@acorex-platform/framework-server 0.0.18 → 0.0.21

package/security/src/lib/auth/auth.controller.js

@@ -1,282 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthController = void 0;
-const tslib_1 = require("tslib");
-const common_1 = require("@nestjs/common");
-const passport_1 = require("@nestjs/passport");
-const core_1 = require("@nestjs/core");
-const swagger_1 = require("@nestjs/swagger");
-const providers_1 = require("@acorex-platform/framework-server/domain/providers");
-const auth_cookie_service_1 = require("./auth-cookie.service");
-const auth_service_1 = require("./auth.service");
-const jwt_auth_guard_1 = require("./jwt-auth.guard");
-const token_resolver_service_1 = require("./token-resolver.service");
-const request_meta_util_1 = require("./request-meta.util");
-const public_decorator_1 = require("./public.decorator");
-const platform_oauth_config_1 = require("../oauth/platform-oauth.config");
-const auth_providers_contributor_1 = require("./auth-providers.contributor");
-//#region ---- Auth REST API ----
-let AuthController = class AuthController {
-    constructor(auth, cookies, tokenResolver, moduleRef, commandExecutor) {
-        this.auth = auth;
-        this.cookies = cookies;
-        this.tokenResolver = tokenResolver;
-        this.moduleRef = moduleRef;
-        this.commandExecutor = commandExecutor;
-    }
-    async getProviders() {
-        const response = {
-            google: { enabled: (0, platform_oauth_config_1.isGooglePlatformLoginConfigured)() },
-            microsoft: { enabled: (0, platform_oauth_config_1.isMicrosoftPlatformLoginConfigured)() },
-        };
-        const contributors = this.resolveProviderContributors();
-        for (const contributor of contributors) {
-            response[contributor.key] = await contributor.getSection();
-        }
-        return response;
-    }
-    /** Resolved at request time — extension modules register after SecurityModule boots. */
-    resolveProviderContributors() {
-        const contributors = this.moduleRef.get(auth_providers_contributor_1.AUTH_PROVIDERS_CONTRIBUTOR, {
-            each: true,
-            strict: false,
-        });
-        if (!contributors) {
-            return [];
-        }
-        return Array.isArray(contributors) ? contributors : [contributors];
-    }
-    async signIn(body, req, res) {
-        this.auth.assertSupportedSignInStrategy(body.strategy);
-        const meta = (0, request_meta_util_1.resolveAuthRequestMeta)(req);
-        const result = await this.auth.completeSignIn(req.user, meta);
-        this.applyAuthCookies(res, result);
-        return result;
-    }
-    async register(body, req, res) {
-        const meta = (0, request_meta_util_1.resolveAuthRequestMeta)(req);
-        const result = await this.auth.register(body, meta);
-        this.applyAuthCookies(res, result);
-        return result;
-    }
-    async refresh(body, req, res) {
-        const refreshToken = this.cookies.readRefreshToken(req.cookies) ??
-            body.refreshToken?.trim() ??
-            null;
-        if (!refreshToken) {
-            throw new common_1.UnauthorizedException('refreshToken is required');
-        }
-        const meta = (0, request_meta_util_1.resolveAuthRequestMeta)(req);
-        const result = await this.auth.refreshSession(refreshToken, meta);
-        this.applyAuthCookies(res, result);
-        return result;
-    }
-    async logout(body, req, res) {
-        const refreshToken = this.cookies.readRefreshToken(req.cookies) ??
-            body.refreshToken?.trim() ??
-            null;
-        this.cookies.clearAuthCookies(res);
-        return this.auth.logout(refreshToken);
-    }
-    async requestPasswordReset(body) {
-        const result = await this.commandExecutor.execute('SecurityManagement:Server:SendPasswordResetEmail', {
-            login: body?.login,
-            webOrigin: body?.webOrigin,
-        });
-        // Opaque response — do not reveal whether the account exists.
-        return { success: result?.success !== false };
-    }
-    async completePasswordReset(body) {
-        const result = await this.commandExecutor.execute('SecurityManagement:Server:CompletePasswordReset', {
-            token: body?.token,
-            newPassword: body?.newPassword,
-        });
-        const message = typeof result?.message?.text === 'string' ? result.message.text : undefined;
-        return { success: !!result?.success, message };
-    }
-    async updateSession(req, res, body) {
-        const resolved = this.tokenResolver.resolveAccessToken(req.headers, req.cookies);
-        if (!resolved) {
-            throw new common_1.UnauthorizedException('Bearer access token is required');
-        }
-        const meta = (0, request_meta_util_1.resolveAuthRequestMeta)(req);
-        const result = await this.auth.updateSession(resolved.token, body, meta);
-        this.applyAuthCookies(res, result);
-        return result;
-    }
-    applyAuthCookies(res, result) {
-        this.cookies.applyAuthCookies(res, {
-            accessToken: result.accessToken,
-            refreshToken: result.refreshToken,
-            accessMaxAgeMs: this.auth.accessTokenMaxAgeMs(),
-            refreshMaxAgeMs: this.auth.refreshTokenMaxAgeMs(),
-        });
-    }
-};
-exports.AuthController = AuthController;
-tslib_1.__decorate([
-    (0, public_decorator_1.Public)(),
-    (0, common_1.Get)('providers'),
-    (0, swagger_1.ApiOperation)({ summary: 'List enabled external login providers' }),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", []),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthController.prototype, "getProviders", null);
-tslib_1.__decorate([
-    (0, common_1.Post)('signin'),
-    (0, swagger_1.ApiOperation)({ summary: 'Sign in with username and password' }),
-    (0, common_1.UseGuards)((0, passport_1.AuthGuard)('local')),
-    (0, swagger_1.ApiBody)({
-        schema: {
-            type: 'object',
-            required: ['username', 'password'],
-            properties: {
-                strategy: { type: 'string' },
-                username: { type: 'string' },
-                password: { type: 'string' },
-            },
-        },
-    }),
-    tslib_1.__param(0, (0, common_1.Body)()),
-    tslib_1.__param(1, (0, common_1.Req)()),
-    tslib_1.__param(2, (0, common_1.Res)({ passthrough: true })),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, Object, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthController.prototype, "signIn", null);
-tslib_1.__decorate([
-    (0, common_1.Post)('register'),
-    (0, swagger_1.ApiOperation)({ summary: 'Register a new user account and sign in' }),
-    (0, swagger_1.ApiBody)({
-        schema: {
-            type: 'object',
-            required: ['username', 'password'],
-            properties: {
-                strategy: { type: 'string' },
-                username: { type: 'string' },
-                password: { type: 'string' },
-                displayName: { type: 'string' },
-            },
-        },
-    }),
-    tslib_1.__param(0, (0, common_1.Body)()),
-    tslib_1.__param(1, (0, common_1.Req)()),
-    tslib_1.__param(2, (0, common_1.Res)({ passthrough: true })),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, Object, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthController.prototype, "register", null);
-tslib_1.__decorate([
-    (0, common_1.Post)('refresh'),
-    (0, swagger_1.ApiOperation)({ summary: 'Refresh access token (cookie or body refresh token)' }),
-    (0, swagger_1.ApiBody)({
-        schema: {
-            type: 'object',
-            properties: {
-                refreshToken: { type: 'string' },
-            },
-        },
-    }),
-    tslib_1.__param(0, (0, common_1.Body)()),
-    tslib_1.__param(1, (0, common_1.Req)()),
-    tslib_1.__param(2, (0, common_1.Res)({ passthrough: true })),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, Object, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthController.prototype, "refresh", null);
-tslib_1.__decorate([
-    (0, common_1.Post)('logout'),
-    (0, swagger_1.ApiOperation)({ summary: 'Logout and clear auth cookies' }),
-    tslib_1.__param(0, (0, common_1.Body)()),
-    tslib_1.__param(1, (0, common_1.Req)()),
-    tslib_1.__param(2, (0, common_1.Res)({ passthrough: true })),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, Object, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthController.prototype, "logout", null);
-tslib_1.__decorate([
-    (0, public_decorator_1.Public)(),
-    (0, common_1.Post)('password-reset/request'),
-    (0, swagger_1.ApiOperation)({ summary: 'Request a password-reset email (forgot password)' }),
-    (0, swagger_1.ApiBody)({
-        schema: {
-            type: 'object',
-            required: ['login'],
-            properties: {
-                login: { type: 'string', description: 'Email or username' },
-                webOrigin: { type: 'string' },
-            },
-        },
-    }),
-    tslib_1.__param(0, (0, common_1.Body)()),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthController.prototype, "requestPasswordReset", null);
-tslib_1.__decorate([
-    (0, public_decorator_1.Public)(),
-    (0, common_1.Post)('password-reset/complete'),
-    (0, swagger_1.ApiOperation)({ summary: 'Complete password reset with one-time token' }),
-    (0, swagger_1.ApiBody)({
-        schema: {
-            type: 'object',
-            required: ['token', 'newPassword'],
-            properties: {
-                token: { type: 'string' },
-                newPassword: { type: 'string' },
-            },
-        },
-    }),
-    tslib_1.__param(0, (0, common_1.Body)()),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthController.prototype, "completePasswordReset", null);
-tslib_1.__decorate([
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, swagger_1.ApiBearerAuth)(),
-    (0, common_1.Post)('session'),
-    (0, swagger_1.ApiOperation)({ summary: 'Update session tenant/application context' }),
-    (0, swagger_1.ApiBody)({
-        schema: {
-            type: 'object',
-            properties: {
-                tenantId: { type: 'string' },
-                applicationId: { type: 'string' },
-                tenant: {
-                    type: 'object',
-                    properties: {
-                        id: { type: 'string' },
-                        name: { type: 'string' },
-                        title: { type: 'string' },
-                    },
-                },
-                application: {
-                    type: 'object',
-                    properties: {
-                        id: { type: 'string' },
-                        name: { type: 'string' },
-                        title: { type: 'string' },
-                    },
-                },
-            },
-        },
-    }),
-    tslib_1.__param(0, (0, common_1.Req)()),
-    tslib_1.__param(1, (0, common_1.Res)({ passthrough: true })),
-    tslib_1.__param(2, (0, common_1.Body)()),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, Object, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthController.prototype, "updateSession", null);
-exports.AuthController = AuthController = tslib_1.__decorate([
-    (0, swagger_1.ApiTags)('auth'),
-    (0, common_1.Controller)('v1/auth'),
-    tslib_1.__metadata("design:paramtypes", [auth_service_1.AuthService,
-        auth_cookie_service_1.AuthCookieService,
-        token_resolver_service_1.TokenResolverService,
-        core_1.ModuleRef,
-        providers_1.ServerCommandExecutorService])
-], AuthController);
-//#endregion
-//# sourceMappingURL=auth.controller.js.map

package/security/src/lib/auth/auth.controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.controller.ts"],"names":[],"mappings":";;;;AAAA,2CASwB;AACxB,+CAA6C;AAC7C,uCAAyC;AACzC,6CAAgF;AAEhF,kFAAkG;AAClG,+DAA0D;AAC1D,iDAA6C;AAC7C,qDAAgD;AAChD,qEAAgE;AAChE,2DAA6D;AAC7D,yDAA4C;AAC5C,0EAAqH;AACrH,6EAGsC;AAUtC,iCAAiC;AAI1B,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,YACmB,IAAiB,EACjB,OAA0B,EAC1B,aAAmC,EACnC,SAAoB,EACpB,eAA6C;QAJ7C,SAAI,GAAJ,IAAI,CAAa;QACjB,YAAO,GAAP,OAAO,CAAmB;QAC1B,kBAAa,GAAb,aAAa,CAAsB;QACnC,cAAS,GAAT,SAAS,CAAW;QACpB,oBAAe,GAAf,eAAe,CAA8B;IAC5D,CAAC;IAKC,AAAN,KAAK,CAAC,YAAY;QAChB,MAAM,QAAQ,GAA4B;YACxC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAA,uDAA+B,GAAE,EAAE;YACtD,SAAS,EAAE,EAAE,OAAO,EAAE,IAAA,0DAAkC,GAAE,EAAE;SAC7D,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACxD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,CAAC;QAC7D,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,wFAAwF;IAChF,2BAA2B;QACjC,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,uDAA0B,EAAE;YAClE,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACrE,CAAC;IAgBK,AAAN,KAAK,CAAC,MAAM,CACF,IAAsB,EACvB,GAAsD,EACjC,GAAa;QAEzC,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,IAAA,0CAAsB,EAAC,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAK,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAgBK,AAAN,KAAK,CAAC,QAAQ,CACJ,IAAwB,EACzB,GAAY,EACS,GAAa;QAEzC,MAAM,IAAI,GAAG,IAAA,0CAAsB,EAAC,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAYK,AAAN,KAAK,CAAC,OAAO,CACH,IAA4B,EAC7B,GAAY,EACS,GAAa;QAEzC,MAAM,YAAY,GAChB,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAkC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE;YACzB,IAAI,CAAC;QAEP,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAqB,CAAC,0BAA0B,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,0CAAsB,EAAC,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CACF,IAA4B,EAC7B,GAAY,EACS,GAAa;QAEzC,MAAM,YAAY,GAChB,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAkC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE;YACzB,IAAI,CAAC;QAEP,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAeK,AAAN,KAAK,CAAC,oBAAoB,CAChB,IAA4C;QAEpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAC/C,kDAAkD,EAClD;YACE,KAAK,EAAE,IAAI,EAAE,KAAK;YAClB,SAAS,EAAE,IAAI,EAAE,SAAS;SAC3B,CACF,CAAC;QACF,8DAA8D;QAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;IAChD,CAAC;IAeK,AAAN,KAAK,CAAC,qBAAqB,CACjB,IAA8C;QAEtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAC/C,iDAAiD,EACjD;YACE,KAAK,EAAE,IAAI,EAAE,KAAK;YAClB,WAAW,EAAE,IAAI,EAAE,WAAW;SAC/B,CACF,CAAC;QACF,MAAM,OAAO,GACX,OAAO,MAAM,EAAE,OAAO,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACjD,CAAC;IA+BK,AAAN,KAAK,CAAC,aAAa,CACV,GAAY,EACS,GAAa,EACjC,IAA6B;QAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CACpD,GAAG,CAAC,OAAwD,EAC5D,GAAG,CAAC,OAAkC,CACvC,CAAC;QAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,0CAAsB,EAAC,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzE,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,gBAAgB,CAAC,GAAa,EAAE,MAA4B;QAClE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC/C,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAzPY,wCAAc;AAYnB;IAHL,IAAA,yBAAM,GAAE;IACR,IAAA,YAAG,EAAC,WAAW,CAAC;IAChB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;;;kDAalE;AA8BK;IAdL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC/D,IAAA,kBAAS,EAAC,IAAA,oBAAS,EAAC,OAAO,CAAC,CAAC;IAC7B,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;YAClC,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC7B;SACF;KACF,CAAC;IAEC,mBAAA,IAAA,aAAI,GAAE,CAAA;IACN,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;4CAO5B;AAgBK;IAdL,IAAA,aAAI,EAAC,UAAU,CAAC;IAChB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACpE,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;YAClC,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAChC;SACF;KACF,CAAC;IAEC,mBAAA,IAAA,aAAI,GAAE,CAAA;IACN,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;8CAM5B;AAYK;IAVL,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;IAChF,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACjC;SACF;KACF,CAAC;IAEC,mBAAA,IAAA,aAAI,GAAE,CAAA;IACN,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;6CAe5B;AAIK;IAFL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IAExD,mBAAA,IAAA,aAAI,GAAE,CAAA;IACN,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;4CAS5B;AAeK;IAbL,IAAA,yBAAM,GAAE;IACR,IAAA,aAAI,EAAC,wBAAwB,CAAC;IAC9B,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;IAC7E,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,CAAC,OAAO,CAAC;YACnB,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;gBAC3D,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC9B;SACF;KACF,CAAC;IAEC,mBAAA,IAAA,aAAI,GAAE,CAAA;;;;0DAWR;AAeK;IAbL,IAAA,yBAAM,GAAE;IACR,IAAA,aAAI,EAAC,yBAAyB,CAAC;IAC/B,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;IACxE,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC;YAClC,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAChC;SACF;KACF,CAAC;IAEC,mBAAA,IAAA,aAAI,GAAE,CAAA;;;;2DAYR;AA+BK;IA7BL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAa,GAAE;IACf,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IACtE,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACtB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC1B;iBACF;gBACD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACtB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC1B;iBACF;aACF;SACF;KACF,CAAC;IAEC,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1B,mBAAA,IAAA,aAAI,GAAE,CAAA;;;;mDAeR;yBA/OU,cAAc;IAF1B,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,SAAS,CAAC;6CAGK,0BAAW;QACR,uCAAiB;QACX,6CAAoB;QACxB,gBAAS;QACH,wCAA4B;GANrD,cAAc,CAyP1B;AAED,YAAY"}

package/security/src/lib/session/session.controller.d.ts

@@ -1,12 +0,0 @@
-import { BackendSessionService } from './backend-session.service';
-import { SessionContextService } from './session-context.service';
-import type { SessionAccessPolicyDto, SessionApplicationItemDto, SessionContextListResponseDto, SessionTenantItemDto } from './session-context.types';
-export declare class SessionController {
-    private readonly sessionContext;
-    private readonly backendSession;
-    constructor(sessionContext: SessionContextService, backendSession: BackendSessionService);
-    getTenants(): Promise<SessionContextListResponseDto<SessionTenantItemDto>>;
-    getApplications(): Promise<SessionContextListResponseDto<SessionApplicationItemDto>>;
-    getAccessPolicy(): Promise<SessionAccessPolicyDto>;
-}
-//# sourceMappingURL=session.controller.d.ts.map

package/security/src/lib/session/session.controller.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.controller.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/session.controller.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EACV,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAIjC,qBAEa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc;gBADd,cAAc,EAAE,qBAAqB,EACrC,cAAc,EAAE,qBAAqB;IAOxD,UAAU,IAAI,OAAO,CAAC,6BAA6B,CAAC,oBAAoB,CAAC,CAAC;IAS1E,eAAe,IAAI,OAAO,CAAC,6BAA6B,CAAC,yBAAyB,CAAC,CAAC;IAWpF,eAAe,IAAI,OAAO,CAAC,sBAAsB,CAAC;CAQnD"}

package/security/src/lib/session/session.controller.js

@@ -1,66 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SessionController = void 0;
-const tslib_1 = require("tslib");
-const common_1 = require("@nestjs/common");
-const swagger_1 = require("@nestjs/swagger");
-const jwt_auth_guard_1 = require("../auth/jwt-auth.guard");
-const backend_session_service_1 = require("./backend-session.service");
-const session_context_service_1 = require("./session-context.service");
-//#region ---- Session REST API ----
-let SessionController = class SessionController {
-    constructor(sessionContext, backendSession) {
-        this.sessionContext = sessionContext;
-        this.backendSession = backendSession;
-    }
-    getTenants() {
-        const session = this.backendSession.requireAuthenticated();
-        return this.sessionContext.getAvailableTenantsForUser(session.userId);
-    }
-    getApplications() {
-        const session = this.backendSession.requireAuthenticated();
-        return this.sessionContext.getApplicationsForCurrentTenant(session.userId, session.tenantId);
-    }
-    getAccessPolicy() {
-        const session = this.backendSession.requireAuthenticated();
-        return this.sessionContext.getAccessPolicy(session.userId, session.tenantId, session.applicationId);
-    }
-};
-exports.SessionController = SessionController;
-tslib_1.__decorate([
-    (0, common_1.Get)('tenants'),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, swagger_1.ApiBearerAuth)(),
-    (0, swagger_1.ApiOperation)({ summary: 'List tenants available for the authenticated user' }),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", []),
-    tslib_1.__metadata("design:returntype", Promise)
-], SessionController.prototype, "getTenants", null);
-tslib_1.__decorate([
-    (0, common_1.Get)('applications'),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, swagger_1.ApiBearerAuth)(),
-    (0, swagger_1.ApiOperation)({ summary: 'List applications available for the current tenant session' }),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", []),
-    tslib_1.__metadata("design:returntype", Promise)
-], SessionController.prototype, "getApplications", null);
-tslib_1.__decorate([
-    (0, common_1.Get)('access-policy'),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, swagger_1.ApiBearerAuth)(),
-    (0, swagger_1.ApiOperation)({
-        summary: 'Return permissions and edition module/feature policy for the current session',
-    }),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", []),
-    tslib_1.__metadata("design:returntype", Promise)
-], SessionController.prototype, "getAccessPolicy", null);
-exports.SessionController = SessionController = tslib_1.__decorate([
-    (0, swagger_1.ApiTags)('session'),
-    (0, common_1.Controller)('v1/session'),
-    tslib_1.__metadata("design:paramtypes", [session_context_service_1.SessionContextService,
-        backend_session_service_1.BackendSessionService])
-], SessionController);
-//#endregion
-//# sourceMappingURL=session.controller.js.map

package/security/src/lib/session/session.controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.controller.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/session.controller.ts"],"names":[],"mappings":";;;;AAAA,2CAA4D;AAC5D,6CAAuE;AACvE,2DAAsD;AACtD,uEAAkE;AAClE,uEAAkE;AAQlE,oCAAoC;AAI7B,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC5B,YACmB,cAAqC,EACrC,cAAqC;QADrC,mBAAc,GAAd,cAAc,CAAuB;QACrC,mBAAc,GAAd,cAAc,CAAuB;IACrD,CAAC;IAMJ,UAAU;QACR,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,oBAAoB,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxE,CAAC;IAMD,eAAe;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,oBAAoB,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC,cAAc,CAAC,+BAA+B,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/F,CAAC;IAQD,eAAe;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,oBAAoB,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC,cAAc,CAAC,eAAe,CACxC,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,aAAa,CACtB,CAAC;IACJ,CAAC;CACF,CAAA;AAtCY,8CAAiB;AAU5B;IAJC,IAAA,YAAG,EAAC,SAAS,CAAC;IACd,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAa,GAAE;IACf,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC;;;;mDAI9E;AAMD;IAJC,IAAA,YAAG,EAAC,cAAc,CAAC;IACnB,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAa,GAAE;IACf,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC;;;;wDAIvF;AAQD;IANC,IAAA,YAAG,EAAC,eAAe,CAAC;IACpB,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAa,GAAE;IACf,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8EAA8E;KACxF,CAAC;;;;wDAQD;4BArCU,iBAAiB;IAF7B,IAAA,iBAAO,EAAC,SAAS,CAAC;IAClB,IAAA,mBAAU,EAAC,YAAY,CAAC;6CAGY,+CAAqB;QACrB,+CAAqB;GAH7C,iBAAiB,CAsC7B;AAED,YAAY"}