@tinyrack/tinyauth-server 0.0.7

package/dist/entities/revoked-token.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoked-token.entity.d.ts","sourceRoot":"","sources":["../../src/entities/revoked-token.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAKrF;;GAEG;AACH,eAAO,MAAM,UAAU;;;CAGb,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAErE;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB;;;;mBAqD80d,GAAG;;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;mBAAH,GAAG;;;;mBAAH,GAAG;;;mBAAH,GAAG;;;;mBAAH,GAAG;;;mBAAH,GAAG;;;;;;mBAAH,GAAG;;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;mBAAH,GAAG;;;;;;mBAAH,GAAG;;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;mBAAH,GAAG;;;;mBAAH,GAAG;;;mBAAH,GAAG;;2EAHp3d,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/entities/revoked-token.entity.js

@@ -0,0 +1,68 @@
+import { defineEntity } from '@mikro-orm/core';
+import { RevokedTokenRepository } from "../repositories/revoked-token.repository.js";
+import { BaseSchema } from "./base.entity.js";
+import { OAuthClientEntitySchema } from "./oauth-client.entity.js";
+import { UserEntitySchema } from "./user.entity.js";
+/**
+ * Token types that can be revoked
+ */
+export const TOKEN_TYPE = {
+    ACCESS_TOKEN: 'access_token',
+    REFRESH_TOKEN: 'refresh_token',
+};
+/**
+ * Revoked Token Entity
+ *
+ * Stores revoked tokens to implement OAuth 2.0 Token Revocation (RFC 7009).
+ * Since tokens are JWTs (stateless), we need to track revoked tokens
+ * to invalidate them before their natural expiration.
+ *
+ * Supports both individual token revocation (by jti) and
+ * bulk revocation (by user_sub + client_id combination).
+ */
+export const RevokedTokenEntitySchema = defineEntity({
+    name: 'RevokedTokenEntity',
+    tableName: 'revoked_tokens',
+    comment: 'Revoked OAuth tokens for invalidation before expiry',
+    extends: BaseSchema,
+    repository: () => RevokedTokenRepository,
+    properties: (p) => ({
+        id: p
+            .uuid()
+            .primary()
+            .comment('Primary key as UUID')
+            .onCreate(() => crypto.randomUUID()),
+        jti: p.string().comment('JWT ID (jti claim) of the revoked token').unique(),
+        token_type: p
+            .enum(() => TOKEN_TYPE)
+            .comment('Type of the revoked token (access_token or refresh_token)'),
+        client: () => p
+            .manyToOne(OAuthClientEntitySchema)
+            .comment('Reference to the OAuth client that the token was issued to'),
+        user: () => p
+            .manyToOne(UserEntitySchema)
+            .comment('Reference to the user (subject) that the token was issued for'),
+        expires_at: p
+            .datetime()
+            .comment('Original expiration time of the token. Used for cleanup of expired entries.'),
+        revoked_at: p
+            .datetime()
+            .comment('Timestamp when the token was revoked')
+            .onCreate(() => new Date()),
+    }),
+    indexes: [
+        {
+            name: 'revoked_token_jti_idx',
+            properties: ['jti'],
+        },
+        {
+            name: 'revoked_token_client_user_idx',
+            properties: ['client', 'user'],
+        },
+        {
+            name: 'revoked_token_expires_at_idx',
+            properties: ['expires_at'],
+        },
+    ],
+});
+//# sourceMappingURL=revoked-token.entity.js.map

package/dist/entities/revoked-token.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoked-token.entity.js","sourceRoot":"","sources":["../../src/entities/revoked-token.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAoB,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,YAAY,EAAE,cAAc;IAC5B,aAAa,EAAE,eAAe;CACtB,CAAC;AAIX;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,YAAY,CAAC;IACnD,IAAI,EAAE,oBAAoB;IAC1B,SAAS,EAAE,gBAAgB;IAC3B,OAAO,EAAE,qDAAqD;IAC9D,OAAO,EAAE,UAAU;IACnB,UAAU,EAAE,GAAG,EAAE,CAAC,sBAAsB;IACxC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClB,EAAE,EAAE,CAAC;aACF,IAAI,EAAE;aACN,OAAO,EAAE;aACT,OAAO,CAAC,qBAAqB,CAAC;aAC9B,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,MAAM,EAAE;QAC3E,UAAU,EAAE,CAAC;aACV,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC;aACtB,OAAO,CAAC,2DAA2D,CAAC;QACvE,MAAM,EAAE,GAAG,EAAE,CACX,CAAC;aACE,SAAS,CAAC,uBAAuB,CAAC;aAClC,OAAO,CAAC,4DAA4D,CAAC;QAC1E,IAAI,EAAE,GAAG,EAAE,CACT,CAAC;aACE,SAAS,CAAC,gBAAgB,CAAC;aAC3B,OAAO,CACN,+DAA+D,CAChE;QACL,UAAU,EAAE,CAAC;aACV,QAAQ,EAAE;aACV,OAAO,CACN,6EAA6E,CAC9E;QACH,UAAU,EAAE,CAAC;aACV,QAAQ,EAAE;aACV,OAAO,CAAC,sCAAsC,CAAC;aAC/C,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;KAC9B,CAAC;IACF,OAAO,EAAE;QACP;YACE,IAAI,EAAE,uBAAuB;YAC7B,UAAU,EAAE,CAAC,KAAK,CAAC;SACpB;QACD;YACE,IAAI,EAAE,+BAA+B;YACrC,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC/B;QACD;YACE,IAAI,EAAE,8BAA8B;YACpC,UAAU,EAAE,CAAC,YAAY,CAAC;SAC3B;KACF;CACF,CAAC,CAAC"}