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n\n this.mount(\n 'roleId',\n { group: RequestHandlerOperation.CREATE },\n createValidator(z.uuid()),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAcA,IAAaI,2BAAb,cAA8CH,UAAAA;CAGhCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,UACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;EAG1B,KAAKH,MACD,UACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCR,gBAAgBE,EAAEO,KAAI,CAAA,CAAA;CAE9B;AACJ"}

package/dist/adapters/http/controllers/index.mjs CHANGED Viewed

@@ -29,11 +29,6 @@ import { StatusController } from "./workflows/status/module.mjs";
 import { TokenController } from "./workflows/token/module.mjs";
 import "./workflows/index.mjs";
 import { RealmController } from "./entities/realm/module.mjs";
-import { RobotController } from "./entities/robot/module.mjs";
-import { RobotPermissionController } from "./entities/robot-permission/module.mjs";
-import { RobotPermissionRequestValidator } from "./entities/robot-permission/utils/validation.mjs";
-import { RobotRoleController } from "./entities/robot-role/module.mjs";
-import { RobotRoleRequestValidator } from "./entities/robot-role/utils/validation.mjs";
 import { RoleController } from "./entities/role/module.mjs";
 import { RoleAttributeController } from "./entities/role-attribute/module.mjs";
 import { RoleAttributeRequestValidator } from "./entities/role-attribute/utils/validation.mjs";
@@ -54,4 +49,4 @@ import { UserPermissionRequestValidator } from "./entities/user-permission/utils
 import { UserRoleController } from "./entities/user-role/module.mjs";
 import { UserRoleRequestValidator } from "./entities/user-role/utils/validation.mjs";
 import "./entities/index.mjs";
-export { ActivateController, AuthenticatorChallengeController, AuthorizeController, ClientController, ClientPermissionController, ClientPermissionRequestValidator, ClientRoleController, ClientRoleRequestValidator, ClientScopeController, ClientScopeRequestValidator, ConsentController, EventController, IdentityProviderController, IdentityProviderRoleMappingController, JwkController, KeyController, LogoutController, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionPolicyController, PolicyAttributesValidator, PolicyController, PolicyValidator, RealmController, RegisterController, RobotController, RobotPermissionController, RobotPermissionRequestValidator, RobotRoleController, RobotRoleRequestValidator, RoleAttributeController, RoleAttributeRequestValidator, RoleController, RolePermissionController, RolePermissionRequestValidator, ScopeController, SessionController, StatusController, TokenController, TrustAnchorController, UserAttributeController, UserAttributeRequestValidator, UserAuthenticatorController, UserController, UserPermissionController, UserPermissionRequestValidator, UserRoleController, UserRoleRequestValidator, getJwkRouteHandler, getJwksRouteHandler };
+export { ActivateController, AuthenticatorChallengeController, AuthorizeController, ClientController, ClientPermissionController, ClientPermissionRequestValidator, ClientRoleController, ClientRoleRequestValidator, ClientScopeController, ClientScopeRequestValidator, ConsentController, EventController, IdentityProviderController, IdentityProviderRoleMappingController, JwkController, KeyController, LogoutController, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionPolicyController, PolicyAttributesValidator, PolicyController, PolicyValidator, RealmController, RegisterController, RoleAttributeController, RoleAttributeRequestValidator, RoleController, RolePermissionController, RolePermissionRequestValidator, ScopeController, SessionController, StatusController, TokenController, TrustAnchorController, UserAttributeController, UserAttributeRequestValidator, UserAuthenticatorController, UserController, UserPermissionController, UserPermissionRequestValidator, UserRoleController, UserRoleRequestValidator, getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/activate/module.mjs CHANGED Viewed

@@ -12,8 +12,8 @@ function _ts_decorate(decorators, target, key, desc) {
 	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
 	return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-function _ts_metadata(k, v) {
-	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+function _ts_metadata(metadataKey, metadataValue) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(metadataKey, metadataValue);
 }
 function _ts_param(paramIndex, decorator) {
 	return function(target, key) {

package/dist/adapters/http/controllers/workflows/authenticator-challenge/module.mjs CHANGED Viewed

@@ -17,8 +17,8 @@ function _ts_decorate(decorators, target, key, desc) {
 	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
 	return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-function _ts_metadata(k, v) {
-	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+function _ts_metadata(metadataKey, metadataValue) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(metadataKey, metadataValue);
 }
 function _ts_param(paramIndex, decorator) {
 	return function(target, key) {

package/dist/adapters/http/controllers/workflows/authorize/module.mjs CHANGED Viewed

@@ -24,8 +24,8 @@ function _ts_decorate(decorators, target, key, desc) {
 	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
 	return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-function _ts_metadata(k, v) {
-	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+function _ts_metadata(metadataKey, metadataValue) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(metadataKey, metadataValue);
 }
 function _ts_param(paramIndex, decorator) {
 	return function(target, key) {
@@ -86,16 +86,16 @@ var AuthorizeController = class {
 			client = {
 				id: result.client.id,
 				name: result.client.name,
-				display_name: result.client.display_name,
-				built_in: result.client.built_in,
-				created_at: result.client.created_at
+				displayName: result.client.displayName,
+				builtIn: result.client.builtIn,
+				createdAt: result.client.createdAt
 			};
 			scopes = result.scopes;
 			redirectUriVerified = result.redirectUriVerified;
 			if (result.client.realm) realm = {
 				id: result.client.realm.id,
 				name: result.client.realm.name,
-				display_name: result.client.realm.display_name
+				displayName: result.client.realm.displayName
 			};
 			codeRequest = result.data;
 		} catch (e) {

package/dist/adapters/http/controllers/workflows/authorize/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["DContext","DController","DGet","DPost","URL","useRequestQuery","OAuth2AccessDeniedError","OAuth2ErrorCode","isOAuth2AccessDeniedError","ForceUserLoggedInMiddleware","HTTPOAuth2Authorizer","renderUIPage","readFromLocations","OAuth2AuthorizationCodeRequestValidator","sanitizeError","AuthorizeController","options","codeRequestVerifier","codeRequestValidator","authorizer","ctx","codeIssuer","sessionManager","eventService","metrics","promptLoginMaxAge","mfaFreshnessMaxAge","mfaChallengeProvider","accessPolicyEvaluator","consentService","logger","confirm","event","result","authorizeWithRequest","url","redirectUri","state","searchParams","set","authorizationCode","href","e","ACCESS_DENIED","serve","codeRequest","client","scopes","realm","redirectUriVerified","error","merged","data","run","verify","id","name","display_name","built_in","created_at","normalized","message","query","forClient","requestURL","request","payload","config","baseURL","features","requestPath","pathname","search"],"sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"sourcesContent":["/\n Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DContext,\n DController,\n DGet,\n DPost,\n} from '@routup/decorators';\nimport { URL } from 'node:url';\n\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n Client,\n OAuth2AuthorizationCodeRequest,\n Realm,\n Scope,\n} from '@authup/core-kit';\nimport { OAuth2AccessDeniedError, OAuth2ErrorCode, isOAuth2AccessDeniedError } from '@authup/specs';\nimport { ForceUserLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';\nimport { renderUIPage } from '../../../ui/index.ts';\nimport { readFromLocations } from '../../../request/index.ts';\nimport type { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';\nimport { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';\nimport { sanitizeError } from '../../../../../utils/index.ts';\n\ntype RealmSummary = Pick<Realm, 'id' \| 'name' \| 'display_name'>;\ntype ClientSummary = Pick<Client, 'id' \| 'name' \| 'display_name' \| 'built_in' \| 'created_at'>;\n\n@DController('/authorize')\nexport class AuthorizeController {\n // todo: maybe /realms/<realm>/protocol/openid-connect/authorize\n // todo: maybe /realms/<realm>/[...]/authorize\n\n protected options: AuthorizeControllerOptions;\n\n protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n protected codeRequestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n protected authorizer: HTTPOAuth2Authorizer;\n\n // ---------------------------------------------------------\n\n constructor(ctx: AuthorizeControllerContext) {\n this.options = ctx.options;\n\n this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();\n\n this.authorizer = new HTTPOAuth2Authorizer({\n codeRequestVerifier: this.codeRequestVerifier,\n codeIssuer: ctx.codeIssuer,\n sessionManager: ctx.sessionManager,\n eventService: ctx.eventService,\n metrics: ctx.metrics,\n promptLoginMaxAge: ctx.options.promptLoginMaxAge,\n mfaFreshnessMaxAge: ctx.options.mfaFreshnessMaxAge,\n mfaChallengeProvider: ctx.mfaChallengeProvider,\n accessPolicyEvaluator: ctx.accessPolicyEvaluator,\n consentService: ctx.consentService,\n logger: ctx.logger,\n });\n }\n\n // ---------------------------------------------------------\n\n @DPost('', [ForceUserLoggedInMiddleware])\n async confirm(@DContext() event: IAppEvent): Promise<{ url: string }> {\n try {\n const result = await this.authorizer.authorizeWithRequest(event);\n\n const url = new URL(result.redirectUri);\n if (result.state) {\n url.searchParams.set('state', result.state);\n }\n\n if (result.authorizationCode) {\n url.searchParams.set('code', result.authorizationCode);\n }\n\n return { url: url.href };\n } catch (e) {\n // Access-policy denial (plan 052): with a pattern-verified\n // redirect_uri the denial is answered as an error redirect\n // (RFC 6749 §4.1.2.1) — the kit navigates the returned url like\n // any success. Unverified → rethrow → 400 body → interactive\n // denial card.\n if (isOAuth2AccessDeniedError(e) && e.redirectUri) {\n const url = new URL(e.redirectUri);\n url.searchParams.set('error', OAuth2ErrorCode.ACCESS_DENIED);\n if (e.state) {\n url.searchParams.set('state', e.state);\n }\n\n return { url: url.href };\n }\n\n throw e;\n }\n }\n\n @DGet('', [])\n async serve(@DContext() event: IAppEvent): Promise<string> {\n let codeRequest : OAuth2AuthorizationCodeRequest \| undefined;\n\n let client : ClientSummary \| undefined;\n let scopes : Scope[] \| undefined;\n\n // Target realm summary (the client's realm) — the UI names it in the\n // realm-mismatch notice. codeRequest.realm_id is only the id.\n let realm : RealmSummary \| undefined;\n\n // Whether the request redirect_uri matched a registered client pattern —\n // the UI must not offer an automatic \"return to application\" redirect to\n // an unverified (pattern-less-client) redirect_uri.\n let redirectUriVerified = false;\n\n let error : Error \| undefined;\n\n try {\n const merged = await readFromLocations(event, ['body', 'query']);\n const data = await this.codeRequestValidator.run(merged);\n\n const result = await this.codeRequestVerifier.verify(data);\n\n // Trim the client to a deliberate DTO before it reaches the\n // anonymous SSR hydration payload — never disclose redirect_uri\n // patterns (the trusted-origin set), grant_types, internal\n // base/root URLs, auth methods, or the secret storage flags to an\n // unauthenticated visitor. (ClientEntity.secret is additionally\n // select:false, so the secret is never loaded — but the DTO must not\n // rely on that alone: a future entity/query change could unset it.)\n client = {\n id: result.client.id,\n name: result.client.name,\n display_name: result.client.display_name,\n built_in: result.client.built_in,\n created_at: result.client.created_at,\n };\n scopes = result.scopes;\n redirectUriVerified = result.redirectUriVerified;\n\n if (result.client.realm) {\n realm = {\n id: result.client.realm.id,\n name: result.client.realm.name,\n display_name: result.client.realm.display_name,\n };\n }\n\n codeRequest = result.data;\n } catch (e) {\n const normalized = sanitizeError(e);\n error = {\n ...normalized,\n message: normalized.message,\n };\n }\n\n // A recognized `error` query param (the federated-IdP callback\n // redirects back here with error=access_denied on a policy denial)\n // is mapped onto the hydration payload's error — neutral message,\n // never attacker-controlled text.\n if (!error) {\n const query = useRequestQuery(event);\n if (query.error === OAuth2ErrorCode.ACCESS_DENIED) {\n const normalized = sanitizeError(OAuth2AccessDeniedError.forClient());\n error = {\n ...normalized,\n message: normalized.message,\n };\n }\n }\n\n // Path + query of the original request — the SSR page uses it as\n // the same-origin `redirect` parameter on register / password links\n // so those pages can lead back into this authorize request.\n const requestURL = new URL(event.request.url);\n\n return renderUIPage(event, {\n url: '/authorize',\n payload: {\n config: { baseURL: this.options.baseURL },\n data: {\n codeRequest,\n error,\n client,\n scopes,\n realm,\n redirectUriVerified,\n features: this.options.features,\n requestPath: `${requestURL.pathname}${requestURL.search}`,\n },\n },\n });\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,IAAae,sBAAb,MAAaA;CAICC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAiC;EACzC,KAAKJ,UAAUI,IAAIJ;EAEnB,KAAKC,sBAAsBG,IAAIH;EAE/B,KAAKC,uBAAuB,IAAIL,wCAAAA;EAEhC,KAAKM,aAAa,IAAIT,qBAAqB;GACvCO,qBAAqB,KAAKA;GAC1BI,YAAYD,IAAIC;GAChBC,gBAAgBF,IAAIE;GACpBC,cAAcH,IAAIG;GAClBC,SAASJ,IAAII;GACbC,mBAAmBL,IAAIJ,QAAQS;GAC/BC,oBAAoBN,IAAIJ,QAAQU;GAChCC,sBAAsBP,IAAIO;GAC1BC,uBAAuBR,IAAIQ;GAC3BC,gBAAgBT,IAAIS;GACpBC,QAAQV,IAAIU;EAChB,CAAA;CACJ;CAIA,MACMC,QAAQ,OAAwD;EAClE,IAAI;GACA,MAAME,SAAS,MAAM,KAAKd,WAAWe,qBAAqBF,KAAAA;GAE1D,MAAMG,MAAM,IAAI/B,IAAI6B,OAAOG,WAAW;GACtC,IAAIH,OAAOI,OACPF,IAAIG,aAAaC,IAAI,SAASN,OAAOI,KAAK;GAG9C,IAAIJ,OAAOO,mBACPL,IAAIG,aAAaC,IAAI,QAAQN,OAAOO,iBAAiB;GAGzD,OAAO,EAAEL,KAAKA,IAAIM,KAAK;EAC3B,SAASC,GAAG;GAMR,IAAIlC,0BAA0BkC,CAAAA,KAAMA,EAAEN,aAAa;IAC/C,MAAMD,MAAM,IAAI/B,IAAIsC,EAAEN,WAAW;IACjCD,IAAIG,aAAaC,IAAI,SAAShC,gBAAgBoC,aAAa;IAC3D,IAAID,EAAEL,OACFF,IAAIG,aAAaC,IAAI,SAASG,EAAEL,KAAK;IAGzC,OAAO,EAAEF,KAAKA,IAAIM,KAAK;GAC3B;GAEA,MAAMC;EACV;CACJ;CAEA,MACME,MAAM,OAA+C;EACvD,IAAIC;EAEJ,IAAIC;EACJ,IAAIC;EAIJ,IAAIC;EAKJ,IAAIC,sBAAsB;EAE1B,IAAIC;EAEJ,IAAI;GACA,MAAMC,SAAS,MAAMvC,kBAAkBoB,OAAO,CAAC,QAAQ,OAAA,CAAQ;GAC/D,MAAMoB,OAAO,MAAM,KAAKlC,qBAAqBmC,IAAIF,MAAAA;GAEjD,MAAMlB,SAAS,MAAM,KAAKhB,oBAAoBqC,OAAOF,IAAAA;GASrDN,SAAS;IACLS,IAAItB,OAAOa,OAAOS;IAClBC,MAAMvB,OAAOa,OAAOU;IACpBC,cAAcxB,OAAOa,OAAOW;IAC5BC,UAAUzB,OAAOa,OAAOY;IACxBC,YAAY1B,OAAOa,OAAOa;GAC9B;GACAZ,SAASd,OAAOc;GAChBE,sBAAsBhB,OAAOgB;GAE7B,IAAIhB,OAAOa,OAAOE,OACdA,QAAQ;IACJO,IAAItB,OAAOa,OAAOE,MAAMO;IACxBC,MAAMvB,OAAOa,OAAOE,MAAMQ;IAC1BC,cAAcxB,OAAOa,OAAOE,MAAMS;GACtC;GAGJZ,cAAcZ,OAAOmB;EACzB,SAASV,GAAG;GACR,MAAMkB,aAAa9C,cAAc4B,CAAAA;GACjCQ,QAAQ;IACJ,GAAGU;IACHC,SAASD,WAAWC;GACxB;EACJ;EAMA,IAAI,CAACX;OACa7C,gBAAgB2B,KAC1B8B,CAAAA,CAAMZ,UAAU3C,gBAAgBoC,eAAe;IAC/C,MAAMiB,aAAa9C,cAAcR,wBAAwByD,UAAS,CAAA;IAClEb,QAAQ;KACJ,GAAGU;KACHC,SAASD,WAAWC;IACxB;GACJ;;EAMJ,MAAMG,aAAa,IAAI5D,IAAI4B,MAAMiC,QAAQ9B,GAAG;EAE5C,OAAOxB,aAAaqB,OAAO;GACvBG,KAAK;GACL+B,SAAS;IACLC,QAAQ,EAAEC,SAAS,KAAKpD,QAAQoD,QAAQ;IACxChB,MAAM;KACFP;KACAK;KACAJ;KACAC;KACAC;KACAC;KACAoB,UAAU,KAAKrD,QAAQqD;KACvBC,aAAa,GAAGN,WAAWO,WAAWP,WAAWQ;IACrD;GACJ;EACJ,CAAA;CACJ;AACJ;;YAlIgB/D,2BAAAA,CAAAA"}
1	+ {"version":3,"file":"module.mjs","names":["DContext","DController","DGet","DPost","URL","useRequestQuery","OAuth2AccessDeniedError","OAuth2ErrorCode","isOAuth2AccessDeniedError","ForceUserLoggedInMiddleware","HTTPOAuth2Authorizer","renderUIPage","readFromLocations","OAuth2AuthorizationCodeRequestValidator","sanitizeError","AuthorizeController","options","codeRequestVerifier","codeRequestValidator","authorizer","ctx","codeIssuer","sessionManager","eventService","metrics","promptLoginMaxAge","mfaFreshnessMaxAge","mfaChallengeProvider","accessPolicyEvaluator","consentService","logger","confirm","event","result","authorizeWithRequest","url","redirectUri","state","searchParams","set","authorizationCode","href","e","ACCESS_DENIED","serve","codeRequest","client","scopes","realm","redirectUriVerified","error","merged","data","run","verify","id","name","displayName","builtIn","createdAt","normalized","message","query","forClient","requestURL","request","payload","config","baseURL","features","requestPath","pathname","search"],"sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"sourcesContent":["/\n Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n DContext,\n DController,\n DGet,\n DPost,\n} from '@routup/decorators';\nimport { URL } from 'node:url';\n\nimport type { IAppEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n Client,\n OAuth2AuthorizationCodeRequest,\n Realm,\n Scope,\n} from '@authup/core-kit';\nimport { OAuth2AccessDeniedError, OAuth2ErrorCode, isOAuth2AccessDeniedError } from '@authup/specs';\nimport { ForceUserLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';\nimport { renderUIPage } from '../../../ui/index.ts';\nimport { readFromLocations } from '../../../request/index.ts';\nimport type { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';\nimport { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';\nimport { sanitizeError } from '../../../../../utils/index.ts';\n\ntype RealmSummary = Pick<Realm, 'id' \| 'name' \| 'displayName'>;\ntype ClientSummary = Pick<Client, 'id' \| 'name' \| 'displayName' \| 'builtIn' \| 'createdAt'>;\n\n@DController('/authorize')\nexport class AuthorizeController {\n // todo: maybe /realms/<realm>/protocol/openid-connect/authorize\n // todo: maybe /realms/<realm>/[...]/authorize\n\n protected options: AuthorizeControllerOptions;\n\n protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n protected codeRequestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n protected authorizer: HTTPOAuth2Authorizer;\n\n // ---------------------------------------------------------\n\n constructor(ctx: AuthorizeControllerContext) {\n this.options = ctx.options;\n\n this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();\n\n this.authorizer = new HTTPOAuth2Authorizer({\n codeRequestVerifier: this.codeRequestVerifier,\n codeIssuer: ctx.codeIssuer,\n sessionManager: ctx.sessionManager,\n eventService: ctx.eventService,\n metrics: ctx.metrics,\n promptLoginMaxAge: ctx.options.promptLoginMaxAge,\n mfaFreshnessMaxAge: ctx.options.mfaFreshnessMaxAge,\n mfaChallengeProvider: ctx.mfaChallengeProvider,\n accessPolicyEvaluator: ctx.accessPolicyEvaluator,\n consentService: ctx.consentService,\n logger: ctx.logger,\n });\n }\n\n // ---------------------------------------------------------\n\n @DPost('', [ForceUserLoggedInMiddleware])\n async confirm(@DContext() event: IAppEvent): Promise<{ url: string }> {\n try {\n const result = await this.authorizer.authorizeWithRequest(event);\n\n const url = new URL(result.redirectUri);\n if (result.state) {\n url.searchParams.set('state', result.state);\n }\n\n if (result.authorizationCode) {\n url.searchParams.set('code', result.authorizationCode);\n }\n\n return { url: url.href };\n } catch (e) {\n // Access-policy denial (plan 052): with a pattern-verified\n // redirect_uri the denial is answered as an error redirect\n // (RFC 6749 §4.1.2.1) — the kit navigates the returned url like\n // any success. Unverified → rethrow → 400 body → interactive\n // denial card.\n if (isOAuth2AccessDeniedError(e) && e.redirectUri) {\n const url = new URL(e.redirectUri);\n url.searchParams.set('error', OAuth2ErrorCode.ACCESS_DENIED);\n if (e.state) {\n url.searchParams.set('state', e.state);\n }\n\n return { url: url.href };\n }\n\n throw e;\n }\n }\n\n @DGet('', [])\n async serve(@DContext() event: IAppEvent): Promise<string> {\n let codeRequest : OAuth2AuthorizationCodeRequest \| undefined;\n\n let client : ClientSummary \| undefined;\n let scopes : Scope[] \| undefined;\n\n // Target realm summary (the client's realm) — the UI names it in the\n // realm-mismatch notice. codeRequest.realm_id is only the id.\n let realm : RealmSummary \| undefined;\n\n // Whether the request redirect_uri matched a registered client pattern —\n // the UI must not offer an automatic \"return to application\" redirect to\n // an unverified (pattern-less-client) redirect_uri.\n let redirectUriVerified = false;\n\n let error : Error \| undefined;\n\n try {\n const merged = await readFromLocations(event, ['body', 'query']);\n const data = await this.codeRequestValidator.run(merged);\n\n const result = await this.codeRequestVerifier.verify(data);\n\n // Trim the client to a deliberate DTO before it reaches the\n // anonymous SSR hydration payload — never disclose redirect_uri\n // patterns (the trusted-origin set), grant_types, internal\n // base/root URLs, auth methods, or the secret storage flags to an\n // unauthenticated visitor. (ClientEntity.secret is additionally\n // select:false, so the secret is never loaded — but the DTO must not\n // rely on that alone: a future entity/query change could unset it.)\n client = {\n id: result.client.id,\n name: result.client.name,\n displayName: result.client.displayName,\n builtIn: result.client.builtIn,\n createdAt: result.client.createdAt,\n };\n scopes = result.scopes;\n redirectUriVerified = result.redirectUriVerified;\n\n if (result.client.realm) {\n realm = {\n id: result.client.realm.id,\n name: result.client.realm.name,\n displayName: result.client.realm.displayName,\n };\n }\n\n codeRequest = result.data;\n } catch (e) {\n const normalized = sanitizeError(e);\n error = {\n ...normalized,\n message: normalized.message,\n };\n }\n\n // A recognized `error` query param (the federated-IdP callback\n // redirects back here with error=access_denied on a policy denial)\n // is mapped onto the hydration payload's error — neutral message,\n // never attacker-controlled text.\n if (!error) {\n const query = useRequestQuery(event);\n if (query.error === OAuth2ErrorCode.ACCESS_DENIED) {\n const normalized = sanitizeError(OAuth2AccessDeniedError.forClient());\n error = {\n ...normalized,\n message: normalized.message,\n };\n }\n }\n\n // Path + query of the original request — the SSR page uses it as\n // the same-origin `redirect` parameter on register / password links\n // so those pages can lead back into this authorize request.\n const requestURL = new URL(event.request.url);\n\n return renderUIPage(event, {\n url: '/authorize',\n payload: {\n config: { baseURL: this.options.baseURL },\n data: {\n codeRequest,\n error,\n client,\n scopes,\n realm,\n redirectUriVerified,\n features: this.options.features,\n requestPath: `${requestURL.pathname}${requestURL.search}`,\n },\n },\n });\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,IAAae,sBAAb,MAAaA;CAICC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAiC;EACzC,KAAKJ,UAAUI,IAAIJ;EAEnB,KAAKC,sBAAsBG,IAAIH;EAE/B,KAAKC,uBAAuB,IAAIL,wCAAAA;EAEhC,KAAKM,aAAa,IAAIT,qBAAqB;GACvCO,qBAAqB,KAAKA;GAC1BI,YAAYD,IAAIC;GAChBC,gBAAgBF,IAAIE;GACpBC,cAAcH,IAAIG;GAClBC,SAASJ,IAAII;GACbC,mBAAmBL,IAAIJ,QAAQS;GAC/BC,oBAAoBN,IAAIJ,QAAQU;GAChCC,sBAAsBP,IAAIO;GAC1BC,uBAAuBR,IAAIQ;GAC3BC,gBAAgBT,IAAIS;GACpBC,QAAQV,IAAIU;EAChB,CAAA;CACJ;CAIA,MACMC,QAAQ,OAAwD;EAClE,IAAI;GACA,MAAME,SAAS,MAAM,KAAKd,WAAWe,qBAAqBF,KAAAA;GAE1D,MAAMG,MAAM,IAAI/B,IAAI6B,OAAOG,WAAW;GACtC,IAAIH,OAAOI,OACPF,IAAIG,aAAaC,IAAI,SAASN,OAAOI,KAAK;GAG9C,IAAIJ,OAAOO,mBACPL,IAAIG,aAAaC,IAAI,QAAQN,OAAOO,iBAAiB;GAGzD,OAAO,EAAEL,KAAKA,IAAIM,KAAK;EAC3B,SAASC,GAAG;GAMR,IAAIlC,0BAA0BkC,CAAAA,KAAMA,EAAEN,aAAa;IAC/C,MAAMD,MAAM,IAAI/B,IAAIsC,EAAEN,WAAW;IACjCD,IAAIG,aAAaC,IAAI,SAAShC,gBAAgBoC,aAAa;IAC3D,IAAID,EAAEL,OACFF,IAAIG,aAAaC,IAAI,SAASG,EAAEL,KAAK;IAGzC,OAAO,EAAEF,KAAKA,IAAIM,KAAK;GAC3B;GAEA,MAAMC;EACV;CACJ;CAEA,MACME,MAAM,OAA+C;EACvD,IAAIC;EAEJ,IAAIC;EACJ,IAAIC;EAIJ,IAAIC;EAKJ,IAAIC,sBAAsB;EAE1B,IAAIC;EAEJ,IAAI;GACA,MAAMC,SAAS,MAAMvC,kBAAkBoB,OAAO,CAAC,QAAQ,OAAQ,CAAA;GAC/D,MAAMoB,OAAO,MAAM,KAAKlC,qBAAqBmC,IAAIF,MAAAA;GAEjD,MAAMlB,SAAS,MAAM,KAAKhB,oBAAoBqC,OAAOF,IAAAA;GASrDN,SAAS;IACLS,IAAItB,OAAOa,OAAOS;IAClBC,MAAMvB,OAAOa,OAAOU;IACpBC,aAAaxB,OAAOa,OAAOW;IAC3BC,SAASzB,OAAOa,OAAOY;IACvBC,WAAW1B,OAAOa,OAAOa;GAC7B;GACAZ,SAASd,OAAOc;GAChBE,sBAAsBhB,OAAOgB;GAE7B,IAAIhB,OAAOa,OAAOE,OACdA,QAAQ;IACJO,IAAItB,OAAOa,OAAOE,MAAMO;IACxBC,MAAMvB,OAAOa,OAAOE,MAAMQ;IAC1BC,aAAaxB,OAAOa,OAAOE,MAAMS;GACrC;GAGJZ,cAAcZ,OAAOmB;EACzB,SAASV,GAAG;GACR,MAAMkB,aAAa9C,cAAc4B,CAAAA;GACjCQ,QAAQ;IACJ,GAAGU;IACHC,SAASD,WAAWC;GACxB;EACJ;EAMA,IAAI,CAACX,OACa7C;OAAAA,gBAAgB2B,KAC1B8B,CAAAA,CAAMZ,UAAU3C,gBAAgBoC,eAAe;IAC/C,MAAMiB,aAAa9C,cAAcR,wBAAwByD,UAAS,CAAA;IAClEb,QAAQ;KACJ,GAAGU;KACHC,SAASD,WAAWC;IACxB;GACJ;;EAMJ,MAAMG,aAAa,IAAI5D,IAAI4B,MAAMiC,QAAQ9B,GAAG;EAE5C,OAAOxB,aAAaqB,OAAO;GACvBG,KAAK;GACL+B,SAAS;IACLC,QAAQ,EAAEC,SAAS,KAAKpD,QAAQoD,QAAQ;IACxChB,MAAM;KACFP;KACAK;KACAJ;KACAC;KACAC;KACAC;KACAoB,UAAU,KAAKrD,QAAQqD;KACvBC,aAAa,GAAGN,WAAWO,WAAWP,WAAWQ;IACrD;GACJ;EACJ,CAAA;CACJ;AACJ;;CAlIgB/D,MAAAA,IAAAA,CAAAA,2BAAAA,CAAAA"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.mjs CHANGED Viewed

@@ -14,19 +14,19 @@ async function getJwksRouteHandler(repository, realmId) {
 			type: In([JWKType.RSA, JWKType.EC]),
 			use: JWKUse.SIGNATURE,
 			status: In([KeyStatus.ACTIVE, KeyStatus.PASSIVE]),
-			...realmId ? { realm_id: realmId } : {}
+			...realmId ? { realmId } : {}
 		},
 		order: { priority: "DESC" }
-	})).filter((entity) => !!entity.encryption_key && !!entity.signature_algorithm).map((entity) => AsymmetricKey.fromBase64({
+	})).filter((entity) => !!entity.encryptionKey && !!entity.signatureAlgorithm).map((entity) => AsymmetricKey.fromBase64({
 		format: "spki",
-		key: entity.encryption_key,
-		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+		key: entity.encryptionKey,
+		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signatureAlgorithm)
 	}).then((container) => container.toJWK()).then(async (key) => {
 		const certificateFields = await buildCertificateJwkFields(entity.certificate);
 		return {
 			...key,
 			kid: entity.id,
-			alg: entity.signature_algorithm,
+			alg: entity.signatureAlgorithm,
 			...certificateFields
 		};
 	}));
@@ -38,20 +38,20 @@ async function getJwkRouteHandler(repository, keyId, realmId) {
 		use: JWKUse.SIGNATURE,
 		status: In([KeyStatus.ACTIVE, KeyStatus.PASSIVE]),
 		id: keyId,
-		...realmId ? { realm_id: realmId } : {}
+		...realmId ? { realmId } : {}
 	} });
 	if (!entity) throw JWKError.notFound(keyId);
-	if (!entity.encryption_key || !entity.signature_algorithm) throw JWKError.encryptionKeyMissing();
+	if (!entity.encryptionKey || !entity.signatureAlgorithm) throw JWKError.encryptionKeyMissing();
 	const jsonWebKey = await (await AsymmetricKey.fromBase64({
 		format: "spki",
-		key: entity.encryption_key,
-		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+		key: entity.encryptionKey,
+		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signatureAlgorithm)
 	})).toJWK();
 	const certificateFields = await buildCertificateJwkFields(entity.certificate);
 	return {
 		...jsonWebKey,
 		kid: entity.id,
-		alg: entity.signature_algorithm,
+		alg: entity.signatureAlgorithm,
 		...certificateFields
 	};
 }