@authup/server-core 1.0.0-beta.56 → 1.0.0-beta.58

package/dist/app/modules/http/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/http/module.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAIrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAExC,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAGhF,qBAAa,UAAW,YAAW,OAAO;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAEhC,SAAS,CAAC,QAAQ,EAAG,UAAU,GAAG,SAAS,CAAC;IAE5C,SAAS,CAAC,UAAU,EAAG,oBAAoB,CAAC;IAE5C,SAAS,CAAC,UAAU,EAAG,oBAAoB,CAAC;IAE5C,SAAS,CAAC,sBAAsB,EAAG,OAAO,CAAC;;IAYrC,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAuCjD;;;;;;;OAOG;IACH,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI;IA+B3D;;;;;;OAMG;IACH,SAAS,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI;IAehD,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAevD"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/http/module.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAIrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAExC,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAGhF,qBAAa,UAAW,YAAW,OAAO;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAEhC,SAAS,CAAC,QAAQ,EAAG,UAAU,GAAG,SAAS,CAAC;IAE5C,SAAS,CAAC,UAAU,EAAG,oBAAoB,CAAC;IAE5C,SAAS,CAAC,UAAU,EAAG,oBAAoB,CAAC;IAE5C,SAAS,CAAC,sBAAsB,EAAG,OAAO,CAAC;;IAYrC,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAoDjD;;;;;;;OAOG;IACH,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI;IA+B3D;;;;;;OAMG;IACH,SAAS,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI;IAehD,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAevD"}

package/dist/app/modules/http/module.mjs

@@ -17,6 +17,7 @@ import "../metrics/index.mjs";
 import { HTTPControllerModule } from "./modules/controller.mjs";
 import { HTTPMiddlewareModule } from "./modules/middleware.mjs";
 import "./modules/index.mjs";
+import { AuthupError } from "@authup/errors";
 import { App } from "routup";
 import { Client } from "@authup/core-http-kit";
 import { serve } from "routup/node";
@@ -45,7 +46,12 @@ var HTTPModule = class {
 		const config = container.resolve(ConfigInjectionKey);
 		const logger = container.resolve(LoggerInjectionKey);
 		logger.debug("Starting http server...");
-		const router = new App();
+		let router;
+		try {
+			router = new App({ options: { trustProxy: config.trustProxy } });
+		} catch (e) {
+			throw new AuthupError(`Invalid trustProxy (TRUST_PROXY) configuration: ${e instanceof Error ? e.message : String(e)}`);
+		}
 		this.registerUIHttpClient(container);
 		this.registerMetrics(container);
 		await this.middleware.mountBefore(router, container);

package/dist/app/modules/http/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["Client","App","serve","ConfigInjectionKey","createInternalUIHttpClient","NoopAuthFlowMetrics","ModuleName","HTTPInjectionKey","MetricsInjectionKey","PromAuthFlowMetrics","HTTPControllerModule","HTTPMiddlewareModule","LoggerInjectionKey","HTTPModule","name","dependencies","instance","middleware","controller","uiHttpClientRegistered","HTTP","CONFIG","LOGGER","AUTHENTICATION","IDENTITY","OAUTH2","setup","container","config","resolve","logger","debug","router","registerUIHttpClient","registerMetrics","mountBefore","mount","mountAfter","server","port","hostname","host","silent","gracefulShutdown","ready","url","register","Server","useValue","has","UIHttpClient","useFactory","c","undefined","publicURL","publicUrl","internalURL","baseURL","lifetime","enabled","middlewarePrometheus","teardown","unregister","close"],"sources":["../../../../src/app/modules/http/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Client } from '@authup/core-http-kit';\nimport { App } from 'routup';\nimport { serve } from 'routup/node';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IModule } from 'orkos';\nimport { createInternalUIHttpClient } from '../../../adapters/http/ui/index.ts';\nimport { NoopAuthFlowMetrics } from '../../../core/index.ts';\nimport { ModuleName } from '../constants.ts';\nimport type { HTTPServer } from './constants.ts';\nimport { HTTPInjectionKey } from './constants.ts';\nimport type { IContainer } from 'eldin';\nimport { MetricsInjectionKey, PromAuthFlowMetrics } from '../metrics/index.ts';\nimport { HTTPControllerModule, HTTPMiddlewareModule } from './modules/index.ts';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nexport class HTTPModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    protected instance : HTTPServer | undefined;\n\n    protected middleware : HTTPMiddlewareModule;\n\n    protected controller : HTTPControllerModule;\n\n    protected uiHttpClientRegistered : boolean;\n\n    constructor() {\n        this.name = ModuleName.HTTP;\n        this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER, ModuleName.AUTHENTICATION, ModuleName.IDENTITY, ModuleName.OAUTH2];\n        this.controller = new HTTPControllerModule();\n        this.middleware = new HTTPMiddlewareModule();\n        this.uiHttpClientRegistered = false;\n    }\n\n    // ----------------------------------------------------\n\n    async setup(container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n\n        logger.debug('Starting http server...');\n\n        const router = new App();\n\n        this.registerUIHttpClient(container);\n        this.registerMetrics(container);\n\n        await this.middleware.mountBefore(router, container);\n        await this.controller.mount(router, container);\n        await this.middleware.mountAfter(router, container);\n\n        const server = serve(router, {\n            port: config.port,\n            hostname: config.host,\n            silent: true,\n            // Shutdown is driven by the orkos teardown chain (see cli/commands/start.ts);\n            // srvx's plugin would only close the HTTP server, leaving DB / cache / etc. open.\n            gracefulShutdown: false,\n        });\n\n        await server.ready();\n\n        this.instance = server;\n\n        if (server.url) {\n            logger.debug(`Listening on ${server.url}`);\n        }\n\n        container.register(HTTPInjectionKey.Server, { useValue: server });\n\n        logger.debug('Started http server.');\n    }\n\n    // ----------------------------------------------------\n\n    /**\n     * Default HTTP client for the SSR'd UI pages: dispatches against the\n     * server's own listen address instead of round-tripping through the\n     * reverse proxy at `publicUrl` (see `createInternalUIHttpClient`).\n     * Skipped when the token is already bound (test injection wins).\n     * Transient lifetime is mandatory — client-web-kit's authentication\n     * hook writes per-user Authorization state onto the client.\n     */\n    protected registerUIHttpClient(container: IContainer): void {\n        if (container.has(HTTPInjectionKey.UIHttpClient)) {\n            return;\n        }\n\n        container.register(HTTPInjectionKey.UIHttpClient, {\n            useFactory: (c) => {\n                const config = c.resolve(ConfigInjectionKey);\n\n                // The server token is registered after listen; a resolve can\n                // only happen on a request, so it is present by then. The\n                // guards keep an edge case on the previous (public URL)\n                // dispatch behavior instead of failing the render.\n                const server = c.has(HTTPInjectionKey.Server) ?\n                    c.resolve(HTTPInjectionKey.Server) :\n                    undefined;\n\n                if (server && server.url) {\n                    return createInternalUIHttpClient({\n                        publicURL: config.publicUrl,\n                        internalURL: server.url,\n                    });\n                }\n\n                return new Client({ baseURL: config.publicUrl });\n            },\n        }, { lifetime: 'transient' });\n\n        this.uiHttpClientRegistered = true;\n    }\n\n    /**\n     * Auth-flow metric counters for the emit points (plan 058 Part 2).\n     * Registered before the controllers are built — the factories resolve the\n     * token. Prometheus-backed iff the prometheus middleware is enabled\n     * (mirrors HTTPMiddlewareModule.isEnabled: boolean|object, false = off),\n     * otherwise a noop so emit sites never need a guard beyond `?.`.\n     */\n    protected registerMetrics(container: IContainer): void {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const enabled = typeof config.middlewarePrometheus !== 'boolean' ||\n            config.middlewarePrometheus === true;\n\n        container.register(MetricsInjectionKey, {\n            useValue: enabled ?\n                new PromAuthFlowMetrics() :\n                new NoopAuthFlowMetrics(),\n        });\n    }\n\n    // ----------------------------------------------------\n\n    async teardown(container: IContainer): Promise<void> {\n        if (this.uiHttpClientRegistered) {\n            container.unregister(HTTPInjectionKey.UIHttpClient);\n            this.uiHttpClientRegistered = false;\n        }\n\n        container.unregister(MetricsInjectionKey);\n\n        if (!this.instance) return;\n\n        container.unregister(HTTPInjectionKey.Server);\n\n        await this.instance.close();\n        this.instance = undefined;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAsBA,IAAaa,aAAb,MAAaA;CACAC;CAEAC;CAECC;CAEAC;CAEAC;CAEAC;CAEV,cAAc;EACV,KAAKL,OAAOR,WAAWc;EACvB,KAAKL,eAAe;GAACT,WAAWe;GAAQf,WAAWgB;GAAQhB,WAAWiB;GAAgBjB,WAAWkB;GAAUlB,WAAWmB;EAAO;EAC7H,KAAKP,aAAa,IAAIR,qBAAAA;EACtB,KAAKO,aAAa,IAAIN,qBAAAA;EACtB,KAAKQ,yBAAyB;CAClC;CAIA,MAAMO,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,QAAQ1B,kBAAAA;EACjC,MAAM2B,SAASH,UAAUE,QAAQjB,kBAAAA;EAEjCkB,OAAOC,MAAM,yBAAA;EAEb,MAAMC,SAAS,IAAI/B,IAAAA;EAEnB,KAAKgC,qBAAqBN,SAAAA;EAC1B,KAAKO,gBAAgBP,SAAAA;EAErB,MAAM,KAAKV,WAAWkB,YAAYH,QAAQL,SAAAA;EAC1C,MAAM,KAAKT,WAAWkB,MAAMJ,QAAQL,SAAAA;EACpC,MAAM,KAAKV,WAAWoB,WAAWL,QAAQL,SAAAA;EAEzC,MAAMW,SAASpC,MAAM8B,QAAQ;GACzBO,MAAMX,OAAOW;GACbC,UAAUZ,OAAOa;GACjBC,QAAQ;GAGRC,kBAAkB;EACtB,CAAA;EAEA,MAAML,OAAOM,MAAK;EAElB,KAAK5B,WAAWsB;EAEhB,IAAIA,OAAOO,KACPf,OAAOC,MAAM,gBAAgBO,OAAOO,KAAK;EAG7ClB,UAAUmB,SAASvC,iBAAiBwC,QAAQ,EAAEC,UAAUV,OAAO,CAAA;EAE/DR,OAAOC,MAAM,sBAAA;CACjB;;;;;;;;IAYA,qBAA+BJ,WAA6B;EACxD,IAAIA,UAAUsB,IAAI1C,iBAAiB2C,YAAY,GAC3C;EAGJvB,UAAUmB,SAASvC,iBAAiB2C,cAAc,EAC9CC,aAAaC,MAAAA;GACT,MAAMxB,SAASwB,EAAEvB,QAAQ1B,kBAAAA;GAMzB,MAAMmC,SAASc,EAAEH,IAAI1C,iBAAiBwC,MAAM,IACxCK,EAAEvB,QAAQtB,iBAAiBwC,MAAM,IACjCM,KAAAA;GAEJ,IAAIf,UAAUA,OAAOO,KACjB,OAAOzC,2BAA2B;IAC9BkD,WAAW1B,OAAO2B;IAClBC,aAAalB,OAAOO;GACxB,CAAA;GAGJ,OAAO,IAAI7C,OAAO,EAAEyD,SAAS7B,OAAO2B,UAAU,CAAA;EAClD,EACJ,GAAG,EAAEG,UAAU,YAAY,CAAA;EAE3B,KAAKvC,yBAAyB;CAClC;;;;;;;IASA,gBAA0BQ,WAA6B;EACnD,MAAMC,SAASD,UAAUE,QAAQ1B,kBAAAA;EAEjC,MAAMwD,UAAU,OAAO/B,OAAOgC,yBAAyB,aACnDhC,OAAOgC,yBAAyB;EAEpCjC,UAAUmB,SAAStC,qBAAqB,EACpCwC,UAAUW,UACN,IAAIlD,oBAAAA,IACJ,IAAIJ,oBAAAA,EACZ,CAAA;CACJ;CAIA,MAAMwD,SAASlC,WAAsC;EACjD,IAAI,KAAKR,wBAAwB;GAC7BQ,UAAUmC,WAAWvD,iBAAiB2C,YAAY;GAClD,KAAK/B,yBAAyB;EAClC;EAEAQ,UAAUmC,WAAWtD,mBAAAA;EAErB,IAAI,CAAC,KAAKQ,UAAU;EAEpBW,UAAUmC,WAAWvD,iBAAiBwC,MAAM;EAE5C,MAAM,KAAK/B,SAAS+C,MAAK;EACzB,KAAK/C,WAAWqC,KAAAA;CACpB;AACJ"}
+{"version":3,"file":"module.mjs","names":["Client","AuthupError","App","serve","ConfigInjectionKey","createInternalUIHttpClient","NoopAuthFlowMetrics","ModuleName","HTTPInjectionKey","MetricsInjectionKey","PromAuthFlowMetrics","HTTPControllerModule","HTTPMiddlewareModule","LoggerInjectionKey","HTTPModule","name","dependencies","instance","middleware","controller","uiHttpClientRegistered","HTTP","CONFIG","LOGGER","AUTHENTICATION","IDENTITY","OAUTH2","setup","container","config","resolve","logger","debug","router","options","trustProxy","e","Error","message","String","registerUIHttpClient","registerMetrics","mountBefore","mount","mountAfter","server","port","hostname","host","silent","gracefulShutdown","ready","url","register","Server","useValue","has","UIHttpClient","useFactory","c","undefined","publicURL","publicUrl","internalURL","baseURL","lifetime","enabled","middlewarePrometheus","teardown","unregister","close"],"sources":["../../../../src/app/modules/http/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Client } from '@authup/core-http-kit';\nimport { AuthupError } from '@authup/errors';\nimport { App } from 'routup';\nimport { serve } from 'routup/node';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IModule } from 'orkos';\nimport { createInternalUIHttpClient } from '../../../adapters/http/ui/index.ts';\nimport { NoopAuthFlowMetrics } from '../../../core/index.ts';\nimport { ModuleName } from '../constants.ts';\nimport type { HTTPServer } from './constants.ts';\nimport { HTTPInjectionKey } from './constants.ts';\nimport type { IContainer } from 'eldin';\nimport { MetricsInjectionKey, PromAuthFlowMetrics } from '../metrics/index.ts';\nimport { HTTPControllerModule, HTTPMiddlewareModule } from './modules/index.ts';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nexport class HTTPModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    protected instance : HTTPServer | undefined;\n\n    protected middleware : HTTPMiddlewareModule;\n\n    protected controller : HTTPControllerModule;\n\n    protected uiHttpClientRegistered : boolean;\n\n    constructor() {\n        this.name = ModuleName.HTTP;\n        this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER, ModuleName.AUTHENTICATION, ModuleName.IDENTITY, ModuleName.OAUTH2];\n        this.controller = new HTTPControllerModule();\n        this.middleware = new HTTPMiddlewareModule();\n        this.uiHttpClientRegistered = false;\n    }\n\n    // ----------------------------------------------------\n\n    async setup(container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n\n        logger.debug('Starting http server...');\n\n        // Every request helper deriving proxy-dependent request facts\n        // (getRequestIP, hostname, protocol) resolves the trust contract from\n        // the app options — call sites must NOT pass their own `trustProxy`.\n        let router : App;\n        try {\n            router = new App({ options: { trustProxy: config.trustProxy } });\n        } catch (e) {\n            // proxy-addr compiles the allowlist form inside the App\n            // constructor; its error (\"invalid IP address: …\") does not name\n            // the offending config key — attribute it.\n            throw new AuthupError(\n                `Invalid trustProxy (TRUST_PROXY) configuration: ${e instanceof Error ? e.message : String(e)}`,\n            );\n        }\n\n        this.registerUIHttpClient(container);\n        this.registerMetrics(container);\n\n        await this.middleware.mountBefore(router, container);\n        await this.controller.mount(router, container);\n        await this.middleware.mountAfter(router, container);\n\n        const server = serve(router, {\n            port: config.port,\n            hostname: config.host,\n            silent: true,\n            // Shutdown is driven by the orkos teardown chain (see cli/commands/start.ts);\n            // srvx's plugin would only close the HTTP server, leaving DB / cache / etc. open.\n            gracefulShutdown: false,\n        });\n\n        await server.ready();\n\n        this.instance = server;\n\n        if (server.url) {\n            logger.debug(`Listening on ${server.url}`);\n        }\n\n        container.register(HTTPInjectionKey.Server, { useValue: server });\n\n        logger.debug('Started http server.');\n    }\n\n    // ----------------------------------------------------\n\n    /**\n     * Default HTTP client for the SSR'd UI pages: dispatches against the\n     * server's own listen address instead of round-tripping through the\n     * reverse proxy at `publicUrl` (see `createInternalUIHttpClient`).\n     * Skipped when the token is already bound (test injection wins).\n     * Transient lifetime is mandatory — client-web-kit's authentication\n     * hook writes per-user Authorization state onto the client.\n     */\n    protected registerUIHttpClient(container: IContainer): void {\n        if (container.has(HTTPInjectionKey.UIHttpClient)) {\n            return;\n        }\n\n        container.register(HTTPInjectionKey.UIHttpClient, {\n            useFactory: (c) => {\n                const config = c.resolve(ConfigInjectionKey);\n\n                // The server token is registered after listen; a resolve can\n                // only happen on a request, so it is present by then. The\n                // guards keep an edge case on the previous (public URL)\n                // dispatch behavior instead of failing the render.\n                const server = c.has(HTTPInjectionKey.Server) ?\n                    c.resolve(HTTPInjectionKey.Server) :\n                    undefined;\n\n                if (server && server.url) {\n                    return createInternalUIHttpClient({\n                        publicURL: config.publicUrl,\n                        internalURL: server.url,\n                    });\n                }\n\n                return new Client({ baseURL: config.publicUrl });\n            },\n        }, { lifetime: 'transient' });\n\n        this.uiHttpClientRegistered = true;\n    }\n\n    /**\n     * Auth-flow metric counters for the emit points (plan 058 Part 2).\n     * Registered before the controllers are built — the factories resolve the\n     * token. Prometheus-backed iff the prometheus middleware is enabled\n     * (mirrors HTTPMiddlewareModule.isEnabled: boolean|object, false = off),\n     * otherwise a noop so emit sites never need a guard beyond `?.`.\n     */\n    protected registerMetrics(container: IContainer): void {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const enabled = typeof config.middlewarePrometheus !== 'boolean' ||\n            config.middlewarePrometheus === true;\n\n        container.register(MetricsInjectionKey, {\n            useValue: enabled ?\n                new PromAuthFlowMetrics() :\n                new NoopAuthFlowMetrics(),\n        });\n    }\n\n    // ----------------------------------------------------\n\n    async teardown(container: IContainer): Promise<void> {\n        if (this.uiHttpClientRegistered) {\n            container.unregister(HTTPInjectionKey.UIHttpClient);\n            this.uiHttpClientRegistered = false;\n        }\n\n        container.unregister(MetricsInjectionKey);\n\n        if (!this.instance) return;\n\n        container.unregister(HTTPInjectionKey.Server);\n\n        await this.instance.close();\n        this.instance = undefined;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAuBA,IAAac,aAAb,MAAaA;CACAC;CAEAC;CAECC;CAEAC;CAEAC;CAEAC;CAEV,cAAc;EACV,KAAKL,OAAOR,WAAWc;EACvB,KAAKL,eAAe;GAACT,WAAWe;GAAQf,WAAWgB;GAAQhB,WAAWiB;GAAgBjB,WAAWkB;GAAUlB,WAAWmB;EAAO;EAC7H,KAAKP,aAAa,IAAIR,qBAAAA;EACtB,KAAKO,aAAa,IAAIN,qBAAAA;EACtB,KAAKQ,yBAAyB;CAClC;CAIA,MAAMO,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,QAAQ1B,kBAAAA;EACjC,MAAM2B,SAASH,UAAUE,QAAQjB,kBAAAA;EAEjCkB,OAAOC,MAAM,yBAAA;EAKb,IAAIC;EACJ,IAAI;GACAA,SAAS,IAAI/B,IAAI,EAAEgC,SAAS,EAAEC,YAAYN,OAAOM,WAAW,EAAE,CAAA;EAClE,SAASC,GAAG;GAIR,MAAM,IAAInC,YACN,mDAAmDmC,aAAaC,QAAQD,EAAEE,UAAUC,OAAOH,CAAAA,GAAI;EAEvG;EAEA,KAAKI,qBAAqBZ,SAAAA;EAC1B,KAAKa,gBAAgBb,SAAAA;EAErB,MAAM,KAAKV,WAAWwB,YAAYT,QAAQL,SAAAA;EAC1C,MAAM,KAAKT,WAAWwB,MAAMV,QAAQL,SAAAA;EACpC,MAAM,KAAKV,WAAW0B,WAAWX,QAAQL,SAAAA;EAEzC,MAAMiB,SAAS1C,MAAM8B,QAAQ;GACzBa,MAAMjB,OAAOiB;GACbC,UAAUlB,OAAOmB;GACjBC,QAAQ;GAGRC,kBAAkB;EACtB,CAAA;EAEA,MAAML,OAAOM,MAAK;EAElB,KAAKlC,WAAW4B;EAEhB,IAAIA,OAAOO,KACPrB,OAAOC,MAAM,gBAAgBa,OAAOO,KAAK;EAG7CxB,UAAUyB,SAAS7C,iBAAiB8C,QAAQ,EAAEC,UAAUV,OAAO,CAAA;EAE/Dd,OAAOC,MAAM,sBAAA;CACjB;;;;;;;;IAYA,qBAA+BJ,WAA6B;EACxD,IAAIA,UAAU4B,IAAIhD,iBAAiBiD,YAAY,GAC3C;EAGJ7B,UAAUyB,SAAS7C,iBAAiBiD,cAAc,EAC9CC,aAAaC,MAAAA;GACT,MAAM9B,SAAS8B,EAAE7B,QAAQ1B,kBAAAA;GAMzB,MAAMyC,SAASc,EAAEH,IAAIhD,iBAAiB8C,MAAM,IACxCK,EAAE7B,QAAQtB,iBAAiB8C,MAAM,IACjCM,KAAAA;GAEJ,IAAIf,UAAUA,OAAOO,KACjB,OAAO/C,2BAA2B;IAC9BwD,WAAWhC,OAAOiC;IAClBC,aAAalB,OAAOO;GACxB,CAAA;GAGJ,OAAO,IAAIpD,OAAO,EAAEgE,SAASnC,OAAOiC,UAAU,CAAA;EAClD,EACJ,GAAG,EAAEG,UAAU,YAAY,CAAA;EAE3B,KAAK7C,yBAAyB;CAClC;;;;;;;IASA,gBAA0BQ,WAA6B;EACnD,MAAMC,SAASD,UAAUE,QAAQ1B,kBAAAA;EAEjC,MAAM8D,UAAU,OAAOrC,OAAOsC,yBAAyB,aACnDtC,OAAOsC,yBAAyB;EAEpCvC,UAAUyB,SAAS5C,qBAAqB,EACpC8C,UAAUW,UACN,IAAIxD,oBAAAA,IACJ,IAAIJ,oBAAAA,EACZ,CAAA;CACJ;CAIA,MAAM8D,SAASxC,WAAsC;EACjD,IAAI,KAAKR,wBAAwB;GAC7BQ,UAAUyC,WAAW7D,iBAAiBiD,YAAY;GAClD,KAAKrC,yBAAyB;EAClC;EAEAQ,UAAUyC,WAAW5D,mBAAAA;EAErB,IAAI,CAAC,KAAKQ,UAAU;EAEpBW,UAAUyC,WAAW7D,iBAAiB8C,MAAM;EAE5C,MAAM,KAAKrC,SAASqD,MAAK;EACzB,KAAKrD,WAAW2C,KAAAA;CACpB;AACJ"}

package/dist/app/modules/http/modules/controller.d.ts

@@ -1,8 +1,8 @@
 import type { App } from 'routup';
 import { ClientController, ClientPermissionController, ClientRoleController, ClientScopeController, ConsentController, EventController, IdentityProviderController, IdentityProviderRoleMappingController, KeyController, PermissionController, PermissionPolicyController, PolicyController, RealmController, RoleAttributeController, RoleController, RolePermissionController, ScopeController, SessionController, TrustAnchorController, UserAttributeController, UserAuthenticatorController, UserController, UserPermissionController, UserRoleController } from '../../../../adapters/http/index.ts';
-import { ActivateController, AuthenticatorChallengeController, AuthorizeController, JwkController, LogoutController, OpenIDController, PasswordForgotController, PasswordResetController, RegisterController, StatusController, TokenController } from '../../../../adapters/http/controllers/index.ts';
+import { ActivateController, AuthenticatorChallengeController, AuthorizeController, JwkController, LogoutController, OpenIDController, PasswordForgotController, PasswordResetController, RegisterController, StatusController, TokenController, UserInfoController } from '../../../../adapters/http/controllers/index.ts';
 import type { IContainer } from 'eldin';
-import { ConsentService, OAuth2AccessPolicyEvaluator, OAuth2MfaLoginService, PasswordRecoveryService, RegistrationService, UserAuthenticatorService } from '../../../../core/index.ts';
+import { ConsentService, OAuth2AccessPolicyEvaluator, OAuth2MfaLoginService, PasswordRecoveryService, RegistrationService, UserAuthenticatorService, UserService } from '../../../../core/index.ts';
 import type { StatusResponseFeatures } from '@authup/core-http-kit';
 import type { Config } from '../../config/index.ts';
 export declare class HTTPControllerModule {
@@ -46,7 +46,9 @@ export declare class HTTPControllerModule {
     protected resolveMfaLoginService(container: IContainer): OAuth2MfaLoginService;
     createAuthenticatorChallengeController(container: IContainer): AuthenticatorChallengeController;
     createEventController(container: IContainer): EventController;
+    createUserService(container: IContainer): UserService;
     createUserController(container: IContainer): UserController;
+    createUserInfoController(container: IContainer): UserInfoController;
     createUserAttributeController(container: IContainer): UserAttributeController;
     createUserPermissionController(container: IContainer): UserPermissionController;
     createUserRoleController(container: IContainer): UserRoleController;

package/dist/app/modules/http/modules/controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAmElC,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,0BAA0B,EAC1B,qCAAqC,EACrC,aAAa,EACb,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,EACvB,2BAA2B,EAC3B,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EAErB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACH,kBAAkB,EAClB,gCAAgC,EAChC,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EAClB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAMH,cAAc,EAMd,2BAA2B,EAG3B,qBAAqB,EACrB,uBAAuB,EAQvB,mBAAmB,EASnB,wBAAwB,EAK3B,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAOpD,qBAAa,oBAAoB;IACvB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAsE9D,eAAe,CAAC,SAAS,EAAE,UAAU;IAmCrC,WAAW,CAAC,SAAS,EAAE,UAAU;IAmFjC,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IA0BnD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAsB5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAI,sBAAsB;IAQxD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IA0B/C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAoC5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiB5C,OAAO,CAAC,0BAA0B;IAOlC,OAAO,CAAC,oBAAoB;IAOtB,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAkDtD,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,gCAAgC,CAAC,SAAS,EAAE,UAAU;IActD,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAShD,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAQjD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAQtD,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAe3C,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAWzC,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAYjD,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAM7C,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAI,cAAc;IAKtE,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAI7C,OAAO,CAAC,qBAAqB,CAAC,CAA+B;IAE7D,SAAS,CAAC,4BAA4B,CAAC,SAAS,EAAE,UAAU,GAAI,2BAA2B;IAgB3F,OAAO,CAAC,wBAAwB,CAAC,CAA4B;IAE7D,SAAS,CAAC,+BAA+B,CAAC,SAAS,EAAE,UAAU,GAAI,wBAAwB;IAsD3F,iCAAiC,CAAC,SAAS,EAAE,UAAU;IAIvD,OAAO,CAAC,eAAe,CAAC,CAAyB;IAEjD,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,UAAU,GAAI,qBAAqB;IAkB/E,sCAAsC,CAAC,SAAS,EAAE,UAAU;IAQ5D,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAK3C,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAiB1C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAS9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAyB5C,oCAAoC,CAAC,SAAS,EAAE,UAAU;IAc1D,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAMzC,qBAAqB,CAAC,SAAS,EAAE,UAAU;CAuC9C"}
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAmElC,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,0BAA0B,EAC1B,qCAAqC,EACrC,aAAa,EACb,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,EACvB,2BAA2B,EAC3B,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EAErB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACH,kBAAkB,EAClB,gCAAgC,EAChC,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EACrB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAMH,cAAc,EAMd,2BAA2B,EAG3B,qBAAqB,EACrB,uBAAuB,EAQvB,mBAAmB,EASnB,wBAAwB,EAGxB,WAAW,EAEd,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAOpD,qBAAa,oBAAoB;IACvB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAuE9D,eAAe,CAAC,SAAS,EAAE,UAAU;IAmCrC,WAAW,CAAC,SAAS,EAAE,UAAU;IAmFjC,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IA0BnD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAsB5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAI,sBAAsB;IAQxD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IA0B/C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAoC5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiB5C,OAAO,CAAC,0BAA0B;IAOlC,OAAO,CAAC,oBAAoB;IAOtB,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAkDtD,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,gCAAgC,CAAC,SAAS,EAAE,UAAU;IActD,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAShD,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAQjD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAQtD,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAe3C,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAWzC,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAYjD,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAM7C,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAI,cAAc;IAKtE,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAI7C,OAAO,CAAC,qBAAqB,CAAC,CAA+B;IAE7D,SAAS,CAAC,4BAA4B,CAAC,SAAS,EAAE,UAAU,GAAI,2BAA2B;IAgB3F,OAAO,CAAC,wBAAwB,CAAC,CAA4B;IAE7D,SAAS,CAAC,+BAA+B,CAAC,SAAS,EAAE,UAAU,GAAI,wBAAwB;IAsD3F,iCAAiC,CAAC,SAAS,EAAE,UAAU;IAIvD,OAAO,CAAC,eAAe,CAAC,CAAyB;IAEjD,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,UAAU,GAAI,qBAAqB;IAkB/E,sCAAsC,CAAC,SAAS,EAAE,UAAU;IAQ5D,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAK3C,iBAAiB,CAAC,SAAS,EAAE,UAAU;IAgBvC,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAI1C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAI9C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAS9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAyB5C,oCAAoC,CAAC,SAAS,EAAE,UAAU;IAc1D,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAMzC,qBAAqB,CAAC,SAAS,EAAE,UAAU;CA8C9C"}

package/dist/app/modules/http/modules/controller.mjs

@@ -118,6 +118,7 @@ import { PasswordResetController } from "../../../../adapters/http/controllers/w
 import { RegisterController } from "../../../../adapters/http/controllers/workflows/register/module.mjs";
 import { StatusController } from "../../../../adapters/http/controllers/workflows/status/module.mjs";
 import { TokenController } from "../../../../adapters/http/controllers/workflows/token/module.mjs";
+import { UserInfoController } from "../../../../adapters/http/controllers/workflows/userinfo/module.mjs";
 import { RealmController } from "../../../../adapters/http/controllers/entities/realm/module.mjs";
 import { RoleController } from "../../../../adapters/http/controllers/entities/role/module.mjs";
 import { RoleAttributeController } from "../../../../adapters/http/controllers/entities/role-attribute/module.mjs";
@@ -177,6 +178,7 @@ var HTTPControllerModule = class {
 			this.createRegisterController(container),
 			this.createLogoutController(container),
 			this.createAuthenticatorChallengeController(container),
+			this.createUserInfoController(container),
 			this.createStatusController(container),
 			clientController,
 			clientPermissionController,
@@ -251,6 +253,16 @@ var HTTPControllerModule = class {
 			identityResolver,
 			certificateValidator: new ClientCertificateValidator({ trustAnchorRepository: new TrustAnchorRepositoryAdapter(dataSource) })
 		});
+		const eventService = container.resolve(DatabaseInjectionKey.EventService);
+		const metrics = container.resolve(MetricsInjectionKey);
+		const loginThrottleService = new LoginThrottleService({
+			repository: container.resolve(DatabaseInjectionKey.EventRepository),
+			options: {
+				enabled: config.loginAttemptThrottleEnabled,
+				threshold: config.loginAttemptThreshold,
+				windowSeconds: config.loginAttemptWindow
+			}
+		});
 		return new TokenController({
 			codeVerifier,
 			accessTokenIssuer,
@@ -261,16 +273,9 @@ var HTTPControllerModule = class {
 			tokenRevoker,
 			tokenRepository,
 			sessionTokenRepository,
-			eventService: container.resolve(DatabaseInjectionKey.EventService),
-			metrics: container.resolve(MetricsInjectionKey),
-			loginThrottleService: new LoginThrottleService({
-				repository: container.resolve(DatabaseInjectionKey.EventRepository),
-				options: {
-					enabled: config.loginAttemptThrottleEnabled,
-					threshold: config.loginAttemptThreshold,
-					windowSeconds: config.loginAttemptWindow
-				}
-			}),
+			eventService,
+			metrics,
+			loginThrottleService,
 			userAuthenticatorService: this.resolveUserAuthenticatorService(container),
 			mfaLoginService: this.resolveMfaLoginService(container),
 			accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),
@@ -286,7 +291,8 @@ var HTTPControllerModule = class {
 		});
 	}
 	createOpenIDController(container) {
-		return new OpenIDController({ baseURL: container.resolve(ConfigInjectionKey).publicUrl });
+		const config = container.resolve(ConfigInjectionKey);
+		return new OpenIDController({ baseURL: config.publicUrl });
 	}
 	createActivateController(container) {
 		const config = container.resolve(ConfigInjectionKey);
@@ -326,9 +332,11 @@ var HTTPControllerModule = class {
 			repository: new UserRepository(dataSource),
 			realmRepository
 		});
+		const mailClient = container.resolve(MailInjectionKey);
+		const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);
 		return new PasswordRecoveryService({
-			mailClient: container.resolve(MailInjectionKey),
-			mailTemplateRenderer: container.resolve(MailTemplateRendererInjectionKey),
+			mailClient,
+			mailTemplateRenderer,
 			repository,
 			realmRepository: new RealmRepositoryAdapter(realmRepository),
 			eventService: container.resolve(DatabaseInjectionKey.EventService),
@@ -352,11 +360,15 @@ var HTTPControllerModule = class {
 	}
 	createLogoutController(container) {
 		const config = container.resolve(ConfigInjectionKey);
+		const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);
+		const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);
+		const clientRepository = container.resolve(OAuth2InjectionToken.ClientRepository);
+		const realmRepository = new RealmRepositoryAdapter(container.resolve(RealmEntity));
 		const endSessionService = new OAuth2EndSessionService({
-			tokenVerifier: container.resolve(OAuth2InjectionToken.TokenVerifier),
-			sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),
-			clientRepository: container.resolve(OAuth2InjectionToken.ClientRepository),
-			realmRepository: new RealmRepositoryAdapter(container.resolve(RealmEntity)),
+			tokenVerifier,
+			sessionManager,
+			clientRepository,
+			realmRepository,
 			eventService: container.resolve(DatabaseInjectionKey.EventService),
 			hintGracePeriod: config.endSessionHintGracePeriod
 		});
@@ -384,9 +396,11 @@ var HTTPControllerModule = class {
 			repository: new UserRepository(dataSource),
 			realmRepository
 		});
+		const mailClient = container.resolve(MailInjectionKey);
+		const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);
 		return new RegistrationService({
-			mailClient: container.resolve(MailInjectionKey),
-			mailTemplateRenderer: container.resolve(MailTemplateRendererInjectionKey),
+			mailClient,
+			mailTemplateRenderer,
 			repository,
 			realmRepository: new RealmRepositoryAdapter(realmRepository),
 			eventService: container.resolve(DatabaseInjectionKey.EventService),
@@ -428,11 +442,13 @@ var HTTPControllerModule = class {
 			repository: container.resolve(ClientEntity),
 			realmRepository
 		});
+		const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);
+		const service = new ClientService({
+			repository,
+			realmRepository: realmRepositoryAdapter
+		});
 		return new ClientController({
-			service: new ClientService({
-				repository,
-				realmRepository: new RealmRepositoryAdapter(realmRepository)
-			}),
+			service,
 			repository
 		});
 	}
@@ -456,103 +472,137 @@ var HTTPControllerModule = class {
 			realmRepository
 		});
 		const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);
+		const roleRepository = new RoleRepositoryAdapter({
+			repository: container.resolve(RoleEntity),
+			realmRepository
+		});
+		const rolePermissionRepository = new RolePermissionRepositoryAdapter(container.resolve(RolePermissionEntity));
+		const policyRepository = new PolicyRepositoryAdapter({
+			repository: new PolicyRepository(dataSource),
+			realmRepository
+		});
+		const permissionPolicyRepository = new PermissionPolicyRepositoryAdapter(container.resolve(PermissionPolicyEntity));
 		const service = new PermissionService({
 			repository,
 			realmRepository: realmRepositoryAdapter,
-			roleRepository: new RoleRepositoryAdapter({
-				repository: container.resolve(RoleEntity),
-				realmRepository
-			}),
-			rolePermissionRepository: new RolePermissionRepositoryAdapter(container.resolve(RolePermissionEntity)),
-			policyRepository: new PolicyRepositoryAdapter({
-				repository: new PolicyRepository(dataSource),
-				realmRepository
-			}),
-			permissionPolicyRepository: new PermissionPolicyRepositoryAdapter(container.resolve(PermissionPolicyEntity))
+			roleRepository,
+			rolePermissionRepository,
+			policyRepository,
+			permissionPolicyRepository
 		});
 		const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);
+		const permissionProvider = new PermissionDatabaseProvider(dataSource);
+		const checkerService = new PermissionCheckerService({
+			repository,
+			realmRepository: realmRepositoryAdapter,
+			permissionProvider,
+			identityPermissionProvider
+		});
 		return new PermissionController({
 			service,
-			checkerService: new PermissionCheckerService({
-				repository,
-				realmRepository: realmRepositoryAdapter,
-				permissionProvider: new PermissionDatabaseProvider(dataSource),
-				identityPermissionProvider
-			})
+			checkerService
 		});
 	}
 	createRoleController(container) {
 		const realmRepository = new RealmRepositoryAdapter(container.resolve(RealmEntity));
-		return new RoleController({ service: new RoleService({
-			repository: new RoleRepositoryAdapter({
-				repository: container.resolve(RoleEntity),
-				realmRepository: container.resolve(RealmEntity)
-			}),
+		const repository = new RoleRepositoryAdapter({
+			repository: container.resolve(RoleEntity),
+			realmRepository: container.resolve(RealmEntity)
+		});
+		const service = new RoleService({
+			repository,
 			realmRepository
-		}) });
+		});
+		return new RoleController({ service });
 	}
 	createClientPermissionController(container) {
-		return new ClientPermissionController({ service: new ClientPermissionService({
-			repository: new ClientPermissionRepositoryAdapter(container.resolve(ClientPermissionEntity)),
-			permissionRepository: this.createPermissionRepository(container),
-			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
-		}) });
+		const repository = new ClientPermissionRepositoryAdapter(container.resolve(ClientPermissionEntity));
+		const permissionRepository = this.createPermissionRepository(container);
+		const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);
+		const service = new ClientPermissionService({
+			repository,
+			permissionRepository,
+			identityPermissionProvider
+		});
+		return new ClientPermissionController({ service });
 	}
 	createClientRoleController(container) {
-		return new ClientRoleController({ service: new ClientRoleService({
-			repository: new ClientRoleRepositoryAdapter(container.resolve(ClientRoleEntity)),
-			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
-		}) });
+		const repository = new ClientRoleRepositoryAdapter(container.resolve(ClientRoleEntity));
+		const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);
+		const service = new ClientRoleService({
+			repository,
+			identityPermissionProvider
+		});
+		return new ClientRoleController({ service });
 	}
 	createClientScopeController(container) {
-		return new ClientScopeController({ service: new ClientScopeService({ repository: new ClientScopeRepositoryAdapter(container.resolve(ClientScopeEntity)) }) });
+		const repository = new ClientScopeRepositoryAdapter(container.resolve(ClientScopeEntity));
+		const service = new ClientScopeService({ repository });
+		return new ClientScopeController({ service });
 	}
 	createRoleAttributeController(container) {
 		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
-		return new RoleAttributeController({ service: new RoleAttributeService({
-			repository: new RoleAttributeRepositoryAdapter(container.resolve(RoleAttributeEntity)),
-			reservedNames: new Set(dataSource.getMetadata(RoleEntity).columns.map((c) => c.propertyName))
-		}) });
+		const repository = new RoleAttributeRepositoryAdapter(container.resolve(RoleAttributeEntity));
+		const reservedNames = new Set(dataSource.getMetadata(RoleEntity).columns.map((c) => c.propertyName));
+		const service = new RoleAttributeService({
+			repository,
+			reservedNames
+		});
+		return new RoleAttributeController({ service });
 	}
 	createRolePermissionController(container) {
-		return new RolePermissionController({ service: new RolePermissionService({
-			repository: new RolePermissionRepositoryAdapter(container.resolve(RolePermissionEntity)),
-			permissionRepository: this.createPermissionRepository(container),
-			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
-		}) });
+		const repository = new RolePermissionRepositoryAdapter(container.resolve(RolePermissionEntity));
+		const permissionRepository = this.createPermissionRepository(container);
+		const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);
+		const service = new RolePermissionService({
+			repository,
+			permissionRepository,
+			identityPermissionProvider
+		});
+		return new RolePermissionController({ service });
 	}
 	createPermissionPolicyController(container) {
-		return new PermissionPolicyController({ service: new PermissionPolicyService({ repository: new PermissionPolicyRepositoryAdapter(container.resolve(PermissionPolicyEntity)) }) });
+		const repository = new PermissionPolicyRepositoryAdapter(container.resolve(PermissionPolicyEntity));
+		const service = new PermissionPolicyService({ repository });
+		return new PermissionPolicyController({ service });
 	}
 	createScopeController(container) {
 		const realmRepository = new RealmRepositoryAdapter(container.resolve(RealmEntity));
-		return new ScopeController({ service: new ScopeService({
-			repository: new ScopeRepositoryAdapter({
-				repository: container.resolve(ScopeEntity),
-				realmRepository: container.resolve(RealmEntity)
-			}),
+		const repository = new ScopeRepositoryAdapter({
+			repository: container.resolve(ScopeEntity),
+			realmRepository: container.resolve(RealmEntity)
+		});
+		const service = new ScopeService({
+			repository,
 			realmRepository
-		}) });
+		});
+		return new ScopeController({ service });
 	}
 	createKeyController(container) {
-		return new KeyController({ service: new KeyService({
+		const service = new KeyService({
 			repository: container.resolve(OAuth2InjectionToken.KeyStore),
 			eventService: container.resolve(DatabaseInjectionKey.EventService),
 			requestContext: useRequestEventContext
-		}) });
+		});
+		return new KeyController({ service });
 	}
 	createTrustAnchorController(container) {
-		return new TrustAnchorController({ service: new TrustAnchorService({
-			repository: new TrustAnchorRepositoryAdapter(container.resolve(DatabaseInjectionKey.DataSource)),
+		const repository = new TrustAnchorRepositoryAdapter(container.resolve(DatabaseInjectionKey.DataSource));
+		const service = new TrustAnchorService({
+			repository,
 			eventService: container.resolve(DatabaseInjectionKey.EventService),
 			requestContext: useRequestEventContext
-		}) });
+		});
+		return new TrustAnchorController({ service });
 	}
 	createSessionController(container) {
-		return new SessionController({ service: new SessionService({ repository: container.resolve(AuthenticationInjectionKey.SessionRepository) }) });
+		const repository = container.resolve(AuthenticationInjectionKey.SessionRepository);
+		const service = new SessionService({ repository });
+		return new SessionController({ service });
 	}
 	createConsentService(container) {
-		return new ConsentService({ repository: container.resolve(OAuth2InjectionToken.ConsentRepository) });
+		const repository = container.resolve(OAuth2InjectionToken.ConsentRepository);
+		return new ConsentService({ repository });
 	}
 	createConsentController(container) {
 		return new ConsentController({ service: this.createConsentService(container) });
@@ -634,40 +684,59 @@ var HTTPControllerModule = class {
 		});
 	}
 	createEventController(container) {
-		return new EventController({ service: container.resolve(DatabaseInjectionKey.EventService) });
+		const service = container.resolve(DatabaseInjectionKey.EventService);
+		return new EventController({ service });
 	}
-	createUserController(container) {
+	createUserService(container) {
 		const config = container.resolve(ConfigInjectionKey);
 		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
 		const realmRepository = container.resolve(RealmEntity);
-		return new UserController({ service: new UserService({
-			repository: new UserRepositoryAdapter({
-				repository: new UserRepository(dataSource),
-				realmRepository
-			}),
-			realmRepository: new RealmRepositoryAdapter(realmRepository),
+		const repository = new UserRepositoryAdapter({
+			repository: new UserRepository(dataSource),
+			realmRepository
+		});
+		const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);
+		return new UserService({
+			repository,
+			realmRepository: realmRepositoryAdapter,
 			passwordMinLength: config.passwordMinLength
-		}) });
+		});
+	}
+	createUserController(container) {
+		return new UserController({ service: this.createUserService(container) });
+	}
+	createUserInfoController(container) {
+		return new UserInfoController({ service: this.createUserService(container) });
 	}
 	createUserAttributeController(container) {
 		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
-		return new UserAttributeController({ service: new UserAttributeService({
-			repository: new UserAttributeRepositoryAdapter(container.resolve(UserAttributeEntity)),
-			reservedNames: new Set(dataSource.getMetadata(UserEntity).columns.map((c) => c.propertyName))
-		}) });
+		const repository = new UserAttributeRepositoryAdapter(container.resolve(UserAttributeEntity));
+		const reservedNames = new Set(dataSource.getMetadata(UserEntity).columns.map((c) => c.propertyName));
+		const service = new UserAttributeService({
+			repository,
+			reservedNames
+		});
+		return new UserAttributeController({ service });
 	}
 	createUserPermissionController(container) {
-		return new UserPermissionController({ service: new UserPermissionService({
-			repository: new UserPermissionRepositoryAdapter(container.resolve(UserPermissionEntity)),
-			permissionRepository: this.createPermissionRepository(container),
-			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
-		}) });
+		const repository = new UserPermissionRepositoryAdapter(container.resolve(UserPermissionEntity));
+		const permissionRepository = this.createPermissionRepository(container);
+		const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);
+		const service = new UserPermissionService({
+			repository,
+			permissionRepository,
+			identityPermissionProvider
+		});
+		return new UserPermissionController({ service });
 	}
 	createUserRoleController(container) {
-		return new UserRoleController({ service: new UserRoleService({
-			repository: new UserRoleRepositoryAdapter(container.resolve(UserRoleEntity)),
-			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
-		}) });
+		const repository = new UserRoleRepositoryAdapter(container.resolve(UserRoleEntity));
+		const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);
+		const service = new UserRoleService({
+			repository,
+			identityPermissionProvider
+		});
+		return new UserRoleController({ service });
 	}
 	createPolicyController(container) {
 		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
@@ -677,27 +746,35 @@ var HTTPControllerModule = class {
 			realmRepository
 		});
 		const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);
+		const service = new PolicyService({
+			repository,
+			realmRepository: realmRepositoryAdapter
+		});
+		const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);
+		const checkerService = new PolicyCheckerService({
+			repository,
+			realmRepository: realmRepositoryAdapter,
+			identityPermissionProvider
+		});
 		return new PolicyController({
-			service: new PolicyService({
-				repository,
-				realmRepository: realmRepositoryAdapter
-			}),
-			checkerService: new PolicyCheckerService({
-				repository,
-				realmRepository: realmRepositoryAdapter,
-				identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
-			})
+			service,
+			checkerService
 		});
 	}
 	createIdentityProviderRoleController(container) {
-		return new IdentityProviderRoleMappingController({ service: new IdentityProviderRoleMappingService({
-			repository: new IdentityProviderRoleMappingRepositoryAdapter(container.resolve(IdentityProviderRoleMappingEntity)),
-			roleRepository: this.createRoleRepository(container),
-			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
-		}) });
+		const repository = new IdentityProviderRoleMappingRepositoryAdapter(container.resolve(IdentityProviderRoleMappingEntity));
+		const roleRepository = this.createRoleRepository(container);
+		const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);
+		const service = new IdentityProviderRoleMappingService({
+			repository,
+			roleRepository,
+			identityPermissionProvider
+		});
+		return new IdentityProviderRoleMappingController({ service });
 	}
 	createJwkController(container) {
-		return new JwkController({ repository: container.resolve(DatabaseInjectionKey.DataSource).getRepository(KeyEntity) });
+		const repository = container.resolve(DatabaseInjectionKey.DataSource).getRepository(KeyEntity);
+		return new JwkController({ repository });
 	}
 	createRealmController(container) {
 		const config = container.resolve(ConfigInjectionKey);
@@ -709,17 +786,24 @@ var HTTPControllerModule = class {
 			realmRepository
 		});
 		const logger = container.resolve(LoggerInjectionKey);
+		const webClientProvisioner = new WebClientProvisioner({
+			clientRepository,
+			scopeRepository: new ScopeRepositoryAdapter({
+				repository: container.resolve(ScopeEntity),
+				realmRepository
+			}),
+			clientScopeRepository: new ClientScopeRepositoryAdapter(container.resolve(ClientScopeEntity)),
+			appOrigins: getAppOrigins(config),
+			logger
+		});
+		const keyProvisioner = new KeyProvisioner({
+			keyStore: container.resolve(OAuth2InjectionToken.KeyStore),
+			logger
+		});
 		const service = new RealmService({
 			repository,
-			webClientProvisioner: new WebClientProvisioner({
-				clientRepository,
-				appOrigins: getAppOrigins(config),
-				logger
-			}),
-			keyProvisioner: new KeyProvisioner({
-				keyStore: container.resolve(OAuth2InjectionToken.KeyStore),
-				logger
-			}),
+			webClientProvisioner,
+			keyProvisioner,
 			logger
 		});
 		const keyRepository = dataSource.getRepository(KeyEntity);