@authup/server-core 1.0.0-beta.63 → 1.0.0-beta.64

package/dist/app/modules/identity/module.mjs

@@ -21,16 +21,14 @@ import "../../../core/index.mjs";
 import { CacheInjectionKey } from "../cache/constants.mjs";
 import { ModuleName } from "../constants.mjs";
 import "../cache/index.mjs";
+import { LoggerInjectionKey } from "../logger/constants.mjs";
+import "../logger/index.mjs";
 import { ClientRepositoryAdapter } from "../database/repositories/client/repository.mjs";
 import { IdentityProviderRepositoryAdapter } from "../database/repositories/identity-provider/repository.mjs";
 import { IdentityProviderAccountRepositoryAdapter } from "../database/repositories/identity-provider-account/repository.mjs";
 import { RoleRepositoryAdapter } from "../database/repositories/role/repository.mjs";
 import { UserRepositoryAdapter } from "../database/repositories/user/repository.mjs";
 import "../database/repositories/index.mjs";
-import { DatabaseInjectionKey } from "../database/constants.mjs";
-import { LoggerInjectionKey } from "../logger/constants.mjs";
-import "../logger/index.mjs";
-import "../database/index.mjs";
 import { IdentityInjectionKey } from "./constants.mjs";
 import { IdentityProviderAttributeMappingRepository } from "./repositories/provider/mapper/attribute.mjs";
 import { IdentityProviderPermissionMappingRepository } from "./repositories/provider/mapper/permission.mjs";
@@ -39,6 +37,8 @@ import { IdentityProviderAccountLinkStore } from "./repositories/provider/link.m
 import { ClientIdentityRepository } from "./repositories/client.mjs";
 import { UserIdentityRepository } from "./repositories/user.mjs";
 import "./repositories/index.mjs";
+import { DatabaseInjectionKey } from "../database/constants.mjs";
+import "../database/index.mjs";
 import { LDAPInjectionKey } from "../ldap/constants.mjs";
 import "../ldap/index.mjs";
 //#region src/app/modules/identity/module.ts

package/dist/app/modules/identity/repositories/client.mjs

@@ -29,8 +29,10 @@ var ClientIdentityRepository = class {
 		if (isId) query.where("client.id = :id", { id: key });
 		else {
 			query.where("client.name = :name", { name: key.trim().toLowerCase() });
-			if (realmKey) if (isUUID(realmKey)) query.andWhere("client.realmId = :realmId", { realmId: realmKey });
-			else query.andWhere("realm.name = :realmName", { realmName: realmKey.trim().toLowerCase() });
+			if (realmKey) {
+				if (isUUID(realmKey)) query.andWhere("client.realmId = :realmId", { realmId: realmKey });
+				else query.andWhere("realm.name = :realmName", { realmName: realmKey.trim().toLowerCase() });
+			}
 		}
 		const { columns } = this.repository.metadata;
 		for (const column of columns) if (!column.isSelect) query.addSelect(`client.${column.propertyName}`);

package/dist/app/modules/identity/repositories/client.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"client.mjs","names":["buildRedisKeyPath","isUUID","CachePrefix","ClientIdentityRepository","repository","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","propertyName","cache","prefix","CLIENT","getOne"],"sources":["../../../../../src/app/modules/identity/repositories/client.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Client } from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport type { IClientIdentityRepository } from '../../../../core/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport class ClientIdentityRepository implements IClientIdentityRepository {\n    private readonly repository: Repository<Client>;\n\n    constructor(repository: Repository<Client>) {\n        this.repository = repository;\n    }\n\n    async findOneById(id: string): Promise<Client | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<Client | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Client | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Client | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<Client | null> {\n        const query = this.repository.createQueryBuilder('client')\n            .leftJoinAndSelect('client.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('client.id = :id', { id: key });\n        } else {\n            query.where('client.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('client.realmId = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`client.${column.propertyName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.CLIENT,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        return query.getOne();\n    }\n}\n"],"mappings":";;;;;;;;AAcA,IAAaG,2BAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAgC;EACxC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,YAAYC,IAAoC;EAClD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAwC;EACpE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAwC;EAC9E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAoD;EAChE,OAAO,KAAKT,WAAWQ,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA4C;EACxE,MAAMC,QAAQ,KAAKZ,WAAWa,mBAAmB,QAAA,CAAA,CAC5CC,kBAAkB,gBAAgB,OAAA;EAEvC,MAAMC,OAAOlB,OAAOa,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,mBAAmB,EAAEP,IAAIQ,IAAI,CAAA;OACtC;GACHE,MAAMH,MAAM,uBAAuB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAEpE,IAAIP,UACA,IAAId,OAAOc,QAAAA,GACPC,MAAMO,SAAS,6BAA6B,EAAEC,SAAST,SAAS,CAAA;QAEhEC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EACA,MAAM,EAAEI,YAAY,KAAKtB,WAAWuB;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,UAAUF,OAAOG,cAAc;EAIvD,IAAIZ,MACAH,MAAMgB,MACFhC,kBAAkB;GACdiC,QAAQ/B,YAAYgC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,OAAOE,MAAMmB,OAAM;CACvB;AACJ"}
+{"version":3,"file":"client.mjs","names":["buildRedisKeyPath","isUUID","CachePrefix","ClientIdentityRepository","repository","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","propertyName","cache","prefix","CLIENT","getOne"],"sources":["../../../../../src/app/modules/identity/repositories/client.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Client } from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport type { IClientIdentityRepository } from '../../../../core/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport class ClientIdentityRepository implements IClientIdentityRepository {\n    private readonly repository: Repository<Client>;\n\n    constructor(repository: Repository<Client>) {\n        this.repository = repository;\n    }\n\n    async findOneById(id: string): Promise<Client | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<Client | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Client | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Client | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<Client | null> {\n        const query = this.repository.createQueryBuilder('client')\n            .leftJoinAndSelect('client.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('client.id = :id', { id: key });\n        } else {\n            query.where('client.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('client.realmId = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`client.${column.propertyName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.CLIENT,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        return query.getOne();\n    }\n}\n"],"mappings":";;;;;;;;AAcA,IAAaG,2BAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAgC;EACxC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,YAAYC,IAAoC;EAClD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAwC;EACpE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAwC;EAC9E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAoD;EAChE,OAAO,KAAKT,WAAWQ,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA4C;EACxE,MAAMC,QAAQ,KAAKZ,WAAWa,mBAAmB,QAAA,CAAA,CAC5CC,kBAAkB,gBAAgB,OAAA;EAEvC,MAAMC,OAAOlB,OAAOa,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,mBAAmB,EAAEP,IAAIQ,IAAI,CAAA;OACtC;GACHE,MAAMH,MAAM,uBAAuB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAEpE,IAAIP,UAAU;IACV,IAAId,OAAOc,QAAAA,GACPC,MAAMO,SAAS,6BAA6B,EAAEC,SAAST,SAAS,CAAA;SAEhEC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAE7F;EACJ;EACA,MAAM,EAAEI,YAAY,KAAKtB,WAAWuB;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,UAAUF,OAAOG,cAAc;EAIvD,IAAIZ,MACAH,MAAMgB,MACFhC,kBAAkB;GACdiC,QAAQ/B,YAAYgC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,OAAOE,MAAMmB,OAAM;CACvB;AACJ"}

package/dist/app/modules/identity/repositories/user.mjs

@@ -36,8 +36,10 @@ var UserIdentityRepository = class {
 		if (isId) query.where("user.id = :id", { id: key });
 		else {
 			query.where("user.name = :name", { name: key.trim().toLowerCase() });
-			if (realmKey) if (isUUID(realmKey)) query.andWhere("user.realmId = :realmId", { realmId: realmKey });
-			else query.andWhere("realm.name = :realmName", { realmName: realmKey.trim().toLowerCase() });
+			if (realmKey) {
+				if (isUUID(realmKey)) query.andWhere("user.realmId = :realmId", { realmId: realmKey });
+				else query.andWhere("realm.name = :realmName", { realmName: realmKey.trim().toLowerCase() });
+			}
 		}
 		const { columns } = this.repository.metadata;
 		for (const column of columns) if (!column.isSelect) query.addSelect(`user.${column.propertyName}`);

package/dist/app/modules/identity/repositories/user.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"user.mjs","names":["isUUID","buildRedisKeyPath","In","IdentityProviderMapperOperation","CachePrefix","UserIdentityRepository","repository","userPermissionRepository","userRoleRepository","ctx","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","propertyName","cache","prefix","USER","entity","getOne","extendOneWithEA","saveOneWithEA","user","extraAttributes","create","remove","savePermissions","items","ids","map","item","value","idsToDelete","filter","operation","DELETE","entities","findBy","userId","permissionId","entitiesToDelete","index","indexOf","push","length","entitiesToCreate","CREATE","findIndex","userRealmId","permissionRealmId","save","saveRoles","roleId","roleRealmId"],"sources":["../../../../../src/app/modules/identity/repositories/user.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User, UserPermission, UserRole } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { IUserIdentityRepository, IdentityProviderMapperElement } from '../../../../core/index.ts';\nimport { IdentityProviderMapperOperation } from '../../../../core/index.ts';\nimport type { UserEntity, UserRepository } from '../../../../adapters/database/domains/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport type UserIdentityRepositoryContext = {\n    repository: UserRepository,\n    userPermissionRepository: Repository<UserPermission>,\n    userRoleRepository: Repository<UserRole>,\n};\n\nexport class UserIdentityRepository implements IUserIdentityRepository {\n    private readonly repository: UserRepository;\n\n    private readonly userPermissionRepository: Repository<UserPermission>;\n\n    private readonly userRoleRepository: Repository<UserRole>;\n\n    constructor(ctx: UserIdentityRepositoryContext) {\n        this.repository = ctx.repository;\n        this.userPermissionRepository = ctx.userPermissionRepository;\n        this.userRoleRepository = ctx.userRoleRepository;\n    }\n\n    async findOneById(id: string): Promise<User | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<User | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<User | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<User | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<User | null> {\n        const query = this.repository.createQueryBuilder('user')\n            .leftJoinAndSelect('user.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('user.id = :id', { id: key });\n        } else {\n            query.where('user.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('user.realmId = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`user.${column.propertyName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.USER,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        const entity = await query.getOne();\n        if (entity) {\n            return this.repository.extendOneWithEA(entity);\n        }\n\n        return null;\n    }\n\n    async saveOneWithEA(user: Partial<User>, extraAttributes: Record<string, any>): Promise<User> {\n        const entity = this.repository.create(user);\n        return this.repository.saveOneWithEA(entity, extraAttributes);\n    }\n\n    async remove(user: User): Promise<void> {\n        await this.repository.remove(user as UserEntity);\n    }\n\n    async savePermissions(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userPermissionRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            userId: user.id,\n            permissionId: In(ids),\n        });\n\n        const entitiesToDelete : UserPermission[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.permissionId);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserPermission[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex(\n                (entity) => entity.permissionId === item.value,\n            );\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                userId: user.id,\n                userRealmId: user.realmId,\n                permissionId: item.value as string,\n                permissionRealmId: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n\n    async saveRoles(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userRoleRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            userId: user.id,\n            roleId: In(ids),\n        });\n\n        const entitiesToDelete : UserRole[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.roleId);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserRole[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex((entity) => entity.roleId === item.value);\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                userId: user.id,\n                userRealmId: user.realmId,\n                roleId: item.value as string,\n                roleRealmId: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;AAuBA,IAAaK,yBAAb,MAAaA;CACQC;CAEAC;CAEAC;CAEjB,YAAYC,KAAoC;EAC5C,KAAKH,aAAaG,IAAIH;EACtB,KAAKC,2BAA2BE,IAAIF;EACpC,KAAKC,qBAAqBC,IAAID;CAClC;CAEA,MAAME,YAAYC,IAAkC;EAChD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAsC;EAClE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAsC;EAC5E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAkD;EAC9D,OAAO,KAAKZ,WAAWW,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA0C;EACtE,MAAMC,QAAQ,KAAKf,WAAWgB,mBAAmB,MAAA,CAAA,CAC5CC,kBAAkB,cAAc,OAAA;EAErC,MAAMC,OAAOxB,OAAOmB,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,iBAAiB,EAAEP,IAAIQ,IAAI,CAAA;OACpC;GACHE,MAAMH,MAAM,qBAAqB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAElE,IAAIP,UACA,IAAIpB,OAAOoB,QAAAA,GACPC,MAAMO,SAAS,2BAA2B,EAAEC,SAAST,SAAS,CAAA;QAE9DC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EAEA,MAAM,EAAEI,YAAY,KAAKzB,WAAW0B;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,QAAQF,OAAOG,cAAc;EAIrD,IAAIZ,MACAH,MAAMgB,MACFpC,kBAAkB;GACdqC,QAAQlC,YAAYmC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,MAAMqB,SAAS,MAAMnB,MAAMoB,OAAM;EACjC,IAAID,QACA,OAAO,KAAKlC,WAAWoC,gBAAgBF,MAAAA;EAG3C,OAAO;CACX;CAEA,MAAMG,cAAcC,MAAqBC,iBAAqD;EAC1F,MAAML,SAAS,KAAKlC,WAAWwC,OAAOF,IAAAA;EACtC,OAAO,KAAKtC,WAAWqC,cAAcH,QAAQK,eAAAA;CACjD;CAEA,MAAME,OAAOH,MAA2B;EACpC,MAAM,KAAKtC,WAAWyC,OAAOH,IAAAA;CACjC;CAEA,MAAMI,gBAAgBJ,MAAYK,OAAuD;EACrF,MAAM,EAAE1C,0BAA0BD,eAAe;EAEjD,MAAM4C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcrD,gCAAgCsD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMpD,WAAWqD,OAAO;GACrCC,QAAQhB,KAAKjC;GACbkD,cAAc3D,GAAGgD,GAAAA;EACrB,CAAA;EAEA,MAAMY,mBAAsC,CAAA;EAC5C,KAAK,MAAMtB,UAAUkB,UAAU;GAE3B,IADcJ,YAAYU,QAAQxB,OAAOqB,YACrCE,MAAU,IACV;GAGJD,iBAAiBG,KAAKzB,MAAAA;EAC1B;EAEA,IAAIsB,iBAAiBI,SAAS,GAC1B,MAAM5D,WAAWyC,OAAOe,gBAAAA;EAG5B,MAAMK,mBAAsC,CAAA;EAC5C,KAAK,MAAMf,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcrD,gCAAgCiE,QACnD;GAMJ,IAHcV,SAASW,WAClB7B,WAAWA,OAAOqB,iBAAiBT,KAAKC,KAEzCU,MAAU,IACV;GAGJ,MAAMvB,SAASlC,WAAWwC,OAAO;IAC7Bc,QAAQhB,KAAKjC;IACb2D,aAAa1B,KAAKf;IAClBgC,cAAcT,KAAKC;IACnBkB,mBAAmBnB,KAAKvB;GAC5B,CAAA;GAEAsC,iBAAiBF,KAAKzB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBD,SAAS,GAC1B,MAAM5D,WAAWkE,KAAKL,gBAAAA;CAE9B;CAEA,MAAMM,UAAU7B,MAAYK,OAAuD;EAC/E,MAAM,EAAEzC,oBAAoBF,eAAe;EAE3C,MAAM4C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcrD,gCAAgCsD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMpD,WAAWqD,OAAO;GACrCC,QAAQhB,KAAKjC;GACb+D,QAAQxE,GAAGgD,GAAAA;EACf,CAAA;EAEA,MAAMY,mBAAgC,CAAA;EACtC,KAAK,MAAMtB,UAAUkB,UAAU;GAE3B,IADcJ,YAAYU,QAAQxB,OAAOkC,MACrCX,MAAU,IACV;GAGJD,iBAAiBG,KAAKzB,MAAAA;EAC1B;EAEA,IAAIsB,iBAAiBI,SAAS,GAC1B,MAAM5D,WAAWyC,OAAOe,gBAAAA;EAG5B,MAAMK,mBAAgC,CAAA;EACtC,KAAK,MAAMf,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcrD,gCAAgCiE,QACnD;GAIJ,IADcV,SAASW,WAAW7B,WAAWA,OAAOkC,WAAWtB,KAAKC,KAChEU,MAAU,IACV;GAGJ,MAAMvB,SAASlC,WAAWwC,OAAO;IAC7Bc,QAAQhB,KAAKjC;IACb2D,aAAa1B,KAAKf;IAClB6C,QAAQtB,KAAKC;IACbsB,aAAavB,KAAKvB;GACtB,CAAA;GAEAsC,iBAAiBF,KAAKzB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBD,SAAS,GAC1B,MAAM5D,WAAWkE,KAAKL,gBAAAA;CAE9B;AACJ"}
+{"version":3,"file":"user.mjs","names":["isUUID","buildRedisKeyPath","In","IdentityProviderMapperOperation","CachePrefix","UserIdentityRepository","repository","userPermissionRepository","userRoleRepository","ctx","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","propertyName","cache","prefix","USER","entity","getOne","extendOneWithEA","saveOneWithEA","user","extraAttributes","create","remove","savePermissions","items","ids","map","item","value","idsToDelete","filter","operation","DELETE","entities","findBy","userId","permissionId","entitiesToDelete","index","indexOf","push","length","entitiesToCreate","CREATE","findIndex","userRealmId","permissionRealmId","save","saveRoles","roleId","roleRealmId"],"sources":["../../../../../src/app/modules/identity/repositories/user.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User, UserPermission, UserRole } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { IUserIdentityRepository, IdentityProviderMapperElement } from '../../../../core/index.ts';\nimport { IdentityProviderMapperOperation } from '../../../../core/index.ts';\nimport type { UserEntity, UserRepository } from '../../../../adapters/database/domains/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport type UserIdentityRepositoryContext = {\n    repository: UserRepository,\n    userPermissionRepository: Repository<UserPermission>,\n    userRoleRepository: Repository<UserRole>,\n};\n\nexport class UserIdentityRepository implements IUserIdentityRepository {\n    private readonly repository: UserRepository;\n\n    private readonly userPermissionRepository: Repository<UserPermission>;\n\n    private readonly userRoleRepository: Repository<UserRole>;\n\n    constructor(ctx: UserIdentityRepositoryContext) {\n        this.repository = ctx.repository;\n        this.userPermissionRepository = ctx.userPermissionRepository;\n        this.userRoleRepository = ctx.userRoleRepository;\n    }\n\n    async findOneById(id: string): Promise<User | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<User | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<User | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<User | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<User | null> {\n        const query = this.repository.createQueryBuilder('user')\n            .leftJoinAndSelect('user.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('user.id = :id', { id: key });\n        } else {\n            query.where('user.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('user.realmId = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`user.${column.propertyName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.USER,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        const entity = await query.getOne();\n        if (entity) {\n            return this.repository.extendOneWithEA(entity);\n        }\n\n        return null;\n    }\n\n    async saveOneWithEA(user: Partial<User>, extraAttributes: Record<string, any>): Promise<User> {\n        const entity = this.repository.create(user);\n        return this.repository.saveOneWithEA(entity, extraAttributes);\n    }\n\n    async remove(user: User): Promise<void> {\n        await this.repository.remove(user as UserEntity);\n    }\n\n    async savePermissions(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userPermissionRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            userId: user.id,\n            permissionId: In(ids),\n        });\n\n        const entitiesToDelete : UserPermission[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.permissionId);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserPermission[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex(\n                (entity) => entity.permissionId === item.value,\n            );\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                userId: user.id,\n                userRealmId: user.realmId,\n                permissionId: item.value as string,\n                permissionRealmId: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n\n    async saveRoles(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userRoleRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            userId: user.id,\n            roleId: In(ids),\n        });\n\n        const entitiesToDelete : UserRole[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.roleId);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserRole[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex((entity) => entity.roleId === item.value);\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                userId: user.id,\n                userRealmId: user.realmId,\n                roleId: item.value as string,\n                roleRealmId: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;AAuBA,IAAaK,yBAAb,MAAaA;CACQC;CAEAC;CAEAC;CAEjB,YAAYC,KAAoC;EAC5C,KAAKH,aAAaG,IAAIH;EACtB,KAAKC,2BAA2BE,IAAIF;EACpC,KAAKC,qBAAqBC,IAAID;CAClC;CAEA,MAAME,YAAYC,IAAkC;EAChD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAsC;EAClE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAsC;EAC5E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAkD;EAC9D,OAAO,KAAKZ,WAAWW,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA0C;EACtE,MAAMC,QAAQ,KAAKf,WAAWgB,mBAAmB,MAAA,CAAA,CAC5CC,kBAAkB,cAAc,OAAA;EAErC,MAAMC,OAAOxB,OAAOmB,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,iBAAiB,EAAEP,IAAIQ,IAAI,CAAA;OACpC;GACHE,MAAMH,MAAM,qBAAqB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAElE,IAAIP,UAAU;IACV,IAAIpB,OAAOoB,QAAAA,GACPC,MAAMO,SAAS,2BAA2B,EAAEC,SAAST,SAAS,CAAA;SAE9DC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAE7F;EACJ;EAEA,MAAM,EAAEI,YAAY,KAAKzB,WAAW0B;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,QAAQF,OAAOG,cAAc;EAIrD,IAAIZ,MACAH,MAAMgB,MACFpC,kBAAkB;GACdqC,QAAQlC,YAAYmC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,MAAMqB,SAAS,MAAMnB,MAAMoB,OAAM;EACjC,IAAID,QACA,OAAO,KAAKlC,WAAWoC,gBAAgBF,MAAAA;EAG3C,OAAO;CACX;CAEA,MAAMG,cAAcC,MAAqBC,iBAAqD;EAC1F,MAAML,SAAS,KAAKlC,WAAWwC,OAAOF,IAAAA;EACtC,OAAO,KAAKtC,WAAWqC,cAAcH,QAAQK,eAAAA;CACjD;CAEA,MAAME,OAAOH,MAA2B;EACpC,MAAM,KAAKtC,WAAWyC,OAAOH,IAAAA;CACjC;CAEA,MAAMI,gBAAgBJ,MAAYK,OAAuD;EACrF,MAAM,EAAE1C,0BAA0BD,eAAe;EAEjD,MAAM4C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcrD,gCAAgCsD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMpD,WAAWqD,OAAO;GACrCC,QAAQhB,KAAKjC;GACbkD,cAAc3D,GAAGgD,GAAAA;EACrB,CAAA;EAEA,MAAMY,mBAAsC,CAAA;EAC5C,KAAK,MAAMtB,UAAUkB,UAAU;GAE3B,IADcJ,YAAYU,QAAQxB,OAAOqB,YACrCE,MAAU,IACV;GAGJD,iBAAiBG,KAAKzB,MAAAA;EAC1B;EAEA,IAAIsB,iBAAiBI,SAAS,GAC1B,MAAM5D,WAAWyC,OAAOe,gBAAAA;EAG5B,MAAMK,mBAAsC,CAAA;EAC5C,KAAK,MAAMf,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcrD,gCAAgCiE,QACnD;GAMJ,IAHcV,SAASW,WAClB7B,WAAWA,OAAOqB,iBAAiBT,KAAKC,KAEzCU,MAAU,IACV;GAGJ,MAAMvB,SAASlC,WAAWwC,OAAO;IAC7Bc,QAAQhB,KAAKjC;IACb2D,aAAa1B,KAAKf;IAClBgC,cAAcT,KAAKC;IACnBkB,mBAAmBnB,KAAKvB;GAC5B,CAAA;GAEAsC,iBAAiBF,KAAKzB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBD,SAAS,GAC1B,MAAM5D,WAAWkE,KAAKL,gBAAAA;CAE9B;CAEA,MAAMM,UAAU7B,MAAYK,OAAuD;EAC/E,MAAM,EAAEzC,oBAAoBF,eAAe;EAE3C,MAAM4C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcrD,gCAAgCsD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMpD,WAAWqD,OAAO;GACrCC,QAAQhB,KAAKjC;GACb+D,QAAQxE,GAAGgD,GAAAA;EACf,CAAA;EAEA,MAAMY,mBAAgC,CAAA;EACtC,KAAK,MAAMtB,UAAUkB,UAAU;GAE3B,IADcJ,YAAYU,QAAQxB,OAAOkC,MACrCX,MAAU,IACV;GAGJD,iBAAiBG,KAAKzB,MAAAA;EAC1B;EAEA,IAAIsB,iBAAiBI,SAAS,GAC1B,MAAM5D,WAAWyC,OAAOe,gBAAAA;EAG5B,MAAMK,mBAAgC,CAAA;EACtC,KAAK,MAAMf,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcrD,gCAAgCiE,QACnD;GAIJ,IADcV,SAASW,WAAW7B,WAAWA,OAAOkC,WAAWtB,KAAKC,KAChEU,MAAU,IACV;GAGJ,MAAMvB,SAASlC,WAAWwC,OAAO;IAC7Bc,QAAQhB,KAAKjC;IACb2D,aAAa1B,KAAKf;IAClB6C,QAAQtB,KAAKC;IACbsB,aAAavB,KAAKvB;GACtB,CAAA;GAEAsC,iBAAiBF,KAAKzB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBD,SAAS,GAC1B,MAAM5D,WAAWkE,KAAKL,gBAAAA;CAE9B;AACJ"}

package/dist/app/modules/index.mjs

@@ -4,19 +4,17 @@ import.meta.url;
 import { AuthenticationInjectionKey } from "./authentication/constants.mjs";
 import { CacheInjectionKey } from "./cache/constants.mjs";
 import { ModuleName } from "./constants.mjs";
-import { ConfigEnvironmentVariableName, ConfigInjectionKey } from "./config/constants.mjs";
-import { expandToOrigins, getAppOrigins } from "./config/origins.mjs";
-import { readConfigRawFromEnv } from "./config/read/env.mjs";
-import { readConfigRawFromFS } from "./config/read/fs.mjs";
-import { readConfigRaw } from "./config/read/module.mjs";
-import { readConfig } from "./config/helpers.mjs";
+import { CONFIG_SCHEMA, ConfigInjectionKey } from "./config/constants.mjs";
+import { normalizeConfig, readConfig } from "./config/read.mjs";
 import { ConfigModule } from "./config/module.mjs";
+import { getAppOrigins } from "./config/app-origins.mjs";
 import "./config/index.mjs";
 import { CacheModule } from "./cache/module.mjs";
 import "./cache/index.mjs";
-import { SessionRepository } from "./authentication/repositories/session.mjs";
-import { AuthenticationModule } from "./authentication/module.mjs";
-import "./authentication/index.mjs";
+import { LoggerInjectionKey } from "./logger/constants.mjs";
+import { LoggerModule } from "./logger/module.mjs";
+import "./logger/index.mjs";
+import { OAuth2InjectionToken } from "./oauth2/constants.mjs";
 import { RealmRepositoryAdapter } from "./database/repositories/realm/repository.mjs";
 import { ClientRepositoryAdapter } from "./database/repositories/client/repository.mjs";
 import { ClientPermissionRepositoryAdapter } from "./database/repositories/client-permission/repository.mjs";
@@ -41,19 +39,6 @@ import { UserAuthenticatorRepositoryAdapter } from "./database/repositories/user
 import { UserPermissionRepositoryAdapter } from "./database/repositories/user-permission/repository.mjs";
 import { UserRoleRepositoryAdapter } from "./database/repositories/user-role/repository.mjs";
 import { IdentityProviderRoleMappingRepositoryAdapter } from "./database/repositories/identity-provider-role-mapping/repository.mjs";
-import { DatabaseInjectionKey } from "./database/constants.mjs";
-import { LoggerInjectionKey } from "./logger/constants.mjs";
-import { LoggerModule } from "./logger/module.mjs";
-import "./logger/index.mjs";
-import { DatabaseModule } from "./database/module.mjs";
-import "./database/index.mjs";
-import { ComponentsModule } from "./components/module.mjs";
-import "./components/index.mjs";
-import { HTTPInjectionKey } from "./http/constants.mjs";
-import { MetricsInjectionKey } from "./metrics/constants.mjs";
-import { PromAuthFlowMetrics } from "./metrics/prom.mjs";
-import "./metrics/index.mjs";
-import { OAuth2InjectionToken } from "./oauth2/constants.mjs";
 import { IdentityInjectionKey } from "./identity/constants.mjs";
 import { IdentityProviderAttributeMappingRepository } from "./identity/repositories/provider/mapper/attribute.mjs";
 import { IdentityProviderPermissionMappingRepository } from "./identity/repositories/provider/mapper/permission.mjs";
@@ -62,6 +47,10 @@ import { CacheIdentityPrefix } from "./identity/repositories/constants.mjs";
 import { IdentityProviderAccountLinkStore } from "./identity/repositories/provider/link.mjs";
 import { ClientIdentityRepository } from "./identity/repositories/client.mjs";
 import { UserIdentityRepository } from "./identity/repositories/user.mjs";
+import { DatabaseInjectionKey } from "./database/constants.mjs";
+import { assertNoPendingMigrations, verifySchemaOrSynchronize } from "./database/migration.mjs";
+import { DatabaseModule } from "./database/module.mjs";
+import "./database/index.mjs";
 import { LDAPInjectionKey } from "./ldap/constants.mjs";
 import { LdapModule } from "./ldap/module.mjs";
 import "./ldap/index.mjs";
@@ -69,6 +58,15 @@ import { IdentityModule } from "./identity/module.mjs";
 import "./identity/index.mjs";
 import { OAuth2Module } from "./oauth2/module.mjs";
 import "./oauth2/index.mjs";
+import { SessionRepository } from "./authentication/repositories/session.mjs";
+import { AuthenticationModule } from "./authentication/module.mjs";
+import "./authentication/index.mjs";
+import { ComponentsModule } from "./components/module.mjs";
+import "./components/index.mjs";
+import { HTTPInjectionKey } from "./http/constants.mjs";
+import { MetricsInjectionKey } from "./metrics/constants.mjs";
+import { PromAuthFlowMetrics } from "./metrics/prom.mjs";
+import "./metrics/index.mjs";
 import { ProvisioningInjectionKey } from "./provisioning/constants.mjs";
 import { LazyWildcardRealmProvisioner } from "./provisioning/lazy-wildcard.mjs";
 import { MailInjectionKey, MailTemplateRendererInjectionKey } from "./mail/constants.mjs";
@@ -83,4 +81,4 @@ import { ProvisionerModule } from "./provisioning/module.mjs";
 import "./provisioning/index.mjs";
 import { RuntimeModule } from "./runtime/module.mjs";
 import "./runtime/index.mjs";
-export { AuthenticationInjectionKey, AuthenticationModule, CacheIdentityPrefix, CacheInjectionKey, CacheModule, ClientIdentityRepository, ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DatabaseInjectionKey, DatabaseModule, DefaultProvisioningSource, EventRepositoryAdapter, FileProvisioningSource, HTTPInjectionKey, HTTPModule, IdentityInjectionKey, IdentityModule, IdentityProviderAccountLinkStore, IdentityProviderAccountRepositoryAdapter, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, KeyRepositoryAdapter, LDAPInjectionKey, LazyWildcardRealmProvisioner, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, MetricsInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, PromAuthFlowMetrics, ProvisionerModule, ProvisioningInjectionKey, RealmRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, RuntimeModule, ScopeRepositoryAdapter, SessionRepository, TrustAnchorRepositoryAdapter, UserAttributeRepositoryAdapter, UserAuthenticatorRepositoryAdapter, UserIdentityRepository, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter, expandToOrigins, getAppOrigins, readConfig, readConfigRaw, readConfigRawFromEnv, readConfigRawFromFS };
+export { AuthenticationInjectionKey, AuthenticationModule, CONFIG_SCHEMA, CacheIdentityPrefix, CacheInjectionKey, CacheModule, ClientIdentityRepository, ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, ComponentsModule, CompositeProvisioningSource, ConfigInjectionKey, ConfigModule, DatabaseInjectionKey, DatabaseModule, DefaultProvisioningSource, EventRepositoryAdapter, FileProvisioningSource, HTTPInjectionKey, HTTPModule, IdentityInjectionKey, IdentityModule, IdentityProviderAccountLinkStore, IdentityProviderAccountRepositoryAdapter, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, KeyRepositoryAdapter, LDAPInjectionKey, LazyWildcardRealmProvisioner, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, MetricsInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, PromAuthFlowMetrics, ProvisionerModule, ProvisioningInjectionKey, RealmRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, RuntimeModule, ScopeRepositoryAdapter, SessionRepository, TrustAnchorRepositoryAdapter, UserAttributeRepositoryAdapter, UserAuthenticatorRepositoryAdapter, UserIdentityRepository, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter, assertNoPendingMigrations, getAppOrigins, normalizeConfig, readConfig, verifySchemaOrSynchronize };

package/dist/app/modules/logger/module.mjs

@@ -23,7 +23,7 @@ var LoggerModule = class {
 		}
 		container.register(LoggerInjectionKey, { useFactory: () => createLogger({
 			env: result.data.env,
-			directory: result.data.writableDirectoryPath
+			directory: result.data.logDirectoryPath
 		}) });
 	}
 };

package/dist/app/modules/logger/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["createLogger","createNoopLogger","ModuleName","ConfigInjectionKey","LoggerInjectionKey","LoggerModule","name","dependencies","LOGGER","CONFIG","setup","container","has","result","tryResolve","success","data","logger","register","useFactory","env","directory","writableDirectoryPath"],"sources":["../../../../src/app/modules/logger/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createLogger, createNoopLogger } from '@authup/server-kit';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport { LoggerInjectionKey } from './constants.ts';\nimport type { IContainer } from 'eldin';\n\nexport class LoggerModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.LOGGER;\n        this.dependencies = [ModuleName.CONFIG];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        // A pre-registered logger wins (test injection, mirroring the\n        // MailInjectionKey / UIHttpClient pattern), so a fake can capture\n        // what the server writes.\n        if (container.has(LoggerInjectionKey)) {\n            return;\n        }\n\n        const result = container.tryResolve(ConfigInjectionKey);\n        if (!result.success || !result.data.logger) {\n            container.register(LoggerInjectionKey, { useFactory: createNoopLogger });\n\n            return;\n        }\n\n        container.register(LoggerInjectionKey, {\n            useFactory: () => createLogger({\n                env: result.data.env,\n                directory: result.data.writableDirectoryPath,\n            }),\n        });\n    }\n\n    // ----------------------------------------------------\n}\n"],"mappings":";;;;;;;;;AAcA,IAAaK,eAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOJ,WAAWM;EACvB,KAAKD,eAAe,CAACL,WAAWO,MAAO;CAC3C;CAEA,MAAMC,MAAMC,WAAsC;EAI9C,IAAIA,UAAUC,IAAIR,kBAAAA,GACd;EAGJ,MAAMS,SAASF,UAAUG,WAAWX,kBAAAA;EACpC,IAAI,CAACU,OAAOE,WAAW,CAACF,OAAOG,KAAKC,QAAQ;GACxCN,UAAUO,SAASd,oBAAoB,EAAEe,YAAYlB,iBAAiB,CAAA;GAEtE;EACJ;EAEAU,UAAUO,SAASd,oBAAoB,EACnCe,kBAAkBnB,aAAa;GAC3BoB,KAAKP,OAAOG,KAAKI;GACjBC,WAAWR,OAAOG,KAAKM;EAC3B,CAAA,EACJ,CAAA;CACJ;AAGJ"}
+{"version":3,"file":"module.mjs","names":["createLogger","createNoopLogger","ModuleName","ConfigInjectionKey","LoggerInjectionKey","LoggerModule","name","dependencies","LOGGER","CONFIG","setup","container","has","result","tryResolve","success","data","logger","register","useFactory","env","directory","logDirectoryPath"],"sources":["../../../../src/app/modules/logger/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createLogger, createNoopLogger } from '@authup/server-kit';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport { LoggerInjectionKey } from './constants.ts';\nimport type { IContainer } from 'eldin';\n\nexport class LoggerModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.LOGGER;\n        this.dependencies = [ModuleName.CONFIG];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        // A pre-registered logger wins (test injection, mirroring the\n        // MailInjectionKey / InternalHttpClient pattern), so a fake can capture\n        // what the server writes.\n        if (container.has(LoggerInjectionKey)) {\n            return;\n        }\n\n        const result = container.tryResolve(ConfigInjectionKey);\n        if (!result.success || !result.data.logger) {\n            container.register(LoggerInjectionKey, { useFactory: createNoopLogger });\n\n            return;\n        }\n\n        container.register(LoggerInjectionKey, {\n            useFactory: () => createLogger({\n                env: result.data.env,\n                directory: result.data.logDirectoryPath,\n            }),\n        });\n    }\n\n    // ----------------------------------------------------\n}\n"],"mappings":";;;;;;;;;AAcA,IAAaK,eAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOJ,WAAWM;EACvB,KAAKD,eAAe,CAACL,WAAWO,MAAO;CAC3C;CAEA,MAAMC,MAAMC,WAAsC;EAI9C,IAAIA,UAAUC,IAAIR,kBAAAA,GACd;EAGJ,MAAMS,SAASF,UAAUG,WAAWX,kBAAAA;EACpC,IAAI,CAACU,OAAOE,WAAW,CAACF,OAAOG,KAAKC,QAAQ;GACxCN,UAAUO,SAASd,oBAAoB,EAAEe,YAAYlB,iBAAiB,CAAA;GAEtE;EACJ;EAEAU,UAAUO,SAASd,oBAAoB,EACnCe,kBAAkBnB,aAAa;GAC3BoB,KAAKP,OAAOG,KAAKI;GACjBC,WAAWR,OAAOG,KAAKM;EAC3B,CAAA,EACJ,CAAA;CACJ;AAGJ"}

package/dist/app/modules/mail/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/mail/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAMrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAExC,qBAAa,UAAW,YAAW,OAAO;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;;IAO1B,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAoBpD"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/mail/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAMrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAExC,qBAAa,UAAW,YAAW,OAAO;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;;IAO1B,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAsBpD"}

package/dist/app/modules/mail/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["ModuleName","MailTemplateRenderer","SMTPMailClientAdapter","VoidMailClientAdapter","MailInjectionKey","MailTemplateRendererInjectionKey","ConfigInjectionKey","MailModule","name","dependencies","MAIL","CONFIG","setup","container","has","register","useFactory","result","tryResolve","success","data","smtp"],"sources":["../../../../src/app/modules/mail/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { MailTemplateRenderer } from '../../../core/index.ts';\nimport { SMTPMailClientAdapter, VoidMailClientAdapter } from './adapter/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from './constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IContainer } from 'eldin';\n\nexport class MailModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.MAIL;\n        this.dependencies = [ModuleName.CONFIG];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        if (!container.has(MailTemplateRendererInjectionKey)) {\n            container.register(MailTemplateRendererInjectionKey, { useFactory: () => new MailTemplateRenderer() });\n        }\n\n        // A pre-registered client wins (test injection — mirrors the\n        // UIHttpClient pattern), so a fake can capture mailed OTP codes.\n        if (container.has(MailInjectionKey)) {\n            return;\n        }\n\n        const result = container.tryResolve(ConfigInjectionKey);\n        if (!result.success || !result.data.smtp) {\n            container.register(MailInjectionKey, { useFactory: () => new VoidMailClientAdapter() });\n\n            return;\n        }\n\n        container.register(MailInjectionKey, { useFactory: () => new SMTPMailClientAdapter(result.data.smtp) });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAeA,IAAaO,aAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOR,WAAWU;EACvB,KAAKD,eAAe,CAACT,WAAWW,MAAO;CAC3C;CAEA,MAAMC,MAAMC,WAAsC;EAC9C,IAAI,CAACA,UAAUC,IAAIT,gCAAAA,GACfQ,UAAUE,SAASV,kCAAkC,EAAEW,kBAAkB,IAAIf,qBAAAA,EAAuB,CAAA;EAKxG,IAAIY,UAAUC,IAAIV,gBAAAA,GACd;EAGJ,MAAMa,SAASJ,UAAUK,WAAWZ,kBAAAA;EACpC,IAAI,CAACW,OAAOE,WAAW,CAACF,OAAOG,KAAKC,MAAM;GACtCR,UAAUE,SAASX,kBAAkB,EAAEY,kBAAkB,IAAIb,sBAAAA,EAAwB,CAAA;GAErF;EACJ;EAEAU,UAAUE,SAASX,kBAAkB,EAAEY,kBAAkB,IAAId,sBAAsBe,OAAOG,KAAKC,IAAI,EAAE,CAAA;CACzG;AACJ"}
+{"version":3,"file":"module.mjs","names":["ModuleName","MailTemplateRenderer","SMTPMailClientAdapter","VoidMailClientAdapter","MailInjectionKey","MailTemplateRendererInjectionKey","ConfigInjectionKey","MailModule","name","dependencies","MAIL","CONFIG","setup","container","has","register","useFactory","result","tryResolve","success","data","smtp"],"sources":["../../../../src/app/modules/mail/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { MailTemplateRenderer } from '../../../core/index.ts';\nimport { SMTPMailClientAdapter, VoidMailClientAdapter } from './adapter/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from './constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IContainer } from 'eldin';\n\nexport class MailModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.MAIL;\n        this.dependencies = [ModuleName.CONFIG];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        if (!container.has(MailTemplateRendererInjectionKey)) {\n            container.register(MailTemplateRendererInjectionKey, { useFactory: () => new MailTemplateRenderer() });\n        }\n\n        // A pre-registered client wins (test injection — mirrors the\n        // InternalHttpClient pattern), so a fake can capture mailed OTP codes.\n        if (container.has(MailInjectionKey)) {\n            return;\n        }\n\n        const result = container.tryResolve(ConfigInjectionKey);\n        if (!result.success || !result.data.smtp) {\n            container.register(MailInjectionKey, { useFactory: () => new VoidMailClientAdapter() });\n\n            return;\n        }\n\n        // the configuration surface is deliberately untyped: the object arm\n        // of `smtp` is opaque, and this adapter owns its real shape.\n        container.register(MailInjectionKey, { useFactory: () => new SMTPMailClientAdapter(result.data.smtp) });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAeA,IAAaO,aAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOR,WAAWU;EACvB,KAAKD,eAAe,CAACT,WAAWW,MAAO;CAC3C;CAEA,MAAMC,MAAMC,WAAsC;EAC9C,IAAI,CAACA,UAAUC,IAAIT,gCAAAA,GACfQ,UAAUE,SAASV,kCAAkC,EAAEW,kBAAkB,IAAIf,qBAAAA,EAAuB,CAAA;EAKxG,IAAIY,UAAUC,IAAIV,gBAAAA,GACd;EAGJ,MAAMa,SAASJ,UAAUK,WAAWZ,kBAAAA;EACpC,IAAI,CAACW,OAAOE,WAAW,CAACF,OAAOG,KAAKC,MAAM;GACtCR,UAAUE,SAASX,kBAAkB,EAAEY,kBAAkB,IAAIb,sBAAAA,EAAwB,CAAA;GAErF;EACJ;EAIAU,UAAUE,SAASX,kBAAkB,EAAEY,kBAAkB,IAAId,sBAAsBe,OAAOG,KAAKC,IAAI,EAAE,CAAA;CACzG;AACJ"}

package/dist/app/modules/oauth2/constants.d.ts

@@ -1,5 +1,5 @@
 import { TypedToken } from 'eldin';
-import type { IConsentRepository, IKeyRepository, IKeyStore, IOAuth2AuthorizationCodeIssuer, IOAuth2AuthorizationCodeRepository, IOAuth2AuthorizationCodeRequestVerifier, IOAuth2AuthorizationCodeVerifier, IOAuth2AuthorizationStateManager, IOAuth2AuthorizeStateRepository, IOAuth2ClientRepository, IOAuth2FederatedLoginStore, IOAuth2OpenIDTokenIssuer, IOAuth2ScopeRepository, IOAuth2TokenIssuer, IOAuth2TokenRepository, IOAuth2TokenRevoker, IOAuth2TokenSigner, IOAuth2TokenVerifier, ISessionTokenRepository } from '../../../core/index.ts';
+import type { IConsentRepository, IConsoleLoginStore, IKeyRepository, IKeyStore, IOAuth2AuthorizationCodeIssuer, IOAuth2AuthorizationCodeRepository, IOAuth2AuthorizationCodeRequestVerifier, IOAuth2AuthorizationCodeVerifier, IOAuth2AuthorizationStateManager, IOAuth2AuthorizeStateRepository, IOAuth2ClientRepository, IOAuth2FederatedLoginStore, IOAuth2OpenIDTokenIssuer, IOAuth2ScopeRepository, IOAuth2TokenIssuer, IOAuth2TokenRepository, IOAuth2TokenRevoker, IOAuth2TokenSigner, IOAuth2TokenVerifier, ISessionTokenRepository } from '../../../core/index.ts';
 export declare const OAuth2InjectionToken: {
     readonly ClientRepository: TypedToken<IOAuth2ClientRepository>;
     readonly ScopeRepository: TypedToken<IOAuth2ScopeRepository>;
@@ -9,6 +9,7 @@ export declare const OAuth2InjectionToken: {
     readonly AuthorizationStateManager: TypedToken<IOAuth2AuthorizationStateManager>;
     readonly AuthorizationCodeRequestVerifier: TypedToken<IOAuth2AuthorizationCodeRequestVerifier>;
     readonly AuthorizationStateRepository: TypedToken<IOAuth2AuthorizeStateRepository>;
+    readonly ConsoleLoginStore: TypedToken<IConsoleLoginStore>;
     readonly FederatedLoginStore: TypedToken<IOAuth2FederatedLoginStore>;
     /**
      * One adapter instance serving both key ports: the material-resolving

package/dist/app/modules/oauth2/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/oauth2/constants.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,KAAK,EACR,kBAAkB,EAClB,cAAc,EACd,SAAS,EACT,8BAA8B,EAC9B,kCAAkC,EAClC,uCAAuC,EACvC,gCAAgC,EAChC,gCAAgC,EAChC,+BAA+B,EAC/B,uBAAuB,EACvB,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EAC1B,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,oBAAoB;;;;;;;;;;IAc7B;;;;OAIG;;;;;;;;;;;;CAcG,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/oauth2/constants.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,KAAK,EACR,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,SAAS,EACT,8BAA8B,EAC9B,kCAAkC,EAClC,uCAAuC,EACvC,gCAAgC,EAChC,gCAAgC,EAChC,+BAA+B,EAC/B,uBAAuB,EACvB,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EAC1B,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,oBAAoB;;;;;;;;;;;IAe7B;;;;OAIG;;;;;;;;;;;;CAcG,CAAC"}

package/dist/app/modules/oauth2/constants.mjs

@@ -12,6 +12,7 @@ const OAuth2InjectionToken = {
 	AuthorizationStateManager: new TypedToken("AuthorizationStateManager"),
 	AuthorizationCodeRequestVerifier: new TypedToken("AuthorizationCodeRequestVerifier"),
 	AuthorizationStateRepository: new TypedToken("AuthorizationStateRepository"),
+	ConsoleLoginStore: new TypedToken("ConsoleLoginStore"),
 	FederatedLoginStore: new TypedToken("FederatedLoginStore"),
 	/**
 	* One adapter instance serving both key ports: the material-resolving

package/dist/app/modules/oauth2/constants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"constants.mjs","names":["TypedToken","OAuth2InjectionToken","ClientRepository","ScopeRepository","AuthorizationCodeIssuer","AuthorizationCodeRepository","AuthorizationCodeVerifier","AuthorizationStateManager","AuthorizationCodeRequestVerifier","AuthorizationStateRepository","FederatedLoginStore","KeyStore","AccessTokenIssuer","MfaTokenIssuer","OpenIDTokenIssuer","RefreshTokenIssuer","TokenRepository","SessionTokenRepository","ConsentRepository","TokenRevoker","TokenSigner","TokenVerifier"],"sources":["../../../../src/app/modules/oauth2/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TypedToken } from 'eldin';\nimport type {\n    IConsentRepository,\n    IKeyRepository,\n    IKeyStore,\n    IOAuth2AuthorizationCodeIssuer,\n    IOAuth2AuthorizationCodeRepository,\n    IOAuth2AuthorizationCodeRequestVerifier,\n    IOAuth2AuthorizationCodeVerifier,\n    IOAuth2AuthorizationStateManager,\n    IOAuth2AuthorizeStateRepository,\n    IOAuth2ClientRepository,\n    IOAuth2FederatedLoginStore,\n    IOAuth2OpenIDTokenIssuer,\n    IOAuth2ScopeRepository,\n    IOAuth2TokenIssuer,\n    IOAuth2TokenRepository,\n    IOAuth2TokenRevoker,\n    IOAuth2TokenSigner,\n    IOAuth2TokenVerifier,\n    ISessionTokenRepository,\n} from '../../../core/index.ts';\n\nexport const OAuth2InjectionToken = {\n    ClientRepository: new TypedToken<IOAuth2ClientRepository>('ClientRepository'),\n    ScopeRepository: new TypedToken<IOAuth2ScopeRepository>('ScopeRepository'),\n\n    AuthorizationCodeIssuer: new TypedToken<IOAuth2AuthorizationCodeIssuer>('AuthorizationCodeIssuer'),\n    AuthorizationCodeRepository: new TypedToken<IOAuth2AuthorizationCodeRepository>('AuthorizationCodeRepository'),\n    AuthorizationCodeVerifier: new TypedToken<IOAuth2AuthorizationCodeVerifier>('AuthorizationCodeVerifier'),\n    AuthorizationStateManager: new TypedToken<IOAuth2AuthorizationStateManager>('AuthorizationStateManager'),\n    AuthorizationCodeRequestVerifier: new TypedToken<IOAuth2AuthorizationCodeRequestVerifier>('AuthorizationCodeRequestVerifier'),\n\n    AuthorizationStateRepository: new TypedToken<IOAuth2AuthorizeStateRepository>('AuthorizationStateRepository'),\n\n    FederatedLoginStore: new TypedToken<IOAuth2FederatedLoginStore>('FederatedLoginStore'),\n\n    /**\n     * One adapter instance serving both key ports: the material-resolving\n     * store (signer / verifier / realm cipher) and the entity CRUD surface\n     * (key management API).\n     */\n    KeyStore: new TypedToken<IKeyStore & IKeyRepository>('KeyStore'),\n\n    AccessTokenIssuer: new TypedToken<IOAuth2TokenIssuer>('AccessTokenIssuer'),\n    MfaTokenIssuer: new TypedToken<IOAuth2TokenIssuer>('MfaTokenIssuer'),\n    OpenIDTokenIssuer: new TypedToken<IOAuth2OpenIDTokenIssuer>('OpenIDTokenIssuer'),\n    RefreshTokenIssuer: new TypedToken<IOAuth2TokenIssuer>('RefreshTokenIssuer'),\n\n    TokenRepository: new TypedToken<IOAuth2TokenRepository>('TokenRepository'),\n    SessionTokenRepository: new TypedToken<ISessionTokenRepository>('SessionTokenRepository'),\n    ConsentRepository: new TypedToken<IConsentRepository>('OAuth2ConsentRepository'),\n    TokenRevoker: new TypedToken<IOAuth2TokenRevoker>('TokenRevoker'),\n    TokenSigner: new TypedToken<IOAuth2TokenSigner>('TokenSigner'),\n    TokenVerifier: new TypedToken<IOAuth2TokenVerifier>('TokenVerifier'),\n} as const;\n"],"mappings":";;;;;AA8BA,MAAaC,uBAAuB;CAChCC,kBAAkB,IAAIF,WAAoC,kBAAA;CAC1DG,iBAAiB,IAAIH,WAAmC,iBAAA;CAExDI,yBAAyB,IAAIJ,WAA2C,yBAAA;CACxEK,6BAA6B,IAAIL,WAA+C,6BAAA;CAChFM,2BAA2B,IAAIN,WAA6C,2BAAA;CAC5EO,2BAA2B,IAAIP,WAA6C,2BAAA;CAC5EQ,kCAAkC,IAAIR,WAAoD,kCAAA;CAE1FS,8BAA8B,IAAIT,WAA4C,8BAAA;CAE9EU,qBAAqB,IAAIV,WAAuC,qBAAA;;;;;IAOhEW,UAAU,IAAIX,WAAuC,UAAA;CAErDY,mBAAmB,IAAIZ,WAA+B,mBAAA;CACtDa,gBAAgB,IAAIb,WAA+B,gBAAA;CACnDc,mBAAmB,IAAId,WAAqC,mBAAA;CAC5De,oBAAoB,IAAIf,WAA+B,oBAAA;CAEvDgB,iBAAiB,IAAIhB,WAAmC,iBAAA;CACxDiB,wBAAwB,IAAIjB,WAAoC,wBAAA;CAChEkB,mBAAmB,IAAIlB,WAA+B,yBAAA;CACtDmB,cAAc,IAAInB,WAAgC,cAAA;CAClDoB,aAAa,IAAIpB,WAA+B,aAAA;CAChDqB,eAAe,IAAIrB,WAAiC,eAAA;AACxD"}
+{"version":3,"file":"constants.mjs","names":["TypedToken","OAuth2InjectionToken","ClientRepository","ScopeRepository","AuthorizationCodeIssuer","AuthorizationCodeRepository","AuthorizationCodeVerifier","AuthorizationStateManager","AuthorizationCodeRequestVerifier","AuthorizationStateRepository","ConsoleLoginStore","FederatedLoginStore","KeyStore","AccessTokenIssuer","MfaTokenIssuer","OpenIDTokenIssuer","RefreshTokenIssuer","TokenRepository","SessionTokenRepository","ConsentRepository","TokenRevoker","TokenSigner","TokenVerifier"],"sources":["../../../../src/app/modules/oauth2/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TypedToken } from 'eldin';\nimport type {\n    IConsentRepository,\n    IConsoleLoginStore,\n    IKeyRepository,\n    IKeyStore,\n    IOAuth2AuthorizationCodeIssuer,\n    IOAuth2AuthorizationCodeRepository,\n    IOAuth2AuthorizationCodeRequestVerifier,\n    IOAuth2AuthorizationCodeVerifier,\n    IOAuth2AuthorizationStateManager,\n    IOAuth2AuthorizeStateRepository,\n    IOAuth2ClientRepository,\n    IOAuth2FederatedLoginStore,\n    IOAuth2OpenIDTokenIssuer,\n    IOAuth2ScopeRepository,\n    IOAuth2TokenIssuer,\n    IOAuth2TokenRepository,\n    IOAuth2TokenRevoker,\n    IOAuth2TokenSigner,\n    IOAuth2TokenVerifier,\n    ISessionTokenRepository,\n} from '../../../core/index.ts';\n\nexport const OAuth2InjectionToken = {\n    ClientRepository: new TypedToken<IOAuth2ClientRepository>('ClientRepository'),\n    ScopeRepository: new TypedToken<IOAuth2ScopeRepository>('ScopeRepository'),\n\n    AuthorizationCodeIssuer: new TypedToken<IOAuth2AuthorizationCodeIssuer>('AuthorizationCodeIssuer'),\n    AuthorizationCodeRepository: new TypedToken<IOAuth2AuthorizationCodeRepository>('AuthorizationCodeRepository'),\n    AuthorizationCodeVerifier: new TypedToken<IOAuth2AuthorizationCodeVerifier>('AuthorizationCodeVerifier'),\n    AuthorizationStateManager: new TypedToken<IOAuth2AuthorizationStateManager>('AuthorizationStateManager'),\n    AuthorizationCodeRequestVerifier: new TypedToken<IOAuth2AuthorizationCodeRequestVerifier>('AuthorizationCodeRequestVerifier'),\n\n    AuthorizationStateRepository: new TypedToken<IOAuth2AuthorizeStateRepository>('AuthorizationStateRepository'),\n\n    ConsoleLoginStore: new TypedToken<IConsoleLoginStore>('ConsoleLoginStore'),\n    FederatedLoginStore: new TypedToken<IOAuth2FederatedLoginStore>('FederatedLoginStore'),\n\n    /**\n     * One adapter instance serving both key ports: the material-resolving\n     * store (signer / verifier / realm cipher) and the entity CRUD surface\n     * (key management API).\n     */\n    KeyStore: new TypedToken<IKeyStore & IKeyRepository>('KeyStore'),\n\n    AccessTokenIssuer: new TypedToken<IOAuth2TokenIssuer>('AccessTokenIssuer'),\n    MfaTokenIssuer: new TypedToken<IOAuth2TokenIssuer>('MfaTokenIssuer'),\n    OpenIDTokenIssuer: new TypedToken<IOAuth2OpenIDTokenIssuer>('OpenIDTokenIssuer'),\n    RefreshTokenIssuer: new TypedToken<IOAuth2TokenIssuer>('RefreshTokenIssuer'),\n\n    TokenRepository: new TypedToken<IOAuth2TokenRepository>('TokenRepository'),\n    SessionTokenRepository: new TypedToken<ISessionTokenRepository>('SessionTokenRepository'),\n    ConsentRepository: new TypedToken<IConsentRepository>('OAuth2ConsentRepository'),\n    TokenRevoker: new TypedToken<IOAuth2TokenRevoker>('TokenRevoker'),\n    TokenSigner: new TypedToken<IOAuth2TokenSigner>('TokenSigner'),\n    TokenVerifier: new TypedToken<IOAuth2TokenVerifier>('TokenVerifier'),\n} as const;\n"],"mappings":";;;;;AA+BA,MAAaC,uBAAuB;CAChCC,kBAAkB,IAAIF,WAAoC,kBAAA;CAC1DG,iBAAiB,IAAIH,WAAmC,iBAAA;CAExDI,yBAAyB,IAAIJ,WAA2C,yBAAA;CACxEK,6BAA6B,IAAIL,WAA+C,6BAAA;CAChFM,2BAA2B,IAAIN,WAA6C,2BAAA;CAC5EO,2BAA2B,IAAIP,WAA6C,2BAAA;CAC5EQ,kCAAkC,IAAIR,WAAoD,kCAAA;CAE1FS,8BAA8B,IAAIT,WAA4C,8BAAA;CAE9EU,mBAAmB,IAAIV,WAA+B,mBAAA;CACtDW,qBAAqB,IAAIX,WAAuC,qBAAA;;;;;IAOhEY,UAAU,IAAIZ,WAAuC,UAAA;CAErDa,mBAAmB,IAAIb,WAA+B,mBAAA;CACtDc,gBAAgB,IAAId,WAA+B,gBAAA;CACnDe,mBAAmB,IAAIf,WAAqC,mBAAA;CAC5DgB,oBAAoB,IAAIhB,WAA+B,oBAAA;CAEvDiB,iBAAiB,IAAIjB,WAAmC,iBAAA;CACxDkB,wBAAwB,IAAIlB,WAAoC,wBAAA;CAChEmB,mBAAmB,IAAInB,WAA+B,yBAAA;CACtDoB,cAAc,IAAIpB,WAAgC,cAAA;CAClDqB,aAAa,IAAIrB,WAA+B,aAAA;CAChDsB,eAAe,IAAItB,WAAiC,eAAA;AACxD"}

package/dist/app/modules/oauth2/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/oauth2/module.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAkCrC,qBAAa,YAAa,YAAW,OAAO;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;;IAO1B,KAAK,CAAC,SAAS,EAAE,UAAU,GAAI,OAAO,CAAC,IAAI,CAAC;CAmOrD"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/oauth2/module.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAmCrC,qBAAa,YAAa,YAAW,OAAO;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;;IAO1B,KAAK,CAAC,SAAS,EAAE,UAAU,GAAI,OAAO,CAAC,IAAI,CAAC;CA2OrD"}

package/dist/app/modules/oauth2/module.mjs

@@ -21,23 +21,24 @@ import { ModuleName } from "../constants.mjs";
 import { ConfigInjectionKey } from "../config/constants.mjs";
 import "../config/index.mjs";
 import "../cache/index.mjs";
-import { KeyRepositoryAdapter } from "../database/repositories/key/repository.mjs";
-import "../database/repositories/index.mjs";
-import { DatabaseInjectionKey } from "../database/constants.mjs";
 import { LoggerInjectionKey } from "../logger/constants.mjs";
 import "../logger/index.mjs";
-import "../database/index.mjs";
 import { OAuth2InjectionToken } from "./constants.mjs";
 import { OAuth2AuthorizationCodeRepository } from "./repositories/authorize/code/repository.mjs";
 import { OAuth2AuthorizationStateRepository } from "./repositories/authorize/state/repository.mjs";
 import { OAuth2ClientRepository } from "./repositories/client/repository.mjs";
 import { ConsentRepositoryAdapter } from "./repositories/consent/repository.mjs";
+import { ConsoleLoginStore } from "./repositories/console-login/store.mjs";
 import { OAuth2FederatedLoginStore } from "./repositories/federated-login/store.mjs";
 import { OAuth2ScopeRepository } from "./repositories/scope/repository.mjs";
 import { SessionTokenRepositoryAdapter } from "./repositories/session-token/repository.mjs";
 import { OAuth2TokenRepository } from "./repositories/token/repository.mjs";
 import "./repositories/index.mjs";
+import { KeyRepositoryAdapter } from "../database/repositories/key/repository.mjs";
+import "../database/repositories/index.mjs";
 import { IdentityInjectionKey } from "../identity/constants.mjs";
+import { DatabaseInjectionKey } from "../database/constants.mjs";
+import "../database/index.mjs";
 import "../identity/index.mjs";
 import { SymmetricCipher } from "@authup/server-kit";
 //#region src/app/modules/oauth2/module.ts
@@ -108,6 +109,10 @@ var OAuth2Module = class {
 			const stateRepository = c.resolve(OAuth2InjectionToken.AuthorizationStateRepository);
 			return new OAuth2AuthorizationStateManager(stateRepository);
 		} });
+		container.register(OAuth2InjectionToken.ConsoleLoginStore, { useFactory: (c) => {
+			const cache = c.resolve(CacheInjectionKey);
+			return new ConsoleLoginStore(cache);
+		} });
 		container.register(OAuth2InjectionToken.FederatedLoginStore, { useFactory: (c) => {
 			const cache = c.resolve(CacheInjectionKey);
 			return new OAuth2FederatedLoginStore(cache);

package/dist/app/modules/oauth2/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["SymmetricCipher","CacheInjectionKey","ModuleName","LoggerInjectionKey","ConsentRepositoryAdapter","OAuth2AuthorizationCodeRepository","OAuth2AuthorizationStateRepository","OAuth2ClientRepository","OAuth2FederatedLoginStore","OAuth2ScopeRepository","OAuth2TokenRepository","SessionTokenRepositoryAdapter","KeyRepositoryAdapter","OAuth2AccessTokenIssuer","OAuth2AuthorizationCodeIssuer","OAuth2AuthorizationCodeRequestVerifier","OAuth2AuthorizationCodeVerifier","OAuth2AuthorizationStateManager","OAuth2MfaTokenIssuer","OAuth2OpenIDTokenIssuer","OAuth2RefreshTokenIssuer","OAuth2TokenRevoker","OAuth2TokenSigner","OAuth2TokenVerifier","OAuth2InjectionToken","IdentityInjectionKey","ClientEntity","ClientScopeEntity","ConfigInjectionKey","DatabaseInjectionKey","OAuth2Module","name","dependencies","OAUTH2","DATABASE","CACHE","CONFIG","IDENTITY","setup","container","config","resolve","register","ClientRepository","useFactory","c","repository","ScopeRepository","AuthorizationCodeRepository","cache","AuthorizationStateRepository","TokenRepository","SessionTokenRepository","DataSource","ConsentRepository","KeyStore","secretsCipher","secretsEncryptionKey","env","logger","warn","TokenSigner","keyStore","AuthorizationCodeIssuer","codeRepository","maxAge","tokenAccessMaxAge","AuthorizationCodeVerifier","AuthorizationCodeRequestVerifier","clientRepository","clientScopeRepository","scopeRepository","AuthorizationStateManager","stateRepository","FederatedLoginStore","TokenRevoker","tokenRepository","sessionTokenRepository","TokenVerifier","AccessTokenIssuer","tokenSigner","identityRoleProvider","RoleProvider","issuer","publicUrl","MfaTokenIssuer","mfaTicketMaxAge","RefreshTokenIssuer","tokenRefreshMaxAge","OpenIDTokenIssuer","signer","identityResolver","Resolver","options"],"sources":["../../../../src/app/modules/oauth2/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { SymmetricCipher } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { CacheInjectionKey } from '../cache/index.ts';\nimport type { IContainer } from 'eldin';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nimport {\n    ConsentRepositoryAdapter,\n    OAuth2AuthorizationCodeRepository,\n    OAuth2AuthorizationStateRepository,\n    OAuth2ClientRepository,\n    OAuth2FederatedLoginStore,\n    OAuth2ScopeRepository,\n    OAuth2TokenRepository,\n    SessionTokenRepositoryAdapter,\n} from './repositories/index.ts';\nimport { KeyRepositoryAdapter } from '../database/repositories/index.ts';\nimport {\n    OAuth2AccessTokenIssuer,\n    OAuth2AuthorizationCodeIssuer,\n    OAuth2AuthorizationCodeRequestVerifier,\n    OAuth2AuthorizationCodeVerifier,\n    OAuth2AuthorizationStateManager,\n    OAuth2MfaTokenIssuer,\n    OAuth2OpenIDTokenIssuer,\n    OAuth2RefreshTokenIssuer,\n    OAuth2TokenRevoker,\n    OAuth2TokenSigner,\n    OAuth2TokenVerifier,\n} from '../../../core/index.ts';\nimport { OAuth2InjectionToken } from './constants.ts';\nimport { IdentityInjectionKey } from '../identity/index.ts';\nimport { ClientEntity, ClientScopeEntity } from '../../../adapters/database/domains/index.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport { DatabaseInjectionKey } from '../database/index.ts';\n\nexport class OAuth2Module implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.OAUTH2;\n        this.dependencies = [ModuleName.DATABASE, ModuleName.CACHE, ModuleName.CONFIG, ModuleName.IDENTITY];\n    }\n\n    async setup(container: IContainer) : Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        container.register(OAuth2InjectionToken.ClientRepository, {\n            useFactory: (c) => {\n                const repository = c.resolve<Repository<ClientEntity>>(ClientEntity);\n                return new OAuth2ClientRepository(repository);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.ScopeRepository, {\n            useFactory: (c) => {\n                const repository = c.resolve<Repository<ClientScopeEntity>>(ClientScopeEntity);\n                return new OAuth2ScopeRepository(repository);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationCodeRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2AuthorizationCodeRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationStateRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2AuthorizationStateRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.TokenRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2TokenRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.SessionTokenRepository, {\n            useFactory: (c) => new SessionTokenRepositoryAdapter(\n                c.resolve(DatabaseInjectionKey.DataSource),\n            ),\n        });\n\n        container.register(OAuth2InjectionToken.ConsentRepository, {\n            useFactory: (c) => new ConsentRepositoryAdapter(\n                c.resolve(DatabaseInjectionKey.DataSource),\n            ),\n        });\n\n        container.register(OAuth2InjectionToken.KeyStore, {\n            // todo: cache use here\n            useFactory: (c) => {\n                const config = c.resolve(ConfigInjectionKey);\n\n                let secretsCipher : SymmetricCipher | null = null;\n                if (config.secretsEncryptionKey) {\n                    secretsCipher = new SymmetricCipher(config.secretsEncryptionKey);\n                } else if (config.env === 'production') {\n                    // parity posture without a KEK (Keycloak/authentik store key\n                    // material plaintext too) — but say so once, loudly.\n                    const logger = c.resolve(LoggerInjectionKey);\n                    logger.warn(\n                        'The realm key store persists key material unwrapped; ' +\n                        'set SECRETS_ENCRYPTION_KEY to wrap it at rest.',\n                    );\n                }\n\n                return new KeyRepositoryAdapter(c.resolve(DatabaseInjectionKey.DataSource), { secretsCipher });\n            },\n        });\n\n        container.register(OAuth2InjectionToken.TokenSigner, {\n            useFactory: (c) => {\n                const keyStore = c.resolve(OAuth2InjectionToken.KeyStore);\n                return new OAuth2TokenSigner(keyStore);\n            },\n        });\n\n        // authorization code issuer\n        container.register(OAuth2InjectionToken.AuthorizationCodeIssuer, {\n            useFactory: (c) => {\n                const codeRepository = c.resolve(OAuth2InjectionToken.AuthorizationCodeRepository);\n\n                return new OAuth2AuthorizationCodeIssuer(\n                    codeRepository,\n                    {\n                        // todo: own constant here\n                        maxAge: config.tokenAccessMaxAge,\n                    },\n                );\n            },\n        });\n        container.register(OAuth2InjectionToken.AuthorizationCodeVerifier, {\n            useFactory: (c) => {\n                const codeRepository = c.resolve(OAuth2InjectionToken.AuthorizationCodeRepository);\n\n                return new OAuth2AuthorizationCodeVerifier(codeRepository);\n            },\n        });\n\n        // authorization code request verifier\n        container.register(OAuth2InjectionToken.AuthorizationCodeRequestVerifier, {\n            useFactory: (c) => {\n                const clientRepository = c.resolve(OAuth2InjectionToken.ClientRepository);\n                const clientScopeRepository = c.resolve(OAuth2InjectionToken.ScopeRepository);\n\n                return new OAuth2AuthorizationCodeRequestVerifier({\n                    clientRepository,\n                    scopeRepository: clientScopeRepository,\n                });\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationStateManager, {\n            useFactory: (c) => {\n                const stateRepository = c.resolve(OAuth2InjectionToken.AuthorizationStateRepository);\n\n                return new OAuth2AuthorizationStateManager(stateRepository);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.FederatedLoginStore, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n\n                return new OAuth2FederatedLoginStore(cache);\n            },\n        });\n\n        // token revoker\n        container.register(OAuth2InjectionToken.TokenRevoker, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);\n                return new OAuth2TokenRevoker(tokenRepository, sessionTokenRepository);\n            },\n        });\n\n        // token verifier\n        container.register(OAuth2InjectionToken.TokenVerifier, {\n            useFactory: (c) => {\n                const keyStore = c.resolve(OAuth2InjectionToken.KeyStore);\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n\n                return new OAuth2TokenVerifier(keyStore, tokenRepository);\n            },\n        });\n\n        // access token issuer\n        container.register(OAuth2InjectionToken.AccessTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n                const identityRoleProvider = c.resolve(IdentityInjectionKey.RoleProvider);\n                const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);\n                return new OAuth2AccessTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.tokenAccessMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                    identityRoleProvider,\n                    sessionTokenRepository,\n                );\n            },\n        });\n\n        // mfa login-ticket issuer\n        container.register(OAuth2InjectionToken.MfaTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n\n                return new OAuth2MfaTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.mfaTicketMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                );\n            },\n        });\n\n        // refresh token issuer\n        container.register(OAuth2InjectionToken.RefreshTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n                const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);\n\n                return new OAuth2RefreshTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.tokenRefreshMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                    sessionTokenRepository,\n                );\n            },\n        });\n\n        // open-id token issuer\n        container.register(OAuth2InjectionToken.OpenIDTokenIssuer, {\n            useFactory: (c) => {\n                const repository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const signer = c.resolve(OAuth2InjectionToken.TokenSigner);\n                const identityResolver = c.resolve(IdentityInjectionKey.Resolver);\n\n                return new OAuth2OpenIDTokenIssuer({\n                    repository,\n                    signer,\n\n                    identityResolver,\n\n                    options: {\n                        // todo: own constant here\n                        maxAge: config.tokenAccessMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                });\n            },\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6CA,IAAa8B,eAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAO7B,WAAW+B;EACvB,KAAKD,eAAe;GAAC9B,WAAWgC;GAAUhC,WAAWiC;GAAOjC,WAAWkC;GAAQlC,WAAWmC;EAAS;CACvG;CAEA,MAAMC,MAAMC,WAAuC;EAC/C,MAAMC,SAASD,UAAUE,QAAQb,kBAAAA;EAEjCW,UAAUG,SAASlB,qBAAqBmB,kBAAkB,EACtDC,aAAaC,MAAAA;GACT,MAAMC,aAAaD,EAAEJ,QAAkCf,YAAAA;GACvD,OAAO,IAAInB,uBAAuBuC,UAAAA;EACtC,EACJ,CAAA;EAEAP,UAAUG,SAASlB,qBAAqBuB,iBAAiB,EACrDH,aAAaC,MAAAA;GACT,MAAMC,aAAaD,EAAEJ,QAAuCd,iBAAAA;GAC5D,OAAO,IAAIlB,sBAAsBqC,UAAAA;EACrC,EACJ,CAAA;EAEAP,UAAUG,SAASlB,qBAAqBwB,6BAA6B,EACjEJ,aAAaC,MAAAA;GACT,MAAMI,QAAQJ,EAAEJ,QAAQxC,iBAAAA;GACxB,OAAO,IAAII,kCAAkC4C,KAAAA;EACjD,EACJ,CAAA;EAEAV,UAAUG,SAASlB,qBAAqB0B,8BAA8B,EAClEN,aAAaC,MAAAA;GACT,MAAMI,QAAQJ,EAAEJ,QAAQxC,iBAAAA;GACxB,OAAO,IAAIK,mCAAmC2C,KAAAA;EAClD,EACJ,CAAA;EAEAV,UAAUG,SAASlB,qBAAqB2B,iBAAiB,EACrDP,aAAaC,MAAAA;GACT,MAAMI,QAAQJ,EAAEJ,QAAQxC,iBAAAA;GACxB,OAAO,IAAIS,sBAAsBuC,KAAAA;EACrC,EACJ,CAAA;EAEAV,UAAUG,SAASlB,qBAAqB4B,wBAAwB,EAC5DR,aAAaC,MAAM,IAAIlC,8BACnBkC,EAAEJ,QAAQZ,qBAAqBwB,UAAU,CAAA,EAEjD,CAAA;EAEAd,UAAUG,SAASlB,qBAAqB8B,mBAAmB,EACvDV,aAAaC,MAAM,IAAIzC,yBACnByC,EAAEJ,QAAQZ,qBAAqBwB,UAAU,CAAA,EAEjD,CAAA;EAEAd,UAAUG,SAASlB,qBAAqB+B,UAAU,EAE9CX,aAAaC,MAAAA;GACT,MAAML,SAASK,EAAEJ,QAAQb,kBAAAA;GAEzB,IAAI4B,gBAAyC;GAC7C,IAAIhB,OAAOiB,sBACPD,gBAAgB,IAAIxD,gBAAgBwC,OAAOiB,oBAAoB;QAC5D,IAAIjB,OAAOkB,QAAQ,cAItBC,EADiBlB,QAAQtC,kBACzBwD,CAAAA,CAAOC,KACH,qGACA;GAIR,OAAO,IAAIhD,qBAAqBiC,EAAEJ,QAAQZ,qBAAqBwB,UAAU,GAAG,EAAEG,cAAc,CAAA;EAChG,EACJ,CAAA;EAEAjB,UAAUG,SAASlB,qBAAqBqC,aAAa,EACjDjB,aAAaC,MAAAA;GACT,MAAMiB,WAAWjB,EAAEJ,QAAQjB,qBAAqB+B,QAAQ;GACxD,OAAO,IAAIjC,kBAAkBwC,QAAAA;EACjC,EACJ,CAAA;EAGAvB,UAAUG,SAASlB,qBAAqBuC,yBAAyB,EAC7DnB,aAAaC,MAAAA;GACT,MAAMmB,iBAAiBnB,EAAEJ,QAAQjB,qBAAqBwB,2BAA2B;GAEjF,OAAO,IAAIlC,8BACPkD,gBACA,EAEIC,QAAQzB,OAAO0B,kBACnB,CAAA;EAER,EACJ,CAAA;EACA3B,UAAUG,SAASlB,qBAAqB2C,2BAA2B,EAC/DvB,aAAaC,MAAAA;GACT,MAAMmB,iBAAiBnB,EAAEJ,QAAQjB,qBAAqBwB,2BAA2B;GAEjF,OAAO,IAAIhC,gCAAgCgD,cAAAA;EAC/C,EACJ,CAAA;EAGAzB,UAAUG,SAASlB,qBAAqB4C,kCAAkC,EACtExB,aAAaC,MAAAA;GACT,MAAMwB,mBAAmBxB,EAAEJ,QAAQjB,qBAAqBmB,gBAAgB;GACxE,MAAM2B,wBAAwBzB,EAAEJ,QAAQjB,qBAAqBuB,eAAe;GAE5E,OAAO,IAAIhC,uCAAuC;IAC9CsD;IACAE,iBAAiBD;GACrB,CAAA;EACJ,EACJ,CAAA;EAEA/B,UAAUG,SAASlB,qBAAqBgD,2BAA2B,EAC/D5B,aAAaC,MAAAA;GACT,MAAM4B,kBAAkB5B,EAAEJ,QAAQjB,qBAAqB0B,4BAA4B;GAEnF,OAAO,IAAIjC,gCAAgCwD,eAAAA;EAC/C,EACJ,CAAA;EAEAlC,UAAUG,SAASlB,qBAAqBkD,qBAAqB,EACzD9B,aAAaC,MAAAA;GACT,MAAMI,QAAQJ,EAAEJ,QAAQxC,iBAAAA;GAExB,OAAO,IAAIO,0BAA0ByC,KAAAA;EACzC,EACJ,CAAA;EAGAV,UAAUG,SAASlB,qBAAqBmD,cAAc,EAClD/B,aAAaC,MAAAA;GACT,MAAM+B,kBAAkB/B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACtE,MAAM0B,yBAAyBhC,EAAEJ,QAAQjB,qBAAqB4B,sBAAsB;GACpF,OAAO,IAAI/B,mBAAmBuD,iBAAiBC,sBAAAA;EACnD,EACJ,CAAA;EAGAtC,UAAUG,SAASlB,qBAAqBsD,eAAe,EACnDlC,aAAaC,MAAAA;GACT,MAAMiB,WAAWjB,EAAEJ,QAAQjB,qBAAqB+B,QAAQ;GACxD,MAAMqB,kBAAkB/B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GAEtE,OAAO,IAAI5B,oBAAoBuC,UAAUc,eAAAA;EAC7C,EACJ,CAAA;EAGArC,UAAUG,SAASlB,qBAAqBuD,mBAAmB,EACvDnC,aAAaC,MAAAA;GACT,MAAM+B,kBAAkB/B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACtE,MAAM6B,cAAcnC,EAAEJ,QAAQjB,qBAAqBqC,WAAW;GAC9D,MAAMoB,uBAAuBpC,EAAEJ,QAAQhB,qBAAqByD,YAAY;GACxE,MAAML,yBAAyBhC,EAAEJ,QAAQjB,qBAAqB4B,sBAAsB;GACpF,OAAO,IAAIvC,wBACP+D,iBACAI,aACA;IACIf,QAAQzB,OAAO0B;IACfiB,QAAQ3C,OAAO4C;GACnB,GACAH,sBACAJ,sBAAAA;EAER,EACJ,CAAA;EAGAtC,UAAUG,SAASlB,qBAAqB6D,gBAAgB,EACpDzC,aAAaC,MAAAA;GACT,MAAM+B,kBAAkB/B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACtE,MAAM6B,cAAcnC,EAAEJ,QAAQjB,qBAAqBqC,WAAW;GAE9D,OAAO,IAAI3C,qBACP0D,iBACAI,aACA;IACIf,QAAQzB,OAAO8C;IACfH,QAAQ3C,OAAO4C;GACnB,CAAA;EAER,EACJ,CAAA;EAGA7C,UAAUG,SAASlB,qBAAqB+D,oBAAoB,EACxD3C,aAAaC,MAAAA;GACT,MAAM+B,kBAAkB/B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACtE,MAAM6B,cAAcnC,EAAEJ,QAAQjB,qBAAqBqC,WAAW;GAC9D,MAAMgB,yBAAyBhC,EAAEJ,QAAQjB,qBAAqB4B,sBAAsB;GAEpF,OAAO,IAAIhC,yBACPwD,iBACAI,aACA;IACIf,QAAQzB,OAAOgD;IACfL,QAAQ3C,OAAO4C;GACnB,GACAP,sBAAAA;EAER,EACJ,CAAA;EAGAtC,UAAUG,SAASlB,qBAAqBiE,mBAAmB,EACvD7C,aAAaC,MAAAA;GACT,MAAMC,aAAaD,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACjE,MAAMuC,SAAS7C,EAAEJ,QAAQjB,qBAAqBqC,WAAW;GACzD,MAAM8B,mBAAmB9C,EAAEJ,QAAQhB,qBAAqBmE,QAAQ;GAEhE,OAAO,IAAIzE,wBAAwB;IAC/B2B;IACA4C;IAEAC;IAEAE,SAAS;KAEL5B,QAAQzB,OAAO0B;KACfiB,QAAQ3C,OAAO4C;IACnB;GACJ,CAAA;EACJ,EACJ,CAAA;CACJ;AACJ"}
+{"version":3,"file":"module.mjs","names":["SymmetricCipher","CacheInjectionKey","ModuleName","LoggerInjectionKey","ConsentRepositoryAdapter","ConsoleLoginStore","OAuth2AuthorizationCodeRepository","OAuth2AuthorizationStateRepository","OAuth2ClientRepository","OAuth2FederatedLoginStore","OAuth2ScopeRepository","OAuth2TokenRepository","SessionTokenRepositoryAdapter","KeyRepositoryAdapter","OAuth2AccessTokenIssuer","OAuth2AuthorizationCodeIssuer","OAuth2AuthorizationCodeRequestVerifier","OAuth2AuthorizationCodeVerifier","OAuth2AuthorizationStateManager","OAuth2MfaTokenIssuer","OAuth2OpenIDTokenIssuer","OAuth2RefreshTokenIssuer","OAuth2TokenRevoker","OAuth2TokenSigner","OAuth2TokenVerifier","OAuth2InjectionToken","IdentityInjectionKey","ClientEntity","ClientScopeEntity","ConfigInjectionKey","DatabaseInjectionKey","OAuth2Module","name","dependencies","OAUTH2","DATABASE","CACHE","CONFIG","IDENTITY","setup","container","config","resolve","register","ClientRepository","useFactory","c","repository","ScopeRepository","AuthorizationCodeRepository","cache","AuthorizationStateRepository","TokenRepository","SessionTokenRepository","DataSource","ConsentRepository","KeyStore","secretsCipher","secretsEncryptionKey","env","logger","warn","TokenSigner","keyStore","AuthorizationCodeIssuer","codeRepository","maxAge","tokenAccessMaxAge","AuthorizationCodeVerifier","AuthorizationCodeRequestVerifier","clientRepository","clientScopeRepository","scopeRepository","AuthorizationStateManager","stateRepository","FederatedLoginStore","TokenRevoker","tokenRepository","sessionTokenRepository","TokenVerifier","AccessTokenIssuer","tokenSigner","identityRoleProvider","RoleProvider","issuer","publicUrl","MfaTokenIssuer","mfaTicketMaxAge","RefreshTokenIssuer","tokenRefreshMaxAge","OpenIDTokenIssuer","signer","identityResolver","Resolver","options"],"sources":["../../../../src/app/modules/oauth2/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { SymmetricCipher } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { CacheInjectionKey } from '../cache/index.ts';\nimport type { IContainer } from 'eldin';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nimport {\n    ConsentRepositoryAdapter,\n    ConsoleLoginStore,\n    OAuth2AuthorizationCodeRepository,\n    OAuth2AuthorizationStateRepository,\n    OAuth2ClientRepository,\n    OAuth2FederatedLoginStore,\n    OAuth2ScopeRepository,\n    OAuth2TokenRepository,\n    SessionTokenRepositoryAdapter,\n} from './repositories/index.ts';\nimport { KeyRepositoryAdapter } from '../database/repositories/index.ts';\nimport {\n    OAuth2AccessTokenIssuer,\n    OAuth2AuthorizationCodeIssuer,\n    OAuth2AuthorizationCodeRequestVerifier,\n    OAuth2AuthorizationCodeVerifier,\n    OAuth2AuthorizationStateManager,\n    OAuth2MfaTokenIssuer,\n    OAuth2OpenIDTokenIssuer,\n    OAuth2RefreshTokenIssuer,\n    OAuth2TokenRevoker,\n    OAuth2TokenSigner,\n    OAuth2TokenVerifier,\n} from '../../../core/index.ts';\nimport { OAuth2InjectionToken } from './constants.ts';\nimport { IdentityInjectionKey } from '../identity/index.ts';\nimport { ClientEntity, ClientScopeEntity } from '../../../adapters/database/domains/index.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport { DatabaseInjectionKey } from '../database/index.ts';\n\nexport class OAuth2Module implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.OAUTH2;\n        this.dependencies = [ModuleName.DATABASE, ModuleName.CACHE, ModuleName.CONFIG, ModuleName.IDENTITY];\n    }\n\n    async setup(container: IContainer) : Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        container.register(OAuth2InjectionToken.ClientRepository, {\n            useFactory: (c) => {\n                const repository = c.resolve<Repository<ClientEntity>>(ClientEntity);\n                return new OAuth2ClientRepository(repository);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.ScopeRepository, {\n            useFactory: (c) => {\n                const repository = c.resolve<Repository<ClientScopeEntity>>(ClientScopeEntity);\n                return new OAuth2ScopeRepository(repository);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationCodeRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2AuthorizationCodeRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationStateRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2AuthorizationStateRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.TokenRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2TokenRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.SessionTokenRepository, {\n            useFactory: (c) => new SessionTokenRepositoryAdapter(\n                c.resolve(DatabaseInjectionKey.DataSource),\n            ),\n        });\n\n        container.register(OAuth2InjectionToken.ConsentRepository, {\n            useFactory: (c) => new ConsentRepositoryAdapter(\n                c.resolve(DatabaseInjectionKey.DataSource),\n            ),\n        });\n\n        container.register(OAuth2InjectionToken.KeyStore, {\n            // todo: cache use here\n            useFactory: (c) => {\n                const config = c.resolve(ConfigInjectionKey);\n\n                let secretsCipher : SymmetricCipher | null = null;\n                if (config.secretsEncryptionKey) {\n                    secretsCipher = new SymmetricCipher(config.secretsEncryptionKey);\n                } else if (config.env === 'production') {\n                    // parity posture without a KEK (Keycloak/authentik store key\n                    // material plaintext too) — but say so once, loudly.\n                    const logger = c.resolve(LoggerInjectionKey);\n                    logger.warn(\n                        'The realm key store persists key material unwrapped; ' +\n                        'set SECRETS_ENCRYPTION_KEY to wrap it at rest.',\n                    );\n                }\n\n                return new KeyRepositoryAdapter(c.resolve(DatabaseInjectionKey.DataSource), { secretsCipher });\n            },\n        });\n\n        container.register(OAuth2InjectionToken.TokenSigner, {\n            useFactory: (c) => {\n                const keyStore = c.resolve(OAuth2InjectionToken.KeyStore);\n                return new OAuth2TokenSigner(keyStore);\n            },\n        });\n\n        // authorization code issuer\n        container.register(OAuth2InjectionToken.AuthorizationCodeIssuer, {\n            useFactory: (c) => {\n                const codeRepository = c.resolve(OAuth2InjectionToken.AuthorizationCodeRepository);\n\n                return new OAuth2AuthorizationCodeIssuer(\n                    codeRepository,\n                    {\n                        // todo: own constant here\n                        maxAge: config.tokenAccessMaxAge,\n                    },\n                );\n            },\n        });\n        container.register(OAuth2InjectionToken.AuthorizationCodeVerifier, {\n            useFactory: (c) => {\n                const codeRepository = c.resolve(OAuth2InjectionToken.AuthorizationCodeRepository);\n\n                return new OAuth2AuthorizationCodeVerifier(codeRepository);\n            },\n        });\n\n        // authorization code request verifier\n        container.register(OAuth2InjectionToken.AuthorizationCodeRequestVerifier, {\n            useFactory: (c) => {\n                const clientRepository = c.resolve(OAuth2InjectionToken.ClientRepository);\n                const clientScopeRepository = c.resolve(OAuth2InjectionToken.ScopeRepository);\n\n                return new OAuth2AuthorizationCodeRequestVerifier({\n                    clientRepository,\n                    scopeRepository: clientScopeRepository,\n                });\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationStateManager, {\n            useFactory: (c) => {\n                const stateRepository = c.resolve(OAuth2InjectionToken.AuthorizationStateRepository);\n\n                return new OAuth2AuthorizationStateManager(stateRepository);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.ConsoleLoginStore, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n\n                return new ConsoleLoginStore(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.FederatedLoginStore, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n\n                return new OAuth2FederatedLoginStore(cache);\n            },\n        });\n\n        // token revoker\n        container.register(OAuth2InjectionToken.TokenRevoker, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);\n                return new OAuth2TokenRevoker(tokenRepository, sessionTokenRepository);\n            },\n        });\n\n        // token verifier\n        container.register(OAuth2InjectionToken.TokenVerifier, {\n            useFactory: (c) => {\n                const keyStore = c.resolve(OAuth2InjectionToken.KeyStore);\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n\n                return new OAuth2TokenVerifier(keyStore, tokenRepository);\n            },\n        });\n\n        // access token issuer\n        container.register(OAuth2InjectionToken.AccessTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n                const identityRoleProvider = c.resolve(IdentityInjectionKey.RoleProvider);\n                const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);\n                return new OAuth2AccessTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.tokenAccessMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                    identityRoleProvider,\n                    sessionTokenRepository,\n                );\n            },\n        });\n\n        // mfa login-ticket issuer\n        container.register(OAuth2InjectionToken.MfaTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n\n                return new OAuth2MfaTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.mfaTicketMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                );\n            },\n        });\n\n        // refresh token issuer\n        container.register(OAuth2InjectionToken.RefreshTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n                const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);\n\n                return new OAuth2RefreshTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.tokenRefreshMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                    sessionTokenRepository,\n                );\n            },\n        });\n\n        // open-id token issuer\n        container.register(OAuth2InjectionToken.OpenIDTokenIssuer, {\n            useFactory: (c) => {\n                const repository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const signer = c.resolve(OAuth2InjectionToken.TokenSigner);\n                const identityResolver = c.resolve(IdentityInjectionKey.Resolver);\n\n                return new OAuth2OpenIDTokenIssuer({\n                    repository,\n                    signer,\n\n                    identityResolver,\n\n                    options: {\n                        // todo: own constant here\n                        maxAge: config.tokenAccessMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                });\n            },\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8CA,IAAa+B,eAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAO9B,WAAWgC;EACvB,KAAKD,eAAe;GAAC/B,WAAWiC;GAAUjC,WAAWkC;GAAOlC,WAAWmC;GAAQnC,WAAWoC;EAAS;CACvG;CAEA,MAAMC,MAAMC,WAAuC;EAC/C,MAAMC,SAASD,UAAUE,QAAQb,kBAAAA;EAEjCW,UAAUG,SAASlB,qBAAqBmB,kBAAkB,EACtDC,aAAaC,MAAAA;GACT,MAAMC,aAAaD,EAAEJ,QAAkCf,YAAAA;GACvD,OAAO,IAAInB,uBAAuBuC,UAAAA;EACtC,EACJ,CAAA;EAEAP,UAAUG,SAASlB,qBAAqBuB,iBAAiB,EACrDH,aAAaC,MAAAA;GACT,MAAMC,aAAaD,EAAEJ,QAAuCd,iBAAAA;GAC5D,OAAO,IAAIlB,sBAAsBqC,UAAAA;EACrC,EACJ,CAAA;EAEAP,UAAUG,SAASlB,qBAAqBwB,6BAA6B,EACjEJ,aAAaC,MAAAA;GACT,MAAMI,QAAQJ,EAAEJ,QAAQzC,iBAAAA;GACxB,OAAO,IAAIK,kCAAkC4C,KAAAA;EACjD,EACJ,CAAA;EAEAV,UAAUG,SAASlB,qBAAqB0B,8BAA8B,EAClEN,aAAaC,MAAAA;GACT,MAAMI,QAAQJ,EAAEJ,QAAQzC,iBAAAA;GACxB,OAAO,IAAIM,mCAAmC2C,KAAAA;EAClD,EACJ,CAAA;EAEAV,UAAUG,SAASlB,qBAAqB2B,iBAAiB,EACrDP,aAAaC,MAAAA;GACT,MAAMI,QAAQJ,EAAEJ,QAAQzC,iBAAAA;GACxB,OAAO,IAAIU,sBAAsBuC,KAAAA;EACrC,EACJ,CAAA;EAEAV,UAAUG,SAASlB,qBAAqB4B,wBAAwB,EAC5DR,aAAaC,MAAM,IAAIlC,8BACnBkC,EAAEJ,QAAQZ,qBAAqBwB,UAAU,CAAA,EAEjD,CAAA;EAEAd,UAAUG,SAASlB,qBAAqB8B,mBAAmB,EACvDV,aAAaC,MAAM,IAAI1C,yBACnB0C,EAAEJ,QAAQZ,qBAAqBwB,UAAU,CAAA,EAEjD,CAAA;EAEAd,UAAUG,SAASlB,qBAAqB+B,UAAU,EAE9CX,aAAaC,MAAAA;GACT,MAAML,SAASK,EAAEJ,QAAQb,kBAAAA;GAEzB,IAAI4B,gBAAyC;GAC7C,IAAIhB,OAAOiB,sBACPD,gBAAgB,IAAIzD,gBAAgByC,OAAOiB,oBAAoB;QAC5D,IAAIjB,OAAOkB,QAAQ,cAItBC,EADiBlB,QAAQvC,kBACzByD,CAAAA,CAAOC,KACH,qGACA;GAIR,OAAO,IAAIhD,qBAAqBiC,EAAEJ,QAAQZ,qBAAqBwB,UAAU,GAAG,EAAEG,cAAc,CAAA;EAChG,EACJ,CAAA;EAEAjB,UAAUG,SAASlB,qBAAqBqC,aAAa,EACjDjB,aAAaC,MAAAA;GACT,MAAMiB,WAAWjB,EAAEJ,QAAQjB,qBAAqB+B,QAAQ;GACxD,OAAO,IAAIjC,kBAAkBwC,QAAAA;EACjC,EACJ,CAAA;EAGAvB,UAAUG,SAASlB,qBAAqBuC,yBAAyB,EAC7DnB,aAAaC,MAAAA;GACT,MAAMmB,iBAAiBnB,EAAEJ,QAAQjB,qBAAqBwB,2BAA2B;GAEjF,OAAO,IAAIlC,8BACPkD,gBACA,EAEIC,QAAQzB,OAAO0B,kBACnB,CAAA;EAER,EACJ,CAAA;EACA3B,UAAUG,SAASlB,qBAAqB2C,2BAA2B,EAC/DvB,aAAaC,MAAAA;GACT,MAAMmB,iBAAiBnB,EAAEJ,QAAQjB,qBAAqBwB,2BAA2B;GAEjF,OAAO,IAAIhC,gCAAgCgD,cAAAA;EAC/C,EACJ,CAAA;EAGAzB,UAAUG,SAASlB,qBAAqB4C,kCAAkC,EACtExB,aAAaC,MAAAA;GACT,MAAMwB,mBAAmBxB,EAAEJ,QAAQjB,qBAAqBmB,gBAAgB;GACxE,MAAM2B,wBAAwBzB,EAAEJ,QAAQjB,qBAAqBuB,eAAe;GAE5E,OAAO,IAAIhC,uCAAuC;IAC9CsD;IACAE,iBAAiBD;GACrB,CAAA;EACJ,EACJ,CAAA;EAEA/B,UAAUG,SAASlB,qBAAqBgD,2BAA2B,EAC/D5B,aAAaC,MAAAA;GACT,MAAM4B,kBAAkB5B,EAAEJ,QAAQjB,qBAAqB0B,4BAA4B;GAEnF,OAAO,IAAIjC,gCAAgCwD,eAAAA;EAC/C,EACJ,CAAA;EAEAlC,UAAUG,SAASlB,qBAAqBpB,mBAAmB,EACvDwC,aAAaC,MAAAA;GACT,MAAMI,QAAQJ,EAAEJ,QAAQzC,iBAAAA;GAExB,OAAO,IAAII,kBAAkB6C,KAAAA;EACjC,EACJ,CAAA;EAEAV,UAAUG,SAASlB,qBAAqBkD,qBAAqB,EACzD9B,aAAaC,MAAAA;GACT,MAAMI,QAAQJ,EAAEJ,QAAQzC,iBAAAA;GAExB,OAAO,IAAIQ,0BAA0ByC,KAAAA;EACzC,EACJ,CAAA;EAGAV,UAAUG,SAASlB,qBAAqBmD,cAAc,EAClD/B,aAAaC,MAAAA;GACT,MAAM+B,kBAAkB/B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACtE,MAAM0B,yBAAyBhC,EAAEJ,QAAQjB,qBAAqB4B,sBAAsB;GACpF,OAAO,IAAI/B,mBAAmBuD,iBAAiBC,sBAAAA;EACnD,EACJ,CAAA;EAGAtC,UAAUG,SAASlB,qBAAqBsD,eAAe,EACnDlC,aAAaC,MAAAA;GACT,MAAMiB,WAAWjB,EAAEJ,QAAQjB,qBAAqB+B,QAAQ;GACxD,MAAMqB,kBAAkB/B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GAEtE,OAAO,IAAI5B,oBAAoBuC,UAAUc,eAAAA;EAC7C,EACJ,CAAA;EAGArC,UAAUG,SAASlB,qBAAqBuD,mBAAmB,EACvDnC,aAAaC,MAAAA;GACT,MAAM+B,kBAAkB/B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACtE,MAAM6B,cAAcnC,EAAEJ,QAAQjB,qBAAqBqC,WAAW;GAC9D,MAAMoB,uBAAuBpC,EAAEJ,QAAQhB,qBAAqByD,YAAY;GACxE,MAAML,yBAAyBhC,EAAEJ,QAAQjB,qBAAqB4B,sBAAsB;GACpF,OAAO,IAAIvC,wBACP+D,iBACAI,aACA;IACIf,QAAQzB,OAAO0B;IACfiB,QAAQ3C,OAAO4C;GACnB,GACAH,sBACAJ,sBAAAA;EAER,EACJ,CAAA;EAGAtC,UAAUG,SAASlB,qBAAqB6D,gBAAgB,EACpDzC,aAAaC,MAAAA;GACT,MAAM+B,kBAAkB/B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACtE,MAAM6B,cAAcnC,EAAEJ,QAAQjB,qBAAqBqC,WAAW;GAE9D,OAAO,IAAI3C,qBACP0D,iBACAI,aACA;IACIf,QAAQzB,OAAO8C;IACfH,QAAQ3C,OAAO4C;GACnB,CAAA;EAER,EACJ,CAAA;EAGA7C,UAAUG,SAASlB,qBAAqB+D,oBAAoB,EACxD3C,aAAaC,MAAAA;GACT,MAAM+B,kBAAkB/B,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACtE,MAAM6B,cAAcnC,EAAEJ,QAAQjB,qBAAqBqC,WAAW;GAC9D,MAAMgB,yBAAyBhC,EAAEJ,QAAQjB,qBAAqB4B,sBAAsB;GAEpF,OAAO,IAAIhC,yBACPwD,iBACAI,aACA;IACIf,QAAQzB,OAAOgD;IACfL,QAAQ3C,OAAO4C;GACnB,GACAP,sBAAAA;EAER,EACJ,CAAA;EAGAtC,UAAUG,SAASlB,qBAAqBiE,mBAAmB,EACvD7C,aAAaC,MAAAA;GACT,MAAMC,aAAaD,EAAEJ,QAAQjB,qBAAqB2B,eAAe;GACjE,MAAMuC,SAAS7C,EAAEJ,QAAQjB,qBAAqBqC,WAAW;GACzD,MAAM8B,mBAAmB9C,EAAEJ,QAAQhB,qBAAqBmE,QAAQ;GAEhE,OAAO,IAAIzE,wBAAwB;IAC/B2B;IACA4C;IAEAC;IAEAE,SAAS;KAEL5B,QAAQzB,OAAO0B;KACfiB,QAAQ3C,OAAO4C;IACnB;GACJ,CAAA;EACJ,EACJ,CAAA;CACJ;AACJ"}

package/dist/app/modules/oauth2/repositories/client/repository.mjs

@@ -13,8 +13,10 @@ var OAuth2ClientRepository = class {
 		if (isUUID(key)) query.where("client.id = :id", { id: key });
 		else {
 			query.where("client.name = :name", { name: key.trim().toLowerCase() });
-			if (realmKey) if (isUUID(realmKey)) query.andWhere("client.realmId = :realmId", { realmId: realmKey });
-			else query.andWhere("realm.name = :realmName", { realmName: realmKey.trim().toLowerCase() });
+			if (realmKey) {
+				if (isUUID(realmKey)) query.andWhere("client.realmId = :realmId", { realmId: realmKey });
+				else query.andWhere("realm.name = :realmName", { realmName: realmKey.trim().toLowerCase() });
+			}
 		}
 		return query.getOne();
 	}

package/dist/app/modules/oauth2/repositories/client/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["isUUID","OAuth2ClientRepository","repository","findOneByIdOrName","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","where","id","name","trim","toLowerCase","andWhere","realmId","realmName","getOne"],"sources":["../../../../../../src/app/modules/oauth2/repositories/client/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Client } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport type { IOAuth2ClientRepository } from '../../../../../core/index.ts';\n\nexport class OAuth2ClientRepository implements IOAuth2ClientRepository {\n    private readonly repository: Repository<Client>;\n\n    constructor(\n        repository: Repository<Client>,\n    ) {\n        this.repository = repository;\n    }\n\n    async findOneByIdOrName(key: string, realmKey?: string): Promise<Client | null> {\n        const query = this.repository.createQueryBuilder('client')\n            .leftJoinAndSelect('client.realm', 'realm');\n\n        if (isUUID(key)) {\n            query.where('client.id = :id', { id: key });\n        } else {\n            query.where('client.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('client.realmId = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        return query.getOne();\n    }\n}\n"],"mappings":";;;;;AAYA,IAAaC,yBAAb,MAAaA;CACQC;CAEjB,YACIA,YACF;EACE,KAAKA,aAAaA;CACtB;CAEA,MAAMC,kBAAkBC,KAAaC,UAA2C;EAC5E,MAAMC,QAAQ,KAAKJ,WAAWK,mBAAmB,QAAA,CAAA,CAC5CC,kBAAkB,gBAAgB,OAAA;EAEvC,IAAIR,OAAOI,GAAAA,GACPE,MAAMG,MAAM,mBAAmB,EAAEC,IAAIN,IAAI,CAAA;OACtC;GACHE,MAAMG,MAAM,uBAAuB,EAAEE,MAAMP,IAAIQ,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAEpE,IAAIR,UACA,IAAIL,OAAOK,QAAAA,GACPC,MAAMQ,SAAS,6BAA6B,EAAEC,SAASV,SAAS,CAAA;QAEhEC,MAAMQ,SAAS,2BAA2B,EAAEE,WAAWX,SAASO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EAEA,OAAOP,MAAMW,OAAM;CACvB;AACJ"}
+{"version":3,"file":"repository.mjs","names":["isUUID","OAuth2ClientRepository","repository","findOneByIdOrName","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","where","id","name","trim","toLowerCase","andWhere","realmId","realmName","getOne"],"sources":["../../../../../../src/app/modules/oauth2/repositories/client/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Client } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport type { IOAuth2ClientRepository } from '../../../../../core/index.ts';\n\nexport class OAuth2ClientRepository implements IOAuth2ClientRepository {\n    private readonly repository: Repository<Client>;\n\n    constructor(\n        repository: Repository<Client>,\n    ) {\n        this.repository = repository;\n    }\n\n    async findOneByIdOrName(key: string, realmKey?: string): Promise<Client | null> {\n        const query = this.repository.createQueryBuilder('client')\n            .leftJoinAndSelect('client.realm', 'realm');\n\n        if (isUUID(key)) {\n            query.where('client.id = :id', { id: key });\n        } else {\n            query.where('client.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('client.realmId = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        return query.getOne();\n    }\n}\n"],"mappings":";;;;;AAYA,IAAaC,yBAAb,MAAaA;CACQC;CAEjB,YACIA,YACF;EACE,KAAKA,aAAaA;CACtB;CAEA,MAAMC,kBAAkBC,KAAaC,UAA2C;EAC5E,MAAMC,QAAQ,KAAKJ,WAAWK,mBAAmB,QAAA,CAAA,CAC5CC,kBAAkB,gBAAgB,OAAA;EAEvC,IAAIR,OAAOI,GAAAA,GACPE,MAAMG,MAAM,mBAAmB,EAAEC,IAAIN,IAAI,CAAA;OACtC;GACHE,MAAMG,MAAM,uBAAuB,EAAEE,MAAMP,IAAIQ,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAEpE,IAAIR,UAAU;IACV,IAAIL,OAAOK,QAAAA,GACPC,MAAMQ,SAAS,6BAA6B,EAAEC,SAASV,SAAS,CAAA;SAEhEC,MAAMQ,SAAS,2BAA2B,EAAEE,WAAWX,SAASO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAE7F;EACJ;EAEA,OAAOP,MAAMW,OAAM;CACvB;AACJ"}

package/dist/app/modules/oauth2/repositories/consent/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/oauth2/repositories/consent/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAEzE,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEtD,OAAO,EAAe,aAAa,EAAE,MAAM,mDAAmD,CAAC;AAE/F,OAAO,KAAK,EACR,sBAAsB,EACtB,YAAY,EACZ,kBAAkB,EACrB,MAAM,8BAA8B,CAAC;AAGtC,qBAAa,wBAAyB,YAAW,kBAAkB;IAC/D,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;gBAEpC,UAAU,EAAE,UAAU;IAI5B,QAAQ,CACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,sBAA2B,GACrC,OAAO,CAAC,8BAA8B,CAAC,OAAO,CAAC,CAAC;IA+C7C,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIhD,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAkBjF,aAAa,CAAC,KAAK,EAAE;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,YAAY,CAAC;QACpB,MAAM,EAAE,MAAM,EAAE,CAAA;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8CX,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/C"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/oauth2/repositories/consent/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAEzE,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEtD,OAAO,EAAe,aAAa,EAAE,MAAM,mDAAmD,CAAC;AAE/F,OAAO,KAAK,EACR,sBAAsB,EACtB,YAAY,EACZ,kBAAkB,EACrB,MAAM,8BAA8B,CAAC;AAGtC,qBAAa,wBAAyB,YAAW,kBAAkB;IAC/D,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;gBAEpC,UAAU,EAAE,UAAU;IAI5B,QAAQ,CACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,sBAA2B,GACrC,OAAO,CAAC,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAiD7C,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIhD,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAkBjF,aAAa,CAAC,KAAK,EAAE;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,YAAY,CAAC;QACpB,MAAM,EAAE,MAAM,EAAE,CAAA;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8CX,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/C"}

package/dist/app/modules/oauth2/repositories/consent/repository.mjs

@@ -5,9 +5,9 @@ import { CachePrefix } from "../../../../../adapters/database/domains/constants.
 import { ConsentEntity } from "../../../../../adapters/database/domains/consent/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
 import { applyQuery, redactFieldConditions } from "../../../database/repositories/query.mjs";
-import { applyRealmScopeSelect } from "../../../database/repositories/helpers.mjs";
 import { isUniqueConstraintDatabaseError } from "../../../../../adapters/database/errors/driver.mjs";
 import "../../../../../adapters/database/errors/index.mjs";
+import { applyRealmScopeSelect } from "../../../database/repositories/helpers.mjs";
 import { IdentityType } from "@authup/core-kit";
 import { buildRedisKeyPath } from "@authup/server-kit";
 //#region src/app/modules/oauth2/repositories/consent/repository.ts
@@ -24,7 +24,8 @@ var ConsentRepositoryAdapter = class {
 			"client.id",
 			"client.name",
 			"client.displayName",
-			"client.builtIn"
+			"client.builtIn",
+			"client.baseUrl"
 		]);
 		if (options.owner) qb.andWhere("consent.sub = :ownerSub AND consent.subKind = :ownerSubKind", {
 			ownerSub: options.owner.sub,