@privateaim/server-realtime-kit 0.8.27 → 0.8.28

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## [0.8.28](https://github.com/PrivateAIM/hub/compare/v0.8.27...v0.8.28) (2026-02-26)
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @privateaim/kit bumped from ^0.8.27 to ^0.8.28
+    * @privateaim/telemetry-kit bumped from ^0.8.27 to ^0.8.28
+    * @privateaim/server-kit bumped from ^0.8.27 to ^0.8.28
+
 ## [0.8.27](https://github.com/PrivateAIM/hub/compare/v0.8.26...v0.8.27) (2026-02-12)
 
 

package/dist/index.mjs

@@ -4,8 +4,8 @@ import { LogChannel, LogFlag } from '@privateaim/telemetry-kit';
 import { RedisTokenVerifierCache, MemoryTokenVerifierCache, TokenVerifier } from '@authup/server-adapter-kit';
 import { createMiddleware } from '@authup/server-adapter-socket-io';
 import { REALM_MASTER_NAME, PermissionName } from '@authup/core-kit';
+import { PermissionChecker, PermissionMemoryRepository } from '@authup/access';
 import { OAuth2SubKind } from '@authup/specs';
-import { PermissionChecker, PermissionMemoryProvider } from '@authup/access';
 import { PermissionName as PermissionName$1 } from '@privateaim/kit';
 import { createAdapter } from '@socket.io/redis-adapter';
 import { Server } from 'socket.io';
@@ -78,7 +78,7 @@ function applyTokenVerificationData(socket, data, fakeAbilities) {
     socket.data.realmId = data.realm_id;
     socket.data.realmName = data.realm_name;
     socket.data.permissionChecker = new PermissionChecker({
-        provider: new PermissionMemoryProvider(abilities)
+        repository: new PermissionMemoryRepository(abilities)
     });
     switch(data.sub_kind){
         case OAuth2SubKind.USER:

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../src/helpers/authenticated.ts","../src/helpers/room-subscriptions.ts","../src/middlewares/authup/utils.ts","../src/middlewares/authup/create.ts","../src/middlewares/force-logged-in.ts","../src/middlewares/logging.ts","../src/server/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Socket } from '../types';\n\nexport function isSocketAuthenticated(socket: Socket) : boolean {\n    return !!socket.data.userId ||\n        !!socket.data.clientId ||\n        !!socket.data.robotId;\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Socket } from '../types';\n\nexport function subscribeSocketRoom(\n    socket: Socket,\n    roomName: string,\n) {\n    if (!socket.data.roomSubscriptions) {\n        socket.data.roomSubscriptions = {};\n    }\n\n    if (!socket.data.roomSubscriptions[roomName]) {\n        socket.data.roomSubscriptions[roomName] = 0;\n    }\n\n    socket.data.roomSubscriptions[roomName]++;\n\n    socket.join(roomName);\n}\n\nexport function unsubscribeSocketRoom(\n    socket: Socket,\n    roomName: string,\n) {\n    if (!socket.data.roomSubscriptions) {\n        return;\n    }\n\n    if (socket.data.roomSubscriptions[roomName]) {\n        if (socket.data.roomSubscriptions[roomName] > 1) {\n            socket.data.roomSubscriptions[roomName]--;\n        } else {\n            delete socket.data.roomSubscriptions[roomName];\n        }\n    }\n\n    if (!socket.data.roomSubscriptions[roomName]) {\n        socket.leave(roomName);\n    }\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PermissionName as AuthupPermissionName, REALM_MASTER_NAME } from '@authup/core-kit';\nimport type { PermissionItem } from '@authup/access';\nimport { OAuth2SubKind } from '@authup/specs';\nimport { PermissionChecker, PermissionMemoryProvider } from '@authup/access';\nimport type { TokenVerificationData } from '@authup/server-adapter-kit';\nimport { PermissionName } from '@privateaim/kit';\nimport type { Socket } from '../../types';\n\ntype TokenVerificationDataMinimal = Pick<\nTokenVerificationData,\n'permissions' |\n'realm_id' |\n'realm_name' |\n'sub' |\n'sub_kind' |\n'sub_name'\n>;\n\nfunction generateAbilities(): PermissionItem[] {\n    return Object.values({\n        ...PermissionName,\n        ...AuthupPermissionName,\n    }).map((name) => ({\n        name,\n    } satisfies PermissionItem));\n}\n\nexport function createFakeTokenVerificationData(): TokenVerificationDataMinimal {\n    return {\n        realm_id: 'd94b2f28-29e3-4ced-b8f1-6923a01dc1ee',\n        realm_name: REALM_MASTER_NAME,\n\n        sub_kind: 'user',\n        sub: 'd94b2f28-29e3-4ced-b8f1-6923a01dc1ee',\n        sub_name: 'admin',\n\n        permissions: generateAbilities(),\n    };\n}\n\nexport function applyTokenVerificationData(\n    socket: Socket,\n    data: TokenVerificationDataMinimal,\n    fakeAbilities?: boolean,\n) {\n    let abilities: PermissionItem[];\n    if (fakeAbilities) {\n        abilities = generateAbilities();\n    } else {\n        abilities = data.permissions;\n    }\n\n    socket.data.realmId = data.realm_id;\n    socket.data.realmName = data.realm_name;\n\n    socket.data.permissionChecker = new PermissionChecker({\n        provider: new PermissionMemoryProvider(abilities),\n    });\n\n    switch (data.sub_kind) {\n        case OAuth2SubKind.USER: {\n            socket.data.userId = data.sub;\n            socket.data.userName = data.sub_name;\n            break;\n        }\n        case OAuth2SubKind.ROBOT: {\n            socket.data.robotId = data.sub;\n            socket.data.robotName = data.sub_name;\n            break;\n        }\n        case OAuth2SubKind.CLIENT: {\n            socket.data.clientId = data.sub;\n            socket.data.clientName = data.sub_name;\n            break;\n        }\n    }\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UnauthorizedError } from '@ebec/http';\nimport type { VaultClient } from '@hapic/vault';\nimport {\n    isRedisClientUsable, isVaultClientUsable, useLogger, useRedisClient, useVaultClient,\n} from '@privateaim/server-kit';\nimport { LogChannel, LogFlag } from '@privateaim/telemetry-kit';\nimport type { Client as RedisClient } from 'redis-extension';\nimport type { TokenCreatorOptions } from '@authup/core-http-kit';\nimport type { ITokenVerifierCache } from '@authup/server-adapter-kit';\nimport { MemoryTokenVerifierCache, RedisTokenVerifierCache, TokenVerifier } from '@authup/server-adapter-kit';\nimport { createMiddleware } from '@authup/server-adapter-socket-io';\nimport type {\n    Middleware, Namespace, Server, Socket,\n} from '../../types';\nimport type { AuthupMiddlewareRegistrationOptions } from './types';\nimport { applyTokenVerificationData, createFakeTokenVerificationData } from './utils';\n\nexport function createAuthupMiddleware(\n    options: AuthupMiddlewareRegistrationOptions,\n) : Middleware {\n    let baseURL : string | undefined;\n    if (options.baseURL) {\n        baseURL = options.baseURL;\n    }\n\n    let redis : RedisClient | undefined;\n    if (isRedisClientUsable()) {\n        redis = useRedisClient();\n    }\n\n    let vault : VaultClient | undefined;\n    if (isVaultClientUsable()) {\n        vault = useVaultClient();\n    }\n\n    if (!baseURL) {\n        const data = createFakeTokenVerificationData();\n\n        return (socket, next) => {\n            applyTokenVerificationData(socket, data, options.fakeAbilities);\n            next();\n        };\n    }\n\n    let tokenCreator : TokenCreatorOptions;\n    if (vault) {\n        tokenCreator = {\n            type: 'robotInVault',\n            name: 'system',\n            vault,\n            baseURL,\n        };\n    } else {\n        tokenCreator = {\n            type: 'user',\n            name: 'admin',\n            password: 'start123',\n            baseURL,\n        };\n    }\n\n    let cache : ITokenVerifierCache;\n    if (redis) {\n        cache = new RedisTokenVerifierCache(redis);\n    } else {\n        cache = new MemoryTokenVerifierCache();\n    }\n\n    return createMiddleware({\n        tokenVerifier: new TokenVerifier({\n            baseURL,\n            creator: tokenCreator,\n            cache,\n        }),\n        tokenVerifierHandler: (\n            socket: Socket,\n            data,\n        ) => applyTokenVerificationData(socket, data, options.fakeAbilities),\n    });\n}\n\nexport function mountAuthupMiddleware(\n    nsp: Namespace | Server,\n    options: AuthupMiddlewareRegistrationOptions,\n) {\n    const middleware = createAuthupMiddleware(options);\n    nsp.use(middleware);\n\n    nsp.use((socket, next) => {\n        if (socket.data.userId) {\n            useLogger().info(`Socket/${socket.id}: User connected.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                actor_type: 'user',\n                actor_id: socket.data.userId,\n            });\n        } else if (socket.data.robotId) {\n            useLogger().info(`Socket/${socket.id}: Robot connected.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                actor_type: 'robot',\n                actor_id: socket.data.robotId,\n            });\n        } else if (socket.data.clientId) {\n            useLogger().info(`Socket/${socket.id}: Client connected.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                actor_type: 'client',\n                actor_id: socket.data.clientId,\n            });\n        } else {\n            useLogger().warn(`Socket/${socket.id}: Not authenticated.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n            });\n\n            next(new UnauthorizedError());\n            return;\n        }\n\n        socket.on('disconnect', () => {\n            if (socket.data.userId) {\n                useLogger().info(`Socket/${socket.id}: User disconnected`, {\n                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                    actor_type: 'user',\n                    actor_id: socket.data.userId,\n                });\n            } else if (socket.data.robotId) {\n                useLogger().info(`Socket/${socket.id}: Robot disconnected`, {\n                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                    actor_type: 'robot',\n                    actor_id: socket.data.userId,\n                });\n            } else if (socket.data.clientId) {\n                useLogger().info(`Socket/${socket.id}: Client disconnected`, {\n                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                    actor_type: 'client',\n                    actor_id: socket.data.clientId,\n                });\n            }\n        });\n\n        next();\n    });\n}\n","/*\n * Copyright (c) 2021-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UnauthorizedError } from '@ebec/http';\nimport type { Namespace, Server } from '../types';\n\nexport function mountForceLoggedInMiddleware(input: Namespace | Server) {\n    input.use((socket, next) => {\n        if (socket.data.userId || socket.data.robotId) {\n            next();\n            return;\n        }\n\n        next(new UnauthorizedError());\n    });\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { useLogger } from '@privateaim/server-kit';\nimport { LogChannel, LogFlag } from '@privateaim/telemetry-kit';\nimport type { Namespace, Server } from '../types';\n\nexport function mountLoggingMiddleware(\n    nsp: Namespace | Server,\n) {\n    nsp.on('error', (err) => {\n        useLogger().error(err, {\n            [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n        });\n    });\n\n    nsp.use((socket, next) => {\n        useLogger().debug(`Socket/${socket.id}: Connected.`, {\n            namespace: socket.nsp.name,\n            [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n        });\n\n        socket.on('disconnect', () => {\n            useLogger().debug(`Socket/${socket.id}: Disconnected.`, {\n                namespace: socket.nsp.name,\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n            });\n        });\n\n        next();\n    });\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    isRedisClientUsable, useLogger, useRedisPublishClient, useRedisSubscribeClient,\n} from '@privateaim/server-kit';\nimport { LogChannel, LogFlag } from '@privateaim/telemetry-kit';\nimport { createAdapter } from '@socket.io/redis-adapter';\nimport type { Server as HTTPServer } from 'node:http';\nimport type { DefaultEventsMap, ServerOptions } from 'socket.io';\nimport { Server } from 'socket.io';\n\nexport function createServer<\n    ListenEvents extends Record<string, any> = DefaultEventsMap,\n    EmitEvents extends Record<string, any> = ListenEvents,\n    ServerSideEvents extends Record<string, any> = DefaultEventsMap,\n    SocketData = any,\n>(\n    httpServer: HTTPServer,\n): Server<ListenEvents, EmitEvents, ServerSideEvents, SocketData> {\n    let adapter : ServerOptions['adapter'] | undefined;\n    if (isRedisClientUsable()) {\n        adapter = createAdapter(\n            useRedisPublishClient(),\n            useRedisSubscribeClient(),\n        );\n    }\n\n    const server = new Server<\n    ListenEvents,\n    EmitEvents,\n    ServerSideEvents,\n    SocketData\n    >(httpServer, {\n        adapter,\n        cors: {\n            origin(origin, callback) {\n                callback(null, true);\n            },\n            credentials: true,\n        },\n        transports: ['websocket', 'polling'],\n    });\n\n    server.engine.on('connection_error', (err) => {\n        useLogger().error({\n            message: err.message,\n            code: err.code,\n            [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n        });\n    });\n\n    return server;\n}\n"],"names":["isSocketAuthenticated","socket","data","userId","clientId","robotId","subscribeSocketRoom","roomName","roomSubscriptions","join","unsubscribeSocketRoom","leave","generateAbilities","Object","values","PermissionName","AuthupPermissionName","map","name","createFakeTokenVerificationData","realm_id","realm_name","REALM_MASTER_NAME","sub_kind","sub","sub_name","permissions","applyTokenVerificationData","fakeAbilities","abilities","realmId","realmName","permissionChecker","PermissionChecker","provider","PermissionMemoryProvider","OAuth2SubKind","USER","userName","ROBOT","robotName","CLIENT","clientName","createAuthupMiddleware","options","baseURL","redis","isRedisClientUsable","useRedisClient","vault","isVaultClientUsable","useVaultClient","next","tokenCreator","type","password","cache","RedisTokenVerifierCache","MemoryTokenVerifierCache","createMiddleware","tokenVerifier","TokenVerifier","creator","tokenVerifierHandler","mountAuthupMiddleware","nsp","middleware","use","useLogger","info","id","LogFlag","CHANNEL","LogChannel","WEBSOCKET","actor_type","actor_id","warn","UnauthorizedError","on","mountForceLoggedInMiddleware","input","mountLoggingMiddleware","err","error","debug","namespace","createServer","httpServer","adapter","createAdapter","useRedisPublishClient","useRedisSubscribeClient","server","Server","cors","origin","callback","credentials","transports","engine","message","code"],"mappings":";;;;;;;;;;;;AAAA;;;;;IASO,SAASA,qBAAAA,CAAsBC,MAAc,EAAA;AAChD,IAAA,OAAO,CAAC,CAACA,MAAAA,CAAOC,IAAI,CAACC,MAAM,IACvB,CAAC,CAACF,OAAOC,IAAI,CAACE,QAAQ,IACtB,CAAC,CAACH,MAAAA,CAAOC,IAAI,CAACG,OAAO;AAC7B;;ACbA;;;;;AAKC,IAIM,SAASC,mBAAAA,CACZL,MAAc,EACdM,QAAgB,EAAA;AAEhB,IAAA,IAAI,CAACN,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,EAAE;AAChCP,QAAAA,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,GAAG,EAAC;AACrC,IAAA;AAEA,IAAA,IAAI,CAACP,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,SAAS,EAAE;AAC1CN,QAAAA,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,SAAS,GAAG,CAAA;AAC9C,IAAA;AAEAN,IAAAA,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,QAAAA,CAAS,EAAA;AAEvCN,IAAAA,MAAAA,CAAOQ,IAAI,CAACF,QAAAA,CAAAA;AAChB;AAEO,SAASG,qBAAAA,CACZT,MAAc,EACdM,QAAgB,EAAA;AAEhB,IAAA,IAAI,CAACN,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,EAAE;AAChC,QAAA;AACJ,IAAA;AAEA,IAAA,IAAIP,OAAOC,IAAI,CAACM,iBAAiB,CAACD,SAAS,EAAE;AACzC,QAAA,IAAIN,OAAOC,IAAI,CAACM,iBAAiB,CAACD,QAAAA,CAAS,GAAG,CAAA,EAAG;AAC7CN,YAAAA,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,QAAAA,CAAS,EAAA;QAC3C,CAAA,MAAO;AACH,YAAA,OAAON,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,QAAAA,CAAS;AAClD,QAAA;AACJ,IAAA;AAEA,IAAA,IAAI,CAACN,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,SAAS,EAAE;AAC1CN,QAAAA,MAAAA,CAAOU,KAAK,CAACJ,QAAAA,CAAAA;AACjB,IAAA;AACJ;;ACpBA,SAASK,iBAAAA,GAAAA;IACL,OAAOC,MAAAA,CAAOC,MAAM,CAAC;AACjB,QAAA,GAAGC,gBAAc;AACjB,QAAA,GAAGC;AACP,KAAA,CAAA,CAAGC,GAAG,CAAC,CAACC,IAAAA,IAAU;AACdA,YAAAA;SACJ,CAAA,CAAA;AACJ;AAEO,SAASC,+BAAAA,GAAAA;IACZ,OAAO;QACHC,QAAAA,EAAU,sCAAA;QACVC,UAAAA,EAAYC,iBAAAA;QAEZC,QAAAA,EAAU,MAAA;QACVC,GAAAA,EAAK,sCAAA;QACLC,QAAAA,EAAU,OAAA;QAEVC,WAAAA,EAAad,iBAAAA;AACjB,KAAA;AACJ;AAEO,SAASe,0BAAAA,CACZ1B,MAAc,EACdC,IAAkC,EAClC0B,aAAuB,EAAA;IAEvB,IAAIC,SAAAA;AACJ,IAAA,IAAID,aAAAA,EAAe;QACfC,SAAAA,GAAYjB,iBAAAA,EAAAA;IAChB,CAAA,MAAO;AACHiB,QAAAA,SAAAA,GAAY3B,KAAKwB,WAAW;AAChC,IAAA;AAEAzB,IAAAA,MAAAA,CAAOC,IAAI,CAAC4B,OAAO,GAAG5B,KAAKkB,QAAQ;AACnCnB,IAAAA,MAAAA,CAAOC,IAAI,CAAC6B,SAAS,GAAG7B,KAAKmB,UAAU;AAEvCpB,IAAAA,MAAAA,CAAOC,IAAI,CAAC8B,iBAAiB,GAAG,IAAIC,iBAAAA,CAAkB;AAClDC,QAAAA,QAAAA,EAAU,IAAIC,wBAAAA,CAAyBN,SAAAA;AAC3C,KAAA,CAAA;AAEA,IAAA,OAAQ3B,KAAKqB,QAAQ;AACjB,QAAA,KAAKa,cAAcC,IAAI;AAAE,YAAA;AACrBpC,gBAAAA,MAAAA,CAAOC,IAAI,CAACC,MAAM,GAAGD,KAAKsB,GAAG;AAC7BvB,gBAAAA,MAAAA,CAAOC,IAAI,CAACoC,QAAQ,GAAGpC,KAAKuB,QAAQ;AACpC,gBAAA;AACJ,YAAA;AACA,QAAA,KAAKW,cAAcG,KAAK;AAAE,YAAA;AACtBtC,gBAAAA,MAAAA,CAAOC,IAAI,CAACG,OAAO,GAAGH,KAAKsB,GAAG;AAC9BvB,gBAAAA,MAAAA,CAAOC,IAAI,CAACsC,SAAS,GAAGtC,KAAKuB,QAAQ;AACrC,gBAAA;AACJ,YAAA;AACA,QAAA,KAAKW,cAAcK,MAAM;AAAE,YAAA;AACvBxC,gBAAAA,MAAAA,CAAOC,IAAI,CAACE,QAAQ,GAAGF,KAAKsB,GAAG;AAC/BvB,gBAAAA,MAAAA,CAAOC,IAAI,CAACwC,UAAU,GAAGxC,KAAKuB,QAAQ;AACtC,gBAAA;AACJ,YAAA;AACJ;AACJ;;AC3DO,SAASkB,uBACZC,OAA4C,EAAA;IAE5C,IAAIC,OAAAA;IACJ,IAAID,OAAAA,CAAQC,OAAO,EAAE;AACjBA,QAAAA,OAAAA,GAAUD,QAAQC,OAAO;AAC7B,IAAA;IAEA,IAAIC,KAAAA;AACJ,IAAA,IAAIC,mBAAAA,EAAAA,EAAuB;QACvBD,KAAAA,GAAQE,cAAAA,EAAAA;AACZ,IAAA;IAEA,IAAIC,KAAAA;AACJ,IAAA,IAAIC,mBAAAA,EAAAA,EAAuB;QACvBD,KAAAA,GAAQE,cAAAA,EAAAA;AACZ,IAAA;AAEA,IAAA,IAAI,CAACN,OAAAA,EAAS;AACV,QAAA,MAAM3C,IAAAA,GAAOiB,+BAAAA,EAAAA;AAEb,QAAA,OAAO,CAAClB,MAAAA,EAAQmD,IAAAA,GAAAA;YACZzB,0BAAAA,CAA2B1B,MAAAA,EAAQC,IAAAA,EAAM0C,OAAAA,CAAQhB,aAAa,CAAA;AAC9DwB,YAAAA,IAAAA,EAAAA;AACJ,QAAA,CAAA;AACJ,IAAA;IAEA,IAAIC,YAAAA;AACJ,IAAA,IAAIJ,KAAAA,EAAO;QACPI,YAAAA,GAAe;YACXC,IAAAA,EAAM,cAAA;YACNpC,IAAAA,EAAM,QAAA;AACN+B,YAAAA,KAAAA;AACAJ,YAAAA;AACJ,SAAA;IACJ,CAAA,MAAO;QACHQ,YAAAA,GAAe;YACXC,IAAAA,EAAM,MAAA;YACNpC,IAAAA,EAAM,OAAA;YACNqC,QAAAA,EAAU,UAAA;AACVV,YAAAA;AACJ,SAAA;AACJ,IAAA;IAEA,IAAIW,KAAAA;AACJ,IAAA,IAAIV,KAAAA,EAAO;AACPU,QAAAA,KAAAA,GAAQ,IAAIC,uBAAAA,CAAwBX,KAAAA,CAAAA;IACxC,CAAA,MAAO;AACHU,QAAAA,KAAAA,GAAQ,IAAIE,wBAAAA,EAAAA;AAChB,IAAA;AAEA,IAAA,OAAOC,gBAAAA,CAAiB;AACpBC,QAAAA,aAAAA,EAAe,IAAIC,aAAAA,CAAc;AAC7BhB,YAAAA,OAAAA;YACAiB,OAAAA,EAAST,YAAAA;AACTG,YAAAA;AACJ,SAAA,CAAA;AACAO,QAAAA,oBAAAA,EAAsB,CAClB9D,MAAAA,EACAC,IAAAA,GACCyB,2BAA2B1B,MAAAA,EAAQC,IAAAA,EAAM0C,QAAQhB,aAAa;AACvE,KAAA,CAAA;AACJ;AAEO,SAASoC,qBAAAA,CACZC,GAAuB,EACvBrB,OAA4C,EAAA;AAE5C,IAAA,MAAMsB,aAAavB,sBAAAA,CAAuBC,OAAAA,CAAAA;AAC1CqB,IAAAA,GAAAA,CAAIE,GAAG,CAACD,UAAAA,CAAAA;IAERD,GAAAA,CAAIE,GAAG,CAAC,CAAClE,MAAAA,EAAQmD,IAAAA,GAAAA;AACb,QAAA,IAAInD,MAAAA,CAAOC,IAAI,CAACC,MAAM,EAAE;YACpBiE,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,iBAAiB,CAAC,EAAE;AACrD,gBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;gBACvCC,UAAAA,EAAY,MAAA;gBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACC;AAC1B,aAAA,CAAA;AACJ,QAAA,CAAA,MAAO,IAAIF,MAAAA,CAAOC,IAAI,CAACG,OAAO,EAAE;YAC5B+D,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,kBAAkB,CAAC,EAAE;AACtD,gBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;gBACvCC,UAAAA,EAAY,OAAA;gBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACG;AAC1B,aAAA,CAAA;AACJ,QAAA,CAAA,MAAO,IAAIJ,MAAAA,CAAOC,IAAI,CAACE,QAAQ,EAAE;YAC7BgE,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,mBAAmB,CAAC,EAAE;AACvD,gBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;gBACvCC,UAAAA,EAAY,QAAA;gBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACE;AAC1B,aAAA,CAAA;QACJ,CAAA,MAAO;YACHgE,SAAAA,EAAAA,CAAYS,IAAI,CAAC,CAAC,OAAO,EAAE5E,OAAOqE,EAAE,CAAC,oBAAoB,CAAC,EAAE;AACxD,gBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,aAAA,CAAA;AAEAtB,YAAAA,IAAAA,CAAK,IAAI0B,iBAAAA,EAAAA,CAAAA;AACT,YAAA;AACJ,QAAA;QAEA7E,MAAAA,CAAO8E,EAAE,CAAC,YAAA,EAAc,IAAA;AACpB,YAAA,IAAI9E,MAAAA,CAAOC,IAAI,CAACC,MAAM,EAAE;gBACpBiE,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,mBAAmB,CAAC,EAAE;AACvD,oBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;oBACvCC,UAAAA,EAAY,MAAA;oBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACC;AAC1B,iBAAA,CAAA;AACJ,YAAA,CAAA,MAAO,IAAIF,MAAAA,CAAOC,IAAI,CAACG,OAAO,EAAE;gBAC5B+D,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,oBAAoB,CAAC,EAAE;AACxD,oBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;oBACvCC,UAAAA,EAAY,OAAA;oBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACC;AAC1B,iBAAA,CAAA;AACJ,YAAA,CAAA,MAAO,IAAIF,MAAAA,CAAOC,IAAI,CAACE,QAAQ,EAAE;gBAC7BgE,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,qBAAqB,CAAC,EAAE;AACzD,oBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;oBACvCC,UAAAA,EAAY,QAAA;oBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACE;AAC1B,iBAAA,CAAA;AACJ,YAAA;AACJ,QAAA,CAAA,CAAA;AAEAgD,QAAAA,IAAAA,EAAAA;AACJ,IAAA,CAAA,CAAA;AACJ;;ACzIO,SAAS4B,6BAA6BC,KAAyB,EAAA;IAClEA,KAAAA,CAAMd,GAAG,CAAC,CAAClE,MAAAA,EAAQmD,IAAAA,GAAAA;QACf,IAAInD,MAAAA,CAAOC,IAAI,CAACC,MAAM,IAAIF,MAAAA,CAAOC,IAAI,CAACG,OAAO,EAAE;AAC3C+C,YAAAA,IAAAA,EAAAA;AACA,YAAA;AACJ,QAAA;AAEAA,QAAAA,IAAAA,CAAK,IAAI0B,iBAAAA,EAAAA,CAAAA;AACb,IAAA,CAAA,CAAA;AACJ;;ACRO,SAASI,uBACZjB,GAAuB,EAAA;IAEvBA,GAAAA,CAAIc,EAAE,CAAC,OAAA,EAAS,CAACI,GAAAA,GAAAA;QACbf,SAAAA,EAAAA,CAAYgB,KAAK,CAACD,GAAAA,EAAK;AACnB,YAAA,CAACZ,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,SAAA,CAAA;AACJ,IAAA,CAAA,CAAA;IAEAT,GAAAA,CAAIE,GAAG,CAAC,CAAClE,MAAAA,EAAQmD,IAAAA,GAAAA;QACbgB,SAAAA,EAAAA,CAAYiB,KAAK,CAAC,CAAC,OAAO,EAAEpF,OAAOqE,EAAE,CAAC,YAAY,CAAC,EAAE;YACjDgB,SAAAA,EAAWrF,MAAAA,CAAOgE,GAAG,CAAC/C,IAAI;AAC1B,YAAA,CAACqD,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,SAAA,CAAA;QAEAzE,MAAAA,CAAO8E,EAAE,CAAC,YAAA,EAAc,IAAA;YACpBX,SAAAA,EAAAA,CAAYiB,KAAK,CAAC,CAAC,OAAO,EAAEpF,OAAOqE,EAAE,CAAC,eAAe,CAAC,EAAE;gBACpDgB,SAAAA,EAAWrF,MAAAA,CAAOgE,GAAG,CAAC/C,IAAI;AAC1B,gBAAA,CAACqD,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,aAAA,CAAA;AACJ,QAAA,CAAA,CAAA;AAEAtB,QAAAA,IAAAA,EAAAA;AACJ,IAAA,CAAA,CAAA;AACJ;;ACnBO,SAASmC,aAMZC,UAAsB,EAAA;IAEtB,IAAIC,OAAAA;AACJ,IAAA,IAAI1C,mBAAAA,EAAAA,EAAuB;AACvB0C,QAAAA,OAAAA,GAAUC,cACNC,qBAAAA,EAAAA,EACAC,uBAAAA,EAAAA,CAAAA;AAER,IAAA;IAEA,MAAMC,MAAAA,GAAS,IAAIC,MAAAA,CAKjBN,UAAAA,EAAY;AACVC,QAAAA,OAAAA;QACAM,IAAAA,EAAM;YACFC,MAAAA,CAAAA,CAAOA,MAAM,EAAEC,QAAQ,EAAA;AACnBA,gBAAAA,QAAAA,CAAS,IAAA,EAAM,IAAA,CAAA;AACnB,YAAA,CAAA;YACAC,WAAAA,EAAa;AACjB,SAAA;QACAC,UAAAA,EAAY;AAAC,YAAA,WAAA;AAAa,YAAA;AAAU;AACxC,KAAA,CAAA;AAEAN,IAAAA,MAAAA,CAAOO,MAAM,CAACrB,EAAE,CAAC,oBAAoB,CAACI,GAAAA,GAAAA;AAClCf,QAAAA,SAAAA,EAAAA,CAAYgB,KAAK,CAAC;AACdiB,YAAAA,OAAAA,EAASlB,IAAIkB,OAAO;AACpBC,YAAAA,IAAAA,EAAMnB,IAAImB,IAAI;AACd,YAAA,CAAC/B,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,SAAA,CAAA;AACJ,IAAA,CAAA,CAAA;IAEA,OAAOmB,MAAAA;AACX;;;;"}
+{"version":3,"file":"index.mjs","sources":["../src/helpers/authenticated.ts","../src/helpers/room-subscriptions.ts","../src/middlewares/authup/utils.ts","../src/middlewares/authup/create.ts","../src/middlewares/force-logged-in.ts","../src/middlewares/logging.ts","../src/server/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Socket } from '../types';\n\nexport function isSocketAuthenticated(socket: Socket) : boolean {\n    return !!socket.data.userId ||\n        !!socket.data.clientId ||\n        !!socket.data.robotId;\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Socket } from '../types';\n\nexport function subscribeSocketRoom(\n    socket: Socket,\n    roomName: string,\n) {\n    if (!socket.data.roomSubscriptions) {\n        socket.data.roomSubscriptions = {};\n    }\n\n    if (!socket.data.roomSubscriptions[roomName]) {\n        socket.data.roomSubscriptions[roomName] = 0;\n    }\n\n    socket.data.roomSubscriptions[roomName]++;\n\n    socket.join(roomName);\n}\n\nexport function unsubscribeSocketRoom(\n    socket: Socket,\n    roomName: string,\n) {\n    if (!socket.data.roomSubscriptions) {\n        return;\n    }\n\n    if (socket.data.roomSubscriptions[roomName]) {\n        if (socket.data.roomSubscriptions[roomName] > 1) {\n            socket.data.roomSubscriptions[roomName]--;\n        } else {\n            delete socket.data.roomSubscriptions[roomName];\n        }\n    }\n\n    if (!socket.data.roomSubscriptions[roomName]) {\n        socket.leave(roomName);\n    }\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PermissionName as AuthupPermissionName, REALM_MASTER_NAME } from '@authup/core-kit';\nimport type { PermissionItem } from '@authup/access';\nimport { PermissionChecker, PermissionMemoryRepository } from '@authup/access';\nimport { OAuth2SubKind } from '@authup/specs';\nimport type { TokenVerificationData } from '@authup/server-adapter-kit';\nimport { PermissionName } from '@privateaim/kit';\nimport type { Socket } from '../../types';\n\ntype TokenVerificationDataMinimal = Pick<\nTokenVerificationData,\n'permissions' |\n'realm_id' |\n'realm_name' |\n'sub' |\n'sub_kind' |\n'sub_name'\n>;\n\nfunction generateAbilities(): PermissionItem[] {\n    return Object.values({\n        ...PermissionName,\n        ...AuthupPermissionName,\n    }).map((name) => ({\n        name,\n    } satisfies PermissionItem));\n}\n\nexport function createFakeTokenVerificationData(): TokenVerificationDataMinimal {\n    return {\n        realm_id: 'd94b2f28-29e3-4ced-b8f1-6923a01dc1ee',\n        realm_name: REALM_MASTER_NAME,\n\n        sub_kind: 'user',\n        sub: 'd94b2f28-29e3-4ced-b8f1-6923a01dc1ee',\n        sub_name: 'admin',\n\n        permissions: generateAbilities(),\n    };\n}\n\nexport function applyTokenVerificationData(\n    socket: Socket,\n    data: TokenVerificationDataMinimal,\n    fakeAbilities?: boolean,\n) {\n    let abilities: PermissionItem[];\n    if (fakeAbilities) {\n        abilities = generateAbilities();\n    } else {\n        abilities = data.permissions;\n    }\n\n    socket.data.realmId = data.realm_id;\n    socket.data.realmName = data.realm_name;\n\n    socket.data.permissionChecker = new PermissionChecker({\n        repository: new PermissionMemoryRepository(abilities),\n    });\n\n    switch (data.sub_kind) {\n        case OAuth2SubKind.USER: {\n            socket.data.userId = data.sub;\n            socket.data.userName = data.sub_name;\n            break;\n        }\n        case OAuth2SubKind.ROBOT: {\n            socket.data.robotId = data.sub;\n            socket.data.robotName = data.sub_name;\n            break;\n        }\n        case OAuth2SubKind.CLIENT: {\n            socket.data.clientId = data.sub;\n            socket.data.clientName = data.sub_name;\n            break;\n        }\n    }\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UnauthorizedError } from '@ebec/http';\nimport type { VaultClient } from '@hapic/vault';\nimport {\n    isRedisClientUsable, isVaultClientUsable, useLogger, useRedisClient, useVaultClient,\n} from '@privateaim/server-kit';\nimport { LogChannel, LogFlag } from '@privateaim/telemetry-kit';\nimport type { Client as RedisClient } from 'redis-extension';\nimport type { TokenCreatorOptions } from '@authup/core-http-kit';\nimport type { ITokenVerifierCache } from '@authup/server-adapter-kit';\nimport { MemoryTokenVerifierCache, RedisTokenVerifierCache, TokenVerifier } from '@authup/server-adapter-kit';\nimport { createMiddleware } from '@authup/server-adapter-socket-io';\nimport type {\n    Middleware, Namespace, Server, Socket,\n} from '../../types';\nimport type { AuthupMiddlewareRegistrationOptions } from './types';\nimport { applyTokenVerificationData, createFakeTokenVerificationData } from './utils';\n\nexport function createAuthupMiddleware(\n    options: AuthupMiddlewareRegistrationOptions,\n) : Middleware {\n    let baseURL : string | undefined;\n    if (options.baseURL) {\n        baseURL = options.baseURL;\n    }\n\n    let redis : RedisClient | undefined;\n    if (isRedisClientUsable()) {\n        redis = useRedisClient();\n    }\n\n    let vault : VaultClient | undefined;\n    if (isVaultClientUsable()) {\n        vault = useVaultClient();\n    }\n\n    if (!baseURL) {\n        const data = createFakeTokenVerificationData();\n\n        return (socket, next) => {\n            applyTokenVerificationData(socket, data, options.fakeAbilities);\n            next();\n        };\n    }\n\n    let tokenCreator : TokenCreatorOptions;\n    if (vault) {\n        tokenCreator = {\n            type: 'robotInVault',\n            name: 'system',\n            vault,\n            baseURL,\n        };\n    } else {\n        tokenCreator = {\n            type: 'user',\n            name: 'admin',\n            password: 'start123',\n            baseURL,\n        };\n    }\n\n    let cache : ITokenVerifierCache;\n    if (redis) {\n        cache = new RedisTokenVerifierCache(redis);\n    } else {\n        cache = new MemoryTokenVerifierCache();\n    }\n\n    return createMiddleware({\n        tokenVerifier: new TokenVerifier({\n            baseURL,\n            creator: tokenCreator,\n            cache,\n        }),\n        tokenVerifierHandler: (\n            socket: Socket,\n            data,\n        ) => applyTokenVerificationData(socket, data, options.fakeAbilities),\n    });\n}\n\nexport function mountAuthupMiddleware(\n    nsp: Namespace | Server,\n    options: AuthupMiddlewareRegistrationOptions,\n) {\n    const middleware = createAuthupMiddleware(options);\n    nsp.use(middleware);\n\n    nsp.use((socket, next) => {\n        if (socket.data.userId) {\n            useLogger().info(`Socket/${socket.id}: User connected.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                actor_type: 'user',\n                actor_id: socket.data.userId,\n            });\n        } else if (socket.data.robotId) {\n            useLogger().info(`Socket/${socket.id}: Robot connected.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                actor_type: 'robot',\n                actor_id: socket.data.robotId,\n            });\n        } else if (socket.data.clientId) {\n            useLogger().info(`Socket/${socket.id}: Client connected.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                actor_type: 'client',\n                actor_id: socket.data.clientId,\n            });\n        } else {\n            useLogger().warn(`Socket/${socket.id}: Not authenticated.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n            });\n\n            next(new UnauthorizedError());\n            return;\n        }\n\n        socket.on('disconnect', () => {\n            if (socket.data.userId) {\n                useLogger().info(`Socket/${socket.id}: User disconnected`, {\n                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                    actor_type: 'user',\n                    actor_id: socket.data.userId,\n                });\n            } else if (socket.data.robotId) {\n                useLogger().info(`Socket/${socket.id}: Robot disconnected`, {\n                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                    actor_type: 'robot',\n                    actor_id: socket.data.userId,\n                });\n            } else if (socket.data.clientId) {\n                useLogger().info(`Socket/${socket.id}: Client disconnected`, {\n                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                    actor_type: 'client',\n                    actor_id: socket.data.clientId,\n                });\n            }\n        });\n\n        next();\n    });\n}\n","/*\n * Copyright (c) 2021-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UnauthorizedError } from '@ebec/http';\nimport type { Namespace, Server } from '../types';\n\nexport function mountForceLoggedInMiddleware(input: Namespace | Server) {\n    input.use((socket, next) => {\n        if (socket.data.userId || socket.data.robotId) {\n            next();\n            return;\n        }\n\n        next(new UnauthorizedError());\n    });\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { useLogger } from '@privateaim/server-kit';\nimport { LogChannel, LogFlag } from '@privateaim/telemetry-kit';\nimport type { Namespace, Server } from '../types';\n\nexport function mountLoggingMiddleware(\n    nsp: Namespace | Server,\n) {\n    nsp.on('error', (err) => {\n        useLogger().error(err, {\n            [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n        });\n    });\n\n    nsp.use((socket, next) => {\n        useLogger().debug(`Socket/${socket.id}: Connected.`, {\n            namespace: socket.nsp.name,\n            [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n        });\n\n        socket.on('disconnect', () => {\n            useLogger().debug(`Socket/${socket.id}: Disconnected.`, {\n                namespace: socket.nsp.name,\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n            });\n        });\n\n        next();\n    });\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    isRedisClientUsable, useLogger, useRedisPublishClient, useRedisSubscribeClient,\n} from '@privateaim/server-kit';\nimport { LogChannel, LogFlag } from '@privateaim/telemetry-kit';\nimport { createAdapter } from '@socket.io/redis-adapter';\nimport type { Server as HTTPServer } from 'node:http';\nimport type { DefaultEventsMap, ServerOptions } from 'socket.io';\nimport { Server } from 'socket.io';\n\nexport function createServer<\n    ListenEvents extends Record<string, any> = DefaultEventsMap,\n    EmitEvents extends Record<string, any> = ListenEvents,\n    ServerSideEvents extends Record<string, any> = DefaultEventsMap,\n    SocketData = any,\n>(\n    httpServer: HTTPServer,\n): Server<ListenEvents, EmitEvents, ServerSideEvents, SocketData> {\n    let adapter : ServerOptions['adapter'] | undefined;\n    if (isRedisClientUsable()) {\n        adapter = createAdapter(\n            useRedisPublishClient(),\n            useRedisSubscribeClient(),\n        );\n    }\n\n    const server = new Server<\n    ListenEvents,\n    EmitEvents,\n    ServerSideEvents,\n    SocketData\n    >(httpServer, {\n        adapter,\n        cors: {\n            origin(origin, callback) {\n                callback(null, true);\n            },\n            credentials: true,\n        },\n        transports: ['websocket', 'polling'],\n    });\n\n    server.engine.on('connection_error', (err) => {\n        useLogger().error({\n            message: err.message,\n            code: err.code,\n            [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n        });\n    });\n\n    return server;\n}\n"],"names":["isSocketAuthenticated","socket","data","userId","clientId","robotId","subscribeSocketRoom","roomName","roomSubscriptions","join","unsubscribeSocketRoom","leave","generateAbilities","Object","values","PermissionName","AuthupPermissionName","map","name","createFakeTokenVerificationData","realm_id","realm_name","REALM_MASTER_NAME","sub_kind","sub","sub_name","permissions","applyTokenVerificationData","fakeAbilities","abilities","realmId","realmName","permissionChecker","PermissionChecker","repository","PermissionMemoryRepository","OAuth2SubKind","USER","userName","ROBOT","robotName","CLIENT","clientName","createAuthupMiddleware","options","baseURL","redis","isRedisClientUsable","useRedisClient","vault","isVaultClientUsable","useVaultClient","next","tokenCreator","type","password","cache","RedisTokenVerifierCache","MemoryTokenVerifierCache","createMiddleware","tokenVerifier","TokenVerifier","creator","tokenVerifierHandler","mountAuthupMiddleware","nsp","middleware","use","useLogger","info","id","LogFlag","CHANNEL","LogChannel","WEBSOCKET","actor_type","actor_id","warn","UnauthorizedError","on","mountForceLoggedInMiddleware","input","mountLoggingMiddleware","err","error","debug","namespace","createServer","httpServer","adapter","createAdapter","useRedisPublishClient","useRedisSubscribeClient","server","Server","cors","origin","callback","credentials","transports","engine","message","code"],"mappings":";;;;;;;;;;;;AAAA;;;;;IASO,SAASA,qBAAAA,CAAsBC,MAAc,EAAA;AAChD,IAAA,OAAO,CAAC,CAACA,MAAAA,CAAOC,IAAI,CAACC,MAAM,IACvB,CAAC,CAACF,OAAOC,IAAI,CAACE,QAAQ,IACtB,CAAC,CAACH,MAAAA,CAAOC,IAAI,CAACG,OAAO;AAC7B;;ACbA;;;;;AAKC,IAIM,SAASC,mBAAAA,CACZL,MAAc,EACdM,QAAgB,EAAA;AAEhB,IAAA,IAAI,CAACN,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,EAAE;AAChCP,QAAAA,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,GAAG,EAAC;AACrC,IAAA;AAEA,IAAA,IAAI,CAACP,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,SAAS,EAAE;AAC1CN,QAAAA,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,SAAS,GAAG,CAAA;AAC9C,IAAA;AAEAN,IAAAA,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,QAAAA,CAAS,EAAA;AAEvCN,IAAAA,MAAAA,CAAOQ,IAAI,CAACF,QAAAA,CAAAA;AAChB;AAEO,SAASG,qBAAAA,CACZT,MAAc,EACdM,QAAgB,EAAA;AAEhB,IAAA,IAAI,CAACN,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,EAAE;AAChC,QAAA;AACJ,IAAA;AAEA,IAAA,IAAIP,OAAOC,IAAI,CAACM,iBAAiB,CAACD,SAAS,EAAE;AACzC,QAAA,IAAIN,OAAOC,IAAI,CAACM,iBAAiB,CAACD,QAAAA,CAAS,GAAG,CAAA,EAAG;AAC7CN,YAAAA,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,QAAAA,CAAS,EAAA;QAC3C,CAAA,MAAO;AACH,YAAA,OAAON,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,QAAAA,CAAS;AAClD,QAAA;AACJ,IAAA;AAEA,IAAA,IAAI,CAACN,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,SAAS,EAAE;AAC1CN,QAAAA,MAAAA,CAAOU,KAAK,CAACJ,QAAAA,CAAAA;AACjB,IAAA;AACJ;;ACpBA,SAASK,iBAAAA,GAAAA;IACL,OAAOC,MAAAA,CAAOC,MAAM,CAAC;AACjB,QAAA,GAAGC,gBAAc;AACjB,QAAA,GAAGC;AACP,KAAA,CAAA,CAAGC,GAAG,CAAC,CAACC,IAAAA,IAAU;AACdA,YAAAA;SACJ,CAAA,CAAA;AACJ;AAEO,SAASC,+BAAAA,GAAAA;IACZ,OAAO;QACHC,QAAAA,EAAU,sCAAA;QACVC,UAAAA,EAAYC,iBAAAA;QAEZC,QAAAA,EAAU,MAAA;QACVC,GAAAA,EAAK,sCAAA;QACLC,QAAAA,EAAU,OAAA;QAEVC,WAAAA,EAAad,iBAAAA;AACjB,KAAA;AACJ;AAEO,SAASe,0BAAAA,CACZ1B,MAAc,EACdC,IAAkC,EAClC0B,aAAuB,EAAA;IAEvB,IAAIC,SAAAA;AACJ,IAAA,IAAID,aAAAA,EAAe;QACfC,SAAAA,GAAYjB,iBAAAA,EAAAA;IAChB,CAAA,MAAO;AACHiB,QAAAA,SAAAA,GAAY3B,KAAKwB,WAAW;AAChC,IAAA;AAEAzB,IAAAA,MAAAA,CAAOC,IAAI,CAAC4B,OAAO,GAAG5B,KAAKkB,QAAQ;AACnCnB,IAAAA,MAAAA,CAAOC,IAAI,CAAC6B,SAAS,GAAG7B,KAAKmB,UAAU;AAEvCpB,IAAAA,MAAAA,CAAOC,IAAI,CAAC8B,iBAAiB,GAAG,IAAIC,iBAAAA,CAAkB;AAClDC,QAAAA,UAAAA,EAAY,IAAIC,0BAAAA,CAA2BN,SAAAA;AAC/C,KAAA,CAAA;AAEA,IAAA,OAAQ3B,KAAKqB,QAAQ;AACjB,QAAA,KAAKa,cAAcC,IAAI;AAAE,YAAA;AACrBpC,gBAAAA,MAAAA,CAAOC,IAAI,CAACC,MAAM,GAAGD,KAAKsB,GAAG;AAC7BvB,gBAAAA,MAAAA,CAAOC,IAAI,CAACoC,QAAQ,GAAGpC,KAAKuB,QAAQ;AACpC,gBAAA;AACJ,YAAA;AACA,QAAA,KAAKW,cAAcG,KAAK;AAAE,YAAA;AACtBtC,gBAAAA,MAAAA,CAAOC,IAAI,CAACG,OAAO,GAAGH,KAAKsB,GAAG;AAC9BvB,gBAAAA,MAAAA,CAAOC,IAAI,CAACsC,SAAS,GAAGtC,KAAKuB,QAAQ;AACrC,gBAAA;AACJ,YAAA;AACA,QAAA,KAAKW,cAAcK,MAAM;AAAE,YAAA;AACvBxC,gBAAAA,MAAAA,CAAOC,IAAI,CAACE,QAAQ,GAAGF,KAAKsB,GAAG;AAC/BvB,gBAAAA,MAAAA,CAAOC,IAAI,CAACwC,UAAU,GAAGxC,KAAKuB,QAAQ;AACtC,gBAAA;AACJ,YAAA;AACJ;AACJ;;AC3DO,SAASkB,uBACZC,OAA4C,EAAA;IAE5C,IAAIC,OAAAA;IACJ,IAAID,OAAAA,CAAQC,OAAO,EAAE;AACjBA,QAAAA,OAAAA,GAAUD,QAAQC,OAAO;AAC7B,IAAA;IAEA,IAAIC,KAAAA;AACJ,IAAA,IAAIC,mBAAAA,EAAAA,EAAuB;QACvBD,KAAAA,GAAQE,cAAAA,EAAAA;AACZ,IAAA;IAEA,IAAIC,KAAAA;AACJ,IAAA,IAAIC,mBAAAA,EAAAA,EAAuB;QACvBD,KAAAA,GAAQE,cAAAA,EAAAA;AACZ,IAAA;AAEA,IAAA,IAAI,CAACN,OAAAA,EAAS;AACV,QAAA,MAAM3C,IAAAA,GAAOiB,+BAAAA,EAAAA;AAEb,QAAA,OAAO,CAAClB,MAAAA,EAAQmD,IAAAA,GAAAA;YACZzB,0BAAAA,CAA2B1B,MAAAA,EAAQC,IAAAA,EAAM0C,OAAAA,CAAQhB,aAAa,CAAA;AAC9DwB,YAAAA,IAAAA,EAAAA;AACJ,QAAA,CAAA;AACJ,IAAA;IAEA,IAAIC,YAAAA;AACJ,IAAA,IAAIJ,KAAAA,EAAO;QACPI,YAAAA,GAAe;YACXC,IAAAA,EAAM,cAAA;YACNpC,IAAAA,EAAM,QAAA;AACN+B,YAAAA,KAAAA;AACAJ,YAAAA;AACJ,SAAA;IACJ,CAAA,MAAO;QACHQ,YAAAA,GAAe;YACXC,IAAAA,EAAM,MAAA;YACNpC,IAAAA,EAAM,OAAA;YACNqC,QAAAA,EAAU,UAAA;AACVV,YAAAA;AACJ,SAAA;AACJ,IAAA;IAEA,IAAIW,KAAAA;AACJ,IAAA,IAAIV,KAAAA,EAAO;AACPU,QAAAA,KAAAA,GAAQ,IAAIC,uBAAAA,CAAwBX,KAAAA,CAAAA;IACxC,CAAA,MAAO;AACHU,QAAAA,KAAAA,GAAQ,IAAIE,wBAAAA,EAAAA;AAChB,IAAA;AAEA,IAAA,OAAOC,gBAAAA,CAAiB;AACpBC,QAAAA,aAAAA,EAAe,IAAIC,aAAAA,CAAc;AAC7BhB,YAAAA,OAAAA;YACAiB,OAAAA,EAAST,YAAAA;AACTG,YAAAA;AACJ,SAAA,CAAA;AACAO,QAAAA,oBAAAA,EAAsB,CAClB9D,MAAAA,EACAC,IAAAA,GACCyB,2BAA2B1B,MAAAA,EAAQC,IAAAA,EAAM0C,QAAQhB,aAAa;AACvE,KAAA,CAAA;AACJ;AAEO,SAASoC,qBAAAA,CACZC,GAAuB,EACvBrB,OAA4C,EAAA;AAE5C,IAAA,MAAMsB,aAAavB,sBAAAA,CAAuBC,OAAAA,CAAAA;AAC1CqB,IAAAA,GAAAA,CAAIE,GAAG,CAACD,UAAAA,CAAAA;IAERD,GAAAA,CAAIE,GAAG,CAAC,CAAClE,MAAAA,EAAQmD,IAAAA,GAAAA;AACb,QAAA,IAAInD,MAAAA,CAAOC,IAAI,CAACC,MAAM,EAAE;YACpBiE,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,iBAAiB,CAAC,EAAE;AACrD,gBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;gBACvCC,UAAAA,EAAY,MAAA;gBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACC;AAC1B,aAAA,CAAA;AACJ,QAAA,CAAA,MAAO,IAAIF,MAAAA,CAAOC,IAAI,CAACG,OAAO,EAAE;YAC5B+D,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,kBAAkB,CAAC,EAAE;AACtD,gBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;gBACvCC,UAAAA,EAAY,OAAA;gBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACG;AAC1B,aAAA,CAAA;AACJ,QAAA,CAAA,MAAO,IAAIJ,MAAAA,CAAOC,IAAI,CAACE,QAAQ,EAAE;YAC7BgE,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,mBAAmB,CAAC,EAAE;AACvD,gBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;gBACvCC,UAAAA,EAAY,QAAA;gBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACE;AAC1B,aAAA,CAAA;QACJ,CAAA,MAAO;YACHgE,SAAAA,EAAAA,CAAYS,IAAI,CAAC,CAAC,OAAO,EAAE5E,OAAOqE,EAAE,CAAC,oBAAoB,CAAC,EAAE;AACxD,gBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,aAAA,CAAA;AAEAtB,YAAAA,IAAAA,CAAK,IAAI0B,iBAAAA,EAAAA,CAAAA;AACT,YAAA;AACJ,QAAA;QAEA7E,MAAAA,CAAO8E,EAAE,CAAC,YAAA,EAAc,IAAA;AACpB,YAAA,IAAI9E,MAAAA,CAAOC,IAAI,CAACC,MAAM,EAAE;gBACpBiE,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,mBAAmB,CAAC,EAAE;AACvD,oBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;oBACvCC,UAAAA,EAAY,MAAA;oBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACC;AAC1B,iBAAA,CAAA;AACJ,YAAA,CAAA,MAAO,IAAIF,MAAAA,CAAOC,IAAI,CAACG,OAAO,EAAE;gBAC5B+D,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,oBAAoB,CAAC,EAAE;AACxD,oBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;oBACvCC,UAAAA,EAAY,OAAA;oBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACC;AAC1B,iBAAA,CAAA;AACJ,YAAA,CAAA,MAAO,IAAIF,MAAAA,CAAOC,IAAI,CAACE,QAAQ,EAAE;gBAC7BgE,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,qBAAqB,CAAC,EAAE;AACzD,oBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;oBACvCC,UAAAA,EAAY,QAAA;oBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACE;AAC1B,iBAAA,CAAA;AACJ,YAAA;AACJ,QAAA,CAAA,CAAA;AAEAgD,QAAAA,IAAAA,EAAAA;AACJ,IAAA,CAAA,CAAA;AACJ;;ACzIO,SAAS4B,6BAA6BC,KAAyB,EAAA;IAClEA,KAAAA,CAAMd,GAAG,CAAC,CAAClE,MAAAA,EAAQmD,IAAAA,GAAAA;QACf,IAAInD,MAAAA,CAAOC,IAAI,CAACC,MAAM,IAAIF,MAAAA,CAAOC,IAAI,CAACG,OAAO,EAAE;AAC3C+C,YAAAA,IAAAA,EAAAA;AACA,YAAA;AACJ,QAAA;AAEAA,QAAAA,IAAAA,CAAK,IAAI0B,iBAAAA,EAAAA,CAAAA;AACb,IAAA,CAAA,CAAA;AACJ;;ACRO,SAASI,uBACZjB,GAAuB,EAAA;IAEvBA,GAAAA,CAAIc,EAAE,CAAC,OAAA,EAAS,CAACI,GAAAA,GAAAA;QACbf,SAAAA,EAAAA,CAAYgB,KAAK,CAACD,GAAAA,EAAK;AACnB,YAAA,CAACZ,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,SAAA,CAAA;AACJ,IAAA,CAAA,CAAA;IAEAT,GAAAA,CAAIE,GAAG,CAAC,CAAClE,MAAAA,EAAQmD,IAAAA,GAAAA;QACbgB,SAAAA,EAAAA,CAAYiB,KAAK,CAAC,CAAC,OAAO,EAAEpF,OAAOqE,EAAE,CAAC,YAAY,CAAC,EAAE;YACjDgB,SAAAA,EAAWrF,MAAAA,CAAOgE,GAAG,CAAC/C,IAAI;AAC1B,YAAA,CAACqD,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,SAAA,CAAA;QAEAzE,MAAAA,CAAO8E,EAAE,CAAC,YAAA,EAAc,IAAA;YACpBX,SAAAA,EAAAA,CAAYiB,KAAK,CAAC,CAAC,OAAO,EAAEpF,OAAOqE,EAAE,CAAC,eAAe,CAAC,EAAE;gBACpDgB,SAAAA,EAAWrF,MAAAA,CAAOgE,GAAG,CAAC/C,IAAI;AAC1B,gBAAA,CAACqD,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,aAAA,CAAA;AACJ,QAAA,CAAA,CAAA;AAEAtB,QAAAA,IAAAA,EAAAA;AACJ,IAAA,CAAA,CAAA;AACJ;;ACnBO,SAASmC,aAMZC,UAAsB,EAAA;IAEtB,IAAIC,OAAAA;AACJ,IAAA,IAAI1C,mBAAAA,EAAAA,EAAuB;AACvB0C,QAAAA,OAAAA,GAAUC,cACNC,qBAAAA,EAAAA,EACAC,uBAAAA,EAAAA,CAAAA;AAER,IAAA;IAEA,MAAMC,MAAAA,GAAS,IAAIC,MAAAA,CAKjBN,UAAAA,EAAY;AACVC,QAAAA,OAAAA;QACAM,IAAAA,EAAM;YACFC,MAAAA,CAAAA,CAAOA,MAAM,EAAEC,QAAQ,EAAA;AACnBA,gBAAAA,QAAAA,CAAS,IAAA,EAAM,IAAA,CAAA;AACnB,YAAA,CAAA;YACAC,WAAAA,EAAa;AACjB,SAAA;QACAC,UAAAA,EAAY;AAAC,YAAA,WAAA;AAAa,YAAA;AAAU;AACxC,KAAA,CAAA;AAEAN,IAAAA,MAAAA,CAAOO,MAAM,CAACrB,EAAE,CAAC,oBAAoB,CAACI,GAAAA,GAAAA;AAClCf,QAAAA,SAAAA,EAAAA,CAAYgB,KAAK,CAAC;AACdiB,YAAAA,OAAAA,EAASlB,IAAIkB,OAAO;AACpBC,YAAAA,IAAAA,EAAMnB,IAAImB,IAAI;AACd,YAAA,CAAC/B,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,SAAA,CAAA;AACJ,IAAA,CAAA,CAAA;IAEA,OAAOmB,MAAAA;AACX;;;;"}

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@privateaim/server-realtime-kit",
     "type": "module",
-    "version": "0.8.27",
+    "version": "0.8.28",
     "module": "dist/index.mjs",
     "types": "dist/index.d.ts",
     "exports": {
@@ -19,17 +19,17 @@
     "license": "Apache-2.0",
     "description": "This package contains the realtime application which connects the API with socket based clients.",
     "dependencies": {
-        "@authup/access": "^1.0.0-beta.28",
-        "@authup/specs": "^1.0.0-beta.28",
-        "@authup/kit": "^1.0.0-beta.28",
-        "@authup/core-kit": "^1.0.0-beta.28",
-        "@authup/core-realtime-kit": "^1.0.0-beta.28",
+        "@authup/access": "^1.0.0-beta.29",
+        "@authup/specs": "^1.0.0-beta.29",
+        "@authup/kit": "^1.0.0-beta.29",
+        "@authup/core-kit": "^1.0.0-beta.29",
+        "@authup/core-realtime-kit": "^1.0.0-beta.29",
         "@authup/server-adapter-kit": "^1.0.0-beta.28",
         "@authup/server-adapter-socket-io": "^1.0.0-beta.28",
         "@socket.io/redis-adapter": "^8.3.0",
-        "@privateaim/kit": "^0.8.27",
-        "@privateaim/telemetry-kit": "^0.8.27",
-        "@privateaim/server-kit": "^0.8.27",
+        "@privateaim/kit": "^0.8.28",
+        "@privateaim/telemetry-kit": "^0.8.28",
+        "@privateaim/server-kit": "^0.8.28",
         "@ebec/http": "^2.3.0"
     },
     "devDependencies": {

package/src/middlewares/authup/utils.ts

@@ -7,8 +7,8 @@
 
 import { PermissionName as AuthupPermissionName, REALM_MASTER_NAME } from '@authup/core-kit';
 import type { PermissionItem } from '@authup/access';
+import { PermissionChecker, PermissionMemoryRepository } from '@authup/access';
 import { OAuth2SubKind } from '@authup/specs';
-import { PermissionChecker, PermissionMemoryProvider } from '@authup/access';
 import type { TokenVerificationData } from '@authup/server-adapter-kit';
 import { PermissionName } from '@privateaim/kit';
 import type { Socket } from '../../types';
@@ -61,7 +61,7 @@ export function applyTokenVerificationData(
     socket.data.realmName = data.realm_name;
 
     socket.data.permissionChecker = new PermissionChecker({
-        provider: new PermissionMemoryProvider(abilities),
+        repository: new PermissionMemoryRepository(abilities),
     });
 
     switch (data.sub_kind) {