@tinyrack/tinyauth-server 0.0.7

package/dist/routes/api/config/get.d.ts

@@ -0,0 +1,76 @@
+import type { AppEnv } from '../../../lib/app-env.ts';
+export declare const configGet: import("hono/hono-base").HonoBase<AppEnv, {
+    "/config": {
+        $get: {
+            input: {};
+            output: {
+                i18n: {
+                    supported_languages: ("en" | "ko" | "ja")[];
+                    default_language: "en" | "ko" | "ja" | "auto";
+                    fallback_language: "en" | "ko" | "ja";
+                };
+                branding: {
+                    light_theme: "light" | "dark" | "cupcake" | "bumblebee" | "emerald" | "corporate" | "synthwave" | "retro" | "cyberpunk" | "valentine" | "halloween" | "garden" | "forest" | "aqua" | "lofi" | "pastel" | "fantasy" | "wireframe" | "black" | "luxury" | "dracula" | "cmyk" | "autumn" | "business" | "acid" | "lemonade" | "night" | "coffee" | "winter" | "dim" | "nord" | "sunset" | "caramellatte" | "abyss" | "silk";
+                    dark_theme: "light" | "dark" | "cupcake" | "bumblebee" | "emerald" | "corporate" | "synthwave" | "retro" | "cyberpunk" | "valentine" | "halloween" | "garden" | "forest" | "aqua" | "lofi" | "pastel" | "fantasy" | "wireframe" | "black" | "luxury" | "dracula" | "cmyk" | "autumn" | "business" | "acid" | "lemonade" | "night" | "coffee" | "winter" | "dim" | "nord" | "sunset" | "caramellatte" | "abyss" | "silk";
+                    theme_mode: "light" | "dark" | "system";
+                    background_url: string;
+                    icon_url: string | undefined;
+                    title: {
+                        [x: string]: string;
+                    };
+                    subtitle: {
+                        [x: string]: string;
+                    };
+                };
+                registration: {
+                    public_registration: boolean;
+                    email_pattern_filter_enabled: boolean;
+                    email_verification_required: boolean;
+                    signup_notice: {
+                        [x: string]: string;
+                    };
+                };
+                database: {
+                    enabled: true;
+                };
+                email: {
+                    enabled: boolean;
+                };
+                auth: {
+                    password: {
+                        enabled: boolean;
+                        two_factor: {
+                            enrollment_required: boolean;
+                        };
+                        totp: {
+                            enabled: boolean;
+                            issuer: string;
+                        };
+                        policy: {
+                            min_length: number;
+                            max_length: number;
+                        };
+                    };
+                    passkey: {
+                        enabled: boolean;
+                        rp_id?: string | undefined;
+                        origins?: string[] | undefined;
+                    };
+                };
+                identity_providers: {
+                    id: string;
+                    type: "github" | "google" | "apple" | "generic_oauth";
+                    display_name: string;
+                    icon_url?: string | undefined;
+                }[];
+                account_deletion: {
+                    enabled: boolean;
+                    retention: string;
+                };
+            };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+}, "/", "/config">;
+//# sourceMappingURL=get.d.ts.map

package/dist/routes/api/config/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/config/get.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAKtD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA6ErB,CAAC"}

package/dist/routes/api/config/get.js

@@ -0,0 +1,70 @@
+import { Hono } from 'hono';
+import { describeRoute, resolver } from 'hono-openapi';
+import { r } from "../../../schemas/response.js";
+export const configGet = new Hono().get('/config', describeRoute({
+    tags: ['Config'],
+    summary: 'Get App Config',
+    description: 'Get App Config',
+    responses: {
+        200: {
+            content: {
+                'application/json': {
+                    schema: resolver(r.ConfigResponse),
+                },
+            },
+            description: 'Success',
+        },
+    },
+}), async (c) => {
+    const { config } = c.var.services;
+    // Transform identity_providers array to response format
+    // Only include enabled providers
+    const identityProviders = [];
+    for (const providerConfig of config.identity_providers) {
+        if (!providerConfig.enabled) {
+            continue;
+        }
+        const method = {
+            id: providerConfig.id,
+            type: providerConfig.type,
+            display_name: providerConfig.display_name ?? providerConfig.id,
+            icon_url: providerConfig.icon_url,
+        };
+        identityProviders.push(method);
+    }
+    return c.json({
+        i18n: {
+            supported_languages: config.i18n.supported_languages,
+            default_language: config.i18n.default_language,
+            fallback_language: config.i18n.fallback_language,
+        },
+        branding: {
+            light_theme: config.branding.light_theme,
+            dark_theme: config.branding.dark_theme,
+            theme_mode: config.branding.theme_mode,
+            background_url: config.branding.background_url,
+            icon_url: config.branding.icon_url,
+            title: config.branding.title,
+            subtitle: config.branding.subtitle,
+        },
+        registration: {
+            public_registration: config.registration.enabled,
+            email_pattern_filter_enabled: config.registration.allowed_email_patterns.length > 0,
+            email_verification_required: config.registration.email_verification_required,
+            signup_notice: config.registration.signup_notice,
+        },
+        database: {
+            enabled: !!config.database,
+        },
+        email: {
+            enabled: !!config.email,
+        },
+        auth: config.auth,
+        identity_providers: identityProviders,
+        account_deletion: {
+            enabled: config.account_deletion.enabled,
+            retention: config.account_deletion.retention,
+        },
+    }, 200);
+});
+//# sourceMappingURL=get.js.map

package/dist/routes/api/config/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../src/routes/api/config/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGvD,OAAO,EAAE,CAAC,EAAE,MAAM,8BAA8B,CAAC;AAIjD,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAU,CAAC,GAAG,CAC7C,SAAS,EACT,aAAa,CAAC;IACZ,IAAI,EAAE,CAAC,QAAQ,CAAC;IAChB,OAAO,EAAE,gBAAgB;IACzB,WAAW,EAAE,gBAAgB;IAC7B,SAAS,EAAE;QACT,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC;iBACnC;aACF;YACD,WAAW,EAAE,SAAS;SACvB;KACF;CACF,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAElC,wDAAwD;IACxD,iCAAiC;IACjC,MAAM,iBAAiB,GAAgC,EAAE,CAAC;IAE1D,KAAK,MAAM,cAAc,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACvD,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAA8B;YACxC,EAAE,EAAE,cAAc,CAAC,EAAE;YACrB,IAAI,EAAE,cAAc,CAAC,IAAI;YACzB,YAAY,EAAE,cAAc,CAAC,YAAY,IAAI,cAAc,CAAC,EAAE;YAC9D,QAAQ,EAAE,cAAc,CAAC,QAAQ;SAClC,CAAC;QACF,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,CAAC,IAAI,CACX;QACE,IAAI,EAAE;YACJ,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB;YACpD,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB;YAC9C,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB;SACjD;QACD,QAAQ,EAAE;YACR,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;YACxC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;YACtC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;YACtC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;YAC9C,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;YAClC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;SACnC;QACD,YAAY,EAAE;YACZ,mBAAmB,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO;YAChD,4BAA4B,EAC1B,MAAM,CAAC,YAAY,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC;YACvD,2BAA2B,EACzB,MAAM,CAAC,YAAY,CAAC,2BAA2B;YACjD,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,aAAa;SACjD;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ;SAC3B;QACD,KAAK,EAAE;YACL,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK;SACxB;QACD,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,kBAAkB,EAAE,iBAAiB;QACrC,gBAAgB,EAAE;YAChB,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO;YACxC,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC,SAAS;SAC7C;KACF,EACD,GAAG,CACJ,CAAC;AACJ,CAAC,CACF,CAAC"}

package/dist/routes/api/config/index.d.ts

@@ -0,0 +1,76 @@
+import type { AppEnv } from '../../../lib/app-env.ts';
+export declare const configRoutes: import("hono/hono-base").HonoBase<AppEnv, import("hono/types").BlankSchema | import("hono/types").MergeSchemaPath<{
+    "/config": {
+        $get: {
+            input: {};
+            output: {
+                i18n: {
+                    supported_languages: ("en" | "ko" | "ja")[];
+                    default_language: "en" | "ko" | "ja" | "auto";
+                    fallback_language: "en" | "ko" | "ja";
+                };
+                branding: {
+                    light_theme: "light" | "dark" | "cupcake" | "bumblebee" | "emerald" | "corporate" | "synthwave" | "retro" | "cyberpunk" | "valentine" | "halloween" | "garden" | "forest" | "aqua" | "lofi" | "pastel" | "fantasy" | "wireframe" | "black" | "luxury" | "dracula" | "cmyk" | "autumn" | "business" | "acid" | "lemonade" | "night" | "coffee" | "winter" | "dim" | "nord" | "sunset" | "caramellatte" | "abyss" | "silk";
+                    dark_theme: "light" | "dark" | "cupcake" | "bumblebee" | "emerald" | "corporate" | "synthwave" | "retro" | "cyberpunk" | "valentine" | "halloween" | "garden" | "forest" | "aqua" | "lofi" | "pastel" | "fantasy" | "wireframe" | "black" | "luxury" | "dracula" | "cmyk" | "autumn" | "business" | "acid" | "lemonade" | "night" | "coffee" | "winter" | "dim" | "nord" | "sunset" | "caramellatte" | "abyss" | "silk";
+                    theme_mode: "light" | "dark" | "system";
+                    background_url: string;
+                    icon_url: string | undefined;
+                    title: {
+                        [x: string]: string;
+                    };
+                    subtitle: {
+                        [x: string]: string;
+                    };
+                };
+                registration: {
+                    public_registration: boolean;
+                    email_pattern_filter_enabled: boolean;
+                    email_verification_required: boolean;
+                    signup_notice: {
+                        [x: string]: string;
+                    };
+                };
+                database: {
+                    enabled: true;
+                };
+                email: {
+                    enabled: boolean;
+                };
+                auth: {
+                    password: {
+                        enabled: boolean;
+                        two_factor: {
+                            enrollment_required: boolean;
+                        };
+                        totp: {
+                            enabled: boolean;
+                            issuer: string;
+                        };
+                        policy: {
+                            min_length: number;
+                            max_length: number;
+                        };
+                    };
+                    passkey: {
+                        enabled: boolean;
+                        rp_id?: string | undefined;
+                        origins?: string[] | undefined;
+                    };
+                };
+                identity_providers: {
+                    id: string;
+                    type: "github" | "google" | "apple" | "generic_oauth";
+                    display_name: string;
+                    icon_url?: string | undefined;
+                }[];
+                account_deletion: {
+                    enabled: boolean;
+                    retention: string;
+                };
+            };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+}, "/">, "/", "/">;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/api/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/config/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAGtD,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAA2C,CAAC"}

package/dist/routes/api/config/index.js

@@ -0,0 +1,4 @@
+import { Hono } from 'hono';
+import { configGet } from "./get.js";
+export const configRoutes = new Hono().route('/', configGet);
+//# sourceMappingURL=index.js.map

package/dist/routes/api/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/routes/api/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,IAAI,EAAU,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC"}

package/dist/routes/api/consent/get.d.ts

@@ -0,0 +1,37 @@
+import type { AppEnv } from '../../../lib/app-env.ts';
+/**
+ * GET /api/oauth/consent
+ *
+ * Returns consent page data including client information and requested scopes.
+ * Used by the frontend consent page to display consent details.
+ */
+export declare const consentGet: import("hono/hono-base").HonoBase<AppEnv, {
+    "/consent": {
+        $get: {
+            input: {
+                query: {
+                    client_id: string | string[];
+                    scope?: string | string[];
+                };
+            };
+            output: {
+                client: {
+                    id: string;
+                    clientId: string;
+                    name: string;
+                };
+                scopes: {
+                    name: string;
+                    description: string;
+                }[];
+                user: {
+                    sub: import("@mikro-orm/core").Opt<string>;
+                    email: string;
+                };
+            };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+}, "/", "/consent">;
+//# sourceMappingURL=get.d.ts.map

package/dist/routes/api/consent/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/consent/get.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAStD;;;;;GAKG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAuEtB,CAAC"}

package/dist/routes/api/consent/get.js

@@ -0,0 +1,73 @@
+import { Hono } from 'hono';
+import { describeRoute, resolver, validator } from 'hono-openapi';
+import { z } from 'zod';
+import { OPENAPI_SECURITY } from "../../../lib/openapi.js";
+import { parseScopesWithDescriptions } from "../../../lib/scopes.js";
+import { TAGS } from "../../../lib/swagger-tags.js";
+import { verifyAuth } from "../../../middleware/auth.js";
+import { e } from "../../../schemas/error.js";
+import { f } from "../../../schemas/field.js";
+import { r } from "../../../schemas/response.js";
+/**
+ * GET /api/oauth/consent
+ *
+ * Returns consent page data including client information and requested scopes.
+ * Used by the frontend consent page to display consent details.
+ */
+export const consentGet = new Hono().get('/consent', describeRoute({
+    tags: [TAGS.CONSENT],
+    security: OPENAPI_SECURITY.cookieSession,
+    summary: 'Get consent information',
+    description: 'Returns OAuth client information and requested scopes for the consent page.',
+    responses: {
+        200: {
+            content: {
+                'application/json': {
+                    schema: resolver(r.ConsentInfoResponse),
+                },
+            },
+            description: 'Success',
+        },
+        400: {
+            content: {
+                'application/json': {
+                    schema: resolver(e.OAuthClientNotFound.Schema),
+                },
+            },
+            description: 'OAuth client not found',
+        },
+        401: {
+            content: {
+                'application/json': {
+                    schema: resolver(e.Unauthorized.Schema),
+                },
+            },
+            description: 'Unauthorized',
+        },
+    },
+}), validator('query', z.object({
+    client_id: f.clientId,
+    scope: f.scope.optional(),
+})), verifyAuth(), async (c) => {
+    const query = c.req.valid('query');
+    const { client_id, scope } = query;
+    const { user: userEntity } = c.var.verifiedUser;
+    const { oauthClientService } = c.var.services;
+    // Fetch OAuth client information
+    const client = await oauthClientService.findByClientId(client_id);
+    // Parse requested scopes with descriptions
+    const scopes = parseScopesWithDescriptions(scope);
+    return c.json({
+        client: {
+            id: client.id,
+            clientId: client.clientId,
+            name: client.name,
+        },
+        scopes,
+        user: {
+            sub: userEntity.sub,
+            email: userEntity.email,
+        },
+    }, 200);
+});
+//# sourceMappingURL=get.js.map

package/dist/routes/api/consent/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../src/routes/api/consent/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,2BAA2B,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,2BAA2B,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,8BAA8B,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,IAAI,EAAU,CAAC,GAAG,CAC9C,UAAU,EACV,aAAa,CAAC;IACZ,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;IACpB,QAAQ,EAAE,gBAAgB,CAAC,aAAa;IACxC,OAAO,EAAE,yBAAyB;IAClC,WAAW,EACT,6EAA6E;IAC/E,SAAS,EAAE;QACT,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC;iBACxC;aACF;YACD,WAAW,EAAE,SAAS;SACvB;QACD,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC;iBAC/C;aACF;YACD,WAAW,EAAE,wBAAwB;SACtC;QACD,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;iBACxC;aACF;YACD,WAAW,EAAE,cAAc;SAC5B;KACF;CACF,CAAC,EACF,SAAS,CACP,OAAO,EACP,CAAC,CAAC,MAAM,CAAC;IACP,SAAS,EAAE,CAAC,CAAC,QAAQ;IACrB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE;CAC1B,CAAC,CACH,EACD,UAAU,EAAE,EACZ,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACnC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;IAChD,MAAM,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAE9C,iCAAiC;IACjC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAElE,2CAA2C;IAC3C,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IAElD,OAAO,CAAC,CAAC,IAAI,CACX;QACE,MAAM,EAAE;YACN,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB;QACD,MAAM;QACN,IAAI,EAAE;YACJ,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB;KACF,EACD,GAAG,CACJ,CAAC;AACJ,CAAC,CACF,CAAC"}

package/dist/routes/api/consent/index.d.ts

@@ -0,0 +1,54 @@
+import type { AppEnv } from '../../../lib/app-env.ts';
+export declare const consentRoutes: import("hono/hono-base").HonoBase<AppEnv, import("hono/types").BlankSchema | import("hono/types").MergeSchemaPath<{
+    "/consent": {
+        $get: {
+            input: {
+                query: {
+                    client_id: string | string[];
+                    scope?: string | string[];
+                };
+            };
+            output: {
+                client: {
+                    id: string;
+                    clientId: string;
+                    name: string;
+                };
+                scopes: {
+                    name: string;
+                    description: string;
+                }[];
+                user: {
+                    sub: import("@mikro-orm/core").Opt<string>;
+                    email: string;
+                };
+            };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+}, "/"> | import("hono/types").MergeSchemaPath<{
+    "/consent": {
+        $post: {
+            input: {
+                json: {
+                    client_id: string;
+                    redirect_uri: string;
+                    response_type: string;
+                    decision: "allow" | "deny";
+                    scope?: string | undefined;
+                    state?: string | undefined;
+                    nonce?: string | undefined;
+                    code_challenge?: string | undefined;
+                    code_challenge_method?: "S256" | "plain" | undefined;
+                };
+            };
+            output: {
+                redirect_url: string;
+            };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+}, "/">, "/", "/">;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/api/consent/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/consent/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAItD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAEA,CAAC"}

package/dist/routes/api/consent/index.js

@@ -0,0 +1,7 @@
+import { Hono } from 'hono';
+import { consentGet } from "./get.js";
+import { consentPost } from "./post.js";
+export const consentRoutes = new Hono()
+    .route('/', consentGet)
+    .route('/', consentPost);
+//# sourceMappingURL=index.js.map

package/dist/routes/api/consent/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/routes/api/consent/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,IAAI,EAAU;KAC5C,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC;KACtB,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC"}

package/dist/routes/api/consent/post.d.ts

@@ -0,0 +1,33 @@
+import type { AppEnv } from '../../../lib/app-env.ts';
+/**
+ * POST /api/oauth/consent
+ *
+ * Handles user consent decision (allow/deny).
+ * If allowed, stores consent and returns the authorize URL.
+ * If denied, returns the error redirect URL.
+ */
+export declare const consentPost: import("hono/hono-base").HonoBase<AppEnv, {
+    "/consent": {
+        $post: {
+            input: {
+                json: {
+                    client_id: string;
+                    redirect_uri: string;
+                    response_type: string;
+                    decision: "allow" | "deny";
+                    scope?: string | undefined;
+                    state?: string | undefined;
+                    nonce?: string | undefined;
+                    code_challenge?: string | undefined;
+                    code_challenge_method?: "S256" | "plain" | undefined;
+                };
+            };
+            output: {
+                redirect_url: string;
+            };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+}, "/", "/consent">;
+//# sourceMappingURL=post.d.ts.map

package/dist/routes/api/consent/post.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/consent/post.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAQtD;;;;;;GAMG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;mBA4HvB,CAAC"}

package/dist/routes/api/consent/post.js

@@ -0,0 +1,105 @@
+import { Hono } from 'hono';
+import { describeRoute, resolver, validator } from 'hono-openapi';
+import { z } from 'zod';
+import { OPENAPI_SECURITY } from "../../../lib/openapi.js";
+import { TAGS } from "../../../lib/swagger-tags.js";
+import { verifyAuth } from "../../../middleware/auth.js";
+import { e } from "../../../schemas/error.js";
+import { f } from "../../../schemas/field.js";
+import { r } from "../../../schemas/response.js";
+/**
+ * POST /api/oauth/consent
+ *
+ * Handles user consent decision (allow/deny).
+ * If allowed, stores consent and returns the authorize URL.
+ * If denied, returns the error redirect URL.
+ */
+export const consentPost = new Hono().post('/consent', describeRoute({
+    tags: [TAGS.CONSENT],
+    security: OPENAPI_SECURITY.cookieSession,
+    summary: 'Submit consent decision',
+    description: 'Handles the user consent decision for OAuth authorization.',
+    responses: {
+        200: {
+            content: {
+                'application/json': {
+                    schema: resolver(r.RedirectUrlResponse),
+                },
+            },
+            description: 'Success',
+        },
+        400: {
+            content: {
+                'application/json': {
+                    schema: resolver(e.OAuthClientNotFound.Schema),
+                },
+            },
+            description: 'OAuth client not found',
+        },
+        401: {
+            content: {
+                'application/json': {
+                    schema: resolver(e.Unauthorized.Schema),
+                },
+            },
+            description: 'Unauthorized',
+        },
+    },
+}), validator('json', z.object({
+    client_id: f.clientId,
+    redirect_uri: f.redirectUri,
+    response_type: f.responseType,
+    scope: f.scope.optional(),
+    state: f.state.optional(),
+    nonce: f.nonce.optional(),
+    code_challenge: f.codeChallenge.optional(),
+    code_challenge_method: f.codeChallengeMethod.optional(),
+    decision: f.consentDecision,
+})), verifyAuth(), async (c) => {
+    const body = c.req.valid('json');
+    const { client_id, redirect_uri, response_type, scope, state, nonce, code_challenge, code_challenge_method, decision, } = body;
+    const { user: userEntity } = c.var.verifiedUser;
+    const { oauthClientService, userConsentService } = c.var.services;
+    // If user denied consent, redirect back with error
+    if (decision === 'deny') {
+        const errorUrl = new URL(redirect_uri);
+        errorUrl.searchParams.set('error', 'access_denied');
+        errorUrl.searchParams.set('error_description', 'The resource owner or authorization server denied the request.');
+        if (state) {
+            errorUrl.searchParams.set('state', state);
+        }
+        return c.json({ redirect_url: errorUrl.toString() }, 200);
+    }
+    // User allowed consent - store it
+    const requestedScopes = scope ? scope.split(' ') : [];
+    // Look up client to get primary key
+    const client = await oauthClientService.findByClientId(client_id);
+    await userConsentService.grantConsent({
+        userSub: userEntity.sub,
+        clientId: client.id,
+        scopes: requestedScopes,
+    });
+    // Build authorize URL to continue the flow
+    const url = new URL(c.req.url);
+    const authorizeUrl = new URL('/oauth/authorize', `${url.protocol}//${url.host}`);
+    authorizeUrl.searchParams.set('client_id', client_id);
+    authorizeUrl.searchParams.set('redirect_uri', redirect_uri);
+    authorizeUrl.searchParams.set('response_type', response_type);
+    if (scope) {
+        authorizeUrl.searchParams.set('scope', scope);
+    }
+    if (state) {
+        authorizeUrl.searchParams.set('state', state);
+    }
+    if (nonce) {
+        authorizeUrl.searchParams.set('nonce', nonce);
+    }
+    if (code_challenge) {
+        authorizeUrl.searchParams.set('code_challenge', code_challenge);
+    }
+    if (code_challenge_method) {
+        authorizeUrl.searchParams.set('code_challenge_method', code_challenge_method);
+    }
+    return c.json({ redirect_url: authorizeUrl.toString() }, 200);
+});
+//# sourceMappingURL=post.js.map

package/dist/routes/api/consent/post.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post.js","sourceRoot":"","sources":["../../../../src/routes/api/consent/post.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,2BAA2B,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,2BAA2B,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,8BAA8B,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,IAAI,EAAU,CAAC,IAAI,CAChD,UAAU,EACV,aAAa,CAAC;IACZ,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;IACpB,QAAQ,EAAE,gBAAgB,CAAC,aAAa;IACxC,OAAO,EAAE,yBAAyB;IAClC,WAAW,EAAE,4DAA4D;IACzE,SAAS,EAAE;QACT,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC;iBACxC;aACF;YACD,WAAW,EAAE,SAAS;SACvB;QACD,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC;iBAC/C;aACF;YACD,WAAW,EAAE,wBAAwB;SACtC;QACD,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;iBACxC;aACF;YACD,WAAW,EAAE,cAAc;SAC5B;KACF;CACF,CAAC,EACF,SAAS,CACP,MAAM,EACN,CAAC,CAAC,MAAM,CAAC;IACP,SAAS,EAAE,CAAC,CAAC,QAAQ;IACrB,YAAY,EAAE,CAAC,CAAC,WAAW;IAC3B,aAAa,EAAE,CAAC,CAAC,YAAY;IAC7B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE;IACzB,cAAc,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE;IAC1C,qBAAqB,EAAE,CAAC,CAAC,mBAAmB,CAAC,QAAQ,EAAE;IACvD,QAAQ,EAAE,CAAC,CAAC,eAAe;CAC5B,CAAC,CACH,EACD,UAAU,EAAE,EACZ,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,EACJ,SAAS,EACT,YAAY,EACZ,aAAa,EACb,KAAK,EACL,KAAK,EACL,KAAK,EACL,cAAc,EACd,qBAAqB,EACrB,QAAQ,GACT,GAAG,IAAI,CAAC;IAET,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;IAChD,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAElE,mDAAmD;IACnD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QACvC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACpD,QAAQ,CAAC,YAAY,CAAC,GAAG,CACvB,mBAAmB,EACnB,gEAAgE,CACjE,CAAC;QACF,IAAI,KAAK,EAAE,CAAC;YACV,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,kCAAkC;IAClC,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtD,oCAAoC;IACpC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAElE,MAAM,kBAAkB,CAAC,YAAY,CAAC;QACpC,OAAO,EAAE,UAAU,CAAC,GAAG;QACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,MAAM,EAAE,eAAe;KACxB,CAAC,CAAC;IAEH,2CAA2C;IAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,kBAAkB,EAClB,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,EAAE,CAC/B,CAAC;IACF,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACtD,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC5D,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;IAE9D,IAAI,KAAK,EAAE,CAAC;QACV,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,qBAAqB,EAAE,CAAC;QAC1B,YAAY,CAAC,YAAY,CAAC,GAAG,CAC3B,uBAAuB,EACvB,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AAChE,CAAC,CACF,CAAC"}

package/dist/routes/api/docs/get.d.ts

@@ -0,0 +1,17 @@
+import type { AppEnv } from '../../../lib/app-env.ts';
+/**
+ * GET /api/docs
+ *
+ * Scalar API reference UI for the OpenAPI specification.
+ */
+export declare const docsGet: import("hono/hono-base").HonoBase<AppEnv, {
+    "/docs": {
+        $get: {
+            input: {};
+            output: {};
+            outputFormat: string;
+            status: import("hono/utils/http-status").StatusCode;
+        };
+    };
+}, "/", "/docs">;
+//# sourceMappingURL=get.d.ts.map

package/dist/routes/api/docs/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/docs/get.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,OAAO;;;;;;;;;gBAgBlB,CAAC"}

package/dist/routes/api/docs/get.js

@@ -0,0 +1,19 @@
+import { apiReference } from '@scalar/hono-api-reference';
+import { Hono } from 'hono';
+/**
+ * GET /api/docs
+ *
+ * Scalar API reference UI for the OpenAPI specification.
+ */
+export const docsGet = new Hono().get('/docs', async (c) => {
+    const { openapi } = c.var.services.config;
+    if (!openapi.enabled) {
+        return c.json({ error: 'Not Found' }, 404);
+    }
+    const scalarApp = new Hono().get('/api/docs', apiReference({
+        pageTitle: openapi.ui_title,
+        url: '/api/docs/json',
+    }));
+    return scalarApp.fetch(c.req.raw);
+});
+//# sourceMappingURL=get.js.map

package/dist/routes/api/docs/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../src/routes/api/docs/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,IAAI,EAAU,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACjE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;IAE1C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,GAAG,CAC9B,WAAW,EACX,YAAY,CAAC;QACX,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,GAAG,EAAE,gBAAgB;KACtB,CAAC,CACH,CAAC;IAEF,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC"}

package/dist/routes/api/docs/index.d.ts

@@ -0,0 +1,12 @@
+import type { AppEnv } from '../../../lib/app-env.ts';
+export declare const docsRoutes: import("hono/hono-base").HonoBase<AppEnv, import("hono/types").BlankSchema | import("hono/types").MergeSchemaPath<{
+    "/docs": {
+        $get: {
+            input: {};
+            output: {};
+            outputFormat: string;
+            status: import("hono/utils/http-status").StatusCode;
+        };
+    };
+}, "/">, "/", "/">;
+//# sourceMappingURL=index.d.ts.map