alepha 0.14.3 → 0.15.0

package/dist/security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/security/schemas/userAccountInfoSchema.ts","../../src/security/errors/InvalidCredentialsError.ts","../../src/security/errors/InvalidPermissionError.ts","../../src/security/errors/SecurityError.ts","../../src/security/interfaces/UserAccountToken.ts","../../src/security/schemas/permissionSchema.ts","../../src/security/schemas/roleSchema.ts","../../src/security/providers/JwtProvider.ts","../../src/security/providers/SecurityProvider.ts","../../src/security/primitives/$permission.ts","../../src/security/primitives/$realm.ts","../../src/security/primitives/$role.ts","../../src/security/primitives/$serviceAccount.ts","../../src/security/providers/CryptoProvider.ts","../../src/security/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;cAGa,+BAAqB;MAiDhC,OAAA,CAAA;;;;;;;EAjDW,KAAA,mBAiDX,eAAA,iBAAA,CAAA;CAAA,CAAA;KAEU,WAAA,GAAc,cAAc;;;;;;;;;cC9C3B,uBAAA,SAAgC,iBAAA;;EDLhC,WAAA,CAAA;;;;cEHA,sBAAA,SAA+B,KAAA;;;;;cCA/B,aAAA,SAAsB,KAAA;;;;;;;;;;UCMlB,gBAAA,SAAyB;;;;EJH7B,KAAA,CAAA,EAAA,MAAA;EAiDX;;;;;;;;;;;;cKjDW,0BAAgB;QA8B3B,OAAA,CAAA;;;;;;KAEU,UAAA,GAAa,cAAc;;;cChC1B,oBAAU;QAqCrB,OAAA,CAAA;;;;;;;ENrCW,CAAA,CAAA,CAAA;CAiDX,CAAA;KMVU,IAAA,GAAO,cAAc;;;;;;cCjBpB,WAAA;0BAAW,cAAA,CACA;+BACO;EPxBlB,mBAAA,gBAiDX,EOxBmC,gBPwBnC;EAAA,mBAAA,OAAA,EOvB0B,WPuB1B;;;;;;;uDOf4D;;;;;;;;mDAwChD,mBACT,QAAQ;;;;APxBb;;;;AC9CA;;kBM+Ha,oDAEK,iBACb;;AL1IL;;;;ACAA;;;KIwKY,SAAA,sBACQ,6BACV,sBACL,QAAQ,YAAY;AHrKR,UGuKA,eAAA,CHvKiB;;aGyKrB;;AF5Kb;AA8BE,UEkJe,cAAA,CFlJf;WEmJS,QAAQ;;UAGF,kBAAA,SAA2B;;;;;;cFpLf,CAAA,EAAA;IAAA,KAAA,EAAA,MAAA,EAAA;EAgCjB,CAAA;;UE+JK,cAAA;;ED/LJ,MAAA,ECiMH,eD5JR,CC4JwB,kBD5JxB,CAAA;;;;cEjBW,kBAAA;ARpBb,cQsBM,SRtBO,EQ0BX,OAAA,CAJa,OR2Bb,CAAA;EAAA,UAAA,EQvBA,OAAA,CAAA,ORuBA;;;wBQpBsB,QAAQ,cAAc;;cAGjC,gBAAA;;wCAEyB;iDACS;0BAAA,cAAA,CAGvB;0BACA;;;;6BAEG;;;;ARU3B;kCQDkC;;;AP7ClC;6BOkD6B;mBAAK,OAAA,CAmBjB;;AN7EjB;;;;ACAA;mBKsG0B,4BAA4B;;;AJhGtD;;;wBIgK+B,sBAAsB;EHnKxC,WAAA,CAAA,KAAA,EGkOe,KHpM1B,CAAA,EAAA,IAAA;EAAA;;;;;;;;oCGqN+C,SAAS;;;AHnN1D;;;;AChCA;;iCE2Qa,iCAER;;;;;;;;;2CA4CwB,uCAExB;;;;EF3TkB,mBAAA,CAAA,aAAA,CAAA,EAAA,MAAA,EAAA,QAAA,EAAA;IAuCX,UAAI,CAAA,EE+WG,UF/Wc,GAAA,MAAd;;aEiXJ;MAEV,QAAQ;EDpYA;;;;;;;EAqDA,GAAA,CAAA,QAAA,EAAA,MAAA,EAAA,UAAA,EAAA,MAAA,GC0YuC,UD1YvC,CAAA,EAAA,OAAA;EAAR;;;EA4DA,SAAA,CAAA,QAAA,EAAA,MAAA,EAAA,UAAA,EAAA,MAAA,GCuVoB,UDvVpB,CAAA,EAAA,MAAA,GAAA,OAAA,GAAA,SAAA;EAAO;AA8BZ;;;;EAGyB,kBAAA,CAAA,UAAA,ECgUe,UDhUf,GAAA,MAAA,CAAA,EAAA,MAAA;EAApB,SAAA,CAAA,CAAA,ECmViB,KDnVjB,EAAA;EAAO;AAEZ;AAMA;AAIA;AAWA;4BCqUmC;;;AAhfnC;AAAqE;AAEtD;;;EAO+B,cAAA,CAAA,IAAf,CAAe,EAAA;IAAd,KAAA,CAAA,EAufpB,KAvfoB,CAufd,IAvfc,GAAA,MAAA,CAAA;IAAR,KAAA,CAAA,EAAA,MAAA;EAAO,CAAA,CAAA,EAyfzB,UAzfyB,EAAA;EAAA;;AAG/B;;;;EAOwB,gBAAA,CAAA,OAAA,EA8kBW,MA9kBX,CAAA,MAAA,EAAA,GAAA,CAAA,CAAA,EAAA,MAAA;EAEG,uBAAA,CAAA,OAAA,EA6lBd,MA7lBc,CAAA,MAAA,EAAA,GAAA,CAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EASO;;;;;EAiHH,mBAAA,CAAA,OAAA,EAkfO,MAlfP,CAAA,MAAA,EAAA,GAAA,CAAA,CAAA,EAAA,MAAA,EAAA;EAAsB,qBAAA,CAAA,OAAA,EAufxC,MAvfwC,CAAA,MAAA,EAAA,GAAA,CAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EA+DzB,sBAAA,CAAA,OAAA,EA8cf,MA9ce,CAAA,MAAA,EAAA,GAAA,CAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAiBqB,mBAAA,CAAA,OAAA,EA8cX,MA9cW,CAAA,MAAA,EAAA,GAAA,CAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAAS;;;;;;EAqK3C,kBAAA,CAAA,OAAA,EA2TsB,MA3TtB,CAAA,MAAA,EAAA,GAAA,CAAA,CAAA,EAAA,MAAA;EAEF,2BAAA,CAAA,OAAA,EA6UA,MA7UA,CAAA,MAAA,EAAA,GAAA,CAAA,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;;;;;AAiGS,UAkQL,KAAA,CAlQK;EASa,IAAA,EAAA,MAAA;EAgBjB,KAAA,EA4OT,IA5OS,EAAA;EAAN;;;;;EAsIC,MAAA,CAAA,EAAA,MAAA,GA6GO,aA7GP,GAAA,CAAA,GAAA,GAAA,MAAA,CAAA;EAsBA;;;;EAuDM,OAAA,CAAA,EAAA,CAAA,GAAA,EAsCD,MAtCC,CAAA,MAAA,EAAA,GAAA,CAAA,EAAA,GAsCuB,WAtCvB;AAsBnB;AAGS,UAgBQ,mBAAA,CAhBR;EAOW,YAAA,EAAA,OAAA;EAMF,SAAA,EAAA,MAAA,GAAA,OAAA,GAAA,SAAA;;;;;;;cCzwBL;aACF,6BACR;;ATNH,CAAA;AAiDE,USrCe,0BAAA,CTqCf;;;;;;;;;;;;;;cSlBW,mBAAA,SAA4B,UAAU;uCACd;;WThCH,CAAA,CAAA,EAAA,MAAA;EAAA,QAAA,CAAA,CAAA,EAAA,MAAA;EAmDtB,UAAA,MAAW,CAAA,CAAA,EAAA,IAAA;;;;EC9CV,GAAA,CAAA,IAAA,CAAA,EQoDO,WRpDP,CAAA,EAAA,OAAwB;;;;;;ADLrC;AAiDE,cUnCW,MVmCX,EAAA;YUnC8B,wBAAwB;;;KAM5C,qBAAA;;;;;;;;;;;;;OVpBsB,CAAA,EUmCxB,KVnCwB,CAAA,MAAA,GUmCT,IVnCS,CAAA;EAAA;AAmDlC;;aUXa;;ATnCb;;yBSwCyB,wBAAwB;KAC5C,gBAAgB;ARjDR,UQmDI,aAAA,CRnDmB;;;;ACApC;;iBOyDiB;;ENnDA,YAAA,CAAA,EAAA;;;;ACHjB;IA8BE,UAAA,CAAA,EKgCe,YLhCf;;2BKsCQ;;QAIH;;;;+CAKwC;QL7ElB,EK8EnB,WL9EmB;IAAA,SAAA,EAAA,MAAA;IAgCjB,SAAU,CAAA,EAAA,MAAA;;8CKmDwB;;AJnFjC,KIsFD,aAAA,GJjDV;EAAA;;;;;UIwDe,aAAA;;;;yBAIQ;;cAKZ,cAAA,SAAuB,UAAU;uCACT;qBJvGd,gBAAA,EIwGc,gBJxGd;EAAA,mBAAA,GAAA,EIyGC,WJzGD;EAuCX,mBAAqB,GAAA,EIkET,cAAA,CACA,MJnEC;;+BIyEa;gCAMC;EHhG1B,UAAA,MAAW,CAAA,CAAA,EAAA,IAAA;EAAA;;;EAII,QAAA,CAAA,CAAA,EG2HP,IH3HO,EAAA;EAQkC;;;EAyCzD,QAAA,CAAA,KAAA,EGiF0B,IHjF1B,EAAA,CAAA,EGiFmC,OHjFnC,CAAA,IAAA,CAAA;EAyDQ;;;EAGD,aAAA,CAAA,IAAA,EAAA,MAAA,CAAA,EG4B0B,IH5B1B;EA8BA,UAAA,CAAA,KAAS,EAAA,MAAA,CAAA,EGMqB,OHNrB,CGM6B,UHN7B,CAAA;EACD;;;EAEK,WAAA,CAAA,IAAA,EGYf,WHZe,EAAA,YAQR,CARQ,EAAA;IAApB,GAAA,CAAA,EAAA,MAAA;IAAO,aAAA,CAAA,EAAA,MAAA;IAEK,wBAAe,CAAA,EAEnB,MAAA;EAII,CAAA,CAAA,EGUZ,OHVY,CGUJ,mBHTM,CAAA;EAGF,YAAA,CAAA,YAAmB,EAAA,MAAQ,EAAA,WAAU,CAAA,EAAA,MAAA,CAAA,EG6FjD,OH7FiD,CAAA;IAWrC,MAAA,EGmFL,mBHjFc;UGkFhB;;;AF/PG,UE+TI,kBAAA,CF/Tc;EAEzB,GAAA,EAAA,MAAA;EAAS,KAAA,CAAA,EAAA,MAAA,EAAA;EAAA,KAAA,CAAA,EAAA,MAAA;;AAO+B,UE4T7B,mBAAA,CF5T6B;EAAd,YAAA,EAAA,MAAA;EAAR,UAAA,EAAA,MAAA;EAAO,UAAA,CAAA,EAAA,MAAA;EAAA,SAAA,EAAA,MAAA;EAAA,aAAA,CAAA,EAAA,MAAA;EAGlB,wBAAgB,CAAA,EAAA,MAAA;EAES,KAAA,CAAA,EAAA,MAAA;;;;;;;cG7BzB;aAAkB,uBAA4B;EXL9C,MAAA,EAAA,oBAiDX;CAAA;UWtCe,oBAAA;;;;;;;;;mBAWE;gBAEH;;;;;;cAUH,aAAA,SAAsB,SXlCD,CWkCW,oBXlCX,CAAA,CAAA;EAAA,mBAAA,gBAAA,EWmCG,gBXnCH;EAmDtB,IAAA,IAAA,CAAA,CAAA,EAAA,MAAW;;;;AC9CvB;wBUwD+B;2BAIG;6BAIE,sBAAmB;ATxEvD;;;;;;;;;;AFGA;;;;;;;;;;;;;;;;;;;;AAmDA;cYrBa,2BACF,mCACR;KAqHS,8BAAA;;AXhJZ,CAAA,GAAa,CAAA;UWoJC;;SAGD;EV/JA,IAAA,EUgKD,WVhKC;;UUoKI,oCAAA;;ATpKjB;;;;ACMA;;;;ACHA;;;;UOkLiB,uBAAA;eACF;;UAGE,mBAAA;aACJ;;;;cCrLA,cAAA;kCACkC;oDAS1C;;;;;;;;;YCaO;;;;;;;;;;Ad0BZ;;;;AC9CA;;caqCa,gBAAc,OAAA,CAAA,QAIzB,OAAA,CAJyB,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/security/schemas/userAccountInfoSchema.ts","../../src/security/interfaces/UserAccountToken.ts","../../src/security/errors/InvalidCredentialsError.ts","../../src/security/errors/InvalidPermissionError.ts","../../src/security/errors/SecurityError.ts","../../src/security/providers/ServerBasicAuthProvider.ts","../../src/security/primitives/$basicAuth.ts","../../src/security/providers/JwtProvider.ts","../../src/security/schemas/permissionSchema.ts","../../src/security/schemas/roleSchema.ts","../../src/security/providers/SecurityProvider.ts","../../src/security/primitives/$issuer.ts","../../src/security/primitives/$permission.ts","../../src/security/primitives/$role.ts","../../src/security/primitives/$serviceAccount.ts","../../src/security/providers/CryptoProvider.ts","../../src/security/providers/ServerSecurityProvider.ts","../../src/security/index.ts"],"mappings":";;;;;;;;;cAGa,qBAAA,UAAqB,OAAA;EAAA,EAAA,EAiDhC,OAAA,CAAA,OAAA;EAAA,IAAA;;;;;;;;KAEU,WAAA,GAAc,MAAA,QAAc,qBAAA;;;;AChDxC;;;UAAiB,gBAAA,SAAyB,WAAA;EAAA;;;EAAA,KAAA;EAAA;;;EAAA,KAAA;EAAA;;;;EAAA,SAAA;AAAA;;;;ACE1C;;;;ACRA;cDQa,uBAAA,SAAgC,iBAAA;EAAA,SAAA,IAAA;EAAA,YAAA;AAAA;;;cCRhC,sBAAA,SAA+B,KAAA;EAAA,YAAA,IAAA;AAAA;;;cCA/B,aAAA,SAAsB,KAAA;EAAA,IAAA;EAAA,SAAA,MAAA;AAAA;;;UCWlB,gBAAA;EAAA,QAAA;EAAA,QAAA;AAAA;AAAA,UAKA,wBAAA,SAAiC,gBAAA;EAAA;EAAA,IAAA;EAAA;EAAA,KAAA;AAAA;AAAA,cASrC,uBAAA;EAAA,mBAAA,MAAA,EACc,MAAA;EAAA,mBAAA,GAAA,EAAA,cAAA,CACH,MAAA;EAAA,mBAAA,cAAA,EACW,oBAAA;EAAA,mBAAA,KAAA;EAAA;;;EAAA,SAAA,eAAA,EAMA,wBAAA;EAAA;;;EAAA,aAAA,MAAA,EAKL,wBAAA;EAAA,SAAA,OAAA,EAAwB,OAAA,CAI7B,aAAA;EAAA;;;EAAA,SAAA,SAAA,EAAA,OAAA,CA8BE,aAAA;EAAA;;;EAAA,SAAA,eAAA,EAAA,OAAA,CAiBM,aAAA;EAAA;;;EAAA,UAAA,OAAA,EAaL,aAAA,EAAA,OAAA,EAAwB,gBAAA;EAAA;;;;EAAA,UAAA,0BAAA,aAAA,UAAA,aAAA,UAAA,gBAAA,UAAA,gBAAA;EAAA;;;;EAAA,UAAA,YAAA,KAAA,EAyErB,MAAA,EAAA,QAAA,EAAkB,MAAA;EAAA;;;EAAA,UAAA,iBAAA,OAAA,EAeX,aAAA;AAAA;AAAA,cAKzB,WAAA,GAAA,KAAA,cAAA,KAAA;EAAA,KAAA,EAEQ,gBAAA;AAAA;;;;AC1LrB;;;cAAa,UAAA;EAAA,CAAA,OAAA,EACF,wBAAA,GACR,0BAAA;EAAA;;UAMc,0BAAA;EAAA,SAAA,IAAA;EAAA,SAAA,OAAA,EAEG,wBAAA;EAAA,KAAA,CAAA,OAAA,EACH,aAAA,EAAA,OAAA,GAAyB,gBAAA;AAAA;AAAA,cAG7B,kBAAA,SACH,SAAA,CAAU,wBAAA,aACP,0BAAA;EAAA,mBAAA,uBAAA,EAE+B,uBAAA;EAAA,IAAA,KAAA;EAAA,UAAA,OAAA;EAAA;;;EAAA,MAAA,OAAA,EAcpB,aAAA,EAAA,OAAA,GAAyB,gBAAA;AAAA;;;;ACnBjD;;cAAa,WAAA;EAAA,mBAAA,GAAA,EAAW,cAAA,CACA,MAAA;EAAA,mBAAA,QAAA,EACO,eAAA;EAAA,mBAAA,gBAAA,EACM,gBAAA;EAAA,mBAAA,OAAA,EACT,WAAA;EAAA;;;;;;EAAA,aAAA,IAAA,UAAA,eAAA,WAQkC,aAAA;EAAA;;;;;;;EAAA,MAAA,KAAA,UAAA,OAAA,WAAA,OAAA,GAwChD,gBAAA,GACT,OAAA,CAAQ,cAAA;EAAA;;;;;;AA0Fb;;;EA1Fa,OAAA,OAAA,EAyDA,kBAAA,EAAA,OAAA,WAAA,WAAA,GAEK,cAAA,GACb,OAAA;EAAA;;AA8BL;;;;EA9BK,UAAA,YAAA,GAAA;AAAA;AAAA,KA8BO,SAAA,IAAA,eAAA,GACQ,mBAAA,EAAA,KAAA,GACV,iBAAA,KACL,OAAA,CAAQ,SAAA,GAAY,SAAA;AAAA,UAER,eAAA;EAAA,IAAA;EAAA,SAAA,EAEJ,SAAA;EAAA,SAAA;AAAA;AAAA,UAII,cAAA;EAAA,MAAA,GACN,OAAA,CAAQ,mBAAA;AAAA;AAAA,UAGF,kBAAA,SAA2B,UAAA;EAAA,GAAA;EAAA,IAAA;EAAA,KAAA;EAAA,KAAA;EAAA,aAAA;EAAA,YAAA;IAAA,KAAA;EAAA;AAAA;AAAA,UAW3B,cAAA;EAAA,OAAA;EAAA,MAAA,EAEP,eAAA,CAAgB,kBAAA;AAAA;;;cCjMb,gBAAA,UAAgB,OAAA;EAAA,IAAA,EA8B3B,OAAA,CAAA,OAAA;EAAA,KAAA;;;;;KAEU,UAAA,GAAa,MAAA,QAAc,gBAAA;;;cChC1B,UAAA,UAAU,OAAA;EAAA,IAAA,EAqCrB,OAAA,CAAA,OAAA;EAAA,WAAA;;;;;;;;KAEU,IAAA,GAAO,MAAA,QAAc,UAAA;;;cCnBpB,kBAAA;AAAA,cAEP,SAAA,EAIJ,OAAA,CAJa,OAAA;EAAA,UAAA,EAIb,OAAA,CAAA,OAAA;AAAA;AAAA;EAAA,UAAA,GAAA,SAGsB,OAAA,CAAQ,MAAA,QAAc,SAAA;AAAA;AAAA,cAGjC,gBAAA;EAAA,mBAAA,iBAAA;EAAA,mBAAA,iBAAA,EAEyB,MAAA;EAAA,mBAAA,0BAAA,EACS,MAAA;EAAA,mBAAA,GAAA,EAAA,cAAA,CAGvB,MAAA;EAAA,mBAAA,GAAA,EACA,WAAA;EAAA,mBAAA,GAAA;IAAA,UAAA;EAAA;EAAA,mBAAA,MAAA,EAEG,MAAA;EAAA,IAAA,UAAA;EAAA;;;EAAA,mBAAA,WAAA,EASO,UAAA;EAAA;;;EAAA,mBAAA,MAAA,EAKL,KAAA;EAAA,UAAA,KAAA,EAAK,OAAA,CAmBjB,aAAA;EAAA;;;;;;EAAA,WAAA,IAAA,EAyBS,IAAA,KAAA,MAAA,aAA4B,IAAA;EAAA;;;;;EAAA,iBAAA,GAAA,EAgEvB,UAAA,YAAsB,UAAA;EAAA,YAAA,KAAA,EA+DzB,KAAA;EAAA;;;;;;;;EAAA,YAAA,KAAA,UAAA,KAAA,EAiBqB,IAAA,KAAS,OAAA;EAAA;;;;;;;;EAAA,sBAAA,OAAA,EAwB7C,UAAA,EAAA,SAAA,YAER,WAAA;EAAA;;;;;;;;EAAA,gBAAA,cAAA,WA4CwB,UAAA,KAAA,WAAA,aAExB,mBAAA;EAAA;;;EAAA,oBAAA,aAAA,WAAA,OAAA;IAAA,UAAA,GA2Fc,UAAA;IAAA,KAAA;IAAA,MAAA,GAEJ,gBAAA;EAAA,IAEV,OAAA,CAAQ,gBAAA;EAAA;;;;;;;EAAA,IAAA,QAAA,UAAA,UAAA,WA2DuC,UAAA;EAAA;;;EAAA,UAAA,QAAA,UAAA,UAAA,WAS3B,UAAA;EAAA;;;;;EAAA,mBAAA,UAAA,EAUe,UAAA;EAAA,UAAA,GAmBlB,KAAA;EAAA;;;;;EAAA,SAAA,KAAA,YASa,IAAA;EAAA;;;;;;;EAAA,eAAA,IAAA;IAAA,KAAA,GAgBvB,KAAA,CAAM,IAAA;IAAA,KAAA;EAAA,IAEZ,UAAA;EAAA;;;;;;EAAA,iBAAA,OAAA,EA+F6B,MAAA;EAAA,wBAAA,OAAA,EAiBtB,MAAA;EAAA;;;;;EAAA,oBAAA,OAAA,EAeyB,MAAA;EAAA,sBAAA,OAAA,EAKzB,MAAA;EAAA,uBAAA,OAAA,EAsBA,MAAA;EAAA,oBAAA,OAAA,EAiByB,MAAA;EAAA;;;;AA4DtC;;EA5DsC,mBAAA,OAAA,EAkBD,MAAA;EAAA,4BAAA,OAAA,EAoBxB,MAAA;AAAA;AAAA;;AAsBb;AAtBa,UAsBI,KAAA;EAAA,IAAA;EAAA,KAAA,EAGR,IAAA;EAAA;;;;;EAAA,MAAA,YAOW,aAAA;EAAA;;;;EAAA,OAAA,IAAA,GAAA,EAMF,MAAA,kBAAwB,WAAA;AAAA;AAAA,UAGzB,mBAAA;EAAA,YAAA;EAAA,SAAA;AAAA;;;;AC/vBjB;;;;;cAAa,OAAA;EAAA,CAAA,OAAA,EAAoB,sBAAA,GAAyB,eAAA;EAAA;;KAM9C,sBAAA;EAAA;;;;EAAA,IAAA;EAAA;;;EAAA,WAAA;EAAA;;;EAAA,KAAA,GAeF,KAAA,UAAe,IAAA;EAAA;;;EAAA,QAAA,GAKZ,cAAA;EAAA;;;EAAA,OAAA,IAAA,UAAA,EAKY,MAAA,kBAAwB,WAAA;AAAA,KAC5C,cAAA,GAAiB,cAAA;AAAA,UAEL,cAAA;EAAA,WAAA;IAAA;;;;IAAA,UAAA,GAMA,YAAA;EAAA;EAAA,YAAA;IAAA;;;;IAAA,UAAA,GAQA,YAAA;EAAA;EAAA,eAAA,IAAA,IAAA,EAMP,WAAA,EAAA,MAAA;IAAA,SAAA;EAAA,MAIH,OAAA;IAAA,YAAA;IAAA,SAAA;EAAA;EAAA,gBAAA,IAAA,YAAA,aAKwC,OAAA;IAAA,IAAA,EACrC,WAAA;IAAA,SAAA;IAAA,SAAA;EAAA;EAAA,eAAA,IAAA,YAAA,aAKoC,OAAA;AAAA;AAAA,KAGlC,cAAA;EAAA;AAOZ;AASA;EAhBY,MAAA;AAAA;AAAA,UAOK,cAAA;EAAA;AASjB;;EATiB,IAAA,mBAIQ,aAAA;AAAA;AAAA,cAKZ,eAAA,SAAwB,SAAA,CAAU,sBAAA;EAAA,mBAAA,gBAAA,EACV,gBAAA;EAAA,mBAAA,gBAAA,EACA,gBAAA;EAAA,mBAAA,GAAA,EACb,WAAA;EAAA,mBAAA,GAAA,EAAA,cAAA,CACA,MAAA;EAAA,IAAA,KAAA;EAAA,IAAA,sBAAA,GAMc,QAAA;EAAA,IAAA,uBAAA,GAMC,QAAA;EAAA,UAAA,OAAA;EAAA;;;EAAA,SAAA,GA+BlB,IAAA;EAAA;;;EAAA,SAAA,KAAA,EAOU,IAAA,KAAS,OAAA;EAAA;;;EAAA,cAAA,IAAA,WAOF,IAAA;EAAA,WAAA,KAAA,WAQI,OAAA,CAAQ,UAAA;EAAA;;;EAAA,YAAA,IAAA,EASxC,WAAA,EAAA,YAAA;IAAA,GAAA;IAAA,aAAA;IAAA,wBAAA;EAAA,IAML,OAAA,CAAQ,mBAAA;EAAA,yBAAA,UAAA,WAAA,YAuFR,OAAA;IAAA,MAAA,EACO,mBAAA;IAAA,IAAA,EACF,WAAA;EAAA;AAAA;AAAA,UAgEO,kBAAA;EAAA,GAAA;EAAA,KAAA;EAAA,KAAA;AAAA;AAAA,UAMA,mBAAA;EAAA,YAAA;EAAA,UAAA;EAAA,UAAA;EAAA,SAAA;EAAA,aAAA;EAAA,wBAAA;EAAA,KAAA;AAAA;;;;ACxVjB;;cAAa,WAAA;EAAA,CAAA,OAAA,GACF,0BAAA,GACR,mBAAA;EAAA;;UAMc,0BAAA;EAAA;AAmBjB;;EAnBiB,IAAA;EAAA;AAmBjB;;EAnBiB,KAAA;EAAA;AAmBjB;;EAnBiB,WAAA;AAAA;AAAA,cAmBJ,mBAAA,SAA4B,SAAA,CAAU,0BAAA;EAAA,mBAAA,gBAAA,EACd,gBAAA;EAAA,IAAA,KAAA;EAAA,IAAA,MAAA;EAAA,SAAA;EAAA,UAAA,OAAA;EAAA;;;EAAA,IAAA,IAAA,GAyBjB,WAAA;AAAA;;;;ACpDpB;;cAAa,KAAA;EAAA,CAAA,OAAA,GAAkB,oBAAA,GAA4B,aAAA;EAAA;;UAM1C,oBAAA;EAAA;AAuBjB;;EAvBiB,IAAA;EAAA;AAuBjB;;EAvBiB,WAAA;EAAA,MAAA,YAWG,eAAA;EAAA,WAAA,GAEJ,KAAA;IAAA,IAAA;IAAA,SAAA;IAAA,OAAA;EAAA;AAAA;AAAA,cAUH,aAAA,SAAsB,SAAA,CAAU,oBAAA;EAAA,mBAAA,gBAAA,EACR,gBAAA;EAAA,IAAA,KAAA;EAAA,UAAA,OAAA;EAAA;;;EAAA,IAAA,OAAA,YA0BL,eAAA;EAAA,IAAA,UAAA,WAIE,mBAAA;EAAA,MAAA,UAAA,WAIE,mBAAA,GAAmB,mBAAA;AAAA;;;;ACvCvD;AAuHA;;;;;AAYA;AAiBA;AAIA;;;;ACpLA;;;;ACcA;;;;;;;;;;;cFca,eAAA,GAAA,OAAA,EACF,8BAAA,KACR,uBAAA;AAAA,KAqHS,8BAAA;EAAA,WAAA;AAAA;EAAA,MAAA,EAIE,oCAAA;AAAA;EAAA,MAAA,EAGA,eAAA;EAAA,IAAA,EACF,WAAA;AAAA;AAAA,UAIK,oCAAA;EAAA;AAiBjB;AAIA;EArBiB,GAAA;EAAA;AAiBjB;AAIA;EArBiB,QAAA;EAAA;AAiBjB;AAIA;EArBiB,YAAA;AAAA;AAAA,UAiBA,uBAAA;EAAA,KAAA,QACF,OAAA;AAAA;AAAA,UAGE,mBAAA;EAAA,QAAA,GACJ,mBAAA;AAAA;;;cCrLA,cAAA;EAAA,aAAA,QAAA,WACkC,OAAA;EAAA,eAAA,QAAA,UAAA,MAAA,WAS1C,OAAA;EAAA,WAAA;AAAA;;;cCIQ,sBAAA;EAAA,mBAAA,GAAA,EAAsB,cAAA,CACX,MAAA;EAAA,mBAAA,gBAAA,EACa,gBAAA;EAAA,mBAAA,WAAA,EACL,WAAA;EAAA,mBAAA,MAAA,EACL,MAAA;EAAA,mBAAA,WAAA,EAAA,OAAA,CAEK,aAAA;EAAA,mBAAA,eAAA,EAAA,OAAA,CA8BI,aAAA;EAAA,mBAAA,SAAA,EAAA,OAAA,CA8CN,aAAA;EAAA,UAAA,MAAA,IAAA,EAgEN,gBAAA,EAAA,MAAA,EAA0B,iBAAA;EAAA;;;;;;;AAgIlD;;;;EAhIkD,UAAA,mCAAA,OAAA;IAAA,IAAA,GAsB5B,gBAAA;EAAA,GAAA,UAAA,GACL,UAAA,GACZ,gBAAA;EAAA,UAAA,eAAA,GA6DyB,gBAAA;EAAA,mBAAA,eAAA,EAAgB,OAAA,CAQV,aAAA;AAAA;AAAA,KAmCxB,iBAAA;EAAA,KAAA;EAAA,KAAA,GAEF,gBAAA;AAAA;;;;;;;YCjQE,WAAA;IAAA;EAAA;EAAA,UAAA,KAAA;IAAA;;;;;;IAAA,uCAW+B,gBAAA;IAAA;;;;;IAAA,+BAOR,WAAA;EAAA;AAAA;AAAA;EAAA,UAAA,aAAA;IAAA,IAAA,GAMxB,gBAAA;EAAA;EAAA,UAAA,mBAAA;IAAA,IAAA,EAID,gBAAA;EAAA;EAAA,UAAA,WAAA;IAAA;;;;IAAA,MAAA,aAQa,iBAAA;EAAA;EAAA,UAAA,oBAAA,SAGkB,YAAA;IAAA;;;;AA4BzC;AA2BA;;IAvDyC,IAAA,GAQ9B,gBAAA;EAAA;AAAA;AAAA;;;;;AAoBX;AA2BA;;;;;;;;;;AA/CW,cAoBE,cAAA,EAAc,OAAA,CAAA,OAAA,CAsBzB,OAAA,CAtByB,MAAA;AAAA;AA2B3B;;AA3B2B,cA2Bd,oBAAA,EAAoB,OAAA,CAAA,OAAA,CAAiB,OAAA,CAAjB,MAAA"}

package/dist/security/index.js

@@ -1,32 +1,149 @@
 import { $context, $env, $hook, $inject, $module, Alepha, AlephaError, AppNotStartedError, ContainerLockedError, KIND, Primitive, createPrimitive, t } from "alepha";
-import { $logger } from "alepha/logger";
+import { $action, AlephaServer, ForbiddenError, HttpError, ServerRouterProvider, UnauthorizedError } from "alepha/server";
 import { createSecretKey, randomBytes, randomUUID, scrypt, timingSafeEqual } from "node:crypto";
+import { $logger } from "alepha/logger";
 import { DateTimeProvider } from "alepha/datetime";
 import { SignJWT, createLocalJWKSet, createRemoteJWKSet, jwtVerify } from "jose";
 import { JWTClaimValidationFailed, JWTExpired } from "jose/errors";
 import { promisify } from "node:util";
-import { UnauthorizedError } from "alepha/server";
 
-//#region ../../src/security/errors/InvalidPermissionError.ts
-var InvalidPermissionError = class extends Error {
-	constructor(name) {
-		super(`Permission '${name}' is invalid`);
+//#region ../../src/security/providers/ServerBasicAuthProvider.ts
+var ServerBasicAuthProvider = class {
+	alepha = $inject(Alepha);
+	log = $logger();
+	routerProvider = $inject(ServerRouterProvider);
+	realm = "Secure Area";
+	/**
+	* Registered basic auth primitives with their configurations
+	*/
+	registeredAuths = [];
+	/**
+	* Register a basic auth configuration (called by primitives)
+	*/
+	registerAuth(config) {
+		this.registeredAuths.push(config);
+	}
+	onStart = $hook({
+		on: "start",
+		handler: async () => {
+			for (const auth of this.registeredAuths) if (auth.paths) for (const pattern of auth.paths) {
+				const matchedRoutes = this.routerProvider.getRoutes(pattern);
+				for (const route of matchedRoutes) route.secure = { basic: {
+					username: auth.username,
+					password: auth.password
+				} };
+			}
+			if (this.registeredAuths.length > 0) this.log.info(`Initialized with ${this.registeredAuths.length} registered basic-auth configurations.`);
+		}
+	});
+	/**
+	* Hook into server:onRequest to check basic auth
+	*/
+	onRequest = $hook({
+		on: "server:onRequest",
+		handler: async ({ route, request }) => {
+			const routeAuth = route.secure;
+			if (typeof routeAuth === "object" && "basic" in routeAuth && routeAuth.basic) this.checkAuth(request, routeAuth.basic);
+		}
+	});
+	/**
+	* Hook into action:onRequest to check basic auth for actions
+	*/
+	onActionRequest = $hook({
+		on: "action:onRequest",
+		handler: async ({ action, request }) => {
+			const routeAuth = action.route.secure;
+			if (isBasicAuth(routeAuth)) this.checkAuth(request, routeAuth.basic);
+		}
+	});
+	/**
+	* Check basic authentication
+	*/
+	checkAuth(request, options) {
+		const authHeader = request.headers?.authorization;
+		if (!authHeader || !authHeader.startsWith("Basic ")) {
+			this.sendAuthRequired(request);
+			throw new HttpError({
+				status: 401,
+				message: "Authentication required"
+			});
+		}
+		const base64Credentials = authHeader.slice(6);
+		const credentials = Buffer.from(base64Credentials, "base64").toString("utf-8");
+		const colonIndex = credentials.indexOf(":");
+		const username = colonIndex !== -1 ? credentials.slice(0, colonIndex) : credentials;
+		const password = colonIndex !== -1 ? credentials.slice(colonIndex + 1) : "";
+		if (!this.timingSafeCredentialCheck(username, password, options.username, options.password)) {
+			this.sendAuthRequired(request);
+			this.log.warn(`Failed basic auth attempt for user`, { username });
+			throw new HttpError({
+				status: 401,
+				message: "Invalid credentials"
+			});
+		}
+	}
+	/**
+	* Performs a timing-safe comparison of credentials to prevent timing attacks.
+	* Always compares both username and password to avoid leaking which one is wrong.
+	*/
+	timingSafeCredentialCheck(inputUsername, inputPassword, expectedUsername, expectedPassword) {
+		const inputUserBuf = Buffer.from(inputUsername, "utf-8");
+		const expectedUserBuf = Buffer.from(expectedUsername, "utf-8");
+		const inputPassBuf = Buffer.from(inputPassword, "utf-8");
+		const expectedPassBuf = Buffer.from(expectedPassword, "utf-8");
+		return (this.safeCompare(inputUserBuf, expectedUserBuf) & this.safeCompare(inputPassBuf, expectedPassBuf)) === 1;
+	}
+	/**
+	* Compares two buffers in constant time, handling different lengths safely.
+	* Returns 1 if equal, 0 if not equal.
+	*/
+	safeCompare(input, expected) {
+		if (input.length !== expected.length) {
+			timingSafeEqual(input, input);
+			return 0;
+		}
+		return timingSafeEqual(input, expected) ? 1 : 0;
+	}
+	/**
+	* Send WWW-Authenticate header
+	*/
+	sendAuthRequired(request) {
+		request.reply.setHeader("WWW-Authenticate", `Basic realm="${this.realm}"`);
 	}
 };
-
-//#endregion
-//#region ../../src/security/errors/InvalidTokenError.ts
-var InvalidTokenError = class extends Error {
-	status = 401;
+const isBasicAuth = (value) => {
+	return typeof value === "object" && !!value && "basic" in value && !!value.basic;
 };
 
 //#endregion
-//#region ../../src/security/errors/RealmNotFoundError.ts
-var RealmNotFoundError = class extends Error {
-	constructor(realm) {
-		super(`Realm '${realm}' not found`);
+//#region ../../src/security/primitives/$basicAuth.ts
+/**
+* Declares HTTP Basic Authentication for server routes.
+* This primitive provides methods to protect routes with username/password authentication.
+*/
+const $basicAuth = (options) => {
+	return createPrimitive(BasicAuthPrimitive, options);
+};
+var BasicAuthPrimitive = class extends Primitive {
+	serverBasicAuthProvider = $inject(ServerBasicAuthProvider);
+	get name() {
+		return this.options.name ?? `${this.config.propertyKey}`;
+	}
+	onInit() {
+		this.serverBasicAuthProvider.registerAuth(this.options);
+	}
+	/**
+	* Checks basic auth for the given request using this primitive's configuration.
+	*/
+	check(request, options) {
+		const mergedOptions = {
+			...this.options,
+			...options
+		};
+		this.serverBasicAuthProvider.checkAuth(request, mergedOptions);
 	}
 };
+$basicAuth[KIND] = BasicAuthPrimitive;
 
 //#endregion
 //#region ../../src/security/errors/SecurityError.ts
@@ -137,6 +254,28 @@ var JwtProvider = class {
 	}
 };
 
+//#endregion
+//#region ../../src/security/errors/InvalidPermissionError.ts
+var InvalidPermissionError = class extends Error {
+	constructor(name) {
+		super(`Permission '${name}' is invalid`);
+	}
+};
+
+//#endregion
+//#region ../../src/security/errors/InvalidTokenError.ts
+var InvalidTokenError = class extends Error {
+	status = 401;
+};
+
+//#endregion
+//#region ../../src/security/errors/RealmNotFoundError.ts
+var RealmNotFoundError = class extends Error {
+	constructor(realm) {
+		super(`Realm '${realm}' not found`);
+	}
+};
+
 //#endregion
 //#region ../../src/security/providers/SecurityProvider.ts
 const DEFAULT_APP_SECRET = "05759934015388327323179852515731";
@@ -530,50 +669,17 @@ var SecurityProvider = class {
 };
 
 //#endregion
-//#region ../../src/security/primitives/$permission.ts
-/**
-* Create a new permission.
-*/
-const $permission = (options = {}) => {
-	return createPrimitive(PermissionPrimitive, options);
-};
-var PermissionPrimitive = class extends Primitive {
-	securityProvider = $inject(SecurityProvider);
-	get name() {
-		return this.options.name || this.config.propertyKey;
-	}
-	get group() {
-		return this.options.group || this.config.service.name;
-	}
-	toString() {
-		return `${this.group}:${this.name}`;
-	}
-	onInit() {
-		this.securityProvider.createPermission({
-			name: this.name,
-			group: this.group,
-			description: this.options.description
-		});
-	}
-	/**
-	* Check if the user has the permission.
-	*/
-	can(user) {
-		if (!user?.roles) return false;
-		return this.securityProvider.checkPermission(this, ...user.roles).isAuthorized;
-	}
-};
-$permission[KIND] = PermissionPrimitive;
-
-//#endregion
-//#region ../../src/security/primitives/$realm.ts
+//#region ../../src/security/primitives/$issuer.ts
 /**
-* Create a new realm.
+* Create a new issuer.
+*
+* An issuer is responsible for creating and verifying JWT tokens.
+* It can be internal (with a secret) or external (with a JWKS).
 */
-const $realm = (options) => {
-	return createPrimitive(RealmPrimitive, options);
+const $issuer = (options) => {
+	return createPrimitive(IssuerPrimitive, options);
 };
-var RealmPrimitive = class extends Primitive {
+var IssuerPrimitive = class extends Primitive {
 	securityProvider = $inject(SecurityProvider);
 	dateTimeProvider = $inject(DateTimeProvider);
 	jwt = $inject(JwtProvider);
@@ -604,13 +710,13 @@ var RealmPrimitive = class extends Primitive {
 		});
 	}
 	/**
-	* Get all roles in the realm.
+	* Get all roles in the issuer.
 	*/
 	getRoles() {
 		return this.securityProvider.getRoles(this.name);
 	}
 	/**
-	* Set all roles in the realm.
+	* Set all roles in the issuer.
 	*/
 	async setRoles(roles) {
 		await this.securityProvider.updateRealm(this.name, roles);
@@ -718,7 +824,43 @@ var RealmPrimitive = class extends Primitive {
 		};
 	}
 };
-$realm[KIND] = RealmPrimitive;
+$issuer[KIND] = IssuerPrimitive;
+
+//#endregion
+//#region ../../src/security/primitives/$permission.ts
+/**
+* Create a new permission.
+*/
+const $permission = (options = {}) => {
+	return createPrimitive(PermissionPrimitive, options);
+};
+var PermissionPrimitive = class extends Primitive {
+	securityProvider = $inject(SecurityProvider);
+	get name() {
+		return this.options.name || this.config.propertyKey;
+	}
+	get group() {
+		return this.options.group || this.config.service.name;
+	}
+	toString() {
+		return `${this.group}:${this.name}`;
+	}
+	onInit() {
+		this.securityProvider.createPermission({
+			name: this.name,
+			group: this.group,
+			description: this.options.description
+		});
+	}
+	/**
+	* Check if the user has the permission.
+	*/
+	can(user) {
+		if (!user?.roles) return false;
+		return this.securityProvider.checkPermission(this, ...user.roles).isAuthorized;
+	}
+};
+$permission[KIND] = PermissionPrimitive;
 
 //#endregion
 //#region ../../src/security/primitives/$role.ts
@@ -744,10 +886,10 @@ var RolePrimitive = class extends Primitive {
 		});
 	}
 	/**
-	* Get the realm of the role.
+	* Get the issuer of the role.
 	*/
-	get realm() {
-		return this.options.realm;
+	get issuer() {
+		return this.options.issuer;
 	}
 	can(permission) {
 		return this.securityProvider.can(this.name, permission);
@@ -787,6 +929,160 @@ var CryptoProvider = class {
 	}
 };
 
+//#endregion
+//#region ../../src/security/schemas/userAccountInfoSchema.ts
+const userAccountInfoSchema = t.object({
+	id: t.text({ description: "Unique identifier for the user." }),
+	name: t.optional(t.text({ description: "Full name of the user." })),
+	email: t.optional(t.text({
+		description: "Email address of the user.",
+		format: "email"
+	})),
+	username: t.optional(t.text({ description: "Preferred username of the user." })),
+	picture: t.optional(t.text({ description: "URL to the user's profile picture." })),
+	sessionId: t.optional(t.text({ description: "Session identifier for the user, if applicable." })),
+	organizations: t.optional(t.array(t.text(), { description: "List of organizations the user belongs to." })),
+	roles: t.optional(t.array(t.text(), { description: "List of roles assigned to the user." }))
+});
+
+//#endregion
+//#region ../../src/security/providers/ServerSecurityProvider.ts
+var ServerSecurityProvider = class {
+	log = $logger();
+	securityProvider = $inject(SecurityProvider);
+	jwtProvider = $inject(JwtProvider);
+	alepha = $inject(Alepha);
+	onConfigure = $hook({
+		on: "configure",
+		handler: async () => {
+			for (const action of this.alepha.primitives($action)) {
+				if (action.options.disabled || action.options.secure === false || this.securityProvider.getRealms().length === 0) continue;
+				if (typeof action.options.secure !== "object") this.securityProvider.createPermission({
+					name: action.name,
+					group: action.group,
+					method: action.route.method,
+					path: action.route.path
+				});
+			}
+		}
+	});
+	onActionRequest = $hook({
+		on: "action:onRequest",
+		handler: async ({ action, request, options }) => {
+			if (action.options.secure === false && !options.user) {
+				this.log.trace("Skipping security check for route");
+				return;
+			}
+			if (isBasicAuth(action.route.secure)) return;
+			const permission = this.securityProvider.getPermissions().find((it) => it.path === action.route.path && it.method === action.route.method);
+			try {
+				request.user = this.createUserFromLocalFunctionContext(options, permission);
+				const route = action.route;
+				if (typeof route.secure === "object") this.check(request.user, route.secure);
+				this.alepha.store.set("alepha.server.request.user", this.alepha.codec.decode(userAccountInfoSchema, request.user));
+			} catch (error) {
+				if (action.options.secure || permission) throw error;
+				this.log.trace("Skipping security check for action");
+			}
+		}
+	});
+	onRequest = $hook({
+		on: "server:onRequest",
+		priority: "last",
+		handler: async ({ request, route }) => {
+			if (route.secure === false) {
+				this.log.trace("Skipping security check for route - explicitly disabled");
+				return;
+			}
+			if (isBasicAuth(route.secure)) return;
+			const permission = this.securityProvider.getPermissions().find((it) => it.path === route.path && it.method === route.method);
+			if (!request.headers.authorization && !route.secure && !permission) {
+				this.log.trace("Skipping security check for route - no authorization header and not secure");
+				return;
+			}
+			try {
+				request.user = await this.securityProvider.createUserFromToken(request.headers.authorization, { permission });
+				if (typeof route.secure === "object") this.check(request.user, route.secure);
+				this.alepha.store.set("alepha.server.request.user", this.alepha.codec.decode(userAccountInfoSchema, request.user));
+				this.log.trace("User set from request token", {
+					user: request.user,
+					permission
+				});
+			} catch (error) {
+				if (route.secure || permission) throw error;
+				this.log.trace("Skipping security check for route - error occurred", error);
+			}
+		}
+	});
+	check(user, secure) {
+		if (secure.realm) {
+			if (user.realm !== secure.realm) throw new ForbiddenError(`User must belong to realm '${secure.realm}' to access this route`);
+		}
+	}
+	/**
+	* Get the user account token for a local action call.
+	* There are three possible sources for the user:
+	* - `options.user`: the user passed in the options
+	* - `"system"`: the system user from the state (you MUST set state `server.security.system.user`)
+	* - `"context"`: the user from the request context (you MUST be in an HTTP request context)
+	*
+	* Priority order: `options.user` > `"system"` > `"context"`.
+	*
+	* In testing environment, if no user is provided, a test user is created based on the SecurityProvider's roles.
+	*/
+	createUserFromLocalFunctionContext(options, permission) {
+		const fromOptions = typeof options.user === "object" ? options.user : void 0;
+		const type = typeof options.user === "string" ? options.user : void 0;
+		let user;
+		const fromContext = this.alepha.context.get("request")?.user;
+		const fromSystem = this.alepha.store.get("alepha.server.security.system.user");
+		if (type === "system") user = fromSystem;
+		else if (type === "context") user = fromContext;
+		else user = fromOptions ?? fromContext ?? fromSystem;
+		if (!user) {
+			if (this.alepha.isTest() && !("user" in options)) return this.createTestUser();
+			throw new UnauthorizedError("User is required for calling this action");
+		}
+		const roles = user.roles ?? (this.alepha.isTest() ? this.securityProvider.getRoles().map((role) => role.name) : []);
+		let ownership;
+		if (permission) {
+			const result = this.securityProvider.checkPermission(permission, ...roles);
+			if (!result.isAuthorized) throw new ForbiddenError(`Permission '${this.securityProvider.permissionToString(permission)}' is required for this route`);
+			ownership = result.ownership;
+		}
+		return {
+			...user,
+			ownership
+		};
+	}
+	createTestUser() {
+		return {
+			id: randomUUID(),
+			name: "Test",
+			roles: this.securityProvider.getRoles().map((role) => role.name)
+		};
+	}
+	onClientRequest = $hook({
+		on: "client:onRequest",
+		handler: async ({ request, options }) => {
+			if (!this.alepha.isTest()) return;
+			if ("user" in options && options.user === void 0) return;
+			request.headers = new Headers(request.headers);
+			if (!request.headers.has("authorization")) {
+				const test = this.createTestUser();
+				const user = typeof options?.user === "object" ? options.user : void 0;
+				const sub = user?.id ?? test.id;
+				const roles = user?.roles ?? test.roles;
+				const token = await this.jwtProvider.create({
+					sub,
+					roles
+				}, user?.realm ?? this.securityProvider.getRealms()[0]?.name);
+				request.headers.set("authorization", `Bearer ${token}`);
+			}
+		}
+	});
+};
+
 //#endregion
 //#region ../../src/security/errors/InvalidCredentialsError.ts
 /**
@@ -893,7 +1189,7 @@ const $serviceAccount = (options) => {
 	return { token: async () => {
 		const tokenFromCache = getTokenFromCache();
 		if (tokenFromCache) return tokenFromCache;
-		const token = await options.realm.createToken(options.user);
+		const token = await options.issuer.createToken(options.user);
 		cacheToken({
 			...token,
 			issued_at: dateTimeProvider.now().unix()
@@ -925,50 +1221,54 @@ const roleSchema = t.object({
 	}))
 });
 
-//#endregion
-//#region ../../src/security/schemas/userAccountInfoSchema.ts
-const userAccountInfoSchema = t.object({
-	id: t.text({ description: "Unique identifier for the user." }),
-	name: t.optional(t.text({ description: "Full name of the user." })),
-	email: t.optional(t.text({
-		description: "Email address of the user.",
-		format: "email"
-	})),
-	username: t.optional(t.text({ description: "Preferred username of the user." })),
-	picture: t.optional(t.text({ description: "URL to the user's profile picture." })),
-	sessionId: t.optional(t.text({ description: "Session identifier for the user, if applicable." })),
-	organizations: t.optional(t.array(t.text(), { description: "List of organizations the user belongs to." })),
-	roles: t.optional(t.array(t.text(), { description: "List of roles assigned to the user." }))
-});
-
 //#endregion
 //#region ../../src/security/index.ts
 /**
 * Provides comprehensive authentication and authorization capabilities with JWT tokens, role-based access control, and user management.
 *
-* The security module enables building secure applications using primitives like `$realm`, `$role`, and `$permission`
+* The security module enables building secure applications using primitives like `$issuer`, `$role`, and `$permission`
 * on class properties. It offers JWT-based authentication, fine-grained permissions, service accounts, and seamless
 * integration with various authentication providers and user management systems.
 *
-* @see {@link $realm}
+* When used with `AlephaServer`, this module automatically registers `ServerSecurityProvider` and `ServerBasicAuthProvider`
+* to protect HTTP routes and actions with JWT and Basic Auth.
+*
+* @see {@link $issuer}
 * @see {@link $role}
 * @see {@link $permission}
+* @see {@link $basicAuth}
 * @module alepha.security
 */
 const AlephaSecurity = $module({
 	name: "alepha.security",
 	primitives: [
-		$realm,
+		$issuer,
 		$role,
-		$permission
+		$permission,
+		$basicAuth
 	],
 	services: [
 		SecurityProvider,
 		JwtProvider,
-		CryptoProvider
-	]
+		CryptoProvider,
+		ServerSecurityProvider,
+		ServerBasicAuthProvider
+	],
+	register: (alepha) => {
+		alepha.with(SecurityProvider);
+		alepha.with(JwtProvider);
+		alepha.with(CryptoProvider);
+		if (alepha.has(AlephaServer)) {
+			alepha.with(ServerSecurityProvider);
+			alepha.with(ServerBasicAuthProvider);
+		}
+	}
 });
+/**
+* @deprecated Use `AlephaSecurity` instead. Server security providers are automatically registered when `AlephaServer` is available.
+*/
+const AlephaServerSecurity = AlephaSecurity;
 
 //#endregion
-export { $permission, $realm, $role, $serviceAccount, AlephaSecurity, CryptoProvider, DEFAULT_APP_SECRET, InvalidCredentialsError, InvalidPermissionError, JwtProvider, PermissionPrimitive, RealmPrimitive, RolePrimitive, SecurityError, SecurityProvider, permissionSchema, roleSchema, userAccountInfoSchema };
+export { $basicAuth, $issuer, $permission, $role, $serviceAccount, AlephaSecurity, AlephaServerSecurity, BasicAuthPrimitive, CryptoProvider, DEFAULT_APP_SECRET, InvalidCredentialsError, InvalidPermissionError, IssuerPrimitive, JwtProvider, PermissionPrimitive, RolePrimitive, SecurityError, SecurityProvider, ServerBasicAuthProvider, ServerSecurityProvider, isBasicAuth, permissionSchema, roleSchema, userAccountInfoSchema };
 //# sourceMappingURL=index.js.map