@rapidrest/auth 1.0.0-beta.1

package/dist/lib/routes/BaseSecretRoute.js

@@ -0,0 +1,399 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+///////////////////////////////////////////////////////////////////////////////
+import { ApiErrors, DocDecorators, ModelRoute, RepoUtils, RouteDecorators, } from "@rapidrest/service-core";
+import { SecretType } from "../models/types.js";
+import { ApiError, ObjectDecorators } from "@rapidrest/core";
+import { generatePasskeyRegistrationOptions, generateTOTPURI, importArgon2, importOTPLib, isPasskeyRegistrationResponse, isValidTOTPSecret, verifyPasskeyRegistrationResponse, } from "../auth/shared.js";
+const { Config } = ObjectDecorators;
+const { Description, Returns, Summary } = DocDecorators;
+const { Delete, Get, Head, Param, Post, Query, Request, Response, User, Validate } = RouteDecorators;
+/**
+ * @author Jean-Philippe Steinmetz
+ */
+export class BaseSecretRoute extends ModelRoute {
+    constructor() {
+        super(...arguments);
+        this.repoUtilsClass = RepoUtils;
+        /**
+         * The relying party configuration used for validating and generating passkey (WebAuthn) registration data.
+         */
+        this.passkeyConfig = {
+            rpName: "rapidrest",
+            rpID: "rapidrest",
+            origin: "http://localhost:3000",
+        };
+        /**
+         * The relying party configuration used for validating and generating FIDO2 hardware security key
+         * (WebAuthn) registration data. Kept separate from `passkeyConfig` since a hardware key deployment
+         * commonly wants a different `authenticatorAttachment`/`residentKey` policy — a hardware key is
+         * typically registered as a `"cross-platform"`, non-discoverable credential tied to a known
+         * account, rather than a discoverable, possibly-synced passkey.
+         */
+        this.fido2Config = {
+            rpName: "rapidrest",
+            rpID: "rapidrest",
+            origin: "http://localhost:3000",
+            authenticatorAttachment: "cross-platform",
+            residentKey: "discouraged",
+        };
+        /**
+         * The issuer configuration used for validating and generating TOTP (RFC 6238) registration data.
+         */
+        this.totpConfig = {
+            issuer: "rapidrest",
+            digits: 6,
+            period: 30,
+            algorithm: "sha1",
+            epochTolerance: [5, 0],
+        };
+    }
+    /**
+     * Removes the `data` property from the secret(s) to protect sensitive information.
+     */
+    cleanData(obj) {
+        const objs = Array.isArray(obj) ? obj : [obj];
+        for (const obj of objs) {
+            delete obj.data;
+        }
+    }
+    async count(params, query, res, user) {
+        return super.doCount({ params, query, res, user });
+    }
+    async validateCreate(obj, req, user) {
+        const objs = Array.isArray(obj) ? obj : [obj];
+        for (const obj of objs) {
+            switch (obj.type) {
+                case SecretType.FIDO2:
+                    await this.validateWebAuthnCreate(obj, req, this.fido2Config);
+                    break;
+                case SecretType.PASSKEY:
+                    await this.validateWebAuthnCreate(obj, req, this.passkeyConfig);
+                    break;
+                case SecretType.PASSWORD:
+                    {
+                        if (typeof obj.data === "string") {
+                            const argon = await importArgon2();
+                            obj.data = await argon.hash(obj.data);
+                        }
+                        else {
+                            throw new ApiError(ApiErrors.INVALID_REQUEST, 400, "A secret of type 'password' must specify string data.");
+                        }
+                    }
+                    break;
+                case SecretType.TOTP:
+                    await this.validateTOTPCreate(obj);
+                    break;
+            }
+        }
+    }
+    /**
+     * Verifies a client-submitted WebAuthn `RegistrationResponseJSON` (as produced by
+     * `navigator.credentials.create()` using the options from `generatePasskeyRegistrationOptions()`) against
+     * the challenge stored in the session, and replaces `obj.data` with the resulting `StoredPasskeyCredential`.
+     *
+     * Shared by both `passkey` and `fido2` secrets — the two differ only in relying party configuration
+     * (see `passkeyConfig`/`fido2Config`) and which `SecretType` they're persisted under, not in the
+     * underlying WebAuthn ceremony.
+     *
+     * Per the WebAuthn registration ceremony (https://www.w3.org/TR/webauthn-2/#sctn-registering-a-new-credential),
+     * the credential ID must be unique across all accounts known to this relying party. Rather than duplicate that
+     * check here, the credential ID is used directly as this secret's own `uid` so that `ModelRoute`'s existing
+     * create-time identifier check rejects the request should the ID already be registered to any account. This
+     * also lets a login ceremony, which only has the credential ID to go on, look the secret up directly by its
+     * primary key (see `BaseAuthPasskeyRoute`/`BaseAuthFIDO2Route`'s `getCredentialById`/`updateCredentialCounter`).
+     *
+     * @param obj The secret being created. Its `data` property must be a `RegistrationResponseJSON`.
+     * @param req The source HTTP request, used to retrieve the challenge stored in the session by a prior call to
+     * `generatePasskeyRegistrationOptions()`.
+     * @param config The relying party configuration to verify the response against.
+     */
+    async validateWebAuthnCreate(obj, req, config) {
+        if (!req.session) {
+            throw new Error("This secret type requires session support. Configure the `session` config " +
+                "block so the session middleware is registered.");
+        }
+        if (!req.session.challenge) {
+            throw new ApiError(ApiErrors.INVALID_REQUEST, 400, "No WebAuthn registration ceremony in progress for this session.");
+        }
+        if (typeof obj.userUid !== "string" || obj.userUid.length === 0) {
+            throw new ApiError(ApiErrors.INVALID_REQUEST, 400, "This secret type must specify a 'userUid'.");
+        }
+        // The challenge is single-use regardless of outcome — cleared as soon as it's read, before
+        // verification is even attempted.
+        const expectedChallenge = req.session.challenge;
+        delete req.session.challenge;
+        if (!isPasskeyRegistrationResponse(obj.data)) {
+            throw new ApiError(ApiErrors.INVALID_REQUEST, 400, "This secret type must specify a valid WebAuthn registration response.");
+        }
+        const result = await verifyPasskeyRegistrationResponse(config, expectedChallenge, obj.data);
+        if (!result.verified || !result.registrationInfo) {
+            throw new ApiError(ApiErrors.INVALID_REQUEST, 400, "WebAuthn registration could not be verified.");
+        }
+        const { credential } = result.registrationInfo;
+        const storedCredential = {
+            id: credential.id,
+            uid: obj.userUid,
+            publicKey: credential.publicKey,
+            counter: credential.counter,
+            transports: credential.transports,
+        };
+        obj.uid = credential.id;
+        obj.data = storedCredential;
+    }
+    /**
+     * Validates (or generates) the secret for a new `totp` secret per RFC 6238/RFC 4226.
+     *
+     * The client may either bring their own Base32-encoded secret (e.g. one generated on a
+     * different server for migration purposes) or, more commonly, omit `data` entirely and have one
+     * generated here. Either way, the secret's token parameters (`digits`/`period`/`algorithm`) are
+     * captured onto the stored `TOTPSecret` alongside it, rather than left to always defer to
+     * `totpConfig`, so verification keeps working for this secret even if the configured defaults
+     * change later.
+     *
+     * @param obj The secret being created. If `data` is a string, it's used as the caller-supplied
+     * secret; otherwise a new one is generated.
+     */
+    async validateTOTPCreate(obj) {
+        const { generateSecret } = await importOTPLib();
+        let secret;
+        if (obj.data !== undefined) {
+            if (typeof obj.data !== "string" || !(await isValidTOTPSecret(obj.data))) {
+                throw new ApiError(ApiErrors.INVALID_REQUEST, 400, "A secret of type 'totp' must be a Base32-encoded string of at least 128 bits.");
+            }
+            secret = obj.data;
+        }
+        else {
+            secret = generateSecret();
+        }
+        const totpSecret = {
+            secret,
+            digits: this.totpConfig.digits,
+            period: this.totpConfig.period,
+            algorithm: this.totpConfig.algorithm,
+            epochTolerance: this.totpConfig.epochTolerance,
+        };
+        obj.data = totpSecret;
+    }
+    /**
+     * Begins a WebAuthn registration ceremony for the authenticated user: generates a set of
+     * `PublicKeyCredentialCreationOptions` (RFC/spec compliant per https://www.w3.org/TR/webauthn-2/), scoped
+     * to exclude any credentials of the given type the user already has registered, and stores the challenge
+     * in the session for verification by `validateWebAuthnCreate()` once the client completes the ceremony
+     * and submits a new secret of that type. Shared by both the `passkey` and `fido2` registration endpoints.
+     *
+     * @param req The source HTTP request. Used to persist the generated challenge in the session.
+     * @param user The authenticated user the new credential will be associated with.
+     * @param type The secret type being registered — `passkey` or `fido2`.
+     * @param config The relying party configuration to generate options with.
+     */
+    async beginWebAuthnRegistration(req, user, type, config) {
+        if (!this.repoUtils) {
+            throw new Error("repoUtils is not set.");
+        }
+        const existing = await this.repoUtils.find({ type, userUid: user.uid }, { ignoreACL: true, user });
+        const excludeCredentials = existing.map((secret) => {
+            const credential = secret.data;
+            return { id: credential.id, transports: credential.transports };
+        });
+        return await generatePasskeyRegistrationOptions(config, req, { id: user.uid, name: user.uid }, excludeCredentials);
+    }
+    async passkeyRegistrationOptions(req, user) {
+        if (!user) {
+            throw new ApiError(ApiErrors.AUTH_REQUIRED, 401, "Authentication is required to register a passkey.");
+        }
+        return this.beginWebAuthnRegistration(req, user, SecretType.PASSKEY, this.passkeyConfig);
+    }
+    async fido2RegistrationOptions(req, user) {
+        if (!user) {
+            throw new ApiError(ApiErrors.AUTH_REQUIRED, 401, "Authentication is required to register a FIDO2 security key.");
+        }
+        return this.beginWebAuthnRegistration(req, user, SecretType.FIDO2, this.fido2Config);
+    }
+    async create(obj, req, user) {
+        const result = await super.doCreate(obj, { req, user });
+        // Selectively clean data from certain types of secrets. Some secret types require the data needs to be
+        // returned back to the client.
+        const objs = Array.isArray(result) ? result : [result];
+        for (const obj of objs) {
+            if ([SecretType.FIDO2, SecretType.PASSKEY, SecretType.PASSWORD].includes(obj.type)) {
+                delete obj.data;
+            }
+            else if (obj.type === SecretType.TOTP && obj.data) {
+                // The `otpauth://` provisioning URI is derived from the persisted secret rather than
+                // stored itself, so it's computed fresh here for the response only.
+                obj.data.uri = await generateTOTPURI(this.totpConfig, obj.userUid, obj.data);
+            }
+        }
+        return result;
+    }
+    async delete(id, version, purge, req, user) {
+        return super.doDelete(id, { user, req, version, purge: purge === "true" });
+    }
+    async exists(id, query, res, user) {
+        return super.doExists(id, { query, res, user });
+    }
+    async find(params, query, user) {
+        const results = await super.doFind({ params, query, user });
+        this.cleanData(results);
+        return results;
+    }
+    async findById(id, query, user) {
+        const result = await super.doFindById(id, { query, user });
+        if (result) {
+            this.cleanData(result);
+        }
+        return result;
+    }
+    async truncate(params, query, user) {
+        return super.doTruncate({ params, query, user });
+    }
+}
+__decorate([
+    Config("auth:passkey"),
+    __metadata("design:type", Object)
+], BaseSecretRoute.prototype, "passkeyConfig", void 0);
+__decorate([
+    Config("auth:fido2"),
+    __metadata("design:type", Object)
+], BaseSecretRoute.prototype, "fido2Config", void 0);
+__decorate([
+    Config("auth:totp"),
+    __metadata("design:type", Object)
+], BaseSecretRoute.prototype, "totpConfig", void 0);
+__decorate([
+    Summary("Count secrets"),
+    Description("Returns the total count of secrets in the datastore based on the given criteria " +
+        "in the header as `Content-Length`."),
+    Returns([null]),
+    Head(),
+    __param(0, Param()),
+    __param(1, Query()),
+    __param(2, Response),
+    __param(3, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseSecretRoute.prototype, "count", null);
+__decorate([
+    __param(1, Request),
+    __param(2, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseSecretRoute.prototype, "validateCreate", null);
+__decorate([
+    Summary("Generate Passkey Registration Options"),
+    Description("Begins a WebAuthn passkey registration ceremony for the authenticated user and returns the " +
+        "`PublicKeyCredentialCreationOptions` to pass to `navigator.credentials.create()`. Submit the " +
+        "resulting attestation response as the `data` of a new `passkey` secret to finish the ceremony."),
+    Returns([Object]),
+    Get("/passkey/register"),
+    __param(0, Request),
+    __param(1, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseSecretRoute.prototype, "passkeyRegistrationOptions", null);
+__decorate([
+    Summary("Generate FIDO2 Registration Options"),
+    Description("Begins a WebAuthn registration ceremony for the authenticated user's FIDO2 hardware security key and " +
+        "returns the `PublicKeyCredentialCreationOptions` to pass to `navigator.credentials.create()`. Submit " +
+        "the resulting attestation response as the `data` of a new `fido2` secret to finish the ceremony."),
+    Returns([Object]),
+    Get("/fido2/register"),
+    __param(0, Request),
+    __param(1, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseSecretRoute.prototype, "fido2RegistrationOptions", null);
+__decorate([
+    Summary("Create Secret(s)"),
+    Description("Create a new Secret."),
+    Returns([Object]),
+    Post(),
+    Validate("validateCreate"),
+    __param(1, Request),
+    __param(2, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseSecretRoute.prototype, "create", null);
+__decorate([
+    Summary("Delete secret by ID"),
+    Description("Deletes the secret from the service."),
+    Returns([null]),
+    Delete("/:id"),
+    __param(0, Param("id")),
+    __param(1, Query("version")),
+    __param(2, Query("purge")),
+    __param(3, Request),
+    __param(4, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseSecretRoute.prototype, "delete", null);
+__decorate([
+    Summary("Exists"),
+    Description("Returns the total count of secrets in the datastore based on the given criteria " +
+        "in the header as `Content-Length`."),
+    Returns([null]),
+    Head("/:id"),
+    __param(0, Param("id")),
+    __param(1, Query()),
+    __param(2, Response),
+    __param(3, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseSecretRoute.prototype, "exists", null);
+__decorate([
+    Summary("Find All Secrets"),
+    Description("Returns all Secrets from the system that the user has access to."),
+    Returns([[Array, Object]]),
+    Get(),
+    __param(0, Param()),
+    __param(1, Query()),
+    __param(2, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseSecretRoute.prototype, "find", null);
+__decorate([
+    Summary("Find Secret by ID"),
+    Description("Returns a single Secret from the system that the user has access to."),
+    Returns([Object]),
+    Get("/:id"),
+    __param(0, Param("id")),
+    __param(1, Query()),
+    __param(2, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseSecretRoute.prototype, "findById", null);
+__decorate([
+    Summary("Truncate Secrets"),
+    Description("Deletes all Secrets from the datastore that the user has access to."),
+    Returns([null]),
+    Delete(),
+    __param(0, Param()),
+    __param(1, Query()),
+    __param(2, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseSecretRoute.prototype, "truncate", null);
+//# sourceMappingURL=BaseSecretRoute.js.map

package/dist/lib/routes/BaseSecretRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseSecretRoute.js","sourceRoot":"","sources":["../../../src/routes/BaseSecretRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,+EAA+E;AAC/E,OAAO,EACH,SAAS,EACT,aAAa,EAGb,UAAU,EACV,SAAS,EACT,eAAe,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAU,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAW,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EACH,kCAAkC,EAClC,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,6BAA6B,EAC7B,iBAAiB,EACjB,iCAAiC,GACpC,MAAM,mBAAmB,CAAC;AAG3B,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AACpC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;AACxD,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC;AAErG;;GAEG;AACH,MAAM,OAAgB,eAAkC,SAAQ,UAAa;IAA7E;;QACuB,mBAAc,GAAQ,SAAS,CAAC;QAEnD;;WAEG;QAEO,kBAAa,GAAkB;YACrC,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,uBAAuB;SAClC,CAAC;QAEF;;;;;;WAMG;QAEO,gBAAW,GAAkB;YACnC,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,uBAAuB;YAC/B,uBAAuB,EAAE,gBAAgB;YACzC,WAAW,EAAE,aAAa;SAC7B,CAAC;QAEF;;WAEG;QAEO,eAAU,GAAe;YAC/B,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,MAAM;YACjB,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;SACzB,CAAC;IA6UN,CAAC;IA3UG;;OAEG;IACO,SAAS,CAAC,GAAY;QAC5B,MAAM,IAAI,GAAa,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,GAAG,CAAC,IAAI,CAAC;QACpB,CAAC;IACL,CAAC;IASY,AAAN,KAAK,CAAC,KAAK,CACL,MAAW,EACX,KAAU,EACT,GAAiB,EACrB,IAAc;QAEpB,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAEe,AAAN,KAAK,CAAC,cAAc,CAC1B,GAA8B,EACrB,GAAgB,EACnB,IAAc;QAEpB,MAAM,IAAI,GAAiB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,UAAU,CAAC,KAAK;oBACjB,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC9D,MAAM;gBACV,KAAK,UAAU,CAAC,OAAO;oBACnB,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;oBAChE,MAAM;gBACV,KAAK,UAAU,CAAC,QAAQ;oBACpB,CAAC;wBACG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;4BAC/B,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;4BACnC,GAAG,CAAC,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;wBAC1C,CAAC;6BAAM,CAAC;4BACJ,MAAM,IAAI,QAAQ,CACd,SAAS,CAAC,eAAe,EACzB,GAAG,EACH,uDAAuD,CAC1D,CAAC;wBACN,CAAC;oBACL,CAAC;oBACD,MAAM;gBACV,KAAK,UAAU,CAAC,IAAI;oBAChB,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;oBACnC,MAAM;YACd,CAAC;QACL,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACO,KAAK,CAAC,sBAAsB,CAAC,GAAe,EAAE,GAAgB,EAAE,MAAqB;QAC3F,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACX,4EAA4E;gBACxE,gDAAgD,CACvD,CAAC;QACN,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,QAAQ,CACd,SAAS,CAAC,eAAe,EACzB,GAAG,EACH,iEAAiE,CACpE,CAAC;QACN,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,EAAE,4CAA4C,CAAC,CAAC;QACrG,CAAC;QAED,2FAA2F;QAC3F,kCAAkC;QAClC,MAAM,iBAAiB,GAAW,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;QACxD,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;QAE7B,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,QAAQ,CACd,SAAS,CAAC,eAAe,EACzB,GAAG,EACH,uEAAuE,CAC1E,CAAC;QACN,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5F,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC/C,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,EAAE,8CAA8C,CAAC,CAAC;QACvG,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAE/C,MAAM,gBAAgB,GAA4B;YAC9C,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,GAAG,EAAE,GAAG,CAAC,OAAO;YAChB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,UAAU,EAAE,UAAU,CAAC,UAAU;SACpC,CAAC;QAEF,GAAG,CAAC,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAChC,CAAC;IAED;;;;;;;;;;;;OAYG;IACO,KAAK,CAAC,kBAAkB,CAAC,GAAe;QAC9C,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;QAEhD,IAAI,MAAc,CAAC;QACnB,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,QAAQ,CACd,SAAS,CAAC,eAAe,EACzB,GAAG,EACH,+EAA+E,CAClF,CAAC;YACN,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,cAAc,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,UAAU,GAAe;YAC3B,MAAM;YACN,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;YAC9B,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;YAC9B,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;YACpC,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,cAAc;SACjD,CAAC;QACF,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC;IAC1B,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,yBAAyB,CACnC,GAAgB,EAChB,IAAa,EACb,IAAgB,EAChB,MAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,QAAQ,GAAQ,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxG,MAAM,kBAAkB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC/C,MAAM,UAAU,GAA4B,MAAM,CAAC,IAAI,CAAC;YACxD,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,kCAAkC,CAC3C,MAAM,EACN,GAAG,EACH,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAChC,kBAAkB,CACrB,CAAC;IACN,CAAC;IAUY,AAAN,KAAK,CAAC,0BAA0B,CAAU,GAAgB,EAAQ,IAAc;QACnF,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,EAAE,mDAAmD,CAAC,CAAC;QAC1G,CAAC;QAED,OAAO,IAAI,CAAC,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7F,CAAC;IAUY,AAAN,KAAK,CAAC,wBAAwB,CAAU,GAAgB,EAAQ,IAAc;QACjF,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,QAAQ,CACd,SAAS,CAAC,aAAa,EACvB,GAAG,EACH,8DAA8D,CACjE,CAAC;QACN,CAAC;QAED,OAAO,IAAI,CAAC,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACzF,CAAC;IAOY,AAAN,KAAK,CAAC,MAAM,CAAC,GAAY,EAAW,GAAgB,EAAQ,IAAc;QAC7E,MAAM,MAAM,GAAiB,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtE,uGAAuG;QACvG,+BAA+B;QAC/B,MAAM,IAAI,GAAa,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACjE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjF,OAAO,GAAG,CAAC,IAAI,CAAC;YACpB,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBAClD,qFAAqF;gBACrF,oEAAoE;gBACnE,GAAG,CAAC,IAAqC,CAAC,GAAG,GAAG,MAAM,eAAe,CAClE,IAAI,CAAC,UAAU,EACf,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,IAAkB,CACzB,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAMY,AAAN,KAAK,CAAC,MAAM,CACF,EAAU,EACL,OAA2B,EAC7B,KAAyB,EAChC,GAAgB,EACnB,IAAc;QAEpB,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,KAAK,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;IASY,AAAN,KAAK,CAAC,MAAM,CACF,EAAU,EACd,KAAU,EACT,GAAiB,EACrB,IAAc;QAEpB,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAMY,AAAN,KAAK,CAAC,IAAI,CAAU,MAAW,EAAW,KAAU,EAAQ,IAAc;QAC7E,MAAM,OAAO,GAAa,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC;IACnB,CAAC;IAMY,AAAN,KAAK,CAAC,QAAQ,CAAc,EAAU,EAAW,KAAU,EAAQ,IAAc;QACpF,MAAM,MAAM,GAAa,MAAM,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAMY,AAAN,KAAK,CAAC,QAAQ,CAAU,MAAW,EAAW,KAAU,EAAQ,IAAc;QACjF,OAAO,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;CACJ;AA7Wa;IADT,MAAM,CAAC,cAAc,CAAC;;sDAKrB;AAUQ;IADT,MAAM,CAAC,YAAY,CAAC;;oDAOnB;AAMQ;IADT,MAAM,CAAC,WAAW,CAAC;;mDAOlB;AAmBW;IAPZ,OAAO,CAAC,eAAe,CAAC;IACxB,WAAW,CACR,kFAAkF;QAC9E,oCAAoC,CAC3C;IACA,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IACf,IAAI,EAAE;IAEF,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,QAAQ,CAAA;IACR,WAAA,IAAI,CAAA;;;;4CAGR;AAEe;IAEX,WAAA,OAAO,CAAA;IACP,WAAA,IAAI,CAAA;;;;qDA8BR;AA6JY;IARZ,OAAO,CAAC,uCAAuC,CAAC;IAChD,WAAW,CACR,6FAA6F;QACzF,+FAA+F;QAC/F,gGAAgG,CACvG;IACA,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IACjB,GAAG,CAAC,mBAAmB,CAAC;IACgB,WAAA,OAAO,CAAA;IAAoB,WAAA,IAAI,CAAA;;;;iEAMvE;AAUY;IARZ,OAAO,CAAC,qCAAqC,CAAC;IAC9C,WAAW,CACR,uGAAuG;QACnG,uGAAuG;QACvG,kGAAkG,CACzG;IACA,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IACjB,GAAG,CAAC,iBAAiB,CAAC;IACgB,WAAA,OAAO,CAAA;IAAoB,WAAA,IAAI,CAAA;;;;+DAUrE;AAOY;IALZ,OAAO,CAAC,kBAAkB,CAAC;IAC3B,WAAW,CAAC,sBAAsB,CAAC;IACnC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IACjB,IAAI,EAAE;IACN,QAAQ,CAAC,gBAAgB,CAAC;IACQ,WAAA,OAAO,CAAA;IAAoB,WAAA,IAAI,CAAA;;;;6CAqBjE;AAMY;IAJZ,OAAO,CAAC,qBAAqB,CAAC;IAC9B,WAAW,CAAC,sCAAsC,CAAC;IACnD,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IACf,MAAM,CAAC,MAAM,CAAC;IAEV,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACX,WAAA,KAAK,CAAC,SAAS,CAAC,CAAA;IAChB,WAAA,KAAK,CAAC,OAAO,CAAC,CAAA;IACd,WAAA,OAAO,CAAA;IACP,WAAA,IAAI,CAAA;;;;6CAGR;AASY;IAPZ,OAAO,CAAC,QAAQ,CAAC;IACjB,WAAW,CACR,kFAAkF;QAC9E,oCAAoC,CAC3C;IACA,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IACf,IAAI,CAAC,MAAM,CAAC;IAER,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACX,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,QAAQ,CAAA;IACR,WAAA,IAAI,CAAA;;;;6CAGR;AAMY;IAJZ,OAAO,CAAC,kBAAkB,CAAC;IAC3B,WAAW,CAAC,kEAAkE,CAAC;IAC/E,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE;IACa,WAAA,KAAK,EAAE,CAAA;IAAe,WAAA,KAAK,EAAE,CAAA;IAAc,WAAA,IAAI,CAAA;;;;2CAIjE;AAMY;IAJZ,OAAO,CAAC,mBAAmB,CAAC;IAC5B,WAAW,CAAC,sEAAsE,CAAC;IACnF,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IACjB,GAAG,CAAC,MAAM,CAAC;IACW,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IAAc,WAAA,KAAK,EAAE,CAAA;IAAc,WAAA,IAAI,CAAA;;;;+CAMxE;AAMY;IAJZ,OAAO,CAAC,kBAAkB,CAAC;IAC3B,WAAW,CAAC,qEAAqE,CAAC;IAClF,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IACf,MAAM,EAAE;IACc,WAAA,KAAK,EAAE,CAAA;IAAe,WAAA,KAAK,EAAE,CAAA;IAAc,WAAA,IAAI,CAAA;;;;+CAErE"}

package/dist/lib/routes/BaseUserRoute.js

@@ -0,0 +1,10 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+///////////////////////////////////////////////////////////////////////////////
+import { CRUDRoute } from "@rapidrest/service-core";
+/**
+ * @author Jean-Philippe Steinmetz
+ */
+export class BaseUserRoute extends CRUDRoute {
+}
+//# sourceMappingURL=BaseUserRoute.js.map

package/dist/lib/routes/BaseUserRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseUserRoute.js","sourceRoot":"","sources":["../../../src/routes/BaseUserRoute.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,+EAA+E;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAGpD;;GAEG;AACH,MAAM,OAAgB,aAA8B,SAAQ,SAAY;CAAG"}

package/dist/lib/routes/UserUtils.js

@@ -0,0 +1,78 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+////////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+////////////////////////////////////////////////////////////////////////////////
+import { ObjectFactory, RepoUtils } from "@rapidrest/service-core";
+import { ObjectDecorators } from "@rapidrest/core";
+const { Init, Inject } = ObjectDecorators;
+/**
+ * Utility class for working with persisted `User` objects in the database.
+ */
+export class UserUtils {
+    constructor(userClass, aliasClass) {
+        this.aliasClass = aliasClass;
+        this.userClass = userClass;
+    }
+    async init() {
+        if (!this.objectFactory) {
+            throw new Error("objectFactory is not set.");
+        }
+        if (!this.aliasRepo) {
+            this.aliasRepo = await this.objectFactory.newInstance(RepoUtils, {
+                name: `${RepoUtils.name}:${this.aliasClass.name}`,
+                args: [this.aliasClass],
+            });
+        }
+        if (!this.userRepo) {
+            this.userRepo = await this.objectFactory.newInstance(RepoUtils, {
+                name: `${RepoUtils.name}:${this.userClass.name}`,
+                args: [this.userClass],
+            });
+        }
+    }
+    /**
+     * Performs a look up of the user with the given id. The id may be one of: the user's `uid` or an `Alias`.
+     *
+     * @param id The unique id of the user to lookup.
+     * @returns The `User` if found, otherwise `undefined`.
+     */
+    async lookup(id) {
+        if (!this.aliasRepo) {
+            throw new Error("aliasRepo is not set.");
+        }
+        if (!this.userRepo) {
+            throw new Error("userRepo is not set.");
+        }
+        // First let's try the id as the User `uid`.
+        let user = await this.userRepo.findOne(id, { ignoreACL: true });
+        if (user) {
+            return user;
+        }
+        // Okay, now let's try looking up the id as an Alias (by its uid or alias value) and resolve
+        // the user that it belongs to.
+        const alias = await this.aliasRepo.findOne(id, { ignoreACL: true });
+        if (alias) {
+            user = await this.userRepo.findOne(alias.userUid, { ignoreACL: true });
+        }
+        return user;
+    }
+}
+__decorate([
+    Inject(ObjectFactory),
+    __metadata("design:type", ObjectFactory)
+], UserUtils.prototype, "objectFactory", void 0);
+__decorate([
+    Init,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], UserUtils.prototype, "init", null);
+//# sourceMappingURL=UserUtils.js.map

package/dist/lib/routes/UserUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserUtils.js","sourceRoot":"","sources":["../../../src/routes/UserUtils.ts"],"names":[],"mappings":";;;;;;;;;AAAA,gFAAgF;AAChF,6CAA6C;AAC7C,gFAAgF;AAChF,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAE1C;;GAEG;AACH,MAAM,OAAO,SAAS;IASlB,YAAY,SAAc,EAAE,UAAe;QACvC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAGe,AAAN,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,IAAI,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,SAAS,EAAE;gBAC7D,IAAI,EAAE,GAAG,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;gBACjD,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;aAC1B,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjB,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,SAAS,EAAE;gBAC5D,IAAI,EAAE,GAAG,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;gBAChD,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;aACzB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,MAAM,CAAC,EAAU;QAC1B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC5C,CAAC;QAED,4CAA4C;QAC5C,IAAI,IAAI,GAAkB,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,IAAI,IAAI,EAAE,CAAC;YACP,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,4FAA4F;QAC5F,+BAA+B;QAC/B,MAAM,KAAK,GAAkB,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,IAAI,KAAK,EAAE,CAAC;YACR,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAzDa;IADT,MAAM,CAAC,aAAa,CAAC;8BACI,aAAa;gDAAC;AAQxB;IADf,IAAI;;;;qCAmBJ"}

package/dist/lib/routes/index.js

@@ -0,0 +1,13 @@
+export * from "./BaseAliasRoute.js";
+export * from "./BaseAuthBasicRoute.js";
+export * from "./BaseAuthFIDO2Route.js";
+export * from "./BaseAuthMFARoute.js";
+export * from "./BaseAuthOIDCRoute.js";
+export * from "./BaseAuthOTPRoute.js";
+export * from "./BaseAuthPasskeyRoute.js";
+export * from "./BaseAuthTOTPRoute.js";
+export * from "./BaseProfileRoute.js";
+export * from "./BaseSecretRoute.js";
+export * from "./BaseUserRoute.js";
+export * from "./UserUtils.js";
+//# sourceMappingURL=index.js.map

package/dist/lib/routes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC"}

package/dist/lib/routes/mongo/BaseAliasRouteMongo.js

@@ -0,0 +1,20 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+///////////////////////////////////////////////////////////////////////////////
+import { RouteDecorators } from "@rapidrest/service-core";
+import { AliasMongo } from "../../mongo.js";
+import { BaseAliasRoute } from "../BaseAliasRoute.js";
+const { Model } = RouteDecorators;
+let BaseAliasRouteMongo = class BaseAliasRouteMongo extends BaseAliasRoute {
+};
+BaseAliasRouteMongo = __decorate([
+    Model(AliasMongo)
+], BaseAliasRouteMongo);
+export { BaseAliasRouteMongo };
+//# sourceMappingURL=BaseAliasRouteMongo.js.map

package/dist/lib/routes/mongo/BaseAliasRouteMongo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAliasRouteMongo.js","sourceRoot":"","sources":["../../../../src/routes/mongo/BaseAliasRouteMongo.ts"],"names":[],"mappings":";;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,+EAA+E;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAG3B,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,cAA0B;CAAG,CAAA;AAAzD,mBAAmB;IAD/B,KAAK,CAAC,UAAU,CAAC;GACL,mBAAmB,CAAsC"}

package/dist/lib/routes/mongo/BaseAuthBasicRouteMongo.js

@@ -0,0 +1,14 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+///////////////////////////////////////////////////////////////////////////////
+import { AliasMongo, SecretMongo, UserMongo } from "../../mongo.js";
+import { BaseAuthBasicRoute } from "../BaseAuthBasicRoute.js";
+export class BaseAuthBasicRouteMongo extends BaseAuthBasicRoute {
+    constructor() {
+        super(...arguments);
+        this.aliasClass = AliasMongo;
+        this.secretClass = SecretMongo;
+        this.userClass = UserMongo;
+    }
+}
+//# sourceMappingURL=BaseAuthBasicRouteMongo.js.map

package/dist/lib/routes/mongo/BaseAuthBasicRouteMongo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAuthBasicRouteMongo.js","sourceRoot":"","sources":["../../../../src/routes/mongo/BaseAuthBasicRouteMongo.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,+EAA+E;AAC/E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,OAAgB,uBAAwB,SAAQ,kBAAsD;IAA5G;;QACc,eAAU,GAAQ,UAAU,CAAC;QAC7B,gBAAW,GAAQ,WAAW,CAAC;QAC/B,cAAS,GAAQ,SAAS,CAAC;IACzC,CAAC;CAAA"}

package/dist/lib/routes/mongo/BaseAuthFIDO2RouteMongo.js

@@ -0,0 +1,14 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+///////////////////////////////////////////////////////////////////////////////
+import { AliasMongo, SecretMongo, UserMongo } from "../../mongo.js";
+import { BaseAuthFIDO2Route } from "../BaseAuthFIDO2Route.js";
+export class BaseAuthFIDO2RouteMongo extends BaseAuthFIDO2Route {
+    constructor() {
+        super(...arguments);
+        this.aliasClass = AliasMongo;
+        this.secretClass = SecretMongo;
+        this.userClass = UserMongo;
+    }
+}
+//# sourceMappingURL=BaseAuthFIDO2RouteMongo.js.map

package/dist/lib/routes/mongo/BaseAuthFIDO2RouteMongo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAuthFIDO2RouteMongo.js","sourceRoot":"","sources":["../../../../src/routes/mongo/BaseAuthFIDO2RouteMongo.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,+EAA+E;AAC/E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,OAAgB,uBAAwB,SAAQ,kBAAsD;IAA5G;;QACc,eAAU,GAAQ,UAAU,CAAC;QAC7B,gBAAW,GAAQ,WAAW,CAAC;QAC/B,cAAS,GAAQ,SAAS,CAAC;IACzC,CAAC;CAAA"}

package/dist/lib/routes/mongo/BaseAuthMFARouteMongo.js

@@ -0,0 +1,14 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+///////////////////////////////////////////////////////////////////////////////
+import { AliasMongo, SecretMongo, UserMongo } from "../../mongo.js";
+import { BaseAuthMFARoute } from "../BaseAuthMFARoute.js";
+export class BaseAuthMFARouteMongo extends BaseAuthMFARoute {
+    constructor() {
+        super(...arguments);
+        this.aliasClass = AliasMongo;
+        this.secretClass = SecretMongo;
+        this.userClass = UserMongo;
+    }
+}
+//# sourceMappingURL=BaseAuthMFARouteMongo.js.map

package/dist/lib/routes/mongo/BaseAuthMFARouteMongo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAuthMFARouteMongo.js","sourceRoot":"","sources":["../../../../src/routes/mongo/BaseAuthMFARouteMongo.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,+EAA+E;AAC/E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,OAAgB,qBAAsB,SAAQ,gBAAoD;IAAxG;;QACc,eAAU,GAAQ,UAAU,CAAC;QAC7B,gBAAW,GAAQ,WAAW,CAAC;QAC/B,cAAS,GAAQ,SAAS,CAAC;IACzC,CAAC;CAAA"}

package/dist/lib/routes/mongo/BaseAuthOIDCRouteMongo.js

@@ -0,0 +1,11 @@
+import { AliasMongo, ProfileMongo, UserMongo } from "../../mongo.js";
+import { BaseAuthOIDCRoute } from "../BaseAuthOIDCRoute.js";
+export class BaseAuthOIDCRouteMongo extends BaseAuthOIDCRoute {
+    constructor() {
+        super(...arguments);
+        this.aliasClass = AliasMongo;
+        this.profileClass = ProfileMongo;
+        this.userClass = UserMongo;
+    }
+}
+//# sourceMappingURL=BaseAuthOIDCRouteMongo.js.map

package/dist/lib/routes/mongo/BaseAuthOIDCRouteMongo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAuthOIDCRouteMongo.js","sourceRoot":"","sources":["../../../../src/routes/mongo/BaseAuthOIDCRouteMongo.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,OAAgB,sBAAuB,SAAQ,iBAAsD;IAA3G;;QACc,eAAU,GAAQ,UAAU,CAAC;QAC7B,iBAAY,GAAQ,YAAY,CAAC;QACjC,cAAS,GAAQ,SAAS,CAAC;IACzC,CAAC;CAAA"}