@oidcraft/typeorm 0.1.0 → 0.2.0

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { DataSource, EntitySchema, QueryRunner } from "typeorm";
 import { AccountStore, FullAdapter, KeyStore } from "@oidcraft/adapter";
+import { DataSource, EntitySchema, QueryRunner } from "typeorm";
 type Migration = {
   id: string;
   statements: string[];
@@ -17,24 +17,29 @@ export declare const POSTGRES_MIGRATIONS: Migration[];
  * deploy, from several processes at once (ARCHITECTURE.md §4.2, FR-A4).
  */
 export declare const SQLITE_MIGRATIONS: Migration[];
-export type ClientRow = {
+/**
+ * The rows of the shared schema as Kysely and TypeORM read and write them: JSON as text, times as
+ * epoch milliseconds. Drizzle declares its columns as JSON and timestamps and maps them itself.
+ */
+type ClientRow = {
   client_id: string;
   data: string;
   created_at: number;
   updated_at: number;
 };
-export type ArtifactRow = {
+type ArtifactRow = {
   kind: string;
   id: string;
   client_id: string;
   account_id: string | null;
   grant_id: string | null;
+  family_id: string | null;
   user_code: string | null;
   payload: string;
   consumed_at: number | null;
   expires_at: number;
 };
-export type SessionRow = {
+type SessionRow = {
   id: string;
   account_id: string;
   auth_time: number;
@@ -45,7 +50,7 @@ export type SessionRow = {
   clients: string;
   expires_at: number;
 };
-export type GrantRow = {
+type GrantRow = {
   id: string;
   account_id: string;
   client_id: string;
@@ -55,7 +60,7 @@ export type GrantRow = {
   created_at: number;
   expires_at: number | null;
 };
-export type IdentityRow = {
+type IdentityRow = {
   provider: string;
   subject: string;
   account_id: string;
@@ -63,7 +68,7 @@ export type IdentityRow = {
   claims: string;
   linked_at: number;
 };
-export type RealmRow = {
+type RealmRow = {
   id: string;
   display_name: string | null;
   enabled: number;
@@ -71,12 +76,12 @@ export type RealmRow = {
   created_at: number;
   updated_at: number;
 };
-export type ReplayRow = {
+type ReplayRow = {
   namespace: string;
   value: string;
   expires_at: number;
 };
-export type CredentialRow = {
+type CredentialRow = {
   account_id: string;
   username: string;
   password_hash: string;
@@ -127,4 +132,4 @@ export type TypeormAdapterOptions = {
  * The queries are dialect-agnostic; the schema shipped and tested is SQLite's, as for the others.
  */
 export declare const typeormAdapter: (options: TypeormAdapterOptions) => FullAdapter;
-export type { Migration };
+export type { ArtifactRow, ClientRow, CredentialRow, GrantRow, IdentityRow, Migration, RealmRow, ReplayRow, SessionRow };

package/dist/index.mjs

@@ -1,4 +1,147 @@
+import { noAccounts } from "@oidcraft/adapter";
 import { EntitySchema, QueryFailedError } from "typeorm";
+// ../sql/dist/rows.mjs
+/** Never `new Date` on the raw value: a string there is read as a date, not as milliseconds. */
+const at = (millis) => new Date(Number(millis));
+const json = (value) => JSON.stringify(value);
+const parse = (value) => JSON.parse(value);
+const clientRow = (client) => ({
+	client_id: client.clientId,
+	data: json(client),
+	created_at: client.createdAt.getTime(),
+	updated_at: client.updatedAt.getTime()
+});
+const toClient = (row) => ({
+	...parse(row.data),
+	createdAt: at(row.created_at),
+	updatedAt: at(row.updated_at)
+});
+/** `user_code` is lifted out of the payload so a device's code is found by index (FR-C7). */
+const artifactRow = (artifact) => ({
+	kind: artifact.kind,
+	id: artifact.id,
+	client_id: artifact.clientId,
+	account_id: artifact.accountId ?? null,
+	grant_id: artifact.grantId ?? null,
+	family_id: artifact.familyId ?? null,
+	user_code: artifact.payload.userCode ?? null,
+	payload: json(artifact.payload),
+	consumed_at: artifact.consumedAt ? artifact.consumedAt.getTime() : null,
+	expires_at: artifact.expiresAt.getTime()
+});
+const toArtifact = (row) => ({
+	id: row.id,
+	kind: row.kind,
+	clientId: row.client_id,
+	...row.account_id && { accountId: row.account_id },
+	...row.grant_id && { grantId: row.grant_id },
+	...row.family_id && { familyId: row.family_id },
+	payload: parse(row.payload),
+	...row.consumed_at && { consumedAt: at(row.consumed_at) },
+	expiresAt: at(row.expires_at)
+});
+const sessionRow = (session) => ({
+	id: session.id,
+	account_id: session.accountId,
+	auth_time: session.authTime.getTime(),
+	acr: session.acr ?? null,
+	amr: session.amr ? json(session.amr) : null,
+	idp: session.idp ?? null,
+	upstream_session_id: session.upstreamSessionId ?? null,
+	clients: json(session.clients),
+	expires_at: session.expiresAt.getTime()
+});
+const toSession = (row) => ({
+	id: row.id,
+	accountId: row.account_id,
+	authTime: at(row.auth_time),
+	...row.acr && { acr: row.acr },
+	...row.amr ? { amr: parse(row.amr) } : {},
+	...row.idp && { idp: row.idp },
+	...row.upstream_session_id && { upstreamSessionId: row.upstream_session_id },
+	clients: parse(row.clients),
+	expiresAt: at(row.expires_at)
+});
+const grantRow = (grant) => ({
+	id: grant.id,
+	account_id: grant.accountId,
+	client_id: grant.clientId,
+	scopes: json(grant.scopes),
+	claims: json(grant.claims),
+	resources: json(grant.resources),
+	created_at: grant.createdAt.getTime(),
+	expires_at: grant.expiresAt ? grant.expiresAt.getTime() : null
+});
+const toGrant = (row) => ({
+	id: row.id,
+	accountId: row.account_id,
+	clientId: row.client_id,
+	scopes: parse(row.scopes),
+	claims: parse(row.claims),
+	resources: parse(row.resources),
+	createdAt: at(row.created_at),
+	...row.expires_at && { expiresAt: at(row.expires_at) }
+});
+const identityRow = (identity) => ({
+	provider: identity.provider,
+	subject: identity.subject,
+	account_id: identity.accountId,
+	email: identity.email ?? null,
+	claims: json(identity.claims),
+	linked_at: identity.linkedAt.getTime()
+});
+const toIdentity = (row) => ({
+	accountId: row.account_id,
+	provider: row.provider,
+	subject: row.subject,
+	...row.email && { email: row.email },
+	claims: parse(row.claims),
+	linkedAt: at(row.linked_at)
+});
+const credentialRow = (credential) => ({
+	account_id: credential.accountId,
+	username: credential.username,
+	password_hash: credential.passwordHash,
+	claims: json(credential.claims),
+	totp_secret: credential.totp?.secret ?? null,
+	totp_confirmed_at: credential.totp?.confirmedAt?.getTime() ?? null,
+	recovery_codes: credential.recoveryCodes ? json(credential.recoveryCodes) : null,
+	failed_attempts: credential.failedAttempts,
+	locked_until: credential.lockedUntil?.getTime() ?? null,
+	created_at: credential.createdAt.getTime(),
+	updated_at: credential.updatedAt.getTime()
+});
+const toCredential = (row) => ({
+	accountId: row.account_id,
+	username: row.username,
+	passwordHash: row.password_hash,
+	claims: parse(row.claims),
+	...row.totp_secret && { totp: {
+		secret: row.totp_secret,
+		...row.totp_confirmed_at && { confirmedAt: at(row.totp_confirmed_at) }
+	} },
+	...row.recovery_codes ? { recoveryCodes: parse(row.recovery_codes) } : {},
+	failedAttempts: Number(row.failed_attempts),
+	...row.locked_until && { lockedUntil: at(row.locked_until) },
+	createdAt: at(row.created_at),
+	updatedAt: at(row.updated_at)
+});
+const realmRow = (realm) => ({
+	id: realm.id,
+	display_name: realm.displayName ?? null,
+	enabled: realm.enabled ? 1 : 0,
+	settings: json(realm.settings),
+	created_at: realm.createdAt.getTime(),
+	updated_at: realm.updatedAt.getTime()
+});
+const toRealm = (row) => ({
+	id: row.id,
+	...row.display_name && { displayName: row.display_name },
+	enabled: Boolean(Number(row.enabled)),
+	settings: parse(row.settings),
+	createdAt: at(row.created_at),
+	updatedAt: at(row.updated_at)
+});
 // ../sql/dist/postgres.mjs
 /**
 * The same tables as `SQLITE_MIGRATIONS`, with the same ids, for Postgres (FR-A4). Milliseconds are
@@ -36,6 +179,18 @@ const POSTGRES_MIGRATIONS = [
 	{
 		id: "0003_realms",
 		statements: ["create table oidc_realms (id text primary key, display_name text, enabled integer not null, settings text not null, created_at bigint not null, updated_at bigint not null)"]
+	},
+	{
+		id: "0004_indexes",
+		statements: [
+			"create index oidc_artifacts_client_idx on oidc_artifacts (client_id)",
+			"create index oidc_grants_client_idx on oidc_grants (client_id)",
+			"create index oidc_sessions_expiry_idx on oidc_sessions (expires_at)"
+		]
+	},
+	{
+		id: "0005_families",
+		statements: ["alter table oidc_artifacts add column family_id text", "create index oidc_artifacts_family_idx on oidc_artifacts (family_id)"]
 	}
 ];
 // ../sql/dist/sqlite.mjs
@@ -74,6 +229,18 @@ const SQLITE_MIGRATIONS = [
 	{
 		id: "0003_realms",
 		statements: ["create table oidc_realms (id text primary key, display_name text, enabled integer not null, settings text not null, created_at integer not null, updated_at integer not null)"]
+	},
+	{
+		id: "0004_indexes",
+		statements: [
+			"create index oidc_artifacts_client_idx on oidc_artifacts (client_id)",
+			"create index oidc_grants_client_idx on oidc_grants (client_id)",
+			"create index oidc_sessions_expiry_idx on oidc_sessions (expires_at)"
+		]
+	},
+	{
+		id: "0005_families",
+		statements: ["alter table oidc_artifacts add column family_id text", "create index oidc_artifacts_family_idx on oidc_artifacts (family_id)"]
 	}
 ];
 // src/schema.ts
@@ -109,6 +276,7 @@ const ArtifactEntity = new EntitySchema({
 		client_id: text(),
 		account_id: text({ nullable: true }),
 		grant_id: text({ nullable: true }),
+		family_id: text({ nullable: true }),
 		user_code: text({ nullable: true }),
 		payload: text(),
 		consumed_at: millis({ nullable: true }),
@@ -126,6 +294,14 @@ const ArtifactEntity = new EntitySchema({
 		{
 			name: "oidc_artifacts_expiry_idx",
 			columns: ["expires_at"]
+		},
+		{
+			name: "oidc_artifacts_client_idx",
+			columns: ["client_id"]
+		},
+		{
+			name: "oidc_artifacts_family_idx",
+			columns: ["family_id"]
 		}
 	]
 });
@@ -143,13 +319,20 @@ const SessionEntity = new EntitySchema({
 		clients: text(),
 		expires_at: millis()
 	},
-	indices: [{
-		name: "oidc_sessions_account_idx",
-		columns: ["account_id"]
-	}, {
-		name: "oidc_sessions_upstream_idx",
-		columns: ["idp", "upstream_session_id"]
-	}]
+	indices: [
+		{
+			name: "oidc_sessions_account_idx",
+			columns: ["account_id"]
+		},
+		{
+			name: "oidc_sessions_upstream_idx",
+			columns: ["idp", "upstream_session_id"]
+		},
+		{
+			name: "oidc_sessions_expiry_idx",
+			columns: ["expires_at"]
+		}
+	]
 });
 const GrantEntity = new EntitySchema({
 	name: "oidc_grants",
@@ -168,6 +351,9 @@ const GrantEntity = new EntitySchema({
 		name: "oidc_grants_account_client_idx",
 		columns: ["account_id", "client_id"],
 		unique: true
+	}, {
+		name: "oidc_grants_client_idx",
+		columns: ["client_id"]
 	}]
 });
 const IdentityEntity = new EntitySchema({
@@ -271,95 +457,6 @@ const TYPEORM_SQLITE_MIGRATIONS = SQLITE_MIGRATIONS.map(asTypeormMigration);
 const TYPEORM_POSTGRES_MIGRATIONS = POSTGRES_MIGRATIONS.map(asTypeormMigration);
 // src/index.ts
 const now = () => Date.now();
-const json = (value) => JSON.stringify(value);
-const parse = (value) => JSON.parse(value);
-const toArtifact = (row) => ({
-	id: row.id,
-	kind: row.kind,
-	clientId: row.client_id,
-	...row.account_id && { accountId: row.account_id },
-	...row.grant_id && { grantId: row.grant_id },
-	payload: parse(row.payload),
-	...row.consumed_at && { consumedAt: new Date(row.consumed_at) },
-	expiresAt: new Date(row.expires_at)
-});
-const toSession = (row) => ({
-	id: row.id,
-	accountId: row.account_id,
-	authTime: new Date(row.auth_time),
-	...row.acr && { acr: row.acr },
-	...row.amr ? { amr: parse(row.amr) } : {},
-	...row.idp && { idp: row.idp },
-	...row.upstream_session_id && { upstreamSessionId: row.upstream_session_id },
-	clients: parse(row.clients),
-	expiresAt: new Date(row.expires_at)
-});
-const toGrant = (row) => ({
-	id: row.id,
-	accountId: row.account_id,
-	clientId: row.client_id,
-	scopes: parse(row.scopes),
-	claims: parse(row.claims),
-	resources: parse(row.resources),
-	createdAt: new Date(row.created_at),
-	...row.expires_at && { expiresAt: new Date(row.expires_at) }
-});
-const credentialRow = (credential) => ({
-	account_id: credential.accountId,
-	username: credential.username,
-	password_hash: credential.passwordHash,
-	claims: json(credential.claims),
-	totp_secret: credential.totp?.secret ?? null,
-	totp_confirmed_at: credential.totp?.confirmedAt?.getTime() ?? null,
-	recovery_codes: credential.recoveryCodes ? json(credential.recoveryCodes) : null,
-	failed_attempts: credential.failedAttempts,
-	locked_until: credential.lockedUntil?.getTime() ?? null,
-	created_at: credential.createdAt.getTime(),
-	updated_at: credential.updatedAt.getTime()
-});
-const toCredential = (row) => ({
-	accountId: row.account_id,
-	username: row.username,
-	passwordHash: row.password_hash,
-	claims: parse(row.claims),
-	...row.totp_secret && { totp: {
-		secret: row.totp_secret,
-		...row.totp_confirmed_at && { confirmedAt: new Date(row.totp_confirmed_at) }
-	} },
-	...row.recovery_codes ? { recoveryCodes: parse(row.recovery_codes) } : {},
-	failedAttempts: row.failed_attempts,
-	...row.locked_until && { lockedUntil: new Date(row.locked_until) },
-	createdAt: new Date(row.created_at),
-	updatedAt: new Date(row.updated_at)
-});
-const toIdentity = (row) => ({
-	accountId: row.account_id,
-	provider: row.provider,
-	subject: row.subject,
-	...row.email && { email: row.email },
-	claims: parse(row.claims),
-	linkedAt: new Date(row.linked_at)
-});
-const realmRow = (realm) => ({
-	id: realm.id,
-	display_name: realm.displayName ?? null,
-	enabled: realm.enabled ? 1 : 0,
-	settings: json(realm.settings),
-	created_at: realm.createdAt.getTime(),
-	updated_at: realm.updatedAt.getTime()
-});
-const toRealm = (row) => ({
-	id: row.id,
-	...row.display_name && { displayName: row.display_name },
-	enabled: Boolean(row.enabled),
-	settings: parse(row.settings),
-	createdAt: new Date(row.created_at),
-	updatedAt: new Date(row.updated_at)
-});
-const noAccounts = {
-	async find() {},
-	async claims() {}
-};
 const upsert = async (repository, row, conflict, overwrite) => {
 	const columns = overwrite ?? Object.keys(row).filter((column) => !conflict.includes(column));
 	await repository.createQueryBuilder().insert().values(row).orUpdate(columns, conflict).execute();
@@ -396,21 +493,12 @@ const typeormAdapter = (options) => {
 	const realms = dataSource.getRepository(RealmEntity);
 	const artifacts = {
 		async upsert(artifact) {
-			const row = {
-				kind: artifact.kind,
-				id: artifact.id,
-				client_id: artifact.clientId,
-				account_id: artifact.accountId ?? null,
-				grant_id: artifact.grantId ?? null,
-				user_code: artifact.payload.userCode ?? null,
-				payload: json(artifact.payload),
-				consumed_at: artifact.consumedAt ? artifact.consumedAt.getTime() : null,
-				expires_at: artifact.expiresAt.getTime()
-			};
+			const row = artifactRow(artifact);
 			await upsert(artifactRows, row, ["kind", "id"], [
 				"client_id",
 				"account_id",
 				"grant_id",
+				"family_id",
 				"user_code",
 				"payload",
 				"expires_at"
@@ -447,6 +535,12 @@ const typeormAdapter = (options) => {
 		async revokeByGrantId(grantId) {
 			await artifactRows.delete({ grant_id: grantId });
 		},
+		async revokeByFamilyId(familyId) {
+			await artifactRows.delete({ family_id: familyId });
+		},
+		async revokeByClientId(clientId) {
+			await artifactRows.delete({ client_id: clientId });
+		},
 		async prune(before, limit) {
 			const doomed = await artifactRows.createQueryBuilder("a").select(["a.kind", "a.id"]).where("a.expires_at <= :before", { before: before.getTime() }).limit(limit).getMany();
 			for (const row of doomed) await artifacts.destroy(row.kind, row.id);
@@ -458,30 +552,25 @@ const typeormAdapter = (options) => {
 			async find(clientId) {
 				const row = await clients.findOneBy({ client_id: clientId });
 				if (!row) return void 0;
-				return {
-					...parse(row.data),
-					createdAt: new Date(row.created_at),
-					updatedAt: new Date(row.updated_at)
-				};
+				return toClient(row);
 			},
 			async upsert(client) {
-				const row = {
-					client_id: client.clientId,
-					data: json(client),
-					created_at: client.createdAt.getTime(),
-					updated_at: client.updatedAt.getTime()
-				};
-				await upsert(clients, row, ["client_id"], ["data", "updated_at"]);
+				await upsert(clients, clientRow(client), ["client_id"], ["data", "updated_at"]);
 			},
 			async destroy(clientId) {
 				await clients.delete({ client_id: clientId });
 			},
-			async list() {
-				return { clients: (await clients.find()).map((row) => ({
-					...parse(row.data),
-					createdAt: new Date(row.created_at),
-					updatedAt: new Date(row.updated_at)
-				})) };
+			async list(cursor, limit) {
+				const query = clients.createQueryBuilder("c").orderBy("c.client_id");
+				if (cursor !== void 0) query.where("c.client_id > :cursor", { cursor });
+				if (limit !== void 0) query.limit(limit + 1);
+				const rows = await query.getMany();
+				const more = limit !== void 0 && rows.length > limit;
+				const shown = more ? rows.slice(0, limit) : rows;
+				return {
+					clients: shown.map(toClient),
+					...more && { cursor: shown.at(-1)?.client_id }
+				};
 			}
 		},
 		artifacts,
@@ -500,24 +589,14 @@ const typeormAdapter = (options) => {
 				}).getMany()).map(toSession);
 			},
 			async findByUpstreamSession(provider, upstreamSessionId) {
-				return (await sessions.findBy({
-					idp: provider,
-					upstream_session_id: upstreamSessionId
-				})).map(toSession);
+				return (await sessions.createQueryBuilder("s").where("s.idp = :provider and s.upstream_session_id = :upstreamSessionId and s.expires_at > :now", {
+					provider,
+					upstreamSessionId,
+					now: now()
+				}).getMany()).map(toSession);
 			},
 			async upsert(session) {
-				const row = {
-					id: session.id,
-					account_id: session.accountId,
-					auth_time: session.authTime.getTime(),
-					acr: session.acr ?? null,
-					amr: session.amr ? json(session.amr) : null,
-					idp: session.idp ?? null,
-					upstream_session_id: session.upstreamSessionId ?? null,
-					clients: json(session.clients),
-					expires_at: session.expiresAt.getTime()
-				};
-				await upsert(sessions, row, ["id"]);
+				await upsert(sessions, sessionRow(session), ["id"]);
 			},
 			async addClient(id, clientId) {
 				for (let attempt = 0; attempt < 64; attempt++) {
@@ -537,6 +616,14 @@ const typeormAdapter = (options) => {
 			},
 			async destroy(id) {
 				await sessions.delete({ id });
+			},
+			async prune(before, limit) {
+				const doomed = await sessions.createQueryBuilder("s").select(["s.id"]).where("s.expires_at <= :before", { before: before.getTime() }).limit(limit).getMany();
+				for (const row of doomed) await sessions.createQueryBuilder().delete().where("id = :id and expires_at <= :before", {
+					id: row.id,
+					before: before.getTime()
+				}).execute();
+				return doomed.length;
 			}
 		},
 		grants: {
@@ -555,20 +642,18 @@ const typeormAdapter = (options) => {
 				return (await grants.findBy({ account_id: accountId })).map(toGrant);
 			},
 			async upsert(grant) {
-				const row = {
-					id: grant.id,
-					account_id: grant.accountId,
-					client_id: grant.clientId,
-					scopes: json(grant.scopes),
-					claims: json(grant.claims),
-					resources: json(grant.resources),
-					created_at: grant.createdAt.getTime(),
-					expires_at: grant.expiresAt ? grant.expiresAt.getTime() : null
-				};
-				await upsert(grants, row, ["id"]);
+				await upsert(grants, grantRow(grant), ["account_id", "client_id"], [
+					"scopes",
+					"claims",
+					"resources",
+					"expires_at"
+				]);
 			},
 			async destroy(id) {
 				await grants.delete({ id });
+			},
+			async destroyByClientId(clientId) {
+				await grants.delete({ client_id: clientId });
 			}
 		},
 		accounts: options.accounts ?? noAccounts,
@@ -610,21 +695,31 @@ const typeormAdapter = (options) => {
 			}
 		},
 		keys: options.keys,
-		replay: { async claim(namespace, value, ttl) {
-			await replay.createQueryBuilder().delete().where("namespace = :namespace and value = :value and expires_at <= :now", {
-				namespace,
-				value,
-				now: now()
-			}).execute();
-			return insertIfAbsent(replay, {
-				namespace,
-				value,
-				expires_at: now() + ttl * 1e3
-			}, async () => replay.existsBy({
-				namespace,
-				value
-			}));
-		} },
+		replay: {
+			async claim(namespace, value, ttl) {
+				await replay.createQueryBuilder().delete().where("namespace = :namespace and value = :value and expires_at <= :now", {
+					namespace,
+					value,
+					now: now()
+				}).execute();
+				return insertIfAbsent(replay, {
+					namespace,
+					value,
+					expires_at: now() + ttl * 1e3
+				}, async () => replay.existsBy({
+					namespace,
+					value
+				}));
+			},
+			async prune(before, limit) {
+				const doomed = await replay.createQueryBuilder("r").select(["r.namespace", "r.value"]).where("r.expires_at <= :before", { before: before.getTime() }).limit(limit).getMany();
+				for (const row of doomed) await replay.createQueryBuilder().delete().where("namespace = :namespace and value = :value and expires_at <= :before", {
+					...row,
+					before: before.getTime()
+				}).execute();
+				return doomed.length;
+			}
+		},
 		identities: {
 			async find(provider, subject) {
 				const row = await identities.findOneBy({
@@ -637,15 +732,7 @@ const typeormAdapter = (options) => {
 				return (await identities.findBy({ account_id: accountId })).map(toIdentity);
 			},
 			async upsert(identity) {
-				const row = {
-					provider: identity.provider,
-					subject: identity.subject,
-					account_id: identity.accountId,
-					email: identity.email ?? null,
-					claims: json(identity.claims),
-					linked_at: identity.linkedAt.getTime()
-				};
-				await upsert(identities, row, ["provider", "subject"]);
+				await upsert(identities, identityRow(identity), ["provider", "subject"]);
 			},
 			async destroy(provider, subject) {
 				await identities.delete({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oidcraft/typeorm",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "A TypeORM storage adapter for @oidcraft/provider, over a DataSource on Postgres or SQLite.",
   "license": "MIT",
   "author": "Fl0r14n <florian.chis@gmail.com>",
@@ -41,11 +41,11 @@
     "verify:entries": "bun run verify-entries.ts"
   },
   "peerDependencies": {
-    "@oidcraft/adapter": "^0.1.0",
+    "@oidcraft/adapter": "^0.2.0",
     "typeorm": ">=1.1"
   },
   "devDependencies": {
-    "@oidcraft/adapter": "^0.1.0",
+    "@oidcraft/adapter": "^0.2.0",
     "@oidcraft/sql": "0.0.0",
     "@types/pg": "^8.23.1",
     "pg": "^8.23.1",