@authup/server-core 1.0.0-beta.59 → 1.0.0-beta.60

package/dist/utils/error.d.ts

@@ -5,12 +5,29 @@ import { AuthupError } from '@authup/errors';
  * 1. AuthupError instance              → returned as-is
  * 2. EntityRelationLookupError         → BAD_REQUEST AuthupError
  * 3. validup Issue error               → BAD_REQUEST AuthupError carrying issues
- * 4. foreign @ebec/http HTTPError      → AuthupError with the closest semantic code
- * 5. driver error w/ a recognised code → ENTITY_CONFLICT or STORAGE_INSUFFICIENT
- * 6. anything else                     → INTERNAL_ERROR AuthupError
+ * 4. rapiq ParseError / CodecError     → BAD_REQUEST AuthupError (client wire query)
+ * 5. hapic ClientError                 → UPSTREAM_ERROR AuthupError (outbound call)
+ * 6. foreign @ebec/http HTTPError      → AuthupError with the closest semantic code
+ * 7. driver error w/ a recognised code → ENTITY_CONFLICT or STORAGE_INSUFFICIENT
+ * 8. anything else                     → INTERNAL_ERROR AuthupError
  *
  * The HTTP-status concern is handled separately by `httpStatusFromCode` in
  * the adapter — this function only assigns a semantic `code`.
  */
 export declare function sanitizeError(input: unknown): AuthupError;
+/**
+ * Render an error for the LOG. It is the counterpart of `@authup/errors`'
+ * `serializeError`, which renders one for the response.
+ *
+ * The detail an outbound failure carries never survives `sanitizeError`
+ * (by design: upstream internals must not reach the caller), and
+ * `Error.cause` is non-enumerable, so a plain serialization drops it too.
+ * Both were therefore already gone by the time anything was written,
+ * which left a refused connection and an upstream `invalid_request`
+ * indistinguishable in the log.
+ *
+ * Everything not present is omitted, so an ordinary error still renders
+ * as its bare message.
+ */
+export declare function describeError(input: unknown, headline?: string): string;
 //# sourceMappingURL=error.d.ts.map

package/dist/utils/error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../src/utils/error.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,WAAW,EAId,MAAM,gBAAgB,CAAC;AAMxB;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAoEzD"}
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../src/utils/error.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,WAAW,EAKd,MAAM,gBAAgB,CAAC;AAQxB;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAgGzD;AA0ED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CA8BvE"}

package/dist/utils/error.mjs

@@ -2,9 +2,11 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { hasOwnProperty, isObject } from "@authup/kit";
-import { AuthupError, ErrorCode, codeFromHttpStatus, isAuthupError } from "@authup/errors";
+import { AuthupError, ErrorCode, codeFromHttpStatus, isAuthupError, normalizeError } from "@authup/errors";
+import { CodecError, ParseError } from "@rapiq/core";
 import { buildErrorMessageForAttributes, isValidupError, stringifyPath } from "validup";
 import { EntityRelationLookupError } from "typeorm-extension";
+import { isClientError } from "hapic";
 import { isHTTPError } from "@ebec/http";
 //#region src/utils/error.ts
 /**
@@ -13,9 +15,11 @@ import { isHTTPError } from "@ebec/http";
 * 1. AuthupError instance              → returned as-is
 * 2. EntityRelationLookupError         → BAD_REQUEST AuthupError
 * 3. validup Issue error               → BAD_REQUEST AuthupError carrying issues
-* 4. foreign @ebec/http HTTPError      → AuthupError with the closest semantic code
-* 5. driver error w/ a recognised code → ENTITY_CONFLICT or STORAGE_INSUFFICIENT
-* 6. anything else                     → INTERNAL_ERROR AuthupError
+* 4. rapiq ParseError / CodecError     → BAD_REQUEST AuthupError (client wire query)
+* 5. hapic ClientError                 → UPSTREAM_ERROR AuthupError (outbound call)
+* 6. foreign @ebec/http HTTPError      → AuthupError with the closest semantic code
+* 7. driver error w/ a recognised code → ENTITY_CONFLICT or STORAGE_INSUFFICIENT
+* 8. anything else                     → INTERNAL_ERROR AuthupError
 *
 * The HTTP-status concern is handled separately by `httpStatusFromCode` in
 * the adapter — this function only assigns a semantic `code`.
@@ -36,6 +40,27 @@ import { isHTTPError } from "@ebec/http";
 		error.issues.push(...input.issues);
 		return error;
 	}
+	if (input instanceof ParseError || input instanceof CodecError) return new AuthupError({
+		code: ErrorCode.BAD_REQUEST,
+		message: input.message,
+		stack: input.stack
+	});
+	/**
+	* An outbound call failed. This branch MUST precede the `isHTTPError`
+	* one below: a hapic `HttpResponseError` extends `BaseError` and carries
+	* the upstream `status`, so the duck guard matches it and would mirror
+	* that status onto our own response. An upstream 400 would then read as
+	* "your request was malformed" when the caller's request was fine.
+	*
+	* The message is deliberately dropped rather than forwarded: hapic
+	* embeds the outbound method and URL in it (`400 Bad Request (POST
+	* https://idp.example.com/token)`), which must not reach the caller.
+	* `describeError` is what carries the detail, into the log only.
+	*/ if (isClientError(input)) return new AuthupError({
+		code: ErrorCode.UPSTREAM_ERROR,
+		message: "A request to an upstream service failed.",
+		stack: input.stack
+	});
 	if (isHTTPError(input)) return new AuthupError({
 		code: codeFromHttpStatus(input.status),
 		message: input.message,
@@ -66,7 +91,79 @@ import { isHTTPError } from "@ebec/http";
 	}
 	return new AuthupError({ code: ErrorCode.INTERNAL_ERROR });
 }
+const DESCRIBE_BODY_MAX_LENGTH = 1024;
+const DESCRIBE_CAUSE_MAX_DEPTH = 5;
+const DESCRIBE_CAUSE_KEYS = [
+	"code",
+	"errno",
+	"syscall",
+	"address",
+	"port"
+];
+function describeBody(input) {
+	let value;
+	if (typeof input === "string") value = input;
+	else try {
+		value = JSON.stringify(input) ?? String(input);
+	} catch {
+		value = Object.prototype.toString.call(input);
+	}
+	if (value.length === 0) return;
+	if (value.length > DESCRIBE_BODY_MAX_LENGTH) return `${value.substring(0, DESCRIBE_BODY_MAX_LENGTH)}… (truncated)`;
+	return value;
+}
+function describeCauseLink(input) {
+	const error = input;
+	const parts = [`${typeof error.name === "string" ? error.name : "Error"}: ${error.message}`];
+	const details = [];
+	for (const key of DESCRIBE_CAUSE_KEYS) {
+		const value = input[key];
+		if (typeof value === "string" || typeof value === "number") details.push(`${key}=${value}`);
+	}
+	if (details.length > 0) parts.push(`(${details.join(" ")})`);
+	return parts.join(" ");
+}
+function describeCauseChain(input) {
+	const links = [];
+	const seen = /* @__PURE__ */ new Set();
+	let current = isObject(input) ? input.cause : void 0;
+	while (isObject(current) && !seen.has(current) && links.length < DESCRIBE_CAUSE_MAX_DEPTH) {
+		seen.add(current);
+		links.push(describeCauseLink(current));
+		current = current.cause;
+	}
+	if (links.length === 0) return;
+	return links.join(" <- ");
+}
+/**
+* Render an error for the LOG. It is the counterpart of `@authup/errors`'
+* `serializeError`, which renders one for the response.
+*
+* The detail an outbound failure carries never survives `sanitizeError`
+* (by design: upstream internals must not reach the caller), and
+* `Error.cause` is non-enumerable, so a plain serialization drops it too.
+* Both were therefore already gone by the time anything was written,
+* which left a refused connection and an upstream `invalid_request`
+* indistinguishable in the log.
+*
+* Everything not present is omitted, so an ordinary error still renders
+* as its bare message.
+*/ function describeError(input, headline) {
+	const error = normalizeError(input);
+	const lines = [];
+	if (headline) lines.push(headline);
+	lines.push(error.message);
+	if (isClientError(error) && error.response) {
+		lines.push(`  upstream status: ${error.response.status}`);
+		const body = describeBody(error.response.data);
+		if (body) lines.push(`  upstream body:   ${body}`);
+	}
+	const causes = describeCauseChain(error);
+	if (causes) lines.push(`  cause:           ${causes}`);
+	if (error.stack) lines.push(`  stack:           ${error.stack}`);
+	return lines.join("\n");
+}
 //#endregion
-export { sanitizeError };
+export { describeError, sanitizeError };
 
 //# sourceMappingURL=error.mjs.map

package/dist/utils/error.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"error.mjs","names":["AuthupError","ErrorCode","codeFromHttpStatus","isAuthupError","isHTTPError","EntityRelationLookupError","buildErrorMessageForAttributes","isValidupError","stringifyPath","hasOwnProperty","isObject","sanitizeError","input","code","ENTITY_RELATION_INVALID","message","stack","paths","issues","map","issue","path","error","BAD_REQUEST","push","status","undefined","ENTITY_CONFLICT","STORAGE_INSUFFICIENT","INTERNAL_ERROR"],"sources":["../../src/utils/error.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { \n    AuthupError, \n    ErrorCode, \n    codeFromHttpStatus, \n    isAuthupError, \n} from '@authup/errors';\nimport { isHTTPError } from '@ebec/http';\nimport { EntityRelationLookupError } from 'typeorm-extension';\nimport { buildErrorMessageForAttributes, isValidupError, stringifyPath } from 'validup';\nimport { hasOwnProperty, isObject } from '@authup/kit';\n\n/**\n * Normalize an unknown error to an AuthupError. Recognised shapes:\n *\n * 1. AuthupError instance              → returned as-is\n * 2. EntityRelationLookupError         → BAD_REQUEST AuthupError\n * 3. validup Issue error               → BAD_REQUEST AuthupError carrying issues\n * 4. foreign @ebec/http HTTPError      → AuthupError with the closest semantic code\n * 5. driver error w/ a recognised code → ENTITY_CONFLICT or STORAGE_INSUFFICIENT\n * 6. anything else                     → INTERNAL_ERROR AuthupError\n *\n * The HTTP-status concern is handled separately by `httpStatusFromCode` in\n * the adapter — this function only assigns a semantic `code`.\n */\nexport function sanitizeError(input: unknown): AuthupError {\n    if (isAuthupError(input)) {\n        return input;\n    }\n\n    if (input instanceof EntityRelationLookupError) {\n        return new AuthupError({\n            code: ErrorCode.ENTITY_RELATION_INVALID,\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    if (isValidupError(input)) {\n        const paths = input.issues.map((issue) => stringifyPath(issue.path));\n        const error = new AuthupError({\n            code: ErrorCode.BAD_REQUEST,\n            stack: input.stack,\n            message: input.message || buildErrorMessageForAttributes(paths),\n        });\n\n        error.issues.push(...input.issues);\n        return error;\n    }\n\n    if (isHTTPError(input)) {\n        return new AuthupError({\n            code: codeFromHttpStatus(input.status),\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    if (isObject(input)) {\n        const code = hasOwnProperty(input, 'code') &&\n        typeof input.code === 'string' ?\n            input.code :\n            undefined;\n\n        /**\n         * @see https://dev.mysql.com/doc/mysql-errors/8.0/en/server-error-reference.html\n         */\n        switch (code) {\n            case '23505':\n            case 'ER_DUP_ENTRY':\n            case 'SQLITE_CONSTRAINT_UNIQUE': {\n                return new AuthupError({\n                    code: ErrorCode.ENTITY_CONFLICT,\n                    message: 'An entry with some unique attributes already exists.',\n                    stack: input.stack as string | undefined,\n                });\n            }\n            case 'ER_DISK_FULL':\n                return new AuthupError({\n                    code: ErrorCode.STORAGE_INSUFFICIENT,\n                    message: 'No database operation possible, due to the lack of free disk space.',\n                    stack: input.stack as string | undefined,\n                });\n        }\n\n        return new AuthupError({\n            code: ErrorCode.INTERNAL_ERROR,\n            message: input.message as string | undefined,\n            stack: input.stack as string | undefined,\n        });\n    }\n\n    return new AuthupError({ code: ErrorCode.INTERNAL_ERROR });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;GA+BA,SAAgBW,cAAcC,OAAc;CACxC,IAAIT,cAAcS,KAAAA,GACd,OAAOA;CAGX,IAAIA,iBAAiBP,2BACjB,OAAO,IAAIL,YAAY;EACnBa,MAAMZ,UAAUa;EAChBC,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;CACjB,CAAA;CAGJ,IAAIT,eAAeK,KAAAA,GAAQ;EACvB,MAAMK,QAAQL,MAAMM,OAAOC,KAAKC,UAAUZ,cAAcY,MAAMC,IAAI,CAAA;EAClE,MAAMC,QAAQ,IAAItB,YAAY;GAC1Ba,MAAMZ,UAAUsB;GAChBP,OAAOJ,MAAMI;GACbD,SAASH,MAAMG,WAAWT,+BAA+BW,KAAAA;EAC7D,CAAA;EAEAK,MAAMJ,OAAOM,KAAI,GAAIZ,MAAMM,MAAM;EACjC,OAAOI;CACX;CAEA,IAAIlB,YAAYQ,KAAAA,GACZ,OAAO,IAAIZ,YAAY;EACnBa,MAAMX,mBAAmBU,MAAMa,MAAM;EACrCV,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;CACjB,CAAA;CAGJ,IAAIN,SAASE,KAAAA,GAAQ;;;KASjB,QARaH,eAAeG,OAAO,MAAA,KACnC,OAAOA,MAAMC,SAAS,WAClBD,MAAMC,OACNa,KAAAA,GAKJ;GACI,KAAK;GACL,KAAK;GACL,KAAK,4BACD,OAAO,IAAI1B,YAAY;IACnBa,MAAMZ,UAAU0B;IAChBZ,SAAS;IACTC,OAAOJ,MAAMI;GACjB,CAAA;GAEJ,KAAK,gBACD,OAAO,IAAIhB,YAAY;IACnBa,MAAMZ,UAAU2B;IAChBb,SAAS;IACTC,OAAOJ,MAAMI;GACjB,CAAA;EACR;EAEA,OAAO,IAAIhB,YAAY;GACnBa,MAAMZ,UAAU4B;GAChBd,SAASH,MAAMG;GACfC,OAAOJ,MAAMI;EACjB,CAAA;CACJ;CAEA,OAAO,IAAIhB,YAAY,EAAEa,MAAMZ,UAAU4B,eAAe,CAAA;AAC5D"}
+{"version":3,"file":"error.mjs","names":["AuthupError","ErrorCode","codeFromHttpStatus","isAuthupError","normalizeError","isHTTPError","isClientError","CodecError","ParseError","EntityRelationLookupError","buildErrorMessageForAttributes","isValidupError","stringifyPath","hasOwnProperty","isObject","sanitizeError","input","code","ENTITY_RELATION_INVALID","message","stack","paths","issues","map","issue","path","error","BAD_REQUEST","push","UPSTREAM_ERROR","status","undefined","ENTITY_CONFLICT","STORAGE_INSUFFICIENT","INTERNAL_ERROR","DESCRIBE_BODY_MAX_LENGTH","DESCRIBE_CAUSE_MAX_DEPTH","DESCRIBE_CAUSE_KEYS","describeBody","value","JSON","stringify","String","Object","prototype","toString","call","length","substring","describeCauseLink","name","parts","details","key","join","describeCauseChain","links","seen","Set","current","cause","has","add","describeError","headline","lines","response","body","data","causes"],"sources":["../../src/utils/error.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    AuthupError,\n    ErrorCode,\n    codeFromHttpStatus,\n    isAuthupError,\n    normalizeError,\n} from '@authup/errors';\nimport { isHTTPError } from '@ebec/http';\nimport { isClientError } from 'hapic';\nimport { CodecError, ParseError } from '@rapiq/core';\nimport { EntityRelationLookupError } from 'typeorm-extension';\nimport { buildErrorMessageForAttributes, isValidupError, stringifyPath } from 'validup';\nimport { hasOwnProperty, isObject } from '@authup/kit';\n\n/**\n * Normalize an unknown error to an AuthupError. Recognised shapes:\n *\n * 1. AuthupError instance              → returned as-is\n * 2. EntityRelationLookupError         → BAD_REQUEST AuthupError\n * 3. validup Issue error               → BAD_REQUEST AuthupError carrying issues\n * 4. rapiq ParseError / CodecError     → BAD_REQUEST AuthupError (client wire query)\n * 5. hapic ClientError                 → UPSTREAM_ERROR AuthupError (outbound call)\n * 6. foreign @ebec/http HTTPError      → AuthupError with the closest semantic code\n * 7. driver error w/ a recognised code → ENTITY_CONFLICT or STORAGE_INSUFFICIENT\n * 8. anything else                     → INTERNAL_ERROR AuthupError\n *\n * The HTTP-status concern is handled separately by `httpStatusFromCode` in\n * the adapter — this function only assigns a semantic `code`.\n */\nexport function sanitizeError(input: unknown): AuthupError {\n    if (isAuthupError(input)) {\n        return input;\n    }\n\n    if (input instanceof EntityRelationLookupError) {\n        return new AuthupError({\n            code: ErrorCode.ENTITY_RELATION_INVALID,\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    if (isValidupError(input)) {\n        const paths = input.issues.map((issue) => stringifyPath(issue.path));\n        const error = new AuthupError({\n            code: ErrorCode.BAD_REQUEST,\n            stack: input.stack,\n            message: input.message || buildErrorMessageForAttributes(paths),\n        });\n\n        error.issues.push(...input.issues);\n        return error;\n    }\n\n    if (input instanceof ParseError || input instanceof CodecError) {\n        return new AuthupError({\n            code: ErrorCode.BAD_REQUEST,\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    /**\n     * An outbound call failed. This branch MUST precede the `isHTTPError`\n     * one below: a hapic `HttpResponseError` extends `BaseError` and carries\n     * the upstream `status`, so the duck guard matches it and would mirror\n     * that status onto our own response. An upstream 400 would then read as\n     * \"your request was malformed\" when the caller's request was fine.\n     *\n     * The message is deliberately dropped rather than forwarded: hapic\n     * embeds the outbound method and URL in it (`400 Bad Request (POST\n     * https://idp.example.com/token)`), which must not reach the caller.\n     * `describeError` is what carries the detail, into the log only.\n     */\n    if (isClientError(input)) {\n        return new AuthupError({\n            code: ErrorCode.UPSTREAM_ERROR,\n            message: 'A request to an upstream service failed.',\n            stack: input.stack,\n        });\n    }\n\n    if (isHTTPError(input)) {\n        return new AuthupError({\n            code: codeFromHttpStatus(input.status),\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    if (isObject(input)) {\n        const code = hasOwnProperty(input, 'code') &&\n        typeof input.code === 'string' ?\n            input.code :\n            undefined;\n\n        /**\n         * @see https://dev.mysql.com/doc/mysql-errors/8.0/en/server-error-reference.html\n         */\n        switch (code) {\n            case '23505':\n            case 'ER_DUP_ENTRY':\n            case 'SQLITE_CONSTRAINT_UNIQUE': {\n                return new AuthupError({\n                    code: ErrorCode.ENTITY_CONFLICT,\n                    message: 'An entry with some unique attributes already exists.',\n                    stack: input.stack as string | undefined,\n                });\n            }\n            case 'ER_DISK_FULL':\n                return new AuthupError({\n                    code: ErrorCode.STORAGE_INSUFFICIENT,\n                    message: 'No database operation possible, due to the lack of free disk space.',\n                    stack: input.stack as string | undefined,\n                });\n        }\n\n        return new AuthupError({\n            code: ErrorCode.INTERNAL_ERROR,\n            message: input.message as string | undefined,\n            stack: input.stack as string | undefined,\n        });\n    }\n\n    return new AuthupError({ code: ErrorCode.INTERNAL_ERROR });\n}\n\nconst DESCRIBE_BODY_MAX_LENGTH = 1024;\nconst DESCRIBE_CAUSE_MAX_DEPTH = 5;\n\n// Fields node attaches to a syscall error. Without them a transport failure\n// reads as a bare \"connect ECONNREFUSED\" with no way back to the reason.\nconst DESCRIBE_CAUSE_KEYS = ['code', 'errno', 'syscall', 'address', 'port'] as const;\n\nfunction describeBody(input: unknown): string | undefined {\n    let value: string;\n\n    if (typeof input === 'string') {\n        value = input;\n    } else {\n        try {\n            value = JSON.stringify(input) ?? String(input);\n        } catch {\n            // A body that cannot be serialized (circular, a stream) is\n            // still worth naming by shape.\n            value = Object.prototype.toString.call(input);\n        }\n    }\n\n    if (value.length === 0) {\n        return undefined;\n    }\n\n    if (value.length > DESCRIBE_BODY_MAX_LENGTH) {\n        return `${value.substring(0, DESCRIBE_BODY_MAX_LENGTH)}… (truncated)`;\n    }\n\n    return value;\n}\n\nfunction describeCauseLink(input: object): string {\n    const error = input as Error;\n    const name = typeof error.name === 'string' ? error.name : 'Error';\n    const parts: string[] = [`${name}: ${error.message}`];\n\n    const details: string[] = [];\n    for (const key of DESCRIBE_CAUSE_KEYS) {\n        const value = (input as Record<string, unknown>)[key];\n        if (typeof value === 'string' || typeof value === 'number') {\n            details.push(`${key}=${value}`);\n        }\n    }\n\n    if (details.length > 0) {\n        parts.push(`(${details.join(' ')})`);\n    }\n\n    return parts.join(' ');\n}\n\nfunction describeCauseChain(input: unknown): string | undefined {\n    const links: string[] = [];\n    const seen = new Set<unknown>();\n\n    let current: unknown = isObject(input) ? (input as { cause?: unknown }).cause : undefined;\n\n    while (isObject(current) && !seen.has(current) && links.length < DESCRIBE_CAUSE_MAX_DEPTH) {\n        seen.add(current);\n        links.push(describeCauseLink(current));\n        current = (current as { cause?: unknown }).cause;\n    }\n\n    if (links.length === 0) {\n        return undefined;\n    }\n\n    return links.join(' <- ');\n}\n\n/**\n * Render an error for the LOG. It is the counterpart of `@authup/errors`'\n * `serializeError`, which renders one for the response.\n *\n * The detail an outbound failure carries never survives `sanitizeError`\n * (by design: upstream internals must not reach the caller), and\n * `Error.cause` is non-enumerable, so a plain serialization drops it too.\n * Both were therefore already gone by the time anything was written,\n * which left a refused connection and an upstream `invalid_request`\n * indistinguishable in the log.\n *\n * Everything not present is omitted, so an ordinary error still renders\n * as its bare message.\n */\nexport function describeError(input: unknown, headline?: string): string {\n    const error = normalizeError(input);\n\n    const lines: string[] = [];\n    if (headline) {\n        lines.push(headline);\n    }\n    lines.push(error.message);\n\n    // hapic attaches the decoded body to the response through a getter, so\n    // it is non-enumerable and only reachable by an explicit read.\n    if (isClientError(error) && error.response) {\n        lines.push(`  upstream status: ${error.response.status}`);\n\n        const body = describeBody(error.response.data);\n        if (body) {\n            lines.push(`  upstream body:   ${body}`);\n        }\n    }\n\n    const causes = describeCauseChain(error);\n    if (causes) {\n        lines.push(`  cause:           ${causes}`);\n    }\n\n    if (error.stack) {\n        lines.push(`  stack:           ${error.stack}`);\n    }\n\n    return lines.join('\\n');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;GAoCA,SAAgBe,cAAcC,OAAc;CACxC,IAAIb,cAAca,KAAAA,GACd,OAAOA;CAGX,IAAIA,iBAAiBP,2BACjB,OAAO,IAAIT,YAAY;EACnBiB,MAAMhB,UAAUiB;EAChBC,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;CACjB,CAAA;CAGJ,IAAIT,eAAeK,KAAAA,GAAQ;EACvB,MAAMK,QAAQL,MAAMM,OAAOC,KAAKC,UAAUZ,cAAcY,MAAMC,IAAI,CAAA;EAClE,MAAMC,QAAQ,IAAI1B,YAAY;GAC1BiB,MAAMhB,UAAU0B;GAChBP,OAAOJ,MAAMI;GACbD,SAASH,MAAMG,WAAWT,+BAA+BW,KAAAA;EAC7D,CAAA;EAEAK,MAAMJ,OAAOM,KAAI,GAAIZ,MAAMM,MAAM;EACjC,OAAOI;CACX;CAEA,IAAIV,iBAAiBR,cAAcQ,iBAAiBT,YAChD,OAAO,IAAIP,YAAY;EACnBiB,MAAMhB,UAAU0B;EAChBR,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;CACjB,CAAA;;;;;;;;;;;;IAeJ,IAAId,cAAcU,KAAAA,GACd,OAAO,IAAIhB,YAAY;EACnBiB,MAAMhB,UAAU4B;EAChBV,SAAS;EACTC,OAAOJ,MAAMI;CACjB,CAAA;CAGJ,IAAIf,YAAYW,KAAAA,GACZ,OAAO,IAAIhB,YAAY;EACnBiB,MAAMf,mBAAmBc,MAAMc,MAAM;EACrCX,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;CACjB,CAAA;CAGJ,IAAIN,SAASE,KAAAA,GAAQ;;;KASjB,QARaH,eAAeG,OAAO,MAAA,KACnC,OAAOA,MAAMC,SAAS,WAClBD,MAAMC,OACNc,KAAAA,GAKJ;GACI,KAAK;GACL,KAAK;GACL,KAAK,4BACD,OAAO,IAAI/B,YAAY;IACnBiB,MAAMhB,UAAU+B;IAChBb,SAAS;IACTC,OAAOJ,MAAMI;GACjB,CAAA;GAEJ,KAAK,gBACD,OAAO,IAAIpB,YAAY;IACnBiB,MAAMhB,UAAUgC;IAChBd,SAAS;IACTC,OAAOJ,MAAMI;GACjB,CAAA;EACR;EAEA,OAAO,IAAIpB,YAAY;GACnBiB,MAAMhB,UAAUiC;GAChBf,SAASH,MAAMG;GACfC,OAAOJ,MAAMI;EACjB,CAAA;CACJ;CAEA,OAAO,IAAIpB,YAAY,EAAEiB,MAAMhB,UAAUiC,eAAe,CAAA;AAC5D;AAEA,MAAMC,2BAA2B;AACjC,MAAMC,2BAA2B;AAIjC,MAAMC,sBAAsB;CAAC;CAAQ;CAAS;CAAW;CAAW;AAAO;AAE3E,SAASC,aAAatB,OAAc;CAChC,IAAIuB;CAEJ,IAAI,OAAOvB,UAAU,UACjBuB,QAAQvB;MAER,IAAI;EACAuB,QAAQC,KAAKC,UAAUzB,KAAAA,KAAU0B,OAAO1B,KAAAA;CAC5C,QAAQ;EAGJuB,QAAQI,OAAOC,UAAUC,SAASC,KAAK9B,KAAAA;CAC3C;CAGJ,IAAIuB,MAAMQ,WAAW,GACjB;CAGJ,IAAIR,MAAMQ,SAASZ,0BACf,OAAO,GAAGI,MAAMS,UAAU,GAAGb,wBAAAA,EAA0B;CAG3D,OAAOI;AACX;AAEA,SAASU,kBAAkBjC,OAAa;CACpC,MAAMU,QAAQV;CAEd,MAAMmC,QAAkB,CAAC,GADZ,OAAOzB,MAAMwB,SAAS,WAAWxB,MAAMwB,OAAO,QAC1B,IAAIxB,MAAMP,SAAU;CAErD,MAAMiC,UAAoB,CAAA;CAC1B,KAAK,MAAMC,OAAOhB,qBAAqB;EACnC,MAAME,QAAQ,MAAmCc;EACjD,IAAI,OAAOd,UAAU,YAAY,OAAOA,UAAU,UAC9Ca,QAAQxB,KAAK,GAAGyB,IAAI,GAAGd,OAAO;CAEtC;CAEA,IAAIa,QAAQL,SAAS,GACjBI,MAAMvB,KAAK,IAAIwB,QAAQE,KAAK,GAAA,EAAK,EAAE;CAGvC,OAAOH,MAAMG,KAAK,GAAA;AACtB;AAEA,SAASC,mBAAmBvC,OAAc;CACtC,MAAMwC,QAAkB,CAAA;CACxB,MAAMC,uBAAO,IAAIC,IAAAA;CAEjB,IAAIC,UAAmB7C,SAASE,KAAAA,IAAS,MAA+B4C,QAAQ7B,KAAAA;CAEhF,OAAOjB,SAAS6C,OAAAA,KAAY,CAACF,KAAKI,IAAIF,OAAAA,KAAYH,MAAMT,SAASX,0BAA0B;EACvFqB,KAAKK,IAAIH,OAAAA;EACTH,MAAM5B,KAAKqB,kBAAkBU,OAAAA,CAAAA;EAC7BA,UAAU,QAAiCC;CAC/C;CAEA,IAAIJ,MAAMT,WAAW,GACjB;CAGJ,OAAOS,MAAMF,KAAK,MAAA;AACtB;;;;;;;;;;;;;;GAgBA,SAAgBS,cAAc/C,OAAgBgD,UAAiB;CAC3D,MAAMtC,QAAQtB,eAAeY,KAAAA;CAE7B,MAAMiD,QAAkB,CAAA;CACxB,IAAID,UACAC,MAAMrC,KAAKoC,QAAAA;CAEfC,MAAMrC,KAAKF,MAAMP,OAAO;CAIxB,IAAIb,cAAcoB,KAAAA,KAAUA,MAAMwC,UAAU;EACxCD,MAAMrC,KAAK,sBAAsBF,MAAMwC,SAASpC,QAAQ;EAExD,MAAMqC,OAAO7B,aAAaZ,MAAMwC,SAASE,IAAI;EAC7C,IAAID,MACAF,MAAMrC,KAAK,sBAAsBuC,MAAM;CAE/C;CAEA,MAAME,SAASd,mBAAmB7B,KAAAA;CAClC,IAAI2C,QACAJ,MAAMrC,KAAK,sBAAsByC,QAAQ;CAG7C,IAAI3C,MAAMN,OACN6C,MAAMrC,KAAK,sBAAsBF,MAAMN,OAAO;CAGlD,OAAO6C,MAAMX,KAAK,IAAA;AACtB"}

package/dist/utils/index.mjs

@@ -1,7 +1,7 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { sanitizeError } from "./error.mjs";
+import { describeError, sanitizeError } from "./error.mjs";
 import { isSelfToken } from "./self-id.mjs";
 import { resolveURL } from "./url.mjs";
-export { isSelfToken, resolveURL, sanitizeError };
+export { describeError, isSelfToken, resolveURL, sanitizeError };

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@authup/server-core",
     "type": "module",
-    "version": "1.0.0-beta.59",
+    "version": "1.0.0-beta.60",
     "description": "This is a standalone application.",
     "license": "AGPL-3.0-only",
     "main": "dist/index.mjs",
@@ -24,6 +24,8 @@
         "test:mysql": "cross-env DB_TYPE=mysql DB_HOST=127.0.0.1 DB_USERNAME=root DB_PASSWORD=start123 DB_DATABASE=app vitest run --config test/vitest.config.ts",
         "test:psql": "cross-env DB_TYPE=postgres DB_HOST=127.0.0.1 DB_USERNAME=postgres DB_PASSWORD=start123 DB_DATABASE=app vitest run --config test/vitest.config.ts",
         "test:coverage": "cross-env NODE_ENV=test vitest run --config test/vitest.config.ts --coverage",
+        "test:schema-drift": "node scripts/assert-schema-drift.mjs",
+        "test:migration-latest": "node scripts/verify-latest-migration.mjs",
         "check:types": "tsc -p tsconfig.test.json"
     },
     "engines": {
@@ -65,24 +67,24 @@
     },
     "homepage": "https://github.com/authup/authup#readme",
     "dependencies": {
-        "@authup/access": "^1.0.0-beta.59",
-        "@authup/client-account-console": "^1.0.0-beta.59",
-        "@authup/client-auth-console": "^1.0.0-beta.59",
-        "@authup/core-http-kit": "^1.0.0-beta.59",
-        "@authup/core-kit": "^1.0.0-beta.59",
-        "@authup/errors": "^1.0.0-beta.59",
-        "@authup/i18n": "^1.0.0-beta.59",
-        "@authup/kit": "^1.0.0-beta.59",
-        "@authup/server-kit": "^1.0.0-beta.59",
-        "@authup/specs": "^1.0.0-beta.59",
+        "@authup/access": "^1.0.0-beta.60",
+        "@authup/client-account-console": "^1.0.0-beta.60",
+        "@authup/client-auth-console": "^1.0.0-beta.60",
+        "@authup/core-http-kit": "^1.0.0-beta.60",
+        "@authup/core-kit": "^1.0.0-beta.60",
+        "@authup/errors": "^1.0.0-beta.60",
+        "@authup/i18n": "^1.0.0-beta.60",
+        "@authup/kit": "^1.0.0-beta.60",
+        "@authup/server-kit": "^1.0.0-beta.60",
+        "@authup/specs": "^1.0.0-beta.60",
         "@ebec/http": "^4.2.0",
         "@hapic/oauth2": "^4.0.1",
         "@peculiar/x509": "^2.0.0",
-        "@rapiq/adapter-memory": "^2.0.0-beta.15",
-        "@rapiq/adapter-sql": "^2.0.0-beta.15",
-        "@rapiq/adapter-typeorm": "^2.0.0-beta.15",
-        "@rapiq/codec-url": "^2.0.0-beta.15",
-        "@rapiq/core": "^2.0.0-beta.15",
+        "@rapiq/adapter-memory": "^2.1.0",
+        "@rapiq/adapter-sql": "^2.1.0",
+        "@rapiq/adapter-typeorm": "^2.1.0",
+        "@rapiq/codec-url": "^2.1.0",
+        "@rapiq/core": "^2.1.0",
         "@routup/assets": "^5.0.0",
         "@routup/basic": "^3.0.0",
         "@routup/cors": "^2.0.0",
@@ -107,7 +109,7 @@
         "locter": "^4.0.0",
         "mysql2": "^3.23.2",
         "node-cron": "^4.6.0",
-        "nodemailer": "^9.0.3",
+        "nodemailer": "^9.0.4",
         "orkos": "^1.1.1",
         "otpauth": "^9.5.1",
         "pg": "^8.22.0",
@@ -118,13 +120,13 @@
         "smob": "^1.6.1",
         "tsyringe": "^4.10.0",
         "typeorm": "1.1.0",
-        "typeorm-extension": "^4.0.0-beta.1",
+        "typeorm-extension": "^4.0.0-beta.3",
         "uncrypto": "^0.1.3",
         "validup": "^1.0.0",
         "zod": "^4.4.3"
     },
     "devDependencies": {
-        "@authup/server-test-kit": "^1.0.0-beta.59",
+        "@authup/server-test-kit": "^1.0.0-beta.60",
         "@faker-js/faker": "^10.5.0",
         "@trapi/cli": "^2.0.4",
         "@types/ldapjs": "^3.0.6",
@@ -134,9 +136,9 @@
         "jest-serial-runner": "^1.2.1",
         "nodemon": "^3.1.14",
         "supertest": "^7.2.2",
-        "testcontainers": "^12.0.4",
+        "testcontainers": "^12.1.0",
         "ts-node": "^10.8.2",
-        "unplugin-swc": "^1.5.9",
+        "unplugin-swc": "^1.5.10",
         "vite": "^8.1.3",
         "vitest": "^4.0.14"
     },

package/dist/app/modules/identity/repositories/provider/account/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/app/modules/identity/repositories/provider/account/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/app/modules/identity/repositories/provider/account/index.mjs

@@ -1,5 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { IdentityProviderAccountRepository } from "./module.mjs";
-export { IdentityProviderAccountRepository };

package/dist/app/modules/identity/repositories/provider/account/module.d.ts

@@ -1,10 +0,0 @@
-import type { IdentityProviderAccount } from '@authup/core-kit';
-import type { DataSource, DeepPartial } from 'typeorm';
-import type { IIdentityProviderAccountRepository, IdentityProviderIdentity } from '../../../../../../core/index.ts';
-export declare class IdentityProviderAccountRepository implements IIdentityProviderAccountRepository {
-    protected dataSource: DataSource;
-    constructor(dataSource: DataSource);
-    findOneByProviderIdentity(identity: IdentityProviderIdentity): Promise<IdentityProviderAccount | null>;
-    save(entity: DeepPartial<IdentityProviderAccount>): Promise<IdentityProviderAccount>;
-}
-//# sourceMappingURL=module.d.ts.map

package/dist/app/modules/identity/repositories/provider/account/module.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../../src/app/modules/identity/repositories/provider/account/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,KAAK,EAAE,kCAAkC,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAGpH,qBAAa,iCAAkC,YAAW,kCAAkC;IACxF,SAAS,CAAC,UAAU,EAAG,UAAU,CAAC;gBAEtB,UAAU,EAAE,UAAU;IAI5B,yBAAyB,CAAC,QAAQ,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAYtG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAK7F"}

package/dist/app/modules/identity/repositories/provider/account/module.mjs

@@ -1,28 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { IdentityProviderAccountEntity } from "../../../../../../adapters/database/domains/identity-provider-account/entity.mjs";
-import "../../../../../../adapters/database/domains/index.mjs";
-//#region src/app/modules/identity/repositories/provider/account/module.ts
-var IdentityProviderAccountRepository = class {
-	dataSource;
-	constructor(dataSource) {
-		this.dataSource = dataSource;
-	}
-	async findOneByProviderIdentity(identity) {
-		return this.dataSource.getRepository(IdentityProviderAccountEntity).findOne({
-			where: {
-				providerUserId: identity.id,
-				providerId: identity.provider.id
-			},
-			relations: { user: true }
-		});
-	}
-	async save(entity) {
-		return this.dataSource.getRepository(IdentityProviderAccountEntity).save(entity);
-	}
-};
-//#endregion
-export { IdentityProviderAccountRepository };
-
-//# sourceMappingURL=module.mjs.map

package/dist/app/modules/identity/repositories/provider/account/module.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"module.mjs","names":["IdentityProviderAccountEntity","IdentityProviderAccountRepository","dataSource","findOneByProviderIdentity","identity","repository","getRepository","findOne","where","providerUserId","id","providerId","provider","relations","user","save","entity"],"sources":["../../../../../../../src/app/modules/identity/repositories/provider/account/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderAccount } from '@authup/core-kit';\nimport type { DataSource, DeepPartial } from 'typeorm';\nimport type { IIdentityProviderAccountRepository, IdentityProviderIdentity } from '../../../../../../core/index.ts';\nimport { IdentityProviderAccountEntity } from '../../../../../../adapters/database/domains/index.ts';\n\nexport class IdentityProviderAccountRepository implements IIdentityProviderAccountRepository {\n    protected dataSource : DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    async findOneByProviderIdentity(identity: IdentityProviderIdentity): Promise<IdentityProviderAccount | null> {\n        const repository = this.dataSource.getRepository(IdentityProviderAccountEntity);\n\n        return repository.findOne({\n            where: {\n                providerUserId: identity.id,\n                providerId: identity.provider.id,\n            },\n            relations: { user: true },\n        });\n    }\n\n    async save(entity: DeepPartial<IdentityProviderAccount>): Promise<IdentityProviderAccount> {\n        const repository = this.dataSource.getRepository(IdentityProviderAccountEntity);\n\n        return repository.save(entity);\n    }\n}\n"],"mappings":";;;;;;AAYA,IAAaC,oCAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;EAChC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,0BAA0BC,UAA6E;EAGzG,OAFmB,KAAKF,WAAWI,cAAcN,6BAE1CK,CAAAA,CAAWE,QAAQ;GACtBC,OAAO;IACHC,gBAAgBL,SAASM;IACzBC,YAAYP,SAASQ,SAASF;GAClC;GACAG,WAAW,EAAEC,MAAM,KAAK;EAC5B,CAAA;CACJ;CAEA,MAAMC,KAAKC,QAAgF;EAGvF,OAFmB,KAAKd,WAAWI,cAAcN,6BAE1CK,CAAAA,CAAWU,KAAKC,MAAAA;CAC3B;AACJ"}