@gennext/lb-infra 0.2.3 → 0.3.0

package/dist/components/authenticate/index.js

@@ -0,0 +1,25 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./common"), exports);
+__exportStar(require("./component"), exports);
+__exportStar(require("./controllers"), exports);
+__exportStar(require("./middleware"), exports);
+__exportStar(require("./models"), exports);
+__exportStar(require("./oauth2-handlers"), exports);
+__exportStar(require("./repositories"), exports);
+__exportStar(require("./services"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/authenticate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/components/authenticate/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,8CAA4B;AAC5B,gDAA8B;AAC9B,+CAA6B;AAC7B,2CAAyB;AACzB,oDAAkC;AAClC,iDAA+B;AAC/B,6CAA2B"}

package/dist/components/authenticate/middleware.d.ts

@@ -0,0 +1,12 @@
+import { BaseProvider } from '../../base/base.provider';
+import { AuthenticateFn } from '@loopback/authentication';
+import { Getter, ValueOrPromise } from '@loopback/core';
+import { Middleware, Request } from '@loopback/rest';
+export declare class AuthenticationMiddleware extends BaseProvider<Middleware> {
+    private authenticateFn;
+    private alwaysAllowPathGetter;
+    constructor(authenticateFn: AuthenticateFn, alwaysAllowPathGetter: Getter<string[]>);
+    authenticate(request: Request): Promise<void>;
+    value(): ValueOrPromise<Middleware>;
+}
+//# sourceMappingURL=middleware.d.ts.map

package/dist/components/authenticate/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/components/authenticate/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EACL,cAAc,EAIf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,MAAM,EAA4B,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAEL,UAAU,EAEV,OAAO,EAGR,MAAM,gBAAgB,CAAC;AAGxB,qBAOa,wBAAyB,SAAQ,YAAY,CAAC,UAAU,CAAC;IAGlE,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,qBAAqB;gBAFrB,cAAc,EAAE,cAAc,EAE9B,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAK3C,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BnD,KAAK,IAAI,cAAc,CAAC,UAAU,CAAC;CAuBpC"}

package/dist/components/authenticate/middleware.js

@@ -0,0 +1,78 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AuthenticationMiddleware_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationMiddleware = void 0;
+const base_provider_1 = require("../../base/base.provider");
+const authentication_1 = require("@loopback/authentication");
+const core_1 = require("@loopback/core");
+const rest_1 = require("@loopback/rest");
+const common_1 = require("./common");
+let AuthenticationMiddleware = AuthenticationMiddleware_1 = class AuthenticationMiddleware extends base_provider_1.BaseProvider {
+    constructor(authenticateFn, alwaysAllowPathGetter) {
+        super({ scope: AuthenticationMiddleware_1.name });
+        this.authenticateFn = authenticateFn;
+        this.alwaysAllowPathGetter = alwaysAllowPathGetter;
+    }
+    async authenticate(request) {
+        try {
+            const { url = '' } = request;
+            this.logger.debug('[authenticate] Authenticating request | Url: %s', decodeURIComponent(url)?.replace(/(?:\r\n|\r|\n)/g, ''));
+            await this.authenticateFn(request);
+        }
+        catch (error) {
+            const { code } = error || {};
+            switch (code) {
+                case authentication_1.AUTHENTICATION_STRATEGY_NOT_FOUND:
+                case authentication_1.USER_PROFILE_NOT_FOUND: {
+                    Object.assign(error, { statusCode: 401 });
+                    break;
+                }
+                default: {
+                    this.logger.error('[authenticate] User request failed to authenticate | %s', error);
+                    break;
+                }
+            }
+            throw error;
+        }
+    }
+    value() {
+        return async (context, next) => {
+            const t = new Date().getTime();
+            const { request } = context;
+            const { url } = request;
+            const requestUrl = decodeURIComponent(url);
+            const questionMarkIndex = requestUrl.indexOf('?');
+            const requestPath = questionMarkIndex === -1 ? requestUrl : requestUrl.slice(0, questionMarkIndex);
+            const alwaysAllowPaths = await this.alwaysAllowPathGetter();
+            if (!alwaysAllowPaths.includes(requestPath)) {
+                await this.authenticate(request);
+            }
+            this.logger.debug('[handle] Authenticated request... | Took: %d(ms)', new Date().getTime() - t);
+            return next();
+        };
+    }
+};
+exports.AuthenticationMiddleware = AuthenticationMiddleware;
+exports.AuthenticationMiddleware = AuthenticationMiddleware = AuthenticationMiddleware_1 = __decorate([
+    (0, core_1.injectable)((0, rest_1.asMiddleware)({
+        chain: rest_1.RestTags.REST_MIDDLEWARE_CHAIN,
+        group: rest_1.RestMiddlewareGroups.AUTHENTICATION,
+        upstreamGroups: [rest_1.RestMiddlewareGroups.CORS],
+    })),
+    __param(0, (0, core_1.inject)(authentication_1.AuthenticationBindings.AUTH_ACTION)),
+    __param(1, core_1.inject.getter(common_1.AuthenticateKeys.ALWAYS_ALLOW_PATHS)),
+    __metadata("design:paramtypes", [Function, Function])
+], AuthenticationMiddleware);
+//# sourceMappingURL=middleware.js.map

package/dist/components/authenticate/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/components/authenticate/middleware.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAoD;AACpD,6DAKkC;AAClC,yCAAkF;AAClF,yCAOwB;AACxB,qCAA4C;AASrC,IAAM,wBAAwB,gCAA9B,MAAM,wBAAyB,SAAQ,4BAAwB;IACpE,YAEU,cAA8B,EAE9B,qBAAuC;QAE/C,KAAK,CAAC,EAAE,KAAK,EAAE,0BAAwB,CAAC,IAAI,EAAE,CAAC,CAAC;QAJxC,mBAAc,GAAd,cAAc,CAAgB;QAE9B,0BAAqB,GAArB,qBAAqB,CAAkB;IAGjD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAgB;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,iDAAiD,EACjD,kBAAkB,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CACxD,CAAC;YACF,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC;YAC7B,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,kDAAiC,CAAC;gBACvC,KAAK,uCAAsB,CAAC,CAAC,CAAC;oBAC5B,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC1C,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,EAAE,KAAK,CAAC,CAAC;oBACpF,MAAM;gBACR,CAAC;YACH,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK;QACH,OAAO,KAAK,EAAE,OAA0B,EAAE,IAAU,EAAE,EAAE;YACtD,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YAE/B,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;YACxB,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,WAAW,GACf,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;YAEjF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC5D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACnC,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,kDAAkD,EAClD,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CACzB,CAAC;YACF,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC;IACJ,CAAC;CACF,CAAA;AA3DY,4DAAwB;mCAAxB,wBAAwB;IAPpC,IAAA,iBAAU,EACT,IAAA,mBAAY,EAAC;QACX,KAAK,EAAE,eAAQ,CAAC,qBAAqB;QACrC,KAAK,EAAE,2BAAoB,CAAC,cAAc;QAC1C,cAAc,EAAE,CAAC,2BAAoB,CAAC,IAAI,CAAC;KAC5C,CAAC,CACH;IAGI,WAAA,IAAA,aAAM,EAAC,uCAAsB,CAAC,WAAW,CAAC,CAAA;IAE1C,WAAA,aAAM,CAAC,MAAM,CAAC,yBAAgB,CAAC,kBAAkB,CAAC,CAAA;;GAJ1C,wBAAwB,CA2DpC"}

package/dist/components/authenticate/models/index.d.ts

@@ -0,0 +1,4 @@
+export * from './oauth2-client.model';
+export * from './oauth2-scope.model';
+export * from './oauth2-token.model';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/authenticate/models/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/models/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC"}

package/dist/components/authenticate/models/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./oauth2-client.model"), exports);
+__exportStar(require("./oauth2-scope.model"), exports);
+__exportStar(require("./oauth2-token.model"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/authenticate/models/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/components/authenticate/models/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,uDAAqC;AACrC,uDAAqC"}

package/dist/components/authenticate/models/oauth2-client.model.d.ts

@@ -0,0 +1,21 @@
+import { BaseNumberTzEntity } from '../../../base/models';
+import { NumberIdType } from '../../../common';
+export declare class OAuth2Client extends BaseNumberTzEntity {
+    provider: string;
+    identifier: string;
+    clientId: string;
+    name: string;
+    description: string;
+    clientSecret: string;
+    grants: Array<string>;
+    endpoints: {
+        rootUrl: string;
+        homeUrl: string;
+        redirectUrls: Array<string>;
+        callbackUrls: Array<string>;
+        originUrls: Array<string>;
+    };
+    userId?: NumberIdType;
+    constructor(data?: Partial<OAuth2Client>);
+}
+//# sourceMappingURL=oauth2-client.model.d.ts.map

package/dist/components/authenticate/models/oauth2-client.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-client.model.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/models/oauth2-client.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAGxC,qBASa,YAAa,SAAQ,kBAAkB;IAKlD,QAAQ,EAAG,MAAM,CAAC;IAMlB,UAAU,EAAG,MAAM,CAAC;IAMpB,QAAQ,EAAG,MAAM,CAAC;IAMlB,IAAI,EAAG,MAAM,CAAC;IAMd,WAAW,EAAG,MAAM,CAAC;IAMrB,YAAY,EAAG,MAAM,CAAC;IAWtB,MAAM,EAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAevB,SAAS,EAAG;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;KAC3B,CAAC;IAMF,MAAM,CAAC,EAAE,YAAY,CAAC;gBAEV,IAAI,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC;CAGzC"}

package/dist/components/authenticate/models/oauth2-client.model.js

@@ -0,0 +1,110 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuth2Client = void 0;
+const models_1 = require("../../../base/models");
+const repository_1 = require("@loopback/repository");
+let OAuth2Client = class OAuth2Client extends models_1.BaseNumberTzEntity {
+    constructor(data) {
+        super(data);
+    }
+};
+exports.OAuth2Client = OAuth2Client;
+__decorate([
+    (0, repository_1.property)({
+        type: 'string',
+        postgresql: { columnName: 'provider' },
+    }),
+    __metadata("design:type", String)
+], OAuth2Client.prototype, "provider", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'string',
+        postgresql: { columnName: 'identifier' },
+    }),
+    __metadata("design:type", String)
+], OAuth2Client.prototype, "identifier", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'string',
+        postgresql: { columnName: 'client_id' },
+    }),
+    __metadata("design:type", String)
+], OAuth2Client.prototype, "clientId", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'string',
+        postgresql: { columnName: 'name' },
+    }),
+    __metadata("design:type", String)
+], OAuth2Client.prototype, "name", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'string',
+        postgresql: { columnName: 'description' },
+    }),
+    __metadata("design:type", String)
+], OAuth2Client.prototype, "description", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'string',
+        postgresql: { columnName: 'client_secret' },
+    }),
+    __metadata("design:type", String)
+], OAuth2Client.prototype, "clientSecret", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'array',
+        itemType: 'string',
+        default: [],
+        /* jsonSchema: {
+          enum: ['authorization_code'],
+        }, */
+        postgresql: { columnName: 'grants', dataType: 'jsonb' },
+    }),
+    __metadata("design:type", Array)
+], OAuth2Client.prototype, "grants", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'object',
+        jsonSchema: {
+            properties: {
+                rootUrl: { type: 'string' },
+                homeUrl: { type: 'string' },
+                redirectUrls: { type: 'array', items: { type: 'string' } },
+                callbackUrls: { type: 'array', items: { type: 'string' } },
+                originUrls: { type: 'array', items: { type: 'string' } },
+            },
+        },
+        postgresql: { columnName: 'endpoints', dataType: 'jsonb' },
+    }),
+    __metadata("design:type", Object)
+], OAuth2Client.prototype, "endpoints", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'number',
+        postgresql: { columnName: 'user_id', dataType: 'integer' },
+    }),
+    __metadata("design:type", Number)
+], OAuth2Client.prototype, "userId", void 0);
+exports.OAuth2Client = OAuth2Client = __decorate([
+    (0, repository_1.model)({
+        settings: {
+            postgresql: {
+                schema: 'open_auth',
+                table: 'OAuth2Client',
+            },
+            hiddenProperties: ['createdAt', 'modifiedAt', 'clientSecret'],
+        },
+    }),
+    __metadata("design:paramtypes", [Object])
+], OAuth2Client);
+//# sourceMappingURL=oauth2-client.model.js.map

package/dist/components/authenticate/models/oauth2-client.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-client.model.js","sourceRoot":"","sources":["../../../../src/components/authenticate/models/oauth2-client.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0CAAmD;AAEnD,qDAAuD;AAWhD,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,2BAAkB;IA2ElD,YAAY,IAA4B;QACtC,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;CACF,CAAA;AA9EY,oCAAY;AAKvB;IAJC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;KACvC,CAAC;;8CACgB;AAMlB;IAJC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;KACzC,CAAC;;gDACkB;AAMpB;IAJC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE;KACxC,CAAC;;8CACgB;AAMlB;IAJC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;KACnC,CAAC;;0CACY;AAMd;IAJC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE;KAC1C,CAAC;;iDACmB;AAMrB;IAJC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE;KAC5C,CAAC;;kDACoB;AAWtB;IATC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,EAAE;QACX;;aAEK;QACL,UAAU,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE;KACxD,CAAC;8BACO,KAAK;4CAAS;AAevB;IAbC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC3B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBAC1D,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBAC1D,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;aACzD;SACF;QACD,UAAU,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE;KAC3D,CAAC;;+CAOA;AAMF;IAJC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE;KAC3D,CAAC;;4CACoB;uBAzEX,YAAY;IATxB,IAAA,kBAAK,EAAC;QACL,QAAQ,EAAE;YACR,UAAU,EAAE;gBACV,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,cAAc;aACtB;YACD,gBAAgB,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC;SAC9D;KACF,CAAC;;GACW,YAAY,CA8ExB"}

package/dist/components/authenticate/models/oauth2-scope.model.d.ts

@@ -0,0 +1,13 @@
+import { BaseNumberTzEntity } from '../../../base/models';
+import { IScopeRelationDefinition } from '../common';
+export declare class OAuth2Scope extends BaseNumberTzEntity {
+    identifier: string;
+    name: string;
+    description?: string;
+    protocol?: string;
+    fields?: string[];
+    relations?: IScopeRelationDefinition[];
+    isActive?: boolean;
+    constructor(data?: Partial<OAuth2Scope>);
+}
+//# sourceMappingURL=oauth2-scope.model.d.ts.map

package/dist/components/authenticate/models/oauth2-scope.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-scope.model.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/models/oauth2-scope.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAErD,qBAwBa,WAAY,SAAQ,kBAAkB;IAMjD,UAAU,EAAG,MAAM,CAAC;IAOpB,IAAI,EAAG,MAAM,CAAC;IAMd,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAUlB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAUlB,SAAS,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAOvC,QAAQ,CAAC,EAAE,OAAO,CAAC;gBAEP,IAAI,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;CAGxC"}

package/dist/components/authenticate/models/oauth2-scope.model.js

@@ -0,0 +1,108 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuth2Scope = void 0;
+const models_1 = require("../../../base/models");
+const repository_1 = require("@loopback/repository");
+let OAuth2Scope = class OAuth2Scope extends models_1.BaseNumberTzEntity {
+    constructor(data) {
+        super(data);
+    }
+};
+exports.OAuth2Scope = OAuth2Scope;
+__decorate([
+    (0, repository_1.property)({
+        type: 'string',
+        required: true,
+        postgresql: { columnName: 'identifier' },
+    }),
+    __metadata("design:type", String)
+], OAuth2Scope.prototype, "identifier", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'string',
+        required: true,
+        postgresql: { columnName: 'name' },
+    }),
+    __metadata("design:type", String)
+], OAuth2Scope.prototype, "name", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'string',
+        postgresql: { columnName: 'description' },
+    }),
+    __metadata("design:type", String)
+], OAuth2Scope.prototype, "description", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'string',
+        postgresql: { columnName: 'protocol' },
+    }),
+    __metadata("design:type", String)
+], OAuth2Scope.prototype, "protocol", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'array',
+        itemType: 'string',
+        postgresql: {
+            columnName: 'fields',
+            dataType: 'jsonb',
+        },
+    }),
+    __metadata("design:type", Array)
+], OAuth2Scope.prototype, "fields", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'array',
+        itemType: 'object',
+        postgresql: {
+            columnName: 'relations',
+            dataType: 'jsonb',
+        },
+    }),
+    __metadata("design:type", Array)
+], OAuth2Scope.prototype, "relations", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'boolean',
+        default: true,
+        postgresql: { columnName: 'is_active' },
+    }),
+    __metadata("design:type", Boolean)
+], OAuth2Scope.prototype, "isActive", void 0);
+exports.OAuth2Scope = OAuth2Scope = __decorate([
+    (0, repository_1.model)({
+        settings: {
+            postgresql: {
+                schema: 'open_auth',
+                table: 'OAuth2Scope',
+            },
+            hiddenProperties: ['createdAt', 'modifiedAt'],
+            indexes: {
+                INDEX_OAUTH2_SCOPE_IDENTIFIER: {
+                    keys: {
+                        identifier: 1,
+                    },
+                    options: {
+                        unique: true,
+                    },
+                },
+                INDEX_OAUTH2_SCOPE_IS_ACTIVE: {
+                    keys: {
+                        isActive: 1,
+                    },
+                },
+            },
+        },
+    }),
+    __metadata("design:paramtypes", [Object])
+], OAuth2Scope);
+//# sourceMappingURL=oauth2-scope.model.js.map

package/dist/components/authenticate/models/oauth2-scope.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-scope.model.js","sourceRoot":"","sources":["../../../../src/components/authenticate/models/oauth2-scope.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0CAAmD;AACnD,qDAAuD;AA2BhD,IAAM,WAAW,GAAjB,MAAM,WAAY,SAAQ,2BAAkB;IAsDjD,YAAY,IAA2B;QACrC,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;CACF,CAAA;AAzDY,kCAAW;AAMtB;IALC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;KACzC,CAAC;;+CACkB;AAOpB;IALC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;KACnC,CAAC;;yCACY;AAMd;IAJC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE;KAC1C,CAAC;;gDACmB;AAMrB;IAJC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;KACvC,CAAC;;6CACgB;AAUlB;IARC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE;YACV,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,OAAO;SAClB;KACF,CAAC;;2CACgB;AAUlB;IARC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE;YACV,UAAU,EAAE,WAAW;YACvB,QAAQ,EAAE,OAAO;SAClB;KACF,CAAC;;8CACqC;AAOvC;IALC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE;KACxC,CAAC;;6CACiB;sBApDR,WAAW;IAxBvB,IAAA,kBAAK,EAAC;QACL,QAAQ,EAAE;YACR,UAAU,EAAE;gBACV,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,aAAa;aACrB;YACD,gBAAgB,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;YAC7C,OAAO,EAAE;gBACP,6BAA6B,EAAE;oBAC7B,IAAI,EAAE;wBACJ,UAAU,EAAE,CAAC;qBACd;oBACD,OAAO,EAAE;wBACP,MAAM,EAAE,IAAI;qBACb;iBACF;gBACD,4BAA4B,EAAE;oBAC5B,IAAI,EAAE;wBACJ,QAAQ,EAAE,CAAC;qBACZ;iBACF;aACF;SACF;KACF,CAAC;;GACW,WAAW,CAyDvB"}

package/dist/components/authenticate/models/oauth2-token.model.d.ts

@@ -0,0 +1,13 @@
+import { BaseNumberTzEntity } from '../../../base/models';
+import { AnyObject, IdType } from '../../../common';
+export declare class OAuth2Token extends BaseNumberTzEntity {
+    token: string;
+    type: string;
+    status: string;
+    scopes: Array<string>;
+    clientId: IdType;
+    userId: IdType;
+    details?: AnyObject;
+    constructor(data?: Partial<OAuth2Token>);
+}
+//# sourceMappingURL=oauth2-token.model.d.ts.map

package/dist/components/authenticate/models/oauth2-token.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-token.model.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/models/oauth2-token.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAuB,MAAM,UAAU,CAAC;AAIlE,qBASa,WAAY,SAAQ,kBAAkB;IAIjD,KAAK,EAAG,MAAM,CAAC;IAKf,IAAI,EAAG,MAAM,CAAC;IAMd,MAAM,EAAG,MAAM,CAAC;IAWhB,MAAM,EAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAOvB,QAAQ,EAAG,MAAM,CAAC;IAMlB,MAAM,EAAG,MAAM,CAAC;IAShB,OAAO,CAAC,EAAE,SAAS,CAAC;gBAER,IAAI,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;CAGxC"}

package/dist/components/authenticate/models/oauth2-token.model.js

@@ -0,0 +1,87 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuth2Token = void 0;
+const models_1 = require("../../../base/models");
+const common_1 = require("../../../common");
+const repository_1 = require("@loopback/repository");
+const oauth2_client_model_1 = require("./oauth2-client.model");
+let OAuth2Token = class OAuth2Token extends models_1.BaseNumberTzEntity {
+    constructor(data) {
+        super(data);
+    }
+};
+exports.OAuth2Token = OAuth2Token;
+__decorate([
+    (0, repository_1.property)({
+        type: 'string',
+    }),
+    __metadata("design:type", String)
+], OAuth2Token.prototype, "token", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'string',
+    }),
+    __metadata("design:type", String)
+], OAuth2Token.prototype, "type", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'string',
+        default: common_1.OAuth2TokenStatuses.UNKNOWN,
+    }),
+    __metadata("design:type", String)
+], OAuth2Token.prototype, "status", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'array',
+        itemType: 'string',
+        default: [],
+        postgresql: {
+            columnName: 'scopes',
+            dataType: 'jsonb',
+        },
+    }),
+    __metadata("design:type", Array)
+], OAuth2Token.prototype, "scopes", void 0);
+__decorate([
+    (0, repository_1.belongsTo)(() => oauth2_client_model_1.OAuth2Client, { keyFrom: 'clientId' }, { postgresql: { columnName: 'client_id', dataType: 'integer' } }),
+    __metadata("design:type", Object)
+], OAuth2Token.prototype, "clientId", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'number',
+        postgresql: { columnName: 'user_id', dataType: 'integer' },
+    }),
+    __metadata("design:type", Object)
+], OAuth2Token.prototype, "userId", void 0);
+__decorate([
+    (0, repository_1.property)({
+        type: 'object',
+        postgresql: {
+            columnName: 'details',
+            dataType: 'jsonb',
+        },
+    }),
+    __metadata("design:type", Object)
+], OAuth2Token.prototype, "details", void 0);
+exports.OAuth2Token = OAuth2Token = __decorate([
+    (0, repository_1.model)({
+        settings: {
+            postgresql: {
+                schema: 'open_auth',
+                table: 'OAuth2Token',
+            },
+            hiddenProperties: ['createdAt', 'modifiedAt'],
+        },
+    }),
+    __metadata("design:paramtypes", [Object])
+], OAuth2Token);
+//# sourceMappingURL=oauth2-token.model.js.map

package/dist/components/authenticate/models/oauth2-token.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-token.model.js","sourceRoot":"","sources":["../../../../src/components/authenticate/models/oauth2-token.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0CAAmD;AACnD,qCAAkE;AAClE,qDAAkE;AAClE,+DAAqD;AAW9C,IAAM,WAAW,GAAjB,MAAM,WAAY,SAAQ,2BAAkB;IAkDjD,YAAY,IAA2B;QACrC,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;CACF,CAAA;AArDY,kCAAW;AAItB;IAHC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;KACf,CAAC;;0CACa;AAKf;IAHC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;KACf,CAAC;;yCACY;AAMd;IAJC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,4BAAmB,CAAC,OAAO;KACrC,CAAC;;2CACc;AAWhB;IATC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,EAAE;QACX,UAAU,EAAE;YACV,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,OAAO;SAClB;KACF,CAAC;8BACO,KAAK;2CAAS;AAOvB;IALC,IAAA,sBAAS,EACR,GAAG,EAAE,CAAC,kCAAY,EAClB,EAAE,OAAO,EAAE,UAAU,EAAE,EACvB,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CACjE;;6CACiB;AAMlB;IAJC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE;KAC3D,CAAC;;2CACc;AAShB;IAPC,IAAA,qBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,OAAO;SAClB;KACF,CAAC;;4CACkB;sBAhDT,WAAW;IATvB,IAAA,kBAAK,EAAC;QACL,QAAQ,EAAE;YACR,UAAU,EAAE;gBACV,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,aAAa;aACrB;YACD,gBAAgB,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;SAC9C;KACF,CAAC;;GACW,WAAW,CAqDvB"}

package/dist/components/authenticate/oauth2-handlers/authorization-code.handler.d.ts

@@ -0,0 +1,14 @@
+import { TInjectionGetter } from '../../../common';
+import { AuthorizationCode, AuthorizationCodeModel, Client, Falsey, User } from '@node-oauth/oauth2-server';
+import { AbstractOAuth2AuthenticationHandler } from './base';
+export declare class OAuth2AuthorizationCodeHandler extends AbstractOAuth2AuthenticationHandler implements AuthorizationCodeModel {
+    constructor(opts: {
+        scope?: string;
+        authServiceKey: string;
+        injectionGetter: TInjectionGetter;
+    });
+    getAuthorizationCode(authorizationCode: string): Promise<AuthorizationCode | Falsey>;
+    saveAuthorizationCode(code: Pick<AuthorizationCode, 'authorizationCode' | 'expiresAt' | 'redirectUri' | 'scope' | 'codeChallenge' | 'codeChallengeMethod'>, client: Client, user: User): Promise<AuthorizationCode | Falsey>;
+    revokeAuthorizationCode(code: AuthorizationCode): Promise<boolean>;
+}
+//# sourceMappingURL=authorization-code.handler.d.ts.map

package/dist/components/authenticate/oauth2-handlers/authorization-code.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-code.handler.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/oauth2-handlers/authorization-code.handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,MAAM,EACN,MAAM,EACN,IAAI,EACL,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,mCAAmC,EAAE,MAAM,QAAQ,CAAC;AAE7D,qBAAa,8BACX,SAAQ,mCACR,YAAW,sBAAsB;gBAErB,IAAI,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,gBAAgB,CAAA;KAAE;IAQ/F,oBAAoB,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,MAAM,CAAC;IAqB9E,qBAAqB,CACzB,IAAI,EAAE,IAAI,CACR,iBAAiB,EACf,mBAAmB,GACnB,WAAW,GACX,aAAa,GACb,OAAO,GACP,eAAe,GACf,qBAAqB,CACxB,EACD,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,iBAAiB,GAAG,MAAM,CAAC;IAsCtC,uBAAuB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;CAInE"}

package/dist/components/authenticate/oauth2-handlers/authorization-code.handler.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuth2AuthorizationCodeHandler = void 0;
+const common_1 = require("../common");
+const base_1 = require("./base");
+class OAuth2AuthorizationCodeHandler extends base_1.AbstractOAuth2AuthenticationHandler {
+    constructor(opts) {
+        super({
+            scope: opts.scope,
+            authServiceKey: opts.authServiceKey,
+            injectionGetter: opts.injectionGetter,
+        });
+    }
+    getAuthorizationCode(authorizationCode) {
+        return new Promise((resolve, reject) => {
+            this._getToken({
+                type: common_1.AuthenticationTokenTypes.TYPE_AUTHORIZATION_CODE,
+                token: authorizationCode,
+            })
+                .then(rs => {
+                const { token: oauth2Token, client, user } = rs;
+                resolve({
+                    authorizationCode: oauth2Token.token,
+                    expiresAt: new Date(oauth2Token.details?.expiresAt),
+                    redirectUri: oauth2Token.details?.redirectUri,
+                    scope: oauth2Token.scopes,
+                    client: { ...client, id: client.id.toString() },
+                    user,
+                });
+            })
+                .catch(reject);
+        });
+    }
+    async saveAuthorizationCode(code, client, user) {
+        // Normalize scopes using ScopeManager to ensure consistency
+        const requestedScopes = this.getScopeManager()?.normalizeScopes(code.scope) ?? [];
+        // Validate scopes against configuration
+        const validationResult = await this.validateScopes(requestedScopes);
+        if (!validationResult.valid) {
+            this.logger.warn('[OAuth2 Scope] Invalid scopes requested | Requested: %s | Invalid: %s', requestedScopes.join(', '), validationResult.invalidScopes?.join(', ') ?? 'N/A');
+            // Optionally reject invalid scopes, or just use granted ones
+            // For now, we'll use only the granted scopes
+        }
+        const scopes = validationResult.grantedScopes;
+        this.logger.debug('[OAuth2 Scope] Saving code: %s for client: %s and user: %s with scopes: %s', code.authorizationCode, client.id, user, scopes.join(', ') || '(none - will use defaults)');
+        await this._saveToken({
+            token: code.authorizationCode,
+            type: common_1.AuthenticationTokenTypes.TYPE_AUTHORIZATION_CODE,
+            client,
+            user,
+            scopes,
+            details: code,
+        });
+        return { ...code, client, user };
+    }
+    revokeAuthorizationCode(code) {
+        this.logger.debug('[revokeAuthorizationCode] Revoked code: %j', code);
+        return Promise.resolve(true);
+    }
+}
+exports.OAuth2AuthorizationCodeHandler = OAuth2AuthorizationCodeHandler;
+//# sourceMappingURL=authorization-code.handler.js.map

package/dist/components/authenticate/oauth2-handlers/authorization-code.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-code.handler.js","sourceRoot":"","sources":["../../../../src/components/authenticate/oauth2-handlers/authorization-code.handler.ts"],"names":[],"mappings":";;;AAQA,sCAAqD;AACrD,iCAA6D;AAE7D,MAAa,8BACX,SAAQ,0CAAmC;IAG3C,YAAY,IAAmF;QAC7F,KAAK,CAAC;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAAC,iBAAyB;QAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,iCAAwB,CAAC,uBAAuB;gBACtD,KAAK,EAAE,iBAAiB;aACzB,CAAC;iBACC,IAAI,CAAC,EAAE,CAAC,EAAE;gBACT,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;gBAChD,OAAO,CAAC;oBACN,iBAAiB,EAAE,WAAW,CAAC,KAAK;oBACpC,SAAS,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC;oBACnD,WAAW,EAAE,WAAW,CAAC,OAAO,EAAE,WAAW;oBAC7C,KAAK,EAAE,WAAW,CAAC,MAAM;oBACzB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE;oBAC/C,IAAI;iBACL,CAAC,CAAC;YACL,CAAC,CAAC;iBACD,KAAK,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,IAQC,EACD,MAAc,EACd,IAAU;QAEV,4DAA4D;QAC5D,MAAM,eAAe,GAAa,IAAI,CAAC,eAAe,EAAE,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAE5F,wCAAwC;QACxC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QAEpE,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uEAAuE,EACvE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAC1B,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CACpD,CAAC;YACF,6DAA6D;YAC7D,6CAA6C;QAC/C,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,4EAA4E,EAC5E,IAAI,CAAC,iBAAiB,EACtB,MAAM,CAAC,EAAE,EACT,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,CAClD,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC;YACpB,KAAK,EAAE,IAAI,CAAC,iBAAiB;YAC7B,IAAI,EAAE,iCAAwB,CAAC,uBAAuB;YACtD,MAAM;YACN,IAAI;YACJ,MAAM;YACN,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,uBAAuB,CAAC,IAAuB;QAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,IAAI,CAAC,CAAC;QACtE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;CACF;AAvFD,wEAuFC"}