@privateaim/server-realtime-kit 0.8.28 → 0.8.30

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # Changelog
 
+## [0.8.30](https://github.com/PrivateAIM/hub/compare/v0.8.29...v0.8.30) (2026-03-02)
+
+
+### Features
+
+* support client identity for messenger/realtime communication ([#1464](https://github.com/PrivateAIM/hub/issues/1464)) ([5987458](https://github.com/PrivateAIM/hub/commit/59874581dbbc1101b79dd728b5786d5350074866))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @privateaim/kit bumped from ^0.8.29 to ^0.8.30
+    * @privateaim/telemetry-kit bumped from ^0.8.29 to ^0.8.30
+    * @privateaim/server-kit bumped from ^0.8.29 to ^0.8.30
+
+## [0.8.29](https://github.com/PrivateAIM/hub/compare/v0.8.28...v0.8.29) (2026-03-02)
+
+
+### Features
+
+* replace robot- with client-authentication/authorization ([#1445](https://github.com/PrivateAIM/hub/issues/1445)) ([f55dc66](https://github.com/PrivateAIM/hub/commit/f55dc668df66f6efa7a0bb2285c91b1d5f2ae9ef))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @privateaim/kit bumped from ^0.8.28 to ^0.8.29
+    * @privateaim/telemetry-kit bumped from ^0.8.28 to ^0.8.29
+    * @privateaim/server-kit bumped from ^0.8.28 to ^0.8.29
+
 ## [0.8.28](https://github.com/PrivateAIM/hub/compare/v0.8.27...v0.8.28) (2026-02-26)
 
 

package/dist/helpers/authenticated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authenticated.d.ts","sourceRoot":"","sources":["../../src/helpers/authenticated.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEvC,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAI,OAAO,CAI9D"}
+{"version":3,"file":"authenticated.d.ts","sourceRoot":"","sources":["../../src/helpers/authenticated.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEvC,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAI,OAAO,CAE9D"}

package/dist/index.mjs

@@ -1,11 +1,9 @@
 import { UnauthorizedError } from '@ebec/http';
-import { isRedisClientUsable, useRedisClient, isVaultClientUsable, useVaultClient, useLogger, useRedisPublishClient, useRedisSubscribeClient } from '@privateaim/server-kit';
+import { useLogger, isRedisClientUsable, useRedisPublishClient, useRedisSubscribeClient } from '@privateaim/server-kit';
 import { LogChannel, LogFlag } from '@privateaim/telemetry-kit';
-import { RedisTokenVerifierCache, MemoryTokenVerifierCache, TokenVerifier } from '@authup/server-adapter-kit';
 import { createMiddleware } from '@authup/server-adapter-socket-io';
 import { REALM_MASTER_NAME, PermissionName } from '@authup/core-kit';
 import { PermissionChecker, PermissionMemoryRepository } from '@authup/access';
-import { OAuth2SubKind } from '@authup/specs';
 import { PermissionName as PermissionName$1 } from '@privateaim/kit';
 import { createAdapter } from '@socket.io/redis-adapter';
 import { Server } from 'socket.io';
@@ -16,7 +14,7 @@ import { Server } from 'socket.io';
  * For the full copyright and license information,
  * view the LICENSE file that was distributed with this source code.
  */ function isSocketAuthenticated(socket) {
-    return !!socket.data.userId || !!socket.data.clientId || !!socket.data.robotId;
+    return !!socket.data.identity;
 }
 
 /*
@@ -64,7 +62,7 @@ function createFakeTokenVerificationData() {
         realm_name: REALM_MASTER_NAME,
         sub_kind: 'user',
         sub: 'd94b2f28-29e3-4ced-b8f1-6923a01dc1ee',
-        sub_name: 'admin',
+        sub_name: 'system',
         permissions: generateAbilities()
     };
 }
@@ -75,105 +73,39 @@ function applyTokenVerificationData(socket, data, fakeAbilities) {
     } else {
         abilities = data.permissions;
     }
-    socket.data.realmId = data.realm_id;
-    socket.data.realmName = data.realm_name;
+    socket.data.identity = {
+        type: data.sub_kind,
+        id: data.sub,
+        realmId: data.realm_id,
+        realmName: data.realm_name
+    };
     socket.data.permissionChecker = new PermissionChecker({
         repository: new PermissionMemoryRepository(abilities)
     });
-    switch(data.sub_kind){
-        case OAuth2SubKind.USER:
-            {
-                socket.data.userId = data.sub;
-                socket.data.userName = data.sub_name;
-                break;
-            }
-        case OAuth2SubKind.ROBOT:
-            {
-                socket.data.robotId = data.sub;
-                socket.data.robotName = data.sub_name;
-                break;
-            }
-        case OAuth2SubKind.CLIENT:
-            {
-                socket.data.clientId = data.sub;
-                socket.data.clientName = data.sub_name;
-                break;
-            }
-    }
 }
 
-function createAuthupMiddleware(options) {
-    let baseURL;
-    if (options.baseURL) {
-        baseURL = options.baseURL;
-    }
-    let redis;
-    if (isRedisClientUsable()) {
-        redis = useRedisClient();
-    }
-    let vault;
-    if (isVaultClientUsable()) {
-        vault = useVaultClient();
-    }
-    if (!baseURL) {
+function createAuthorizationMiddleware(options) {
+    if (!options.baseURL) {
         const data = createFakeTokenVerificationData();
         return (socket, next)=>{
             applyTokenVerificationData(socket, data, options.fakeAbilities);
             next();
         };
     }
-    let tokenCreator;
-    if (vault) {
-        tokenCreator = {
-            type: 'robotInVault',
-            name: 'system',
-            vault,
-            baseURL
-        };
-    } else {
-        tokenCreator = {
-            type: 'user',
-            name: 'admin',
-            password: 'start123',
-            baseURL
-        };
-    }
-    let cache;
-    if (redis) {
-        cache = new RedisTokenVerifierCache(redis);
-    } else {
-        cache = new MemoryTokenVerifierCache();
-    }
     return createMiddleware({
-        tokenVerifier: new TokenVerifier({
-            baseURL,
-            creator: tokenCreator,
-            cache
-        }),
+        tokenVerifier: options.tokenVerifier,
         tokenVerifierHandler: (socket, data)=>applyTokenVerificationData(socket, data, options.fakeAbilities)
     });
 }
-function mountAuthupMiddleware(nsp, options) {
-    const middleware = createAuthupMiddleware(options);
+function mountAuthorizationMiddleware(nsp, options) {
+    const middleware = createAuthorizationMiddleware(options);
     nsp.use(middleware);
     nsp.use((socket, next)=>{
-        if (socket.data.userId) {
-            useLogger().info(`Socket/${socket.id}: User connected.`, {
+        if (socket.data.identity) {
+            useLogger().info(`Socket/${socket.id}: ${socket.data.identity.type} connected.`, {
                 [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,
-                actor_type: 'user',
-                actor_id: socket.data.userId
-            });
-        } else if (socket.data.robotId) {
-            useLogger().info(`Socket/${socket.id}: Robot connected.`, {
-                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,
-                actor_type: 'robot',
-                actor_id: socket.data.robotId
-            });
-        } else if (socket.data.clientId) {
-            useLogger().info(`Socket/${socket.id}: Client connected.`, {
-                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,
-                actor_type: 'client',
-                actor_id: socket.data.clientId
+                actor_type: socket.data.identity.type,
+                actor_id: socket.data.identity.id
             });
         } else {
             useLogger().warn(`Socket/${socket.id}: Not authenticated.`, {
@@ -183,23 +115,11 @@ function mountAuthupMiddleware(nsp, options) {
             return;
         }
         socket.on('disconnect', ()=>{
-            if (socket.data.userId) {
-                useLogger().info(`Socket/${socket.id}: User disconnected`, {
-                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,
-                    actor_type: 'user',
-                    actor_id: socket.data.userId
-                });
-            } else if (socket.data.robotId) {
-                useLogger().info(`Socket/${socket.id}: Robot disconnected`, {
-                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,
-                    actor_type: 'robot',
-                    actor_id: socket.data.userId
-                });
-            } else if (socket.data.clientId) {
-                useLogger().info(`Socket/${socket.id}: Client disconnected`, {
+            if (socket.data.identity) {
+                useLogger().info(`Socket/${socket.id}: ${socket.data.identity.type} disconnected`, {
                     [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,
-                    actor_type: 'client',
-                    actor_id: socket.data.clientId
+                    actor_type: socket.data.identity.type,
+                    actor_id: socket.data.identity.id
                 });
             }
         });
@@ -209,7 +129,7 @@ function mountAuthupMiddleware(nsp, options) {
 
 function mountForceLoggedInMiddleware(input) {
     input.use((socket, next)=>{
-        if (socket.data.userId || socket.data.robotId) {
+        if (!isSocketAuthenticated(socket)) {
             next();
             return;
         }
@@ -266,5 +186,5 @@ function createServer(httpServer) {
     return server;
 }
 
-export { createAuthupMiddleware, createServer, isSocketAuthenticated, mountAuthupMiddleware, mountForceLoggedInMiddleware, mountLoggingMiddleware, subscribeSocketRoom, unsubscribeSocketRoom };
+export { createAuthorizationMiddleware, createServer, isSocketAuthenticated, mountAuthorizationMiddleware, mountForceLoggedInMiddleware, mountLoggingMiddleware, subscribeSocketRoom, unsubscribeSocketRoom };
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../src/helpers/authenticated.ts","../src/helpers/room-subscriptions.ts","../src/middlewares/authup/utils.ts","../src/middlewares/authup/create.ts","../src/middlewares/force-logged-in.ts","../src/middlewares/logging.ts","../src/server/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Socket } from '../types';\n\nexport function isSocketAuthenticated(socket: Socket) : boolean {\n    return !!socket.data.userId ||\n        !!socket.data.clientId ||\n        !!socket.data.robotId;\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Socket } from '../types';\n\nexport function subscribeSocketRoom(\n    socket: Socket,\n    roomName: string,\n) {\n    if (!socket.data.roomSubscriptions) {\n        socket.data.roomSubscriptions = {};\n    }\n\n    if (!socket.data.roomSubscriptions[roomName]) {\n        socket.data.roomSubscriptions[roomName] = 0;\n    }\n\n    socket.data.roomSubscriptions[roomName]++;\n\n    socket.join(roomName);\n}\n\nexport function unsubscribeSocketRoom(\n    socket: Socket,\n    roomName: string,\n) {\n    if (!socket.data.roomSubscriptions) {\n        return;\n    }\n\n    if (socket.data.roomSubscriptions[roomName]) {\n        if (socket.data.roomSubscriptions[roomName] > 1) {\n            socket.data.roomSubscriptions[roomName]--;\n        } else {\n            delete socket.data.roomSubscriptions[roomName];\n        }\n    }\n\n    if (!socket.data.roomSubscriptions[roomName]) {\n        socket.leave(roomName);\n    }\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PermissionName as AuthupPermissionName, REALM_MASTER_NAME } from '@authup/core-kit';\nimport type { PermissionItem } from '@authup/access';\nimport { PermissionChecker, PermissionMemoryRepository } from '@authup/access';\nimport { OAuth2SubKind } from '@authup/specs';\nimport type { TokenVerificationData } from '@authup/server-adapter-kit';\nimport { PermissionName } from '@privateaim/kit';\nimport type { Socket } from '../../types';\n\ntype TokenVerificationDataMinimal = Pick<\nTokenVerificationData,\n'permissions' |\n'realm_id' |\n'realm_name' |\n'sub' |\n'sub_kind' |\n'sub_name'\n>;\n\nfunction generateAbilities(): PermissionItem[] {\n    return Object.values({\n        ...PermissionName,\n        ...AuthupPermissionName,\n    }).map((name) => ({\n        name,\n    } satisfies PermissionItem));\n}\n\nexport function createFakeTokenVerificationData(): TokenVerificationDataMinimal {\n    return {\n        realm_id: 'd94b2f28-29e3-4ced-b8f1-6923a01dc1ee',\n        realm_name: REALM_MASTER_NAME,\n\n        sub_kind: 'user',\n        sub: 'd94b2f28-29e3-4ced-b8f1-6923a01dc1ee',\n        sub_name: 'admin',\n\n        permissions: generateAbilities(),\n    };\n}\n\nexport function applyTokenVerificationData(\n    socket: Socket,\n    data: TokenVerificationDataMinimal,\n    fakeAbilities?: boolean,\n) {\n    let abilities: PermissionItem[];\n    if (fakeAbilities) {\n        abilities = generateAbilities();\n    } else {\n        abilities = data.permissions;\n    }\n\n    socket.data.realmId = data.realm_id;\n    socket.data.realmName = data.realm_name;\n\n    socket.data.permissionChecker = new PermissionChecker({\n        repository: new PermissionMemoryRepository(abilities),\n    });\n\n    switch (data.sub_kind) {\n        case OAuth2SubKind.USER: {\n            socket.data.userId = data.sub;\n            socket.data.userName = data.sub_name;\n            break;\n        }\n        case OAuth2SubKind.ROBOT: {\n            socket.data.robotId = data.sub;\n            socket.data.robotName = data.sub_name;\n            break;\n        }\n        case OAuth2SubKind.CLIENT: {\n            socket.data.clientId = data.sub;\n            socket.data.clientName = data.sub_name;\n            break;\n        }\n    }\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UnauthorizedError } from '@ebec/http';\nimport type { VaultClient } from '@hapic/vault';\nimport {\n    isRedisClientUsable, isVaultClientUsable, useLogger, useRedisClient, useVaultClient,\n} from '@privateaim/server-kit';\nimport { LogChannel, LogFlag } from '@privateaim/telemetry-kit';\nimport type { Client as RedisClient } from 'redis-extension';\nimport type { TokenCreatorOptions } from '@authup/core-http-kit';\nimport type { ITokenVerifierCache } from '@authup/server-adapter-kit';\nimport { MemoryTokenVerifierCache, RedisTokenVerifierCache, TokenVerifier } from '@authup/server-adapter-kit';\nimport { createMiddleware } from '@authup/server-adapter-socket-io';\nimport type {\n    Middleware, Namespace, Server, Socket,\n} from '../../types';\nimport type { AuthupMiddlewareRegistrationOptions } from './types';\nimport { applyTokenVerificationData, createFakeTokenVerificationData } from './utils';\n\nexport function createAuthupMiddleware(\n    options: AuthupMiddlewareRegistrationOptions,\n) : Middleware {\n    let baseURL : string | undefined;\n    if (options.baseURL) {\n        baseURL = options.baseURL;\n    }\n\n    let redis : RedisClient | undefined;\n    if (isRedisClientUsable()) {\n        redis = useRedisClient();\n    }\n\n    let vault : VaultClient | undefined;\n    if (isVaultClientUsable()) {\n        vault = useVaultClient();\n    }\n\n    if (!baseURL) {\n        const data = createFakeTokenVerificationData();\n\n        return (socket, next) => {\n            applyTokenVerificationData(socket, data, options.fakeAbilities);\n            next();\n        };\n    }\n\n    let tokenCreator : TokenCreatorOptions;\n    if (vault) {\n        tokenCreator = {\n            type: 'robotInVault',\n            name: 'system',\n            vault,\n            baseURL,\n        };\n    } else {\n        tokenCreator = {\n            type: 'user',\n            name: 'admin',\n            password: 'start123',\n            baseURL,\n        };\n    }\n\n    let cache : ITokenVerifierCache;\n    if (redis) {\n        cache = new RedisTokenVerifierCache(redis);\n    } else {\n        cache = new MemoryTokenVerifierCache();\n    }\n\n    return createMiddleware({\n        tokenVerifier: new TokenVerifier({\n            baseURL,\n            creator: tokenCreator,\n            cache,\n        }),\n        tokenVerifierHandler: (\n            socket: Socket,\n            data,\n        ) => applyTokenVerificationData(socket, data, options.fakeAbilities),\n    });\n}\n\nexport function mountAuthupMiddleware(\n    nsp: Namespace | Server,\n    options: AuthupMiddlewareRegistrationOptions,\n) {\n    const middleware = createAuthupMiddleware(options);\n    nsp.use(middleware);\n\n    nsp.use((socket, next) => {\n        if (socket.data.userId) {\n            useLogger().info(`Socket/${socket.id}: User connected.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                actor_type: 'user',\n                actor_id: socket.data.userId,\n            });\n        } else if (socket.data.robotId) {\n            useLogger().info(`Socket/${socket.id}: Robot connected.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                actor_type: 'robot',\n                actor_id: socket.data.robotId,\n            });\n        } else if (socket.data.clientId) {\n            useLogger().info(`Socket/${socket.id}: Client connected.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                actor_type: 'client',\n                actor_id: socket.data.clientId,\n            });\n        } else {\n            useLogger().warn(`Socket/${socket.id}: Not authenticated.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n            });\n\n            next(new UnauthorizedError());\n            return;\n        }\n\n        socket.on('disconnect', () => {\n            if (socket.data.userId) {\n                useLogger().info(`Socket/${socket.id}: User disconnected`, {\n                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                    actor_type: 'user',\n                    actor_id: socket.data.userId,\n                });\n            } else if (socket.data.robotId) {\n                useLogger().info(`Socket/${socket.id}: Robot disconnected`, {\n                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                    actor_type: 'robot',\n                    actor_id: socket.data.userId,\n                });\n            } else if (socket.data.clientId) {\n                useLogger().info(`Socket/${socket.id}: Client disconnected`, {\n                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                    actor_type: 'client',\n                    actor_id: socket.data.clientId,\n                });\n            }\n        });\n\n        next();\n    });\n}\n","/*\n * Copyright (c) 2021-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UnauthorizedError } from '@ebec/http';\nimport type { Namespace, Server } from '../types';\n\nexport function mountForceLoggedInMiddleware(input: Namespace | Server) {\n    input.use((socket, next) => {\n        if (socket.data.userId || socket.data.robotId) {\n            next();\n            return;\n        }\n\n        next(new UnauthorizedError());\n    });\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { useLogger } from '@privateaim/server-kit';\nimport { LogChannel, LogFlag } from '@privateaim/telemetry-kit';\nimport type { Namespace, Server } from '../types';\n\nexport function mountLoggingMiddleware(\n    nsp: Namespace | Server,\n) {\n    nsp.on('error', (err) => {\n        useLogger().error(err, {\n            [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n        });\n    });\n\n    nsp.use((socket, next) => {\n        useLogger().debug(`Socket/${socket.id}: Connected.`, {\n            namespace: socket.nsp.name,\n            [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n        });\n\n        socket.on('disconnect', () => {\n            useLogger().debug(`Socket/${socket.id}: Disconnected.`, {\n                namespace: socket.nsp.name,\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n            });\n        });\n\n        next();\n    });\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    isRedisClientUsable, useLogger, useRedisPublishClient, useRedisSubscribeClient,\n} from '@privateaim/server-kit';\nimport { LogChannel, LogFlag } from '@privateaim/telemetry-kit';\nimport { createAdapter } from '@socket.io/redis-adapter';\nimport type { Server as HTTPServer } from 'node:http';\nimport type { DefaultEventsMap, ServerOptions } from 'socket.io';\nimport { Server } from 'socket.io';\n\nexport function createServer<\n    ListenEvents extends Record<string, any> = DefaultEventsMap,\n    EmitEvents extends Record<string, any> = ListenEvents,\n    ServerSideEvents extends Record<string, any> = DefaultEventsMap,\n    SocketData = any,\n>(\n    httpServer: HTTPServer,\n): Server<ListenEvents, EmitEvents, ServerSideEvents, SocketData> {\n    let adapter : ServerOptions['adapter'] | undefined;\n    if (isRedisClientUsable()) {\n        adapter = createAdapter(\n            useRedisPublishClient(),\n            useRedisSubscribeClient(),\n        );\n    }\n\n    const server = new Server<\n    ListenEvents,\n    EmitEvents,\n    ServerSideEvents,\n    SocketData\n    >(httpServer, {\n        adapter,\n        cors: {\n            origin(origin, callback) {\n                callback(null, true);\n            },\n            credentials: true,\n        },\n        transports: ['websocket', 'polling'],\n    });\n\n    server.engine.on('connection_error', (err) => {\n        useLogger().error({\n            message: err.message,\n            code: err.code,\n            [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n        });\n    });\n\n    return server;\n}\n"],"names":["isSocketAuthenticated","socket","data","userId","clientId","robotId","subscribeSocketRoom","roomName","roomSubscriptions","join","unsubscribeSocketRoom","leave","generateAbilities","Object","values","PermissionName","AuthupPermissionName","map","name","createFakeTokenVerificationData","realm_id","realm_name","REALM_MASTER_NAME","sub_kind","sub","sub_name","permissions","applyTokenVerificationData","fakeAbilities","abilities","realmId","realmName","permissionChecker","PermissionChecker","repository","PermissionMemoryRepository","OAuth2SubKind","USER","userName","ROBOT","robotName","CLIENT","clientName","createAuthupMiddleware","options","baseURL","redis","isRedisClientUsable","useRedisClient","vault","isVaultClientUsable","useVaultClient","next","tokenCreator","type","password","cache","RedisTokenVerifierCache","MemoryTokenVerifierCache","createMiddleware","tokenVerifier","TokenVerifier","creator","tokenVerifierHandler","mountAuthupMiddleware","nsp","middleware","use","useLogger","info","id","LogFlag","CHANNEL","LogChannel","WEBSOCKET","actor_type","actor_id","warn","UnauthorizedError","on","mountForceLoggedInMiddleware","input","mountLoggingMiddleware","err","error","debug","namespace","createServer","httpServer","adapter","createAdapter","useRedisPublishClient","useRedisSubscribeClient","server","Server","cors","origin","callback","credentials","transports","engine","message","code"],"mappings":";;;;;;;;;;;;AAAA;;;;;IASO,SAASA,qBAAAA,CAAsBC,MAAc,EAAA;AAChD,IAAA,OAAO,CAAC,CAACA,MAAAA,CAAOC,IAAI,CAACC,MAAM,IACvB,CAAC,CAACF,OAAOC,IAAI,CAACE,QAAQ,IACtB,CAAC,CAACH,MAAAA,CAAOC,IAAI,CAACG,OAAO;AAC7B;;ACbA;;;;;AAKC,IAIM,SAASC,mBAAAA,CACZL,MAAc,EACdM,QAAgB,EAAA;AAEhB,IAAA,IAAI,CAACN,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,EAAE;AAChCP,QAAAA,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,GAAG,EAAC;AACrC,IAAA;AAEA,IAAA,IAAI,CAACP,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,SAAS,EAAE;AAC1CN,QAAAA,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,SAAS,GAAG,CAAA;AAC9C,IAAA;AAEAN,IAAAA,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,QAAAA,CAAS,EAAA;AAEvCN,IAAAA,MAAAA,CAAOQ,IAAI,CAACF,QAAAA,CAAAA;AAChB;AAEO,SAASG,qBAAAA,CACZT,MAAc,EACdM,QAAgB,EAAA;AAEhB,IAAA,IAAI,CAACN,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,EAAE;AAChC,QAAA;AACJ,IAAA;AAEA,IAAA,IAAIP,OAAOC,IAAI,CAACM,iBAAiB,CAACD,SAAS,EAAE;AACzC,QAAA,IAAIN,OAAOC,IAAI,CAACM,iBAAiB,CAACD,QAAAA,CAAS,GAAG,CAAA,EAAG;AAC7CN,YAAAA,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,QAAAA,CAAS,EAAA;QAC3C,CAAA,MAAO;AACH,YAAA,OAAON,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,QAAAA,CAAS;AAClD,QAAA;AACJ,IAAA;AAEA,IAAA,IAAI,CAACN,MAAAA,CAAOC,IAAI,CAACM,iBAAiB,CAACD,SAAS,EAAE;AAC1CN,QAAAA,MAAAA,CAAOU,KAAK,CAACJ,QAAAA,CAAAA;AACjB,IAAA;AACJ;;ACpBA,SAASK,iBAAAA,GAAAA;IACL,OAAOC,MAAAA,CAAOC,MAAM,CAAC;AACjB,QAAA,GAAGC,gBAAc;AACjB,QAAA,GAAGC;AACP,KAAA,CAAA,CAAGC,GAAG,CAAC,CAACC,IAAAA,IAAU;AACdA,YAAAA;SACJ,CAAA,CAAA;AACJ;AAEO,SAASC,+BAAAA,GAAAA;IACZ,OAAO;QACHC,QAAAA,EAAU,sCAAA;QACVC,UAAAA,EAAYC,iBAAAA;QAEZC,QAAAA,EAAU,MAAA;QACVC,GAAAA,EAAK,sCAAA;QACLC,QAAAA,EAAU,OAAA;QAEVC,WAAAA,EAAad,iBAAAA;AACjB,KAAA;AACJ;AAEO,SAASe,0BAAAA,CACZ1B,MAAc,EACdC,IAAkC,EAClC0B,aAAuB,EAAA;IAEvB,IAAIC,SAAAA;AACJ,IAAA,IAAID,aAAAA,EAAe;QACfC,SAAAA,GAAYjB,iBAAAA,EAAAA;IAChB,CAAA,MAAO;AACHiB,QAAAA,SAAAA,GAAY3B,KAAKwB,WAAW;AAChC,IAAA;AAEAzB,IAAAA,MAAAA,CAAOC,IAAI,CAAC4B,OAAO,GAAG5B,KAAKkB,QAAQ;AACnCnB,IAAAA,MAAAA,CAAOC,IAAI,CAAC6B,SAAS,GAAG7B,KAAKmB,UAAU;AAEvCpB,IAAAA,MAAAA,CAAOC,IAAI,CAAC8B,iBAAiB,GAAG,IAAIC,iBAAAA,CAAkB;AAClDC,QAAAA,UAAAA,EAAY,IAAIC,0BAAAA,CAA2BN,SAAAA;AAC/C,KAAA,CAAA;AAEA,IAAA,OAAQ3B,KAAKqB,QAAQ;AACjB,QAAA,KAAKa,cAAcC,IAAI;AAAE,YAAA;AACrBpC,gBAAAA,MAAAA,CAAOC,IAAI,CAACC,MAAM,GAAGD,KAAKsB,GAAG;AAC7BvB,gBAAAA,MAAAA,CAAOC,IAAI,CAACoC,QAAQ,GAAGpC,KAAKuB,QAAQ;AACpC,gBAAA;AACJ,YAAA;AACA,QAAA,KAAKW,cAAcG,KAAK;AAAE,YAAA;AACtBtC,gBAAAA,MAAAA,CAAOC,IAAI,CAACG,OAAO,GAAGH,KAAKsB,GAAG;AAC9BvB,gBAAAA,MAAAA,CAAOC,IAAI,CAACsC,SAAS,GAAGtC,KAAKuB,QAAQ;AACrC,gBAAA;AACJ,YAAA;AACA,QAAA,KAAKW,cAAcK,MAAM;AAAE,YAAA;AACvBxC,gBAAAA,MAAAA,CAAOC,IAAI,CAACE,QAAQ,GAAGF,KAAKsB,GAAG;AAC/BvB,gBAAAA,MAAAA,CAAOC,IAAI,CAACwC,UAAU,GAAGxC,KAAKuB,QAAQ;AACtC,gBAAA;AACJ,YAAA;AACJ;AACJ;;AC3DO,SAASkB,uBACZC,OAA4C,EAAA;IAE5C,IAAIC,OAAAA;IACJ,IAAID,OAAAA,CAAQC,OAAO,EAAE;AACjBA,QAAAA,OAAAA,GAAUD,QAAQC,OAAO;AAC7B,IAAA;IAEA,IAAIC,KAAAA;AACJ,IAAA,IAAIC,mBAAAA,EAAAA,EAAuB;QACvBD,KAAAA,GAAQE,cAAAA,EAAAA;AACZ,IAAA;IAEA,IAAIC,KAAAA;AACJ,IAAA,IAAIC,mBAAAA,EAAAA,EAAuB;QACvBD,KAAAA,GAAQE,cAAAA,EAAAA;AACZ,IAAA;AAEA,IAAA,IAAI,CAACN,OAAAA,EAAS;AACV,QAAA,MAAM3C,IAAAA,GAAOiB,+BAAAA,EAAAA;AAEb,QAAA,OAAO,CAAClB,MAAAA,EAAQmD,IAAAA,GAAAA;YACZzB,0BAAAA,CAA2B1B,MAAAA,EAAQC,IAAAA,EAAM0C,OAAAA,CAAQhB,aAAa,CAAA;AAC9DwB,YAAAA,IAAAA,EAAAA;AACJ,QAAA,CAAA;AACJ,IAAA;IAEA,IAAIC,YAAAA;AACJ,IAAA,IAAIJ,KAAAA,EAAO;QACPI,YAAAA,GAAe;YACXC,IAAAA,EAAM,cAAA;YACNpC,IAAAA,EAAM,QAAA;AACN+B,YAAAA,KAAAA;AACAJ,YAAAA;AACJ,SAAA;IACJ,CAAA,MAAO;QACHQ,YAAAA,GAAe;YACXC,IAAAA,EAAM,MAAA;YACNpC,IAAAA,EAAM,OAAA;YACNqC,QAAAA,EAAU,UAAA;AACVV,YAAAA;AACJ,SAAA;AACJ,IAAA;IAEA,IAAIW,KAAAA;AACJ,IAAA,IAAIV,KAAAA,EAAO;AACPU,QAAAA,KAAAA,GAAQ,IAAIC,uBAAAA,CAAwBX,KAAAA,CAAAA;IACxC,CAAA,MAAO;AACHU,QAAAA,KAAAA,GAAQ,IAAIE,wBAAAA,EAAAA;AAChB,IAAA;AAEA,IAAA,OAAOC,gBAAAA,CAAiB;AACpBC,QAAAA,aAAAA,EAAe,IAAIC,aAAAA,CAAc;AAC7BhB,YAAAA,OAAAA;YACAiB,OAAAA,EAAST,YAAAA;AACTG,YAAAA;AACJ,SAAA,CAAA;AACAO,QAAAA,oBAAAA,EAAsB,CAClB9D,MAAAA,EACAC,IAAAA,GACCyB,2BAA2B1B,MAAAA,EAAQC,IAAAA,EAAM0C,QAAQhB,aAAa;AACvE,KAAA,CAAA;AACJ;AAEO,SAASoC,qBAAAA,CACZC,GAAuB,EACvBrB,OAA4C,EAAA;AAE5C,IAAA,MAAMsB,aAAavB,sBAAAA,CAAuBC,OAAAA,CAAAA;AAC1CqB,IAAAA,GAAAA,CAAIE,GAAG,CAACD,UAAAA,CAAAA;IAERD,GAAAA,CAAIE,GAAG,CAAC,CAAClE,MAAAA,EAAQmD,IAAAA,GAAAA;AACb,QAAA,IAAInD,MAAAA,CAAOC,IAAI,CAACC,MAAM,EAAE;YACpBiE,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,iBAAiB,CAAC,EAAE;AACrD,gBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;gBACvCC,UAAAA,EAAY,MAAA;gBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACC;AAC1B,aAAA,CAAA;AACJ,QAAA,CAAA,MAAO,IAAIF,MAAAA,CAAOC,IAAI,CAACG,OAAO,EAAE;YAC5B+D,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,kBAAkB,CAAC,EAAE;AACtD,gBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;gBACvCC,UAAAA,EAAY,OAAA;gBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACG;AAC1B,aAAA,CAAA;AACJ,QAAA,CAAA,MAAO,IAAIJ,MAAAA,CAAOC,IAAI,CAACE,QAAQ,EAAE;YAC7BgE,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,mBAAmB,CAAC,EAAE;AACvD,gBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;gBACvCC,UAAAA,EAAY,QAAA;gBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACE;AAC1B,aAAA,CAAA;QACJ,CAAA,MAAO;YACHgE,SAAAA,EAAAA,CAAYS,IAAI,CAAC,CAAC,OAAO,EAAE5E,OAAOqE,EAAE,CAAC,oBAAoB,CAAC,EAAE;AACxD,gBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,aAAA,CAAA;AAEAtB,YAAAA,IAAAA,CAAK,IAAI0B,iBAAAA,EAAAA,CAAAA;AACT,YAAA;AACJ,QAAA;QAEA7E,MAAAA,CAAO8E,EAAE,CAAC,YAAA,EAAc,IAAA;AACpB,YAAA,IAAI9E,MAAAA,CAAOC,IAAI,CAACC,MAAM,EAAE;gBACpBiE,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,mBAAmB,CAAC,EAAE;AACvD,oBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;oBACvCC,UAAAA,EAAY,MAAA;oBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACC;AAC1B,iBAAA,CAAA;AACJ,YAAA,CAAA,MAAO,IAAIF,MAAAA,CAAOC,IAAI,CAACG,OAAO,EAAE;gBAC5B+D,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,oBAAoB,CAAC,EAAE;AACxD,oBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;oBACvCC,UAAAA,EAAY,OAAA;oBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACC;AAC1B,iBAAA,CAAA;AACJ,YAAA,CAAA,MAAO,IAAIF,MAAAA,CAAOC,IAAI,CAACE,QAAQ,EAAE;gBAC7BgE,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAEpE,OAAOqE,EAAE,CAAC,qBAAqB,CAAC,EAAE;AACzD,oBAAA,CAACC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;oBACvCC,UAAAA,EAAY,QAAA;oBACZC,QAAAA,EAAU3E,MAAAA,CAAOC,IAAI,CAACE;AAC1B,iBAAA,CAAA;AACJ,YAAA;AACJ,QAAA,CAAA,CAAA;AAEAgD,QAAAA,IAAAA,EAAAA;AACJ,IAAA,CAAA,CAAA;AACJ;;ACzIO,SAAS4B,6BAA6BC,KAAyB,EAAA;IAClEA,KAAAA,CAAMd,GAAG,CAAC,CAAClE,MAAAA,EAAQmD,IAAAA,GAAAA;QACf,IAAInD,MAAAA,CAAOC,IAAI,CAACC,MAAM,IAAIF,MAAAA,CAAOC,IAAI,CAACG,OAAO,EAAE;AAC3C+C,YAAAA,IAAAA,EAAAA;AACA,YAAA;AACJ,QAAA;AAEAA,QAAAA,IAAAA,CAAK,IAAI0B,iBAAAA,EAAAA,CAAAA;AACb,IAAA,CAAA,CAAA;AACJ;;ACRO,SAASI,uBACZjB,GAAuB,EAAA;IAEvBA,GAAAA,CAAIc,EAAE,CAAC,OAAA,EAAS,CAACI,GAAAA,GAAAA;QACbf,SAAAA,EAAAA,CAAYgB,KAAK,CAACD,GAAAA,EAAK;AACnB,YAAA,CAACZ,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,SAAA,CAAA;AACJ,IAAA,CAAA,CAAA;IAEAT,GAAAA,CAAIE,GAAG,CAAC,CAAClE,MAAAA,EAAQmD,IAAAA,GAAAA;QACbgB,SAAAA,EAAAA,CAAYiB,KAAK,CAAC,CAAC,OAAO,EAAEpF,OAAOqE,EAAE,CAAC,YAAY,CAAC,EAAE;YACjDgB,SAAAA,EAAWrF,MAAAA,CAAOgE,GAAG,CAAC/C,IAAI;AAC1B,YAAA,CAACqD,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,SAAA,CAAA;QAEAzE,MAAAA,CAAO8E,EAAE,CAAC,YAAA,EAAc,IAAA;YACpBX,SAAAA,EAAAA,CAAYiB,KAAK,CAAC,CAAC,OAAO,EAAEpF,OAAOqE,EAAE,CAAC,eAAe,CAAC,EAAE;gBACpDgB,SAAAA,EAAWrF,MAAAA,CAAOgE,GAAG,CAAC/C,IAAI;AAC1B,gBAAA,CAACqD,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,aAAA,CAAA;AACJ,QAAA,CAAA,CAAA;AAEAtB,QAAAA,IAAAA,EAAAA;AACJ,IAAA,CAAA,CAAA;AACJ;;ACnBO,SAASmC,aAMZC,UAAsB,EAAA;IAEtB,IAAIC,OAAAA;AACJ,IAAA,IAAI1C,mBAAAA,EAAAA,EAAuB;AACvB0C,QAAAA,OAAAA,GAAUC,cACNC,qBAAAA,EAAAA,EACAC,uBAAAA,EAAAA,CAAAA;AAER,IAAA;IAEA,MAAMC,MAAAA,GAAS,IAAIC,MAAAA,CAKjBN,UAAAA,EAAY;AACVC,QAAAA,OAAAA;QACAM,IAAAA,EAAM;YACFC,MAAAA,CAAAA,CAAOA,MAAM,EAAEC,QAAQ,EAAA;AACnBA,gBAAAA,QAAAA,CAAS,IAAA,EAAM,IAAA,CAAA;AACnB,YAAA,CAAA;YACAC,WAAAA,EAAa;AACjB,SAAA;QACAC,UAAAA,EAAY;AAAC,YAAA,WAAA;AAAa,YAAA;AAAU;AACxC,KAAA,CAAA;AAEAN,IAAAA,MAAAA,CAAOO,MAAM,CAACrB,EAAE,CAAC,oBAAoB,CAACI,GAAAA,GAAAA;AAClCf,QAAAA,SAAAA,EAAAA,CAAYgB,KAAK,CAAC;AACdiB,YAAAA,OAAAA,EAASlB,IAAIkB,OAAO;AACpBC,YAAAA,IAAAA,EAAMnB,IAAImB,IAAI;AACd,YAAA,CAAC/B,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,SAAA,CAAA;AACJ,IAAA,CAAA,CAAA;IAEA,OAAOmB,MAAAA;AACX;;;;"}
+{"version":3,"file":"index.mjs","sources":["../src/helpers/authenticated.ts","../src/helpers/room-subscriptions.ts","../src/middlewares/authup/utils.ts","../src/middlewares/authup/create.ts","../src/middlewares/force-logged-in.ts","../src/middlewares/logging.ts","../src/server/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Socket } from '../types';\n\nexport function isSocketAuthenticated(socket: Socket) : boolean {\n    return !!socket.data.identity;\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Socket } from '../types';\n\nexport function subscribeSocketRoom(\n    socket: Socket,\n    roomName: string,\n) {\n    if (!socket.data.roomSubscriptions) {\n        socket.data.roomSubscriptions = {};\n    }\n\n    if (!socket.data.roomSubscriptions[roomName]) {\n        socket.data.roomSubscriptions[roomName] = 0;\n    }\n\n    socket.data.roomSubscriptions[roomName]++;\n\n    socket.join(roomName);\n}\n\nexport function unsubscribeSocketRoom(\n    socket: Socket,\n    roomName: string,\n) {\n    if (!socket.data.roomSubscriptions) {\n        return;\n    }\n\n    if (socket.data.roomSubscriptions[roomName]) {\n        if (socket.data.roomSubscriptions[roomName] > 1) {\n            socket.data.roomSubscriptions[roomName]--;\n        } else {\n            delete socket.data.roomSubscriptions[roomName];\n        }\n    }\n\n    if (!socket.data.roomSubscriptions[roomName]) {\n        socket.leave(roomName);\n    }\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PermissionName as AuthupPermissionName, REALM_MASTER_NAME } from '@authup/core-kit';\nimport type { PermissionItem } from '@authup/access';\nimport { PermissionChecker, PermissionMemoryRepository } from '@authup/access';\nimport type { TokenVerificationData } from '@authup/server-adapter-kit';\nimport { PermissionName } from '@privateaim/kit';\nimport type { Socket } from '../../types';\n\ntype TokenVerificationDataMinimal = Pick<\nTokenVerificationData,\n'permissions' |\n'realm_id' |\n'realm_name' |\n'sub' |\n'sub_kind' |\n'sub_name'\n>;\n\nfunction generateAbilities(): PermissionItem[] {\n    return Object.values({\n        ...PermissionName,\n        ...AuthupPermissionName,\n    }).map((name) => ({\n        name,\n    } satisfies PermissionItem));\n}\n\nexport function createFakeTokenVerificationData(): TokenVerificationDataMinimal {\n    return {\n        realm_id: 'd94b2f28-29e3-4ced-b8f1-6923a01dc1ee',\n        realm_name: REALM_MASTER_NAME,\n\n        sub_kind: 'user',\n        sub: 'd94b2f28-29e3-4ced-b8f1-6923a01dc1ee',\n        sub_name: 'system',\n\n        permissions: generateAbilities(),\n    };\n}\n\nexport function applyTokenVerificationData(\n    socket: Socket,\n    data: TokenVerificationDataMinimal,\n    fakeAbilities?: boolean,\n) {\n    let abilities: PermissionItem[];\n    if (fakeAbilities) {\n        abilities = generateAbilities();\n    } else {\n        abilities = data.permissions;\n    }\n\n    socket.data.identity = {\n        type: data.sub_kind,\n        id: data.sub,\n        realmId: data.realm_id,\n        realmName: data.realm_name,\n    };\n\n    socket.data.permissionChecker = new PermissionChecker({\n        repository: new PermissionMemoryRepository(abilities),\n    });\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UnauthorizedError } from '@ebec/http';\nimport {\n    useLogger,\n} from '@privateaim/server-kit';\nimport { LogChannel, LogFlag } from '@privateaim/telemetry-kit';\nimport { createMiddleware } from '@authup/server-adapter-socket-io';\nimport type {\n    Middleware, Namespace, Server, Socket,\n} from '../../types';\nimport type { AuthorizationMiddlewareRegistrationOptions } from './types';\nimport { applyTokenVerificationData, createFakeTokenVerificationData } from './utils';\n\nexport function createAuthorizationMiddleware(\n    options: AuthorizationMiddlewareRegistrationOptions,\n) : Middleware {\n    if (!options.baseURL) {\n        const data = createFakeTokenVerificationData();\n\n        return (socket, next) => {\n            applyTokenVerificationData(socket, data, options.fakeAbilities);\n            next();\n        };\n    }\n\n    return createMiddleware({\n        tokenVerifier: options.tokenVerifier,\n        tokenVerifierHandler: (\n            socket: Socket,\n            data,\n        ) => applyTokenVerificationData(socket, data, options.fakeAbilities),\n    });\n}\n\nexport function mountAuthorizationMiddleware(\n    nsp: Namespace | Server,\n    options: AuthorizationMiddlewareRegistrationOptions,\n) {\n    const middleware = createAuthorizationMiddleware(options);\n    nsp.use(middleware);\n\n    nsp.use((socket, next) => {\n        if (socket.data.identity) {\n            useLogger().info(`Socket/${socket.id}: ${socket.data.identity.type} connected.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                actor_type: socket.data.identity.type,\n                actor_id: socket.data.identity.id,\n            });\n        } else {\n            useLogger().warn(`Socket/${socket.id}: Not authenticated.`, {\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n            });\n\n            next(new UnauthorizedError());\n            return;\n        }\n\n        socket.on('disconnect', () => {\n            if (socket.data.identity) {\n                useLogger().info(`Socket/${socket.id}: ${socket.data.identity.type} disconnected`, {\n                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n                    actor_type: socket.data.identity.type,\n                    actor_id: socket.data.identity.id,\n                });\n            }\n        });\n\n        next();\n    });\n}\n","/*\n * Copyright (c) 2021-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UnauthorizedError } from '@ebec/http';\nimport { isSocketAuthenticated } from '../helpers/index.ts';\nimport type { Namespace, Server } from '../types';\n\nexport function mountForceLoggedInMiddleware(input: Namespace | Server) {\n    input.use((socket, next) => {\n        if (!isSocketAuthenticated(socket)) {\n            next();\n            return;\n        }\n\n        next(new UnauthorizedError());\n    });\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { useLogger } from '@privateaim/server-kit';\nimport { LogChannel, LogFlag } from '@privateaim/telemetry-kit';\nimport type { Namespace, Server } from '../types';\n\nexport function mountLoggingMiddleware(\n    nsp: Namespace | Server,\n) {\n    nsp.on('error', (err) => {\n        useLogger().error(err, {\n            [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n        });\n    });\n\n    nsp.use((socket, next) => {\n        useLogger().debug(`Socket/${socket.id}: Connected.`, {\n            namespace: socket.nsp.name,\n            [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n        });\n\n        socket.on('disconnect', () => {\n            useLogger().debug(`Socket/${socket.id}: Disconnected.`, {\n                namespace: socket.nsp.name,\n                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n            });\n        });\n\n        next();\n    });\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    isRedisClientUsable, useLogger, useRedisPublishClient, useRedisSubscribeClient,\n} from '@privateaim/server-kit';\nimport { LogChannel, LogFlag } from '@privateaim/telemetry-kit';\nimport { createAdapter } from '@socket.io/redis-adapter';\nimport type { Server as HTTPServer } from 'node:http';\nimport type { DefaultEventsMap, ServerOptions } from 'socket.io';\nimport { Server } from 'socket.io';\n\nexport function createServer<\n    ListenEvents extends Record<string, any> = DefaultEventsMap,\n    EmitEvents extends Record<string, any> = ListenEvents,\n    ServerSideEvents extends Record<string, any> = DefaultEventsMap,\n    SocketData = any,\n>(\n    httpServer: HTTPServer,\n): Server<ListenEvents, EmitEvents, ServerSideEvents, SocketData> {\n    let adapter : ServerOptions['adapter'] | undefined;\n    if (isRedisClientUsable()) {\n        adapter = createAdapter(\n            useRedisPublishClient(),\n            useRedisSubscribeClient(),\n        );\n    }\n\n    const server = new Server<\n    ListenEvents,\n    EmitEvents,\n    ServerSideEvents,\n    SocketData\n    >(httpServer, {\n        adapter,\n        cors: {\n            origin(origin, callback) {\n                callback(null, true);\n            },\n            credentials: true,\n        },\n        transports: ['websocket', 'polling'],\n    });\n\n    server.engine.on('connection_error', (err) => {\n        useLogger().error({\n            message: err.message,\n            code: err.code,\n            [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,\n        });\n    });\n\n    return server;\n}\n"],"names":["isSocketAuthenticated","socket","data","identity","subscribeSocketRoom","roomName","roomSubscriptions","join","unsubscribeSocketRoom","leave","generateAbilities","Object","values","PermissionName","AuthupPermissionName","map","name","createFakeTokenVerificationData","realm_id","realm_name","REALM_MASTER_NAME","sub_kind","sub","sub_name","permissions","applyTokenVerificationData","fakeAbilities","abilities","type","id","realmId","realmName","permissionChecker","PermissionChecker","repository","PermissionMemoryRepository","createAuthorizationMiddleware","options","baseURL","next","createMiddleware","tokenVerifier","tokenVerifierHandler","mountAuthorizationMiddleware","nsp","middleware","use","useLogger","info","LogFlag","CHANNEL","LogChannel","WEBSOCKET","actor_type","actor_id","warn","UnauthorizedError","on","mountForceLoggedInMiddleware","input","mountLoggingMiddleware","err","error","debug","namespace","createServer","httpServer","adapter","isRedisClientUsable","createAdapter","useRedisPublishClient","useRedisSubscribeClient","server","Server","cors","origin","callback","credentials","transports","engine","message","code"],"mappings":";;;;;;;;;;AAAA;;;;;IASO,SAASA,qBAAAA,CAAsBC,MAAc,EAAA;AAChD,IAAA,OAAO,CAAC,CAACA,MAAAA,CAAOC,IAAI,CAACC,QAAQ;AACjC;;ACXA;;;;;AAKC,IAIM,SAASC,mBAAAA,CACZH,MAAc,EACdI,QAAgB,EAAA;AAEhB,IAAA,IAAI,CAACJ,MAAAA,CAAOC,IAAI,CAACI,iBAAiB,EAAE;AAChCL,QAAAA,MAAAA,CAAOC,IAAI,CAACI,iBAAiB,GAAG,EAAC;AACrC,IAAA;AAEA,IAAA,IAAI,CAACL,MAAAA,CAAOC,IAAI,CAACI,iBAAiB,CAACD,SAAS,EAAE;AAC1CJ,QAAAA,MAAAA,CAAOC,IAAI,CAACI,iBAAiB,CAACD,SAAS,GAAG,CAAA;AAC9C,IAAA;AAEAJ,IAAAA,MAAAA,CAAOC,IAAI,CAACI,iBAAiB,CAACD,QAAAA,CAAS,EAAA;AAEvCJ,IAAAA,MAAAA,CAAOM,IAAI,CAACF,QAAAA,CAAAA;AAChB;AAEO,SAASG,qBAAAA,CACZP,MAAc,EACdI,QAAgB,EAAA;AAEhB,IAAA,IAAI,CAACJ,MAAAA,CAAOC,IAAI,CAACI,iBAAiB,EAAE;AAChC,QAAA;AACJ,IAAA;AAEA,IAAA,IAAIL,OAAOC,IAAI,CAACI,iBAAiB,CAACD,SAAS,EAAE;AACzC,QAAA,IAAIJ,OAAOC,IAAI,CAACI,iBAAiB,CAACD,QAAAA,CAAS,GAAG,CAAA,EAAG;AAC7CJ,YAAAA,MAAAA,CAAOC,IAAI,CAACI,iBAAiB,CAACD,QAAAA,CAAS,EAAA;QAC3C,CAAA,MAAO;AACH,YAAA,OAAOJ,MAAAA,CAAOC,IAAI,CAACI,iBAAiB,CAACD,QAAAA,CAAS;AAClD,QAAA;AACJ,IAAA;AAEA,IAAA,IAAI,CAACJ,MAAAA,CAAOC,IAAI,CAACI,iBAAiB,CAACD,SAAS,EAAE;AAC1CJ,QAAAA,MAAAA,CAAOQ,KAAK,CAACJ,QAAAA,CAAAA;AACjB,IAAA;AACJ;;ACrBA,SAASK,iBAAAA,GAAAA;IACL,OAAOC,MAAAA,CAAOC,MAAM,CAAC;AACjB,QAAA,GAAGC,gBAAc;AACjB,QAAA,GAAGC;AACP,KAAA,CAAA,CAAGC,GAAG,CAAC,CAACC,IAAAA,IAAU;AACdA,YAAAA;SACJ,CAAA,CAAA;AACJ;AAEO,SAASC,+BAAAA,GAAAA;IACZ,OAAO;QACHC,QAAAA,EAAU,sCAAA;QACVC,UAAAA,EAAYC,iBAAAA;QAEZC,QAAAA,EAAU,MAAA;QACVC,GAAAA,EAAK,sCAAA;QACLC,QAAAA,EAAU,QAAA;QAEVC,WAAAA,EAAad,iBAAAA;AACjB,KAAA;AACJ;AAEO,SAASe,0BAAAA,CACZxB,MAAc,EACdC,IAAkC,EAClCwB,aAAuB,EAAA;IAEvB,IAAIC,SAAAA;AACJ,IAAA,IAAID,aAAAA,EAAe;QACfC,SAAAA,GAAYjB,iBAAAA,EAAAA;IAChB,CAAA,MAAO;AACHiB,QAAAA,SAAAA,GAAYzB,KAAKsB,WAAW;AAChC,IAAA;IAEAvB,MAAAA,CAAOC,IAAI,CAACC,QAAQ,GAAG;AACnByB,QAAAA,IAAAA,EAAM1B,KAAKmB,QAAQ;AACnBQ,QAAAA,EAAAA,EAAI3B,KAAKoB,GAAG;AACZQ,QAAAA,OAAAA,EAAS5B,KAAKgB,QAAQ;AACtBa,QAAAA,SAAAA,EAAW7B,KAAKiB;AACpB,KAAA;AAEAlB,IAAAA,MAAAA,CAAOC,IAAI,CAAC8B,iBAAiB,GAAG,IAAIC,iBAAAA,CAAkB;AAClDC,QAAAA,UAAAA,EAAY,IAAIC,0BAAAA,CAA2BR,SAAAA;AAC/C,KAAA,CAAA;AACJ;;ACjDO,SAASS,8BACZC,OAAmD,EAAA;IAEnD,IAAI,CAACA,OAAAA,CAAQC,OAAO,EAAE;AAClB,QAAA,MAAMpC,IAAAA,GAAOe,+BAAAA,EAAAA;AAEb,QAAA,OAAO,CAAChB,MAAAA,EAAQsC,IAAAA,GAAAA;YACZd,0BAAAA,CAA2BxB,MAAAA,EAAQC,IAAAA,EAAMmC,OAAAA,CAAQX,aAAa,CAAA;AAC9Da,YAAAA,IAAAA,EAAAA;AACJ,QAAA,CAAA;AACJ,IAAA;AAEA,IAAA,OAAOC,gBAAAA,CAAiB;AACpBC,QAAAA,aAAAA,EAAeJ,QAAQI,aAAa;AACpCC,QAAAA,oBAAAA,EAAsB,CAClBzC,MAAAA,EACAC,IAAAA,GACCuB,2BAA2BxB,MAAAA,EAAQC,IAAAA,EAAMmC,QAAQX,aAAa;AACvE,KAAA,CAAA;AACJ;AAEO,SAASiB,4BAAAA,CACZC,GAAuB,EACvBP,OAAmD,EAAA;AAEnD,IAAA,MAAMQ,aAAaT,6BAAAA,CAA8BC,OAAAA,CAAAA;AACjDO,IAAAA,GAAAA,CAAIE,GAAG,CAACD,UAAAA,CAAAA;IAERD,GAAAA,CAAIE,GAAG,CAAC,CAAC7C,MAAAA,EAAQsC,IAAAA,GAAAA;AACb,QAAA,IAAItC,MAAAA,CAAOC,IAAI,CAACC,QAAQ,EAAE;AACtB4C,YAAAA,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAE/C,MAAAA,CAAO4B,EAAE,CAAC,EAAE,EAAE5B,MAAAA,CAAOC,IAAI,CAACC,QAAQ,CAACyB,IAAI,CAAC,WAAW,CAAC,EAAE;AAC7E,gBAAA,CAACqB,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;AACvCC,gBAAAA,UAAAA,EAAYpD,MAAAA,CAAOC,IAAI,CAACC,QAAQ,CAACyB,IAAI;AACrC0B,gBAAAA,QAAAA,EAAUrD,MAAAA,CAAOC,IAAI,CAACC,QAAQ,CAAC0B;AACnC,aAAA,CAAA;QACJ,CAAA,MAAO;YACHkB,SAAAA,EAAAA,CAAYQ,IAAI,CAAC,CAAC,OAAO,EAAEtD,OAAO4B,EAAE,CAAC,oBAAoB,CAAC,EAAE;AACxD,gBAAA,CAACoB,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,aAAA,CAAA;AAEAb,YAAAA,IAAAA,CAAK,IAAIiB,iBAAAA,EAAAA,CAAAA;AACT,YAAA;AACJ,QAAA;QAEAvD,MAAAA,CAAOwD,EAAE,CAAC,YAAA,EAAc,IAAA;AACpB,YAAA,IAAIxD,MAAAA,CAAOC,IAAI,CAACC,QAAQ,EAAE;AACtB4C,gBAAAA,SAAAA,EAAAA,CAAYC,IAAI,CAAC,CAAC,OAAO,EAAE/C,MAAAA,CAAO4B,EAAE,CAAC,EAAE,EAAE5B,MAAAA,CAAOC,IAAI,CAACC,QAAQ,CAACyB,IAAI,CAAC,aAAa,CAAC,EAAE;AAC/E,oBAAA,CAACqB,OAAAA,CAAQC,OAAO,GAAGC,WAAWC,SAAS;AACvCC,oBAAAA,UAAAA,EAAYpD,MAAAA,CAAOC,IAAI,CAACC,QAAQ,CAACyB,IAAI;AACrC0B,oBAAAA,QAAAA,EAAUrD,MAAAA,CAAOC,IAAI,CAACC,QAAQ,CAAC0B;AACnC,iBAAA,CAAA;AACJ,YAAA;AACJ,QAAA,CAAA,CAAA;AAEAU,QAAAA,IAAAA,EAAAA;AACJ,IAAA,CAAA,CAAA;AACJ;;AChEO,SAASmB,6BAA6BC,KAAyB,EAAA;IAClEA,KAAAA,CAAMb,GAAG,CAAC,CAAC7C,MAAAA,EAAQsC,IAAAA,GAAAA;QACf,IAAI,CAACvC,sBAAsBC,MAAAA,CAAAA,EAAS;AAChCsC,YAAAA,IAAAA,EAAAA;AACA,YAAA;AACJ,QAAA;AAEAA,QAAAA,IAAAA,CAAK,IAAIiB,iBAAAA,EAAAA,CAAAA;AACb,IAAA,CAAA,CAAA;AACJ;;ACTO,SAASI,uBACZhB,GAAuB,EAAA;IAEvBA,GAAAA,CAAIa,EAAE,CAAC,OAAA,EAAS,CAACI,GAAAA,GAAAA;QACbd,SAAAA,EAAAA,CAAYe,KAAK,CAACD,GAAAA,EAAK;AACnB,YAAA,CAACZ,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,SAAA,CAAA;AACJ,IAAA,CAAA,CAAA;IAEAR,GAAAA,CAAIE,GAAG,CAAC,CAAC7C,MAAAA,EAAQsC,IAAAA,GAAAA;QACbQ,SAAAA,EAAAA,CAAYgB,KAAK,CAAC,CAAC,OAAO,EAAE9D,OAAO4B,EAAE,CAAC,YAAY,CAAC,EAAE;YACjDmC,SAAAA,EAAW/D,MAAAA,CAAO2C,GAAG,CAAC5B,IAAI;AAC1B,YAAA,CAACiC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,SAAA,CAAA;QAEAnD,MAAAA,CAAOwD,EAAE,CAAC,YAAA,EAAc,IAAA;YACpBV,SAAAA,EAAAA,CAAYgB,KAAK,CAAC,CAAC,OAAO,EAAE9D,OAAO4B,EAAE,CAAC,eAAe,CAAC,EAAE;gBACpDmC,SAAAA,EAAW/D,MAAAA,CAAO2C,GAAG,CAAC5B,IAAI;AAC1B,gBAAA,CAACiC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,aAAA,CAAA;AACJ,QAAA,CAAA,CAAA;AAEAb,QAAAA,IAAAA,EAAAA;AACJ,IAAA,CAAA,CAAA;AACJ;;ACnBO,SAAS0B,aAMZC,UAAsB,EAAA;IAEtB,IAAIC,OAAAA;AACJ,IAAA,IAAIC,mBAAAA,EAAAA,EAAuB;AACvBD,QAAAA,OAAAA,GAAUE,cACNC,qBAAAA,EAAAA,EACAC,uBAAAA,EAAAA,CAAAA;AAER,IAAA;IAEA,MAAMC,MAAAA,GAAS,IAAIC,MAAAA,CAKjBP,UAAAA,EAAY;AACVC,QAAAA,OAAAA;QACAO,IAAAA,EAAM;YACFC,MAAAA,CAAAA,CAAOA,MAAM,EAAEC,QAAQ,EAAA;AACnBA,gBAAAA,QAAAA,CAAS,IAAA,EAAM,IAAA,CAAA;AACnB,YAAA,CAAA;YACAC,WAAAA,EAAa;AACjB,SAAA;QACAC,UAAAA,EAAY;AAAC,YAAA,WAAA;AAAa,YAAA;AAAU;AACxC,KAAA,CAAA;AAEAN,IAAAA,MAAAA,CAAOO,MAAM,CAACtB,EAAE,CAAC,oBAAoB,CAACI,GAAAA,GAAAA;AAClCd,QAAAA,SAAAA,EAAAA,CAAYe,KAAK,CAAC;AACdkB,YAAAA,OAAAA,EAASnB,IAAImB,OAAO;AACpBC,YAAAA,IAAAA,EAAMpB,IAAIoB,IAAI;AACd,YAAA,CAAChC,OAAAA,CAAQC,OAAO,GAAGC,WAAWC;AAClC,SAAA,CAAA;AACJ,IAAA,CAAA,CAAA;IAEA,OAAOoB,MAAAA;AACX;;;;"}

package/dist/middlewares/authup/create.d.ts

@@ -1,5 +1,5 @@
 import type { Middleware, Namespace, Server } from '../../types';
-import type { AuthupMiddlewareRegistrationOptions } from './types';
-export declare function createAuthupMiddleware(options: AuthupMiddlewareRegistrationOptions): Middleware;
-export declare function mountAuthupMiddleware(nsp: Namespace | Server, options: AuthupMiddlewareRegistrationOptions): void;
+import type { AuthorizationMiddlewareRegistrationOptions } from './types';
+export declare function createAuthorizationMiddleware(options: AuthorizationMiddlewareRegistrationOptions): Middleware;
+export declare function mountAuthorizationMiddleware(nsp: Namespace | Server, options: AuthorizationMiddlewareRegistrationOptions): void;
 //# sourceMappingURL=create.d.ts.map

package/dist/middlewares/authup/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/middlewares/authup/create.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACR,UAAU,EAAE,SAAS,EAAE,MAAM,EAChC,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,SAAS,CAAC;AAGnE,wBAAgB,sBAAsB,CAClC,OAAO,EAAE,mCAAmC,GAC5C,UAAU,CA4Db;AAED,wBAAgB,qBAAqB,CACjC,GAAG,EAAE,SAAS,GAAG,MAAM,EACvB,OAAO,EAAE,mCAAmC,QAyD/C"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/middlewares/authup/create.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EACR,UAAU,EAAE,SAAS,EAAE,MAAM,EAChC,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,SAAS,CAAC;AAG1E,wBAAgB,6BAA6B,CACzC,OAAO,EAAE,0CAA0C,GACnD,UAAU,CAiBb;AAED,wBAAgB,4BAA4B,CACxC,GAAG,EAAE,SAAS,GAAG,MAAM,EACvB,OAAO,EAAE,0CAA0C,QAiCtD"}

package/dist/middlewares/authup/types.d.ts

@@ -1,4 +1,6 @@
-export type AuthupMiddlewareRegistrationOptions = {
+import type { TokenVerifier } from '@authup/server-adapter-kit';
+export type AuthorizationMiddlewareRegistrationOptions = {
+    tokenVerifier?: TokenVerifier;
     baseURL?: string;
     fakeAbilities?: boolean;
 };

package/dist/middlewares/authup/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/middlewares/authup/types.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,mCAAmC,GAAG;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,OAAO,CAAA;CAC1B,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/middlewares/authup/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE,MAAM,MAAM,0CAA0C,GAAG;IACrD,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,OAAO,CAAA;CAC1B,CAAC"}

package/dist/middlewares/authup/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/middlewares/authup/utils.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAExE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,KAAK,4BAA4B,GAAG,IAAI,CACxC,qBAAqB,EACrB,aAAa,GACb,UAAU,GACV,YAAY,GACZ,KAAK,GACL,UAAU,GACV,UAAU,CACT,CAAC;AAWF,wBAAgB,+BAA+B,IAAI,4BAA4B,CAW9E;AAED,wBAAgB,0BAA0B,CACtC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,4BAA4B,EAClC,aAAa,CAAC,EAAE,OAAO,QAiC1B"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/middlewares/authup/utils.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAExE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,KAAK,4BAA4B,GAAG,IAAI,CACxC,qBAAqB,EACrB,aAAa,GACb,UAAU,GACV,YAAY,GACZ,KAAK,GACL,UAAU,GACV,UAAU,CACT,CAAC;AAWF,wBAAgB,+BAA+B,IAAI,4BAA4B,CAW9E;AAED,wBAAgB,0BAA0B,CACtC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,4BAA4B,EAClC,aAAa,CAAC,EAAE,OAAO,QAmB1B"}

package/dist/middlewares/force-logged-in.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"force-logged-in.d.ts","sourceRoot":"","sources":["../../src/middlewares/force-logged-in.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,QASrE"}
+{"version":3,"file":"force-logged-in.d.ts","sourceRoot":"","sources":["../../src/middlewares/force-logged-in.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,QASrE"}

package/dist/server/index.d.ts

@@ -1,3 +1,2 @@
 export * from './module';
-export * from './types';
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC"}

package/dist/types.d.ts

@@ -1,16 +1,14 @@
-import type { Client, Realm, Robot, User } from '@authup/core-kit';
 import type { PermissionChecker } from '@authup/access';
 import type { Namespace as _Namespace, Server as _Server, Socket as _Socket } from 'socket.io';
+export type SocketIdentity = {
+    id: string;
+    type: 'user' | 'client' | 'robot';
+    realmId: string;
+    realmName: string;
+};
 export type SocketData = {
     permissionChecker?: PermissionChecker;
-    realmId?: Realm['id'];
-    realmName?: Realm['name'];
-    userId?: User['id'];
-    userName?: User['name'];
-    robotId?: Robot['id'];
-    robotName?: Robot['name'];
-    clientId?: Client['id'];
-    clientName?: Client['name'];
+    identity?: SocketIdentity;
     namespaceId?: string;
     roomSubscriptions: Record<string, number>;
 };

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAC7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EACR,SAAS,IAAI,UAAU,EACvB,MAAM,IAAI,OAAO,EACjB,MAAM,IAAI,OAAO,EACpB,MAAM,WAAW,CAAC;AAEnB,MAAM,MAAM,UAAU,GAAG;IACrB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAEtC,OAAO,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE1B,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAExB,OAAO,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE1B,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAE5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C,CAAC;AAEF,MAAM,WAAW,SAAS;IACtB,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC7B,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAA;CACxC;AAED,MAAM,MAAM,MAAM,CACd,YAAY,SAAS,SAAS,GAAG,gBAAgB,EACjD,UAAU,SAAS,SAAS,GAAG,YAAY,EAC3C,gBAAgB,SAAS,SAAS,GAAG,gBAAgB,EACrD,IAAI,SAAS,UAAU,GAAG,UAAU,IACpC,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;AAE9D,MAAM,MAAM,MAAM,CACd,YAAY,SAAS,SAAS,GAAG,gBAAgB,EACjD,UAAU,SAAS,SAAS,GAAG,YAAY,EAC3C,gBAAgB,SAAS,SAAS,GAAG,gBAAgB,EACrD,IAAI,SAAS,UAAU,GAAG,UAAU,IACpC,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;AAE9D,MAAM,MAAM,SAAS,CACjB,YAAY,SAAS,SAAS,GAAG,gBAAgB,EACjD,UAAU,SAAS,SAAS,GAAG,YAAY,EAC3C,gBAAgB,SAAS,SAAS,GAAG,gBAAgB,EACrD,IAAI,SAAS,UAAU,GAAG,UAAU,IACpC,UAAU,CAAC,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;AAEjE,MAAM,MAAM,UAAU,CAClB,YAAY,SAAS,SAAS,GAAG,gBAAgB,EACjD,UAAU,SAAS,SAAS,GAAG,YAAY,EAC3C,gBAAgB,SAAS,SAAS,GAAG,gBAAgB,EACrD,IAAI,SAAS,UAAU,GAAG,UAAU,IACpC,CACA,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAChE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,IAAI,KAC1B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EACR,SAAS,IAAI,UAAU,EACvB,MAAM,IAAI,OAAO,EACjB,MAAM,IAAI,OAAO,EACpB,MAAM,WAAW,CAAC;AAEnB,MAAM,MAAM,cAAc,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAA;CACpB,CAAC;AACF,MAAM,MAAM,UAAU,GAAG;IACrB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAEtC,QAAQ,CAAC,EAAE,cAAc,CAAC;IAE1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C,CAAC;AAEF,MAAM,WAAW,SAAS;IACtB,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC7B,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAA;CACxC;AAED,MAAM,MAAM,MAAM,CACd,YAAY,SAAS,SAAS,GAAG,gBAAgB,EACjD,UAAU,SAAS,SAAS,GAAG,YAAY,EAC3C,gBAAgB,SAAS,SAAS,GAAG,gBAAgB,EACrD,IAAI,SAAS,UAAU,GAAG,UAAU,IACpC,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;AAE9D,MAAM,MAAM,MAAM,CACd,YAAY,SAAS,SAAS,GAAG,gBAAgB,EACjD,UAAU,SAAS,SAAS,GAAG,YAAY,EAC3C,gBAAgB,SAAS,SAAS,GAAG,gBAAgB,EACrD,IAAI,SAAS,UAAU,GAAG,UAAU,IACpC,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;AAE9D,MAAM,MAAM,SAAS,CACjB,YAAY,SAAS,SAAS,GAAG,gBAAgB,EACjD,UAAU,SAAS,SAAS,GAAG,YAAY,EAC3C,gBAAgB,SAAS,SAAS,GAAG,gBAAgB,EACrD,IAAI,SAAS,UAAU,GAAG,UAAU,IACpC,UAAU,CAAC,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;AAEjE,MAAM,MAAM,UAAU,CAClB,YAAY,SAAS,SAAS,GAAG,gBAAgB,EACjD,UAAU,SAAS,SAAS,GAAG,YAAY,EAC3C,gBAAgB,SAAS,SAAS,GAAG,gBAAgB,EACrD,IAAI,SAAS,UAAU,GAAG,UAAU,IACpC,CACA,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAChE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,IAAI,KAC1B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@privateaim/server-realtime-kit",
     "type": "module",
-    "version": "0.8.28",
+    "version": "0.8.30",
     "module": "dist/index.mjs",
     "types": "dist/index.d.ts",
     "exports": {
@@ -19,17 +19,18 @@
     "license": "Apache-2.0",
     "description": "This package contains the realtime application which connects the API with socket based clients.",
     "dependencies": {
-        "@authup/access": "^1.0.0-beta.29",
-        "@authup/specs": "^1.0.0-beta.29",
-        "@authup/kit": "^1.0.0-beta.29",
-        "@authup/core-kit": "^1.0.0-beta.29",
-        "@authup/core-realtime-kit": "^1.0.0-beta.29",
-        "@authup/server-adapter-kit": "^1.0.0-beta.28",
-        "@authup/server-adapter-socket-io": "^1.0.0-beta.28",
+        "@authup/access": "^1.0.0-beta.30",
+        "@authup/specs": "^1.0.0-beta.30",
+        "@authup/kit": "^1.0.0-beta.30",
+        "@authup/core-kit": "^1.0.0-beta.30",
+        "@authup/core-http-kit": "^1.0.0-beta.30",
+        "@authup/core-realtime-kit": "^1.0.0-beta.30",
+        "@authup/server-adapter-kit": "^1.0.0-beta.30",
+        "@authup/server-adapter-socket-io": "^1.0.0-beta.30",
         "@socket.io/redis-adapter": "^8.3.0",
-        "@privateaim/kit": "^0.8.28",
-        "@privateaim/telemetry-kit": "^0.8.28",
-        "@privateaim/server-kit": "^0.8.28",
+        "@privateaim/kit": "^0.8.30",
+        "@privateaim/telemetry-kit": "^0.8.30",
+        "@privateaim/server-kit": "^0.8.30",
         "@ebec/http": "^2.3.0"
     },
     "devDependencies": {

package/src/helpers/authenticated.ts

@@ -8,7 +8,5 @@
 import type { Socket } from '../types';
 
 export function isSocketAuthenticated(socket: Socket) : boolean {
-    return !!socket.data.userId ||
-        !!socket.data.clientId ||
-        !!socket.data.robotId;
+    return !!socket.data.identity;
 }

package/src/middlewares/authup/create.ts

@@ -6,41 +6,21 @@
  */
 
 import { UnauthorizedError } from '@ebec/http';
-import type { VaultClient } from '@hapic/vault';
 import {
-    isRedisClientUsable, isVaultClientUsable, useLogger, useRedisClient, useVaultClient,
+    useLogger,
 } from '@privateaim/server-kit';
 import { LogChannel, LogFlag } from '@privateaim/telemetry-kit';
-import type { Client as RedisClient } from 'redis-extension';
-import type { TokenCreatorOptions } from '@authup/core-http-kit';
-import type { ITokenVerifierCache } from '@authup/server-adapter-kit';
-import { MemoryTokenVerifierCache, RedisTokenVerifierCache, TokenVerifier } from '@authup/server-adapter-kit';
 import { createMiddleware } from '@authup/server-adapter-socket-io';
 import type {
     Middleware, Namespace, Server, Socket,
 } from '../../types';
-import type { AuthupMiddlewareRegistrationOptions } from './types';
+import type { AuthorizationMiddlewareRegistrationOptions } from './types';
 import { applyTokenVerificationData, createFakeTokenVerificationData } from './utils';
 
-export function createAuthupMiddleware(
-    options: AuthupMiddlewareRegistrationOptions,
+export function createAuthorizationMiddleware(
+    options: AuthorizationMiddlewareRegistrationOptions,
 ) : Middleware {
-    let baseURL : string | undefined;
-    if (options.baseURL) {
-        baseURL = options.baseURL;
-    }
-
-    let redis : RedisClient | undefined;
-    if (isRedisClientUsable()) {
-        redis = useRedisClient();
-    }
-
-    let vault : VaultClient | undefined;
-    if (isVaultClientUsable()) {
-        vault = useVaultClient();
-    }
-
-    if (!baseURL) {
+    if (!options.baseURL) {
         const data = createFakeTokenVerificationData();
 
         return (socket, next) => {
@@ -49,36 +29,8 @@ export function createAuthupMiddleware(
         };
     }
 
-    let tokenCreator : TokenCreatorOptions;
-    if (vault) {
-        tokenCreator = {
-            type: 'robotInVault',
-            name: 'system',
-            vault,
-            baseURL,
-        };
-    } else {
-        tokenCreator = {
-            type: 'user',
-            name: 'admin',
-            password: 'start123',
-            baseURL,
-        };
-    }
-
-    let cache : ITokenVerifierCache;
-    if (redis) {
-        cache = new RedisTokenVerifierCache(redis);
-    } else {
-        cache = new MemoryTokenVerifierCache();
-    }
-
     return createMiddleware({
-        tokenVerifier: new TokenVerifier({
-            baseURL,
-            creator: tokenCreator,
-            cache,
-        }),
+        tokenVerifier: options.tokenVerifier,
         tokenVerifierHandler: (
             socket: Socket,
             data,
@@ -86,31 +38,19 @@ export function createAuthupMiddleware(
     });
 }
 
-export function mountAuthupMiddleware(
+export function mountAuthorizationMiddleware(
     nsp: Namespace | Server,
-    options: AuthupMiddlewareRegistrationOptions,
+    options: AuthorizationMiddlewareRegistrationOptions,
 ) {
-    const middleware = createAuthupMiddleware(options);
+    const middleware = createAuthorizationMiddleware(options);
     nsp.use(middleware);
 
     nsp.use((socket, next) => {
-        if (socket.data.userId) {
-            useLogger().info(`Socket/${socket.id}: User connected.`, {
-                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,
-                actor_type: 'user',
-                actor_id: socket.data.userId,
-            });
-        } else if (socket.data.robotId) {
-            useLogger().info(`Socket/${socket.id}: Robot connected.`, {
-                [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,
-                actor_type: 'robot',
-                actor_id: socket.data.robotId,
-            });
-        } else if (socket.data.clientId) {
-            useLogger().info(`Socket/${socket.id}: Client connected.`, {
+        if (socket.data.identity) {
+            useLogger().info(`Socket/${socket.id}: ${socket.data.identity.type} connected.`, {
                 [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,
-                actor_type: 'client',
-                actor_id: socket.data.clientId,
+                actor_type: socket.data.identity.type,
+                actor_id: socket.data.identity.id,
             });
         } else {
             useLogger().warn(`Socket/${socket.id}: Not authenticated.`, {
@@ -122,23 +62,11 @@ export function mountAuthupMiddleware(
         }
 
         socket.on('disconnect', () => {
-            if (socket.data.userId) {
-                useLogger().info(`Socket/${socket.id}: User disconnected`, {
-                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,
-                    actor_type: 'user',
-                    actor_id: socket.data.userId,
-                });
-            } else if (socket.data.robotId) {
-                useLogger().info(`Socket/${socket.id}: Robot disconnected`, {
-                    [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,
-                    actor_type: 'robot',
-                    actor_id: socket.data.userId,
-                });
-            } else if (socket.data.clientId) {
-                useLogger().info(`Socket/${socket.id}: Client disconnected`, {
+            if (socket.data.identity) {
+                useLogger().info(`Socket/${socket.id}: ${socket.data.identity.type} disconnected`, {
                     [LogFlag.CHANNEL]: LogChannel.WEBSOCKET,
-                    actor_type: 'client',
-                    actor_id: socket.data.clientId,
+                    actor_type: socket.data.identity.type,
+                    actor_id: socket.data.identity.id,
                 });
             }
         });

package/src/middlewares/authup/types.ts

@@ -5,7 +5,10 @@
  * view the LICENSE file that was distributed with this source code.
  */
 
-export type AuthupMiddlewareRegistrationOptions = {
+import type { TokenVerifier } from '@authup/server-adapter-kit';
+
+export type AuthorizationMiddlewareRegistrationOptions = {
+    tokenVerifier?: TokenVerifier,
     baseURL?: string,
     fakeAbilities?: boolean
 };

package/src/middlewares/authup/utils.ts

@@ -8,7 +8,6 @@
 import { PermissionName as AuthupPermissionName, REALM_MASTER_NAME } from '@authup/core-kit';
 import type { PermissionItem } from '@authup/access';
 import { PermissionChecker, PermissionMemoryRepository } from '@authup/access';
-import { OAuth2SubKind } from '@authup/specs';
 import type { TokenVerificationData } from '@authup/server-adapter-kit';
 import { PermissionName } from '@privateaim/kit';
 import type { Socket } from '../../types';
@@ -39,7 +38,7 @@ export function createFakeTokenVerificationData(): TokenVerificationDataMinimal
 
         sub_kind: 'user',
         sub: 'd94b2f28-29e3-4ced-b8f1-6923a01dc1ee',
-        sub_name: 'admin',
+        sub_name: 'system',
 
         permissions: generateAbilities(),
     };
@@ -57,28 +56,14 @@ export function applyTokenVerificationData(
         abilities = data.permissions;
     }
 
-    socket.data.realmId = data.realm_id;
-    socket.data.realmName = data.realm_name;
+    socket.data.identity = {
+        type: data.sub_kind,
+        id: data.sub,
+        realmId: data.realm_id,
+        realmName: data.realm_name,
+    };
 
     socket.data.permissionChecker = new PermissionChecker({
         repository: new PermissionMemoryRepository(abilities),
     });
-
-    switch (data.sub_kind) {
-        case OAuth2SubKind.USER: {
-            socket.data.userId = data.sub;
-            socket.data.userName = data.sub_name;
-            break;
-        }
-        case OAuth2SubKind.ROBOT: {
-            socket.data.robotId = data.sub;
-            socket.data.robotName = data.sub_name;
-            break;
-        }
-        case OAuth2SubKind.CLIENT: {
-            socket.data.clientId = data.sub;
-            socket.data.clientName = data.sub_name;
-            break;
-        }
-    }
 }

package/src/middlewares/force-logged-in.ts

@@ -6,11 +6,12 @@
  */
 
 import { UnauthorizedError } from '@ebec/http';
+import { isSocketAuthenticated } from '../helpers/index.ts';
 import type { Namespace, Server } from '../types';
 
 export function mountForceLoggedInMiddleware(input: Namespace | Server) {
     input.use((socket, next) => {
-        if (socket.data.userId || socket.data.robotId) {
+        if (!isSocketAuthenticated(socket)) {
             next();
             return;
         }

package/src/server/index.ts

@@ -6,4 +6,3 @@
  */
 
 export * from './module';
-export * from './types';

package/src/types.ts

@@ -5,9 +5,6 @@
  * view the LICENSE file that was distributed with this source code.
  */
 
-import type {
-    Client, Realm, Robot, User,
-} from '@authup/core-kit';
 import type { PermissionChecker } from '@authup/access';
 import type {
     Namespace as _Namespace,
@@ -15,20 +12,16 @@ import type {
     Socket as _Socket,
 } from 'socket.io';
 
+export type SocketIdentity = {
+    id: string;
+    type: 'user' | 'client' | 'robot',
+    realmId: string,
+    realmName: string
+};
 export type SocketData = {
     permissionChecker?: PermissionChecker,
 
-    realmId?: Realm['id'],
-    realmName?: Realm['name'],
-
-    userId?: User['id'],
-    userName?: User['name'],
-
-    robotId?: Robot['id'],
-    robotName?: Robot['name'],
-
-    clientId?: Client['id'],
-    clientName?: Client['name'],
+    identity?: SocketIdentity,
 
     namespaceId?: string,
     roomSubscriptions: Record<string, number>,

package/dist/server/types.d.ts

@@ -1,4 +0,0 @@
-export type ServerCreateOptions = {
-    authupURL?: string;
-};
-//# sourceMappingURL=types.d.ts.map

package/dist/server/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,mBAAmB,GAAG;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAA;CACrB,CAAC"}

package/src/server/types.ts

@@ -1,10 +0,0 @@
-/*
- * Copyright (c) 2025.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-
-export type ServerCreateOptions = {
-    authupURL?: string
-};