@authup/server-core 1.0.0-beta.61 → 1.0.0-beta.62

package/dist/adapters/database/domains/client-scope/entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/client-scope/entity.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACR,MAAM,EACN,WAAW,EACX,KAAK,EACL,KAAK,EACR,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,qBAEa,iBAAkB,YAAW,WAAW;IAEjD,EAAE,EAAE,MAAM,CAAC;IAOX,OAAO,EAAE,OAAO,CAAC;IAKjB,SAAS,EAAE,MAAM,CAAC;IAGlB,SAAS,EAAE,MAAM,CAAC;IAKlB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAIvB,MAAM,EAAE,MAAM,CAAC;IAIf,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOlC,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAMhC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAIrB,KAAK,EAAE,KAAK,CAAC;IAIb,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOjC,UAAU,EAAE,WAAW,GAAG,IAAI,CAAC;CAClC"}
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/client-scope/entity.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACR,MAAM,EACN,WAAW,EACX,KAAK,EACL,KAAK,EACR,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,qBAEa,iBAAkB,YAAW,WAAW;IAEjD,EAAE,EAAE,MAAM,CAAC;IAOX,OAAO,EAAE,OAAO,CAAC;IAMjB,SAAS,EAAE,MAAM,CAAC;IAIlB,SAAS,EAAE,MAAM,CAAC;IAKlB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAIvB,MAAM,EAAE,MAAM,CAAC;IAIf,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOlC,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAMhC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAIrB,KAAK,EAAE,KAAK,CAAC;IAIb,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOjC,UAAU,EAAE,WAAW,GAAG,IAAI,CAAC;CAClC"}

package/dist/adapters/database/domains/client-scope/entity.mjs

@@ -43,14 +43,22 @@ _ts_decorate([
 	}),
 	_ts_metadata("design:type", Boolean)
 ], ClientScopeEntity.prototype, "default", void 0);
-_ts_decorate([CreateDateColumn({
-	name: "created_at",
-	transformer: dateToISOStringTransformer
-}), _ts_metadata("design:type", String)], ClientScopeEntity.prototype, "createdAt", void 0);
-_ts_decorate([UpdateDateColumn({
-	name: "updated_at",
-	transformer: dateToISOStringTransformer
-}), _ts_metadata("design:type", String)], ClientScopeEntity.prototype, "updatedAt", void 0);
+_ts_decorate([
+	Index(),
+	CreateDateColumn({
+		name: "created_at",
+		transformer: dateToISOStringTransformer
+	}),
+	_ts_metadata("design:type", String)
+], ClientScopeEntity.prototype, "createdAt", void 0);
+_ts_decorate([
+	Index(),
+	UpdateDateColumn({
+		name: "updated_at",
+		transformer: dateToISOStringTransformer
+	}),
+	_ts_metadata("design:type", String)
+], ClientScopeEntity.prototype, "updatedAt", void 0);
 _ts_decorate([Column({ name: "client_id" }), _ts_metadata("design:type", Object)], ClientScopeEntity.prototype, "clientId", void 0);
 _ts_decorate([
 	ManyToOne(() => ClientEntity, { onDelete: "CASCADE" }),

package/dist/adapters/database/domains/client-scope/entity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","Unique","UpdateDateColumn","dateToISOStringTransformer","ClientEntity","RealmEntity","ScopeEntity","ClientScopeEntity","id","default","createdAt","updatedAt","clientId","client","clientRealmId","clientRealm","scopeId","scope","scopeRealmId","scopeRealm","type","name","transformer","onDelete","nullable"],"sources":["../../../../../src/adapters/database/domains/client-scope/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2021.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity,\n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    Unique,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Client,\n    ClientScope,\n    Realm,\n    Scope,\n} from '@authup/core-kit';\nimport { ClientEntity } from '../client/index.ts';\nimport { RealmEntity } from '../realm/index.ts';\nimport { ScopeEntity } from '../scope/index.ts';\n\n@Entity({ name: 'auth_client_scopes' })\n@Unique(['clientId', 'scopeId'])\nexport class ClientScopeEntity implements ClientScope {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    @Index()\n    @Column({\n        type: 'boolean',\n        default: false, \n    })\n    default: boolean;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ name: 'created_at', transformer: dateToISOStringTransformer })\n    createdAt: string;\n\n    @UpdateDateColumn({ name: 'updated_at', transformer: dateToISOStringTransformer })\n    updatedAt: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({ name: 'client_id' })\n    clientId: Client['id'];\n\n    @ManyToOne(() => ClientEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'client_id' })\n    client: Client;\n\n    @Index()\n    @Column({ name: 'client_realm_id', nullable: true })\n    clientRealmId: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'client_realm_id' })\n    clientRealm: RealmEntity | null;\n\n    // ------------------------------------------------------------------\n\n    @Index()\n    @Column({ name: 'scope_id' })\n    scopeId: Scope['id'];\n\n    @ManyToOne(() => ScopeEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'scope_id' })\n    scope: Scope;\n\n    @Index()\n    @Column({ name: 'scope_realm_id', nullable: true })\n    scopeRealmId: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'scope_realm_id' })\n    scopeRealm: RealmEntity | null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA+BA,IAAaa,oBAAb,MAAaA;CAETC;CAOAC;CAKAC;CAGAC;CAKAC;CAIAC;CAIAC;CAOAC;CAMAC;CAIAC;CAIAC;CAOAC;AACJ;;;;;EArDQC,MAAM;EACNX,SAAS;;;;;CAMOY,MAAM;CAAcC,aAAanB;;;CAGjCkB,MAAM;CAAcC,aAAanB;;AAK3CkB,aAAAA,CAAAA,OAAAA,EAAAA,MAAM,YAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,kBAAA,WAAA,YAAA,KAAA,CAAA;;CAGCjB,gBAAAA,cAAAA,EAAgBmB,UAAU,UAAA,CAAA;CAC7BF,WAAAA,EAAAA,MAAM,YAAA,CAAA;;;;;;EAIVA,MAAM;EAAmBG,UAAU;;;;;CAG5BnB,gBAAAA,aAAAA;EACbkB,UAAU;EACVC,UAAU;;CAEAH,WAAAA,EAAAA,MAAM,kBAAA,CAAA;;;;;CAMVA,OAAAA,EAAAA,MAAM,WAAA,CAAA;;;;CAGCf,gBAAAA,aAAAA,EAAeiB,UAAU,UAAA,CAAA;CAC5BF,WAAAA,EAAAA,MAAM,WAAA,CAAA;;;;;;EAIVA,MAAM;EAAkBG,UAAU;;;;;CAG3BnB,gBAAAA,aAAAA;EACbkB,UAAU;EACVC,UAAU;;CAEAH,WAAAA,EAAAA,MAAM,iBAAA,CAAA;;;AA3DdA,oBAAAA,aAAAA,CAAAA,OAAAA,EAAAA,MAAM,qBAAA,CAAA,GAAA,OAAA,CACP,YAAY,SAAA,CAAA,CAAA,GAAA,iBAAA"}
+{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","Unique","UpdateDateColumn","dateToISOStringTransformer","ClientEntity","RealmEntity","ScopeEntity","ClientScopeEntity","id","default","createdAt","updatedAt","clientId","client","clientRealmId","clientRealm","scopeId","scope","scopeRealmId","scopeRealm","type","name","transformer","onDelete","nullable"],"sources":["../../../../../src/adapters/database/domains/client-scope/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2021.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity,\n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    Unique,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Client,\n    ClientScope,\n    Realm,\n    Scope,\n} from '@authup/core-kit';\nimport { ClientEntity } from '../client/index.ts';\nimport { RealmEntity } from '../realm/index.ts';\nimport { ScopeEntity } from '../scope/index.ts';\n\n@Entity({ name: 'auth_client_scopes' })\n@Unique(['clientId', 'scopeId'])\nexport class ClientScopeEntity implements ClientScope {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    @Index()\n    @Column({\n        type: 'boolean',\n        default: false, \n    })\n    default: boolean;\n\n    // ------------------------------------------------------------------\n\n    @Index()\n    @CreateDateColumn({ name: 'created_at', transformer: dateToISOStringTransformer })\n    createdAt: string;\n\n    @Index()\n    @UpdateDateColumn({ name: 'updated_at', transformer: dateToISOStringTransformer })\n    updatedAt: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({ name: 'client_id' })\n    clientId: Client['id'];\n\n    @ManyToOne(() => ClientEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'client_id' })\n    client: Client;\n\n    @Index()\n    @Column({ name: 'client_realm_id', nullable: true })\n    clientRealmId: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'client_realm_id' })\n    clientRealm: RealmEntity | null;\n\n    // ------------------------------------------------------------------\n\n    @Index()\n    @Column({ name: 'scope_id' })\n    scopeId: Scope['id'];\n\n    @ManyToOne(() => ScopeEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'scope_id' })\n    scope: Scope;\n\n    @Index()\n    @Column({ name: 'scope_realm_id', nullable: true })\n    scopeRealmId: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'scope_realm_id' })\n    scopeRealm: RealmEntity | null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA+BA,IAAaa,oBAAb,MAAaA;CAETC;CAOAC;CAMAC;CAIAC;CAKAC;CAIAC;CAIAC;CAOAC;CAMAC;CAIAC;CAIAC;CAOAC;AACJ;;;;;EAvDQC,MAAM;EACNX,SAAS;;;;;;;EAOOY,MAAM;EAAcC,aAAanB;;;;;;;EAIjCkB,MAAM;EAAcC,aAAanB;;;;AAK3CkB,aAAAA,CAAAA,OAAAA,EAAAA,MAAM,YAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,kBAAA,WAAA,YAAA,KAAA,CAAA;;CAGCjB,gBAAAA,cAAAA,EAAgBmB,UAAU,UAAA,CAAA;CAC7BF,WAAAA,EAAAA,MAAM,YAAA,CAAA;;;;;;EAIVA,MAAM;EAAmBG,UAAU;;;;;CAG5BnB,gBAAAA,aAAAA;EACbkB,UAAU;EACVC,UAAU;;CAEAH,WAAAA,EAAAA,MAAM,kBAAA,CAAA;;;;;CAMVA,OAAAA,EAAAA,MAAM,WAAA,CAAA;;;;CAGCf,gBAAAA,aAAAA,EAAeiB,UAAU,UAAA,CAAA;CAC5BF,WAAAA,EAAAA,MAAM,WAAA,CAAA;;;;;;EAIVA,MAAM;EAAkBG,UAAU;;;;;CAG3BnB,gBAAAA,aAAAA;EACbkB,UAAU;EACVC,UAAU;;CAEAH,WAAAA,EAAAA,MAAM,iBAAA,CAAA;;;AA7DdA,oBAAAA,aAAAA,CAAAA,OAAAA,EAAAA,MAAM,qBAAA,CAAA,GAAA,OAAA,CACP,YAAY,SAAA,CAAA,CAAA,GAAA,iBAAA"}

package/dist/adapters/database/domains/identity-provider-account/entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/identity-provider-account/entity.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAER,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,EACL,IAAI,EACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,qBAGa,6BAA8B,YAAW,uBAAuB;IAEzE,EAAE,EAAE,MAAM,CAAC;IASX,WAAW,EAAE,MAAM,CAAC;IASpB,YAAY,EAAE,MAAM,CAAC;IAOrB,cAAc,EAAE,MAAM,CAAC;IASvB,gBAAgB,EAAE,MAAM,CAAC;IASzB,iBAAiB,EAAE,MAAM,CAAC;IAU1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAUzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAIzB,SAAS,EAAE,MAAM,CAAC;IAIlB,SAAS,EAAE,MAAM,CAAC;IAMlB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAInB,IAAI,EAAE,UAAU,CAAC;IAIjB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOhC,SAAS,EAAE,WAAW,GAAG,IAAI,CAAC;IAK9B,UAAU,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAInC,QAAQ,EAAE,sBAAsB,CAAC;IAIjC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOpC,aAAa,EAAE,WAAW,GAAG,IAAI,CAAC;CACrC"}
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/identity-provider-account/entity.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAER,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,EACL,IAAI,EACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,qBAMa,6BAA8B,YAAW,uBAAuB;IAEzE,EAAE,EAAE,MAAM,CAAC;IASX,WAAW,EAAE,MAAM,CAAC;IASpB,YAAY,EAAE,MAAM,CAAC;IAOrB,cAAc,EAAE,MAAM,CAAC;IASvB,gBAAgB,EAAE,MAAM,CAAC;IASzB,iBAAiB,EAAE,MAAM,CAAC;IAU1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAUzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAIzB,SAAS,EAAE,MAAM,CAAC;IAIlB,SAAS,EAAE,MAAM,CAAC;IAMlB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAInB,IAAI,EAAE,UAAU,CAAC;IAIjB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOhC,SAAS,EAAE,WAAW,GAAG,IAAI,CAAC;IAK9B,UAAU,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAInC,QAAQ,EAAE,sBAAsB,CAAC;IAIjC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOpC,aAAa,EAAE,WAAW,GAAG,IAAI,CAAC;CACrC"}

package/dist/adapters/database/domains/identity-provider-account/entity.mjs

@@ -157,7 +157,7 @@ _ts_decorate([
 IdentityProviderAccountEntity = _ts_decorate([
 	Entity({ name: "auth_identity_provider_accounts" }),
 	Index(["providerId", "userId"], { unique: true }),
-	Index(["providerUserId", "providerId"])
+	Index(["providerUserId", "providerId"], { unique: true })
 ], IdentityProviderAccountEntity);
 //#endregion
 export { IdentityProviderAccountEntity };

package/dist/adapters/database/domains/identity-provider-account/entity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","RealmEntity","UserEntity","IdentityProviderEntity","IdentityProviderAccountEntity","id","accessToken","refreshToken","providerUserId","providerUserName","providerUserEmail","expiresIn","expiresAt","createdAt","updatedAt","userId","user","userRealmId","userRealm","providerId","provider","providerRealmId","providerRealm","name","type","nullable","default","select","length","unsigned","transformer","onDelete","unique"],"sources":["../../../../../src/adapters/database/domains/identity-provider-account/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity,\n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n \n    IdentityProvider, \n    IdentityProviderAccount, \n    Realm, \n    User,  \n} from '@authup/core-kit';\nimport { RealmEntity } from '../realm/index.ts';\nimport { UserEntity } from '../user/index.ts';\nimport { IdentityProviderEntity } from '../identity-provider/index.ts';\n\n@Entity({ name: 'auth_identity_provider_accounts' })\n@Index(['providerId', 'userId'], { unique: true })\n@Index(['providerUserId', 'providerId'])\nexport class IdentityProviderAccountEntity implements IdentityProviderAccount {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    @Column({\n        name: 'access_token',\n        type: 'text',\n        nullable: true,\n        default: null,\n        select: false,\n    })\n    accessToken: string;\n\n    @Column({\n        name: 'refresh_token',\n        type: 'text',\n        nullable: true,\n        default: null,\n        select: false,\n    })\n    refreshToken: string;\n\n    @Column({\n        name: 'provider_user_id', \n        type: 'varchar', \n        length: 256, \n    })\n    providerUserId: string;\n\n    @Column({\n        name: 'provider_user_name', \n        type: 'varchar', \n        length: 256, \n        nullable: true, \n        default: null, \n    })\n    providerUserName: string;\n\n    @Column({\n        name: 'provider_user_email', \n        type: 'varchar', \n        length: 512, \n        nullable: true, \n        default: null, \n    })\n    providerUserEmail: string;\n\n    @Column({\n        name: 'expires_in',\n        type: 'int',\n        unsigned: true,\n        nullable: true,\n        default: null,\n        select: false,\n    })\n    expiresIn: number | null;\n\n    @Column({\n        name: 'expires_at',\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n        default: null,\n        select: false,\n    })\n    expiresAt: string | null;\n\n    @Index()\n    @CreateDateColumn({ name: 'created_at', transformer: dateToISOStringTransformer })\n    createdAt: string;\n\n    @Index()\n    @UpdateDateColumn({ name: 'updated_at', transformer: dateToISOStringTransformer })\n    updatedAt: string;\n\n    // -----------------------------------------------\n\n    @Index()\n    @Column({ name: 'user_id' })\n    userId: User['id'];\n\n    @ManyToOne(() => UserEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'user_id' })\n    user: UserEntity;\n\n    @Index()\n    @Column({ name: 'user_realm_id', nullable: true })\n    userRealmId: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'user_realm_id' })\n    userRealm: RealmEntity | null;\n\n    // -----------------------------------------------\n\n    @Column({ name: 'provider_id' })\n    providerId: IdentityProvider['id'];\n\n    @ManyToOne(() => IdentityProviderEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'provider_id' })\n    provider: IdentityProviderEntity;\n\n    @Index()\n    @Column({ name: 'provider_realm_id', nullable: true })\n    providerRealmId: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'provider_realm_id' })\n    providerRealm: RealmEntity | null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAgCA,IAAaY,gCAAb,MAAaA;CAETC;CASAC;CASAC;CAOAC;CASAC;CASAC;CAUAC;CAUAC;CAIAC;CAIAC;CAMAC;CAIAC;CAIAC;CAOAC;CAKAC;CAIAC;CAIAC;CAOAC;AACJ;;;CA9GQC,MAAM;CACNC,MAAM;CACNC,UAAU;CACVC,SAAS;CACTC,QAAQ;;;CAKRJ,MAAM;CACNC,MAAM;CACNC,UAAU;CACVC,SAAS;CACTC,QAAQ;;;CAKRJ,MAAM;CACNC,MAAM;CACNI,QAAQ;;;CAKRL,MAAM;CACNC,MAAM;CACNI,QAAQ;CACRH,UAAU;CACVC,SAAS;;;CAKTH,MAAM;CACNC,MAAM;CACNI,QAAQ;CACRH,UAAU;CACVC,SAAS;;;CAKTH,MAAM;CACNC,MAAM;CACNK,UAAU;CACVJ,UAAU;CACVC,SAAS;CACTC,QAAQ;;;CAKRJ,MAAM;CACNC,MAAM;CACNI,QAAQ;CACRH,UAAU;CACVC,SAAS;CACTC,QAAQ;;;;;EAKQJ,MAAM;EAAcO,aAAa9B;;;;;;;EAIjCuB,MAAM;EAAcO,aAAa9B;;;;;;CAM3CuB,OAAAA,EAAAA,MAAM,UAAA,CAAA;;;;CAGCrB,gBAAAA,YAAAA,EAAc6B,UAAU,UAAA,CAAA;CAC3BR,WAAAA,EAAAA,MAAM,UAAA,CAAA;;;;;;EAIVA,MAAM;EAAiBE,UAAU;;;;;CAG1BxB,gBAAAA,aAAAA;EACb8B,UAAU;EACVN,UAAU;;CAEAF,WAAAA,EAAAA,MAAM,gBAAA,CAAA;;;AAKVA,aAAAA,CAAAA,OAAAA,EAAAA,MAAM,cAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,8BAAA,WAAA,cAAA,KAAA,CAAA;;CAGCpB,gBAAAA,wBAAAA,EAA0B4B,UAAU,UAAA,CAAA;CACvCR,WAAAA,EAAAA,MAAM,cAAA,CAAA;;;;;;EAIVA,MAAM;EAAqBE,UAAU;;;;;CAG9BxB,gBAAAA,aAAAA;EACb8B,UAAU;EACVN,UAAU;;CAEAF,WAAAA,EAAAA,MAAM,oBAAA,CAAA;;;;CApHdA,OAAAA,EAAAA,MAAM,kCAAA,CAAA;CACR,MAAA,CAAA,cAAc,QAAA,GAAA,EAAaS,QAAQ,KAAA,CAAA;CACnC,MAAA,CAAA,kBAAkB,YAAA,CAAA"}
+{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","RealmEntity","UserEntity","IdentityProviderEntity","IdentityProviderAccountEntity","id","accessToken","refreshToken","providerUserId","providerUserName","providerUserEmail","expiresIn","expiresAt","createdAt","updatedAt","userId","user","userRealmId","userRealm","providerId","provider","providerRealmId","providerRealm","name","type","nullable","default","select","length","unsigned","transformer","onDelete","unique"],"sources":["../../../../../src/adapters/database/domains/identity-provider-account/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity,\n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n \n    IdentityProvider, \n    IdentityProviderAccount, \n    Realm, \n    User,  \n} from '@authup/core-kit';\nimport { RealmEntity } from '../realm/index.ts';\nimport { UserEntity } from '../user/index.ts';\nimport { IdentityProviderEntity } from '../identity-provider/index.ts';\n\n@Entity({ name: 'auth_identity_provider_accounts' })\n@Index(['providerId', 'userId'], { unique: true })\n// one external identity belongs to one local user. The column order is\n// load-bearing: `providerUserId` leads the sequence the rapiq schema\n// declares, and reversing it would fail the boot-time index assertion.\n@Index(['providerUserId', 'providerId'], { unique: true })\nexport class IdentityProviderAccountEntity implements IdentityProviderAccount {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    @Column({\n        name: 'access_token',\n        type: 'text',\n        nullable: true,\n        default: null,\n        select: false,\n    })\n    accessToken: string;\n\n    @Column({\n        name: 'refresh_token',\n        type: 'text',\n        nullable: true,\n        default: null,\n        select: false,\n    })\n    refreshToken: string;\n\n    @Column({\n        name: 'provider_user_id', \n        type: 'varchar', \n        length: 256, \n    })\n    providerUserId: string;\n\n    @Column({\n        name: 'provider_user_name', \n        type: 'varchar', \n        length: 256, \n        nullable: true, \n        default: null, \n    })\n    providerUserName: string;\n\n    @Column({\n        name: 'provider_user_email', \n        type: 'varchar', \n        length: 512, \n        nullable: true, \n        default: null, \n    })\n    providerUserEmail: string;\n\n    @Column({\n        name: 'expires_in',\n        type: 'int',\n        unsigned: true,\n        nullable: true,\n        default: null,\n        select: false,\n    })\n    expiresIn: number | null;\n\n    @Column({\n        name: 'expires_at',\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n        default: null,\n        select: false,\n    })\n    expiresAt: string | null;\n\n    @Index()\n    @CreateDateColumn({ name: 'created_at', transformer: dateToISOStringTransformer })\n    createdAt: string;\n\n    @Index()\n    @UpdateDateColumn({ name: 'updated_at', transformer: dateToISOStringTransformer })\n    updatedAt: string;\n\n    // -----------------------------------------------\n\n    @Index()\n    @Column({ name: 'user_id' })\n    userId: User['id'];\n\n    @ManyToOne(() => UserEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'user_id' })\n    user: UserEntity;\n\n    @Index()\n    @Column({ name: 'user_realm_id', nullable: true })\n    userRealmId: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'user_realm_id' })\n    userRealm: RealmEntity | null;\n\n    // -----------------------------------------------\n\n    @Column({ name: 'provider_id' })\n    providerId: IdentityProvider['id'];\n\n    @ManyToOne(() => IdentityProviderEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'provider_id' })\n    provider: IdentityProviderEntity;\n\n    @Index()\n    @Column({ name: 'provider_realm_id', nullable: true })\n    providerRealmId: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'provider_realm_id' })\n    providerRealm: RealmEntity | null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAmCA,IAAaY,gCAAb,MAAaA;CAETC;CASAC;CASAC;CAOAC;CASAC;CASAC;CAUAC;CAUAC;CAIAC;CAIAC;CAMAC;CAIAC;CAIAC;CAOAC;CAKAC;CAIAC;CAIAC;CAOAC;AACJ;;;CA9GQC,MAAM;CACNC,MAAM;CACNC,UAAU;CACVC,SAAS;CACTC,QAAQ;;;CAKRJ,MAAM;CACNC,MAAM;CACNC,UAAU;CACVC,SAAS;CACTC,QAAQ;;;CAKRJ,MAAM;CACNC,MAAM;CACNI,QAAQ;;;CAKRL,MAAM;CACNC,MAAM;CACNI,QAAQ;CACRH,UAAU;CACVC,SAAS;;;CAKTH,MAAM;CACNC,MAAM;CACNI,QAAQ;CACRH,UAAU;CACVC,SAAS;;;CAKTH,MAAM;CACNC,MAAM;CACNK,UAAU;CACVJ,UAAU;CACVC,SAAS;CACTC,QAAQ;;;CAKRJ,MAAM;CACNC,MAAM;CACNI,QAAQ;CACRH,UAAU;CACVC,SAAS;CACTC,QAAQ;;;;;EAKQJ,MAAM;EAAcO,aAAa9B;;;;;;;EAIjCuB,MAAM;EAAcO,aAAa9B;;;;;;CAM3CuB,OAAAA,EAAAA,MAAM,UAAA,CAAA;;;;CAGCrB,gBAAAA,YAAAA,EAAc6B,UAAU,UAAA,CAAA;CAC3BR,WAAAA,EAAAA,MAAM,UAAA,CAAA;;;;;;EAIVA,MAAM;EAAiBE,UAAU;;;;;CAG1BxB,gBAAAA,aAAAA;EACb8B,UAAU;EACVN,UAAU;;CAEAF,WAAAA,EAAAA,MAAM,gBAAA,CAAA;;;AAKVA,aAAAA,CAAAA,OAAAA,EAAAA,MAAM,cAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,8BAAA,WAAA,cAAA,KAAA,CAAA;;CAGCpB,gBAAAA,wBAAAA,EAA0B4B,UAAU,UAAA,CAAA;CACvCR,WAAAA,EAAAA,MAAM,cAAA,CAAA;;;;;;EAIVA,MAAM;EAAqBE,UAAU;;;;;CAG9BxB,gBAAAA,aAAAA;EACb8B,UAAU;EACVN,UAAU;;CAEAF,WAAAA,EAAAA,MAAM,oBAAA,CAAA;;;;CAvHdA,OAAAA,EAAAA,MAAM,kCAAA,CAAA;CACR,MAAA,CAAA,cAAc,QAAA,GAAA,EAAaS,QAAQ,KAAA,CAAA;CAInC,MAAA,CAAA,kBAAkB,YAAA,GAAA,EAAiBA,QAAQ,KAAA,CAAA"}

package/dist/adapters/database/migrations/mysql/1786631686318-SortIndexesAndAccountUniqueness.d.ts

@@ -0,0 +1,50 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+/**
+ * Client-scope sort indexes (issue #3441) and identity-provider account
+ * uniqueness (issue #3442).
+ *
+ * - Indexes `auth_client_scopes.created_at` and `updated_at`.
+ *   `clientScopeSchema` was the only registered schema with no `sorts`
+ *   allow-list, so rapiq fell back to a syntactic name check and handed an
+ *   arbitrary `?sort=` key to `ORDER BY`. Declaring the allow-list requires
+ *   every listed key to lead a real entity index; the two timestamp columns
+ *   were the only ones missing theirs.
+ * - Makes `(provider_user_id, provider_id)` unique on
+ *   `auth_identity_provider_accounts`. "One external identity belongs to one
+ *   local user" was enforced only by a read-then-write in
+ *   `IdentityProviderAccountManager`: no transaction, no row lock, and
+ *   nothing behind it in the schema, so two concurrent completions for the
+ *   same upstream subject could both observe "not linked" and both insert.
+ *   After that the subject resolves to whichever row the database happens to
+ *   order first. The column order matches the pre-existing non-unique index,
+ *   so this is an in-place uniqueness flip under the same derived name
+ *   rather than a rename.
+ *
+ * MySQL commits DDL implicitly, so `migrationsTransactionMode: 'all'` cannot
+ * roll a partial run back. A DROP followed by a CREATE would leave the table
+ * with no index of that name if the process died between them, and every
+ * later attempt would then fail at the DROP. One ALTER carrying both is
+ * atomic, so the uniqueness flip either applies or does not.
+ *
+ * Pre-existing duplicates abort the boot with an actionable message. They
+ * would abort it anyway, since `CREATE UNIQUE INDEX` fails on them; the
+ * check only decides whether the operator reads a readable sentence or a
+ * hash-named driver error.
+ *
+ * It runs BEFORE any DDL for the same implicit-commit reason: an abort
+ * after the two CREATE INDEX statements leaves them committed while the
+ * migration stays unapplied, so the operator's retry — after cleaning the
+ * duplicates — would die on `Duplicate key name` and never reach the flip.
+ * Nothing here writes before the check, so a refusal leaves the schema
+ * exactly as it was.
+ *
+ * Generated with `migration generate`; derived IDX_<hash> names, generated
+ * DDL untouched (the duplicate pre-check and the single-ALTER flip are
+ * hand-authored).
+ */
+export declare class SortIndexesAndAccountUniqueness1786631686318 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}
+//# sourceMappingURL=1786631686318-SortIndexesAndAccountUniqueness.d.ts.map

package/dist/adapters/database/migrations/mysql/1786631686318-SortIndexesAndAccountUniqueness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"1786631686318-SortIndexesAndAccountUniqueness.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/migrations/mysql/1786631686318-SortIndexesAndAccountUniqueness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,qBAAa,4CAA6C,YAAW,kBAAkB;IACnF,IAAI,SAAkD;IAEzC,EAAE,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA6B3C,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAa7D"}

package/dist/adapters/database/migrations/mysql/1786631686318-SortIndexesAndAccountUniqueness.mjs

@@ -0,0 +1,86 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/adapters/database/migrations/mysql/1786631686318-SortIndexesAndAccountUniqueness.ts
+/**
+* Client-scope sort indexes (issue #3441) and identity-provider account
+* uniqueness (issue #3442).
+*
+* - Indexes `auth_client_scopes.created_at` and `updated_at`.
+*   `clientScopeSchema` was the only registered schema with no `sorts`
+*   allow-list, so rapiq fell back to a syntactic name check and handed an
+*   arbitrary `?sort=` key to `ORDER BY`. Declaring the allow-list requires
+*   every listed key to lead a real entity index; the two timestamp columns
+*   were the only ones missing theirs.
+* - Makes `(provider_user_id, provider_id)` unique on
+*   `auth_identity_provider_accounts`. "One external identity belongs to one
+*   local user" was enforced only by a read-then-write in
+*   `IdentityProviderAccountManager`: no transaction, no row lock, and
+*   nothing behind it in the schema, so two concurrent completions for the
+*   same upstream subject could both observe "not linked" and both insert.
+*   After that the subject resolves to whichever row the database happens to
+*   order first. The column order matches the pre-existing non-unique index,
+*   so this is an in-place uniqueness flip under the same derived name
+*   rather than a rename.
+*
+* MySQL commits DDL implicitly, so `migrationsTransactionMode: 'all'` cannot
+* roll a partial run back. A DROP followed by a CREATE would leave the table
+* with no index of that name if the process died between them, and every
+* later attempt would then fail at the DROP. One ALTER carrying both is
+* atomic, so the uniqueness flip either applies or does not.
+*
+* Pre-existing duplicates abort the boot with an actionable message. They
+* would abort it anyway, since `CREATE UNIQUE INDEX` fails on them; the
+* check only decides whether the operator reads a readable sentence or a
+* hash-named driver error.
+*
+* It runs BEFORE any DDL for the same implicit-commit reason: an abort
+* after the two CREATE INDEX statements leaves them committed while the
+* migration stays unapplied, so the operator's retry — after cleaning the
+* duplicates — would die on `Duplicate key name` and never reach the flip.
+* Nothing here writes before the check, so a refusal leaves the schema
+* exactly as it was.
+*
+* Generated with `migration generate`; derived IDX_<hash> names, generated
+* DDL untouched (the duplicate pre-check and the single-ALTER flip are
+* hand-authored).
+*/ var SortIndexesAndAccountUniqueness1786631686318 = class {
+	name = "SortIndexesAndAccountUniqueness1786631686318";
+	async up(queryRunner) {
+		const duplicates = await queryRunner.query(`
+            SELECT \`provider_id\`, \`provider_user_id\`, COUNT(*) AS \`count\`
+            FROM \`auth_identity_provider_accounts\`
+            GROUP BY \`provider_id\`, \`provider_user_id\`
+            HAVING COUNT(*) > 1
+        `);
+		if (duplicates.length > 0) throw new Error(`Identity-provider account uniqueness migration aborted: "auth_identity_provider_accounts" holds ${duplicates.length} duplicate (provider_id, provider_user_id) group(s). One external identity must belong to one local user. Merge or delete the conflicting rows manually before re-running.`);
+		await queryRunner.query(`
+            CREATE INDEX \`IDX_52f59535945c8cdbd62439bba5\` ON \`auth_client_scopes\` (\`created_at\`)
+        `);
+		await queryRunner.query(`
+            CREATE INDEX \`IDX_04264aebc8b6625b1da88e23df\` ON \`auth_client_scopes\` (\`updated_at\`)
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_identity_provider_accounts\`
+                DROP INDEX \`IDX_ccf3fd36253755bd9a5f43c516\`,
+                ADD UNIQUE INDEX \`IDX_ccf3fd36253755bd9a5f43c516\` (\`provider_user_id\`, \`provider_id\`)
+        `);
+	}
+	async down(queryRunner) {
+		await queryRunner.query(`
+            ALTER TABLE \`auth_identity_provider_accounts\`
+                DROP INDEX \`IDX_ccf3fd36253755bd9a5f43c516\`,
+                ADD INDEX \`IDX_ccf3fd36253755bd9a5f43c516\` (\`provider_user_id\`, \`provider_id\`)
+        `);
+		await queryRunner.query(`
+            DROP INDEX \`IDX_04264aebc8b6625b1da88e23df\` ON \`auth_client_scopes\`
+        `);
+		await queryRunner.query(`
+            DROP INDEX \`IDX_52f59535945c8cdbd62439bba5\` ON \`auth_client_scopes\`
+        `);
+	}
+};
+//#endregion
+export { SortIndexesAndAccountUniqueness1786631686318 };
+
+//# sourceMappingURL=1786631686318-SortIndexesAndAccountUniqueness.mjs.map

package/dist/adapters/database/migrations/mysql/1786631686318-SortIndexesAndAccountUniqueness.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"1786631686318-SortIndexesAndAccountUniqueness.mjs","names":["SortIndexesAndAccountUniqueness1786631686318","name","up","queryRunner","duplicates","query","length","Error","down"],"sources":["../../../../../src/adapters/database/migrations/mysql/1786631686318-SortIndexesAndAccountUniqueness.ts"],"sourcesContent":["import type { MigrationInterface, QueryRunner } from 'typeorm';\n\n/**\n * Client-scope sort indexes (issue #3441) and identity-provider account\n * uniqueness (issue #3442).\n *\n * - Indexes `auth_client_scopes.created_at` and `updated_at`.\n *   `clientScopeSchema` was the only registered schema with no `sorts`\n *   allow-list, so rapiq fell back to a syntactic name check and handed an\n *   arbitrary `?sort=` key to `ORDER BY`. Declaring the allow-list requires\n *   every listed key to lead a real entity index; the two timestamp columns\n *   were the only ones missing theirs.\n * - Makes `(provider_user_id, provider_id)` unique on\n *   `auth_identity_provider_accounts`. \"One external identity belongs to one\n *   local user\" was enforced only by a read-then-write in\n *   `IdentityProviderAccountManager`: no transaction, no row lock, and\n *   nothing behind it in the schema, so two concurrent completions for the\n *   same upstream subject could both observe \"not linked\" and both insert.\n *   After that the subject resolves to whichever row the database happens to\n *   order first. The column order matches the pre-existing non-unique index,\n *   so this is an in-place uniqueness flip under the same derived name\n *   rather than a rename.\n *\n * MySQL commits DDL implicitly, so `migrationsTransactionMode: 'all'` cannot\n * roll a partial run back. A DROP followed by a CREATE would leave the table\n * with no index of that name if the process died between them, and every\n * later attempt would then fail at the DROP. One ALTER carrying both is\n * atomic, so the uniqueness flip either applies or does not.\n *\n * Pre-existing duplicates abort the boot with an actionable message. They\n * would abort it anyway, since `CREATE UNIQUE INDEX` fails on them; the\n * check only decides whether the operator reads a readable sentence or a\n * hash-named driver error.\n *\n * It runs BEFORE any DDL for the same implicit-commit reason: an abort\n * after the two CREATE INDEX statements leaves them committed while the\n * migration stays unapplied, so the operator's retry — after cleaning the\n * duplicates — would die on `Duplicate key name` and never reach the flip.\n * Nothing here writes before the check, so a refusal leaves the schema\n * exactly as it was.\n *\n * Generated with `migration generate`; derived IDX_<hash> names, generated\n * DDL untouched (the duplicate pre-check and the single-ALTER flip are\n * hand-authored).\n */\nexport class SortIndexesAndAccountUniqueness1786631686318 implements MigrationInterface {\n    name = 'SortIndexesAndAccountUniqueness1786631686318';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        const duplicates = await queryRunner.query(`\n            SELECT \\`provider_id\\`, \\`provider_user_id\\`, COUNT(*) AS \\`count\\`\n            FROM \\`auth_identity_provider_accounts\\`\n            GROUP BY \\`provider_id\\`, \\`provider_user_id\\`\n            HAVING COUNT(*) > 1\n        `);\n        if (duplicates.length > 0) {\n            throw new Error(\n                `Identity-provider account uniqueness migration aborted: \"auth_identity_provider_accounts\" holds ${duplicates.length} ` +\n                'duplicate (provider_id, provider_user_id) group(s). One external identity must belong to one local user. ' +\n                'Merge or delete the conflicting rows manually before re-running.',\n            );\n        }\n\n        await queryRunner.query(`\n            CREATE INDEX \\`IDX_52f59535945c8cdbd62439bba5\\` ON \\`auth_client_scopes\\` (\\`created_at\\`)\n        `);\n        await queryRunner.query(`\n            CREATE INDEX \\`IDX_04264aebc8b6625b1da88e23df\\` ON \\`auth_client_scopes\\` (\\`updated_at\\`)\n        `);\n\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_identity_provider_accounts\\`\n                DROP INDEX \\`IDX_ccf3fd36253755bd9a5f43c516\\`,\n                ADD UNIQUE INDEX \\`IDX_ccf3fd36253755bd9a5f43c516\\` (\\`provider_user_id\\`, \\`provider_id\\`)\n        `);\n    }\n\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_identity_provider_accounts\\`\n                DROP INDEX \\`IDX_ccf3fd36253755bd9a5f43c516\\`,\n                ADD INDEX \\`IDX_ccf3fd36253755bd9a5f43c516\\` (\\`provider_user_id\\`, \\`provider_id\\`)\n        `);\n        await queryRunner.query(`\n            DROP INDEX \\`IDX_04264aebc8b6625b1da88e23df\\` ON \\`auth_client_scopes\\`\n        `);\n        await queryRunner.query(`\n            DROP INDEX \\`IDX_52f59535945c8cdbd62439bba5\\` ON \\`auth_client_scopes\\`\n        `);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CA,IAAaA,+CAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGC,aAAyC;EACrD,MAAMC,aAAa,MAAMD,YAAYE,MAAM;;;;;SAK1C;EACD,IAAID,WAAWE,SAAS,GACpB,MAAM,IAAIC,MACN,mGAAmGH,WAAWE,OAAO,2KAErH;EAIR,MAAMH,YAAYE,MAAM;;SAEvB;EACD,MAAMF,YAAYE,MAAM;;SAEvB;EAED,MAAMF,YAAYE,MAAM;;;;SAIvB;CACL;CAEA,MAAaG,KAAKL,aAAyC;EACvD,MAAMA,YAAYE,MAAM;;;;SAIvB;EACD,MAAMF,YAAYE,MAAM;;SAEvB;EACD,MAAMF,YAAYE,MAAM;;SAEvB;CACL;AACJ"}

package/dist/adapters/database/migrations/postgres/1786631686318-SortIndexesAndAccountUniqueness.d.ts

@@ -0,0 +1,42 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+/**
+ * Client-scope sort indexes (issue #3441) and identity-provider account
+ * uniqueness (issue #3442).
+ *
+ * - Indexes `auth_client_scopes.created_at` and `updated_at`.
+ *   `clientScopeSchema` was the only registered schema with no `sorts`
+ *   allow-list, so rapiq fell back to a syntactic name check and handed an
+ *   arbitrary `?sort=` key to `ORDER BY`. Declaring the allow-list requires
+ *   every listed key to lead a real entity index; the two timestamp columns
+ *   were the only ones missing theirs.
+ * - Makes `(provider_user_id, provider_id)` unique on
+ *   `auth_identity_provider_accounts`. "One external identity belongs to one
+ *   local user" was enforced only by a read-then-write in
+ *   `IdentityProviderAccountManager`: no transaction, no row lock, and
+ *   nothing behind it in the schema, so two concurrent completions for the
+ *   same upstream subject could both observe "not linked" and both insert.
+ *   After that the subject resolves to whichever row the database happens to
+ *   order first. The column order matches the pre-existing non-unique index,
+ *   so this is an in-place uniqueness flip under the same derived name
+ *   rather than a rename.
+ *
+ * Pre-existing duplicates abort the boot with an actionable message. They
+ * would abort it anyway, since `CREATE UNIQUE INDEX` fails on them; the
+ * check only decides whether the operator reads a readable sentence or a
+ * hash-named driver error.
+ *
+ * It runs before any DDL, matching the mysql half: postgres would roll the
+ * whole migration back on the abort, but keeping one order across both
+ * dialects means the refusal never depends on which one is reading it.
+ *
+ * Generated with `migration generate`; derived IDX_<hash> names, generated
+ * DDL untouched (the duplicate pre-check is hand-authored, and `down()`
+ * carries the hand-corrected column order — see
+ * .agents/references/typeorm.md).
+ */
+export declare class SortIndexesAndAccountUniqueness1786631686318 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}
+//# sourceMappingURL=1786631686318-SortIndexesAndAccountUniqueness.d.ts.map

package/dist/adapters/database/migrations/postgres/1786631686318-SortIndexesAndAccountUniqueness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"1786631686318-SortIndexesAndAccountUniqueness.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/migrations/postgres/1786631686318-SortIndexesAndAccountUniqueness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,qBAAa,4CAA6C,YAAW,kBAAkB;IACnF,IAAI,SAAkD;IAEzC,EAAE,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA8B3C,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAc7D"}

package/dist/adapters/database/migrations/postgres/1786631686318-SortIndexesAndAccountUniqueness.mjs

@@ -0,0 +1,80 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/adapters/database/migrations/postgres/1786631686318-SortIndexesAndAccountUniqueness.ts
+/**
+* Client-scope sort indexes (issue #3441) and identity-provider account
+* uniqueness (issue #3442).
+*
+* - Indexes `auth_client_scopes.created_at` and `updated_at`.
+*   `clientScopeSchema` was the only registered schema with no `sorts`
+*   allow-list, so rapiq fell back to a syntactic name check and handed an
+*   arbitrary `?sort=` key to `ORDER BY`. Declaring the allow-list requires
+*   every listed key to lead a real entity index; the two timestamp columns
+*   were the only ones missing theirs.
+* - Makes `(provider_user_id, provider_id)` unique on
+*   `auth_identity_provider_accounts`. "One external identity belongs to one
+*   local user" was enforced only by a read-then-write in
+*   `IdentityProviderAccountManager`: no transaction, no row lock, and
+*   nothing behind it in the schema, so two concurrent completions for the
+*   same upstream subject could both observe "not linked" and both insert.
+*   After that the subject resolves to whichever row the database happens to
+*   order first. The column order matches the pre-existing non-unique index,
+*   so this is an in-place uniqueness flip under the same derived name
+*   rather than a rename.
+*
+* Pre-existing duplicates abort the boot with an actionable message. They
+* would abort it anyway, since `CREATE UNIQUE INDEX` fails on them; the
+* check only decides whether the operator reads a readable sentence or a
+* hash-named driver error.
+*
+* It runs before any DDL, matching the mysql half: postgres would roll the
+* whole migration back on the abort, but keeping one order across both
+* dialects means the refusal never depends on which one is reading it.
+*
+* Generated with `migration generate`; derived IDX_<hash> names, generated
+* DDL untouched (the duplicate pre-check is hand-authored, and `down()`
+* carries the hand-corrected column order — see
+* .agents/references/typeorm.md).
+*/ var SortIndexesAndAccountUniqueness1786631686318 = class {
+	name = "SortIndexesAndAccountUniqueness1786631686318";
+	async up(queryRunner) {
+		const duplicates = await queryRunner.query(`
+            SELECT "provider_id", "provider_user_id", COUNT(*) AS "count"
+            FROM "auth_identity_provider_accounts"
+            GROUP BY "provider_id", "provider_user_id"
+            HAVING COUNT(*) > 1
+        `);
+		if (duplicates.length > 0) throw new Error(`Identity-provider account uniqueness migration aborted: "auth_identity_provider_accounts" holds ${duplicates.length} duplicate (provider_id, provider_user_id) group(s). One external identity must belong to one local user. Merge or delete the conflicting rows manually before re-running.`);
+		await queryRunner.query(`
+            CREATE INDEX "IDX_52f59535945c8cdbd62439bba5" ON "auth_client_scopes" ("created_at")
+        `);
+		await queryRunner.query(`
+            CREATE INDEX "IDX_04264aebc8b6625b1da88e23df" ON "auth_client_scopes" ("updated_at")
+        `);
+		await queryRunner.query(`
+            DROP INDEX "public"."IDX_ccf3fd36253755bd9a5f43c516"
+        `);
+		await queryRunner.query(`
+            CREATE UNIQUE INDEX "IDX_ccf3fd36253755bd9a5f43c516" ON "auth_identity_provider_accounts" ("provider_user_id", "provider_id")
+        `);
+	}
+	async down(queryRunner) {
+		await queryRunner.query(`
+            DROP INDEX "public"."IDX_ccf3fd36253755bd9a5f43c516"
+        `);
+		await queryRunner.query(`
+            CREATE INDEX "IDX_ccf3fd36253755bd9a5f43c516" ON "auth_identity_provider_accounts" ("provider_user_id", "provider_id")
+        `);
+		await queryRunner.query(`
+            DROP INDEX "public"."IDX_04264aebc8b6625b1da88e23df"
+        `);
+		await queryRunner.query(`
+            DROP INDEX "public"."IDX_52f59535945c8cdbd62439bba5"
+        `);
+	}
+};
+//#endregion
+export { SortIndexesAndAccountUniqueness1786631686318 };
+
+//# sourceMappingURL=1786631686318-SortIndexesAndAccountUniqueness.mjs.map

package/dist/adapters/database/migrations/postgres/1786631686318-SortIndexesAndAccountUniqueness.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"1786631686318-SortIndexesAndAccountUniqueness.mjs","names":["SortIndexesAndAccountUniqueness1786631686318","name","up","queryRunner","duplicates","query","length","Error","down"],"sources":["../../../../../src/adapters/database/migrations/postgres/1786631686318-SortIndexesAndAccountUniqueness.ts"],"sourcesContent":["import type { MigrationInterface, QueryRunner } from 'typeorm';\n\n/**\n * Client-scope sort indexes (issue #3441) and identity-provider account\n * uniqueness (issue #3442).\n *\n * - Indexes `auth_client_scopes.created_at` and `updated_at`.\n *   `clientScopeSchema` was the only registered schema with no `sorts`\n *   allow-list, so rapiq fell back to a syntactic name check and handed an\n *   arbitrary `?sort=` key to `ORDER BY`. Declaring the allow-list requires\n *   every listed key to lead a real entity index; the two timestamp columns\n *   were the only ones missing theirs.\n * - Makes `(provider_user_id, provider_id)` unique on\n *   `auth_identity_provider_accounts`. \"One external identity belongs to one\n *   local user\" was enforced only by a read-then-write in\n *   `IdentityProviderAccountManager`: no transaction, no row lock, and\n *   nothing behind it in the schema, so two concurrent completions for the\n *   same upstream subject could both observe \"not linked\" and both insert.\n *   After that the subject resolves to whichever row the database happens to\n *   order first. The column order matches the pre-existing non-unique index,\n *   so this is an in-place uniqueness flip under the same derived name\n *   rather than a rename.\n *\n * Pre-existing duplicates abort the boot with an actionable message. They\n * would abort it anyway, since `CREATE UNIQUE INDEX` fails on them; the\n * check only decides whether the operator reads a readable sentence or a\n * hash-named driver error.\n *\n * It runs before any DDL, matching the mysql half: postgres would roll the\n * whole migration back on the abort, but keeping one order across both\n * dialects means the refusal never depends on which one is reading it.\n *\n * Generated with `migration generate`; derived IDX_<hash> names, generated\n * DDL untouched (the duplicate pre-check is hand-authored, and `down()`\n * carries the hand-corrected column order — see\n * .agents/references/typeorm.md).\n */\nexport class SortIndexesAndAccountUniqueness1786631686318 implements MigrationInterface {\n    name = 'SortIndexesAndAccountUniqueness1786631686318';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        const duplicates = await queryRunner.query(`\n            SELECT \"provider_id\", \"provider_user_id\", COUNT(*) AS \"count\"\n            FROM \"auth_identity_provider_accounts\"\n            GROUP BY \"provider_id\", \"provider_user_id\"\n            HAVING COUNT(*) > 1\n        `);\n        if (duplicates.length > 0) {\n            throw new Error(\n                `Identity-provider account uniqueness migration aborted: \"auth_identity_provider_accounts\" holds ${duplicates.length} ` +\n                'duplicate (provider_id, provider_user_id) group(s). One external identity must belong to one local user. ' +\n                'Merge or delete the conflicting rows manually before re-running.',\n            );\n        }\n\n        await queryRunner.query(`\n            CREATE INDEX \"IDX_52f59535945c8cdbd62439bba5\" ON \"auth_client_scopes\" (\"created_at\")\n        `);\n        await queryRunner.query(`\n            CREATE INDEX \"IDX_04264aebc8b6625b1da88e23df\" ON \"auth_client_scopes\" (\"updated_at\")\n        `);\n\n        await queryRunner.query(`\n            DROP INDEX \"public\".\"IDX_ccf3fd36253755bd9a5f43c516\"\n        `);\n        await queryRunner.query(`\n            CREATE UNIQUE INDEX \"IDX_ccf3fd36253755bd9a5f43c516\" ON \"auth_identity_provider_accounts\" (\"provider_user_id\", \"provider_id\")\n        `);\n    }\n\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            DROP INDEX \"public\".\"IDX_ccf3fd36253755bd9a5f43c516\"\n        `);\n        await queryRunner.query(`\n            CREATE INDEX \"IDX_ccf3fd36253755bd9a5f43c516\" ON \"auth_identity_provider_accounts\" (\"provider_user_id\", \"provider_id\")\n        `);\n        await queryRunner.query(`\n            DROP INDEX \"public\".\"IDX_04264aebc8b6625b1da88e23df\"\n        `);\n        await queryRunner.query(`\n            DROP INDEX \"public\".\"IDX_52f59535945c8cdbd62439bba5\"\n        `);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCA,IAAaA,+CAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGC,aAAyC;EACrD,MAAMC,aAAa,MAAMD,YAAYE,MAAM;;;;;SAK1C;EACD,IAAID,WAAWE,SAAS,GACpB,MAAM,IAAIC,MACN,mGAAmGH,WAAWE,OAAO,2KAErH;EAIR,MAAMH,YAAYE,MAAM;;SAEvB;EACD,MAAMF,YAAYE,MAAM;;SAEvB;EAED,MAAMF,YAAYE,MAAM;;SAEvB;EACD,MAAMF,YAAYE,MAAM;;SAEvB;CACL;CAEA,MAAaG,KAAKL,aAAyC;EACvD,MAAMA,YAAYE,MAAM;;SAEvB;EACD,MAAMF,YAAYE,MAAM;;SAEvB;EACD,MAAMF,YAAYE,MAAM;;SAEvB;EACD,MAAMF,YAAYE,MAAM;;SAEvB;CACL;AACJ"}

package/dist/adapters/http/adapters/oauth2/grant-types/utils/credentials.mjs

@@ -2,8 +2,8 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { OAuth2RequestError } from "@authup/specs";
-import { readRequestBody } from "@routup/basic/body";
 import { AuthorizationHeaderType, parseAuthorizationHeader } from "hapic";
+import { readRequestBody } from "@routup/basic/body";
 //#region src/adapters/http/adapters/oauth2/grant-types/utils/credentials.ts
 /**
 * Extract client credentials from an OAuth2 token endpoint request.

package/dist/adapters/http/adapters/oauth2/grant-types/utils/guess.mjs

@@ -2,9 +2,9 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { OAuth2TokenGrant } from "@authup/specs";
+import { AuthorizationHeaderType, parseAuthorizationHeader } from "hapic";
 import { readRequestBody } from "@routup/basic/body";
 import { useRequestQuery } from "@routup/basic/query";
-import { AuthorizationHeaderType, parseAuthorizationHeader } from "hapic";
 //#region src/adapters/http/adapters/oauth2/grant-types/utils/guess.ts
 async function guessOauth2GrantTypeByRequest(event) {
 	const body = await readRequestBody(event);

package/dist/adapters/http/controllers/entities/client/module.mjs

@@ -4,6 +4,8 @@ import.meta.url;
 import { RECORD_QUERY_PARAMETERS, describeQuerySchema } from "../../../../../core/query/describe.mjs";
 import { clientSchema } from "../../../../../core/entities/client/schema.mjs";
 import { OAuth2ScopeAttributesResolver } from "../../../../../core/oauth2/scope/resolver.mjs";
+import { isSelfToken } from "../../../../../utils/self-id.mjs";
+import "../../../../../utils/index.mjs";
 import "../../../../../core/index.mjs";
 import { useRequestIdentity } from "../../../request/helpers/identity.mjs";
 import { buildActorContext } from "../../../request/helpers/actor.mjs";
@@ -11,8 +13,6 @@ import { applyRouteRealmIDToBody, getRequestRealmID } from "../../../request/hel
 import { useRequestScopes } from "../../../request/helpers/scopes.mjs";
 import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
-import { isSelfToken } from "../../../../../utils/self-id.mjs";
-import "../../../../../utils/index.mjs";
 import "../../../middleware/index.mjs";
 import { EntityNotFoundError } from "@authup/errors";
 import { OAuth2SubKind } from "@authup/specs";

package/dist/adapters/http/controllers/entities/identity-provider/module.d.ts

@@ -2,20 +2,18 @@ import type { IAppEvent } from 'routup';
 import type { IdentityProvider, IdentityProviderAccount } from '@authup/core-kit';
 import type { Logger } from '@authup/server-kit';
 import type { EntityCollectionResponse, EntityRecordResponse, IdentityProviderCreatePayload, IdentityProviderLinkConfirmPayload, IdentityProviderLinkRequestResponse, IdentityProviderSavePayload, IdentityProviderUpdatePayload } from '@authup/core-http-kit';
-import type { IEventService, IIdentityProviderAccountLinkStore, IIdentityProviderAccountManager, IIdentityProviderRepository, IOAuth2AccessPolicyEvaluator, IOAuth2AuthorizationCodeIssuer, IOAuth2AuthorizationCodeRequestVerifier, IOAuth2AuthorizationStateManager, IRealmRepository } from '../../../../../core/index.ts';
+import type { IEventService, IIdentityProviderAccountLinkStore, IIdentityProviderAccountManager, IIdentityProviderRepository, IOAuth2AuthorizationCodeRequestVerifier, IOAuth2AuthorizationStateManager, IOAuth2FederatedLoginService } from '../../../../../core/index.ts';
 import { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';
 import type { IdentityProviderControllerContext, IdentityProviderControllerOptions } from './types.ts';
 export declare class IdentityProviderController {
     protected options: IdentityProviderControllerOptions;
     protected repository: IIdentityProviderRepository;
-    protected realmRepository: IRealmRepository;
     protected accountManager: IIdentityProviderAccountManager;
     protected linkStore: IIdentityProviderAccountLinkStore;
     protected codeRequestVerifier: IOAuth2AuthorizationCodeRequestVerifier;
     protected codeRequestValidator: OAuth2AuthorizationCodeRequestValidator;
     protected stateManager: IOAuth2AuthorizationStateManager;
-    protected codeIssuer: IOAuth2AuthorizationCodeIssuer;
-    protected accessPolicyEvaluator?: IOAuth2AccessPolicyEvaluator;
+    protected loginService: IOAuth2FederatedLoginService;
     protected eventService?: IEventService;
     protected logger?: Logger;
     constructor(ctx: IdentityProviderControllerContext);
@@ -27,7 +25,7 @@ export declare class IdentityProviderController {
     addProvider(user: IdentityProviderCreatePayload, event: IAppEvent): Promise<EntityRecordResponse<IdentityProvider>>;
     authorizeOut(_id: string, event: IAppEvent): Promise<Response>;
     linkRequest(_id: string, event: IAppEvent): Promise<IdentityProviderLinkRequestResponse>;
-    authorizeIn(_id: string, event: IAppEvent): Promise<Response>;
+    authorizeIn(_id: string, event: IAppEvent): Promise<string | Response>;
     private write;
     /**
      * Callback half of the account-linking round-trip (plan 091): the

package/dist/adapters/http/controllers/entities/identity-provider/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/module.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAMxC,OAAO,KAAK,EACR,gBAAgB,EAChB,uBAAuB,EAI1B,MAAM,kBAAkB,CAAC;AAc1B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAKjD,OAAO,KAAK,EACR,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,EACnC,2BAA2B,EAC3B,6BAA6B,EAChC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EACR,aAAa,EACb,iCAAiC,EACjC,+BAA+B,EAC/B,2BAA2B,EAC3B,4BAA4B,EAC5B,8BAA8B,EAC9B,uCAAuC,EACvC,gCAAgC,EAChC,gBAAgB,EAInB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,uCAAuC,EAO1C,MAAM,8BAA8B,CAAC;AAatC,OAAO,KAAK,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAEvG,qBAEa,0BAA0B;IACnC,SAAS,CAAC,OAAO,EAAE,iCAAiC,CAAC;IAErD,SAAS,CAAC,UAAU,EAAE,2BAA2B,CAAC;IAElD,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAE5C,SAAS,CAAC,cAAc,EAAE,+BAA+B,CAAC;IAE1D,SAAS,CAAC,SAAS,EAAE,iCAAiC,CAAC;IAEvD,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,oBAAoB,EAAG,uCAAuC,CAAC;IAEzE,SAAS,CAAC,YAAY,EAAG,gCAAgC,CAAC;IAE1D,SAAS,CAAC,UAAU,EAAG,8BAA8B,CAAC;IAEtD,SAAS,CAAC,qBAAqB,CAAC,EAAG,4BAA4B,CAAC;IAEhE,SAAS,CAAC,YAAY,CAAC,EAAG,aAAa,CAAC;IAExC,SAAS,CAAC,MAAM,CAAC,EAAG,MAAM,CAAC;gBAIf,GAAG,EAAE,iCAAiC;IAkB5C,YAAY,CACF,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IAuChD,WAAW,CACA,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IA0B5C,YAAY,CACD,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,6BAA6B,EAChC,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IAK7C,GAAG,CACQ,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,2BAA2B,EAC9B,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IAK7C,YAAY,CACD,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IA6B7C,WAAW,CACJ,IAAI,EAAE,6BAA6B,EAChC,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IAO7C,YAAY,CACD,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;IA0C1B,WAAW,CACA,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,mCAAmC,CAAC;IA6B1C,WAAW,CACA,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;YA4KlB,KAAK;IA+FnB;;;;;OAKG;YACW,YAAY;IAyE1B;;;OAGG;IAEG,WAAW,CACA,GAAG,EAAE,MAAM,EACf,KAAK,EAAE,kCAAkC,EACtC,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,oBAAoB,CAAC,uBAAuB,CAAC,CAAC;IA2E1D,OAAO,CAAC,qBAAqB;IAgB7B,OAAO,CAAC,uBAAuB;YAmBjB,OAAO;IAYrB,OAAO,CAAC,0BAA0B;YAepB,sBAAsB;YAWtB,wBAAwB;CAWzC"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/module.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAMxC,OAAO,KAAK,EACR,gBAAgB,EAChB,uBAAuB,EAI1B,MAAM,kBAAkB,CAAC;AAc1B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAKjD,OAAO,KAAK,EACR,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,EACnC,2BAA2B,EAC3B,6BAA6B,EAChC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EACR,aAAa,EACb,iCAAiC,EACjC,+BAA+B,EAC/B,2BAA2B,EAC3B,uCAAuC,EACvC,gCAAgC,EAChC,4BAA4B,EAI/B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,uCAAuC,EAM1C,MAAM,8BAA8B,CAAC;AAetC,OAAO,KAAK,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAEvG,qBAEa,0BAA0B;IACnC,SAAS,CAAC,OAAO,EAAE,iCAAiC,CAAC;IAErD,SAAS,CAAC,UAAU,EAAE,2BAA2B,CAAC;IAElD,SAAS,CAAC,cAAc,EAAE,+BAA+B,CAAC;IAE1D,SAAS,CAAC,SAAS,EAAE,iCAAiC,CAAC;IAEvD,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,oBAAoB,EAAG,uCAAuC,CAAC;IAEzE,SAAS,CAAC,YAAY,EAAG,gCAAgC,CAAC;IAE1D,SAAS,CAAC,YAAY,EAAG,4BAA4B,CAAC;IAEtD,SAAS,CAAC,YAAY,CAAC,EAAG,aAAa,CAAC;IAExC,SAAS,CAAC,MAAM,CAAC,EAAG,MAAM,CAAC;gBAIf,GAAG,EAAE,iCAAiC;IAgB5C,YAAY,CACF,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IAuChD,WAAW,CACA,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IA0B5C,YAAY,CACD,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,6BAA6B,EAChC,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IAK7C,GAAG,CACQ,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,2BAA2B,EAC9B,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IAK7C,YAAY,CACD,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IA6B7C,WAAW,CACJ,IAAI,EAAE,6BAA6B,EAChC,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IAO7C,YAAY,CACD,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;IAoD1B,WAAW,CACA,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,mCAAmC,CAAC;IA6B1C,WAAW,CACA,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;YA4GlB,KAAK;IA+FnB;;;;;OAKG;YACW,YAAY;IAyE1B;;;OAGG;IAEG,WAAW,CACA,GAAG,EAAE,MAAM,EACf,KAAK,EAAE,kCAAkC,EACtC,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,oBAAoB,CAAC,uBAAuB,CAAC,CAAC;IA2E1D,OAAO,CAAC,qBAAqB;IAgB7B,OAAO,CAAC,uBAAuB;YAmBjB,OAAO;IAYrB,OAAO,CAAC,0BAA0B;YAepB,sBAAsB;YAWtB,wBAAwB;CAWzC"}