@nathapp/nestjs-oauth-prisma 1.0.0

package/dist/prisma-oauth-client.repository.js

@@ -0,0 +1,193 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrismaOAuthClientRepository = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_prisma_1 = require("@nathapp/nestjs-prisma");
+const nestjs_data_1 = require("@nathapp/nestjs-data");
+const oauth_prisma_types_1 = require("./oauth-prisma.types");
+let PrismaOAuthClientRepository = class PrismaOAuthClientRepository extends nestjs_prisma_1.AbstractPrismaRepository {
+    constructor(tx) { super(tx); }
+    modelDelegate(client) {
+        return (0, oauth_prisma_types_1.getOAuthPrismaDelegate)(client, 'oAuthClient');
+    }
+    get oauthModel() {
+        return this.modelDelegate(this.tx.getClient());
+    }
+    toDomain(e) {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u, _v;
+        return {
+            id: e.id,
+            tenantId: (_a = e.tenantId) !== null && _a !== void 0 ? _a : undefined,
+            clientId: e.clientId,
+            clientSecretHash: (_b = e.clientSecretHash) !== null && _b !== void 0 ? _b : undefined,
+            name: e.name,
+            description: (_c = e.description) !== null && _c !== void 0 ? _c : undefined,
+            clientType: e.clientType,
+            redirectUris: ((_d = e.redirectUris) !== null && _d !== void 0 ? _d : []),
+            postLogoutRedirectUris: ((_e = e.postLogoutRedirectUris) !== null && _e !== void 0 ? _e : []),
+            grantTypes: ((_f = e.grantTypes) !== null && _f !== void 0 ? _f : []),
+            responseTypes: ((_g = e.responseTypes) !== null && _g !== void 0 ? _g : []),
+            accessTokenTtl: e.accessTokenTtl,
+            refreshTokenTtl: e.refreshTokenTtl,
+            authCodeTtl: e.authCodeTtl,
+            pkceRequired: e.pkceRequired,
+            requireConsent: e.requireConsent,
+            dpopBoundAccessTokens: e.dpopBoundAccessTokens,
+            backchannelLogoutUri: (_h = e.backchannelLogoutUri) !== null && _h !== void 0 ? _h : undefined,
+            backchannelLogoutSessionRequired: (_j = e.backchannelLogoutSessionRequired) !== null && _j !== void 0 ? _j : false,
+            frontchannelLogoutUri: (_k = e.frontchannelLogoutUri) !== null && _k !== void 0 ? _k : undefined,
+            frontchannelLogoutSessionRequired: (_l = e.frontchannelLogoutSessionRequired) !== null && _l !== void 0 ? _l : false,
+            tokenEndpointAuthMethod: (_m = e.tokenEndpointAuthMethod) !== null && _m !== void 0 ? _m : undefined,
+            jwks: (0, oauth_prisma_types_1.asJsonObject)(e.jwks),
+            jwksUri: (_o = e.jwksUri) !== null && _o !== void 0 ? _o : undefined,
+            tlsClientAuthSubjectDn: (_p = e.tlsClientAuthSubjectDn) !== null && _p !== void 0 ? _p : undefined,
+            tlsClientAuthSanDns: (_q = e.tlsClientAuthSanDns) !== null && _q !== void 0 ? _q : undefined,
+            tlsClientAuthSelfSignedThumbprint: (_r = e.tlsClientAuthSelfSignedThumbprint) !== null && _r !== void 0 ? _r : undefined,
+            clientSecretHashPrevious: (_s = e.clientSecretHashPrevious) !== null && _s !== void 0 ? _s : undefined,
+            previousSecretExpiresAt: (_t = e.previousSecretExpiresAt) !== null && _t !== void 0 ? _t : undefined,
+            allowedResources: ((_u = e.allowedResources) !== null && _u !== void 0 ? _u : []),
+            requireResource: (_v = e.requireResource) !== null && _v !== void 0 ? _v : false,
+            status: e.status,
+            createdAt: e.createdAt,
+            updatedAt: e.updatedAt,
+        };
+    }
+    toPersistenceCreate(d) {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u;
+        return {
+            id: d.id,
+            tenantId: (_a = d.tenantId) !== null && _a !== void 0 ? _a : null,
+            clientId: d.clientId,
+            clientSecretHash: (_b = d.clientSecretHash) !== null && _b !== void 0 ? _b : null,
+            name: d.name,
+            description: (_c = d.description) !== null && _c !== void 0 ? _c : null,
+            clientType: d.clientType,
+            redirectUris: d.redirectUris,
+            postLogoutRedirectUris: (_d = d.postLogoutRedirectUris) !== null && _d !== void 0 ? _d : [],
+            grantTypes: d.grantTypes,
+            responseTypes: d.responseTypes,
+            accessTokenTtl: d.accessTokenTtl,
+            refreshTokenTtl: d.refreshTokenTtl,
+            authCodeTtl: d.authCodeTtl,
+            pkceRequired: d.pkceRequired,
+            requireConsent: d.requireConsent,
+            dpopBoundAccessTokens: (_e = d.dpopBoundAccessTokens) !== null && _e !== void 0 ? _e : false,
+            backchannelLogoutUri: (_f = d.backchannelLogoutUri) !== null && _f !== void 0 ? _f : null,
+            backchannelLogoutSessionRequired: (_g = d.backchannelLogoutSessionRequired) !== null && _g !== void 0 ? _g : null,
+            frontchannelLogoutUri: (_h = d.frontchannelLogoutUri) !== null && _h !== void 0 ? _h : null,
+            frontchannelLogoutSessionRequired: (_j = d.frontchannelLogoutSessionRequired) !== null && _j !== void 0 ? _j : null,
+            tokenEndpointAuthMethod: (_k = d.tokenEndpointAuthMethod) !== null && _k !== void 0 ? _k : null,
+            jwks: (_l = d.jwks) !== null && _l !== void 0 ? _l : null,
+            jwksUri: (_m = d.jwksUri) !== null && _m !== void 0 ? _m : null,
+            tlsClientAuthSubjectDn: (_o = d.tlsClientAuthSubjectDn) !== null && _o !== void 0 ? _o : null,
+            tlsClientAuthSanDns: (_p = d.tlsClientAuthSanDns) !== null && _p !== void 0 ? _p : null,
+            tlsClientAuthSelfSignedThumbprint: (_q = d.tlsClientAuthSelfSignedThumbprint) !== null && _q !== void 0 ? _q : null,
+            clientSecretHashPrevious: (_r = d.clientSecretHashPrevious) !== null && _r !== void 0 ? _r : null,
+            previousSecretExpiresAt: (_s = d.previousSecretExpiresAt) !== null && _s !== void 0 ? _s : null,
+            allowedResources: (_t = d.allowedResources) !== null && _t !== void 0 ? _t : [],
+            requireResource: (_u = d.requireResource) !== null && _u !== void 0 ? _u : false,
+            status: d.status,
+        };
+    }
+    toPersistenceUpdate(p) {
+        const out = {};
+        if (p.name !== undefined)
+            out.name = p.name;
+        if (p.description !== undefined)
+            out.description = p.description;
+        if (p.redirectUris !== undefined)
+            out.redirectUris = p.redirectUris;
+        if (p.postLogoutRedirectUris !== undefined)
+            out.postLogoutRedirectUris = p.postLogoutRedirectUris;
+        if (p.grantTypes !== undefined)
+            out.grantTypes = p.grantTypes;
+        if (p.responseTypes !== undefined)
+            out.responseTypes = p.responseTypes;
+        if (p.accessTokenTtl !== undefined)
+            out.accessTokenTtl = p.accessTokenTtl;
+        if (p.refreshTokenTtl !== undefined)
+            out.refreshTokenTtl = p.refreshTokenTtl;
+        if (p.authCodeTtl !== undefined)
+            out.authCodeTtl = p.authCodeTtl;
+        if (p.pkceRequired !== undefined)
+            out.pkceRequired = p.pkceRequired;
+        if (p.requireConsent !== undefined)
+            out.requireConsent = p.requireConsent;
+        if (p.dpopBoundAccessTokens !== undefined)
+            out.dpopBoundAccessTokens = p.dpopBoundAccessTokens;
+        if (p.backchannelLogoutUri !== undefined)
+            out.backchannelLogoutUri = p.backchannelLogoutUri;
+        if (p.backchannelLogoutSessionRequired !== undefined)
+            out.backchannelLogoutSessionRequired = p.backchannelLogoutSessionRequired;
+        if (p.frontchannelLogoutUri !== undefined)
+            out.frontchannelLogoutUri = p.frontchannelLogoutUri;
+        if (p.frontchannelLogoutSessionRequired !== undefined)
+            out.frontchannelLogoutSessionRequired = p.frontchannelLogoutSessionRequired;
+        if (p.status !== undefined)
+            out.status = p.status;
+        if (p.clientSecretHash !== undefined)
+            out.clientSecretHash = p.clientSecretHash;
+        if (p.tokenEndpointAuthMethod !== undefined)
+            out.tokenEndpointAuthMethod = p.tokenEndpointAuthMethod;
+        if (p.jwks !== undefined)
+            out.jwks = p.jwks;
+        if (p.jwksUri !== undefined)
+            out.jwksUri = p.jwksUri;
+        if (p.tlsClientAuthSubjectDn !== undefined)
+            out.tlsClientAuthSubjectDn = p.tlsClientAuthSubjectDn;
+        if (p.tlsClientAuthSanDns !== undefined)
+            out.tlsClientAuthSanDns = p.tlsClientAuthSanDns;
+        if (p.tlsClientAuthSelfSignedThumbprint !== undefined)
+            out.tlsClientAuthSelfSignedThumbprint = p.tlsClientAuthSelfSignedThumbprint;
+        if (p.clientSecretHashPrevious !== undefined)
+            out.clientSecretHashPrevious = p.clientSecretHashPrevious;
+        if (p.previousSecretExpiresAt !== undefined)
+            out.previousSecretExpiresAt = p.previousSecretExpiresAt;
+        if (p.allowedResources !== undefined)
+            out.allowedResources = p.allowedResources;
+        if (p.requireResource !== undefined)
+            out.requireResource = p.requireResource;
+        return out;
+    }
+    async update(idOrClientId, patch) {
+        let existing = await this.oauthModel.findUnique({ where: { id: idOrClientId } });
+        if (!existing) {
+            existing = await this.oauthModel.findUnique({ where: { clientId: idOrClientId } });
+        }
+        const id = existing ? existing.id : idOrClientId;
+        const data = this.toPersistenceUpdate(patch);
+        const updated = await this.oauthModel.update({ where: { id }, data });
+        return this.toDomain(updated);
+    }
+    async findByClientId(clientId) {
+        const e = await this.oauthModel.findUnique({ where: { clientId } });
+        return e ? this.toDomain(e) : null;
+    }
+    async findByClientIds(clientIds) {
+        return (await this.oauthModel.findMany({ where: { clientId: { in: clientIds } } })).map((r) => this.toDomain(r));
+    }
+    async findPage(query) {
+        const where = query.tenantId ? { tenantId: query.tenantId } : {};
+        const result = await (0, nestjs_prisma_1.Paginate)(this.oauthModel, query, { where, orderBy: { createdAt: 'desc' } });
+        return result.remap((row) => this.toDomain(row));
+    }
+};
+exports.PrismaOAuthClientRepository = PrismaOAuthClientRepository;
+exports.PrismaOAuthClientRepository = PrismaOAuthClientRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(nestjs_data_1.TRANSACTION_MANAGER)),
+    __metadata("design:paramtypes", [Object])
+], PrismaOAuthClientRepository);
+//# sourceMappingURL=prisma-oauth-client.repository.js.map

package/dist/prisma-oauth-client.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-oauth-client.repository.js","sourceRoot":"","sources":["../lib/prisma-oauth-client.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,0DAAmG;AACnG,sDAAgF;AAUhF,6DAA2H;AAGpH,IAAM,2BAA2B,GAAjC,MAAM,2BACX,SAAQ,wCAA8D;IAGtE,YAAyC,EAAuB,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEtE,aAAa,CAAC,MAAwB;QAC9C,OAAO,IAAA,2CAAsB,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACvD,CAAC;IAED,IAAY,UAAU;QACpB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,EAAoB,CAAC,CAAC;IACnE,CAAC;IAES,QAAQ,CAAC,CAAiB;;QAClC,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,SAAS;YACjC,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,gBAAgB,EAAE,MAAA,CAAC,CAAC,gBAAgB,mCAAI,SAAS;YACjD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,MAAA,CAAC,CAAC,WAAW,mCAAI,SAAS;YACvC,UAAU,EAAE,CAAC,CAAC,UAA6B;YAC3C,YAAY,EAAE,CAAC,MAAA,CAAC,CAAC,YAAY,mCAAI,EAAE,CAAa;YAChD,sBAAsB,EAAE,CAAC,MAAA,CAAC,CAAC,sBAAsB,mCAAI,EAAE,CAAa;YACpE,UAAU,EAAE,CAAC,MAAA,CAAC,CAAC,UAAU,mCAAI,EAAE,CAAa;YAC5C,aAAa,EAAE,CAAC,MAAA,CAAC,CAAC,aAAa,mCAAI,EAAE,CAAa;YAClD,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,YAAY,EAAE,CAAC,CAAC,YAA+B;YAC/C,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,qBAAqB,EAAE,CAAC,CAAC,qBAAqB;YAC9C,oBAAoB,EAAE,MAAA,CAAC,CAAC,oBAAoB,mCAAI,SAAS;YACzD,gCAAgC,EAAE,MAAA,CAAC,CAAC,gCAAgC,mCAAI,KAAK;YAC7E,qBAAqB,EAAE,MAAA,CAAC,CAAC,qBAAqB,mCAAI,SAAS;YAC3D,iCAAiC,EAAE,MAAA,CAAC,CAAC,iCAAiC,mCAAI,KAAK;YAC/E,uBAAuB,EAAE,MAAA,CAAC,CAAC,uBAAuB,mCAAI,SAAS;YAC/D,IAAI,EAAE,IAAA,iCAAY,EAAC,CAAC,CAAC,IAAI,CAAC;YAC1B,OAAO,EAAE,MAAA,CAAC,CAAC,OAAO,mCAAI,SAAS;YAC/B,sBAAsB,EAAE,MAAA,CAAC,CAAC,sBAAsB,mCAAI,SAAS;YAC7D,mBAAmB,EAAE,MAAA,CAAC,CAAC,mBAAmB,mCAAI,SAAS;YACvD,iCAAiC,EAAE,MAAA,CAAC,CAAC,iCAAiC,mCAAI,SAAS;YACnF,wBAAwB,EAAE,MAAA,CAAC,CAAC,wBAAwB,mCAAI,SAAS;YACjE,uBAAuB,EAAE,MAAA,CAAC,CAAC,uBAAuB,mCAAI,SAAS;YAC/D,gBAAgB,EAAE,CAAC,MAAA,CAAC,CAAC,gBAAgB,mCAAI,EAAE,CAAa;YACxD,eAAe,EAAE,MAAA,CAAC,CAAC,eAAe,mCAAI,KAAK;YAC3C,MAAM,EAAE,CAAC,CAAC,MAA2B;YACrC,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC;IACJ,CAAC;IAES,mBAAmB,CAAC,CAAe;;QAC3C,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,IAAI;YAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,gBAAgB,EAAE,MAAA,CAAC,CAAC,gBAAgB,mCAAI,IAAI;YAC5C,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,MAAA,CAAC,CAAC,WAAW,mCAAI,IAAI;YAClC,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,sBAAsB,EAAE,MAAA,CAAC,CAAC,sBAAsB,mCAAI,EAAE;YACtD,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,qBAAqB,EAAE,MAAA,CAAC,CAAC,qBAAqB,mCAAI,KAAK;YACvD,oBAAoB,EAAE,MAAA,CAAC,CAAC,oBAAoB,mCAAI,IAAI;YACpD,gCAAgC,EAAE,MAAA,CAAC,CAAC,gCAAgC,mCAAI,IAAI;YAC5E,qBAAqB,EAAE,MAAA,CAAC,CAAC,qBAAqB,mCAAI,IAAI;YACtD,iCAAiC,EAAE,MAAA,CAAC,CAAC,iCAAiC,mCAAI,IAAI;YAC9E,uBAAuB,EAAE,MAAA,CAAC,CAAC,uBAAuB,mCAAI,IAAI;YAC1D,IAAI,EAAE,MAAA,CAAC,CAAC,IAAI,mCAAI,IAAI;YACpB,OAAO,EAAE,MAAA,CAAC,CAAC,OAAO,mCAAI,IAAI;YAC1B,sBAAsB,EAAE,MAAA,CAAC,CAAC,sBAAsB,mCAAI,IAAI;YACxD,mBAAmB,EAAE,MAAA,CAAC,CAAC,mBAAmB,mCAAI,IAAI;YAClD,iCAAiC,EAAE,MAAA,CAAC,CAAC,iCAAiC,mCAAI,IAAI;YAC9E,wBAAwB,EAAE,MAAA,CAAC,CAAC,wBAAwB,mCAAI,IAAI;YAC5D,uBAAuB,EAAE,MAAA,CAAC,CAAC,uBAAuB,mCAAI,IAAI;YAC1D,gBAAgB,EAAE,MAAA,CAAC,CAAC,gBAAgB,mCAAI,EAAE;YAC1C,eAAe,EAAE,MAAA,CAAC,CAAC,eAAe,mCAAI,KAAK;YAC3C,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC;IACJ,CAAC;IAES,mBAAmB,CAAC,CAAwB;QACpD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QAC5C,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;YAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;QACjE,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;QACpE,IAAI,CAAC,CAAC,sBAAsB,KAAK,SAAS;YAAE,GAAG,CAAC,sBAAsB,GAAG,CAAC,CAAC,sBAAsB,CAAC;QAClG,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;YAAE,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;QAC9D,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS;YAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;QACvE,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS;YAAE,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC;QAC1E,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS;YAAE,GAAG,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CAAC;QAC7E,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;YAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;QACjE,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;QACpE,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS;YAAE,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC;QAC1E,IAAI,CAAC,CAAC,qBAAqB,KAAK,SAAS;YAAE,GAAG,CAAC,qBAAqB,GAAG,CAAC,CAAC,qBAAqB,CAAC;QAC/F,IAAI,CAAC,CAAC,oBAAoB,KAAK,SAAS;YAAE,GAAG,CAAC,oBAAoB,GAAG,CAAC,CAAC,oBAAoB,CAAC;QAC5F,IAAI,CAAC,CAAC,gCAAgC,KAAK,SAAS;YAAE,GAAG,CAAC,gCAAgC,GAAG,CAAC,CAAC,gCAAgC,CAAC;QAChI,IAAI,CAAC,CAAC,qBAAqB,KAAK,SAAS;YAAE,GAAG,CAAC,qBAAqB,GAAG,CAAC,CAAC,qBAAqB,CAAC;QAC/F,IAAI,CAAC,CAAC,iCAAiC,KAAK,SAAS;YAAE,GAAG,CAAC,iCAAiC,GAAG,CAAC,CAAC,iCAAiC,CAAC;QACnI,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QAClD,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS;YAAE,GAAG,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC;QAChF,IAAI,CAAC,CAAC,uBAAuB,KAAK,SAAS;YAAE,GAAG,CAAC,uBAAuB,GAAG,CAAC,CAAC,uBAAuB,CAAC;QACrG,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QAC5C,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QACrD,IAAI,CAAC,CAAC,sBAAsB,KAAK,SAAS;YAAE,GAAG,CAAC,sBAAsB,GAAG,CAAC,CAAC,sBAAsB,CAAC;QAClG,IAAI,CAAC,CAAC,mBAAmB,KAAK,SAAS;YAAE,GAAG,CAAC,mBAAmB,GAAG,CAAC,CAAC,mBAAmB,CAAC;QACzF,IAAI,CAAC,CAAC,iCAAiC,KAAK,SAAS;YAAE,GAAG,CAAC,iCAAiC,GAAG,CAAC,CAAC,iCAAiC,CAAC;QACnI,IAAI,CAAC,CAAC,wBAAwB,KAAK,SAAS;YAAE,GAAG,CAAC,wBAAwB,GAAG,CAAC,CAAC,wBAAwB,CAAC;QACxG,IAAI,CAAC,CAAC,uBAAuB,KAAK,SAAS;YAAE,GAAG,CAAC,uBAAuB,GAAG,CAAC,CAAC,uBAAuB,CAAC;QACrG,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS;YAAE,GAAG,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC;QAChF,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS;YAAE,GAAG,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CAAC;QAC7E,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAAoB,EAAE,KAA4B;QAC7D,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAGD,KAAK,CAAC,eAAe,CAAC,SAAmB;QACvC,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACnH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAuB;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAQ,EAAiB,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACjH,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;CACF,CAAA;AArJY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;IAKE,WAAA,IAAA,eAAM,EAAC,iCAAmB,CAAC,CAAA;;GAJ7B,2BAA2B,CAqJvC"}

package/dist/prisma-oauth-consent.repository.d.ts

@@ -0,0 +1,36 @@
+import { AbstractPrismaPublicClientRepository } from './abstract-prisma-public-client.repository';
+import { ITransactionManager } from '@nathapp/nestjs-data';
+import type { PrismaClientLike } from '@nathapp/nestjs-prisma';
+import { type IOAuthConsentRepository, type IOAuthConsent } from '@nathapp/nestjs-oauth';
+import { type OAuthConsentRow, type OAuthPrismaDelegate } from './oauth-prisma.types';
+export declare class PrismaOAuthConsentRepository extends AbstractPrismaPublicClientRepository<IOAuthConsent, OAuthConsentRow> implements IOAuthConsentRepository {
+    constructor(tx: ITransactionManager);
+    protected readonly prismaModelName = "oAuthConsent";
+    protected modelDelegate(client: PrismaClientLike): OAuthPrismaDelegate<OAuthConsentRow>;
+    protected get relationIncludes(): Record<string, unknown>;
+    protected toDomain(e: OAuthConsentRow): IOAuthConsent;
+    protected toPersistenceCreate(d: IOAuthConsent): {
+        id: string;
+        tenantId: string | null;
+        client: {
+            connect: {
+                clientId: string;
+            };
+        };
+        userId: string;
+        grantedAt: Date;
+        scopes: {
+            create: {
+                scope: {
+                    connect: {
+                        code: string;
+                    };
+                };
+            }[];
+        };
+    };
+    protected toPersistenceUpdate(p: Partial<IOAuthConsent>): Record<string, unknown>;
+    findActive(userId: string, clientId: string): Promise<IOAuthConsent | null>;
+    findActiveClientPublicIds(userId: string, tenantId?: string | null): Promise<string[]>;
+    revoke(userId: string, clientId: string, revokedAt: Date): Promise<void>;
+}

package/dist/prisma-oauth-consent.repository.js

@@ -0,0 +1,95 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrismaOAuthConsentRepository = void 0;
+const common_1 = require("@nestjs/common");
+const abstract_prisma_public_client_repository_1 = require("./abstract-prisma-public-client.repository");
+const nestjs_data_1 = require("@nathapp/nestjs-data");
+const oauth_prisma_types_1 = require("./oauth-prisma.types");
+let PrismaOAuthConsentRepository = class PrismaOAuthConsentRepository extends abstract_prisma_public_client_repository_1.AbstractPrismaPublicClientRepository {
+    constructor(tx) {
+        super(tx);
+        this.prismaModelName = 'oAuthConsent';
+    }
+    modelDelegate(client) {
+        return (0, oauth_prisma_types_1.getOAuthPrismaDelegate)(client, this.prismaModelName);
+    }
+    get relationIncludes() {
+        return { client: { select: { clientId: true } }, scopes: { include: { scope: true } } };
+    }
+    toDomain(e) {
+        var _a, _b, _c;
+        return {
+            id: e.id,
+            tenantId: (_a = e.tenantId) !== null && _a !== void 0 ? _a : undefined,
+            clientId: e.client.clientId,
+            userId: e.userId,
+            scopes: ((_b = e.scopes) !== null && _b !== void 0 ? _b : []).map((scope) => scope.scope.code),
+            grantedAt: e.grantedAt,
+            revokedAt: (_c = e.revokedAt) !== null && _c !== void 0 ? _c : undefined,
+        };
+    }
+    toPersistenceCreate(d) {
+        var _a;
+        return {
+            id: d.id,
+            tenantId: (_a = d.tenantId) !== null && _a !== void 0 ? _a : null,
+            client: { connect: { clientId: d.clientId } },
+            userId: d.userId,
+            grantedAt: d.grantedAt,
+            scopes: {
+                create: d.scopes.map((code) => ({ scope: { connect: { code } } })),
+            },
+        };
+    }
+    toPersistenceUpdate(p) {
+        const out = {};
+        if (p.revokedAt !== undefined)
+            out.revokedAt = p.revokedAt;
+        return out;
+    }
+    async findActive(userId, clientId) {
+        const e = await this.oauthModel.findFirst({
+            where: { userId, client: { clientId }, revokedAt: null },
+            include: { client: { select: { clientId: true } }, scopes: { include: { scope: true } } },
+        });
+        return e ? this.toDomain(e) : null;
+    }
+    async findActiveClientPublicIds(userId, tenantId) {
+        const where = { userId, revokedAt: null };
+        if (tenantId != null)
+            where.tenantId = tenantId;
+        const rows = await this.oauthModel.findMany({
+            where,
+            select: { client: { select: { clientId: true } } },
+        });
+        const seen = new Set();
+        for (const row of rows)
+            seen.add(row.client.clientId);
+        return Array.from(seen);
+    }
+    async revoke(userId, clientId, revokedAt) {
+        await this.oauthModel.updateMany({
+            where: { userId, client: { clientId }, revokedAt: null },
+            data: { revokedAt },
+        });
+    }
+};
+exports.PrismaOAuthConsentRepository = PrismaOAuthConsentRepository;
+exports.PrismaOAuthConsentRepository = PrismaOAuthConsentRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(nestjs_data_1.TRANSACTION_MANAGER)),
+    __metadata("design:paramtypes", [Object])
+], PrismaOAuthConsentRepository);
+//# sourceMappingURL=prisma-oauth-consent.repository.js.map

package/dist/prisma-oauth-consent.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-oauth-consent.repository.js","sourceRoot":"","sources":["../lib/prisma-oauth-consent.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,yGAAkG;AAClG,sDAAgF;AAMhF,6DAA8G;AAGvG,IAAM,4BAA4B,GAAlC,MAAM,4BACX,SAAQ,+EAAoE;IAG5E,YAAyC,EAAuB;QAAI,KAAK,CAAC,EAAE,CAAC,CAAC;QAE3D,oBAAe,GAAG,cAAc,CAAC;IAF2B,CAAC;IAItE,aAAa,CAAC,MAAwB;QAC9C,OAAO,IAAA,2CAAsB,EAAC,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9D,CAAC;IAED,IAAuB,gBAAgB;QACrC,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC1F,CAAC;IAES,QAAQ,CAAC,CAAkB;;QACnC,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,SAAS;YACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ;YAC3B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,MAAA,CAAC,CAAC,MAAM,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;YACzD,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,MAAA,CAAC,CAAC,SAAS,mCAAI,SAAS;SACpC,CAAC;IACJ,CAAC;IAES,mBAAmB,CAAC,CAAgB;;QAC5C,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,IAAI;YAC5B,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC7C,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE;gBACN,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;aACnE;SACF,CAAC;IACJ,CAAC;IAES,mBAAmB,CAAC,CAAyB;QACrD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;YAAE,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;QAC3D,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,QAAgB;QAC/C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YACxC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;YACxD,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;SAC1F,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,MAAc,EAAE,QAAwB;QACtE,MAAM,KAAK,GAA4B,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACnE,IAAI,QAAQ,IAAI,IAAI;YAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAkC;YAC3E,KAAK;YACL,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;SACnD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,QAAgB,EAAE,SAAe;QAC5D,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAC/B,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;YACxD,IAAI,EAAE,EAAE,SAAS,EAAE;SACpB,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAzEY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;IAKE,WAAA,IAAA,eAAM,EAAC,iCAAmB,CAAC,CAAA;;GAJ7B,4BAA4B,CAyExC"}

package/dist/prisma-oauth-device-code.repository.d.ts

@@ -0,0 +1,36 @@
+import { AbstractPrismaPublicClientRepository } from './abstract-prisma-public-client.repository';
+import type { PrismaClientLike } from '@nathapp/nestjs-prisma';
+import { ITransactionManager } from '@nathapp/nestjs-data';
+import { type IOAuthDeviceCodeRepository, type IOAuthDeviceCode } from '@nathapp/nestjs-oauth';
+import { type OAuthDeviceCodeRow, type OAuthPrismaDelegate } from './oauth-prisma.types';
+export declare class PrismaOAuthDeviceCodeRepository extends AbstractPrismaPublicClientRepository<IOAuthDeviceCode, OAuthDeviceCodeRow> implements IOAuthDeviceCodeRepository {
+    constructor(tx: ITransactionManager);
+    protected readonly prismaModelName = "oAuthDeviceCode";
+    protected modelDelegate(client: PrismaClientLike): OAuthPrismaDelegate<OAuthDeviceCodeRow>;
+    protected toDomain(e: OAuthDeviceCodeRow): IOAuthDeviceCode;
+    protected toPersistenceCreate(d: IOAuthDeviceCode): {
+        id: string;
+        tenantId: string | null;
+        deviceCodeHash: string;
+        userCodeHash: string;
+        client: {
+            connect: {
+                clientId: string;
+            };
+        };
+        scope: string | null;
+        status: import("@nathapp/nestjs-oauth").DeviceCodeStatus;
+        userId: string | null;
+        authTime: Date | null;
+        interval: number;
+        expiresAt: Date;
+    };
+    protected toPersistenceUpdate(p: Partial<IOAuthDeviceCode>): Record<string, unknown>;
+    findByDeviceCode(deviceCodeHash: string): Promise<IOAuthDeviceCode | null>;
+    findByUserCode(userCodeHash: string): Promise<IOAuthDeviceCode | null>;
+    markApproved(id: string, userId: string, authTime: Date, approvedAt: Date): Promise<void>;
+    markDenied(id: string): Promise<void>;
+    touchPolledAt(id: string, at: Date): Promise<void>;
+    consume(id: string, at: Date): Promise<boolean>;
+    deleteExpired(now: Date): Promise<number>;
+}

package/dist/prisma-oauth-device-code.repository.js

@@ -0,0 +1,124 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrismaOAuthDeviceCodeRepository = void 0;
+const common_1 = require("@nestjs/common");
+const abstract_prisma_public_client_repository_1 = require("./abstract-prisma-public-client.repository");
+const nestjs_data_1 = require("@nathapp/nestjs-data");
+const oauth_prisma_types_1 = require("./oauth-prisma.types");
+let PrismaOAuthDeviceCodeRepository = class PrismaOAuthDeviceCodeRepository extends abstract_prisma_public_client_repository_1.AbstractPrismaPublicClientRepository {
+    constructor(tx) {
+        super(tx);
+        this.prismaModelName = 'oAuthDeviceCode';
+    }
+    modelDelegate(client) {
+        return (0, oauth_prisma_types_1.getOAuthPrismaDelegate)(client, this.prismaModelName);
+    }
+    toDomain(e) {
+        var _a, _b, _c, _d, _e, _f, _g;
+        return {
+            id: e.id,
+            tenantId: (_a = e.tenantId) !== null && _a !== void 0 ? _a : undefined,
+            deviceCodeHash: e.deviceCodeHash,
+            userCodeHash: e.userCodeHash,
+            clientId: e.client.clientId,
+            scopes: e.scope ? e.scope.split(' ').filter(Boolean) : [],
+            status: e.status,
+            userId: (_b = e.userId) !== null && _b !== void 0 ? _b : undefined,
+            authTime: (_c = e.authTime) !== null && _c !== void 0 ? _c : undefined,
+            interval: (_d = e.interval) !== null && _d !== void 0 ? _d : 5,
+            lastPolledAt: (_e = e.lastPolledAt) !== null && _e !== void 0 ? _e : undefined,
+            approvedAt: (_f = e.approvedAt) !== null && _f !== void 0 ? _f : undefined,
+            consumedAt: (_g = e.consumedAt) !== null && _g !== void 0 ? _g : undefined,
+            expiresAt: e.expiresAt,
+            createdAt: e.createdAt,
+        };
+    }
+    toPersistenceCreate(d) {
+        var _a, _b, _c;
+        return {
+            id: d.id,
+            tenantId: (_a = d.tenantId) !== null && _a !== void 0 ? _a : null,
+            deviceCodeHash: d.deviceCodeHash,
+            userCodeHash: d.userCodeHash,
+            client: { connect: { clientId: d.clientId } },
+            scope: d.scopes.length > 0 ? d.scopes.join(' ') : null,
+            status: d.status,
+            userId: (_b = d.userId) !== null && _b !== void 0 ? _b : null,
+            authTime: (_c = d.authTime) !== null && _c !== void 0 ? _c : null,
+            interval: d.interval,
+            expiresAt: d.expiresAt,
+        };
+    }
+    toPersistenceUpdate(p) {
+        const out = {};
+        if (p.status !== undefined)
+            out.status = p.status;
+        if (p.userId !== undefined)
+            out.userId = p.userId;
+        if (p.authTime !== undefined)
+            out.authTime = p.authTime;
+        if (p.approvedAt !== undefined)
+            out.approvedAt = p.approvedAt;
+        if (p.lastPolledAt !== undefined)
+            out.lastPolledAt = p.lastPolledAt;
+        if (p.consumedAt !== undefined)
+            out.consumedAt = p.consumedAt;
+        return out;
+    }
+    async findByDeviceCode(deviceCodeHash) {
+        const e = await this.oauthModel.findUnique({ where: { deviceCodeHash }, include: { client: { select: { clientId: true } } } });
+        return e ? this.toDomain(e) : null;
+    }
+    async findByUserCode(userCodeHash) {
+        const e = await this.oauthModel.findUnique({ where: { userCodeHash }, include: { client: { select: { clientId: true } } } });
+        return e ? this.toDomain(e) : null;
+    }
+    async markApproved(id, userId, authTime, approvedAt) {
+        await this.oauthModel.update({
+            where: { id },
+            data: { status: 'approved', userId, authTime, approvedAt },
+        });
+    }
+    async markDenied(id) {
+        await this.oauthModel.update({
+            where: { id },
+            data: { status: 'denied' },
+        });
+    }
+    async touchPolledAt(id, at) {
+        await this.oauthModel.update({
+            where: { id },
+            data: { lastPolledAt: at },
+        });
+    }
+    async consume(id, at) {
+        const res = await this.oauthModel.updateMany({
+            where: { id, status: 'approved', consumedAt: null },
+            data: { consumedAt: at },
+        });
+        return res.count === 1;
+    }
+    async deleteExpired(now) {
+        const res = await this.oauthModel.deleteMany({ where: { expiresAt: { lt: now } } });
+        return res.count;
+    }
+};
+exports.PrismaOAuthDeviceCodeRepository = PrismaOAuthDeviceCodeRepository;
+exports.PrismaOAuthDeviceCodeRepository = PrismaOAuthDeviceCodeRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(nestjs_data_1.TRANSACTION_MANAGER)),
+    __metadata("design:paramtypes", [Object])
+], PrismaOAuthDeviceCodeRepository);
+//# sourceMappingURL=prisma-oauth-device-code.repository.js.map

package/dist/prisma-oauth-device-code.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-oauth-device-code.repository.js","sourceRoot":"","sources":["../lib/prisma-oauth-device-code.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,yGAAkG;AAElG,sDAAgF;AAKhF,6DAAiH;AAG1G,IAAM,+BAA+B,GAArC,MAAM,+BACX,SAAQ,+EAA0E;IAGlF,YAAyC,EAAuB;QAAI,KAAK,CAAC,EAAE,CAAC,CAAC;QAE3D,oBAAe,GAAG,iBAAiB,CAAC;IAFwB,CAAC;IAItE,aAAa,CAAC,MAAwB;QAC9C,OAAO,IAAA,2CAAsB,EAAC,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9D,CAAC;IAES,QAAQ,CAAC,CAAqB;;QACtC,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,SAAS;YACjC,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ;YAC3B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;YACzD,MAAM,EAAE,CAAC,CAAC,MAA2C;YACrD,MAAM,EAAE,MAAA,CAAC,CAAC,MAAM,mCAAI,SAAS;YAC7B,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,SAAS;YACjC,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,CAAC;YACzB,YAAY,EAAE,MAAA,CAAC,CAAC,YAAY,mCAAI,SAAS;YACzC,UAAU,EAAE,MAAA,CAAC,CAAC,UAAU,mCAAI,SAAS;YACrC,UAAU,EAAE,MAAA,CAAC,CAAC,UAAU,mCAAI,SAAS;YACrC,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC;IACJ,CAAC;IAES,mBAAmB,CAAC,CAAmB;;QAC/C,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,IAAI;YAC5B,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;YACtD,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,MAAA,CAAC,CAAC,MAAM,mCAAI,IAAI;YACxB,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,IAAI;YAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC;IACJ,CAAC;IAES,mBAAmB,CAAC,CAA4B;QACxD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QAClD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QAClD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QACxD,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;YAAE,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;QAC9D,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;QACpE,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;YAAE,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;QAC9D,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,cAAsB;QAC3C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/H,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,YAAoB;QACvC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7H,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,MAAc,EAAE,QAAc,EAAE,UAAgB;QAC7E,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3B,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3B,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,EAAQ;QACtC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3B,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,EAAQ;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAC3C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE;YACnD,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;SACzB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAS;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACpF,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;CACF,CAAA;AAtGY,0EAA+B;0CAA/B,+BAA+B;IAD3C,IAAA,mBAAU,GAAE;IAKE,WAAA,IAAA,eAAM,EAAC,iCAAmB,CAAC,CAAA;;GAJ7B,+BAA+B,CAsG3C"}

package/dist/prisma-oauth-pushed-request.repository.d.ts

@@ -0,0 +1,16 @@
+import { AbstractPrismaPublicClientRepository } from './abstract-prisma-public-client.repository';
+import type { PrismaClientLike } from '@nathapp/nestjs-prisma';
+import { ITransactionManager } from '@nathapp/nestjs-data';
+import { type IOAuthPushedRequestRepository, type IOAuthPushedRequest } from '@nathapp/nestjs-oauth';
+import { type OAuthPrismaDelegate, type OAuthPushedRequestRow } from './oauth-prisma.types';
+export declare class PrismaOAuthPushedRequestRepository extends AbstractPrismaPublicClientRepository<IOAuthPushedRequest, OAuthPushedRequestRow> implements IOAuthPushedRequestRepository {
+    constructor(tx: ITransactionManager);
+    protected readonly prismaModelName = "oAuthPushedRequest";
+    protected modelDelegate(client: PrismaClientLike): OAuthPrismaDelegate<OAuthPushedRequestRow>;
+    protected toDomain(e: OAuthPushedRequestRow): IOAuthPushedRequest;
+    findByRequestUri(requestUriHash: string): Promise<IOAuthPushedRequest | null>;
+    consume(id: string, at: Date): Promise<boolean>;
+    deleteExpired(now: Date): Promise<number>;
+    protected toPersistenceCreate(d: IOAuthPushedRequest): Record<string, unknown>;
+    protected toPersistenceUpdate(p: Partial<IOAuthPushedRequest>): Record<string, unknown>;
+}

package/dist/prisma-oauth-pushed-request.repository.js

@@ -0,0 +1,104 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrismaOAuthPushedRequestRepository = void 0;
+const common_1 = require("@nestjs/common");
+const abstract_prisma_public_client_repository_1 = require("./abstract-prisma-public-client.repository");
+const nestjs_data_1 = require("@nathapp/nestjs-data");
+const oauth_prisma_types_1 = require("./oauth-prisma.types");
+let PrismaOAuthPushedRequestRepository = class PrismaOAuthPushedRequestRepository extends abstract_prisma_public_client_repository_1.AbstractPrismaPublicClientRepository {
+    constructor(tx) {
+        super(tx);
+        this.prismaModelName = 'oAuthPushedRequest';
+    }
+    modelDelegate(client) {
+        return (0, oauth_prisma_types_1.getOAuthPrismaDelegate)(client, this.prismaModelName);
+    }
+    toDomain(e) {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+        const domain = {
+            id: e.id,
+            tenantId: (_a = e.tenantId) !== null && _a !== void 0 ? _a : undefined,
+            requestUriHash: e.requestUriHash,
+            clientId: e.client.clientId,
+            responseType: e.responseType,
+            redirectUri: e.redirectUri,
+            scope: (_b = e.scope) !== null && _b !== void 0 ? _b : undefined,
+            state: (_c = e.state) !== null && _c !== void 0 ? _c : undefined,
+            codeChallenge: (_d = e.codeChallenge) !== null && _d !== void 0 ? _d : undefined,
+            codeChallengeMethod: (_e = e.codeChallengeMethod) !== null && _e !== void 0 ? _e : undefined,
+            nonce: (_f = e.nonce) !== null && _f !== void 0 ? _f : undefined,
+            prompt: (_g = e.prompt) !== null && _g !== void 0 ? _g : undefined,
+            maxAge: (_h = e.maxAge) !== null && _h !== void 0 ? _h : undefined,
+            consumedAt: (_j = e.consumedAt) !== null && _j !== void 0 ? _j : undefined,
+            expiresAt: e.expiresAt,
+            resource: (_k = e.resource) !== null && _k !== void 0 ? _k : undefined,
+            createdAt: e.createdAt,
+        };
+        return domain;
+    }
+    async findByRequestUri(requestUriHash) {
+        const e = await this.oauthModel.findUnique({ where: { requestUriHash }, include: { client: { select: { clientId: true } } } });
+        return e ? this.toDomain(e) : null;
+    }
+    async consume(id, at) {
+        const res = await this.oauthModel.updateMany({
+            where: { id, consumedAt: null },
+            data: { consumedAt: at },
+        });
+        return res.count === 1;
+    }
+    async deleteExpired(now) {
+        const res = await this.oauthModel.deleteMany({ where: { expiresAt: { lt: now } } });
+        return res.count;
+    }
+    toPersistenceCreate(d) {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+        return {
+            id: d.id,
+            tenantId: (_a = d.tenantId) !== null && _a !== void 0 ? _a : null,
+            requestUriHash: d.requestUriHash,
+            client: { connect: { clientId: d.clientId } },
+            responseType: d.responseType,
+            redirectUri: d.redirectUri,
+            scope: (_b = d.scope) !== null && _b !== void 0 ? _b : null,
+            state: (_c = d.state) !== null && _c !== void 0 ? _c : null,
+            codeChallenge: (_d = d.codeChallenge) !== null && _d !== void 0 ? _d : null,
+            codeChallengeMethod: (_e = d.codeChallengeMethod) !== null && _e !== void 0 ? _e : null,
+            nonce: (_f = d.nonce) !== null && _f !== void 0 ? _f : null,
+            prompt: (_g = d.prompt) !== null && _g !== void 0 ? _g : null,
+            maxAge: (_h = d.maxAge) !== null && _h !== void 0 ? _h : null,
+            consumedAt: (_j = d.consumedAt) !== null && _j !== void 0 ? _j : null,
+            resource: (_k = d.resource) !== null && _k !== void 0 ? _k : null,
+            expiresAt: d.expiresAt,
+        };
+    }
+    toPersistenceUpdate(p) {
+        const out = {};
+        if (p.scope !== undefined)
+            out.scope = p.scope;
+        if (p.state !== undefined)
+            out.state = p.state;
+        if (p.consumedAt !== undefined)
+            out.consumedAt = p.consumedAt;
+        return out;
+    }
+};
+exports.PrismaOAuthPushedRequestRepository = PrismaOAuthPushedRequestRepository;
+exports.PrismaOAuthPushedRequestRepository = PrismaOAuthPushedRequestRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(nestjs_data_1.TRANSACTION_MANAGER)),
+    __metadata("design:paramtypes", [Object])
+], PrismaOAuthPushedRequestRepository);
+//# sourceMappingURL=prisma-oauth-pushed-request.repository.js.map