@tinyrack/tinyauth-server 0.0.16 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (149) hide show
  1. package/dist/emails/components/email-layout.d.ts +1 -1
  2. package/dist/emails/components/email-layout.d.ts.map +1 -1
  3. package/dist/emails/templates/password-reset.d.ts +1 -1
  4. package/dist/emails/templates/password-reset.d.ts.map +1 -1
  5. package/dist/emails/templates/verification.d.ts +1 -1
  6. package/dist/emails/templates/verification.d.ts.map +1 -1
  7. package/dist/entities/background-job.entity.d.ts +42 -42
  8. package/dist/entities/background-job.entity.d.ts.map +1 -1
  9. package/dist/entities/base.entity.d.ts +8 -8
  10. package/dist/entities/base.entity.d.ts.map +1 -1
  11. package/dist/entities/bootstrap-state.entity.d.ts +15 -15
  12. package/dist/entities/bootstrap-state.entity.d.ts.map +1 -1
  13. package/dist/entities/email-verification.entity.d.ts +33 -27
  14. package/dist/entities/email-verification.entity.d.ts.map +1 -1
  15. package/dist/entities/jwt-key.entity.d.ts +36 -36
  16. package/dist/entities/jwt-key.entity.d.ts.map +1 -1
  17. package/dist/entities/oauth-client.entity.d.ts +519 -471
  18. package/dist/entities/oauth-client.entity.d.ts.map +1 -1
  19. package/dist/entities/oauth-code.entity.d.ts +519 -471
  20. package/dist/entities/oauth-code.entity.d.ts.map +1 -1
  21. package/dist/entities/password-reset.entity.d.ts +33 -27
  22. package/dist/entities/password-reset.entity.d.ts.map +1 -1
  23. package/dist/entities/pending-oauth-registration.entity.d.ts +39 -39
  24. package/dist/entities/pending-oauth-registration.entity.d.ts.map +1 -1
  25. package/dist/entities/revoked-token.entity.d.ts +519 -471
  26. package/dist/entities/revoked-token.entity.d.ts.map +1 -1
  27. package/dist/entities/scheduler-job.entity.d.ts +48 -48
  28. package/dist/entities/scheduler-job.entity.d.ts.map +1 -1
  29. package/dist/entities/terms-content.entity.d.ts +279 -249
  30. package/dist/entities/terms-content.entity.d.ts.map +1 -1
  31. package/dist/entities/terms.entity.d.ts +279 -249
  32. package/dist/entities/terms.entity.d.ts.map +1 -1
  33. package/dist/entities/user-consent.entity.d.ts +519 -471
  34. package/dist/entities/user-consent.entity.d.ts.map +1 -1
  35. package/dist/entities/user-oauth.entity.d.ts +36 -30
  36. package/dist/entities/user-oauth.entity.d.ts.map +1 -1
  37. package/dist/entities/user-passkey.entity.d.ts +45 -39
  38. package/dist/entities/user-passkey.entity.d.ts.map +1 -1
  39. package/dist/entities/user-terms-consent.entity.d.ts +279 -249
  40. package/dist/entities/user-terms-consent.entity.d.ts.map +1 -1
  41. package/dist/entities/user-totp-recovery-code.entity.d.ts +177 -159
  42. package/dist/entities/user-totp-recovery-code.entity.d.ts.map +1 -1
  43. package/dist/entities/user-totp.entity.d.ts +177 -159
  44. package/dist/entities/user-totp.entity.d.ts.map +1 -1
  45. package/dist/entities/user.entity.d.ts +177 -159
  46. package/dist/entities/user.entity.d.ts.map +1 -1
  47. package/dist/entrypoints/app.d.ts +8 -1
  48. package/dist/entrypoints/app.d.ts.map +1 -1
  49. package/dist/entrypoints/app.js +5 -0
  50. package/dist/entrypoints/app.js.map +1 -1
  51. package/dist/entrypoints/database/postgres/compiled-functions.js +1 -1
  52. package/dist/entrypoints/database/postgres/compiled-functions.js.map +1 -1
  53. package/dist/entrypoints/database/sqlite/compiled-functions.js +1 -1
  54. package/dist/entrypoints/database/sqlite/compiled-functions.js.map +1 -1
  55. package/dist/lib/config/client.d.ts.map +1 -1
  56. package/dist/lib/config/client.js +5 -1
  57. package/dist/lib/config/client.js.map +1 -1
  58. package/dist/lib/config/identity-providers.d.ts.map +1 -1
  59. package/dist/lib/config/identity-providers.js +10 -33
  60. package/dist/lib/config/identity-providers.js.map +1 -1
  61. package/dist/lib/config/url-policy.d.ts +4 -0
  62. package/dist/lib/config/url-policy.d.ts.map +1 -0
  63. package/dist/lib/config/url-policy.js +38 -0
  64. package/dist/lib/config/url-policy.js.map +1 -0
  65. package/dist/lib/pkce.d.ts.map +1 -1
  66. package/dist/lib/pkce.js +3 -0
  67. package/dist/lib/pkce.js.map +1 -1
  68. package/dist/middleware/csrf.d.ts +2 -0
  69. package/dist/middleware/csrf.d.ts.map +1 -0
  70. package/dist/middleware/csrf.js +51 -0
  71. package/dist/middleware/csrf.js.map +1 -0
  72. package/dist/repositories/revoked-token.repository.d.ts +20 -0
  73. package/dist/repositories/revoked-token.repository.d.ts.map +1 -1
  74. package/dist/repositories/revoked-token.repository.js +44 -1
  75. package/dist/repositories/revoked-token.repository.js.map +1 -1
  76. package/dist/repositories/user-passkey.repository.d.ts +45 -39
  77. package/dist/repositories/user-passkey.repository.d.ts.map +1 -1
  78. package/dist/repositories/user-totp-recovery-code.repository.d.ts +118 -106
  79. package/dist/repositories/user-totp-recovery-code.repository.d.ts.map +1 -1
  80. package/dist/repositories/user-totp.repository.d.ts +177 -159
  81. package/dist/repositories/user-totp.repository.d.ts.map +1 -1
  82. package/dist/routes/api/oauth/_provider/authorize/get.d.ts.map +1 -1
  83. package/dist/routes/api/oauth/_provider/authorize/get.js +13 -1
  84. package/dist/routes/api/oauth/_provider/authorize/get.js.map +1 -1
  85. package/dist/routes/api/oauth/_provider/callback/post.d.ts.map +1 -1
  86. package/dist/routes/api/oauth/_provider/callback/post.js +30 -1
  87. package/dist/routes/api/oauth/_provider/callback/post.js.map +1 -1
  88. package/dist/routes/index.d.ts +8 -1
  89. package/dist/routes/index.d.ts.map +1 -1
  90. package/dist/routes/oauth/.well-known/openid-configuration/get.d.ts +4 -0
  91. package/dist/routes/oauth/.well-known/openid-configuration/get.d.ts.map +1 -1
  92. package/dist/routes/oauth/.well-known/openid-configuration/get.js +25 -2
  93. package/dist/routes/oauth/.well-known/openid-configuration/get.js.map +1 -1
  94. package/dist/routes/oauth/authorize/get.d.ts +2 -0
  95. package/dist/routes/oauth/authorize/get.d.ts.map +1 -1
  96. package/dist/routes/oauth/authorize/get.js +4 -0
  97. package/dist/routes/oauth/authorize/get.js.map +1 -1
  98. package/dist/routes/oauth/index.d.ts +8 -1
  99. package/dist/routes/oauth/index.d.ts.map +1 -1
  100. package/dist/routes/oauth/introspect/post.d.ts +1 -0
  101. package/dist/routes/oauth/introspect/post.d.ts.map +1 -1
  102. package/dist/routes/oauth/token/post.d.ts +1 -1
  103. package/dist/routes/oauth/token/post.d.ts.map +1 -1
  104. package/dist/routes/oauth/token/post.js +1 -0
  105. package/dist/routes/oauth/token/post.js.map +1 -1
  106. package/dist/routes/oauth/userinfo/get.d.ts.map +1 -1
  107. package/dist/routes/oauth/userinfo/get.js +3 -0
  108. package/dist/routes/oauth/userinfo/get.js.map +1 -1
  109. package/dist/schemas/error.d.ts +75 -0
  110. package/dist/schemas/error.d.ts.map +1 -1
  111. package/dist/schemas/error.js +3 -0
  112. package/dist/schemas/error.js.map +1 -1
  113. package/dist/schemas/field.d.ts +1 -6
  114. package/dist/schemas/field.d.ts.map +1 -1
  115. package/dist/schemas/field.js +2 -3
  116. package/dist/schemas/field.js.map +1 -1
  117. package/dist/schemas/oauth.d.ts +1 -1
  118. package/dist/schemas/oauth.js +1 -1
  119. package/dist/schemas/oauth.js.map +1 -1
  120. package/dist/schemas/response.d.ts +1 -1
  121. package/dist/services/jwt.service.d.ts +5 -0
  122. package/dist/services/jwt.service.d.ts.map +1 -1
  123. package/dist/services/jwt.service.js +31 -16
  124. package/dist/services/jwt.service.js.map +1 -1
  125. package/dist/services/oauth-authorize.service.d.ts +5 -1
  126. package/dist/services/oauth-authorize.service.d.ts.map +1 -1
  127. package/dist/services/oauth-authorize.service.js +65 -16
  128. package/dist/services/oauth-authorize.service.js.map +1 -1
  129. package/dist/services/oauth-client.service.d.ts +1 -0
  130. package/dist/services/oauth-client.service.d.ts.map +1 -1
  131. package/dist/services/oauth-client.service.js +5 -0
  132. package/dist/services/oauth-client.service.js.map +1 -1
  133. package/dist/services/oauth-connect.service.d.ts +1 -0
  134. package/dist/services/oauth-connect.service.d.ts.map +1 -1
  135. package/dist/services/oauth-connect.service.js +61 -7
  136. package/dist/services/oauth-connect.service.js.map +1 -1
  137. package/dist/services/oauth-token.service.d.ts +8 -1
  138. package/dist/services/oauth-token.service.d.ts.map +1 -1
  139. package/dist/services/oauth-token.service.js +111 -30
  140. package/dist/services/oauth-token.service.js.map +1 -1
  141. package/package.json +28 -28
  142. package/public/assets/index-5_9rzim1.css +2 -0
  143. package/public/assets/index-BTGeW26-.js +75 -0
  144. package/public/assets/index-BTGeW26-.js.map +1 -0
  145. package/public/index.html +2 -2
  146. package/readme.md +74 -25
  147. package/public/assets/index-6odabbrQ.css +0 -1
  148. package/public/assets/index-CLq6d6iO.js +0 -76
  149. package/public/assets/index-CLq6d6iO.js.map +0 -1
@@ -1 +1 @@
1
- {"version":3,"file":"user.entity.d.ts","sourceRoot":"","sources":["../../src/entities/user.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,WAAW,EAAK,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAOpE,eAAO,MAAM,gBAAgB;;;;mBAqEm4d,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;mBAAH,GAAG;;;mBAAH,GAAG;;;;mBAAH,GAAG;;;mBAAH,GAAG;;;;;;mBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;mBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;mBAAH,GAAG;;;mBAAH,GAAG;;mEAdj6d,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE/D,qBAAa,UAAW,SAAQ,gBAAgB,CAAC,KAAK;IACpD;;OAEG;IACH,WAAW,IAAI,OAAO;CAGvB"}
1
+ {"version":3,"file":"user.entity.d.ts","sourceRoot":"","sources":["../../src/entities/user.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,WAAW,EAAK,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAOpE,eAAO,MAAM,gBAAgB;;;;mBAqEkxf,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;mBAAH,GAAG;;;mBAAH,GAAG;;;;mBAAH,GAAG;;;mBAAH,GAAG;;;;;;mBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;mBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;mBAAH,GAAG;;;mBAAH,GAAG;;0HAdhzf,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE/D,qBAAa,UAAW,SAAQ,gBAAgB,CAAC,KAAK;IACpD;;OAEG;IACH,WAAW,IAAI,OAAO;CAGvB"}
@@ -983,6 +983,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
983
983
  nonce?: string | string[];
984
984
  prompt?: string | string[];
985
985
  max_age?: string | string[];
986
+ reauthenticated?: string | string[];
986
987
  display?: string | string[];
987
988
  };
988
989
  };
@@ -1002,6 +1003,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
1002
1003
  nonce?: string | string[];
1003
1004
  prompt?: string | string[];
1004
1005
  max_age?: string | string[];
1006
+ reauthenticated?: string | string[];
1005
1007
  display?: string | string[];
1006
1008
  };
1007
1009
  };
@@ -1031,7 +1033,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
1031
1033
  access_token: string;
1032
1034
  token_type: "Bearer";
1033
1035
  expires_in: number;
1034
- refresh_token: string;
1036
+ refresh_token?: string | undefined | undefined;
1035
1037
  id_token?: string | undefined | undefined;
1036
1038
  scope: string;
1037
1039
  };
@@ -1059,6 +1061,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
1059
1061
  iat?: number | undefined | undefined;
1060
1062
  sub?: string | undefined | undefined;
1061
1063
  iss?: string | undefined | undefined;
1064
+ aud?: string | undefined | undefined;
1062
1065
  };
1063
1066
  outputFormat: "json";
1064
1067
  status: 200;
@@ -1131,6 +1134,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
1131
1134
  token_endpoint: string;
1132
1135
  jwks_uri: string;
1133
1136
  response_types_supported: string[];
1137
+ response_modes_supported: string[];
1134
1138
  subject_types_supported: string[];
1135
1139
  id_token_signing_alg_values_supported: string[];
1136
1140
  userinfo_endpoint: string;
@@ -1142,6 +1146,9 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
1142
1146
  introspection_endpoint: string;
1143
1147
  revocation_endpoint: string;
1144
1148
  ui_locales_supported: ("en" | "ko" | "ja")[];
1149
+ request_parameter_supported: boolean;
1150
+ request_uri_parameter_supported: boolean;
1151
+ claims_parameter_supported: boolean;
1145
1152
  };
1146
1153
  outputFormat: "json";
1147
1154
  status: 200;
@@ -1 +1 @@
1
- {"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/entrypoints/app.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,0BAA0B,EAEhC,MAAM,wBAAwB,CAAC;AAUhC,OAAO,EACL,KAAK,yBAAyB,EAE/B,MAAM,0BAA0B,CAAC;AAElC;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AAC1D,MAAM,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEhE,wBAAsB,SAAS,CAC7B,OAAO,EAAE,gBAAgB,EACzB,cAAc,GAAE,uBAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwE7C;AAED,MAAM,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC"}
1
+ {"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/entrypoints/app.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,0BAA0B,EAEhC,MAAM,wBAAwB,CAAC;AAWhC,OAAO,EACL,KAAK,yBAAyB,EAE/B,MAAM,0BAA0B,CAAC;AAElC;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AAC1D,MAAM,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEhE,wBAAsB,SAAS,CAC7B,OAAO,EAAE,gBAAgB,EACzB,cAAc,GAAE,uBAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgF7C;AAED,MAAM,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC"}
@@ -4,6 +4,7 @@ import { generateSpecs } from 'hono-openapi';
4
4
  import { TinyAuthRuntimeConfigSchema, } from "../lib/config/index.js";
5
5
  import { createLogger } from "../lib/logger.js";
6
6
  import { createOpenApiDocumentation } from "../lib/openapi.js";
7
+ import { csrfProtection } from "../middleware/csrf.js";
7
8
  import { loggerMiddleware } from "../middleware/logger.js";
8
9
  import { mikroOrmMiddleware } from "../middleware/mikro-orm.js";
9
10
  import { servicesMiddleware } from "../middleware/services.js";
@@ -26,6 +27,9 @@ export async function createApp(options, runtimeOptions = {}) {
26
27
  const app = new Hono()
27
28
  .onError((err, c) => {
28
29
  if (err instanceof TinyAuthError) {
30
+ if (err.code === 'insufficient_scope') {
31
+ c.header('WWW-Authenticate', 'Bearer error="insufficient_scope", scope="openid"');
32
+ }
29
33
  return c.json(err.toJson(), err.status);
30
34
  }
31
35
  logger.error({ err }, 'Unhandled error');
@@ -39,6 +43,7 @@ export async function createApp(options, runtimeOptions = {}) {
39
43
  }))
40
44
  .use('*', sessionMiddleware(config.security.session_secret, config.server.public_origin.startsWith('https')))
41
45
  .use('*', trustedProxyGuard(config.server.trust_proxy))
46
+ .use('/api/*', csrfProtection(config.server.public_origin))
42
47
  .use('*', servicesMiddleware(services))
43
48
  .use('*', mikroOrmMiddleware)
44
49
  .route('/', routes)
@@ -1 +1 @@
1
- {"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/entrypoints/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAEL,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAEL,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAQlC,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAyB,EACzB,iBAA0C,EAAE;IAE5C,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,oBAAoB,GAAG,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAExE,sEAAsE;IACtE,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAEzD,sDAAsD;IACtD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,kBAAkB,CACpD,MAAM,EACN,MAAM,EACN,cAAc,CACf,CAAC;IAEF,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE;SACnB,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QAClB,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC;SACD,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;SAClC,GAAG,CACF,GAAG,EACH,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa;QACnC,WAAW,EAAE,IAAI;KAClB,CAAC,CACH;SACA,GAAG,CACF,GAAG,EACH,iBAAiB,CACf,MAAM,CAAC,QAAQ,CAAC,cAAc,EAC9B,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAChD,CACF;SACA,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;SACtD,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;SACtC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC;SAC5B,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;SAClB,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEL,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE;YACpC,aAAa,EAAE,oBAAoB;SACpC,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAEjC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC"}
1
+ {"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/entrypoints/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAEL,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAEL,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAQlC,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAyB,EACzB,iBAA0C,EAAE;IAE5C,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,oBAAoB,GAAG,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAExE,sEAAsE;IACtE,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAEzD,sDAAsD;IACtD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,kBAAkB,CACpD,MAAM,EACN,MAAM,EACN,cAAc,CACf,CAAC;IAEF,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE;SACnB,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QAClB,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBACtC,CAAC,CAAC,MAAM,CACN,kBAAkB,EAClB,mDAAmD,CACpD,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC;SACD,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;SAClC,GAAG,CACF,GAAG,EACH,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa;QACnC,WAAW,EAAE,IAAI;KAClB,CAAC,CACH;SACA,GAAG,CACF,GAAG,EACH,iBAAiB,CACf,MAAM,CAAC,QAAQ,CAAC,cAAc,EAC9B,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAChD,CACF;SACA,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;SACtD,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;SAC1D,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;SACtC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC;SAC5B,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;SAClB,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEL,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE;YACpC,aAAa,EAAE,oBAAoB;SACpC,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAEjC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC"}
@@ -1,5 +1,5 @@
1
1
  export default {
2
- __version: '7.0.14',
2
+ __version: '7.1.4',
3
3
  'hydrator-user_totp_recovery_code_6000-full-false': function (isPrimaryKey, isEntity, isScalarReference, Collection, Reference, PolymorphicRef, ValidationError, convertToJSValue_id, convertToDatabaseValue_id, user_3, user_4) {
4
4
  // compiled hydrator for entity UserTotpRecoveryCodeEntity ( normalized)
5
5
  return function (entity, data, factory, newEntity, convertCustomTypes, schema, parentSchema, normalizeAccessors) {