@authup/server-core 1.0.0-beta.61 → 1.0.0-beta.62

package/dist/swagger.json

@@ -428,6 +428,19 @@
                             }
                         ]
                     },
+                    "caseSensitive": {
+                        "anyOf": [
+                            {
+                                "type": "array",
+                                "items": {
+                                    "type": "string"
+                                }
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
                     "allowed": {
                         "anyOf": [
                             {
@@ -444,6 +457,7 @@
                 },
                 "required": [
                     "indexed",
+                    "caseSensitive",
                     "allowed"
                 ],
                 "type": "object",
@@ -9667,7 +9681,14 @@
                         "content": {
                             "application/json": {
                                 "schema": {
-                                    "$ref": "#/components/schemas/Response"
+                                    "anyOf": [
+                                        {
+                                            "type": "string"
+                                        },
+                                        {
+                                            "$ref": "#/components/schemas/Response"
+                                        }
+                                    ]
                                 }
                             }
                         }
@@ -9700,7 +9721,14 @@
                         "content": {
                             "application/json": {
                                 "schema": {
-                                    "$ref": "#/components/schemas/Response"
+                                    "anyOf": [
+                                        {
+                                            "type": "string"
+                                        },
+                                        {
+                                            "$ref": "#/components/schemas/Response"
+                                        }
+                                    ]
                                 }
                             }
                         }

package/dist/utils/error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../src/utils/error.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,WAAW,EAKd,MAAM,gBAAgB,CAAC;AAQxB;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAgGzD;AA0ED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CA8BvE"}
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../src/utils/error.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,WAAW,EAKd,MAAM,gBAAgB,CAAC;AAQxB;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CA8FzD;AA0ED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CA8BvE"}

package/dist/utils/error.mjs

@@ -5,9 +5,9 @@ import { hasOwnProperty, isObject } from "@authup/kit";
 import { AuthupError, ErrorCode, codeFromHttpStatus, isAuthupError, normalizeError } from "@authup/errors";
 import { CodecError, ParseError } from "@rapiq/core";
 import { buildErrorMessageForAttributes, isValidupError, stringifyPath } from "validup";
-import { EntityRelationLookupError } from "typeorm-extension";
-import { isClientError } from "hapic";
 import { isHTTPError } from "@ebec/http";
+import { isClientError } from "hapic";
+import { EntityRelationLookupError } from "typeorm-extension";
 //#region src/utils/error.ts
 /**
 * Normalize an unknown error to an AuthupError. Recognised shapes:
@@ -32,13 +32,12 @@ import { isHTTPError } from "@ebec/http";
 	});
 	if (isValidupError(input)) {
 		const paths = input.issues.map((issue) => stringifyPath(issue.path));
-		const error = new AuthupError({
+		return new AuthupError({
 			code: ErrorCode.BAD_REQUEST,
 			stack: input.stack,
-			message: input.message || buildErrorMessageForAttributes(paths)
+			message: input.message || buildErrorMessageForAttributes(paths),
+			issues: input.issues
 		});
-		error.issues.push(...input.issues);
-		return error;
 	}
 	if (input instanceof ParseError || input instanceof CodecError) return new AuthupError({
 		code: ErrorCode.BAD_REQUEST,

package/dist/utils/error.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"error.mjs","names":["AuthupError","ErrorCode","codeFromHttpStatus","isAuthupError","normalizeError","isHTTPError","isClientError","CodecError","ParseError","EntityRelationLookupError","buildErrorMessageForAttributes","isValidupError","stringifyPath","hasOwnProperty","isObject","sanitizeError","input","code","ENTITY_RELATION_INVALID","message","stack","paths","issues","map","issue","path","error","BAD_REQUEST","push","UPSTREAM_ERROR","status","undefined","ENTITY_CONFLICT","STORAGE_INSUFFICIENT","INTERNAL_ERROR","DESCRIBE_BODY_MAX_LENGTH","DESCRIBE_CAUSE_MAX_DEPTH","DESCRIBE_CAUSE_KEYS","describeBody","value","JSON","stringify","String","Object","prototype","toString","call","length","substring","describeCauseLink","name","parts","details","key","join","describeCauseChain","links","seen","Set","current","cause","has","add","describeError","headline","lines","response","body","data","causes"],"sources":["../../src/utils/error.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    AuthupError,\n    ErrorCode,\n    codeFromHttpStatus,\n    isAuthupError,\n    normalizeError,\n} from '@authup/errors';\nimport { isHTTPError } from '@ebec/http';\nimport { isClientError } from 'hapic';\nimport { CodecError, ParseError } from '@rapiq/core';\nimport { EntityRelationLookupError } from 'typeorm-extension';\nimport { buildErrorMessageForAttributes, isValidupError, stringifyPath } from 'validup';\nimport { hasOwnProperty, isObject } from '@authup/kit';\n\n/**\n * Normalize an unknown error to an AuthupError. Recognised shapes:\n *\n * 1. AuthupError instance              → returned as-is\n * 2. EntityRelationLookupError         → BAD_REQUEST AuthupError\n * 3. validup Issue error               → BAD_REQUEST AuthupError carrying issues\n * 4. rapiq ParseError / CodecError     → BAD_REQUEST AuthupError (client wire query)\n * 5. hapic ClientError                 → UPSTREAM_ERROR AuthupError (outbound call)\n * 6. foreign @ebec/http HTTPError      → AuthupError with the closest semantic code\n * 7. driver error w/ a recognised code → ENTITY_CONFLICT or STORAGE_INSUFFICIENT\n * 8. anything else                     → INTERNAL_ERROR AuthupError\n *\n * The HTTP-status concern is handled separately by `httpStatusFromCode` in\n * the adapter — this function only assigns a semantic `code`.\n */\nexport function sanitizeError(input: unknown): AuthupError {\n    if (isAuthupError(input)) {\n        return input;\n    }\n\n    if (input instanceof EntityRelationLookupError) {\n        return new AuthupError({\n            code: ErrorCode.ENTITY_RELATION_INVALID,\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    if (isValidupError(input)) {\n        const paths = input.issues.map((issue) => stringifyPath(issue.path));\n        const error = new AuthupError({\n            code: ErrorCode.BAD_REQUEST,\n            stack: input.stack,\n            message: input.message || buildErrorMessageForAttributes(paths),\n        });\n\n        error.issues.push(...input.issues);\n        return error;\n    }\n\n    if (input instanceof ParseError || input instanceof CodecError) {\n        return new AuthupError({\n            code: ErrorCode.BAD_REQUEST,\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    /**\n     * An outbound call failed. This branch MUST precede the `isHTTPError`\n     * one below: a hapic `HttpResponseError` extends `BaseError` and carries\n     * the upstream `status`, so the duck guard matches it and would mirror\n     * that status onto our own response. An upstream 400 would then read as\n     * \"your request was malformed\" when the caller's request was fine.\n     *\n     * The message is deliberately dropped rather than forwarded: hapic\n     * embeds the outbound method and URL in it (`400 Bad Request (POST\n     * https://idp.example.com/token)`), which must not reach the caller.\n     * `describeError` is what carries the detail, into the log only.\n     */\n    if (isClientError(input)) {\n        return new AuthupError({\n            code: ErrorCode.UPSTREAM_ERROR,\n            message: 'A request to an upstream service failed.',\n            stack: input.stack,\n        });\n    }\n\n    if (isHTTPError(input)) {\n        return new AuthupError({\n            code: codeFromHttpStatus(input.status),\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    if (isObject(input)) {\n        const code = hasOwnProperty(input, 'code') &&\n        typeof input.code === 'string' ?\n            input.code :\n            undefined;\n\n        /**\n         * @see https://dev.mysql.com/doc/mysql-errors/8.0/en/server-error-reference.html\n         */\n        switch (code) {\n            case '23505':\n            case 'ER_DUP_ENTRY':\n            case 'SQLITE_CONSTRAINT_UNIQUE': {\n                return new AuthupError({\n                    code: ErrorCode.ENTITY_CONFLICT,\n                    message: 'An entry with some unique attributes already exists.',\n                    stack: input.stack as string | undefined,\n                });\n            }\n            case 'ER_DISK_FULL':\n                return new AuthupError({\n                    code: ErrorCode.STORAGE_INSUFFICIENT,\n                    message: 'No database operation possible, due to the lack of free disk space.',\n                    stack: input.stack as string | undefined,\n                });\n        }\n\n        return new AuthupError({\n            code: ErrorCode.INTERNAL_ERROR,\n            message: input.message as string | undefined,\n            stack: input.stack as string | undefined,\n        });\n    }\n\n    return new AuthupError({ code: ErrorCode.INTERNAL_ERROR });\n}\n\nconst DESCRIBE_BODY_MAX_LENGTH = 1024;\nconst DESCRIBE_CAUSE_MAX_DEPTH = 5;\n\n// Fields node attaches to a syscall error. Without them a transport failure\n// reads as a bare \"connect ECONNREFUSED\" with no way back to the reason.\nconst DESCRIBE_CAUSE_KEYS = ['code', 'errno', 'syscall', 'address', 'port'] as const;\n\nfunction describeBody(input: unknown): string | undefined {\n    let value: string;\n\n    if (typeof input === 'string') {\n        value = input;\n    } else {\n        try {\n            value = JSON.stringify(input) ?? String(input);\n        } catch {\n            // A body that cannot be serialized (circular, a stream) is\n            // still worth naming by shape.\n            value = Object.prototype.toString.call(input);\n        }\n    }\n\n    if (value.length === 0) {\n        return undefined;\n    }\n\n    if (value.length > DESCRIBE_BODY_MAX_LENGTH) {\n        return `${value.substring(0, DESCRIBE_BODY_MAX_LENGTH)}… (truncated)`;\n    }\n\n    return value;\n}\n\nfunction describeCauseLink(input: object): string {\n    const error = input as Error;\n    const name = typeof error.name === 'string' ? error.name : 'Error';\n    const parts: string[] = [`${name}: ${error.message}`];\n\n    const details: string[] = [];\n    for (const key of DESCRIBE_CAUSE_KEYS) {\n        const value = (input as Record<string, unknown>)[key];\n        if (typeof value === 'string' || typeof value === 'number') {\n            details.push(`${key}=${value}`);\n        }\n    }\n\n    if (details.length > 0) {\n        parts.push(`(${details.join(' ')})`);\n    }\n\n    return parts.join(' ');\n}\n\nfunction describeCauseChain(input: unknown): string | undefined {\n    const links: string[] = [];\n    const seen = new Set<unknown>();\n\n    let current: unknown = isObject(input) ? (input as { cause?: unknown }).cause : undefined;\n\n    while (isObject(current) && !seen.has(current) && links.length < DESCRIBE_CAUSE_MAX_DEPTH) {\n        seen.add(current);\n        links.push(describeCauseLink(current));\n        current = (current as { cause?: unknown }).cause;\n    }\n\n    if (links.length === 0) {\n        return undefined;\n    }\n\n    return links.join(' <- ');\n}\n\n/**\n * Render an error for the LOG. It is the counterpart of `@authup/errors`'\n * `serializeError`, which renders one for the response.\n *\n * The detail an outbound failure carries never survives `sanitizeError`\n * (by design: upstream internals must not reach the caller), and\n * `Error.cause` is non-enumerable, so a plain serialization drops it too.\n * Both were therefore already gone by the time anything was written,\n * which left a refused connection and an upstream `invalid_request`\n * indistinguishable in the log.\n *\n * Everything not present is omitted, so an ordinary error still renders\n * as its bare message.\n */\nexport function describeError(input: unknown, headline?: string): string {\n    const error = normalizeError(input);\n\n    const lines: string[] = [];\n    if (headline) {\n        lines.push(headline);\n    }\n    lines.push(error.message);\n\n    // hapic attaches the decoded body to the response through a getter, so\n    // it is non-enumerable and only reachable by an explicit read.\n    if (isClientError(error) && error.response) {\n        lines.push(`  upstream status: ${error.response.status}`);\n\n        const body = describeBody(error.response.data);\n        if (body) {\n            lines.push(`  upstream body:   ${body}`);\n        }\n    }\n\n    const causes = describeCauseChain(error);\n    if (causes) {\n        lines.push(`  cause:           ${causes}`);\n    }\n\n    if (error.stack) {\n        lines.push(`  stack:           ${error.stack}`);\n    }\n\n    return lines.join('\\n');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;GAoCA,SAAgBe,cAAcC,OAAc;CACxC,IAAIb,cAAca,KAAAA,GACd,OAAOA;CAGX,IAAIA,iBAAiBP,2BACjB,OAAO,IAAIT,YAAY;EACnBiB,MAAMhB,UAAUiB;EAChBC,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;CACjB,CAAA;CAGJ,IAAIT,eAAeK,KAAAA,GAAQ;EACvB,MAAMK,QAAQL,MAAMM,OAAOC,KAAKC,UAAUZ,cAAcY,MAAMC,IAAI,CAAA;EAClE,MAAMC,QAAQ,IAAI1B,YAAY;GAC1BiB,MAAMhB,UAAU0B;GAChBP,OAAOJ,MAAMI;GACbD,SAASH,MAAMG,WAAWT,+BAA+BW,KAAAA;EAC7D,CAAA;EAEAK,MAAMJ,OAAOM,KAAI,GAAIZ,MAAMM,MAAM;EACjC,OAAOI;CACX;CAEA,IAAIV,iBAAiBR,cAAcQ,iBAAiBT,YAChD,OAAO,IAAIP,YAAY;EACnBiB,MAAMhB,UAAU0B;EAChBR,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;CACjB,CAAA;;;;;;;;;;;;IAeJ,IAAId,cAAcU,KAAAA,GACd,OAAO,IAAIhB,YAAY;EACnBiB,MAAMhB,UAAU4B;EAChBV,SAAS;EACTC,OAAOJ,MAAMI;CACjB,CAAA;CAGJ,IAAIf,YAAYW,KAAAA,GACZ,OAAO,IAAIhB,YAAY;EACnBiB,MAAMf,mBAAmBc,MAAMc,MAAM;EACrCX,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;CACjB,CAAA;CAGJ,IAAIN,SAASE,KAAAA,GAAQ;;;KASjB,QARaH,eAAeG,OAAO,MAAA,KACnC,OAAOA,MAAMC,SAAS,WAClBD,MAAMC,OACNc,KAAAA,GAKJ;GACI,KAAK;GACL,KAAK;GACL,KAAK,4BACD,OAAO,IAAI/B,YAAY;IACnBiB,MAAMhB,UAAU+B;IAChBb,SAAS;IACTC,OAAOJ,MAAMI;GACjB,CAAA;GAEJ,KAAK,gBACD,OAAO,IAAIpB,YAAY;IACnBiB,MAAMhB,UAAUgC;IAChBd,SAAS;IACTC,OAAOJ,MAAMI;GACjB,CAAA;EACR;EAEA,OAAO,IAAIpB,YAAY;GACnBiB,MAAMhB,UAAUiC;GAChBf,SAASH,MAAMG;GACfC,OAAOJ,MAAMI;EACjB,CAAA;CACJ;CAEA,OAAO,IAAIpB,YAAY,EAAEiB,MAAMhB,UAAUiC,eAAe,CAAA;AAC5D;AAEA,MAAMC,2BAA2B;AACjC,MAAMC,2BAA2B;AAIjC,MAAMC,sBAAsB;CAAC;CAAQ;CAAS;CAAW;CAAW;AAAO;AAE3E,SAASC,aAAatB,OAAc;CAChC,IAAIuB;CAEJ,IAAI,OAAOvB,UAAU,UACjBuB,QAAQvB;MAER,IAAI;EACAuB,QAAQC,KAAKC,UAAUzB,KAAAA,KAAU0B,OAAO1B,KAAAA;CAC5C,QAAQ;EAGJuB,QAAQI,OAAOC,UAAUC,SAASC,KAAK9B,KAAAA;CAC3C;CAGJ,IAAIuB,MAAMQ,WAAW,GACjB;CAGJ,IAAIR,MAAMQ,SAASZ,0BACf,OAAO,GAAGI,MAAMS,UAAU,GAAGb,wBAAAA,EAA0B;CAG3D,OAAOI;AACX;AAEA,SAASU,kBAAkBjC,OAAa;CACpC,MAAMU,QAAQV;CAEd,MAAMmC,QAAkB,CAAC,GADZ,OAAOzB,MAAMwB,SAAS,WAAWxB,MAAMwB,OAAO,QAC1B,IAAIxB,MAAMP,SAAU;CAErD,MAAMiC,UAAoB,CAAA;CAC1B,KAAK,MAAMC,OAAOhB,qBAAqB;EACnC,MAAME,QAAQ,MAAmCc;EACjD,IAAI,OAAOd,UAAU,YAAY,OAAOA,UAAU,UAC9Ca,QAAQxB,KAAK,GAAGyB,IAAI,GAAGd,OAAO;CAEtC;CAEA,IAAIa,QAAQL,SAAS,GACjBI,MAAMvB,KAAK,IAAIwB,QAAQE,KAAK,GAAA,EAAK,EAAE;CAGvC,OAAOH,MAAMG,KAAK,GAAA;AACtB;AAEA,SAASC,mBAAmBvC,OAAc;CACtC,MAAMwC,QAAkB,CAAA;CACxB,MAAMC,uBAAO,IAAIC,IAAAA;CAEjB,IAAIC,UAAmB7C,SAASE,KAAAA,IAAS,MAA+B4C,QAAQ7B,KAAAA;CAEhF,OAAOjB,SAAS6C,OAAAA,KAAY,CAACF,KAAKI,IAAIF,OAAAA,KAAYH,MAAMT,SAASX,0BAA0B;EACvFqB,KAAKK,IAAIH,OAAAA;EACTH,MAAM5B,KAAKqB,kBAAkBU,OAAAA,CAAAA;EAC7BA,UAAU,QAAiCC;CAC/C;CAEA,IAAIJ,MAAMT,WAAW,GACjB;CAGJ,OAAOS,MAAMF,KAAK,MAAA;AACtB;;;;;;;;;;;;;;GAgBA,SAAgBS,cAAc/C,OAAgBgD,UAAiB;CAC3D,MAAMtC,QAAQtB,eAAeY,KAAAA;CAE7B,MAAMiD,QAAkB,CAAA;CACxB,IAAID,UACAC,MAAMrC,KAAKoC,QAAAA;CAEfC,MAAMrC,KAAKF,MAAMP,OAAO;CAIxB,IAAIb,cAAcoB,KAAAA,KAAUA,MAAMwC,UAAU;EACxCD,MAAMrC,KAAK,sBAAsBF,MAAMwC,SAASpC,QAAQ;EAExD,MAAMqC,OAAO7B,aAAaZ,MAAMwC,SAASE,IAAI;EAC7C,IAAID,MACAF,MAAMrC,KAAK,sBAAsBuC,MAAM;CAE/C;CAEA,MAAME,SAASd,mBAAmB7B,KAAAA;CAClC,IAAI2C,QACAJ,MAAMrC,KAAK,sBAAsByC,QAAQ;CAG7C,IAAI3C,MAAMN,OACN6C,MAAMrC,KAAK,sBAAsBF,MAAMN,OAAO;CAGlD,OAAO6C,MAAMX,KAAK,IAAA;AACtB"}
+{"version":3,"file":"error.mjs","names":["AuthupError","ErrorCode","codeFromHttpStatus","isAuthupError","normalizeError","isHTTPError","isClientError","CodecError","ParseError","EntityRelationLookupError","buildErrorMessageForAttributes","isValidupError","stringifyPath","hasOwnProperty","isObject","sanitizeError","input","code","ENTITY_RELATION_INVALID","message","stack","paths","issues","map","issue","path","BAD_REQUEST","UPSTREAM_ERROR","status","undefined","ENTITY_CONFLICT","STORAGE_INSUFFICIENT","INTERNAL_ERROR","DESCRIBE_BODY_MAX_LENGTH","DESCRIBE_CAUSE_MAX_DEPTH","DESCRIBE_CAUSE_KEYS","describeBody","value","JSON","stringify","String","Object","prototype","toString","call","length","substring","describeCauseLink","error","name","parts","details","key","push","join","describeCauseChain","links","seen","Set","current","cause","has","add","describeError","headline","lines","response","body","data","causes"],"sources":["../../src/utils/error.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    AuthupError,\n    ErrorCode,\n    codeFromHttpStatus,\n    isAuthupError,\n    normalizeError,\n} from '@authup/errors';\nimport { isHTTPError } from '@ebec/http';\nimport { isClientError } from 'hapic';\nimport { CodecError, ParseError } from '@rapiq/core';\nimport { EntityRelationLookupError } from 'typeorm-extension';\nimport { buildErrorMessageForAttributes, isValidupError, stringifyPath } from 'validup';\nimport { hasOwnProperty, isObject } from '@authup/kit';\n\n/**\n * Normalize an unknown error to an AuthupError. Recognised shapes:\n *\n * 1. AuthupError instance              → returned as-is\n * 2. EntityRelationLookupError         → BAD_REQUEST AuthupError\n * 3. validup Issue error               → BAD_REQUEST AuthupError carrying issues\n * 4. rapiq ParseError / CodecError     → BAD_REQUEST AuthupError (client wire query)\n * 5. hapic ClientError                 → UPSTREAM_ERROR AuthupError (outbound call)\n * 6. foreign @ebec/http HTTPError      → AuthupError with the closest semantic code\n * 7. driver error w/ a recognised code → ENTITY_CONFLICT or STORAGE_INSUFFICIENT\n * 8. anything else                     → INTERNAL_ERROR AuthupError\n *\n * The HTTP-status concern is handled separately by `httpStatusFromCode` in\n * the adapter — this function only assigns a semantic `code`.\n */\nexport function sanitizeError(input: unknown): AuthupError {\n    if (isAuthupError(input)) {\n        return input;\n    }\n\n    if (input instanceof EntityRelationLookupError) {\n        return new AuthupError({\n            code: ErrorCode.ENTITY_RELATION_INVALID,\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    if (isValidupError(input)) {\n        const paths = input.issues.map((issue) => stringifyPath(issue.path));\n        return new AuthupError({\n            code: ErrorCode.BAD_REQUEST,\n            stack: input.stack,\n            message: input.message || buildErrorMessageForAttributes(paths),\n            issues: input.issues,\n        });\n    }\n\n    if (input instanceof ParseError || input instanceof CodecError) {\n        return new AuthupError({\n            code: ErrorCode.BAD_REQUEST,\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    /**\n     * An outbound call failed. This branch MUST precede the `isHTTPError`\n     * one below: a hapic `HttpResponseError` extends `BaseError` and carries\n     * the upstream `status`, so the duck guard matches it and would mirror\n     * that status onto our own response. An upstream 400 would then read as\n     * \"your request was malformed\" when the caller's request was fine.\n     *\n     * The message is deliberately dropped rather than forwarded: hapic\n     * embeds the outbound method and URL in it (`400 Bad Request (POST\n     * https://idp.example.com/token)`), which must not reach the caller.\n     * `describeError` is what carries the detail, into the log only.\n     */\n    if (isClientError(input)) {\n        return new AuthupError({\n            code: ErrorCode.UPSTREAM_ERROR,\n            message: 'A request to an upstream service failed.',\n            stack: input.stack,\n        });\n    }\n\n    if (isHTTPError(input)) {\n        return new AuthupError({\n            code: codeFromHttpStatus(input.status),\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    if (isObject(input)) {\n        const code = hasOwnProperty(input, 'code') &&\n        typeof input.code === 'string' ?\n            input.code :\n            undefined;\n\n        /**\n         * @see https://dev.mysql.com/doc/mysql-errors/8.0/en/server-error-reference.html\n         */\n        switch (code) {\n            case '23505':\n            case 'ER_DUP_ENTRY':\n            case 'SQLITE_CONSTRAINT_UNIQUE': {\n                return new AuthupError({\n                    code: ErrorCode.ENTITY_CONFLICT,\n                    message: 'An entry with some unique attributes already exists.',\n                    stack: input.stack as string | undefined,\n                });\n            }\n            case 'ER_DISK_FULL':\n                return new AuthupError({\n                    code: ErrorCode.STORAGE_INSUFFICIENT,\n                    message: 'No database operation possible, due to the lack of free disk space.',\n                    stack: input.stack as string | undefined,\n                });\n        }\n\n        return new AuthupError({\n            code: ErrorCode.INTERNAL_ERROR,\n            message: input.message as string | undefined,\n            stack: input.stack as string | undefined,\n        });\n    }\n\n    return new AuthupError({ code: ErrorCode.INTERNAL_ERROR });\n}\n\nconst DESCRIBE_BODY_MAX_LENGTH = 1024;\nconst DESCRIBE_CAUSE_MAX_DEPTH = 5;\n\n// Fields node attaches to a syscall error. Without them a transport failure\n// reads as a bare \"connect ECONNREFUSED\" with no way back to the reason.\nconst DESCRIBE_CAUSE_KEYS = ['code', 'errno', 'syscall', 'address', 'port'] as const;\n\nfunction describeBody(input: unknown): string | undefined {\n    let value: string;\n\n    if (typeof input === 'string') {\n        value = input;\n    } else {\n        try {\n            value = JSON.stringify(input) ?? String(input);\n        } catch {\n            // A body that cannot be serialized (circular, a stream) is\n            // still worth naming by shape.\n            value = Object.prototype.toString.call(input);\n        }\n    }\n\n    if (value.length === 0) {\n        return undefined;\n    }\n\n    if (value.length > DESCRIBE_BODY_MAX_LENGTH) {\n        return `${value.substring(0, DESCRIBE_BODY_MAX_LENGTH)}… (truncated)`;\n    }\n\n    return value;\n}\n\nfunction describeCauseLink(input: object): string {\n    const error = input as Error;\n    const name = typeof error.name === 'string' ? error.name : 'Error';\n    const parts: string[] = [`${name}: ${error.message}`];\n\n    const details: string[] = [];\n    for (const key of DESCRIBE_CAUSE_KEYS) {\n        const value = (input as Record<string, unknown>)[key];\n        if (typeof value === 'string' || typeof value === 'number') {\n            details.push(`${key}=${value}`);\n        }\n    }\n\n    if (details.length > 0) {\n        parts.push(`(${details.join(' ')})`);\n    }\n\n    return parts.join(' ');\n}\n\nfunction describeCauseChain(input: unknown): string | undefined {\n    const links: string[] = [];\n    const seen = new Set<unknown>();\n\n    let current: unknown = isObject(input) ? (input as { cause?: unknown }).cause : undefined;\n\n    while (isObject(current) && !seen.has(current) && links.length < DESCRIBE_CAUSE_MAX_DEPTH) {\n        seen.add(current);\n        links.push(describeCauseLink(current));\n        current = (current as { cause?: unknown }).cause;\n    }\n\n    if (links.length === 0) {\n        return undefined;\n    }\n\n    return links.join(' <- ');\n}\n\n/**\n * Render an error for the LOG. It is the counterpart of `@authup/errors`'\n * `serializeError`, which renders one for the response.\n *\n * The detail an outbound failure carries never survives `sanitizeError`\n * (by design: upstream internals must not reach the caller), and\n * `Error.cause` is non-enumerable, so a plain serialization drops it too.\n * Both were therefore already gone by the time anything was written,\n * which left a refused connection and an upstream `invalid_request`\n * indistinguishable in the log.\n *\n * Everything not present is omitted, so an ordinary error still renders\n * as its bare message.\n */\nexport function describeError(input: unknown, headline?: string): string {\n    const error = normalizeError(input);\n\n    const lines: string[] = [];\n    if (headline) {\n        lines.push(headline);\n    }\n    lines.push(error.message);\n\n    // hapic attaches the decoded body to the response through a getter, so\n    // it is non-enumerable and only reachable by an explicit read.\n    if (isClientError(error) && error.response) {\n        lines.push(`  upstream status: ${error.response.status}`);\n\n        const body = describeBody(error.response.data);\n        if (body) {\n            lines.push(`  upstream body:   ${body}`);\n        }\n    }\n\n    const causes = describeCauseChain(error);\n    if (causes) {\n        lines.push(`  cause:           ${causes}`);\n    }\n\n    if (error.stack) {\n        lines.push(`  stack:           ${error.stack}`);\n    }\n\n    return lines.join('\\n');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;GAoCA,SAAgBe,cAAcC,OAAc;CACxC,IAAIb,cAAca,KAAAA,GACd,OAAOA;CAGX,IAAIA,iBAAiBP,2BACjB,OAAO,IAAIT,YAAY;EACnBiB,MAAMhB,UAAUiB;EAChBC,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;CACjB,CAAA;CAGJ,IAAIT,eAAeK,KAAAA,GAAQ;EACvB,MAAMK,QAAQL,MAAMM,OAAOC,KAAKC,UAAUZ,cAAcY,MAAMC,IAAI,CAAA;EAClE,OAAO,IAAIzB,YAAY;GACnBiB,MAAMhB,UAAUyB;GAChBN,OAAOJ,MAAMI;GACbD,SAASH,MAAMG,WAAWT,+BAA+BW,KAAAA;GACzDC,QAAQN,MAAMM;EAClB,CAAA;CACJ;CAEA,IAAIN,iBAAiBR,cAAcQ,iBAAiBT,YAChD,OAAO,IAAIP,YAAY;EACnBiB,MAAMhB,UAAUyB;EAChBP,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;CACjB,CAAA;;;;;;;;;;;;IAeJ,IAAId,cAAcU,KAAAA,GACd,OAAO,IAAIhB,YAAY;EACnBiB,MAAMhB,UAAU0B;EAChBR,SAAS;EACTC,OAAOJ,MAAMI;CACjB,CAAA;CAGJ,IAAIf,YAAYW,KAAAA,GACZ,OAAO,IAAIhB,YAAY;EACnBiB,MAAMf,mBAAmBc,MAAMY,MAAM;EACrCT,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;CACjB,CAAA;CAGJ,IAAIN,SAASE,KAAAA,GAAQ;;;KASjB,QARaH,eAAeG,OAAO,MAAA,KACnC,OAAOA,MAAMC,SAAS,WAClBD,MAAMC,OACNY,KAAAA,GAKJ;GACI,KAAK;GACL,KAAK;GACL,KAAK,4BACD,OAAO,IAAI7B,YAAY;IACnBiB,MAAMhB,UAAU6B;IAChBX,SAAS;IACTC,OAAOJ,MAAMI;GACjB,CAAA;GAEJ,KAAK,gBACD,OAAO,IAAIpB,YAAY;IACnBiB,MAAMhB,UAAU8B;IAChBZ,SAAS;IACTC,OAAOJ,MAAMI;GACjB,CAAA;EACR;EAEA,OAAO,IAAIpB,YAAY;GACnBiB,MAAMhB,UAAU+B;GAChBb,SAASH,MAAMG;GACfC,OAAOJ,MAAMI;EACjB,CAAA;CACJ;CAEA,OAAO,IAAIpB,YAAY,EAAEiB,MAAMhB,UAAU+B,eAAe,CAAA;AAC5D;AAEA,MAAMC,2BAA2B;AACjC,MAAMC,2BAA2B;AAIjC,MAAMC,sBAAsB;CAAC;CAAQ;CAAS;CAAW;CAAW;AAAO;AAE3E,SAASC,aAAapB,OAAc;CAChC,IAAIqB;CAEJ,IAAI,OAAOrB,UAAU,UACjBqB,QAAQrB;MAER,IAAI;EACAqB,QAAQC,KAAKC,UAAUvB,KAAAA,KAAUwB,OAAOxB,KAAAA;CAC5C,QAAQ;EAGJqB,QAAQI,OAAOC,UAAUC,SAASC,KAAK5B,KAAAA;CAC3C;CAGJ,IAAIqB,MAAMQ,WAAW,GACjB;CAGJ,IAAIR,MAAMQ,SAASZ,0BACf,OAAO,GAAGI,MAAMS,UAAU,GAAGb,wBAAAA,EAA0B;CAG3D,OAAOI;AACX;AAEA,SAASU,kBAAkB/B,OAAa;CACpC,MAAMgC,QAAQhC;CAEd,MAAMkC,QAAkB,CAAC,GADZ,OAAOF,MAAMC,SAAS,WAAWD,MAAMC,OAAO,QAC1B,IAAID,MAAM7B,SAAU;CAErD,MAAMgC,UAAoB,CAAA;CAC1B,KAAK,MAAMC,OAAOjB,qBAAqB;EACnC,MAAME,QAAQ,MAAmCe;EACjD,IAAI,OAAOf,UAAU,YAAY,OAAOA,UAAU,UAC9Cc,QAAQE,KAAK,GAAGD,IAAI,GAAGf,OAAO;CAEtC;CAEA,IAAIc,QAAQN,SAAS,GACjBK,MAAMG,KAAK,IAAIF,QAAQG,KAAK,GAAA,EAAK,EAAE;CAGvC,OAAOJ,MAAMI,KAAK,GAAA;AACtB;AAEA,SAASC,mBAAmBvC,OAAc;CACtC,MAAMwC,QAAkB,CAAA;CACxB,MAAMC,uBAAO,IAAIC,IAAAA;CAEjB,IAAIC,UAAmB7C,SAASE,KAAAA,IAAS,MAA+B4C,QAAQ/B,KAAAA;CAEhF,OAAOf,SAAS6C,OAAAA,KAAY,CAACF,KAAKI,IAAIF,OAAAA,KAAYH,MAAMX,SAASX,0BAA0B;EACvFuB,KAAKK,IAAIH,OAAAA;EACTH,MAAMH,KAAKN,kBAAkBY,OAAAA,CAAAA;EAC7BA,UAAU,QAAiCC;CAC/C;CAEA,IAAIJ,MAAMX,WAAW,GACjB;CAGJ,OAAOW,MAAMF,KAAK,MAAA;AACtB;;;;;;;;;;;;;;GAgBA,SAAgBS,cAAc/C,OAAgBgD,UAAiB;CAC3D,MAAMhB,QAAQ5C,eAAeY,KAAAA;CAE7B,MAAMiD,QAAkB,CAAA;CACxB,IAAID,UACAC,MAAMZ,KAAKW,QAAAA;CAEfC,MAAMZ,KAAKL,MAAM7B,OAAO;CAIxB,IAAIb,cAAc0C,KAAAA,KAAUA,MAAMkB,UAAU;EACxCD,MAAMZ,KAAK,sBAAsBL,MAAMkB,SAAStC,QAAQ;EAExD,MAAMuC,OAAO/B,aAAaY,MAAMkB,SAASE,IAAI;EAC7C,IAAID,MACAF,MAAMZ,KAAK,sBAAsBc,MAAM;CAE/C;CAEA,MAAME,SAASd,mBAAmBP,KAAAA;CAClC,IAAIqB,QACAJ,MAAMZ,KAAK,sBAAsBgB,QAAQ;CAG7C,IAAIrB,MAAM5B,OACN6C,MAAMZ,KAAK,sBAAsBL,MAAM5B,OAAO;CAGlD,OAAO6C,MAAMX,KAAK,IAAA;AACtB"}

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@authup/server-core",
     "type": "module",
-    "version": "1.0.0-beta.61",
+    "version": "1.0.0-beta.62",
     "description": "This is a standalone application.",
     "license": "AGPL-3.0-only",
     "main": "dist/index.mjs",
@@ -67,24 +67,24 @@
     },
     "homepage": "https://github.com/authup/authup#readme",
     "dependencies": {
-        "@authup/access": "^1.0.0-beta.61",
-        "@authup/client-account-console": "^1.0.0-beta.61",
-        "@authup/client-auth-console": "^1.0.0-beta.61",
-        "@authup/core-http-kit": "^1.0.0-beta.61",
-        "@authup/core-kit": "^1.0.0-beta.61",
-        "@authup/errors": "^1.0.0-beta.61",
-        "@authup/i18n": "^1.0.0-beta.61",
-        "@authup/kit": "^1.0.0-beta.61",
-        "@authup/server-kit": "^1.0.0-beta.61",
-        "@authup/specs": "^1.0.0-beta.61",
+        "@authup/access": "^1.0.0-beta.62",
+        "@authup/client-account-console": "^1.0.0-beta.62",
+        "@authup/client-auth-console": "^1.0.0-beta.62",
+        "@authup/core-http-kit": "^1.0.0-beta.62",
+        "@authup/core-kit": "^1.0.0-beta.62",
+        "@authup/errors": "^1.0.0-beta.62",
+        "@authup/i18n": "^1.0.0-beta.62",
+        "@authup/kit": "^1.0.0-beta.62",
+        "@authup/server-kit": "^1.0.0-beta.62",
+        "@authup/specs": "^1.0.0-beta.62",
         "@ebec/http": "^4.2.0",
-        "@hapic/oauth2": "^4.0.1",
+        "@hapic/oauth2": "^4.0.2",
         "@peculiar/x509": "^2.0.0",
-        "@rapiq/adapter-memory": "^2.1.0",
-        "@rapiq/adapter-sql": "^2.1.0",
-        "@rapiq/adapter-typeorm": "^2.1.0",
-        "@rapiq/codec-url": "^2.1.0",
-        "@rapiq/core": "^2.1.0",
+        "@rapiq/adapter-memory": "^2.2.0",
+        "@rapiq/adapter-sql": "^2.2.0",
+        "@rapiq/adapter-typeorm": "^2.2.0",
+        "@rapiq/codec-url": "^2.2.0",
+        "@rapiq/core": "^2.2.0",
         "@routup/assets": "^5.0.0",
         "@routup/basic": "^3.0.0",
         "@routup/cors": "^2.0.0",
@@ -94,8 +94,8 @@
         "@routup/rate-limit": "^4.0.0",
         "@routup/swagger-ui": "^4.0.0",
         "@simplewebauthn/server": "^13.3.2",
-        "@validup/zod": "^1.0.0",
-        "better-sqlite3": "^13.0.2",
+        "@validup/zod": "^2.0.1",
+        "better-sqlite3": "^13.0.3",
         "change-case": "^5.4.4",
         "citty": "^0.2.2",
         "confinity": "^2.0.1",
@@ -103,16 +103,16 @@
         "dycraft": "^1.1.0",
         "eldin": "^1.3.0",
         "envix": "^1.5.0",
-        "hapic": "^3.0.1",
+        "hapic": "^3.0.2",
         "ilingo": "^6.1.0",
         "ldapjs": "^3.0.7",
         "locter": "^4.0.0",
-        "mysql2": "^3.23.2",
+        "mysql2": "^3.23.3",
         "node-cron": "^4.6.0",
-        "nodemailer": "^9.0.4",
+        "nodemailer": "^9.0.5",
         "orkos": "^1.1.1",
         "otpauth": "^9.5.1",
-        "pg": "^8.22.0",
+        "pg": "^8.23.0",
         "prom-client": "^15.1.3",
         "qrcode": "^1.5.4",
         "reflect-metadata": "^0.2.2",
@@ -120,15 +120,15 @@
         "smob": "^1.6.1",
         "tsyringe": "^4.10.0",
         "typeorm": "1.1.0",
-        "typeorm-extension": "^4.0.0-beta.3",
+        "typeorm-extension": "^4.1.0",
         "uncrypto": "^0.1.3",
-        "validup": "^1.0.0",
+        "validup": "^2.0.1",
         "zod": "^4.4.3"
     },
     "devDependencies": {
-        "@authup/server-test-kit": "^1.0.0-beta.61",
+        "@authup/server-test-kit": "^1.0.0-beta.62",
         "@faker-js/faker": "^10.5.0",
-        "@trapi/cli": "^2.0.4",
+        "@trapi/cli": "^2.0.5",
         "@types/ldapjs": "^3.0.6",
         "@types/nodemailer": "^8.0.0",
         "@types/qrcode": "^1.5.6",
@@ -139,7 +139,7 @@
         "testcontainers": "^12.1.0",
         "ts-node": "^10.8.2",
         "unplugin-swc": "^1.5.10",
-        "vite": "^8.1.3",
+        "vite": "^8.2.1",
         "vitest": "^4.0.14"
     },
     "publishConfig": {