@acorex-platform/framework-server 0.0.10 → 0.0.14

package/security/src/lib/auth/auth.controller.js

@@ -3,42 +3,111 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthController = void 0;
 const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const core_1 = require("@nestjs/core");
 const swagger_1 = require("@nestjs/swagger");
+const auth_cookie_service_1 = require("./auth-cookie.service");
 const auth_service_1 = require("./auth.service");
 const jwt_auth_guard_1 = require("./jwt-auth.guard");
+const token_resolver_service_1 = require("./token-resolver.service");
+const request_meta_util_1 = require("./request-meta.util");
+const public_decorator_1 = require("./public.decorator");
+const platform_oauth_config_1 = require("../oauth/platform-oauth.config");
+const auth_providers_contributor_1 = require("./auth-providers.contributor");
 //#region ---- Auth REST API ----
 let AuthController = class AuthController {
-    constructor(auth) {
+    constructor(auth, cookies, tokenResolver, moduleRef) {
         this.auth = auth;
+        this.cookies = cookies;
+        this.tokenResolver = tokenResolver;
+        this.moduleRef = moduleRef;
     }
-    signIn(body) {
-        return this.auth.signIn(body);
+    async getProviders() {
+        const response = {
+            google: { enabled: (0, platform_oauth_config_1.isGooglePlatformLoginConfigured)() },
+            microsoft: { enabled: (0, platform_oauth_config_1.isMicrosoftPlatformLoginConfigured)() },
+        };
+        const contributors = this.resolveProviderContributors();
+        for (const contributor of contributors) {
+            response[contributor.key] = await contributor.getSection();
+        }
+        return response;
+    }
+    /** Resolved at request time — extension modules register after SecurityModule boots. */
+    resolveProviderContributors() {
+        const contributors = this.moduleRef.get(auth_providers_contributor_1.AUTH_PROVIDERS_CONTRIBUTOR, {
+            each: true,
+            strict: false,
+        });
+        if (!contributors) {
+            return [];
+        }
+        return Array.isArray(contributors) ? contributors : [contributors];
+    }
+    async signIn(body, req, res) {
+        this.auth.assertSupportedSignInStrategy(body.strategy);
+        const meta = (0, request_meta_util_1.resolveAuthRequestMeta)(req);
+        const result = await this.auth.completeSignIn(req.user, meta);
+        this.applyAuthCookies(res, result);
+        return result;
     }
-    refresh(body) {
-        if (!body.refreshToken?.trim()) {
+    async register(body, req, res) {
+        const meta = (0, request_meta_util_1.resolveAuthRequestMeta)(req);
+        const result = await this.auth.register(body, meta);
+        this.applyAuthCookies(res, result);
+        return result;
+    }
+    async refresh(body, req, res) {
+        const refreshToken = this.cookies.readRefreshToken(req.cookies) ??
+            body.refreshToken?.trim() ??
+            null;
+        if (!refreshToken) {
             throw new common_1.UnauthorizedException('refreshToken is required');
         }
-        return this.auth.refreshSession(body.refreshToken);
+        const meta = (0, request_meta_util_1.resolveAuthRequestMeta)(req);
+        const result = await this.auth.refreshSession(refreshToken, meta);
+        this.applyAuthCookies(res, result);
+        return result;
+    }
+    async logout(body, req, res) {
+        const refreshToken = this.cookies.readRefreshToken(req.cookies) ??
+            body.refreshToken?.trim() ??
+            null;
+        this.cookies.clearAuthCookies(res);
+        return this.auth.logout(refreshToken);
     }
-    updateSession(authorization, body) {
-        const token = this.extractBearerToken(authorization);
-        if (!token) {
+    async updateSession(req, res, body) {
+        const resolved = this.tokenResolver.resolveAccessToken(req.headers, req.cookies);
+        if (!resolved) {
             throw new common_1.UnauthorizedException('Bearer access token is required');
         }
-        return this.auth.updateSession(token, body);
+        const meta = (0, request_meta_util_1.resolveAuthRequestMeta)(req);
+        const result = await this.auth.updateSession(resolved.token, body, meta);
+        this.applyAuthCookies(res, result);
+        return result;
     }
-    extractBearerToken(authorization) {
-        if (!authorization?.startsWith('Bearer ')) {
-            return null;
-        }
-        const token = authorization.slice('Bearer '.length).trim();
-        return token.length > 0 ? token : null;
+    applyAuthCookies(res, result) {
+        this.cookies.applyAuthCookies(res, {
+            accessToken: result.accessToken,
+            refreshToken: result.refreshToken,
+            accessMaxAgeMs: this.auth.accessTokenMaxAgeMs(),
+            refreshMaxAgeMs: this.auth.refreshTokenMaxAgeMs(),
+        });
     }
 };
 exports.AuthController = AuthController;
+tslib_1.__decorate([
+    (0, public_decorator_1.Public)(),
+    (0, common_1.Get)('providers'),
+    (0, swagger_1.ApiOperation)({ summary: 'List enabled external login providers' }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "getProviders", null);
 tslib_1.__decorate([
     (0, common_1.Post)('signin'),
     (0, swagger_1.ApiOperation)({ summary: 'Sign in with username and password' }),
+    (0, common_1.UseGuards)((0, passport_1.AuthGuard)('local')),
     (0, swagger_1.ApiBody)({
         schema: {
             type: 'object',
@@ -51,27 +120,62 @@ tslib_1.__decorate([
         },
     }),
     tslib_1.__param(0, (0, common_1.Body)()),
+    tslib_1.__param(1, (0, common_1.Req)()),
+    tslib_1.__param(2, (0, common_1.Res)({ passthrough: true })),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object]),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], AuthController.prototype, "signIn", null);
+tslib_1.__decorate([
+    (0, common_1.Post)('register'),
+    (0, swagger_1.ApiOperation)({ summary: 'Register a new user account and sign in' }),
+    (0, swagger_1.ApiBody)({
+        schema: {
+            type: 'object',
+            required: ['username', 'password'],
+            properties: {
+                strategy: { type: 'string' },
+                username: { type: 'string' },
+                password: { type: 'string' },
+                displayName: { type: 'string' },
+            },
+        },
+    }),
+    tslib_1.__param(0, (0, common_1.Body)()),
+    tslib_1.__param(1, (0, common_1.Req)()),
+    tslib_1.__param(2, (0, common_1.Res)({ passthrough: true })),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "register", null);
 tslib_1.__decorate([
     (0, common_1.Post)('refresh'),
-    (0, swagger_1.ApiOperation)({ summary: 'Refresh access token' }),
+    (0, swagger_1.ApiOperation)({ summary: 'Refresh access token (cookie or body refresh token)' }),
     (0, swagger_1.ApiBody)({
         schema: {
             type: 'object',
-            required: ['refreshToken'],
             properties: {
                 refreshToken: { type: 'string' },
             },
         },
     }),
     tslib_1.__param(0, (0, common_1.Body)()),
+    tslib_1.__param(1, (0, common_1.Req)()),
+    tslib_1.__param(2, (0, common_1.Res)({ passthrough: true })),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object]),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], AuthController.prototype, "refresh", null);
+tslib_1.__decorate([
+    (0, common_1.Post)('logout'),
+    (0, swagger_1.ApiOperation)({ summary: 'Logout and clear auth cookies' }),
+    tslib_1.__param(0, (0, common_1.Body)()),
+    tslib_1.__param(1, (0, common_1.Req)()),
+    tslib_1.__param(2, (0, common_1.Res)({ passthrough: true })),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "logout", null);
 tslib_1.__decorate([
     (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
     (0, swagger_1.ApiBearerAuth)(),
@@ -102,16 +206,20 @@ tslib_1.__decorate([
             },
         },
     }),
-    tslib_1.__param(0, (0, common_1.Headers)('authorization')),
-    tslib_1.__param(1, (0, common_1.Body)()),
+    tslib_1.__param(0, (0, common_1.Req)()),
+    tslib_1.__param(1, (0, common_1.Res)({ passthrough: true })),
+    tslib_1.__param(2, (0, common_1.Body)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, Object]),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], AuthController.prototype, "updateSession", null);
 exports.AuthController = AuthController = tslib_1.__decorate([
     (0, swagger_1.ApiTags)('auth'),
     (0, common_1.Controller)('v1/auth'),
-    tslib_1.__metadata("design:paramtypes", [auth_service_1.AuthService])
+    tslib_1.__metadata("design:paramtypes", [auth_service_1.AuthService,
+        auth_cookie_service_1.AuthCookieService,
+        token_resolver_service_1.TokenResolverService,
+        core_1.ModuleRef])
 ], AuthController);
 //#endregion
 //# sourceMappingURL=auth.controller.js.map

package/security/src/lib/auth/auth.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.controller.ts"],"names":[],"mappings":";;;;AAAA,2CAOwB;AACxB,6CAAgF;AAChF,iDAA6C;AAC7C,qDAAgD;AAQhD,iCAAiC;AAI1B,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,YAA6B,IAAiB;QAAjB,SAAI,GAAJ,IAAI,CAAa;IAAG,CAAC;IAelD,MAAM,CAAS,IAAsB;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAaD,OAAO,CAAS,IAA4B;QAC1C,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,8BAAqB,CAAC,0BAA0B,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IA+BD,aAAa,CACe,aAAiC,EACnD,IAA6B;QAErC,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IAEO,kBAAkB,CAAC,aAAsB;QAC/C,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;CACF,CAAA;AArFY,wCAAc;AAgBzB;IAbC,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC/D,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;YAClC,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC7B;SACF;KACF,CAAC;IACM,mBAAA,IAAA,aAAI,GAAE,CAAA;;;;4CAEb;AAaD;IAXC,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IACjD,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,CAAC,cAAc,CAAC;YAC1B,UAAU,EAAE;gBACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACjC;SACF;KACF,CAAC;IACO,mBAAA,IAAA,aAAI,GAAE,CAAA;;;;6CAKd;AA+BD;IA7BC,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAa,GAAE;IACf,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IACtE,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACtB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC1B;iBACF;gBACD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACtB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC1B;iBACF;aACF;SACF;KACF,CAAC;IAEC,mBAAA,IAAA,gBAAO,EAAC,eAAe,CAAC,CAAA;IACxB,mBAAA,IAAA,aAAI,GAAE,CAAA;;;;mDAOR;yBA5EU,cAAc;IAF1B,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,SAAS,CAAC;6CAEe,0BAAW;GADnC,cAAc,CAqF1B;AAED,YAAY"}
+{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.controller.ts"],"names":[],"mappings":";;;;AAAA,2CASwB;AACxB,+CAA6C;AAC7C,uCAAyC;AACzC,6CAAgF;AAEhF,+DAA0D;AAC1D,iDAA6C;AAC7C,qDAAgD;AAChD,qEAAgE;AAChE,2DAA6D;AAC7D,yDAA4C;AAC5C,0EAAqH;AACrH,6EAGsC;AAUtC,iCAAiC;AAI1B,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,YACmB,IAAiB,EACjB,OAA0B,EAC1B,aAAmC,EACnC,SAAoB;QAHpB,SAAI,GAAJ,IAAI,CAAa;QACjB,YAAO,GAAP,OAAO,CAAmB;QAC1B,kBAAa,GAAb,aAAa,CAAsB;QACnC,cAAS,GAAT,SAAS,CAAW;IACnC,CAAC;IAKC,AAAN,KAAK,CAAC,YAAY;QAChB,MAAM,QAAQ,GAA4B;YACxC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAA,uDAA+B,GAAE,EAAE;YACtD,SAAS,EAAE,EAAE,OAAO,EAAE,IAAA,0DAAkC,GAAE,EAAE;SAC7D,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACxD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,CAAC;QAC7D,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,wFAAwF;IAChF,2BAA2B;QACjC,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,uDAA0B,EAAE;YAClE,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACrE,CAAC;IAgBK,AAAN,KAAK,CAAC,MAAM,CACF,IAAsB,EACvB,GAAsD,EACjC,GAAa;QAEzC,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,IAAA,0CAAsB,EAAC,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAK,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAgBK,AAAN,KAAK,CAAC,QAAQ,CACJ,IAAwB,EACzB,GAAY,EACS,GAAa;QAEzC,MAAM,IAAI,GAAG,IAAA,0CAAsB,EAAC,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAYK,AAAN,KAAK,CAAC,OAAO,CACH,IAA4B,EAC7B,GAAY,EACS,GAAa;QAEzC,MAAM,YAAY,GAChB,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAkC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE;YACzB,IAAI,CAAC;QAEP,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAqB,CAAC,0BAA0B,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,0CAAsB,EAAC,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CACF,IAA4B,EAC7B,GAAY,EACS,GAAa;QAEzC,MAAM,YAAY,GAChB,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAkC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE;YACzB,IAAI,CAAC;QAEP,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IA+BK,AAAN,KAAK,CAAC,aAAa,CACV,GAAY,EACS,GAAa,EACjC,IAA6B;QAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CACpD,GAAG,CAAC,OAAwD,EAC5D,GAAG,CAAC,OAAkC,CACvC,CAAC;QAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,0CAAsB,EAAC,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzE,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,gBAAgB,CAAC,GAAa,EAAE,MAA4B;QAClE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC/C,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAjMY,wCAAc;AAWnB;IAHL,IAAA,yBAAM,GAAE;IACR,IAAA,YAAG,EAAC,WAAW,CAAC;IAChB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;;;kDAalE;AA8BK;IAdL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC/D,IAAA,kBAAS,EAAC,IAAA,oBAAS,EAAC,OAAO,CAAC,CAAC;IAC7B,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;YAClC,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC7B;SACF;KACF,CAAC;IAEC,mBAAA,IAAA,aAAI,GAAE,CAAA;IACN,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;4CAO5B;AAgBK;IAdL,IAAA,aAAI,EAAC,UAAU,CAAC;IAChB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACpE,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;YAClC,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAChC;SACF;KACF,CAAC;IAEC,mBAAA,IAAA,aAAI,GAAE,CAAA;IACN,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;8CAM5B;AAYK;IAVL,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;IAChF,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACjC;SACF;KACF,CAAC;IAEC,mBAAA,IAAA,aAAI,GAAE,CAAA;IACN,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;6CAe5B;AAIK;IAFL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IAExD,mBAAA,IAAA,aAAI,GAAE,CAAA;IACN,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;4CAS5B;AA+BK;IA7BL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAa,GAAE;IACf,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IACtE,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACtB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC1B;iBACF;gBACD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACtB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC1B;iBACF;aACF;SACF;KACF,CAAC;IAEC,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1B,mBAAA,IAAA,aAAI,GAAE,CAAA;;;;mDAeR;yBAvLU,cAAc;IAF1B,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,SAAS,CAAC;6CAGK,0BAAW;QACR,uCAAiB;QACX,6CAAoB;QACxB,gBAAS;GAL5B,cAAc,CAiM1B;AAED,YAAY"}

package/security/src/lib/auth/auth.service.d.ts

@@ -1,22 +1,31 @@
 import { EntityStorageMiddlewareService } from '@acorex-platform/framework-server/core';
-import type { AccessTokenPayload, AuthTokenResponseDto, RefreshTokenPayload, SignInRequestDto, UpdateSessionRequestDto } from './auth.types';
+import { AuthLocalCredentialsService } from './auth-local-credentials.service';
+import { DeviceSessionService } from './device-session.service';
+import type { AuthRequestMeta } from './request-meta.util';
+import { TokenService } from './token.service';
+import type { AuthTokenResponseDto, RegisterRequestDto, SecurityManagementUserRecord, UpdateSessionRequestDto } from './auth.types';
 export declare class AuthService {
     private readonly entityStorage;
+    private readonly tokenService;
+    private readonly localCredentials;
+    private readonly deviceSessions;
     private readonly logger;
-    constructor(entityStorage: EntityStorageMiddlewareService);
-    signIn(dto: SignInRequestDto): Promise<AuthTokenResponseDto>;
-    refreshSession(refreshToken: string): Promise<AuthTokenResponseDto>;
-    updateSession(currentAccessToken: string, dto: UpdateSessionRequestDto): Promise<AuthTokenResponseDto>;
-    verifyAccessToken(token: string): AccessTokenPayload;
-    verifyRefreshToken(token: string): RefreshTokenPayload;
-    private findUserByCredentials;
-    private findUserById;
-    private listUsers;
+    constructor(entityStorage: EntityStorageMiddlewareService, tokenService: TokenService, localCredentials: AuthLocalCredentialsService, deviceSessions: DeviceSessionService);
+    completeSignIn(user: SecurityManagementUserRecord, meta: AuthRequestMeta): Promise<AuthTokenResponseDto>;
+    assertSupportedSignInStrategy(strategy?: string): void;
+    register(dto: RegisterRequestDto, meta: AuthRequestMeta): Promise<AuthTokenResponseDto>;
+    refreshSession(refreshToken: string, meta: AuthRequestMeta): Promise<AuthTokenResponseDto>;
+    logout(refreshToken?: string | null): Promise<{
+        success: true;
+    }>;
+    updateSession(currentAccessToken: string, dto: UpdateSessionRequestDto, meta: AuthRequestMeta): Promise<AuthTokenResponseDto>;
+    verifyAccessToken(token: string): import("./auth.types").AccessTokenPayload;
+    verifyRefreshToken(token: string): import("./auth.types").RefreshTokenPayload;
+    accessTokenMaxAgeMs(): number;
+    refreshTokenMaxAgeMs(): number;
+    private completeAuthentication;
     private toAuthUser;
-    private issueTokenResponse;
-    private jwtSecret;
-    private accessTokenTtl;
-    private refreshTokenTtl;
     private resolveTenantDto;
     private resolveApplicationDto;
 }
+//# sourceMappingURL=auth.service.d.ts.map

package/security/src/lib/auth/auth.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.service.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAKxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAGV,oBAAoB,EAEpB,kBAAkB,EAClB,4BAA4B,EAC5B,uBAAuB,EACxB,MAAM,cAAc,CAAC;AAUtB,qBACa,WAAW;IAIpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc;IANjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;gBAGpC,aAAa,EAAE,8BAA8B,EAC7C,YAAY,EAAE,YAAY,EAC1B,gBAAgB,EAAE,2BAA2B,EAC7C,cAAc,EAAE,oBAAoB;IAGjD,cAAc,CAClB,IAAI,EAAE,4BAA4B,EAClC,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,oBAAoB,CAAC;IAIhC,6BAA6B,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAOhD,QAAQ,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAiCvF,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuB1F,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;IAehE,aAAa,CACjB,kBAAkB,EAAE,MAAM,EAC1B,GAAG,EAAE,uBAAuB,EAC5B,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,oBAAoB,CAAC;IAmChC,iBAAiB,CAAC,KAAK,EAAE,MAAM;IAQ/B,kBAAkB,CAAC,KAAK,EAAE,MAAM;IAQhC,mBAAmB,IAAI,MAAM;IAI7B,oBAAoB,IAAI,MAAM;YAIhB,sBAAsB;IA0BpC,OAAO,CAAC,UAAU;YAQJ,gBAAgB;YA+BhB,qBAAqB;CAkCpC"}

package/security/src/lib/auth/auth.service.js

@@ -5,10 +5,13 @@ exports.AuthService = void 0;
 const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
 const core_1 = require("@acorex-platform/framework-server/core");
-const abstract_1 = require("@acorex-platform/framework-server/jql/abstract");
 const core_2 = require("@acorex-platform/framework-shared/core");
 const lodash_es_1 = require("lodash-es");
-const jwt = tslib_1.__importStar(require("jsonwebtoken"));
+const crypto_1 = require("crypto");
+const auth_config_1 = require("./auth.config");
+const auth_local_credentials_service_1 = require("./auth-local-credentials.service");
+const device_session_service_1 = require("./device-session.service");
+const token_service_1 = require("./token.service");
 //#region ---- Auth service ----
 const USER_ENTITY = 'SecurityManagement.User';
 const TENANT_ENTITY = 'TenantManagement.Tenant';
@@ -16,106 +19,147 @@ const APPLICATION_ENTITY = 'ApplicationManagement.Application';
 const ACTIVE_ACCOUNT_STATE = 'active';
 const ALLOWED_ACCESS_STATE = 'allowed';
 let AuthService = AuthService_1 = class AuthService {
-    constructor(entityStorage) {
+    constructor(entityStorage, tokenService, localCredentials, deviceSessions) {
         this.entityStorage = entityStorage;
+        this.tokenService = tokenService;
+        this.localCredentials = localCredentials;
+        this.deviceSessions = deviceSessions;
         this.logger = new common_1.Logger(AuthService_1.name);
     }
-    async signIn(dto) {
-        if (dto.strategy && dto.strategy !== 'user-pass') {
-            throw new common_1.BadRequestException(`Unsupported auth strategy: ${dto.strategy}`);
-        }
-        const user = await this.findUserByCredentials(dto.username, dto.password);
-        if (!user) {
-            throw new common_1.UnauthorizedException('Invalid username or password');
-        }
-        // Match mock sign-in: user + tokens only. Tenant/application are chosen client-side
-        // via tenant-chooser / app-chooser and committed through updateSession.
-        return this.issueTokenResponse(this.toAuthUser(user), {});
+    async completeSignIn(user, meta) {
+        return this.completeAuthentication(this.toAuthUser(user), meta, {});
+    }
+    assertSupportedSignInStrategy(strategy) {
+        const resolved = strategy ?? auth_config_1.AUTH_STRATEGY_USER_PASS;
+        if (resolved !== auth_config_1.AUTH_STRATEGY_USER_PASS) {
+            throw new common_1.BadRequestException(`Unsupported auth strategy: ${resolved}`);
+        }
+    }
+    async register(dto, meta) {
+        const strategy = dto.strategy ?? auth_config_1.AUTH_STRATEGY_USER_PASS;
+        if (strategy !== auth_config_1.AUTH_STRATEGY_USER_PASS) {
+            throw new common_1.BadRequestException(`Unsupported auth strategy: ${strategy}`);
+        }
+        const username = (0, lodash_es_1.trim)(dto.username);
+        const password = (0, lodash_es_1.trim)(dto.password);
+        if (!username || !password) {
+            throw new common_1.BadRequestException('Username and password are required.');
+        }
+        const existing = await this.localCredentials.findUserByUsername(username);
+        if (existing) {
+            throw new common_1.BadRequestException('Username is already taken.');
+        }
+        const id = (0, crypto_1.randomUUID)();
+        const displayName = (0, lodash_es_1.trim)(dto.displayName) || username;
+        const passwordHash = await (0, core_2.hashPassword)(password);
+        await this.entityStorage.insertOne(USER_ENTITY, {
+            id,
+            username,
+            displayName,
+            password: passwordHash,
+            accountState: ACTIVE_ACCOUNT_STATE,
+            accessState: ALLOWED_ACCESS_STATE,
+        });
+        return this.completeAuthentication({ id, name: username, title: displayName }, meta, {});
     }
-    async refreshSession(refreshToken) {
+    async refreshSession(refreshToken, meta) {
         const payload = this.verifyRefreshToken(refreshToken);
-        const user = await this.findUserById(payload.sub);
+        const user = await this.localCredentials.findUserById(payload.sub);
         if (!user) {
             throw new common_1.UnauthorizedException('User not found');
         }
+        await this.deviceSessions.revokeByAuthorizationId(payload.jti);
         const [tenant, application] = await Promise.all([
             this.resolveTenantDto(payload.tid),
             this.resolveApplicationDto(payload.aid),
         ]);
-        return this.issueTokenResponse(this.toAuthUser(user), {
+        return this.completeAuthentication(this.toAuthUser(user), meta, {
             tenantId: payload.tid,
             applicationId: payload.aid,
             tenant,
             application,
+            sessionId: payload.sid,
         });
     }
-    async updateSession(currentAccessToken, dto) {
+    async logout(refreshToken) {
+        if (!refreshToken?.trim()) {
+            return { success: true };
+        }
+        try {
+            const payload = this.verifyRefreshToken(refreshToken);
+            await this.deviceSessions.revokeByAuthorizationId(payload.jti);
+        }
+        catch (error) {
+            this.logger.debug(`Logout ignored invalid refresh token: ${String(error)}`);
+        }
+        return { success: true };
+    }
+    async updateSession(currentAccessToken, dto, meta) {
         const current = this.verifyAccessToken(currentAccessToken);
-        const user = await this.findUserById(current.sub);
+        const user = await this.localCredentials.findUserById(current.sub);
         if (!user) {
             throw new common_1.UnauthorizedException('User not found');
         }
         const tenantId = dto.tenantId ?? dto.tenant?.id ?? current.tid;
-        const applicationId = dto.applicationId ?? dto.application?.id ?? current.aid;
+        const tenantSelectedInRequest = dto.tenantId != null || dto.tenant?.id != null;
+        const applicationSelectedInRequest = dto.applicationId != null || dto.application?.id != null;
+        let applicationId;
+        if (applicationSelectedInRequest) {
+            applicationId = dto.applicationId ?? dto.application?.id;
+        }
+        else if (tenantSelectedInRequest) {
+            // Tenant chooser step: drop previous application so app chooser is not skipped.
+            applicationId = undefined;
+        }
+        else {
+            applicationId = current.aid;
+        }
         const [tenant, application] = await Promise.all([
             this.resolveTenantDto(tenantId, dto.tenant),
             this.resolveApplicationDto(applicationId, dto.application),
         ]);
-        return this.issueTokenResponse(this.toAuthUser(user), {
+        return this.completeAuthentication(this.toAuthUser(user), meta, {
             tenantId,
             applicationId,
             tenant,
             application,
+            sessionId: current.sid,
         });
     }
     verifyAccessToken(token) {
         try {
-            const payload = jwt.verify(token, this.jwtSecret());
-            if (payload.type !== 'access' || !payload.sub) {
-                throw new common_1.UnauthorizedException('Invalid access token');
-            }
-            return payload;
+            return this.tokenService.verifyAccessToken(token);
         }
-        catch (error) {
-            if (error instanceof common_1.UnauthorizedException) {
-                throw error;
-            }
+        catch {
             throw new common_1.UnauthorizedException('Invalid or expired access token');
         }
     }
     verifyRefreshToken(token) {
         try {
-            const payload = jwt.verify(token, this.jwtSecret());
-            if (payload.type !== 'refresh' || !payload.sub) {
-                throw new common_1.UnauthorizedException('Invalid refresh token');
-            }
-            return payload;
+            return this.tokenService.verifyRefreshToken(token);
         }
         catch {
             throw new common_1.UnauthorizedException('Invalid or expired refresh token');
         }
     }
-    //#region ---- User lookup ----
-    async findUserByCredentials(username, password) {
-        const users = await this.listUsers();
-        const candidates = users.filter((u) => u.username === username &&
-            u.accountState === ACTIVE_ACCOUNT_STATE &&
-            ((0, lodash_es_1.isNil)(u.accessState) || u.accessState === ALLOWED_ACCESS_STATE));
-        for (const user of candidates) {
-            if (await (0, core_2.verifyPassword)(password, user.password)) {
-                return user;
-            }
-        }
-        return null;
+    accessTokenMaxAgeMs() {
+        return this.tokenService.accessTokenMaxAgeMs();
     }
-    async findUserById(userId) {
-        const record = await this.entityStorage.getOne(USER_ENTITY, userId);
-        return record ?? null;
+    refreshTokenMaxAgeMs() {
+        return this.tokenService.refreshTokenMaxAgeMs();
     }
-    async listUsers() {
-        const result = await this.entityStorage.query(USER_ENTITY, (0, abstract_1.bypassAllEntityVisibilityFilters)({ skip: 0, take: 2000 }));
-        const items = (0, lodash_es_1.get)(result, 'items', []);
-        return Array.isArray(items) ? items : [];
+    async completeAuthentication(user, meta, context) {
+        const tokens = this.tokenService.issueTokenResponse(user, context);
+        const refreshPayload = this.tokenService.verifyRefreshToken(tokens.refreshToken);
+        await this.deviceSessions.createSession({
+            user,
+            authorizationId: refreshPayload.jti,
+            sessionId: tokens.sessionId ?? refreshPayload.sid,
+            meta,
+            tenantId: context.tenantId,
+            applicationId: context.applicationId,
+        });
+        return tokens;
     }
     toAuthUser(user) {
         return {
@@ -124,62 +168,12 @@ let AuthService = AuthService_1 = class AuthService {
             title: user.displayName ?? user.username ?? user.id,
         };
     }
-    //#endregion
-    //#region ---- Token issuance ----
-    issueTokenResponse(user, context) {
-        const accessPayload = {
-            sub: user.id,
-            username: user.name,
-            type: 'access',
-            ...(context.tenantId ? { tid: context.tenantId } : {}),
-            ...(context.applicationId ? { aid: context.applicationId } : {}),
-        };
-        const refreshPayload = {
-            sub: user.id,
-            type: 'refresh',
-            ...(context.tenantId ? { tid: context.tenantId } : {}),
-            ...(context.applicationId ? { aid: context.applicationId } : {}),
-        };
-        const accessToken = jwt.sign(accessPayload, this.jwtSecret(), {
-            expiresIn: this.accessTokenTtl(),
-        });
-        const refreshToken = jwt.sign(refreshPayload, this.jwtSecret(), {
-            expiresIn: this.refreshTokenTtl(),
-        });
-        return {
-            accessToken,
-            refreshToken,
-            expiresIn: this.accessTokenTtl(),
-            user,
-            tenant: context.tenant ?? (context.tenantId ? { id: context.tenantId } : null),
-            application: context.application ??
-                (context.applicationId ? { id: context.applicationId } : null),
-        };
-    }
-    jwtSecret() {
-        const secret = process.env['JWT_SECRET']?.trim();
-        if (!secret) {
-            this.logger.warn('JWT_SECRET is not set; using insecure development default');
-            return 'acorex-dev-jwt-secret-change-me';
-        }
-        return secret;
-    }
-    accessTokenTtl() {
-        return process.env['JWT_ACCESS_EXPIRES_IN']?.trim() || '8h';
-    }
-    refreshTokenTtl() {
-        return process.env['JWT_REFRESH_EXPIRES_IN']?.trim() || '7d';
-    }
     async resolveTenantDto(tenantId, partial) {
         if (!tenantId) {
             return undefined;
         }
         if (partial?.title?.trim()) {
-            return {
-                id: tenantId,
-                name: partial.name,
-                title: partial.title,
-            };
+            return { id: tenantId, name: partial.name, title: partial.title };
         }
         const tenant = (await this.entityStorage.getOne(TENANT_ENTITY, tenantId));
         if (!tenant) {
@@ -200,11 +194,7 @@ let AuthService = AuthService_1 = class AuthService {
             return undefined;
         }
         if (partial?.title?.trim() && partial?.name?.trim()) {
-            return {
-                id: applicationId,
-                name: partial.name,
-                title: partial.title,
-            };
+            return { id: applicationId, name: partial.name, title: partial.title };
         }
         const application = (await this.entityStorage.getOne(APPLICATION_ENTITY, applicationId));
         if (!application) {
@@ -217,22 +207,19 @@ let AuthService = AuthService_1 = class AuthService {
         const routeName = code === 'MAGFA-001'
             ? 'magfa-commerce'
             : partial?.name ||
-                (application['name'] != null
-                    ? String(application['name'])
-                    : undefined) ||
+                (application['name'] != null ? String(application['name']) : undefined) ||
                 title.toLowerCase().replace(/\s+/g, '-') ||
                 'default-name';
-        return {
-            id: applicationId,
-            name: routeName,
-            title,
-        };
+        return { id: applicationId, name: routeName, title };
     }
 };
 exports.AuthService = AuthService;
 exports.AuthService = AuthService = AuthService_1 = tslib_1.__decorate([
     (0, common_1.Injectable)(),
-    tslib_1.__metadata("design:paramtypes", [core_1.EntityStorageMiddlewareService])
+    tslib_1.__metadata("design:paramtypes", [core_1.EntityStorageMiddlewareService,
+        token_service_1.TokenService,
+        auth_local_credentials_service_1.AuthLocalCredentialsService,
+        device_session_service_1.DeviceSessionService])
 ], AuthService);
 //#endregion
 //# sourceMappingURL=auth.service.js.map