@feasibleone/blong-login 1.8.0 → 1.9.0

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [1.9.0](https://github.com/feasibleone/blong/compare/blong-login-v1.8.0...blong-login-v1.9.0) (2026-08-19)
+
+
+### Features
+
+* redis adapter and blong-gateway ([c28a68f](https://github.com/feasibleone/blong/commit/c28a68f5f9cfc2398771cca05c4366efc147eb6e))
+* self registration ([20f3791](https://github.com/feasibleone/blong/commit/20f3791c453d0f6f4cbf28c2e3af1fbb959a8d0d))
+
 ## [1.8.0](https://github.com/feasibleone/blong/compare/blong-login-v1.7.0...blong-login-v1.8.0) (2026-07-14)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feasibleone/blong-login",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "Login and authentication utilities for the Blong framework",
   "keywords": [
     "blong",
@@ -33,7 +33,7 @@
     "@rushstack/heft-typescript-plugin": "^1.3.1",
     "@types/ut-function.cbc": "file:./types/ut-function.cbc",
     "typescript": "^6.0.3",
-    "@feasibleone/blong-dev": "1.1.0"
+    "@feasibleone/blong-dev": "1.2.0"
   },
   "peerDependencies": {
     "@feasibleone/blong": "^1.0.0"

package/dist/browser.d.ts

@@ -1,5 +0,0 @@
-declare const _default: import("@feasibleone/blong").SolutionFactory<import("typebox").TObject<{}>> & {
-    [x: symbol]: "solution";
-};
-export default _default;
-//# sourceMappingURL=browser.d.ts.map

package/dist/browser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../browser.ts"],"names":[],"mappings":";;;AAEA,wBAYI"}

package/dist/browser.js

@@ -1,15 +0,0 @@
-import { realm } from '@feasibleone/blong';
-export default realm(blong => ({
-    url: import.meta.url,
-    validation: blong.type.Object({}),
-    children: ['./test'],
-    config: {
-        default: {},
-        dev: {},
-        microservice: {},
-        integration: {
-            test: true,
-        },
-    },
-}));
-//# sourceMappingURL=browser.js.map

package/dist/browser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser.js","sourceRoot":"","sources":["../browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,KAAK,EAAC,MAAM,oBAAoB,CAAC;AAEzC,eAAe,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;IACpB,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACjC,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACpB,MAAM,EAAE;QACJ,OAAO,EAAE,EAAE;QACX,GAAG,EAAE,EAAE;QACP,YAAY,EAAE,EAAE;QAChB,WAAW,EAAE;YACT,IAAI,EAAE,IAAI;SACb;KACJ;CACJ,CAAC,CAAC,CAAC"}

package/dist/gateway/login/login.oidc.getConfiguration.d.ts

@@ -1,3 +0,0 @@
-declare const _default: import("@feasibleone/blong").ValidationDefinition<Record<string, unknown>>;
-export default _default;
-//# sourceMappingURL=login.oidc.getConfiguration.d.ts.map

package/dist/gateway/login/login.oidc.getConfiguration.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.oidc.getConfiguration.d.ts","sourceRoot":"","sources":["../../../gateway/login/login.oidc.getConfiguration.ts"],"names":[],"mappings":";AAEA,wBAUE"}

package/dist/gateway/login/login.oidc.getConfiguration.js

@@ -1,10 +0,0 @@
-import { validation } from '@feasibleone/blong';
-export default validation(async () => function loginOidcGetConfiguration() {
-    return {
-        security: true,
-        method: 'GET',
-        path: '/.well-known/openid-configuration',
-        auth: false,
-    };
-});
-//# sourceMappingURL=login.oidc.getConfiguration.js.map

package/dist/gateway/login/login.oidc.getConfiguration.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.oidc.getConfiguration.js","sourceRoot":"","sources":["../../../gateway/login/login.oidc.getConfiguration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,oBAAoB,CAAC;AAE9C,eAAe,UAAU,CACrB,KAAK,IAAI,EAAE,CACP,SAAS,yBAAyB;IAC9B,OAAO;QACH,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,mCAAmC;QACzC,IAAI,EAAE,KAAK;KACd,CAAC;AACN,CAAC,CACR,CAAC"}

package/dist/gateway/login/login.oidc.getKeys.d.ts

@@ -1,3 +0,0 @@
-declare const _default: import("@feasibleone/blong").ValidationDefinition<Record<string, unknown>>;
-export default _default;
-//# sourceMappingURL=login.oidc.getKeys.d.ts.map

package/dist/gateway/login/login.oidc.getKeys.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.oidc.getKeys.d.ts","sourceRoot":"","sources":["../../../gateway/login/login.oidc.getKeys.ts"],"names":[],"mappings":";AAEA,wBAUE"}

package/dist/gateway/login/login.oidc.getKeys.js

@@ -1,10 +0,0 @@
-import { validation } from '@feasibleone/blong';
-export default validation(async () => function loginOidcGetKeys() {
-    return {
-        security: true,
-        method: 'GET',
-        path: '/jwks/:kid?',
-        auth: false,
-    };
-});
-//# sourceMappingURL=login.oidc.getKeys.js.map

package/dist/gateway/login/login.oidc.getKeys.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.oidc.getKeys.js","sourceRoot":"","sources":["../../../gateway/login/login.oidc.getKeys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,oBAAoB,CAAC;AAE9C,eAAe,UAAU,CACrB,KAAK,IAAI,EAAE,CACP,SAAS,gBAAgB;IACrB,OAAO;QACH,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,KAAK;KACd,CAAC;AACN,CAAC,CACR,CAAC"}

package/dist/gateway/login/login.token.create.d.ts

@@ -1,3 +0,0 @@
-declare const _default: import("@feasibleone/blong").ValidationDefinition<Record<string, unknown>>;
-export default _default;
-//# sourceMappingURL=login.token.create.d.ts.map

package/dist/gateway/login/login.token.create.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.token.create.d.ts","sourceRoot":"","sources":["../../../gateway/login/login.token.create.ts"],"names":[],"mappings":";AAEA,wBAYE"}

package/dist/gateway/login/login.token.create.js

@@ -1,12 +0,0 @@
-import { validation } from '@feasibleone/blong';
-export default validation(async ({ lib: { type } }) => function loginTokenCreate() {
-    return {
-        auth: 'login',
-        params: type.Object({
-            username: type.String(),
-            password: type.String(),
-        }),
-        result: type.Object({}, { additionalProperties: true }),
-    };
-});
-//# sourceMappingURL=login.token.create.js.map

package/dist/gateway/login/login.token.create.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.token.create.js","sourceRoot":"","sources":["../../../gateway/login/login.token.create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,oBAAoB,CAAC;AAE9C,eAAe,UAAU,CACrB,KAAK,EAAE,EAAC,GAAG,EAAE,EAAC,IAAI,EAAC,EAAC,EAAE,EAAE,CACpB,SAAS,gBAAgB;IACrB,OAAO;QACH,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;YAChB,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;YACvB,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;SAC1B,CAAC;QACF,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAC,oBAAoB,EAAE,IAAI,EAAC,CAAC;KACxD,CAAC;AACN,CAAC,CACR,CAAC"}

package/dist/orchestrator/login/loginOidcGetConfiguration.d.ts

@@ -1,3 +0,0 @@
-declare const _default: import("@feasibleone/blong").Definition<Record<string, unknown>, import("@feasibleone/blong").AdapterContext>;
-export default _default;
-//# sourceMappingURL=loginOidcGetConfiguration.d.ts.map

package/dist/orchestrator/login/loginOidcGetConfiguration.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"loginOidcGetConfiguration.d.ts","sourceRoot":"","sources":["../../../orchestrator/login/loginOidcGetConfiguration.ts"],"names":[],"mappings":";AAEA,wBA4BE"}

package/dist/orchestrator/login/loginOidcGetConfiguration.js

@@ -1,25 +0,0 @@
-import { handler } from '@feasibleone/blong';
-export default handler(() => function loginOidcGetConfiguration(params, { httpRequest: { url: urlRequest, headers } = { url: '', headers: {} } }) {
-    const url = new URL(urlRequest);
-    if (headers['x-forwarded-host']) {
-        url.port = ''; // WTF WHATWG!
-        url.host =
-            typeof headers['x-forwarded-host'] === 'string'
-                ? headers['x-forwarded-host']
-                : headers['x-forwarded-host'][0];
-        if (headers['x-forwarded-proto'])
-            url.protocol =
-                typeof headers['x-forwarded-proto'] === 'string'
-                    ? headers['x-forwarded-proto']
-                    : headers['x-forwarded-proto'][0];
-    }
-    return {
-        issuer: 'blong-login',
-        id_token_signing_alg_values_supported: ['RS256'],
-        code_challenge_methods_supported: ['S256'],
-        authorization_endpoint: new URL('../form', url.href).href,
-        token_endpoint: new URL('../token', url.href).href,
-        jwks_uri: new URL('../jwks', url.href).href,
-    };
-});
-//# sourceMappingURL=loginOidcGetConfiguration.js.map

package/dist/orchestrator/login/loginOidcGetConfiguration.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"loginOidcGetConfiguration.js","sourceRoot":"","sources":["../../../orchestrator/login/loginOidcGetConfiguration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,OAAO,EAAC,MAAM,oBAAoB,CAAC;AAEvD,eAAe,OAAO,CAClB,GAAG,EAAE,CACD,SAAS,yBAAyB,CAC9B,MAAe,EACf,EAAC,WAAW,EAAE,EAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAC,GAAG,EAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAC,EAAQ;IAEzE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAChC,IAAI,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,cAAc;QAC7B,GAAG,CAAC,IAAI;YACJ,OAAO,OAAO,CAAC,kBAAkB,CAAC,KAAK,QAAQ;gBAC3C,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;gBAC7B,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,mBAAmB,CAAC;YAC5B,GAAG,CAAC,QAAQ;gBACR,OAAO,OAAO,CAAC,mBAAmB,CAAC,KAAK,QAAQ;oBAC5C,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;oBAC9B,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO;QACH,MAAM,EAAE,aAAa;QACrB,qCAAqC,EAAE,CAAC,OAAO,CAAC;QAChD,gCAAgC,EAAE,CAAC,MAAM,CAAC;QAC1C,sBAAsB,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI;QACzD,cAAc,EAAE,IAAI,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI;QAClD,QAAQ,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI;KAC9C,CAAC;AACN,CAAC,CACR,CAAC"}

package/dist/orchestrator/login/loginOidcGetKeys.d.ts

@@ -1,3 +0,0 @@
-declare const _default: import("@feasibleone/blong").Definition<Record<string, unknown>, import("@feasibleone/blong").AdapterContext>;
-export default _default;
-//# sourceMappingURL=loginOidcGetKeys.d.ts.map

package/dist/orchestrator/login/loginOidcGetKeys.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"loginOidcGetKeys.d.ts","sourceRoot":"","sources":["../../../orchestrator/login/loginOidcGetKeys.ts"],"names":[],"mappings":";AAEA,wBAMI"}

package/dist/orchestrator/login/loginOidcGetKeys.js

@@ -1,5 +0,0 @@
-import { handler } from '@feasibleone/blong';
-export default handler(({ lib: { jwks } }) => ({
-    loginOidcGetKeys: jwks
-}));
-//# sourceMappingURL=loginOidcGetKeys.js.map

package/dist/orchestrator/login/loginOidcGetKeys.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"loginOidcGetKeys.js","sourceRoot":"","sources":["../../../orchestrator/login/loginOidcGetKeys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C,eAAe,OAAO,CAAC,CAAC,EACpB,GAAG,EAAE,EACD,IAAI,EACP,EACJ,EAAE,EAAE,CAAC,CAAC;IACH,gBAAgB,EAAE,IAAI;CACzB,CAAC,CAAC,CAAC"}

package/dist/orchestrator/login/loginTokenCreate.d.ts

@@ -1,3 +0,0 @@
-declare const _default: import("@feasibleone/blong").Definition<Record<string, unknown>, import("@feasibleone/blong").AdapterContext>;
-export default _default;
-//# sourceMappingURL=loginTokenCreate.d.ts.map

package/dist/orchestrator/login/loginTokenCreate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"loginTokenCreate.d.ts","sourceRoot":"","sources":["../../../orchestrator/login/loginTokenCreate.ts"],"names":[],"mappings":";AAQA,wBAyBE"}

package/dist/orchestrator/login/loginTokenCreate.js

@@ -1,19 +0,0 @@
-import { handler } from '@feasibleone/blong';
-export default handler(({ lib: { token }, handler: { accessCredentialCheck } }) => async function loginTokenCreate({ username, password }, $meta) {
-    const { userId, permissionMap, actions } = (await accessCredentialCheck({ username, password }, 
-    // Forward $meta for tracing – the handler proxy attaches
-    // the method name and routing info automatically.
-    $meta));
-    return token({
-        clientId: username,
-        actorId: userId,
-        sessionId: 'session',
-        language: 'en',
-        refresh: '',
-        permissionMap,
-        mlek: $meta?.auth?.mlek,
-        mlsk: $meta?.auth?.mlsk,
-        actions,
-    });
-});
-//# sourceMappingURL=loginTokenCreate.js.map

package/dist/orchestrator/login/loginTokenCreate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"loginTokenCreate.js","sourceRoot":"","sources":["../../../orchestrator/login/loginTokenCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,OAAO,EAAC,MAAM,oBAAoB,CAAC;AAQvD,eAAe,OAAO,CAClB,CAAC,EAAC,GAAG,EAAE,EAAC,KAAK,EAAC,EAAE,OAAO,EAAE,EAAC,qBAAqB,EAAC,EAAC,EAAE,EAAE,CACjD,KAAK,UAAU,gBAAgB,CAC3B,EAAC,QAAQ,EAAE,QAAQ,EAAuC,EAC1D,KAAY;IAEZ,MAAM,EAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAC,GAAG,CAAC,MAAM,qBAAqB,CACjE,EAAC,QAAQ,EAAE,QAAQ,EAAC;IACpB,yDAAyD;IACzD,kDAAkD;IAClD,KAAK,CACR,CAA0B,CAAC;IAE5B,OAAO,KAAK,CAAC;QACT,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,EAAE;QACX,aAAa;QACb,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI;QACvB,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI;QACvB,OAAO;KACV,CAAC,CAAC;AACP,CAAC,CACR,CAAC"}

package/dist/orchestrator/login/refresh.d.ts

@@ -1,9 +0,0 @@
-import cbc from 'ut-function.cbc';
-declare const _default: import("@feasibleone/blong").Lib<{
-    keys: {
-        refresh: string;
-        refreshCbc: ReturnType<typeof cbc>;
-    };
-}>;
-export default _default;
-//# sourceMappingURL=refresh.d.ts.map

package/dist/orchestrator/login/refresh.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"refresh.d.ts","sourceRoot":"","sources":["../../../orchestrator/login/refresh.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,iBAAiB,CAAC;;UAEJ;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,UAAU,CAAC,OAAO,GAAG,CAAC,CAAA;KAAC;;AAAnF,wBAkBE"}

package/dist/orchestrator/login/refresh.js

@@ -1,16 +0,0 @@
-import { library } from '@feasibleone/blong';
-import cbc from 'ut-function.cbc';
-export default library(({ config: { keys: { refresh, refreshCbc = cbc(refresh) }, }, handler: { errorLoginRefreshTokenExpired }, }) => ({
-    writeRefresh(params) {
-        return refreshCbc
-            .encrypt(JSON.stringify({ ...params, expire: Date.now() + params.refresh * 1000 }))
-            .toString('base64');
-    },
-    readRefresh(token) {
-        const result = JSON.parse(refreshCbc.decrypt(Buffer.from(token, 'base64')));
-        if (result.expire <= Date.now())
-            throw errorLoginRefreshTokenExpired();
-        return result;
-    },
-}));
-//# sourceMappingURL=refresh.js.map

package/dist/orchestrator/login/refresh.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"refresh.js","sourceRoot":"","sources":["../../../orchestrator/login/refresh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAC,MAAM,oBAAoB,CAAC;AAC3C,OAAO,GAAG,MAAM,iBAAiB,CAAC;AAElC,eAAe,OAAO,CAClB,CAAC,EACG,MAAM,EAAE,EACJ,IAAI,EAAE,EAAC,OAAO,EAAE,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,EAAC,GAC7C,EACD,OAAO,EAAE,EAAC,6BAA6B,EAAC,GAC3C,EAAE,EAAE,CAAC,CAAC;IACH,YAAY,CAAC,MAAyB;QAClC,OAAO,UAAU;aACZ,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,GAAG,IAAI,EAAC,CAAC,CAAC;aAChF,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IACD,WAAW,CAAC,KAAa;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,MAAM,6BAA6B,EAAE,CAAC;QACvE,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ,CAAC,CACL,CAAC"}

package/dist/orchestrator/login/token.d.ts

@@ -1,10 +0,0 @@
-import { type JWK } from 'jose';
-declare const _default: import("@feasibleone/blong").Lib<{
-    keys: {
-        access: JWK;
-        id: JWK;
-    };
-    expire: Record<string, number>;
-}>;
-export default _default;
-//# sourceMappingURL=token.d.ts.map

package/dist/orchestrator/login/token.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../orchestrator/login/token.ts"],"names":[],"mappings":"AACA,OAAO,EAAgE,KAAK,GAAG,EAAC,MAAM,MAAM,CAAC;;UAGnF;QACF,MAAM,EAAE,GAAG,CAAC;QACZ,EAAE,EAAE,GAAG,CAAC;KACX;YACO,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;;AALlC,wBAuFE"}

package/dist/orchestrator/login/token.js

@@ -1,59 +0,0 @@
-import { library } from '@feasibleone/blong';
-import { SignJWT, calculateJwkThumbprint, createLocalJWKSet, importJWK } from 'jose';
-export default library(async ({ config: { keys: { access, id }, expire, }, lib: { writeRefresh }, gateway, }) => {
-    const alg = access.alg || 'EdDSA';
-    const kid = access.kid || (await calculateJwkThumbprint(access));
-    const keyAccessToken = await importJWK(access, alg);
-    const jwks = {
-        // eslint-disable-next-line @typescript-eslint/no-unused-vars
-        keys: [access, id].filter(Boolean).map(({ d, p, q, dp, dq, qi, ...pub }) => pub),
-    };
-    const keyStore = createLocalJWKSet(jwks);
-    const { public: keys } = gateway.config();
-    return {
-        async jwks(header = {}, token) {
-            return Object.keys(header).length ? keyStore(header, token) : jwks;
-        },
-        async token({ clientId, actorId, sessionId, permissionMap, mlek, mlsk, refresh, actions, ...rest }) {
-            if (!refresh || refresh > expire.refresh)
-                refresh = expire.refresh;
-            refresh = expire.never || refresh;
-            const access = expire.never || (expire.access > refresh ? refresh : expire.access);
-            return {
-                encrypt: keys.encrypt,
-                sign: keys.sign,
-                token_type: 'Bearer',
-                scope: 'openid',
-                access_token: await new SignJWT({
-                    ...rest,
-                    typ: 'Bearer',
-                    ses: sessionId,
-                    per: permissionMap,
-                    ...(mlek && { enc: mlek }),
-                    ...(mlsk && { sig: mlsk }),
-                })
-                    .setProtectedHeader({ alg, kid })
-                    .setIssuedAt()
-                    .setSubject(String(actorId))
-                    .setIssuer('blong-login')
-                    .setAudience('blong')
-                    .setExpirationTime(access + 's')
-                    .sign(keyAccessToken),
-                expires_in: access,
-                refresh_token: writeRefresh({
-                    actorId,
-                    sessionId,
-                    clientId,
-                    mlsk,
-                    mlek,
-                    refresh,
-                    actions,
-                    ...rest,
-                }),
-                refresh_token_expires_in: refresh,
-                permissions: actions ?? true,
-            };
-        },
-    };
-});
-//# sourceMappingURL=token.js.map

package/dist/orchestrator/login/token.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../orchestrator/login/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAC,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAC,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,SAAS,EAAW,MAAM,MAAM,CAAC;AAE7F,eAAe,OAAO,CAOlB,KAAK,EAAE,EACH,MAAM,EAAE,EACJ,IAAI,EAAE,EAAC,MAAM,EAAE,EAAE,EAAC,EAClB,MAAM,GACT,EACD,GAAG,EAAE,EAAC,YAAY,EAAC,EACnB,OAAO,GACV,EAAE,EAAE;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC;IAClC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG;QACT,6DAA6D;QAC7D,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,GAAG,EAAC,EAAE,EAAE,CAAC,GAAG,CAAC;KACjF,CAAC;IACF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,EAAC,MAAM,EAAE,IAAI,EAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACxC,OAAO;QACH,KAAK,CAAC,IAAI,CACN,SAAyC,EAAE,EAC3C,KAAqC;YAErC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,EACR,QAAQ,EACR,OAAO,EACP,SAAS,EACT,aAAa,EACb,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,OAAO,EACP,GAAG,IAAI,EAMgB;YACvB,IAAI,CAAC,OAAO,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO;gBAAE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YACnE,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACnF,OAAO;gBACH,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,UAAU,EAAE,QAAQ;gBACpB,KAAK,EAAE,QAAQ;gBACf,YAAY,EAAE,MAAM,IAAI,OAAO,CAAC;oBAC5B,GAAG,IAAI;oBACP,GAAG,EAAE,QAAQ;oBACb,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,aAAa;oBAClB,GAAG,CAAC,IAAI,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;oBACxB,GAAG,CAAC,IAAI,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;iBAC3B,CAAC;qBACG,kBAAkB,CAAC,EAAC,GAAG,EAAE,GAAG,EAAC,CAAC;qBAC9B,WAAW,EAAE;qBACb,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;qBAC3B,SAAS,CAAC,aAAa,CAAC;qBACxB,WAAW,CAAC,OAAO,CAAC;qBACpB,iBAAiB,CAAC,MAAM,GAAG,GAAG,CAAC;qBAC/B,IAAI,CAAC,cAAc,CAAC;gBACzB,UAAU,EAAE,MAAM;gBAClB,aAAa,EAAE,YAAY,CAAC;oBACxB,OAAO;oBACP,SAAS;oBACT,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,OAAO;oBACP,OAAO;oBACP,GAAG,IAAI;iBACV,CAAC;gBACF,wBAAwB,EAAE,OAAO;gBACjC,WAAW,EAAE,OAAO,IAAI,IAAI;aAC/B,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC,CACJ,CAAC"}

package/dist/orchestrator/loginDispatch.d.ts

@@ -1,9 +0,0 @@
-declare const _default: import("@feasibleone/blong").IAdapterFactory<{
-    namespace: "login";
-    imports: string[];
-    validations: string[];
-}, import("@feasibleone/blong").AdapterContext> & {
-    [x: symbol]: "orchestrator";
-};
-export default _default;
-//# sourceMappingURL=loginDispatch.d.ts.map

package/dist/orchestrator/loginDispatch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"loginDispatch.d.ts","sourceRoot":"","sources":["../../orchestrator/loginDispatch.ts"],"names":[],"mappings":";;;;;;;AAEA,wBAcI"}

package/dist/orchestrator/loginDispatch.js

@@ -1,17 +0,0 @@
-import { orchestrator } from '@feasibleone/blong';
-export default orchestrator(blong => ({
-    extends: 'orchestrator.dispatch',
-    validation: blong.type.Object({
-        namespace: blong.type.String(),
-        imports: blong.type.Array(blong.type.String()),
-        validations: blong.type.Array(blong.type.String()),
-    }),
-    activation: {
-        default: {
-            namespace: 'login',
-            imports: ['login.login'],
-            validations: ['login.login.validation'],
-        },
-    },
-}));
-//# sourceMappingURL=loginDispatch.js.map

package/dist/orchestrator/loginDispatch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"loginDispatch.js","sourceRoot":"","sources":["../../orchestrator/loginDispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAC,MAAM,oBAAoB,CAAC;AAEhD,eAAe,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClC,OAAO,EAAE,uBAAuB;IAChC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1B,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;QAC9B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9C,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACrD,CAAC;IACF,UAAU,EAAE;QACR,OAAO,EAAE;YACL,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,CAAC,aAAa,CAAC;YACxB,WAAW,EAAE,CAAC,wBAAwB,CAAC;SAC1C;KACJ;CACJ,CAAC,CAAC,CAAC"}

package/dist/package.json

@@ -1,46 +0,0 @@
-{
-    "name": "@feasibleone/blong-login",
-    "version": "1.8.0",
-    "description": "Login and authentication utilities for the Blong framework",
-    "keywords": [
-        "blong",
-        "rad",
-        "framework"
-    ],
-    "repository": {
-        "url": "git+https://github.com/feasibleone/blong.git"
-    },
-    "type": "module",
-    "exports": {
-        "./server.js": "./dist/server.js",
-        "./server.d.ts": "./dist/server.d.ts",
-        "./server.ts": "./server.ts",
-        "./browser.js": "./dist/browser.js",
-        "./browser.d.ts": "./dist/browser.d.ts",
-        "./browser.ts": "./browser.ts",
-        "./dist/package.json": "./package.json",
-        "./package.json": "./package.json"
-    },
-    "scripts": {
-        "build": "heft build --clean",
-        "ci-lint": "blong-dev lint",
-        "ci-publish": "node ../../common/scripts/install-run-rush-pnpm.js publish --access public --provenance"
-    },
-    "dependencies": {
-        "jose": "^6.2.1",
-        "typebox": "^1.1.5",
-        "ut-function.cbc": "^1.1.6"
-    },
-    "devDependencies": {
-        "@feasibleone/blong": "workspace:^1.0.0",
-        "@feasibleone/blong-dev": "workspace:*",
-        "@rushstack/heft": "^1.2.6",
-        "@rushstack/heft-lint-plugin": "^1.2.6",
-        "@rushstack/heft-typescript-plugin": "^1.3.1",
-        "@types/ut-function.cbc": "file:./types/ut-function.cbc",
-        "typescript": "^6.0.3"
-    },
-    "peerDependencies": {
-        "@feasibleone/blong": "^1.0.0"
-    }
-}

package/dist/server.d.ts

@@ -1,34 +0,0 @@
-declare const _default: import("@feasibleone/blong").SolutionFactory<import("typebox").TObject<{
-    login: import("typebox").TObject<{
-        expire: import("typebox").TObject<{
-            code: import("typebox").TNumber;
-            access: import("typebox").TNumber;
-            cookie: import("typebox").TNumber;
-            refresh: import("typebox").TNumber;
-            nonce: import("typebox").TNumber;
-        }>;
-        cookie: import("typebox").TObject<{
-            encoding: import("typebox").TString;
-            isSecure: import("typebox").TBoolean;
-            isHttpOnly: import("typebox").TBoolean;
-            clearInvalid: import("typebox").TBoolean;
-            strictHeader: import("typebox").TBoolean;
-        }>;
-        keys: import("typebox").TObject<{
-            refresh: import("typebox").TString;
-            access: import("typebox").TObject<{
-                crv: import("typebox").TString;
-                x: import("typebox").TString;
-                d: import("typebox").TString;
-                kty: import("typebox").TString;
-                kid: import("typebox").TString;
-                use: import("typebox").TString;
-                alg: import("typebox").TString;
-            }>;
-        }>;
-    }>;
-}>> & {
-    [x: symbol]: "solution";
-};
-export default _default;
-//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../server.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,wBAuEI"}

package/dist/server.js

@@ -1,74 +0,0 @@
-import { realm } from '@feasibleone/blong';
-export default realm(blong => ({
-    url: import.meta.url,
-    validation: blong.type.Object({
-        login: blong.type.Object({
-            expire: blong.type.Object({
-                code: blong.type.Number(),
-                access: blong.type.Number(),
-                cookie: blong.type.Number(),
-                refresh: blong.type.Number(),
-                nonce: blong.type.Number(),
-            }),
-            cookie: blong.type.Object({
-                encoding: blong.type.String(),
-                isSecure: blong.type.Boolean(),
-                isHttpOnly: blong.type.Boolean(),
-                clearInvalid: blong.type.Boolean(),
-                strictHeader: blong.type.Boolean(),
-            }),
-            keys: blong.type.Object({
-                refresh: blong.type.String(),
-                access: blong.type.Object({
-                    crv: blong.type.String(),
-                    x: blong.type.String(),
-                    d: blong.type.String(),
-                    kty: blong.type.String(),
-                    kid: blong.type.String(),
-                    use: blong.type.String(),
-                    alg: blong.type.String(),
-                }),
-            }),
-        }),
-    }),
-    children: ['./orchestrator', './gateway'],
-    config: {
-        default: {
-            login: {
-                expire: {
-                    code: 60, // 1 minute
-                    access: 15 * 60, // 15 minutes
-                    cookie: 8 * 60 * 60, // 8 hours
-                    refresh: 8 * 60 * 60, // 8 hours
-                    nonce: 15 * 60, // 15 minute
-                },
-                cookie: {
-                    encoding: 'none',
-                    isSecure: true,
-                    isHttpOnly: true,
-                    clearInvalid: false,
-                    strictHeader: true,
-                },
-                keys: {
-                    refresh: 'b1226b7ed6c6e5aded611ffb55a26a18154fb2263c8c2ea0974dd63e8e11919b',
-                    access: {
-                        crv: 'Ed25519',
-                        x: 'hhcGW1iHk_YWlNYDxn7P4PGV1N6mPjghBge4O7zterQ',
-                        d: 'KGpSfEzpbelEdQStQBlYmHPkHrG4cEcRx_yJZkRc_qY',
-                        kty: 'OKP',
-                        kid: 'kMfX1WoDc9dWVRugwGh9sSL956JS7yB8jE1ylo71Z-M',
-                        use: 'sig',
-                        alg: 'EdDSA',
-                    },
-                },
-            },
-        },
-        dev: {},
-        microservice: {
-            orchestrator: true,
-            gateway: true,
-        },
-        integration: {},
-    },
-}));
-//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,KAAK,EAAC,MAAM,oBAAoB,CAAC;AAEzC,eAAe,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;IACpB,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YACrB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;gBACzB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC3B,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC3B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC5B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;aAC7B,CAAC;YACF,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBACtB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC7B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;gBAC9B,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;gBAChC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;gBAClC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;aACrC,CAAC;YACF,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBACpB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC5B,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;oBACtB,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;oBACxB,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;oBACtB,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;oBACtB,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;oBACxB,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;oBACxB,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;oBACxB,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;iBAC3B,CAAC;aACL,CAAC;SACL,CAAC;KACL,CAAC;IACF,QAAQ,EAAE,CAAC,gBAAgB,EAAE,WAAW,CAAC;IACzC,MAAM,EAAE;QACJ,OAAO,EAAE;YACL,KAAK,EAAE;gBACH,MAAM,EAAE;oBACJ,IAAI,EAAE,EAAE,EAAE,WAAW;oBACrB,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,aAAa;oBAC9B,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU;oBAC/B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU;oBAChC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,YAAY;iBAC/B;gBACD,MAAM,EAAE;oBACJ,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,IAAI;oBAChB,YAAY,EAAE,KAAK;oBACnB,YAAY,EAAE,IAAI;iBACrB;gBACD,IAAI,EAAE;oBACF,OAAO,EAAE,kEAAkE;oBAC3E,MAAM,EAAE;wBACJ,GAAG,EAAE,SAAS;wBACd,CAAC,EAAE,6CAA6C;wBAChD,CAAC,EAAE,6CAA6C;wBAChD,GAAG,EAAE,KAAK;wBACV,GAAG,EAAE,6CAA6C;wBAClD,GAAG,EAAE,KAAK;wBACV,GAAG,EAAE,OAAO;qBACf;iBACJ;aACJ;SACJ;QACD,GAAG,EAAE,EAAE;QACP,YAAY,EAAE;YACV,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,IAAI;SAChB;QACD,WAAW,EAAE,EAAE;KAClB;CACJ,CAAC,CAAC,CAAC"}

package/dist/test/test/testUserAdminLogin.d.ts

@@ -1,3 +0,0 @@
-declare const _default: import("@feasibleone/blong").Definition<Record<string, unknown>, import("@feasibleone/blong").AdapterContext>;
-export default _default;
-//# sourceMappingURL=testUserAdminLogin.d.ts.map

package/dist/test/test/testUserAdminLogin.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"testUserAdminLogin.d.ts","sourceRoot":"","sources":["../../../test/test/testUserAdminLogin.ts"],"names":[],"mappings":";AAEA,wBAUI"}

package/dist/test/test/testUserAdminLogin.js

@@ -1,12 +0,0 @@
-import { handler } from '@feasibleone/blong';
-export default handler(({ lib: { group } }) => ({
-    testUserAdminLogin: ({ name = 'login' }) => group(name)([
-        function createAdmin() {
-            return { username: 'sa', password: '123' };
-        },
-        function loginAdmin() {
-            return { accessToken: 'xxx' };
-        },
-    ]),
-}));
-//# sourceMappingURL=testUserAdminLogin.js.map

package/dist/test/test/testUserAdminLogin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"testUserAdminLogin.js","sourceRoot":"","sources":["../../../test/test/testUserAdminLogin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAC,MAAM,oBAAoB,CAAC;AAE3C,eAAe,OAAO,CAAC,CAAC,EAAC,GAAG,EAAE,EAAC,KAAK,EAAC,EAAC,EAAE,EAAE,CAAC,CAAC;IACxC,kBAAkB,EAAE,CAAC,EAAC,IAAI,GAAG,OAAO,EAAiB,EAAE,EAAE,CACrD,KAAK,CAAC,IAAI,CAAC,CAAC;QACR,SAAS,WAAW;YAChB,OAAO,EAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAC,CAAC;QAC7C,CAAC;QACD,SAAS,UAAU;YACf,OAAO,EAAC,WAAW,EAAE,KAAK,EAAC,CAAC;QAChC,CAAC;KACJ,CAAC;CACT,CAAC,CAAC,CAAC"}