@authup/server-core 1.0.0-beta.53 → 1.0.0-beta.55

package/dist/app/modules/identity/repositories/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/identity/repositories/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AAEpC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/identity/repositories/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AAEpC,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC"}

package/dist/app/modules/identity/repositories/index.mjs

@@ -7,6 +7,5 @@ import { IdentityProviderPermissionMappingRepository } from "./provider/mapper/p
 import { IdentityProviderRoleMappingRepository } from "./provider/mapper/role.mjs";
 import "./provider/index.mjs";
 import { ClientIdentityRepository } from "./client.mjs";
-import { RobotIdentityRepository } from "./robot.mjs";
 import { UserIdentityRepository } from "./user.mjs";
-export { ClientIdentityRepository, IdentityProviderAccountRepository, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRoleMappingRepository, RobotIdentityRepository, UserIdentityRepository };
+export { ClientIdentityRepository, IdentityProviderAccountRepository, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRoleMappingRepository, UserIdentityRepository };

package/dist/app/modules/identity/repositories/provider/account/module.mjs

@@ -12,10 +12,10 @@ var IdentityProviderAccountRepository = class {
 	async findOneByProviderIdentity(identity) {
 		return this.dataSource.getRepository(IdentityProviderAccountEntity).findOne({
 			where: {
-				provider_user_id: identity.id,
-				provider_id: identity.provider.id
+				providerUserId: identity.id,
+				providerId: identity.provider.id
 			},
-			relations: ["user"]
+			relations: { user: true }
 		});
 	}
 	async save(entity) {

package/dist/app/modules/identity/repositories/provider/account/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["IdentityProviderAccountEntity","IdentityProviderAccountRepository","dataSource","findOneByProviderIdentity","identity","repository","getRepository","findOne","where","provider_user_id","id","provider_id","provider","relations","save","entity"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/account/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderAccount } from '@authup/core-kit';\nimport type { DataSource, DeepPartial } from 'typeorm';\nimport type { IIdentityProviderAccountRepository, IdentityProviderIdentity } from '../../../../../../core/index.ts';\nimport { IdentityProviderAccountEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderAccountRepository implements IIdentityProviderAccountRepository {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findOneByProviderIdentity(identity: IdentityProviderIdentity): Promise<IdentityProviderAccount | null> {\n        const repository = this.dataSource.getRepository(IdentityProviderAccountEntity);\n\n        return repository.findOne({\n            where: {\n                provider_user_id: identity.id,\n                provider_id: identity.provider.id,\n            },\n            relations: ['user'],\n        });\n    }\n\n    async save(entity: DeepPartial<IdentityProviderAccount>): Promise<IdentityProviderAccount> {\n        const repository = this.dataSource.getRepository(IdentityProviderAccountEntity);\n\n        return repository.save(entity);\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,oCAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,0BAA0BC,UAA6E;EAGzG,OAFmB,KAAKF,WAAWI,cAAcN,6BAE1CK,CAAAA,CAAWE,QAAQ;GACtBC,OAAO;IACHC,kBAAkBL,SAASM;IAC3BC,aAAaP,SAASQ,SAASF;GACnC;GACAG,WAAW,CAAC,MAAA;EAChB,CAAA;CACJ;CAEA,MAAMC,KAAKC,QAAgF;EAGvF,OAFmB,KAAKb,WAAWI,cAAcN,6BAE1CK,CAAAA,CAAWS,KAAKC,MAAAA;CAC3B;AACJ"}
+{"version":3,"file":"module.mjs","names":["IdentityProviderAccountEntity","IdentityProviderAccountRepository","dataSource","findOneByProviderIdentity","identity","repository","getRepository","findOne","where","providerUserId","id","providerId","provider","relations","user","save","entity"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/account/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderAccount } from '@authup/core-kit';\nimport type { DataSource, DeepPartial } from 'typeorm';\nimport type { IIdentityProviderAccountRepository, IdentityProviderIdentity } from '../../../../../../core/index.ts';\nimport { IdentityProviderAccountEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderAccountRepository implements IIdentityProviderAccountRepository {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findOneByProviderIdentity(identity: IdentityProviderIdentity): Promise<IdentityProviderAccount | null> {\n        const repository = this.dataSource.getRepository(IdentityProviderAccountEntity);\n\n        return repository.findOne({\n            where: {\n                providerUserId: identity.id,\n                providerId: identity.provider.id,\n            },\n            relations: { user: true },\n        });\n    }\n\n    async save(entity: DeepPartial<IdentityProviderAccount>): Promise<IdentityProviderAccount> {\n        const repository = this.dataSource.getRepository(IdentityProviderAccountEntity);\n\n        return repository.save(entity);\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,oCAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,0BAA0BC,UAA6E;EAGzG,OAFmB,KAAKF,WAAWI,cAAcN,6BAE1CK,CAAAA,CAAWE,QAAQ;GACtBC,OAAO;IACHC,gBAAgBL,SAASM;IACzBC,YAAYP,SAASQ,SAASF;GAClC;GACAG,WAAW,EAAEC,MAAM,KAAK;EAC5B,CAAA;CACJ;CAEA,MAAMC,KAAKC,QAAgF;EAGvF,OAFmB,KAAKd,WAAWI,cAAcN,6BAE1CK,CAAAA,CAAWU,KAAKC,MAAAA;CAC3B;AACJ"}

package/dist/app/modules/identity/repositories/provider/mapper/attribute.mjs

@@ -10,7 +10,7 @@ var IdentityProviderAttributeMappingRepository = class {
 		this.dataSource = dataSource;
 	}
 	async findByProviderId(providerId) {
-		return this.dataSource.getRepository(IdentityProviderAttributeMappingEntity).findBy({ provider_id: providerId });
+		return this.dataSource.getRepository(IdentityProviderAttributeMappingEntity).findBy({ providerId });
 	}
 };
 //#endregion

package/dist/app/modules/identity/repositories/provider/mapper/attribute.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"attribute.mjs","names":["IdentityProviderAttributeMappingEntity","IdentityProviderAttributeMappingRepository","dataSource","findByProviderId","providerId","repository","getRepository","findBy","provider_id"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/mapper/attribute.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderAttributeMapping } from '@authup/core-kit';\nimport type { DataSource } from 'typeorm';\nimport type { IIdentityProviderAttributeMappingRepository } from '../../../../../../core/index.ts';\nimport { IdentityProviderAttributeMappingEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderAttributeMappingRepository implements IIdentityProviderAttributeMappingRepository {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findByProviderId(providerId: string): Promise<IdentityProviderAttributeMapping[]> {\n        const repository = this.dataSource.getRepository(IdentityProviderAttributeMappingEntity);\n\n        return repository.findBy({ provider_id: providerId });\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,6CAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,iBAAiBC,YAAiE;EAGpF,OAFmB,KAAKF,WAAWI,cAAcN,sCAE1CK,CAAAA,CAAWE,OAAO,EAAEC,aAAaJ,WAAW,CAAA;CACvD;AACJ"}
+{"version":3,"file":"attribute.mjs","names":["IdentityProviderAttributeMappingEntity","IdentityProviderAttributeMappingRepository","dataSource","findByProviderId","providerId","repository","getRepository","findBy"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/mapper/attribute.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderAttributeMapping } from '@authup/core-kit';\nimport type { DataSource } from 'typeorm';\nimport type { IIdentityProviderAttributeMappingRepository } from '../../../../../../core/index.ts';\nimport { IdentityProviderAttributeMappingEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderAttributeMappingRepository implements IIdentityProviderAttributeMappingRepository {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findByProviderId(providerId: string): Promise<IdentityProviderAttributeMapping[]> {\n        const repository = this.dataSource.getRepository(IdentityProviderAttributeMappingEntity);\n\n        return repository.findBy({ providerId });\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,6CAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,iBAAiBC,YAAiE;EAGpF,OAFmB,KAAKF,WAAWI,cAAcN,sCAE1CK,CAAAA,CAAWE,OAAO,EAAEH,WAAW,CAAA;CAC1C;AACJ"}

package/dist/app/modules/identity/repositories/provider/mapper/permission.mjs

@@ -10,7 +10,7 @@ var IdentityProviderPermissionMappingRepository = class {
 		this.dataSource = dataSource;
 	}
 	async findByProviderId(providerId) {
-		return this.dataSource.getRepository(IdentityProviderPermissionMappingEntity).findBy({ provider_id: providerId });
+		return this.dataSource.getRepository(IdentityProviderPermissionMappingEntity).findBy({ providerId });
 	}
 };
 //#endregion

package/dist/app/modules/identity/repositories/provider/mapper/permission.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"permission.mjs","names":["IdentityProviderPermissionMappingEntity","IdentityProviderPermissionMappingRepository","dataSource","findByProviderId","providerId","repository","getRepository","findBy","provider_id"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/mapper/permission.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderPermissionMapping } from '@authup/core-kit';\nimport type { DataSource } from 'typeorm';\nimport type { IIdentityProviderPermissionMappingRepository } from '../../../../../../core/index.ts';\nimport { IdentityProviderPermissionMappingEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderPermissionMappingRepository implements IIdentityProviderPermissionMappingRepository {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findByProviderId(providerId: string): Promise<IdentityProviderPermissionMapping[]> {\n        const repository = this.dataSource.getRepository(IdentityProviderPermissionMappingEntity);\n\n        return repository.findBy({ provider_id: providerId });\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,8CAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,iBAAiBC,YAAkE;EAGrF,OAFmB,KAAKF,WAAWI,cAAcN,uCAE1CK,CAAAA,CAAWE,OAAO,EAAEC,aAAaJ,WAAW,CAAA;CACvD;AACJ"}
+{"version":3,"file":"permission.mjs","names":["IdentityProviderPermissionMappingEntity","IdentityProviderPermissionMappingRepository","dataSource","findByProviderId","providerId","repository","getRepository","findBy"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/mapper/permission.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderPermissionMapping } from '@authup/core-kit';\nimport type { DataSource } from 'typeorm';\nimport type { IIdentityProviderPermissionMappingRepository } from '../../../../../../core/index.ts';\nimport { IdentityProviderPermissionMappingEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderPermissionMappingRepository implements IIdentityProviderPermissionMappingRepository {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findByProviderId(providerId: string): Promise<IdentityProviderPermissionMapping[]> {\n        const repository = this.dataSource.getRepository(IdentityProviderPermissionMappingEntity);\n\n        return repository.findBy({ providerId });\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,8CAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,iBAAiBC,YAAkE;EAGrF,OAFmB,KAAKF,WAAWI,cAAcN,uCAE1CK,CAAAA,CAAWE,OAAO,EAAEH,WAAW,CAAA;CAC1C;AACJ"}

package/dist/app/modules/identity/repositories/provider/mapper/role.mjs

@@ -10,7 +10,7 @@ var IdentityProviderRoleMappingRepository = class {
 		this.dataSource = dataSource;
 	}
 	async findByProviderId(providerId) {
-		return this.dataSource.getRepository(IdentityProviderRoleMappingEntity).findBy({ provider_id: providerId });
+		return this.dataSource.getRepository(IdentityProviderRoleMappingEntity).findBy({ providerId });
 	}
 };
 //#endregion

package/dist/app/modules/identity/repositories/provider/mapper/role.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"role.mjs","names":["IdentityProviderRoleMappingEntity","IdentityProviderRoleMappingRepository","dataSource","findByProviderId","providerId","repository","getRepository","findBy","provider_id"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/mapper/role.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderRoleMapping } from '@authup/core-kit';\nimport type { DataSource } from 'typeorm';\nimport type { IIdentityProviderRoleMappingFinder } from '../../../../../../core/index.ts';\nimport { IdentityProviderRoleMappingEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderRoleMappingRepository implements IIdentityProviderRoleMappingFinder {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findByProviderId(providerId: string): Promise<IdentityProviderRoleMapping[]> {\n        const repository = this.dataSource.getRepository(IdentityProviderRoleMappingEntity);\n\n        return repository.findBy({ provider_id: providerId });\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,wCAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,iBAAiBC,YAA4D;EAG/E,OAFmB,KAAKF,WAAWI,cAAcN,iCAE1CK,CAAAA,CAAWE,OAAO,EAAEC,aAAaJ,WAAW,CAAA;CACvD;AACJ"}
+{"version":3,"file":"role.mjs","names":["IdentityProviderRoleMappingEntity","IdentityProviderRoleMappingRepository","dataSource","findByProviderId","providerId","repository","getRepository","findBy"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/mapper/role.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderRoleMapping } from '@authup/core-kit';\nimport type { DataSource } from 'typeorm';\nimport type { IIdentityProviderRoleMappingFinder } from '../../../../../../core/index.ts';\nimport { IdentityProviderRoleMappingEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderRoleMappingRepository implements IIdentityProviderRoleMappingFinder {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findByProviderId(providerId: string): Promise<IdentityProviderRoleMapping[]> {\n        const repository = this.dataSource.getRepository(IdentityProviderRoleMappingEntity);\n\n        return repository.findBy({ providerId });\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,wCAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,iBAAiBC,YAA4D;EAG/E,OAFmB,KAAKF,WAAWI,cAAcN,iCAE1CK,CAAAA,CAAWE,OAAO,EAAEH,WAAW,CAAA;CAC1C;AACJ"}

package/dist/app/modules/identity/repositories/user.mjs

@@ -36,11 +36,11 @@ var UserIdentityRepository = class {
 		if (isId) query.where("user.id = :id", { id: key });
 		else {
 			query.where("user.name = :name", { name: key.trim().toLowerCase() });
-			if (realmKey) if (isUUID(realmKey)) query.andWhere("user.realm_id = :realmId", { realmId: realmKey });
+			if (realmKey) if (isUUID(realmKey)) query.andWhere("user.realmId = :realmId", { realmId: realmKey });
 			else query.andWhere("realm.name = :realmName", { realmName: realmKey.trim().toLowerCase() });
 		}
 		const { columns } = this.repository.metadata;
-		for (const column of columns) if (!column.isSelect) query.addSelect(`user.${column.databaseName}`);
+		for (const column of columns) if (!column.isSelect) query.addSelect(`user.${column.propertyName}`);
 		if (isId) query.cache(buildRedisKeyPath({
 			prefix: CachePrefix.USER,
 			key
@@ -58,24 +58,24 @@ var UserIdentityRepository = class {
 		const ids = items.map((item) => item.value);
 		const idsToDelete = items.filter((item) => item.operation === IdentityProviderMapperOperation.DELETE).map((item) => item.value);
 		const entities = await repository.findBy({
-			user_id: user.id,
-			permission_id: In(ids)
+			userId: user.id,
+			permissionId: In(ids)
 		});
 		const entitiesToDelete = [];
 		for (const entity of entities) {
-			if (idsToDelete.indexOf(entity.permission_id) === -1) continue;
+			if (idsToDelete.indexOf(entity.permissionId) === -1) continue;
 			entitiesToDelete.push(entity);
 		}
 		if (entitiesToDelete.length > 0) await repository.remove(entitiesToDelete);
 		const entitiesToCreate = [];
 		for (const item of items) {
 			if (item.operation !== IdentityProviderMapperOperation.CREATE) continue;
-			if (entities.findIndex((entity) => entity.permission_id === item.value) !== -1) continue;
+			if (entities.findIndex((entity) => entity.permissionId === item.value) !== -1) continue;
 			const entity = repository.create({
-				user_id: user.id,
-				user_realm_id: user.realm_id,
-				permission_id: item.value,
-				permission_realm_id: item.realmId
+				userId: user.id,
+				userRealmId: user.realmId,
+				permissionId: item.value,
+				permissionRealmId: item.realmId
 			});
 			entitiesToCreate.push(entity);
 		}
@@ -86,24 +86,24 @@ var UserIdentityRepository = class {
 		const ids = items.map((item) => item.value);
 		const idsToDelete = items.filter((item) => item.operation === IdentityProviderMapperOperation.DELETE).map((item) => item.value);
 		const entities = await repository.findBy({
-			user_id: user.id,
-			role_id: In(ids)
+			userId: user.id,
+			roleId: In(ids)
 		});
 		const entitiesToDelete = [];
 		for (const entity of entities) {
-			if (idsToDelete.indexOf(entity.role_id) === -1) continue;
+			if (idsToDelete.indexOf(entity.roleId) === -1) continue;
 			entitiesToDelete.push(entity);
 		}
 		if (entitiesToDelete.length > 0) await repository.remove(entitiesToDelete);
 		const entitiesToCreate = [];
 		for (const item of items) {
 			if (item.operation !== IdentityProviderMapperOperation.CREATE) continue;
-			if (entities.findIndex((entity) => entity.role_id === item.value) !== -1) continue;
+			if (entities.findIndex((entity) => entity.roleId === item.value) !== -1) continue;
 			const entity = repository.create({
-				user_id: user.id,
-				user_realm_id: user.realm_id,
-				role_id: item.value,
-				role_realm_id: item.realmId
+				userId: user.id,
+				userRealmId: user.realmId,
+				roleId: item.value,
+				roleRealmId: item.realmId
 			});
 			entitiesToCreate.push(entity);
 		}

package/dist/app/modules/identity/repositories/user.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"user.mjs","names":["isUUID","buildRedisKeyPath","In","IdentityProviderMapperOperation","CachePrefix","UserIdentityRepository","repository","userPermissionRepository","userRoleRepository","ctx","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","databaseName","cache","prefix","USER","entity","getOne","extendOneWithEA","saveOneWithEA","user","extraAttributes","create","savePermissions","items","ids","map","item","value","idsToDelete","filter","operation","DELETE","entities","findBy","user_id","permission_id","entitiesToDelete","index","indexOf","push","length","remove","entitiesToCreate","CREATE","findIndex","user_realm_id","realm_id","permission_realm_id","save","saveRoles","role_id","role_realm_id"],"sources":["../../../../../src/app/modules/identity/repositories/user.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User, UserPermission, UserRole } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { IUserIdentityRepository, IdentityProviderMapperElement } from '../../../../core/index.ts';\nimport { IdentityProviderMapperOperation } from '../../../../core/index.ts';\nimport type { UserRepository } from '../../../../adapters/database/domains/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport type UserIdentityRepositoryContext = {\n    repository: UserRepository,\n    userPermissionRepository: Repository<UserPermission>,\n    userRoleRepository: Repository<UserRole>,\n};\n\nexport class UserIdentityRepository implements IUserIdentityRepository {\n    private readonly repository: UserRepository;\n\n    private readonly userPermissionRepository: Repository<UserPermission>;\n\n    private readonly userRoleRepository: Repository<UserRole>;\n\n    constructor(ctx: UserIdentityRepositoryContext) {\n        this.repository = ctx.repository;\n        this.userPermissionRepository = ctx.userPermissionRepository;\n        this.userRoleRepository = ctx.userRoleRepository;\n    }\n\n    async findOneById(id: string): Promise<User | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<User | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<User | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<User | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<User | null> {\n        const query = this.repository.createQueryBuilder('user')\n            .leftJoinAndSelect('user.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('user.id = :id', { id: key });\n        } else {\n            query.where('user.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('user.realm_id = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`user.${column.databaseName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.USER,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        const entity = await query.getOne();\n        if (entity) {\n            return this.repository.extendOneWithEA(entity);\n        }\n\n        return null;\n    }\n\n    async saveOneWithEA(user: Partial<User>, extraAttributes: Record<string, any>): Promise<User> {\n        const entity = this.repository.create(user);\n        return this.repository.saveOneWithEA(entity, extraAttributes);\n    }\n\n    async savePermissions(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userPermissionRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            user_id: user.id,\n            permission_id: In(ids),\n        });\n\n        const entitiesToDelete : UserPermission[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.permission_id);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserPermission[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex(\n                (entity) => entity.permission_id === item.value,\n            );\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                user_id: user.id,\n                user_realm_id: user.realm_id,\n                permission_id: item.value as string,\n                permission_realm_id: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n\n    async saveRoles(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userRoleRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            user_id: user.id,\n            role_id: In(ids),\n        });\n\n        const entitiesToDelete : UserRole[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.role_id);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserRole[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex((entity) => entity.role_id === item.value);\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                user_id: user.id,\n                user_realm_id: user.realm_id,\n                role_id: item.value as string,\n                role_realm_id: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;AAuBA,IAAaK,yBAAb,MAAaA;CACQC;CAEAC;CAEAC;CAEjB,YAAYC,KAAoC;EAC5C,KAAKH,aAAaG,IAAIH;EACtB,KAAKC,2BAA2BE,IAAIF;EACpC,KAAKC,qBAAqBC,IAAID;CAClC;CAEA,MAAME,YAAYC,IAAkC;EAChD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAsC;EAClE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAsC;EAC5E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAkD;EAC9D,OAAO,KAAKZ,WAAWW,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA0C;EACtE,MAAMC,QAAQ,KAAKf,WAAWgB,mBAAmB,MAAA,CAAA,CAC5CC,kBAAkB,cAAc,OAAA;EAErC,MAAMC,OAAOxB,OAAOmB,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,iBAAiB,EAAEP,IAAIQ,IAAI,CAAA;OACpC;GACHE,MAAMH,MAAM,qBAAqB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAElE,IAAIP,UACA,IAAIpB,OAAOoB,QAAAA,GACPC,MAAMO,SAAS,4BAA4B,EAAEC,SAAST,SAAS,CAAA;QAE/DC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EAEA,MAAM,EAAEI,YAAY,KAAKzB,WAAW0B;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,QAAQF,OAAOG,cAAc;EAIrD,IAAIZ,MACAH,MAAMgB,MACFpC,kBAAkB;GACdqC,QAAQlC,YAAYmC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,MAAMqB,SAAS,MAAMnB,MAAMoB,OAAM;EACjC,IAAID,QACA,OAAO,KAAKlC,WAAWoC,gBAAgBF,MAAAA;EAG3C,OAAO;CACX;CAEA,MAAMG,cAAcC,MAAqBC,iBAAqD;EAC1F,MAAML,SAAS,KAAKlC,WAAWwC,OAAOF,IAAAA;EACtC,OAAO,KAAKtC,WAAWqC,cAAcH,QAAQK,eAAAA;CACjD;CAEA,MAAME,gBAAgBH,MAAYI,OAAuD;EACrF,MAAM,EAAEzC,0BAA0BD,eAAe;EAEjD,MAAM2C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcpD,gCAAgCqD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMnD,WAAWoD,OAAO;GACrCC,SAASf,KAAKjC;GACdiD,eAAe1D,GAAG+C,GAAAA;EACtB,CAAA;EAEA,MAAMY,mBAAsC,CAAA;EAC5C,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOoB,aACrCE,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAM3D,WAAW4D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAsC,CAAA;EAC5C,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcpD,gCAAgCiE,QACnD;GAMJ,IAHcX,SAASY,WAClB7B,WAAWA,OAAOoB,kBAAkBT,KAAKC,KAE1CU,MAAU,IACV;GAGJ,MAAMtB,SAASlC,WAAWwC,OAAO;IAC7Ba,SAASf,KAAKjC;IACd2D,eAAe1B,KAAK2B;IACpBX,eAAeT,KAAKC;IACpBoB,qBAAqBrB,KAAKtB;GAC9B,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAM3D,WAAWmE,KAAKN,gBAAAA;CAE9B;CAEA,MAAMO,UAAU9B,MAAYI,OAAuD;EAC/E,MAAM,EAAExC,oBAAoBF,eAAe;EAE3C,MAAM2C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcpD,gCAAgCqD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMnD,WAAWoD,OAAO;GACrCC,SAASf,KAAKjC;GACdgE,SAASzE,GAAG+C,GAAAA;EAChB,CAAA;EAEA,MAAMY,mBAAgC,CAAA;EACtC,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOmC,OACrCb,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAM3D,WAAW4D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAgC,CAAA;EACtC,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcpD,gCAAgCiE,QACnD;GAIJ,IADcX,SAASY,WAAW7B,WAAWA,OAAOmC,YAAYxB,KAAKC,KACjEU,MAAU,IACV;GAGJ,MAAMtB,SAASlC,WAAWwC,OAAO;IAC7Ba,SAASf,KAAKjC;IACd2D,eAAe1B,KAAK2B;IACpBI,SAASxB,KAAKC;IACdwB,eAAezB,KAAKtB;GACxB,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAM3D,WAAWmE,KAAKN,gBAAAA;CAE9B;AACJ"}
+{"version":3,"file":"user.mjs","names":["isUUID","buildRedisKeyPath","In","IdentityProviderMapperOperation","CachePrefix","UserIdentityRepository","repository","userPermissionRepository","userRoleRepository","ctx","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","propertyName","cache","prefix","USER","entity","getOne","extendOneWithEA","saveOneWithEA","user","extraAttributes","create","savePermissions","items","ids","map","item","value","idsToDelete","filter","operation","DELETE","entities","findBy","userId","permissionId","entitiesToDelete","index","indexOf","push","length","remove","entitiesToCreate","CREATE","findIndex","userRealmId","permissionRealmId","save","saveRoles","roleId","roleRealmId"],"sources":["../../../../../src/app/modules/identity/repositories/user.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User, UserPermission, UserRole } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { IUserIdentityRepository, IdentityProviderMapperElement } from '../../../../core/index.ts';\nimport { IdentityProviderMapperOperation } from '../../../../core/index.ts';\nimport type { UserRepository } from '../../../../adapters/database/domains/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport type UserIdentityRepositoryContext = {\n    repository: UserRepository,\n    userPermissionRepository: Repository<UserPermission>,\n    userRoleRepository: Repository<UserRole>,\n};\n\nexport class UserIdentityRepository implements IUserIdentityRepository {\n    private readonly repository: UserRepository;\n\n    private readonly userPermissionRepository: Repository<UserPermission>;\n\n    private readonly userRoleRepository: Repository<UserRole>;\n\n    constructor(ctx: UserIdentityRepositoryContext) {\n        this.repository = ctx.repository;\n        this.userPermissionRepository = ctx.userPermissionRepository;\n        this.userRoleRepository = ctx.userRoleRepository;\n    }\n\n    async findOneById(id: string): Promise<User | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<User | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<User | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<User | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<User | null> {\n        const query = this.repository.createQueryBuilder('user')\n            .leftJoinAndSelect('user.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('user.id = :id', { id: key });\n        } else {\n            query.where('user.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('user.realmId = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`user.${column.propertyName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.USER,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        const entity = await query.getOne();\n        if (entity) {\n            return this.repository.extendOneWithEA(entity);\n        }\n\n        return null;\n    }\n\n    async saveOneWithEA(user: Partial<User>, extraAttributes: Record<string, any>): Promise<User> {\n        const entity = this.repository.create(user);\n        return this.repository.saveOneWithEA(entity, extraAttributes);\n    }\n\n    async savePermissions(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userPermissionRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            userId: user.id,\n            permissionId: In(ids),\n        });\n\n        const entitiesToDelete : UserPermission[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.permissionId);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserPermission[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex(\n                (entity) => entity.permissionId === item.value,\n            );\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                userId: user.id,\n                userRealmId: user.realmId,\n                permissionId: item.value as string,\n                permissionRealmId: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n\n    async saveRoles(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userRoleRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            userId: user.id,\n            roleId: In(ids),\n        });\n\n        const entitiesToDelete : UserRole[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.roleId);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserRole[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex((entity) => entity.roleId === item.value);\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                userId: user.id,\n                userRealmId: user.realmId,\n                roleId: item.value as string,\n                roleRealmId: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;AAuBA,IAAaK,yBAAb,MAAaA;CACQC;CAEAC;CAEAC;CAEjB,YAAYC,KAAoC;EAC5C,KAAKH,aAAaG,IAAIH;EACtB,KAAKC,2BAA2BE,IAAIF;EACpC,KAAKC,qBAAqBC,IAAID;CAClC;CAEA,MAAME,YAAYC,IAAkC;EAChD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAsC;EAClE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAsC;EAC5E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAkD;EAC9D,OAAO,KAAKZ,WAAWW,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA0C;EACtE,MAAMC,QAAQ,KAAKf,WAAWgB,mBAAmB,MAAA,CAAA,CAC5CC,kBAAkB,cAAc,OAAA;EAErC,MAAMC,OAAOxB,OAAOmB,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,iBAAiB,EAAEP,IAAIQ,IAAI,CAAA;OACpC;GACHE,MAAMH,MAAM,qBAAqB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAElE,IAAIP,UACA,IAAIpB,OAAOoB,QAAAA,GACPC,MAAMO,SAAS,2BAA2B,EAAEC,SAAST,SAAS,CAAA;QAE9DC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EAEA,MAAM,EAAEI,YAAY,KAAKzB,WAAW0B;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,QAAQF,OAAOG,cAAc;EAIrD,IAAIZ,MACAH,MAAMgB,MACFpC,kBAAkB;GACdqC,QAAQlC,YAAYmC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,MAAMqB,SAAS,MAAMnB,MAAMoB,OAAM;EACjC,IAAID,QACA,OAAO,KAAKlC,WAAWoC,gBAAgBF,MAAAA;EAG3C,OAAO;CACX;CAEA,MAAMG,cAAcC,MAAqBC,iBAAqD;EAC1F,MAAML,SAAS,KAAKlC,WAAWwC,OAAOF,IAAAA;EACtC,OAAO,KAAKtC,WAAWqC,cAAcH,QAAQK,eAAAA;CACjD;CAEA,MAAME,gBAAgBH,MAAYI,OAAuD;EACrF,MAAM,EAAEzC,0BAA0BD,eAAe;EAEjD,MAAM2C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcpD,gCAAgCqD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMnD,WAAWoD,OAAO;GACrCC,QAAQf,KAAKjC;GACbiD,cAAc1D,GAAG+C,GAAAA;EACrB,CAAA;EAEA,MAAMY,mBAAsC,CAAA;EAC5C,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOoB,YACrCE,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAM3D,WAAW4D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAsC,CAAA;EAC5C,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcpD,gCAAgCiE,QACnD;GAMJ,IAHcX,SAASY,WAClB7B,WAAWA,OAAOoB,iBAAiBT,KAAKC,KAEzCU,MAAU,IACV;GAGJ,MAAMtB,SAASlC,WAAWwC,OAAO;IAC7Ba,QAAQf,KAAKjC;IACb2D,aAAa1B,KAAKf;IAClB+B,cAAcT,KAAKC;IACnBmB,mBAAmBpB,KAAKtB;GAC5B,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAM3D,WAAWkE,KAAKL,gBAAAA;CAE9B;CAEA,MAAMM,UAAU7B,MAAYI,OAAuD;EAC/E,MAAM,EAAExC,oBAAoBF,eAAe;EAE3C,MAAM2C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcpD,gCAAgCqD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMnD,WAAWoD,OAAO;GACrCC,QAAQf,KAAKjC;GACb+D,QAAQxE,GAAG+C,GAAAA;EACf,CAAA;EAEA,MAAMY,mBAAgC,CAAA;EACtC,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOkC,MACrCZ,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAM3D,WAAW4D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAgC,CAAA;EACtC,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcpD,gCAAgCiE,QACnD;GAIJ,IADcX,SAASY,WAAW7B,WAAWA,OAAOkC,WAAWvB,KAAKC,KAChEU,MAAU,IACV;GAGJ,MAAMtB,SAASlC,WAAWwC,OAAO;IAC7Ba,QAAQf,KAAKjC;IACb2D,aAAa1B,KAAKf;IAClB6C,QAAQvB,KAAKC;IACbuB,aAAaxB,KAAKtB;GACtB,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAM3D,WAAWkE,KAAKL,gBAAAA;CAE9B;AACJ"}

package/dist/app/modules/index.mjs

@@ -25,9 +25,6 @@ import { PermissionRepositoryAdapter } from "./database/repositories/permission/
 import { PermissionPolicyRepositoryAdapter } from "./database/repositories/permission-policy/repository.mjs";
 import { PermissionDatabaseProvider } from "./database/repositories/permission-provider/module.mjs";
 import { PolicyRepositoryAdapter } from "./database/repositories/policy/repository.mjs";
-import { RobotRepositoryAdapter } from "./database/repositories/robot/repository.mjs";
-import { RobotPermissionRepositoryAdapter } from "./database/repositories/robot-permission/repository.mjs";
-import { RobotRoleRepositoryAdapter } from "./database/repositories/robot-role/repository.mjs";
 import { RoleRepositoryAdapter } from "./database/repositories/role/repository.mjs";
 import { RoleAttributeRepositoryAdapter } from "./database/repositories/role-attribute/repository.mjs";
 import { RolePermissionRepositoryAdapter } from "./database/repositories/role-permission/repository.mjs";
@@ -58,7 +55,6 @@ import { IdentityProviderAttributeMappingRepository } from "./identity/repositor
 import { IdentityProviderPermissionMappingRepository } from "./identity/repositories/provider/mapper/permission.mjs";
 import { IdentityProviderRoleMappingRepository } from "./identity/repositories/provider/mapper/role.mjs";
 import { ClientIdentityRepository } from "./identity/repositories/client.mjs";
-import { RobotIdentityRepository } from "./identity/repositories/robot.mjs";
 import { UserIdentityRepository } from "./identity/repositories/user.mjs";
 import { LDAPInjectionKey } from "./ldap/constants.mjs";
 import { LdapModule } from "./ldap/module.mjs";
@@ -79,4 +75,4 @@ import { ProvisionerModule } from "./provisioning/module.mjs";
 import "./provisioning/index.mjs";
 import { RuntimeModule } from "./runtime/module.mjs";
 import "./runtime/index.mjs";
-export { AuthenticationInjectionKey, AuthenticationModule, CacheInjectionKey, CacheModule, ClientIdentityRepository, ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DatabaseInjectionKey, DatabaseModule, DefaultProvisioningSource, EventRepositoryAdapter, FileProvisioningSource, HTTPInjectionKey, HTTPModule, IdentityInjectionKey, IdentityModule, IdentityProviderAccountRepository, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, KeyRepositoryAdapter, LDAPInjectionKey, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, MetricsInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, PromAuthFlowMetrics, ProvisionerModule, RealmRepositoryAdapter, RobotIdentityRepository, RobotPermissionRepositoryAdapter, RobotRepositoryAdapter, RobotRoleRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, RuntimeModule, ScopeRepositoryAdapter, SessionRepository, TrustAnchorRepositoryAdapter, UserAttributeRepositoryAdapter, UserAuthenticatorRepositoryAdapter, UserIdentityRepository, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter, expandToOrigins, getAppOrigins };
+export { AuthenticationInjectionKey, AuthenticationModule, CacheInjectionKey, CacheModule, ClientIdentityRepository, ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DatabaseInjectionKey, DatabaseModule, DefaultProvisioningSource, EventRepositoryAdapter, FileProvisioningSource, HTTPInjectionKey, HTTPModule, IdentityInjectionKey, IdentityModule, IdentityProviderAccountRepository, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, KeyRepositoryAdapter, LDAPInjectionKey, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, MetricsInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, PromAuthFlowMetrics, ProvisionerModule, RealmRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, RuntimeModule, ScopeRepositoryAdapter, SessionRepository, TrustAnchorRepositoryAdapter, UserAttributeRepositoryAdapter, UserAuthenticatorRepositoryAdapter, UserIdentityRepository, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter, expandToOrigins, getAppOrigins };

package/dist/app/modules/logger/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["createLogger","createNoopLogger","ModuleName","ConfigInjectionKey","LoggerInjectionKey","LoggerModule","name","dependencies","LOGGER","CONFIG","setup","container","result","tryResolve","success","data","logger","register","useFactory","env","directory","writableDirectoryPath"],"sources":["../../../../src/app/modules/logger/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createLogger, createNoopLogger } from '@authup/server-kit';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport { LoggerInjectionKey } from './constants.ts';\nimport type { IContainer } from 'eldin';\n\nexport class LoggerModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.LOGGER;\n        this.dependencies = [ModuleName.CONFIG];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        const result = container.tryResolve(ConfigInjectionKey);\n        if (!result.success || !result.data.logger) {\n            container.register(LoggerInjectionKey, { useFactory: createNoopLogger });\n\n            return;\n        }\n\n        container.register(LoggerInjectionKey, {\n            useFactory: () => createLogger({\n                env: result.data.env,\n                directory: result.data.writableDirectoryPath,\n            }),\n        });\n    }\n\n    // ----------------------------------------------------\n}\n"],"mappings":";;;;;;;;;AAcA,IAAaK,eAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOJ,WAAWM;EACvB,KAAKD,eAAe,CAACL,WAAWO,MAAAA;CACpC;CAEA,MAAMC,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,WAAWV,kBAAAA;EACpC,IAAI,CAACS,OAAOE,WAAW,CAACF,OAAOG,KAAKC,QAAQ;GACxCL,UAAUM,SAASb,oBAAoB,EAAEc,YAAYjB,iBAAiB,CAAA;GAEtE;EACJ;EAEAU,UAAUM,SAASb,oBAAoB,EACnCc,kBAAkBlB,aAAa;GAC3BmB,KAAKP,OAAOG,KAAKI;GACjBC,WAAWR,OAAOG,KAAKM;EAC3B,CAAA,EACJ,CAAA;CACJ;AAGJ"}
+{"version":3,"file":"module.mjs","names":["createLogger","createNoopLogger","ModuleName","ConfigInjectionKey","LoggerInjectionKey","LoggerModule","name","dependencies","LOGGER","CONFIG","setup","container","result","tryResolve","success","data","logger","register","useFactory","env","directory","writableDirectoryPath"],"sources":["../../../../src/app/modules/logger/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createLogger, createNoopLogger } from '@authup/server-kit';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport { LoggerInjectionKey } from './constants.ts';\nimport type { IContainer } from 'eldin';\n\nexport class LoggerModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.LOGGER;\n        this.dependencies = [ModuleName.CONFIG];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        const result = container.tryResolve(ConfigInjectionKey);\n        if (!result.success || !result.data.logger) {\n            container.register(LoggerInjectionKey, { useFactory: createNoopLogger });\n\n            return;\n        }\n\n        container.register(LoggerInjectionKey, {\n            useFactory: () => createLogger({\n                env: result.data.env,\n                directory: result.data.writableDirectoryPath,\n            }),\n        });\n    }\n\n    // ----------------------------------------------------\n}\n"],"mappings":";;;;;;;;;AAcA,IAAaK,eAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOJ,WAAWM;EACvB,KAAKD,eAAe,CAACL,WAAWO,MAAO;CAC3C;CAEA,MAAMC,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,WAAWV,kBAAAA;EACpC,IAAI,CAACS,OAAOE,WAAW,CAACF,OAAOG,KAAKC,QAAQ;GACxCL,UAAUM,SAASb,oBAAoB,EAAEc,YAAYjB,iBAAiB,CAAA;GAEtE;EACJ;EAEAU,UAAUM,SAASb,oBAAoB,EACnCc,kBAAkBlB,aAAa;GAC3BmB,KAAKP,OAAOG,KAAKI;GACjBC,WAAWR,OAAOG,KAAKM;EAC3B,CAAA,EACJ,CAAA;CACJ;AAGJ"}

package/dist/app/modules/mail/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["ModuleName","MailTemplateRenderer","SMTPMailClientAdapter","VoidMailClientAdapter","MailInjectionKey","MailTemplateRendererInjectionKey","ConfigInjectionKey","MailModule","name","dependencies","MAIL","CONFIG","setup","container","has","register","useFactory","result","tryResolve","success","data","smtp"],"sources":["../../../../src/app/modules/mail/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { MailTemplateRenderer } from '../../../core/index.ts';\nimport { SMTPMailClientAdapter, VoidMailClientAdapter } from './adapter/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from './constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IContainer } from 'eldin';\n\nexport class MailModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.MAIL;\n        this.dependencies = [ModuleName.CONFIG];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        if (!container.has(MailTemplateRendererInjectionKey)) {\n            container.register(MailTemplateRendererInjectionKey, { useFactory: () => new MailTemplateRenderer() });\n        }\n\n        // A pre-registered client wins (test injection — mirrors the\n        // UIHttpClient pattern), so a fake can capture mailed OTP codes.\n        if (container.has(MailInjectionKey)) {\n            return;\n        }\n\n        const result = container.tryResolve(ConfigInjectionKey);\n        if (!result.success || !result.data.smtp) {\n            container.register(MailInjectionKey, { useFactory: () => new VoidMailClientAdapter() });\n\n            return;\n        }\n\n        container.register(MailInjectionKey, { useFactory: () => new SMTPMailClientAdapter(result.data.smtp) });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAeA,IAAaO,aAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOR,WAAWU;EACvB,KAAKD,eAAe,CAACT,WAAWW,MAAAA;CACpC;CAEA,MAAMC,MAAMC,WAAsC;EAC9C,IAAI,CAACA,UAAUC,IAAIT,gCAAAA,GACfQ,UAAUE,SAASV,kCAAkC,EAAEW,kBAAkB,IAAIf,qBAAAA,EAAuB,CAAA;EAKxG,IAAIY,UAAUC,IAAIV,gBAAAA,GACd;EAGJ,MAAMa,SAASJ,UAAUK,WAAWZ,kBAAAA;EACpC,IAAI,CAACW,OAAOE,WAAW,CAACF,OAAOG,KAAKC,MAAM;GACtCR,UAAUE,SAASX,kBAAkB,EAAEY,kBAAkB,IAAIb,sBAAAA,EAAwB,CAAA;GAErF;EACJ;EAEAU,UAAUE,SAASX,kBAAkB,EAAEY,kBAAkB,IAAId,sBAAsBe,OAAOG,KAAKC,IAAI,EAAE,CAAA;CACzG;AACJ"}
+{"version":3,"file":"module.mjs","names":["ModuleName","MailTemplateRenderer","SMTPMailClientAdapter","VoidMailClientAdapter","MailInjectionKey","MailTemplateRendererInjectionKey","ConfigInjectionKey","MailModule","name","dependencies","MAIL","CONFIG","setup","container","has","register","useFactory","result","tryResolve","success","data","smtp"],"sources":["../../../../src/app/modules/mail/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { MailTemplateRenderer } from '../../../core/index.ts';\nimport { SMTPMailClientAdapter, VoidMailClientAdapter } from './adapter/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from './constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IContainer } from 'eldin';\n\nexport class MailModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.MAIL;\n        this.dependencies = [ModuleName.CONFIG];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        if (!container.has(MailTemplateRendererInjectionKey)) {\n            container.register(MailTemplateRendererInjectionKey, { useFactory: () => new MailTemplateRenderer() });\n        }\n\n        // A pre-registered client wins (test injection — mirrors the\n        // UIHttpClient pattern), so a fake can capture mailed OTP codes.\n        if (container.has(MailInjectionKey)) {\n            return;\n        }\n\n        const result = container.tryResolve(ConfigInjectionKey);\n        if (!result.success || !result.data.smtp) {\n            container.register(MailInjectionKey, { useFactory: () => new VoidMailClientAdapter() });\n\n            return;\n        }\n\n        container.register(MailInjectionKey, { useFactory: () => new SMTPMailClientAdapter(result.data.smtp) });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAeA,IAAaO,aAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOR,WAAWU;EACvB,KAAKD,eAAe,CAACT,WAAWW,MAAO;CAC3C;CAEA,MAAMC,MAAMC,WAAsC;EAC9C,IAAI,CAACA,UAAUC,IAAIT,gCAAAA,GACfQ,UAAUE,SAASV,kCAAkC,EAAEW,kBAAkB,IAAIf,qBAAAA,EAAuB,CAAA;EAKxG,IAAIY,UAAUC,IAAIV,gBAAAA,GACd;EAGJ,MAAMa,SAASJ,UAAUK,WAAWZ,kBAAAA;EACpC,IAAI,CAACW,OAAOE,WAAW,CAACF,OAAOG,KAAKC,MAAM;GACtCR,UAAUE,SAASX,kBAAkB,EAAEY,kBAAkB,IAAIb,sBAAAA,EAAwB,CAAA;GAErF;EACJ;EAEAU,UAAUE,SAASX,kBAAkB,EAAEY,kBAAkB,IAAId,sBAAsBe,OAAOG,KAAKC,IAAI,EAAE,CAAA;CACzG;AACJ"}

package/dist/app/modules/metrics/prom.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"prom.mjs","names":["Counter","register","getOrCreateCounter","name","help","labelNames","existing","getSingleMetric","PromAuthFlowMetrics","loginCounter","tokenGrantCounter","authorizeCounter","refreshReplayCounter","recordLogin","result","inc","recordTokenGrant","grantType","grant_type","recordAuthorize","outcome","recordRefreshReplay"],"sources":["../../../../src/app/modules/metrics/prom.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Counter, register } from 'prom-client';\nimport type { OAuth2TokenGrant } from '@authup/specs';\nimport type {\n    AuthFlowAuthorizeOutcome,\n    AuthFlowLoginResult,\n    IAuthFlowMetrics,\n} from '../../../core/index.ts';\n\n// Counters are created against prom-client's default registry — the\n// @routup/prometheus handler serves that registry, so no extra wiring is\n// needed. getSingleMetric keeps construction idempotent across app instances\n// in one process (prom-client throws on duplicate metric names).\nfunction getOrCreateCounter<T extends string>(\n    name: string,\n    help: string,\n    labelNames: T[] = [],\n): Counter<T> {\n    const existing = register.getSingleMetric(name);\n    if (existing) {\n        return existing as Counter<T>;\n    }\n\n    return new Counter<T>({\n        name, \n        help, \n        labelNames, \n    });\n}\n\nexport class PromAuthFlowMetrics implements IAuthFlowMetrics {\n    protected loginCounter: Counter<'result'>;\n\n    protected tokenGrantCounter: Counter<'grant_type'>;\n\n    protected authorizeCounter: Counter<'outcome'>;\n\n    protected refreshReplayCounter: Counter;\n\n    constructor() {\n        this.loginCounter = getOrCreateCounter(\n            'authup_login_total',\n            'Password-grant login attempts by result.',\n            ['result'],\n        );\n        this.tokenGrantCounter = getOrCreateCounter(\n            'authup_token_grant_total',\n            'Successful token grants by grant_type; failures appear in the http_request_duration status codes.',\n            ['grant_type'],\n        );\n        this.authorizeCounter = getOrCreateCounter(\n            'authup_authorize_total',\n            'Authorization decisions by outcome.',\n            ['outcome'],\n        );\n        this.refreshReplayCounter = getOrCreateCounter(\n            'authup_refresh_replay_total',\n            'Detected refresh-token replays (family revocations).',\n        );\n    }\n\n    recordLogin(result: AuthFlowLoginResult): void {\n        this.loginCounter.inc({ result });\n    }\n\n    recordTokenGrant(grantType: `${OAuth2TokenGrant}`): void {\n        this.tokenGrantCounter.inc({ grant_type: grantType });\n    }\n\n    recordAuthorize(outcome: AuthFlowAuthorizeOutcome): void {\n        this.authorizeCounter.inc({ outcome });\n    }\n\n    recordRefreshReplay(): void {\n        this.refreshReplayCounter.inc();\n    }\n}\n"],"mappings":";;;;;AAmBA,SAASE,mBACLC,MACAC,MACAC,aAAkB,CAAA,GAAE;CAEpB,MAAMC,WAAWL,SAASM,gBAAgBJ,IAAAA;CAC1C,IAAIG,UACA,OAAOA;CAGX,OAAO,IAAIN,QAAW;EAClBG;EACAC;EACAC;CACJ,CAAA;AACJ;AAEA,IAAaG,sBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,cAAc;EACV,KAAKH,eAAeP,mBAChB,sBACA,4CACA,CAAC,QAAA,CAAS;EAEd,KAAKQ,oBAAoBR,mBACrB,4BACA,qGACA,CAAC,YAAA,CAAa;EAElB,KAAKS,mBAAmBT,mBACpB,0BACA,uCACA,CAAC,SAAA,CAAU;EAEf,KAAKU,uBAAuBV,mBACxB,+BACA,sDAAA;CAER;CAEAW,YAAYC,QAAmC;EAC3C,KAAKL,aAAaM,IAAI,EAAED,OAAO,CAAA;CACnC;CAEAE,iBAAiBC,WAAwC;EACrD,KAAKP,kBAAkBK,IAAI,EAAEG,YAAYD,UAAU,CAAA;CACvD;CAEAE,gBAAgBC,SAAyC;EACrD,KAAKT,iBAAiBI,IAAI,EAAEK,QAAQ,CAAA;CACxC;CAEAC,sBAA4B;EACxB,KAAKT,qBAAqBG,IAAG;CACjC;AACJ"}
+{"version":3,"file":"prom.mjs","names":["Counter","register","getOrCreateCounter","name","help","labelNames","existing","getSingleMetric","PromAuthFlowMetrics","loginCounter","tokenGrantCounter","authorizeCounter","refreshReplayCounter","recordLogin","result","inc","recordTokenGrant","grantType","grant_type","recordAuthorize","outcome","recordRefreshReplay"],"sources":["../../../../src/app/modules/metrics/prom.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Counter, register } from 'prom-client';\nimport type { OAuth2TokenGrant } from '@authup/specs';\nimport type {\n    AuthFlowAuthorizeOutcome,\n    AuthFlowLoginResult,\n    IAuthFlowMetrics,\n} from '../../../core/index.ts';\n\n// Counters are created against prom-client's default registry — the\n// @routup/prometheus handler serves that registry, so no extra wiring is\n// needed. getSingleMetric keeps construction idempotent across app instances\n// in one process (prom-client throws on duplicate metric names).\nfunction getOrCreateCounter<T extends string>(\n    name: string,\n    help: string,\n    labelNames: T[] = [],\n): Counter<T> {\n    const existing = register.getSingleMetric(name);\n    if (existing) {\n        return existing as Counter<T>;\n    }\n\n    return new Counter<T>({\n        name, \n        help, \n        labelNames, \n    });\n}\n\nexport class PromAuthFlowMetrics implements IAuthFlowMetrics {\n    protected loginCounter: Counter<'result'>;\n\n    protected tokenGrantCounter: Counter<'grant_type'>;\n\n    protected authorizeCounter: Counter<'outcome'>;\n\n    protected refreshReplayCounter: Counter;\n\n    constructor() {\n        this.loginCounter = getOrCreateCounter(\n            'authup_login_total',\n            'Password-grant login attempts by result.',\n            ['result'],\n        );\n        this.tokenGrantCounter = getOrCreateCounter(\n            'authup_token_grant_total',\n            'Successful token grants by grant_type; failures appear in the http_request_duration status codes.',\n            ['grant_type'],\n        );\n        this.authorizeCounter = getOrCreateCounter(\n            'authup_authorize_total',\n            'Authorization decisions by outcome.',\n            ['outcome'],\n        );\n        this.refreshReplayCounter = getOrCreateCounter(\n            'authup_refresh_replay_total',\n            'Detected refresh-token replays (family revocations).',\n        );\n    }\n\n    recordLogin(result: AuthFlowLoginResult): void {\n        this.loginCounter.inc({ result });\n    }\n\n    recordTokenGrant(grantType: `${OAuth2TokenGrant}`): void {\n        this.tokenGrantCounter.inc({ grant_type: grantType });\n    }\n\n    recordAuthorize(outcome: AuthFlowAuthorizeOutcome): void {\n        this.authorizeCounter.inc({ outcome });\n    }\n\n    recordRefreshReplay(): void {\n        this.refreshReplayCounter.inc();\n    }\n}\n"],"mappings":";;;;;AAmBA,SAASE,mBACLC,MACAC,MACAC,aAAkB,CAAA,GAAE;CAEpB,MAAMC,WAAWL,SAASM,gBAAgBJ,IAAAA;CAC1C,IAAIG,UACA,OAAOA;CAGX,OAAO,IAAIN,QAAW;EAClBG;EACAC;EACAC;CACJ,CAAA;AACJ;AAEA,IAAaG,sBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,cAAc;EACV,KAAKH,eAAeP,mBAChB,sBACA,4CACA,CAAC,QAAS,CAAA;EAEd,KAAKQ,oBAAoBR,mBACrB,4BACA,qGACA,CAAC,YAAa,CAAA;EAElB,KAAKS,mBAAmBT,mBACpB,0BACA,uCACA,CAAC,SAAU,CAAA;EAEf,KAAKU,uBAAuBV,mBACxB,+BACA,sDAAA;CAER;CAEAW,YAAYC,QAAmC;EAC3C,KAAKL,aAAaM,IAAI,EAAED,OAAO,CAAA;CACnC;CAEAE,iBAAiBC,WAAwC;EACrD,KAAKP,kBAAkBK,IAAI,EAAEG,YAAYD,UAAU,CAAA;CACvD;CAEAE,gBAAgBC,SAAyC;EACrD,KAAKT,iBAAiBI,IAAI,EAAEK,QAAQ,CAAA;CACxC;CAEAC,sBAA4B;EACxB,KAAKT,qBAAqBG,IAAG;CACjC;AACJ"}

package/dist/app/modules/oauth2/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["SymmetricCipher","CacheInjectionKey","ModuleName","LoggerInjectionKey","ConsentRepositoryAdapter","OAuth2AuthorizationCodeRepository","OAuth2AuthorizationStateRepository","OAuth2ClientRepository","OAuth2ScopeRepository","OAuth2TokenRepository","SessionTokenRepositoryAdapter","KeyRepositoryAdapter","OAuth2AccessTokenIssuer","OAuth2AuthorizationCodeIssuer","OAuth2AuthorizationCodeRequestVerifier","OAuth2AuthorizationCodeVerifier","OAuth2AuthorizationStateManager","OAuth2MfaTokenIssuer","OAuth2OpenIDTokenIssuer","OAuth2RefreshTokenIssuer","OAuth2TokenRevoker","OAuth2TokenSigner","OAuth2TokenVerifier","OAuth2InjectionToken","IdentityInjectionKey","ClientEntity","ClientScopeEntity","ConfigInjectionKey","DatabaseInjectionKey","OAuth2Module","name","dependencies","OAUTH2","DATABASE","CACHE","CONFIG","IDENTITY","setup","container","config","resolve","register","ClientRepository","useFactory","c","repository","ScopeRepository","AuthorizationCodeRepository","cache","AuthorizationStateRepository","TokenRepository","SessionTokenRepository","DataSource","ConsentRepository","KeyStore","secretsCipher","secretsEncryptionKey","env","logger","warn","TokenSigner","keyStore","AuthorizationCodeIssuer","codeRepository","maxAge","tokenAccessMaxAge","AuthorizationCodeVerifier","AuthorizationCodeRequestVerifier","clientRepository","clientScopeRepository","scopeRepository","AuthorizationStateManager","stateRepository","TokenRevoker","tokenRepository","sessionTokenRepository","TokenVerifier","AccessTokenIssuer","tokenSigner","identityRoleProvider","RoleProvider","issuer","publicUrl","MfaTokenIssuer","mfaTicketMaxAge","RefreshTokenIssuer","tokenRefreshMaxAge","OpenIDTokenIssuer","signer","identityResolver","Resolver","options"],"sources":["../../../../src/app/modules/oauth2/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { SymmetricCipher } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { CacheInjectionKey } from '../cache/index.ts';\nimport type { IContainer } from 'eldin';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nimport {\n    ConsentRepositoryAdapter,\n    OAuth2AuthorizationCodeRepository,\n    OAuth2AuthorizationStateRepository,\n    OAuth2ClientRepository,\n    OAuth2ScopeRepository,\n    OAuth2TokenRepository,\n    SessionTokenRepositoryAdapter,\n} from './repositories/index.ts';\nimport { KeyRepositoryAdapter } from '../database/repositories/index.ts';\nimport {\n    OAuth2AccessTokenIssuer,\n    OAuth2AuthorizationCodeIssuer,\n    OAuth2AuthorizationCodeRequestVerifier,\n    OAuth2AuthorizationCodeVerifier,\n    OAuth2AuthorizationStateManager,\n    OAuth2MfaTokenIssuer,\n    OAuth2OpenIDTokenIssuer,\n    OAuth2RefreshTokenIssuer,\n    OAuth2TokenRevoker,\n    OAuth2TokenSigner,\n    OAuth2TokenVerifier,\n} from '../../../core/index.ts';\nimport { OAuth2InjectionToken } from './constants.ts';\nimport { IdentityInjectionKey } from '../identity/index.ts';\nimport { ClientEntity, ClientScopeEntity } from '../../../adapters/database/domains/index.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport { DatabaseInjectionKey } from '../database/index.ts';\n\nexport class OAuth2Module implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.OAUTH2;\n        this.dependencies = [ModuleName.DATABASE, ModuleName.CACHE, ModuleName.CONFIG, ModuleName.IDENTITY];\n    }\n\n    async setup(container: IContainer) : Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        container.register(OAuth2InjectionToken.ClientRepository, {\n            useFactory: (c) => {\n                const repository = c.resolve<Repository<ClientEntity>>(ClientEntity);\n                return new OAuth2ClientRepository(repository);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.ScopeRepository, {\n            useFactory: (c) => {\n                const repository = c.resolve<Repository<ClientScopeEntity>>(ClientScopeEntity);\n                return new OAuth2ScopeRepository(repository);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationCodeRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2AuthorizationCodeRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationStateRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2AuthorizationStateRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.TokenRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2TokenRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.SessionTokenRepository, {\n            useFactory: (c) => new SessionTokenRepositoryAdapter(\n                c.resolve(DatabaseInjectionKey.DataSource),\n            ),\n        });\n\n        container.register(OAuth2InjectionToken.ConsentRepository, {\n            useFactory: (c) => new ConsentRepositoryAdapter(\n                c.resolve(DatabaseInjectionKey.DataSource),\n            ),\n        });\n\n        container.register(OAuth2InjectionToken.KeyStore, {\n            // todo: cache use here\n            useFactory: (c) => {\n                const config = c.resolve(ConfigInjectionKey);\n\n                let secretsCipher : SymmetricCipher | null = null;\n                if (config.secretsEncryptionKey) {\n                    secretsCipher = new SymmetricCipher(config.secretsEncryptionKey);\n                } else if (config.env === 'production') {\n                    // parity posture without a KEK (Keycloak/authentik store key\n                    // material plaintext too) — but say so once, loudly.\n                    const logger = c.resolve(LoggerInjectionKey);\n                    logger.warn(\n                        'The realm key store persists key material unwrapped; ' +\n                        'set SECRETS_ENCRYPTION_KEY to wrap it at rest.',\n                    );\n                }\n\n                return new KeyRepositoryAdapter(c.resolve(DatabaseInjectionKey.DataSource), { secretsCipher });\n            },\n        });\n\n        container.register(OAuth2InjectionToken.TokenSigner, {\n            useFactory: (c) => {\n                const keyStore = c.resolve(OAuth2InjectionToken.KeyStore);\n                return new OAuth2TokenSigner(keyStore);\n            },\n        });\n\n        // authorization code issuer\n        container.register(OAuth2InjectionToken.AuthorizationCodeIssuer, {\n            useFactory: (c) => {\n                const codeRepository = c.resolve(OAuth2InjectionToken.AuthorizationCodeRepository);\n\n                return new OAuth2AuthorizationCodeIssuer(\n                    codeRepository,\n                    {\n                        // todo: own constant here\n                        maxAge: config.tokenAccessMaxAge,\n                    },\n                );\n            },\n        });\n        container.register(OAuth2InjectionToken.AuthorizationCodeVerifier, {\n            useFactory: (c) => {\n                const codeRepository = c.resolve(OAuth2InjectionToken.AuthorizationCodeRepository);\n\n                return new OAuth2AuthorizationCodeVerifier(codeRepository);\n            },\n        });\n\n        // authorization code request verifier\n        container.register(OAuth2InjectionToken.AuthorizationCodeRequestVerifier, {\n            useFactory: (c) => {\n                const clientRepository = c.resolve(OAuth2InjectionToken.ClientRepository);\n                const clientScopeRepository = c.resolve(OAuth2InjectionToken.ScopeRepository);\n\n                return new OAuth2AuthorizationCodeRequestVerifier({\n                    clientRepository,\n                    scopeRepository: clientScopeRepository,\n                });\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationStateManager, {\n            useFactory: (c) => {\n                const stateRepository = c.resolve(OAuth2InjectionToken.AuthorizationStateRepository);\n\n                return new OAuth2AuthorizationStateManager(stateRepository);\n            },\n        });\n\n        // token revoker\n        container.register(OAuth2InjectionToken.TokenRevoker, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);\n                return new OAuth2TokenRevoker(tokenRepository, sessionTokenRepository);\n            },\n        });\n\n        // token verifier\n        container.register(OAuth2InjectionToken.TokenVerifier, {\n            useFactory: (c) => {\n                const keyStore = c.resolve(OAuth2InjectionToken.KeyStore);\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n\n                return new OAuth2TokenVerifier(keyStore, tokenRepository);\n            },\n        });\n\n        // access token issuer\n        container.register(OAuth2InjectionToken.AccessTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n                const identityRoleProvider = c.resolve(IdentityInjectionKey.RoleProvider);\n                const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);\n                return new OAuth2AccessTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.tokenAccessMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                    identityRoleProvider,\n                    sessionTokenRepository,\n                );\n            },\n        });\n\n        // mfa login-ticket issuer\n        container.register(OAuth2InjectionToken.MfaTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n\n                return new OAuth2MfaTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.mfaTicketMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                );\n            },\n        });\n\n        // refresh token issuer\n        container.register(OAuth2InjectionToken.RefreshTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n                const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);\n\n                return new OAuth2RefreshTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.tokenRefreshMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                    sessionTokenRepository,\n                );\n            },\n        });\n\n        // open-id token issuer\n        container.register(OAuth2InjectionToken.OpenIDTokenIssuer, {\n            useFactory: (c) => {\n                const repository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const signer = c.resolve(OAuth2InjectionToken.TokenSigner);\n                const identityResolver = c.resolve(IdentityInjectionKey.Resolver);\n\n                return new OAuth2OpenIDTokenIssuer({\n                    repository,\n                    signer,\n\n                    identityResolver,\n\n                    options: {\n                        // todo: own constant here\n                        maxAge: config.tokenAccessMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                });\n            },\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CA,IAAa6B,eAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAO5B,WAAW8B;EACvB,KAAKD,eAAe;GAAC7B,WAAW+B;GAAU/B,WAAWgC;GAAOhC,WAAWiC;GAAQjC,WAAWkC;;CAC9F;CAEA,MAAMC,MAAMC,WAAuC;EAC/C,MAAMC,SAASD,UAAUE,QAAQb,kBAAAA;EAEjCW,UAAUG,SAASlB,qBAAqBmB,kBAAkB,EACtDC,aAAaC,MAAAA;GAET,OAAO,IAAIrC,uBADQqC,EAAEJ,QAAkCf,YACrBoB,CAAAA;EACtC,EACJ,CAAA;EAEAP,UAAUG,SAASlB,qBAAqBuB,iBAAiB,EACrDH,aAAaC,MAAAA;GAET,OAAO,IAAIpC,sBADQoC,EAAEJ,QAAuCd,iBAC3BmB,CAAAA;EACrC,EACJ,CAAA;EAEAP,UAAUG,SAASlB,qBAAqBwB,6BAA6B,EACjEJ,aAAaC,MAAAA;GAET,OAAO,IAAIvC,kCADGuC,EAAEJ,QAAQvC,iBACqB+C,CAAAA;EACjD,EACJ,CAAA;EAEAV,UAAUG,SAASlB,qBAAqB0B,8BAA8B,EAClEN,aAAaC,MAAAA;GAET,OAAO,IAAItC,mCADGsC,EAAEJ,QAAQvC,iBACsB+C,CAAAA;EAClD,EACJ,CAAA;EAEAV,UAAUG,SAASlB,qBAAqB2B,iBAAiB,EACrDP,aAAaC,MAAAA;GAET,OAAO,IAAInC,sBADGmC,EAAEJ,QAAQvC,iBACS+C,CAAAA;EACrC,EACJ,CAAA;EAEAV,UAAUG,SAASlB,qBAAqB4B,wBAAwB,EAC5DR,aAAaC,MAAM,IAAIlC,8BACnBkC,EAAEJ,QAAQZ,qBAAqBwB,UAAU,CAAA,EAEjD,CAAA;EAEAd,UAAUG,SAASlB,qBAAqB8B,mBAAmB,EACvDV,aAAaC,MAAM,IAAIxC,yBACnBwC,EAAEJ,QAAQZ,qBAAqBwB,UAAU,CAAA,EAEjD,CAAA;EAEAd,UAAUG,SAASlB,qBAAqB+B,UAAU,EAE9CX,aAAaC,MAAAA;GACT,MAAML,SAASK,EAAEJ,QAAQb,kBAAAA;GAEzB,IAAI4B,gBAAyC;GAC7C,IAAIhB,OAAOiB,sBACPD,gBAAgB,IAAIvD,gBAAgBuC,OAAOiB,oBAAoB;QAC5D,IAAIjB,OAAOkB,QAAQ,cAItBC,EADiBlB,QAAQrC,kBACzBuD,CAAAA,CAAOC,KACH,qGACA;GAIR,OAAO,IAAIhD,qBAAqBiC,EAAEJ,QAAQZ,qBAAqBwB,UAAU,GAAG,EAAEG,cAAc,CAAA;EAChG,EACJ,CAAA;EAEAjB,UAAUG,SAASlB,qBAAqBqC,aAAa,EACjDjB,aAAaC,MAAAA;GAET,OAAO,IAAIvB,kBADMuB,EAAEJ,QAAQjB,qBAAqB+B,QACnBO,CAAAA;EACjC,EACJ,CAAA;EAGAvB,UAAUG,SAASlB,qBAAqBuC,yBAAyB,EAC7DnB,aAAaC,MAAAA;GAGT,OAAO,IAAI/B,8BAFY+B,EAAEJ,QAAQjB,qBAAqBwB,2BAGlDgB,GACA,EAEIC,QAAQzB,OAAO0B,kBACnB,CAAA;EAER,EACJ,CAAA;EACA3B,UAAUG,SAASlB,qBAAqB2C,2BAA2B,EAC/DvB,aAAaC,MAAAA;GAGT,OAAO,IAAI7B,gCAFY6B,EAAEJ,QAAQjB,qBAAqBwB,2BAEXgB,CAAAA;EAC/C,EACJ,CAAA;EAGAzB,UAAUG,SAASlB,qBAAqB4C,kCAAkC,EACtExB,aAAaC,MAAAA;GAIT,OAAO,IAAI9B,uCAAuC;IAC9CsD,kBAJqBxB,EAAEJ,QAAQjB,qBAAqBmB,gBAIpD0B;IACAE,iBAJ0B1B,EAAEJ,QAAQjB,qBAAqBuB,eAIxCuB;GACrB,CAAA;EACJ,EACJ,CAAA;EAEA/B,UAAUG,SAASlB,qBAAqBgD,2BAA2B,EAC/D5B,aAAaC,MAAAA;GAGT,OAAO,IAAI5B,gCAFa4B,EAAEJ,QAAQjB,qBAAqB0B,4BAEZuB,CAAAA;EAC/C,EACJ,CAAA;EAGAlC,UAAUG,SAASlB,qBAAqBkD,cAAc,EAClD9B,aAAaC,MAAAA;GAGT,OAAO,IAAIxB,mBAFawB,EAAEJ,QAAQjB,qBAAqB2B,eAEzBwB,GADC9B,EAAEJ,QAAQjB,qBAAqB4B,sBACfwB,CAAAA;EACnD,EACJ,CAAA;EAGArC,UAAUG,SAASlB,qBAAqBqD,eAAe,EACnDjC,aAAaC,MAAAA;GAIT,OAAO,IAAItB,oBAHMsB,EAAEJ,QAAQjB,qBAAqB+B,QAGjBO,GAFPjB,EAAEJ,QAAQjB,qBAAqB2B,eAEdwB,CAAAA;EAC7C,EACJ,CAAA;EAGApC,UAAUG,SAASlB,qBAAqBsD,mBAAmB,EACvDlC,aAAaC,MAAAA;GACT,MAAM8B,kBAAkB9B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACtE,MAAM4B,cAAclC,EAAEJ,QAAQjB,qBAAqBqC,WAAW;GAC9D,MAAMmB,uBAAuBnC,EAAEJ,QAAQhB,qBAAqBwD,YAAY;GACxE,MAAML,yBAAyB/B,EAAEJ,QAAQjB,qBAAqB4B,sBAAsB;GACpF,OAAO,IAAIvC,wBACP8D,iBACAI,aACA;IACId,QAAQzB,OAAO0B;IACfgB,QAAQ1C,OAAO2C;GACnB,GACAH,sBACAJ,sBAAAA;EAER,EACJ,CAAA;EAGArC,UAAUG,SAASlB,qBAAqB4D,gBAAgB,EACpDxC,aAAaC,MAAAA;GAIT,OAAO,IAAI3B,qBAHa2B,EAAEJ,QAAQjB,qBAAqB2B,eAInDwB,GAHgB9B,EAAEJ,QAAQjB,qBAAqBqC,WAI/CkB,GACA;IACId,QAAQzB,OAAO6C;IACfH,QAAQ1C,OAAO2C;GACnB,CAAA;EAER,EACJ,CAAA;EAGA5C,UAAUG,SAASlB,qBAAqB8D,oBAAoB,EACxD1C,aAAaC,MAAAA;GACT,MAAM8B,kBAAkB9B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACtE,MAAM4B,cAAclC,EAAEJ,QAAQjB,qBAAqBqC,WAAW;GAC9D,MAAMe,yBAAyB/B,EAAEJ,QAAQjB,qBAAqB4B,sBAAsB;GAEpF,OAAO,IAAIhC,yBACPuD,iBACAI,aACA;IACId,QAAQzB,OAAO+C;IACfL,QAAQ1C,OAAO2C;GACnB,GACAP,sBAAAA;EAER,EACJ,CAAA;EAGArC,UAAUG,SAASlB,qBAAqBgE,mBAAmB,EACvD5C,aAAaC,MAAAA;GAKT,OAAO,IAAI1B,wBAAwB;IAC/B2B,YALeD,EAAEJ,QAAQjB,qBAAqB2B,eAK9CL;IACA2C,QALW5C,EAAEJ,QAAQjB,qBAAqBqC,WAK1C4B;IAEAC,kBANqB7C,EAAEJ,QAAQhB,qBAAqBkE,QAMpDD;IAEAE,SAAS;KAEL3B,QAAQzB,OAAO0B;KACfgB,QAAQ1C,OAAO2C;IACnB;GACJ,CAAA;EACJ,EACJ,CAAA;CACJ;AACJ"}
+{"version":3,"file":"module.mjs","names":["SymmetricCipher","CacheInjectionKey","ModuleName","LoggerInjectionKey","ConsentRepositoryAdapter","OAuth2AuthorizationCodeRepository","OAuth2AuthorizationStateRepository","OAuth2ClientRepository","OAuth2ScopeRepository","OAuth2TokenRepository","SessionTokenRepositoryAdapter","KeyRepositoryAdapter","OAuth2AccessTokenIssuer","OAuth2AuthorizationCodeIssuer","OAuth2AuthorizationCodeRequestVerifier","OAuth2AuthorizationCodeVerifier","OAuth2AuthorizationStateManager","OAuth2MfaTokenIssuer","OAuth2OpenIDTokenIssuer","OAuth2RefreshTokenIssuer","OAuth2TokenRevoker","OAuth2TokenSigner","OAuth2TokenVerifier","OAuth2InjectionToken","IdentityInjectionKey","ClientEntity","ClientScopeEntity","ConfigInjectionKey","DatabaseInjectionKey","OAuth2Module","name","dependencies","OAUTH2","DATABASE","CACHE","CONFIG","IDENTITY","setup","container","config","resolve","register","ClientRepository","useFactory","c","repository","ScopeRepository","AuthorizationCodeRepository","cache","AuthorizationStateRepository","TokenRepository","SessionTokenRepository","DataSource","ConsentRepository","KeyStore","secretsCipher","secretsEncryptionKey","env","logger","warn","TokenSigner","keyStore","AuthorizationCodeIssuer","codeRepository","maxAge","tokenAccessMaxAge","AuthorizationCodeVerifier","AuthorizationCodeRequestVerifier","clientRepository","clientScopeRepository","scopeRepository","AuthorizationStateManager","stateRepository","TokenRevoker","tokenRepository","sessionTokenRepository","TokenVerifier","AccessTokenIssuer","tokenSigner","identityRoleProvider","RoleProvider","issuer","publicUrl","MfaTokenIssuer","mfaTicketMaxAge","RefreshTokenIssuer","tokenRefreshMaxAge","OpenIDTokenIssuer","signer","identityResolver","Resolver","options"],"sources":["../../../../src/app/modules/oauth2/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { SymmetricCipher } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { CacheInjectionKey } from '../cache/index.ts';\nimport type { IContainer } from 'eldin';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nimport {\n    ConsentRepositoryAdapter,\n    OAuth2AuthorizationCodeRepository,\n    OAuth2AuthorizationStateRepository,\n    OAuth2ClientRepository,\n    OAuth2ScopeRepository,\n    OAuth2TokenRepository,\n    SessionTokenRepositoryAdapter,\n} from './repositories/index.ts';\nimport { KeyRepositoryAdapter } from '../database/repositories/index.ts';\nimport {\n    OAuth2AccessTokenIssuer,\n    OAuth2AuthorizationCodeIssuer,\n    OAuth2AuthorizationCodeRequestVerifier,\n    OAuth2AuthorizationCodeVerifier,\n    OAuth2AuthorizationStateManager,\n    OAuth2MfaTokenIssuer,\n    OAuth2OpenIDTokenIssuer,\n    OAuth2RefreshTokenIssuer,\n    OAuth2TokenRevoker,\n    OAuth2TokenSigner,\n    OAuth2TokenVerifier,\n} from '../../../core/index.ts';\nimport { OAuth2InjectionToken } from './constants.ts';\nimport { IdentityInjectionKey } from '../identity/index.ts';\nimport { ClientEntity, ClientScopeEntity } from '../../../adapters/database/domains/index.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport { DatabaseInjectionKey } from '../database/index.ts';\n\nexport class OAuth2Module implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.OAUTH2;\n        this.dependencies = [ModuleName.DATABASE, ModuleName.CACHE, ModuleName.CONFIG, ModuleName.IDENTITY];\n    }\n\n    async setup(container: IContainer) : Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        container.register(OAuth2InjectionToken.ClientRepository, {\n            useFactory: (c) => {\n                const repository = c.resolve<Repository<ClientEntity>>(ClientEntity);\n                return new OAuth2ClientRepository(repository);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.ScopeRepository, {\n            useFactory: (c) => {\n                const repository = c.resolve<Repository<ClientScopeEntity>>(ClientScopeEntity);\n                return new OAuth2ScopeRepository(repository);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationCodeRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2AuthorizationCodeRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationStateRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2AuthorizationStateRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.TokenRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2TokenRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.SessionTokenRepository, {\n            useFactory: (c) => new SessionTokenRepositoryAdapter(\n                c.resolve(DatabaseInjectionKey.DataSource),\n            ),\n        });\n\n        container.register(OAuth2InjectionToken.ConsentRepository, {\n            useFactory: (c) => new ConsentRepositoryAdapter(\n                c.resolve(DatabaseInjectionKey.DataSource),\n            ),\n        });\n\n        container.register(OAuth2InjectionToken.KeyStore, {\n            // todo: cache use here\n            useFactory: (c) => {\n                const config = c.resolve(ConfigInjectionKey);\n\n                let secretsCipher : SymmetricCipher | null = null;\n                if (config.secretsEncryptionKey) {\n                    secretsCipher = new SymmetricCipher(config.secretsEncryptionKey);\n                } else if (config.env === 'production') {\n                    // parity posture without a KEK (Keycloak/authentik store key\n                    // material plaintext too) — but say so once, loudly.\n                    const logger = c.resolve(LoggerInjectionKey);\n                    logger.warn(\n                        'The realm key store persists key material unwrapped; ' +\n                        'set SECRETS_ENCRYPTION_KEY to wrap it at rest.',\n                    );\n                }\n\n                return new KeyRepositoryAdapter(c.resolve(DatabaseInjectionKey.DataSource), { secretsCipher });\n            },\n        });\n\n        container.register(OAuth2InjectionToken.TokenSigner, {\n            useFactory: (c) => {\n                const keyStore = c.resolve(OAuth2InjectionToken.KeyStore);\n                return new OAuth2TokenSigner(keyStore);\n            },\n        });\n\n        // authorization code issuer\n        container.register(OAuth2InjectionToken.AuthorizationCodeIssuer, {\n            useFactory: (c) => {\n                const codeRepository = c.resolve(OAuth2InjectionToken.AuthorizationCodeRepository);\n\n                return new OAuth2AuthorizationCodeIssuer(\n                    codeRepository,\n                    {\n                        // todo: own constant here\n                        maxAge: config.tokenAccessMaxAge,\n                    },\n                );\n            },\n        });\n        container.register(OAuth2InjectionToken.AuthorizationCodeVerifier, {\n            useFactory: (c) => {\n                const codeRepository = c.resolve(OAuth2InjectionToken.AuthorizationCodeRepository);\n\n                return new OAuth2AuthorizationCodeVerifier(codeRepository);\n            },\n        });\n\n        // authorization code request verifier\n        container.register(OAuth2InjectionToken.AuthorizationCodeRequestVerifier, {\n            useFactory: (c) => {\n                const clientRepository = c.resolve(OAuth2InjectionToken.ClientRepository);\n                const clientScopeRepository = c.resolve(OAuth2InjectionToken.ScopeRepository);\n\n                return new OAuth2AuthorizationCodeRequestVerifier({\n                    clientRepository,\n                    scopeRepository: clientScopeRepository,\n                });\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationStateManager, {\n            useFactory: (c) => {\n                const stateRepository = c.resolve(OAuth2InjectionToken.AuthorizationStateRepository);\n\n                return new OAuth2AuthorizationStateManager(stateRepository);\n            },\n        });\n\n        // token revoker\n        container.register(OAuth2InjectionToken.TokenRevoker, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);\n                return new OAuth2TokenRevoker(tokenRepository, sessionTokenRepository);\n            },\n        });\n\n        // token verifier\n        container.register(OAuth2InjectionToken.TokenVerifier, {\n            useFactory: (c) => {\n                const keyStore = c.resolve(OAuth2InjectionToken.KeyStore);\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n\n                return new OAuth2TokenVerifier(keyStore, tokenRepository);\n            },\n        });\n\n        // access token issuer\n        container.register(OAuth2InjectionToken.AccessTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n                const identityRoleProvider = c.resolve(IdentityInjectionKey.RoleProvider);\n                const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);\n                return new OAuth2AccessTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.tokenAccessMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                    identityRoleProvider,\n                    sessionTokenRepository,\n                );\n            },\n        });\n\n        // mfa login-ticket issuer\n        container.register(OAuth2InjectionToken.MfaTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n\n                return new OAuth2MfaTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.mfaTicketMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                );\n            },\n        });\n\n        // refresh token issuer\n        container.register(OAuth2InjectionToken.RefreshTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n                const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);\n\n                return new OAuth2RefreshTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.tokenRefreshMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                    sessionTokenRepository,\n                );\n            },\n        });\n\n        // open-id token issuer\n        container.register(OAuth2InjectionToken.OpenIDTokenIssuer, {\n            useFactory: (c) => {\n                const repository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const signer = c.resolve(OAuth2InjectionToken.TokenSigner);\n                const identityResolver = c.resolve(IdentityInjectionKey.Resolver);\n\n                return new OAuth2OpenIDTokenIssuer({\n                    repository,\n                    signer,\n\n                    identityResolver,\n\n                    options: {\n                        // todo: own constant here\n                        maxAge: config.tokenAccessMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                });\n            },\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CA,IAAa6B,eAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAO5B,WAAW8B;EACvB,KAAKD,eAAe;GAAC7B,WAAW+B;GAAU/B,WAAWgC;GAAOhC,WAAWiC;GAAQjC,WAAWkC;EAAS;CACvG;CAEA,MAAMC,MAAMC,WAAuC;EAC/C,MAAMC,SAASD,UAAUE,QAAQb,kBAAAA;EAEjCW,UAAUG,SAASlB,qBAAqBmB,kBAAkB,EACtDC,aAAaC,MAAAA;GAET,OAAO,IAAIrC,uBADQqC,EAAEJ,QAAkCf,YACrBoB,CAAAA;EACtC,EACJ,CAAA;EAEAP,UAAUG,SAASlB,qBAAqBuB,iBAAiB,EACrDH,aAAaC,MAAAA;GAET,OAAO,IAAIpC,sBADQoC,EAAEJ,QAAuCd,iBAC3BmB,CAAAA;EACrC,EACJ,CAAA;EAEAP,UAAUG,SAASlB,qBAAqBwB,6BAA6B,EACjEJ,aAAaC,MAAAA;GAET,OAAO,IAAIvC,kCADGuC,EAAEJ,QAAQvC,iBACqB+C,CAAAA;EACjD,EACJ,CAAA;EAEAV,UAAUG,SAASlB,qBAAqB0B,8BAA8B,EAClEN,aAAaC,MAAAA;GAET,OAAO,IAAItC,mCADGsC,EAAEJ,QAAQvC,iBACsB+C,CAAAA;EAClD,EACJ,CAAA;EAEAV,UAAUG,SAASlB,qBAAqB2B,iBAAiB,EACrDP,aAAaC,MAAAA;GAET,OAAO,IAAInC,sBADGmC,EAAEJ,QAAQvC,iBACS+C,CAAAA;EACrC,EACJ,CAAA;EAEAV,UAAUG,SAASlB,qBAAqB4B,wBAAwB,EAC5DR,aAAaC,MAAM,IAAIlC,8BACnBkC,EAAEJ,QAAQZ,qBAAqBwB,UAAU,CAAA,EAEjD,CAAA;EAEAd,UAAUG,SAASlB,qBAAqB8B,mBAAmB,EACvDV,aAAaC,MAAM,IAAIxC,yBACnBwC,EAAEJ,QAAQZ,qBAAqBwB,UAAU,CAAA,EAEjD,CAAA;EAEAd,UAAUG,SAASlB,qBAAqB+B,UAAU,EAE9CX,aAAaC,MAAAA;GACT,MAAML,SAASK,EAAEJ,QAAQb,kBAAAA;GAEzB,IAAI4B,gBAAyC;GAC7C,IAAIhB,OAAOiB,sBACPD,gBAAgB,IAAIvD,gBAAgBuC,OAAOiB,oBAAoB;QAC5D,IAAIjB,OAAOkB,QAAQ,cAItBC,EADiBlB,QAAQrC,kBACzBuD,CAAAA,CAAOC,KACH,qGACA;GAIR,OAAO,IAAIhD,qBAAqBiC,EAAEJ,QAAQZ,qBAAqBwB,UAAU,GAAG,EAAEG,cAAc,CAAA;EAChG,EACJ,CAAA;EAEAjB,UAAUG,SAASlB,qBAAqBqC,aAAa,EACjDjB,aAAaC,MAAAA;GAET,OAAO,IAAIvB,kBADMuB,EAAEJ,QAAQjB,qBAAqB+B,QACnBO,CAAAA;EACjC,EACJ,CAAA;EAGAvB,UAAUG,SAASlB,qBAAqBuC,yBAAyB,EAC7DnB,aAAaC,MAAAA;GAGT,OAAO,IAAI/B,8BAFY+B,EAAEJ,QAAQjB,qBAAqBwB,2BAGlDgB,GACA,EAEIC,QAAQzB,OAAO0B,kBACnB,CAAA;EAER,EACJ,CAAA;EACA3B,UAAUG,SAASlB,qBAAqB2C,2BAA2B,EAC/DvB,aAAaC,MAAAA;GAGT,OAAO,IAAI7B,gCAFY6B,EAAEJ,QAAQjB,qBAAqBwB,2BAEXgB,CAAAA;EAC/C,EACJ,CAAA;EAGAzB,UAAUG,SAASlB,qBAAqB4C,kCAAkC,EACtExB,aAAaC,MAAAA;GAIT,OAAO,IAAI9B,uCAAuC;IAC9CsD,kBAJqBxB,EAAEJ,QAAQjB,qBAAqBmB,gBAIpD0B;IACAE,iBAJ0B1B,EAAEJ,QAAQjB,qBAAqBuB,eAIxCuB;GACrB,CAAA;EACJ,EACJ,CAAA;EAEA/B,UAAUG,SAASlB,qBAAqBgD,2BAA2B,EAC/D5B,aAAaC,MAAAA;GAGT,OAAO,IAAI5B,gCAFa4B,EAAEJ,QAAQjB,qBAAqB0B,4BAEZuB,CAAAA;EAC/C,EACJ,CAAA;EAGAlC,UAAUG,SAASlB,qBAAqBkD,cAAc,EAClD9B,aAAaC,MAAAA;GAGT,OAAO,IAAIxB,mBAFawB,EAAEJ,QAAQjB,qBAAqB2B,eAEzBwB,GADC9B,EAAEJ,QAAQjB,qBAAqB4B,sBACfwB,CAAAA;EACnD,EACJ,CAAA;EAGArC,UAAUG,SAASlB,qBAAqBqD,eAAe,EACnDjC,aAAaC,MAAAA;GAIT,OAAO,IAAItB,oBAHMsB,EAAEJ,QAAQjB,qBAAqB+B,QAGjBO,GAFPjB,EAAEJ,QAAQjB,qBAAqB2B,eAEdwB,CAAAA;EAC7C,EACJ,CAAA;EAGApC,UAAUG,SAASlB,qBAAqBsD,mBAAmB,EACvDlC,aAAaC,MAAAA;GACT,MAAM8B,kBAAkB9B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACtE,MAAM4B,cAAclC,EAAEJ,QAAQjB,qBAAqBqC,WAAW;GAC9D,MAAMmB,uBAAuBnC,EAAEJ,QAAQhB,qBAAqBwD,YAAY;GACxE,MAAML,yBAAyB/B,EAAEJ,QAAQjB,qBAAqB4B,sBAAsB;GACpF,OAAO,IAAIvC,wBACP8D,iBACAI,aACA;IACId,QAAQzB,OAAO0B;IACfgB,QAAQ1C,OAAO2C;GACnB,GACAH,sBACAJ,sBAAAA;EAER,EACJ,CAAA;EAGArC,UAAUG,SAASlB,qBAAqB4D,gBAAgB,EACpDxC,aAAaC,MAAAA;GAIT,OAAO,IAAI3B,qBAHa2B,EAAEJ,QAAQjB,qBAAqB2B,eAInDwB,GAHgB9B,EAAEJ,QAAQjB,qBAAqBqC,WAI/CkB,GACA;IACId,QAAQzB,OAAO6C;IACfH,QAAQ1C,OAAO2C;GACnB,CAAA;EAER,EACJ,CAAA;EAGA5C,UAAUG,SAASlB,qBAAqB8D,oBAAoB,EACxD1C,aAAaC,MAAAA;GACT,MAAM8B,kBAAkB9B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACtE,MAAM4B,cAAclC,EAAEJ,QAAQjB,qBAAqBqC,WAAW;GAC9D,MAAMe,yBAAyB/B,EAAEJ,QAAQjB,qBAAqB4B,sBAAsB;GAEpF,OAAO,IAAIhC,yBACPuD,iBACAI,aACA;IACId,QAAQzB,OAAO+C;IACfL,QAAQ1C,OAAO2C;GACnB,GACAP,sBAAAA;EAER,EACJ,CAAA;EAGArC,UAAUG,SAASlB,qBAAqBgE,mBAAmB,EACvD5C,aAAaC,MAAAA;GAKT,OAAO,IAAI1B,wBAAwB;IAC/B2B,YALeD,EAAEJ,QAAQjB,qBAAqB2B,eAK9CL;IACA2C,QALW5C,EAAEJ,QAAQjB,qBAAqBqC,WAK1C4B;IAEAC,kBANqB7C,EAAEJ,QAAQhB,qBAAqBkE,QAMpDD;IAEAE,SAAS;KAEL3B,QAAQzB,OAAO0B;KACfgB,QAAQ1C,OAAO2C;IACnB;GACJ,CAAA;EACJ,EACJ,CAAA;CACJ;AACJ"}

package/dist/app/modules/oauth2/repositories/client/repository.mjs

@@ -13,7 +13,7 @@ var OAuth2ClientRepository = class {
 		if (isUUID(key)) query.where("client.id = :id", { id: key });
 		else {
 			query.where("client.name = :name", { name: key.trim().toLowerCase() });
-			if (realmKey) if (isUUID(realmKey)) query.andWhere("client.realm_id = :realmId", { realmId: realmKey });
+			if (realmKey) if (isUUID(realmKey)) query.andWhere("client.realmId = :realmId", { realmId: realmKey });
 			else query.andWhere("realm.name = :realmName", { realmName: realmKey.trim().toLowerCase() });
 		}
 		return query.getOne();

package/dist/app/modules/oauth2/repositories/client/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["isUUID","OAuth2ClientRepository","repository","findOneByIdOrName","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","where","id","name","trim","toLowerCase","andWhere","realmId","realmName","getOne"],"sources":["../../../../../../src/app/modules/oauth2/repositories/client/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Client } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport type { IOAuth2ClientRepository } from '../../../../../core/index.ts';\n\nexport class OAuth2ClientRepository implements IOAuth2ClientRepository {\n    private readonly repository: Repository<Client>;\n\n    constructor(\n        repository: Repository<Client>,\n    ) {\n        this.repository = repository;\n    }\n\n    async findOneByIdOrName(key: string, realmKey?: string): Promise<Client | null> {\n        const query = this.repository.createQueryBuilder('client')\n            .leftJoinAndSelect('client.realm', 'realm');\n\n        if (isUUID(key)) {\n            query.where('client.id = :id', { id: key });\n        } else {\n            query.where('client.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('client.realm_id = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        return query.getOne();\n    }\n}\n"],"mappings":";;;;;AAYA,IAAaC,yBAAb,MAAaA;CACQC;CAEjB,YACIA,YACF;EACE,KAAKA,aAAaA;CACtB;CAEA,MAAMC,kBAAkBC,KAAaC,UAA2C;EAC5E,MAAMC,QAAQ,KAAKJ,WAAWK,mBAAmB,QAAA,CAAA,CAC5CC,kBAAkB,gBAAgB,OAAA;EAEvC,IAAIR,OAAOI,GAAAA,GACPE,MAAMG,MAAM,mBAAmB,EAAEC,IAAIN,IAAI,CAAA;OACtC;GACHE,MAAMG,MAAM,uBAAuB,EAAEE,MAAMP,IAAIQ,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAEpE,IAAIR,UACA,IAAIL,OAAOK,QAAAA,GACPC,MAAMQ,SAAS,8BAA8B,EAAEC,SAASV,SAAS,CAAA;QAEjEC,MAAMQ,SAAS,2BAA2B,EAAEE,WAAWX,SAASO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EAEA,OAAOP,MAAMW,OAAM;CACvB;AACJ"}
+{"version":3,"file":"repository.mjs","names":["isUUID","OAuth2ClientRepository","repository","findOneByIdOrName","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","where","id","name","trim","toLowerCase","andWhere","realmId","realmName","getOne"],"sources":["../../../../../../src/app/modules/oauth2/repositories/client/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Client } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport type { IOAuth2ClientRepository } from '../../../../../core/index.ts';\n\nexport class OAuth2ClientRepository implements IOAuth2ClientRepository {\n    private readonly repository: Repository<Client>;\n\n    constructor(\n        repository: Repository<Client>,\n    ) {\n        this.repository = repository;\n    }\n\n    async findOneByIdOrName(key: string, realmKey?: string): Promise<Client | null> {\n        const query = this.repository.createQueryBuilder('client')\n            .leftJoinAndSelect('client.realm', 'realm');\n\n        if (isUUID(key)) {\n            query.where('client.id = :id', { id: key });\n        } else {\n            query.where('client.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('client.realmId = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        return query.getOne();\n    }\n}\n"],"mappings":";;;;;AAYA,IAAaC,yBAAb,MAAaA;CACQC;CAEjB,YACIA,YACF;EACE,KAAKA,aAAaA;CACtB;CAEA,MAAMC,kBAAkBC,KAAaC,UAA2C;EAC5E,MAAMC,QAAQ,KAAKJ,WAAWK,mBAAmB,QAAA,CAAA,CAC5CC,kBAAkB,gBAAgB,OAAA;EAEvC,IAAIR,OAAOI,GAAAA,GACPE,MAAMG,MAAM,mBAAmB,EAAEC,IAAIN,IAAI,CAAA;OACtC;GACHE,MAAMG,MAAM,uBAAuB,EAAEE,MAAMP,IAAIQ,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAEpE,IAAIR,UACA,IAAIL,OAAOK,QAAAA,GACPC,MAAMQ,SAAS,6BAA6B,EAAEC,SAASV,SAAS,CAAA;QAEhEC,MAAMQ,SAAS,2BAA2B,EAAEE,WAAWX,SAASO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EAEA,OAAOP,MAAMW,OAAM;CACvB;AACJ"}

package/dist/app/modules/oauth2/repositories/consent/repository.d.ts

@@ -1,4 +1,5 @@
 import type { Consent } from '@authup/core-kit';
+import type { IQuery } from '@rapiq/core';
 import type { EntityRepositoryFindManyResult } from '@authup/server-kit';
 import type { DataSource, Repository } from 'typeorm';
 import { ConsentEntity } from '../../../../../adapters/database/domains/index.ts';
@@ -6,7 +7,7 @@ import type { ConsentFindManyOptions, ConsentOwner, IConsentRepository } from '.
 export declare class ConsentRepositoryAdapter implements IConsentRepository {
     protected repository: Repository<ConsentEntity>;
     constructor(dataSource: DataSource);
-    findMany(query: Record<string, any>, options?: ConsentFindManyOptions): Promise<EntityRepositoryFindManyResult<Consent>>;
+    findMany(query: IQuery, options?: ConsentFindManyOptions): Promise<EntityRepositoryFindManyResult<Consent>>;
     findOneById(id: string): Promise<Consent | null>;
     findAllBySubjectClient(clientId: string, owner: ConsentOwner): Promise<Consent[]>;
     insertMissing(input: {

package/dist/app/modules/oauth2/repositories/consent/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/oauth2/repositories/consent/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAEzE,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEtD,OAAO,EAAe,aAAa,EAAE,MAAM,mDAAmD,CAAC;AAE/F,OAAO,KAAK,EACR,sBAAsB,EACtB,YAAY,EACZ,kBAAkB,EACrB,MAAM,8BAA8B,CAAC;AAItC,qBAAa,wBAAyB,YAAW,kBAAkB;IAC/D,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;gBAEpC,UAAU,EAAE,UAAU;IAI5B,QAAQ,CACV,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,OAAO,GAAE,sBAA2B,GACrC,OAAO,CAAC,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAyE7C,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIhD,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAkBjF,aAAa,CAAC,KAAK,EAAE;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,YAAY,CAAC;QACpB,MAAM,EAAE,MAAM,EAAE,CAAA;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8CX,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/C"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/oauth2/repositories/consent/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAEzE,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEtD,OAAO,EAAe,aAAa,EAAE,MAAM,mDAAmD,CAAC;AAE/F,OAAO,KAAK,EACR,sBAAsB,EACtB,YAAY,EACZ,kBAAkB,EACrB,MAAM,8BAA8B,CAAC;AAGtC,qBAAa,wBAAyB,YAAW,kBAAkB;IAC/D,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;gBAEpC,UAAU,EAAE,UAAU;IAI5B,QAAQ,CACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,sBAA2B,GACrC,OAAO,CAAC,8BAA8B,CAAC,OAAO,CAAC,CAAC;IA+C7C,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIhD,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAkBjF,aAAa,CAAC,KAAK,EAAE;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,YAAY,CAAC;QACpB,MAAM,EAAE,MAAM,EAAE,CAAA;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8CX,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/C"}

package/dist/app/modules/oauth2/repositories/consent/repository.mjs

@@ -2,16 +2,14 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { CachePrefix } from "../../../../../adapters/database/domains/constants.mjs";
-import { CONSENT_FILTER_KEYS } from "../../../../../core/entities/consent/types.mjs";
 import { ConsentEntity } from "../../../../../adapters/database/domains/consent/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
-import "../../../../../core/index.mjs";
+import { applyQuery } from "../../../database/repositories/query.mjs";
 import { applyRealmScopeSelect } from "../../../database/repositories/helpers.mjs";
 import { isUniqueConstraintDatabaseError } from "../../../../../adapters/database/errors/driver.mjs";
 import "../../../../../adapters/database/errors/index.mjs";
 import { IdentityType } from "@authup/core-kit";
 import { buildRedisKeyPath } from "@authup/server-kit";
-import { applyQuery } from "typeorm-extension";
 //#region src/app/modules/oauth2/repositories/consent/repository.ts
 var ConsentRepositoryAdapter = class {
 	repository;
@@ -20,41 +18,19 @@ var ConsentRepositoryAdapter = class {
 	}
 	async findMany(query, options = {}) {
 		const qb = this.repository.createQueryBuilder("consent");
-		const { pagination } = applyQuery(qb, query, {
-			defaultAlias: "consent",
-			fields: { default: [
-				"id",
-				"client_id",
-				"realm_id",
-				"user_id",
-				"sub",
-				"sub_kind",
-				"scope",
-				"expires_at",
-				"created_at",
-				"updated_at"
-			] },
-			filters: { allowed: [...CONSENT_FILTER_KEYS] },
-			relations: { allowed: ["realm"] },
-			sort: { allowed: [
-				"created_at",
-				"updated_at",
-				"scope"
-			] },
-			pagination: { maxLimit: 50 }
-		});
-		applyRealmScopeSelect(qb, "consent", ["sub", "sub_kind"]);
+		const { pagination } = applyQuery(qb, query);
+		applyRealmScopeSelect(qb, "consent", ["sub", "subKind"]);
 		qb.leftJoin("consent.client", "client").addSelect([
 			"client.id",
 			"client.name",
-			"client.display_name",
-			"client.built_in"
+			"client.displayName",
+			"client.builtIn"
 		]);
-		if (options.owner) qb.andWhere("consent.sub = :ownerSub AND consent.sub_kind = :ownerSubKind", {
+		if (options.owner) qb.andWhere("consent.sub = :ownerSub AND consent.subKind = :ownerSubKind", {
 			ownerSub: options.owner.sub,
 			ownerSubKind: options.owner.subKind
 		});
-		if (options.realmId) qb.andWhere("consent.realm_id = :realmId", { realmId: options.realmId });
+		if (options.realmId) qb.andWhere("consent.realmId = :realmId", { realmId: options.realmId });
 		const [entities, total] = await qb.getManyAndCount();
 		return {
 			data: entities,
@@ -69,7 +45,7 @@ var ConsentRepositoryAdapter = class {
 	}
 	async findAllBySubjectClient(clientId, owner) {
 		const qb = this.repository.createQueryBuilder("consent");
-		qb.where("consent.client_id = :clientId AND consent.sub = :sub AND consent.sub_kind = :subKind", {
+		qb.where("consent.clientId = :clientId AND consent.sub = :sub AND consent.subKind = :subKind", {
 			clientId,
 			sub: owner.sub,
 			subKind: owner.subKind
@@ -81,7 +57,7 @@ var ConsentRepositoryAdapter = class {
 		return qb.getMany();
 	}
 	async insertMissing(input) {
-		const existing = await this.repository.createQueryBuilder("consent").where("consent.client_id = :clientId AND consent.sub = :sub AND consent.sub_kind = :subKind", {
+		const existing = await this.repository.createQueryBuilder("consent").where("consent.clientId = :clientId AND consent.sub = :sub AND consent.subKind = :subKind", {
 			clientId: input.clientId,
 			sub: input.owner.sub,
 			subKind: input.owner.subKind
@@ -91,13 +67,13 @@ var ConsentRepositoryAdapter = class {
 		const userId = input.owner.subKind === IdentityType.USER ? input.owner.sub : null;
 		for (const scope of missing) {
 			const entity = this.repository.create({
-				client_id: input.clientId,
-				realm_id: input.realmId,
-				user_id: userId,
+				clientId: input.clientId,
+				realmId: input.realmId,
+				userId,
 				sub: input.owner.sub,
-				sub_kind: input.owner.subKind,
+				subKind: input.owner.subKind,
 				scope,
-				expires_at: null
+				expiresAt: null
 			});
 			try {
 				await this.repository.save(entity);