@gennext/lb-infra 0.2.3 → 0.3.0

package/dist/components/authenticate/oauth2-handlers/scope/scope-manager.js

@@ -0,0 +1,100 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeManager = void 0;
+const helpers_1 = require("../../../../helpers");
+const scope_parser_1 = require("./scope-parser");
+const scope_validator_1 = require("./scope-validator");
+/**
+ * ScopeManager orchestrates scope parsing and validation
+ * This is the main entry point for scope-related operations
+ */
+class ScopeManager {
+    constructor(opts) {
+        const { availableScopes, defaultScopes, scope } = opts;
+        this.logger = helpers_1.LoggerFactory.getLogger([scope ?? ScopeManager.name]);
+        this.parser = new scope_parser_1.ScopeParser({ scope });
+        const validatorOptions = {
+            availableScopes,
+            defaultScopes,
+            supportedResources: ['user'],
+            supportedActions: ['read'],
+        };
+        this.validator = new scope_validator_1.ScopeValidator({ options: validatorOptions, scope });
+        this.logger.info('[constructor] Initialized | Available scopes: %d | Default scopes: %s', availableScopes.length, defaultScopes.join(', '));
+    }
+    /**
+     * Normalize scope input to array format
+     * @param scopes - String, array, or undefined
+     * @returns Array of scope strings
+     */
+    normalizeScopes(scopes) {
+        if (!scopes) {
+            return [];
+        }
+        if (Array.isArray(scopes)) {
+            return scopes.filter(Boolean);
+        }
+        if (typeof scopes === 'string') {
+            return scopes.split(' ').filter(Boolean);
+        }
+        return [];
+    }
+    /**
+     * Validate scopes with normalization
+     * @param scopes - Scopes in any format
+     * @returns Validation result
+     */
+    async validateScopes(scopes) {
+        const normalized = this.normalizeScopes(scopes);
+        return this.validator.validate(normalized);
+    }
+    /**
+     * Parse scopes
+     * @param scopes - Scopes in any format
+     * @returns Array of parsed scopes
+     */
+    parseScopes(scopes) {
+        const normalized = this.normalizeScopes(scopes);
+        return this.parser.parseMultiple(normalized);
+    }
+    /**
+     * Check if a field is allowed
+     * Returns actual field names (handles aliases)
+     * @param relation - Relation name or '_base'
+     * @param field - Field name (can be an alias)
+     * @returns Array of resolved field names
+     */
+    isFieldAllowed(relation, field) {
+        return this.validator.isFieldAllowed(relation, field);
+    }
+    /**
+     * Get default scopes
+     * @returns Array of default scope strings
+     */
+    getDefaultScopes() {
+        return this.validator.getDefaultScopes();
+    }
+    /**
+     * Get available scope definitions
+     * @returns Array of scope definitions
+     */
+    getAvailableScopes() {
+        return this.validator.getAvailableScopes();
+    }
+    /**
+     * Get parser instance
+     * @returns ScopeParser instance
+     */
+    getParser() {
+        return this.parser;
+    }
+    /**
+     * Get validator instance
+     * @returns ScopeValidator instance
+     */
+    getValidator() {
+        return this.validator;
+    }
+}
+exports.ScopeManager = ScopeManager;
+//# sourceMappingURL=scope-manager.js.map

package/dist/components/authenticate/oauth2-handlers/scope/scope-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-manager.js","sourceRoot":"","sources":["../../../../../src/components/authenticate/oauth2-handlers/scope/scope-manager.ts"],"names":[],"mappings":";;;AAAA,uCAA6D;AAE7D,iDAA6C;AAC7C,uDAA2E;AAE3E;;;GAGG;AACH,MAAa,YAAY;IAKvB,YAAY,IAIX;QACC,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAEvD,IAAI,CAAC,MAAM,GAAG,uBAAa,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,GAAG,IAAI,0BAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAEzC,MAAM,gBAAgB,GAA2B;YAC/C,eAAe;YACf,aAAa;YACb,kBAAkB,EAAE,CAAC,MAAM,CAAC;YAC5B,gBAAgB,EAAE,CAAC,MAAM,CAAC;SAC3B,CAAC;QAEF,IAAI,CAAC,SAAS,GAAG,IAAI,gCAAc,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;QAE1E,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uEAAuE,EACvE,eAAe,CAAC,MAAM,EACtB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CACzB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,MAA0B;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,MAA0B;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,MAA0B;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACH,cAAc,CAAC,QAAgB,EAAE,KAAa;QAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAED;;;OAGG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF;AAlHD,oCAkHC"}

package/dist/components/authenticate/oauth2-handlers/scope/scope-parser.d.ts

@@ -0,0 +1,49 @@
+import { IParsedScope } from '../../common';
+/**
+ * ScopeParser handles parsing of hierarchical OAuth2 scopes
+ *
+ * Scope Format: resource:action:path[:subpath...]
+ * Examples:
+ *   - "user:read:basic" -> { resource: 'user', action: 'read', path: ['basic'] }
+ *   - "user:read:profile:firstName" -> { resource: 'user', action: 'read', path: ['profile', 'firstName'] }
+ *   - "user:read:id" -> { resource: 'user', action: 'read', path: ['id'] }
+ */
+export declare class ScopeParser {
+    private logger;
+    private readonly MINIMUM_PARTS;
+    private readonly SEPARATOR;
+    constructor(opts: {
+        scope?: string;
+    });
+    /**
+     * Parse a single scope string into structured format
+     * @param scopeString - The scope string to parse (e.g., "user:read:basic")
+     * @returns Parsed scope object or null if invalid
+     */
+    parse(scopeString: string): IParsedScope | null;
+    /**
+     * Parse multiple scope strings
+     * @param scopeStrings - Array of scope strings or space-separated string
+     * @returns Array of parsed scopes (invalid scopes are filtered out)
+     */
+    parseMultiple(scopeStrings: string[] | string): IParsedScope[];
+    /**
+     * Check if a scope string is valid without fully parsing
+     * @param scopeString - The scope string to validate
+     * @returns true if the scope format is valid
+     */
+    isValidFormat(scopeString: string): boolean;
+    /**
+     * Extract resource from scope string without full parsing
+     * @param scopeString - The scope string
+     * @returns Resource name or null
+     */
+    extractResource(scopeString: string): string | null;
+    /**
+     * Extract action from scope string without full parsing
+     * @param scopeString - The scope string
+     * @returns Action name or null
+     */
+    extractAction(scopeString: string): string | null;
+}
+//# sourceMappingURL=scope-parser.d.ts.map

package/dist/components/authenticate/oauth2-handlers/scope/scope-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-parser.d.ts","sourceRoot":"","sources":["../../../../../src/components/authenticate/oauth2-handlers/scope/scope-parser.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C;;;;;;;;GAQG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAK;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAO;gBAErB,IAAI,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAMpC;;;;OAIG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IA+B/C;;;;OAIG;IACH,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,YAAY,EAAE;IAU9D;;;;OAIG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAI3C;;;;OAIG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAKnD;;;;OAIG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAIlD"}

package/dist/components/authenticate/oauth2-handlers/scope/scope-parser.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeParser = void 0;
+const helpers_1 = require("../../../../helpers");
+/**
+ * ScopeParser handles parsing of hierarchical OAuth2 scopes
+ *
+ * Scope Format: resource:action:path[:subpath...]
+ * Examples:
+ *   - "user:read:basic" -> { resource: 'user', action: 'read', path: ['basic'] }
+ *   - "user:read:profile:firstName" -> { resource: 'user', action: 'read', path: ['profile', 'firstName'] }
+ *   - "user:read:id" -> { resource: 'user', action: 'read', path: ['id'] }
+ */
+class ScopeParser {
+    constructor(opts) {
+        this.MINIMUM_PARTS = 3;
+        this.SEPARATOR = ':';
+        const { scope } = opts;
+        this.logger = helpers_1.LoggerFactory.getLogger([scope ?? ScopeParser.name]);
+    }
+    /**
+     * Parse a single scope string into structured format
+     * @param scopeString - The scope string to parse (e.g., "user:read:basic")
+     * @returns Parsed scope object or null if invalid
+     */
+    parse(scopeString) {
+        if (!scopeString || typeof scopeString !== 'string') {
+            this.logger.warn('[parse] Invalid scope string: %s', scopeString);
+            return null;
+        }
+        const parts = scopeString.trim().split(this.SEPARATOR);
+        if (parts.length < this.MINIMUM_PARTS) {
+            this.logger.warn('[parse] Invalid scope format: %s (expected resource:action:path)', scopeString);
+            return null;
+        }
+        const [resource, action, ...path] = parts;
+        if (!resource || !action || path.length === 0) {
+            this.logger.warn('[parse] Scope has empty parts: %s', scopeString);
+            return null;
+        }
+        return {
+            original: scopeString,
+            resource: resource.toLowerCase(),
+            action: action.toLowerCase(),
+            path: path.map(p => p.trim()).filter(Boolean),
+        };
+    }
+    /**
+     * Parse multiple scope strings
+     * @param scopeStrings - Array of scope strings or space-separated string
+     * @returns Array of parsed scopes (invalid scopes are filtered out)
+     */
+    parseMultiple(scopeStrings) {
+        const scopes = Array.isArray(scopeStrings)
+            ? scopeStrings
+            : scopeStrings.split(' ').filter(Boolean);
+        return scopes
+            .map(scope => this.parse(scope))
+            .filter((parsed) => parsed !== null);
+    }
+    /**
+     * Check if a scope string is valid without fully parsing
+     * @param scopeString - The scope string to validate
+     * @returns true if the scope format is valid
+     */
+    isValidFormat(scopeString) {
+        return this.parse(scopeString) !== null;
+    }
+    /**
+     * Extract resource from scope string without full parsing
+     * @param scopeString - The scope string
+     * @returns Resource name or null
+     */
+    extractResource(scopeString) {
+        const parts = scopeString.split(this.SEPARATOR);
+        return parts.length >= this.MINIMUM_PARTS ? parts[0].toLowerCase() : null;
+    }
+    /**
+     * Extract action from scope string without full parsing
+     * @param scopeString - The scope string
+     * @returns Action name or null
+     */
+    extractAction(scopeString) {
+        const parts = scopeString.split(this.SEPARATOR);
+        return parts.length >= this.MINIMUM_PARTS ? parts[1].toLowerCase() : null;
+    }
+}
+exports.ScopeParser = ScopeParser;
+//# sourceMappingURL=scope-parser.js.map

package/dist/components/authenticate/oauth2-handlers/scope/scope-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-parser.js","sourceRoot":"","sources":["../../../../../src/components/authenticate/oauth2-handlers/scope/scope-parser.ts"],"names":[],"mappings":";;;AAAA,uCAA6D;AAG7D;;;;;;;;GAQG;AACH,MAAa,WAAW;IAKtB,YAAY,IAAwB;QAHnB,kBAAa,GAAG,CAAC,CAAC;QAClB,cAAS,GAAG,GAAG,CAAC;QAG/B,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAEvB,IAAI,CAAC,MAAM,GAAG,uBAAa,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAmB;QACvB,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,WAAW,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kEAAkE,EAClE,WAAW,CACZ,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;QAE1C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,WAAW,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE;YAChC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;SAC9C,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,YAA+B;QAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;YACxC,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE5C,OAAO,MAAM;aACV,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;aAC/B,MAAM,CAAC,CAAC,MAAM,EAA0B,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;IACjE,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,WAAmB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,WAAmB;QACjC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,WAAmB;QAC/B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,CAAC;CACF;AA1FD,kCA0FC"}

package/dist/components/authenticate/oauth2-handlers/scope/scope-validator.d.ts

@@ -0,0 +1,58 @@
+import { IScopeDefinition, IScopeValidationResult } from '../../common';
+export declare const BASE_FIELDS_SCOPE = "_base";
+export interface IScopeValidatorOptions {
+    availableScopes: IScopeDefinition[];
+    defaultScopes: string[];
+    supportedResources?: string[];
+    supportedActions?: string[];
+}
+/**
+ * ScopeValidator validates OAuth2 scopes against configuration
+ * Ensures that requested scopes are allowed and properly formatted
+ */
+export declare class ScopeValidator {
+    private logger;
+    private parser;
+    private options;
+    constructor(opts: {
+        options: IScopeValidatorOptions;
+        scope?: string;
+    });
+    /**
+     * Validate requested scopes against available scopes configuration
+     * @param requestedScopes - Array of scope strings requested by client
+     * @returns Validation result with granted and invalid scopes
+     */
+    validate(requestedScopes: string[]): Promise<IScopeValidationResult>;
+    /**
+     * Validate a single parsed scope
+     * @param parsed - Parsed scope object
+     * @returns Error message if invalid, null if valid
+     */
+    private validateParsedScope;
+    /**
+     * Check if a scope path is valid based on configuration
+     * @param path - Scope path (e.g., ['basic'], ['profile', 'firstName'])
+     * @returns true if valid, false otherwise
+     */
+    private isPathValid;
+    /**
+     * Check if a specific field is allowed in a relation
+     * Supports field aliases mapping (e.g., 'name' -> ['firstName', 'lastName'])
+     * @param relation - Relation name or '_base' for base fields
+     * @param field - Field name (can be an alias)
+     * @returns Array of actual fields allowed, or empty array if not allowed
+     */
+    isFieldAllowed(relation: string, field: string): string[];
+    /**
+     * Get default scopes
+     * @returns Array of default scope strings
+     */
+    getDefaultScopes(): string[];
+    /**
+     * Get available scope definitions
+     * @returns Array of scope definitions
+     */
+    getAvailableScopes(): IScopeDefinition[];
+}
+//# sourceMappingURL=scope-validator.d.ts.map

package/dist/components/authenticate/oauth2-handlers/scope/scope-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-validator.d.ts","sourceRoot":"","sources":["../../../../../src/components/authenticate/oauth2-handlers/scope/scope-validator.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAKtF,eAAO,MAAM,iBAAiB,UAAU,CAAC;AAEzC,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,gBAAgB,EAAE,CAAC;IACpC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,OAAO,CAAyB;gBAE5B,IAAI,EAAE;QAAE,OAAO,EAAE,sBAAsB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAWrE;;;;OAIG;IACG,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC;IA2D1E;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAmB3B;;;;OAIG;IACH,OAAO,CAAC,WAAW;IA4BnB;;;;;;OAMG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE;IAgCzD;;;OAGG;IACH,gBAAgB,IAAI,MAAM,EAAE;IAI5B;;;OAGG;IACH,kBAAkB,IAAI,gBAAgB,EAAE;CAGzC"}

package/dist/components/authenticate/oauth2-handlers/scope/scope-validator.js

@@ -0,0 +1,165 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeValidator = exports.BASE_FIELDS_SCOPE = void 0;
+const helpers_1 = require("../../../../helpers");
+const scope_parser_1 = require("./scope-parser");
+const constants_1 = require("../constants");
+// Constant for base fields scope identifier
+exports.BASE_FIELDS_SCOPE = '_base';
+/**
+ * ScopeValidator validates OAuth2 scopes against configuration
+ * Ensures that requested scopes are allowed and properly formatted
+ */
+class ScopeValidator {
+    constructor(opts) {
+        const { options, scope } = opts;
+        this.logger = helpers_1.LoggerFactory.getLogger([scope ?? ScopeValidator.name]);
+        this.parser = new scope_parser_1.ScopeParser({ scope });
+        this.options = {
+            supportedResources: [constants_1.OAuth2Resources.USER],
+            supportedActions: [constants_1.OAuth2Actions.READ],
+            ...options,
+        };
+    }
+    /**
+     * Validate requested scopes against available scopes configuration
+     * @param requestedScopes - Array of scope strings requested by client
+     * @returns Validation result with granted and invalid scopes
+     */
+    async validate(requestedScopes) {
+        // If no scopes requested, use default scopes
+        if (!requestedScopes || requestedScopes.length === 0) {
+            this.logger.debug('[validate] No scopes requested, using defaults');
+            return {
+                valid: true,
+                grantedScopes: this.options.defaultScopes,
+            };
+        }
+        // If no available scopes configured, grant all (backward compatibility mode)
+        if (this.options.availableScopes.length === 0) {
+            this.logger.warn('[validate] No available scopes configured, granting all requested scopes (backward compatibility)');
+            return {
+                valid: true,
+                grantedScopes: requestedScopes,
+            };
+        }
+        const grantedScopes = [];
+        const invalidScopes = [];
+        for (const scopeString of requestedScopes) {
+            const parsed = this.parser.parse(scopeString);
+            if (!parsed) {
+                invalidScopes.push(scopeString);
+                continue;
+            }
+            const validationError = this.validateParsedScope(parsed);
+            if (validationError) {
+                this.logger.warn('[validate] Invalid scope: %s | Reason: %s', scopeString, validationError);
+                invalidScopes.push(scopeString);
+            }
+            else {
+                grantedScopes.push(scopeString);
+            }
+        }
+        const isValid = invalidScopes.length === 0;
+        this.logger.info('[validate] Validation result | Valid: %s | Requested: %s | Granted: %s | Invalid: %s', isValid, requestedScopes.join(', '), grantedScopes.join(', '), invalidScopes.join(', ') || 'none');
+        return {
+            valid: isValid,
+            grantedScopes,
+            invalidScopes: invalidScopes.length > 0 ? invalidScopes : undefined,
+        };
+    }
+    /**
+     * Validate a single parsed scope
+     * @param parsed - Parsed scope object
+     * @returns Error message if invalid, null if valid
+     */
+    validateParsedScope(parsed) {
+        // Check if resource is supported
+        if (!this.options.supportedResources?.includes(parsed.resource)) {
+            return `Unsupported resource: ${parsed.resource}`;
+        }
+        // Check if action is supported
+        if (!this.options.supportedActions?.includes(parsed.action)) {
+            return `Unsupported action: ${parsed.action}`;
+        }
+        // Validate path against available scopes
+        if (!this.isPathValid(parsed.path)) {
+            return `Invalid path: ${parsed.path.join(':')}`;
+        }
+        return null;
+    }
+    /**
+     * Check if a scope path is valid based on configuration
+     * @param path - Scope path (e.g., ['basic'], ['profile', 'firstName'])
+     * @returns true if valid, false otherwise
+     */
+    isPathValid(path) {
+        if (path.length === 0) {
+            return false;
+        }
+        const [firstPart] = path;
+        // Check if it's a scope group identifier
+        const isScopeGroup = this.options.availableScopes.some(s => s.identifier === firstPart);
+        if (isScopeGroup) {
+            return true;
+        }
+        // For single-level paths, allow as direct field access
+        if (path.length === 1) {
+            return true;
+        }
+        // For nested paths, check if relation exists in any scope group
+        const [relation] = path;
+        const hasRelation = this.options.availableScopes.some(s => s.relations?.some(r => r.relation === relation));
+        return hasRelation;
+    }
+    /**
+     * Check if a specific field is allowed in a relation
+     * Supports field aliases mapping (e.g., 'name' -> ['firstName', 'lastName'])
+     * @param relation - Relation name or '_base' for base fields
+     * @param field - Field name (can be an alias)
+     * @returns Array of actual fields allowed, or empty array if not allowed
+     */
+    isFieldAllowed(relation, field) {
+        const allowedFields = [];
+        for (const scopeConfig of this.options.availableScopes) {
+            // Check base fields
+            if (relation === exports.BASE_FIELDS_SCOPE && scopeConfig.fields) {
+                if (scopeConfig.fields.includes(field)) {
+                    allowedFields.push(field);
+                }
+            }
+            // Check relation fields and aliases
+            if (scopeConfig.relations) {
+                for (const rel of scopeConfig.relations) {
+                    if (rel.relation === relation) {
+                        // Check if field is a direct field
+                        if (rel.fields?.includes(field)) {
+                            allowedFields.push(field);
+                        }
+                        // Check if field is an alias
+                        if (rel.fieldAliases?.[field]) {
+                            allowedFields.push(...rel.fieldAliases[field]);
+                        }
+                    }
+                }
+            }
+        }
+        return allowedFields;
+    }
+    /**
+     * Get default scopes
+     * @returns Array of default scope strings
+     */
+    getDefaultScopes() {
+        return this.options.defaultScopes;
+    }
+    /**
+     * Get available scope definitions
+     * @returns Array of scope definitions
+     */
+    getAvailableScopes() {
+        return this.options.availableScopes;
+    }
+}
+exports.ScopeValidator = ScopeValidator;
+//# sourceMappingURL=scope-validator.js.map

package/dist/components/authenticate/oauth2-handlers/scope/scope-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-validator.js","sourceRoot":"","sources":["../../../../../src/components/authenticate/oauth2-handlers/scope/scope-validator.ts"],"names":[],"mappings":";;;AAAA,uCAA6D;AAE7D,iDAA6C;AAC7C,4CAA8D;AAE9D,4CAA4C;AAC/B,QAAA,iBAAiB,GAAG,OAAO,CAAC;AASzC;;;GAGG;AACH,MAAa,cAAc;IAKzB,YAAY,IAAyD;QACnE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,uBAAa,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,GAAG,IAAI,0BAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG;YACb,kBAAkB,EAAE,CAAC,2BAAe,CAAC,IAAI,CAAC;YAC1C,gBAAgB,EAAE,CAAC,yBAAa,CAAC,IAAI,CAAC;YACtC,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,eAAyB;QACtC,6CAA6C;QAC7C,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;aAC1C,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,mGAAmG,CACpG,CAAC;YACF,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,aAAa,EAAE,eAAe;aAC/B,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,MAAM,aAAa,GAAa,EAAE,CAAC;QAEnC,KAAK,MAAM,WAAW,IAAI,eAAe,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAE9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAChC,SAAS;YACX,CAAC;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAEzD,IAAI,eAAe,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;gBAC5F,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC;QAE3C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,sFAAsF,EACtF,OAAO,EACP,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAC1B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EACxB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CACnC,CAAC;QAEF,OAAO;YACL,KAAK,EAAE,OAAO;YACd,aAAa;YACb,aAAa,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,mBAAmB,CAAC,MAAoB;QAC9C,iCAAiC;QACjC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,OAAO,yBAAyB,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpD,CAAC;QAED,+BAA+B;QAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,OAAO,uBAAuB,MAAM,CAAC,MAAM,EAAE,CAAC;QAChD,CAAC;QAED,yCAAyC;QACzC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,OAAO,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACK,WAAW,CAAC,IAAc;QAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;QAEzB,yCAAyC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;QAExF,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uDAAuD;QACvD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,gEAAgE;QAChE,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QACxB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACxD,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAChD,CAAC;QAEF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;OAMG;IACH,cAAc,CAAC,QAAgB,EAAE,KAAa;QAC5C,MAAM,aAAa,GAAa,EAAE,CAAC;QAEnC,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YACvD,oBAAoB;YACpB,IAAI,QAAQ,KAAK,yBAAiB,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;gBACzD,IAAI,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAED,oCAAoC;YACpC,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;gBAC1B,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;oBACxC,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAC9B,mCAAmC;wBACnC,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;4BAChC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBAC5B,CAAC;wBAED,6BAA6B;wBAC7B,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;4BAC9B,aAAa,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;wBACjD,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;IACtC,CAAC;CACF;AA/LD,wCA+LC"}

package/dist/components/authenticate/repositories/index.d.ts

@@ -0,0 +1,2 @@
+export * from './oauth2.repository';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/authenticate/repositories/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/repositories/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/components/authenticate/repositories/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./oauth2.repository"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/authenticate/repositories/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/components/authenticate/repositories/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAoC"}

package/dist/components/authenticate/repositories/oauth2.repository.d.ts

@@ -0,0 +1,18 @@
+import { BaseDataSource } from '../../../base/datasources';
+import { TzCrudRepository } from '../../../base/repositories';
+import { Getter } from '@loopback/core';
+import { OAuth2Client, OAuth2Scope, OAuth2Token } from '../models';
+import { IdType } from '../../../common';
+import { BelongsToAccessor } from '@loopback/repository';
+export declare class OAuth2ClientRepository extends TzCrudRepository<OAuth2Client> {
+    constructor(dataSource: BaseDataSource);
+}
+export declare class OAuth2ScopeRepository extends TzCrudRepository<OAuth2Scope> {
+    constructor(dataSource: BaseDataSource);
+}
+export declare class OAuth2TokenRepository extends TzCrudRepository<OAuth2Token> {
+    protected oauth2ClientRepository: Getter<OAuth2ClientRepository>;
+    readonly client: BelongsToAccessor<OAuth2Client, IdType>;
+    constructor(dataSource: BaseDataSource, oauth2ClientRepository: Getter<OAuth2ClientRepository>);
+}
+//# sourceMappingURL=oauth2.repository.d.ts.map

package/dist/components/authenticate/repositories/oauth2.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2.repository.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/repositories/oauth2.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAU,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAc,MAAM,sBAAsB,CAAC;AAOrE,qBAAa,sBAAuB,SAAQ,gBAAgB,CAAC,YAAY,CAAC;gBACxB,UAAU,EAAE,cAAc;CAS3E;AAED,qBAAa,qBAAsB,SAAQ,gBAAgB,CAAC,WAAW,CAAC;gBACtB,UAAU,EAAE,cAAc;CAS3E;AAED,qBAAa,qBAAsB,SAAQ,gBAAgB,CAAC,WAAW,CAAC;IAMpE,SAAS,CAAC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,CAAC;IALlE,SAAgB,MAAM,EAAE,iBAAiB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;gBAG1B,UAAU,EAAE,cAAc,EAEpD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,CAAC;CAanE"}

package/dist/components/authenticate/repositories/oauth2.repository.js

@@ -0,0 +1,78 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuth2TokenRepository = exports.OAuth2ScopeRepository = exports.OAuth2ClientRepository = void 0;
+const datasources_1 = require("../../../base/datasources");
+const repositories_1 = require("../../../base/repositories");
+const core_1 = require("@loopback/core");
+const models_1 = require("../models");
+const utilities_1 = require("../../../utilities");
+const repository_1 = require("@loopback/repository");
+const isEmpty_1 = __importDefault(require("lodash/isEmpty"));
+const DS_OAUTH2 = process.env.APP_ENV_APPLICATION_DS_OAUTH2
+    ? process.env.APP_ENV_APPLICATION_DS_OAUTH2
+    : process.env.APP_ENV_APPLICATION_DS_AUTHORIZE;
+let OAuth2ClientRepository = class OAuth2ClientRepository extends repositories_1.TzCrudRepository {
+    constructor(dataSource) {
+        if (!DS_OAUTH2 || (0, isEmpty_1.default)(DS_OAUTH2)) {
+            throw (0, utilities_1.getError)({
+                message: `[AUTHORIZE][DANGER] INVALID DATABASE CONFIGURE | Missing env: DS_AUTHORIZE`,
+            });
+        }
+        super(models_1.OAuth2Client, dataSource);
+    }
+};
+exports.OAuth2ClientRepository = OAuth2ClientRepository;
+exports.OAuth2ClientRepository = OAuth2ClientRepository = __decorate([
+    __param(0, (0, core_1.inject)(`datasources.${DS_OAUTH2}`)),
+    __metadata("design:paramtypes", [datasources_1.BaseDataSource])
+], OAuth2ClientRepository);
+let OAuth2ScopeRepository = class OAuth2ScopeRepository extends repositories_1.TzCrudRepository {
+    constructor(dataSource) {
+        if (!DS_OAUTH2 || (0, isEmpty_1.default)(DS_OAUTH2)) {
+            throw (0, utilities_1.getError)({
+                message: `[AUTHORIZE][DANGER] INVALID DATABASE CONFIGURE | Missing env: DS_AUTHORIZE`,
+            });
+        }
+        super(models_1.OAuth2Scope, dataSource);
+    }
+};
+exports.OAuth2ScopeRepository = OAuth2ScopeRepository;
+exports.OAuth2ScopeRepository = OAuth2ScopeRepository = __decorate([
+    __param(0, (0, core_1.inject)(`datasources.${DS_OAUTH2}`)),
+    __metadata("design:paramtypes", [datasources_1.BaseDataSource])
+], OAuth2ScopeRepository);
+let OAuth2TokenRepository = class OAuth2TokenRepository extends repositories_1.TzCrudRepository {
+    constructor(dataSource, oauth2ClientRepository) {
+        if (!DS_OAUTH2 || (0, isEmpty_1.default)(DS_OAUTH2)) {
+            throw (0, utilities_1.getError)({
+                message: `[AUTHORIZE][DANGER] INVALID DATABASE CONFIGURE | Missing env: DS_AUTHORIZE`,
+            });
+        }
+        super(models_1.OAuth2Token, dataSource);
+        this.oauth2ClientRepository = oauth2ClientRepository;
+        this.client = this.createBelongsToAccessorFor('client', oauth2ClientRepository);
+        this.registerInclusionResolver('client', this.client.inclusionResolver);
+    }
+};
+exports.OAuth2TokenRepository = OAuth2TokenRepository;
+exports.OAuth2TokenRepository = OAuth2TokenRepository = __decorate([
+    __param(0, (0, core_1.inject)(`datasources.${DS_OAUTH2}`)),
+    __param(1, repository_1.repository.getter('OAuth2ScopeRepository')),
+    __metadata("design:paramtypes", [datasources_1.BaseDataSource, Function])
+], OAuth2TokenRepository);
+//# sourceMappingURL=oauth2.repository.js.map

package/dist/components/authenticate/repositories/oauth2.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2.repository.js","sourceRoot":"","sources":["../../../../src/components/authenticate/repositories/oauth2.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,oDAAoD;AACpD,sDAAuD;AACvD,yCAAgD;AAChD,sCAAmE;AAGnE,2CAAuC;AACvC,qDAAqE;AACrE,6DAAqC;AAErC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B;IACzD,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B;IAC3C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;AAEjD,IAAa,sBAAsB,GAAnC,MAAa,sBAAuB,SAAQ,+BAA8B;IACxE,YAAgD,UAA0B;QACxE,IAAI,CAAC,SAAS,IAAI,IAAA,iBAAO,EAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,IAAA,oBAAQ,EAAC;gBACb,OAAO,EAAE,4EAA4E;aACtF,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,qBAAY,EAAE,UAAU,CAAC,CAAC;IAClC,CAAC;CACF,CAAA;AAVY,wDAAsB;iCAAtB,sBAAsB;IACpB,WAAA,IAAA,aAAM,EAAC,eAAe,SAAS,EAAE,CAAC,CAAA;qCAAa,4BAAc;GAD/D,sBAAsB,CAUlC;AAED,IAAa,qBAAqB,GAAlC,MAAa,qBAAsB,SAAQ,+BAA6B;IACtE,YAAgD,UAA0B;QACxE,IAAI,CAAC,SAAS,IAAI,IAAA,iBAAO,EAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,IAAA,oBAAQ,EAAC;gBACb,OAAO,EAAE,4EAA4E;aACtF,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,oBAAW,EAAE,UAAU,CAAC,CAAC;IACjC,CAAC;CACF,CAAA;AAVY,sDAAqB;gCAArB,qBAAqB;IACnB,WAAA,IAAA,aAAM,EAAC,eAAe,SAAS,EAAE,CAAC,CAAA;qCAAa,4BAAc;GAD/D,qBAAqB,CAUjC;AAED,IAAa,qBAAqB,GAAlC,MAAa,qBAAsB,SAAQ,+BAA6B;IAGtE,YACsC,UAA0B,EAEpD,sBAAsD;QAEhE,IAAI,CAAC,SAAS,IAAI,IAAA,iBAAO,EAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,IAAA,oBAAQ,EAAC;gBACb,OAAO,EAAE,4EAA4E;aACtF,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,oBAAW,EAAE,UAAU,CAAC,CAAC;QARrB,2BAAsB,GAAtB,sBAAsB,CAAgC;QAUhE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;QAChF,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC1E,CAAC;CACF,CAAA;AAnBY,sDAAqB;gCAArB,qBAAqB;IAI7B,WAAA,IAAA,aAAM,EAAC,eAAe,SAAS,EAAE,CAAC,CAAA;IAClC,WAAA,uBAAU,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAA;qCADK,4BAAc;GAJrD,qBAAqB,CAmBjC"}

package/dist/components/authenticate/services/basic-token.service.d.ts

@@ -0,0 +1,9 @@
+import { BaseService } from '../../../base/services';
+export declare class BasicTokenService extends BaseService {
+    constructor();
+    verify(credential: {
+        username: string;
+        password: string;
+    }): Promise<any>;
+}
+//# sourceMappingURL=basic-token.service.d.ts.map

package/dist/components/authenticate/services/basic-token.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic-token.service.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/services/basic-token.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,qBAAa,iBAAkB,SAAQ,WAAW;;IAK1C,MAAM,CAAC,UAAU,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;CAqB/E"}