@anarchitects/auth-nest 0.0.1

package/src/application/services/jwt-auth.service.js

@@ -0,0 +1,220 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtAuthService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const jwt_1 = require("@nestjs/jwt");
+const auth_user_repository_1 = require("../../infrastructure-persistence/repositories/auth-user.repository");
+const hash_service_1 = require("./hash.service");
+let JwtAuthService = class JwtAuthService {
+    constructor(hashService, authUserRepository, jwtService) {
+        this.hashService = hashService;
+        this.authUserRepository = authUserRepository;
+        this.jwtService = jwtService;
+    }
+    async registerUser(dto) {
+        if (dto.password !== dto.confirmPassword) {
+            throw new common_1.BadRequestException('Passwords do not match');
+        }
+        const passwordHash = await this.hashService.hash(dto.password);
+        const token = crypto.randomUUID();
+        const { userName, email } = dto;
+        const user = {
+            email,
+            passwordHash,
+            isActive: false,
+            userName,
+            token,
+            roles: [
+                {
+                    name: 'user',
+                },
+            ],
+        };
+        await this.authUserRepository.create(user);
+        return { success: true };
+    }
+    async activateUser(dto) {
+        const { token } = dto;
+        const user = await this.authUserRepository.findOne(token);
+        await this.authUserRepository.update({
+            ...user,
+            isActive: true,
+            token: null,
+        });
+        return { success: true };
+    }
+    async login(dto) {
+        const { credential, password } = dto;
+        const user = await this.authUserRepository.findOne({
+            where: [{ email: credential }, { userName: credential }],
+        });
+        if (!user) {
+            throw new common_1.BadRequestException('Invalid credentials');
+        }
+        const isPasswordValid = await this.hashService.compare(password, user.passwordHash);
+        if (!isPasswordValid) {
+            throw new common_1.BadRequestException('Invalid credentials');
+        }
+        return this.generateTokens(user);
+    }
+    async logout(dto) {
+        const { accessToken, refreshToken } = dto;
+        if (!refreshToken) {
+            throw new common_1.BadRequestException('Refresh token is required');
+        }
+        const payload = await this.jwtService
+            .verifyAsync(refreshToken)
+            .catch(() => {
+            throw new common_1.BadRequestException('Invalid refresh token');
+        });
+        if (!payload?.sub) {
+            throw new common_1.BadRequestException('Invalid refresh token');
+        }
+        const user = await this.authUserRepository.findOne({
+            where: { id: payload.sub },
+        });
+        if (!user?.id) {
+            throw new common_1.BadRequestException('Invalid refresh token');
+        }
+        const tokenHashes = await Promise.all([accessToken, refreshToken]
+            .filter((token) => Boolean(token))
+            .map((token) => this.hashService.hash(token)));
+        await this.authUserRepository.invalidateTokens(tokenHashes, user.id);
+        return { success: true };
+    }
+    async changePassword(userId, dto) {
+        const { currentPassword, newPassword, confirmPassword } = dto;
+        if (newPassword !== confirmPassword) {
+            throw new common_1.BadRequestException('Passwords do not match');
+        }
+        const user = await this.authUserRepository.findOne({
+            where: { id: userId },
+        });
+        if (!user) {
+            throw new common_1.BadRequestException('User not found');
+        }
+        const isCurrentPasswordValid = await this.hashService.compare(currentPassword, user.passwordHash);
+        if (!isCurrentPasswordValid) {
+            throw new common_1.BadRequestException('Invalid current password');
+        }
+        user.passwordHash = await this.hashService.hash(newPassword);
+        await this.authUserRepository.update(user);
+        return { success: true };
+    }
+    async forgotPassword(dto) {
+        const { email } = dto;
+        const user = await this.authUserRepository.findOne({ where: { email } });
+        if (!user) {
+            throw new common_1.BadRequestException('User not found');
+        }
+        const token = crypto.randomUUID();
+        user.token = token;
+        await this.authUserRepository.update(user);
+        // Here you would typically send the token to the user's email
+        return { success: true };
+    }
+    async resetPassword(dto) {
+        const { token, password, confirmPassword } = dto;
+        if (password !== confirmPassword) {
+            throw new common_1.BadRequestException('Passwords do not match');
+        }
+        const user = await this.authUserRepository.findOne({ where: { token } });
+        if (!user) {
+            throw new common_1.BadRequestException('Invalid token');
+        }
+        user.passwordHash = await this.hashService.hash(password);
+        user.token = null;
+        await this.authUserRepository.update(user);
+        return { success: true };
+    }
+    async verifyEmail(dto) {
+        const { token } = dto;
+        const user = await this.authUserRepository.findOne({ where: { token } });
+        if (!user) {
+            throw new common_1.BadRequestException('Invalid token');
+        }
+        user.isActive = true;
+        user.token = null;
+        await this.authUserRepository.update(user);
+        return { success: true };
+    }
+    async updateEmail(userId, dto) {
+        const { newEmail, password } = dto;
+        const user = await this.authUserRepository.findOne({
+            where: { id: userId },
+        });
+        if (!user) {
+            throw new common_1.BadRequestException('User not found');
+        }
+        const isPasswordValid = password && (await this.hashService.compare(password, user.passwordHash));
+        if (!isPasswordValid) {
+            throw new common_1.BadRequestException('Invalid password');
+        }
+        user.email = newEmail;
+        await this.authUserRepository.update(user);
+        return { success: true };
+    }
+    async refreshTokens(userId, dto) {
+        const { refreshToken } = dto;
+        const payload = await this.jwtService
+            .verifyAsync(refreshToken)
+            .catch(() => {
+            throw new common_1.BadRequestException('Invalid refresh token');
+        });
+        if (!payload?.sub || payload.sub !== userId) {
+            throw new common_1.BadRequestException('Invalid refresh token');
+        }
+        const user = await this.authUserRepository.findOne({
+            where: { id: userId },
+        });
+        if (!user) {
+            throw new common_1.BadRequestException('User not found');
+        }
+        const isTokenInvalidated = await this.authUserRepository.isTokenInvalidated(await this.hashService.hash(refreshToken));
+        if (isTokenInvalidated) {
+            throw new common_1.BadRequestException('Refresh token has been invalidated');
+        }
+        return this.generateTokens(user);
+    }
+    async getLoggedInUserInfo(userId) {
+        const user = await this.authUserRepository.findOne({
+            where: { id: userId },
+            relations: ['roles', 'permissions'],
+        });
+        if (!user) {
+            throw new common_1.BadRequestException('User not found');
+        }
+        const rbac = [];
+        user.roles?.forEach((role) => {
+            role.permissions?.forEach((permission) => {
+                rbac.push({
+                    action: permission.action,
+                    subject: permission.subject,
+                    conditions: permission.conditions ?? undefined,
+                    fields: permission.fields ?? undefined,
+                    reason: permission.reason ?? undefined,
+                    inverted: permission.inverted ?? false,
+                });
+            });
+        });
+        return { user, rbac };
+    }
+    async generateTokens(user) {
+        const payload = {
+            sub: user.id,
+            roles: user.roles?.map((role) => role.name),
+        };
+        const accessToken = await this.jwtService.signAsync(payload);
+        const refreshToken = await this.jwtService.signAsync(payload);
+        return { accessToken, refreshToken };
+    }
+};
+exports.JwtAuthService = JwtAuthService;
+exports.JwtAuthService = JwtAuthService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [hash_service_1.HashService,
+        auth_user_repository_1.AuthUserRepository,
+        jwt_1.JwtService])
+], JwtAuthService);
+//# sourceMappingURL=jwt-auth.service.js.map

package/src/application/services/jwt-auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-auth.service.js","sourceRoot":"","sources":["../../../../../../../libs/auth/nest/src/application/services/jwt-auth.service.ts"],"names":[],"mappings":";;;;AAeA,2CAAiE;AACjE,qCAAyC;AACzC,6GAAwG;AAExG,iDAA6C;AAGtC,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,YACmB,WAAwB,EACxB,kBAAsC,EACtC,UAAsB;QAFtB,gBAAW,GAAX,WAAW,CAAa;QACxB,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,eAAU,GAAV,UAAU,CAAY;IACtC,CAAC;IAEJ,KAAK,CAAC,YAAY,CAAC,GAAuB;QACxC,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,eAAe,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,wBAAwB,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;QAChC,MAAM,IAAI,GAAkB;YAC1B,KAAK;YACL,YAAY;YACZ,QAAQ,EAAE,KAAK;YACf,QAAQ;YACR,KAAK;YACL,KAAK,EAAE;gBACL;oBACE,IAAI,EAAE,MAAM;iBACL;aACV;SACF,CAAC;QACF,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,GAA2B;QAE3B,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;YACnC,GAAG,IAAI;YACP,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAoB;QAC9B,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;SACzD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,qBAAqB,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CACpD,QAAQ,EACR,IAAI,CAAC,YAAY,CAClB,CAAC;QACF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,4BAAmB,CAAC,qBAAqB,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAqB;QAChC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC;QAE1C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,4BAAmB,CAAC,2BAA2B,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU;aAClC,WAAW,CAAC,YAAY,CAAC;aACzB,KAAK,CAAC,GAAG,EAAE;YACV,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;YAClB,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;YACd,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACnC,CAAC,WAAW,EAAE,YAAY,CAAC;aACxB,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAChD,CAAC;QAEF,MAAM,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAErE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,MAAc,EACd,GAA6B;QAE7B,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC;QAC9D,IAAI,WAAW,KAAK,eAAe,EAAE,CAAC;YACpC,MAAM,IAAI,4BAAmB,CAAC,wBAAwB,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAC3D,eAAe,EACf,IAAI,CAAC,YAAY,CAClB,CAAC;QACF,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,MAAM,IAAI,4BAAmB,CAAC,0BAA0B,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,cAAc,CAClB,GAA6B;QAE7B,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,8DAA8D;QAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,aAAa,CACjB,GAA4B;QAE5B,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC;QACjD,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACjC,MAAM,IAAI,4BAAmB,CAAC,wBAAwB,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,eAAe,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,GAA0B;QAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,eAAe,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,WAAW,CACf,MAAc,EACd,GAA0B;QAE1B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,eAAe,GACnB,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACtB,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,MAAc,EACd,GAA2B;QAE3B,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU;aAClC,WAAW,CAAC,YAAY,CAAC;aACzB,KAAK,CAAC,GAAG,EAAE;YACV,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;YAC5C,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CACzE,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAC1C,CAAC;QAEF,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,IAAI,4BAAmB,CAAC,oCAAoC,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,MAAc;QAEd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,SAAS,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,GAAiB,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3B,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;gBACvC,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,UAAU,EAAE,UAAU,CAAC,UAAU,IAAI,SAAS;oBAC9C,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,SAAS;oBACtC,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,SAAS;oBACtC,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,KAAK;iBACvC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAAU;QACrC,MAAM,OAAO,GAAG;YACd,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SAC5C,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IACvC,CAAC;CACF,CAAA;AA9PY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;6CAGqB,0BAAW;QACJ,yCAAkB;QAC1B,gBAAU;GAJ9B,cAAc,CA8P1B"}

package/src/application/services/policies.service.d.ts

@@ -0,0 +1,10 @@
+import { AuthUserRepository } from '../../infrastructure-persistence/repositories/auth-user.repository';
+import { PolicyRule, User } from '@anarchitects/auth-ts/models';
+import { AppAbility, AbilityFactory } from '../factories/ability.factory';
+export declare class PoliciesService {
+    private readonly authUserRepository;
+    private readonly abilityFactory;
+    constructor(authUserRepository: AuthUserRepository, abilityFactory: AbilityFactory);
+    rulesForUser(authUser: User): Promise<PolicyRule[]>;
+    buildAbilityForUser(authUser: User): Promise<AppAbility>;
+}

package/src/application/services/policies.service.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PoliciesService = void 0;
+const tslib_1 = require("tslib");
+/* eslint-disable @typescript-eslint/no-explicit-any */
+const common_1 = require("@nestjs/common");
+const auth_user_repository_1 = require("../../infrastructure-persistence/repositories/auth-user.repository");
+const ability_factory_1 = require("../factories/ability.factory");
+let PoliciesService = class PoliciesService {
+    constructor(authUserRepository, abilityFactory) {
+        this.authUserRepository = authUserRepository;
+        this.abilityFactory = abilityFactory;
+    }
+    async rulesForUser(authUser) {
+        const user = await this.authUserRepository.findOne({
+            where: { id: authUser.id },
+            relations: ['roles', 'roles.permissions'],
+        });
+        const inject = (c) => !c ? undefined : JSON.parse(JSON.stringify(c));
+        if (!user) {
+            return [];
+        }
+        return (user.roles ?? []).flatMap((role) => (role.permissions ?? []).map((permission) => ({
+            action: permission.action,
+            subject: permission.subject,
+            conditions: inject(permission.conditions),
+            fields: permission.fields ?? undefined,
+            inverted: permission.inverted ?? false,
+            reason: permission.reason ?? undefined,
+        })));
+    }
+    async buildAbilityForUser(authUser) {
+        return this.abilityFactory.buildAbility(await this.rulesForUser(authUser));
+    }
+};
+exports.PoliciesService = PoliciesService;
+exports.PoliciesService = PoliciesService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [auth_user_repository_1.AuthUserRepository,
+        ability_factory_1.AbilityFactory])
+], PoliciesService);
+//# sourceMappingURL=policies.service.js.map

package/src/application/services/policies.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.service.js","sourceRoot":"","sources":["../../../../../../../libs/auth/nest/src/application/services/policies.service.ts"],"names":[],"mappings":";;;;AAAA,uDAAuD;AACvD,2CAA4C;AAC5C,6GAAwG;AAExG,kEAA0E;AAGnE,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YACmB,kBAAsC,EACtC,cAA8B;QAD9B,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,mBAAc,GAAd,cAAc,CAAgB;IAC9C,CAAC;IAEJ,KAAK,CAAC,YAAY,CAAC,QAAc;QAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE;YAC1B,SAAS,EAAE,CAAC,OAAO,EAAE,mBAAmB,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,CAAO,EAAE,EAAE,CACzB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAa,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACxD,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YACzC,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,SAAS;YACtC,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,KAAK;YACtC,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,SAAS;SACvC,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,QAAc;QACtC,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7E,CAAC;CACF,CAAA;AA/BY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;6CAG4B,yCAAkB;QACtB,gCAAc;GAHtC,eAAe,CA+B3B"}

package/src/application/strategies/jwt/strategy.d.ts

@@ -0,0 +1,16 @@
+import { Role } from '@anarchitects/auth-ts/models';
+import { Strategy } from 'passport-jwt';
+declare const JwtStrategy_base: new (...args: [opt: import("passport-jwt").StrategyOptionsWithRequest] | [opt: import("passport-jwt").StrategyOptionsWithoutRequest]) => Strategy & {
+    validate(...args: any[]): unknown;
+};
+export declare class JwtStrategy extends JwtStrategy_base {
+    constructor();
+    validate(payload: {
+        sub: string;
+        roles: Role[];
+    }): Promise<{
+        userId: string;
+        roles: Role[];
+    }>;
+}
+export {};

package/src/application/strategies/jwt/strategy.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtStrategy = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_jwt_1 = require("passport-jwt");
+let JwtStrategy = class JwtStrategy extends (0, passport_1.PassportStrategy)(passport_jwt_1.Strategy) {
+    constructor() {
+        super({
+            jwtFromRequest: passport_jwt_1.ExtractJwt.fromAuthHeaderAsBearerToken(),
+            ignoreExpiration: false,
+            secretOrKey: process.env['JWT_SECRET'] || 'defaultSecret',
+        });
+    }
+    async validate(payload) {
+        return { userId: payload.sub, roles: payload.roles };
+    }
+};
+exports.JwtStrategy = JwtStrategy;
+exports.JwtStrategy = JwtStrategy = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [])
+], JwtStrategy);
+//# sourceMappingURL=strategy.js.map

package/src/application/strategies/jwt/strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy.js","sourceRoot":"","sources":["../../../../../../../../libs/auth/nest/src/application/strategies/jwt/strategy.ts"],"names":[],"mappings":";;;;AACA,2CAA4C;AAC5C,+CAAoD;AACpD,+CAAoD;AAG7C,IAAM,WAAW,GAAjB,MAAM,WAAY,SAAQ,IAAA,2BAAgB,EAAC,uBAAQ,CAAC;IACzD;QACE,KAAK,CAAC;YACJ,cAAc,EAAE,yBAAU,CAAC,2BAA2B,EAAE;YACxD,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,eAAe;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAuC;QACpD,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IACvD,CAAC;CACF,CAAA;AAZY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;;GACA,WAAW,CAYvB"}

package/src/config/auth.config.d.ts

@@ -0,0 +1,18 @@
+import { ConfigType } from '@nestjs/config';
+export declare const authConfig: (() => {
+    jwtSecret: string;
+    jwtExpiration: string;
+    jwtAudience: string;
+    jwtIssuer: string;
+    encryptionAlgorithm: string;
+    encryptionKey: string;
+}) & import("@nestjs/config").ConfigFactoryKeyHost<{
+    jwtSecret: string;
+    jwtExpiration: string;
+    jwtAudience: string;
+    jwtIssuer: string;
+    encryptionAlgorithm: string;
+    encryptionKey: string;
+}>;
+export type AuthConfig = ConfigType<typeof authConfig>;
+export declare const InjectAuthConfig: () => PropertyDecorator & ParameterDecorator;

package/src/config/auth.config.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InjectAuthConfig = exports.authConfig = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const AUTH_CONFIG_KEY = 'auth';
+exports.authConfig = (0, config_1.registerAs)(AUTH_CONFIG_KEY, () => ({
+    jwtSecret: process.env['AUTH_JWT_SECRET'] || 'default_jwt_secret',
+    jwtExpiration: process.env['AUTH_JWT_EXPIRATION'] || '3600s',
+    jwtAudience: process.env['AUTH_JWT_AUDIENCE'] || 'your_audience',
+    jwtIssuer: process.env['AUTH_JWT_ISSUER'] || 'your_issuer',
+    encryptionAlgorithm: process.env['AUTH_ENCRYPTION_ALGORITHM'] || 'bcrypt',
+    encryptionKey: process.env['AUTH_ENCRYPTION_KEY'] || 'default_encryption_key',
+}));
+const InjectAuthConfig = () => (0, common_1.Inject)(exports.authConfig.KEY);
+exports.InjectAuthConfig = InjectAuthConfig;
+//# sourceMappingURL=auth.config.js.map

package/src/config/auth.config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.config.js","sourceRoot":"","sources":["../../../../../../libs/auth/nest/src/config/auth.config.ts"],"names":[],"mappings":";;;AAAA,2CAAwC;AACxC,2CAAwD;AAExD,MAAM,eAAe,GAAG,MAAM,CAAC;AAElB,QAAA,UAAU,GAAG,IAAA,mBAAU,EAAC,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3D,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,oBAAoB;IACjE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,OAAO;IAC5D,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,eAAe;IAChE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,aAAa;IAC1D,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,QAAQ;IACzE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,wBAAwB;CAC9E,CAAC,CAAC,CAAC;AAIG,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,kBAAU,CAAC,GAAG,CAAC,CAAC;AAAhD,QAAA,gBAAgB,oBAAgC"}

package/src/config/index.d.ts

@@ -0,0 +1 @@
+export * from './auth.config';

package/src/config/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./auth.config"), exports);
+//# sourceMappingURL=index.js.map

package/src/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/auth/nest/src/config/index.ts"],"names":[],"mappings":";;;AAAA,wDAA8B"}

package/src/index.d.ts

@@ -0,0 +1,5 @@
+export * from './application';
+export * from './presentation';
+export * from './infrastructure-persistence';
+export * from './infrastructure-mailer';
+export * from './config';

package/src/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./application"), exports);
+tslib_1.__exportStar(require("./presentation"), exports);
+tslib_1.__exportStar(require("./infrastructure-persistence"), exports);
+tslib_1.__exportStar(require("./infrastructure-mailer"), exports);
+tslib_1.__exportStar(require("./config"), exports);
+//# sourceMappingURL=index.js.map

package/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../libs/auth/nest/src/index.ts"],"names":[],"mappings":";;;AAAA,wDAA8B;AAC9B,yDAA+B;AAC/B,uEAA6C;AAC7C,kEAAwC;AACxC,mDAAyB"}

package/src/infrastructure-mailer/adapters/mailer.adapter.d.ts

@@ -0,0 +1,4 @@
+export declare abstract class MailerAdapter {
+    abstract send(to: string, subject: string, html: string): Promise<void>;
+    abstract sendTemplate(to: string, subject: string, template: string, context?: Record<string, unknown>): Promise<void>;
+}

package/src/infrastructure-mailer/adapters/mailer.adapter.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MailerAdapter = void 0;
+class MailerAdapter {
+}
+exports.MailerAdapter = MailerAdapter;
+//# sourceMappingURL=mailer.adapter.js.map

package/src/infrastructure-mailer/adapters/mailer.adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailer.adapter.js","sourceRoot":"","sources":["../../../../../../../libs/auth/nest/src/infrastructure-mailer/adapters/mailer.adapter.ts"],"names":[],"mappings":";;;AAAA,MAAsB,aAAa;CAQlC;AARD,sCAQC"}

package/src/infrastructure-mailer/adapters/node-mailer.adapter.d.ts

@@ -0,0 +1,8 @@
+import { MailerService } from '@nestjs-modules/mailer';
+import { MailerAdapter } from './mailer.adapter';
+export declare class NodeMailerAdapter implements MailerAdapter {
+    private readonly mailer;
+    constructor(mailer: MailerService);
+    send(to: string, subject: string, html: string): Promise<SentMessageInfo>;
+    sendTemplate(to: string, subject: string, template: string, context?: Record<string, unknown>): Promise<SentMessageInfo>;
+}

package/src/infrastructure-mailer/adapters/node-mailer.adapter.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NodeMailerAdapter = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const mailer_1 = require("@nestjs-modules/mailer");
+let NodeMailerAdapter = class NodeMailerAdapter {
+    constructor(mailer) {
+        this.mailer = mailer;
+    }
+    async send(to, subject, html) {
+        return await this.mailer.sendMail({ to, subject, html });
+    }
+    async sendTemplate(to, subject, template, context) {
+        return await this.mailer.sendMail({ to, subject, template, context });
+    }
+};
+exports.NodeMailerAdapter = NodeMailerAdapter;
+exports.NodeMailerAdapter = NodeMailerAdapter = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [mailer_1.MailerService])
+], NodeMailerAdapter);
+//# sourceMappingURL=node-mailer.adapter.js.map

package/src/infrastructure-mailer/adapters/node-mailer.adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-mailer.adapter.js","sourceRoot":"","sources":["../../../../../../../libs/auth/nest/src/infrastructure-mailer/adapters/node-mailer.adapter.ts"],"names":[],"mappings":";;;;AAAA,2CAA4C;AAC5C,mDAAuD;AAIhD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC5B,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IACtD,KAAK,CAAC,IAAI,CAAC,EAAU,EAAE,OAAe,EAAE,IAAY;QAClD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,KAAK,CAAC,YAAY,CAChB,EAAU,EACV,OAAe,EACf,QAAgB,EAChB,OAAiC;QAEjC,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;CACF,CAAA;AAbY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;6CAE0B,sBAAa;GADvC,iBAAiB,CAa7B"}

package/src/infrastructure-mailer/index.d.ts

@@ -0,0 +1,3 @@
+export * from './adapters/mailer.adapter';
+export * from './adapters/node-mailer.adapter';
+export * from './mailer.module';

package/src/infrastructure-mailer/index.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./adapters/mailer.adapter"), exports);
+tslib_1.__exportStar(require("./adapters/node-mailer.adapter"), exports);
+tslib_1.__exportStar(require("./mailer.module"), exports);
+//# sourceMappingURL=index.js.map

package/src/infrastructure-mailer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/auth/nest/src/infrastructure-mailer/index.ts"],"names":[],"mappings":";;;AAAA,oEAA0C;AAC1C,yEAA+C;AAC/C,0DAAgC"}

package/src/infrastructure-mailer/mailer.module.d.ts

@@ -0,0 +1,2 @@
+export declare class MailerModule {
+}

package/src/infrastructure-mailer/mailer.module.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MailerModule = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const node_mailer_adapter_1 = require("./adapters/node-mailer.adapter");
+const mailer_adapter_1 = require("./adapters/mailer.adapter");
+let MailerModule = class MailerModule {
+};
+exports.MailerModule = MailerModule;
+exports.MailerModule = MailerModule = tslib_1.__decorate([
+    (0, common_1.Module)({
+        providers: [
+            node_mailer_adapter_1.NodeMailerAdapter,
+            {
+                provide: mailer_adapter_1.MailerAdapter,
+                useExisting: node_mailer_adapter_1.NodeMailerAdapter,
+            },
+        ],
+        exports: [mailer_adapter_1.MailerAdapter],
+    })
+], MailerModule);
+//# sourceMappingURL=mailer.module.js.map

package/src/infrastructure-mailer/mailer.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailer.module.js","sourceRoot":"","sources":["../../../../../../libs/auth/nest/src/infrastructure-mailer/mailer.module.ts"],"names":[],"mappings":";;;;AAAA,2CAAwC;AACxC,wEAAmE;AACnE,8DAA0D;AAYnD,IAAM,YAAY,GAAlB,MAAM,YAAY;CAAG,CAAA;AAAf,oCAAY;uBAAZ,YAAY;IAVxB,IAAA,eAAM,EAAC;QACN,SAAS,EAAE;YACT,uCAAiB;YACjB;gBACE,OAAO,EAAE,8BAAa;gBACtB,WAAW,EAAE,uCAAiB;aAC/B;SACF;QACD,OAAO,EAAE,CAAC,8BAAa,CAAC;KACzB,CAAC;GACW,YAAY,CAAG"}

package/src/infrastructure-persistence/entities/invalidated-token.entity.d.ts

@@ -0,0 +1,7 @@
+export declare class InvalidatedTokenEntity {
+    tokenId: string;
+    userId: string | null;
+    expiresAt: Date;
+    invalidatedAt: Date;
+    constructor(partial?: Partial<InvalidatedTokenEntity>);
+}

package/src/infrastructure-persistence/entities/invalidated-token.entity.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvalidatedTokenEntity = void 0;
+const tslib_1 = require("tslib");
+const typeorm_1 = require("typeorm");
+const schema_1 = require("../schema");
+let InvalidatedTokenEntity = class InvalidatedTokenEntity {
+    constructor(partial = {}) {
+        Object.assign(this, partial);
+    }
+};
+exports.InvalidatedTokenEntity = InvalidatedTokenEntity;
+tslib_1.__decorate([
+    (0, typeorm_1.PrimaryColumn)({ type: 'varchar', length: 128 }),
+    tslib_1.__metadata("design:type", String)
+], InvalidatedTokenEntity.prototype, "tokenId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ type: 'uuid', nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], InvalidatedTokenEntity.prototype, "userId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ type: 'timestamptz', name: 'expires_at' }),
+    tslib_1.__metadata("design:type", Date)
+], InvalidatedTokenEntity.prototype, "expiresAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({
+        type: 'timestamptz',
+        name: 'invalidated_at',
+        default: () => 'CURRENT_TIMESTAMP',
+    }),
+    tslib_1.__metadata("design:type", Date)
+], InvalidatedTokenEntity.prototype, "invalidatedAt", void 0);
+exports.InvalidatedTokenEntity = InvalidatedTokenEntity = tslib_1.__decorate([
+    (0, typeorm_1.Entity)({
+        schema: schema_1.AUTH_SCHEMA,
+        name: 'invalidated_tokens',
+        synchronize: false,
+    }),
+    (0, typeorm_1.Index)('invalidated_tokens_expires_at_idx', ['expiresAt']),
+    tslib_1.__metadata("design:paramtypes", [Object])
+], InvalidatedTokenEntity);
+//# sourceMappingURL=invalidated-token.entity.js.map

package/src/infrastructure-persistence/entities/invalidated-token.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalidated-token.entity.js","sourceRoot":"","sources":["../../../../../../../libs/auth/nest/src/infrastructure-persistence/entities/invalidated-token.entity.ts"],"names":[],"mappings":";;;;AAAA,qCAA+D;AAC/D,sCAAwC;AAQjC,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAiBjC,YAAY,UAA2C,EAAE;QACvD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF,CAAA;AApBY,wDAAsB;AAEjC;IADC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;uDAC/B;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sDAClB;AAGvB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;sCACxC,IAAI;yDAAC;AAOjB;IALC,IAAA,gBAAM,EAAC;QACN,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,GAAG,EAAE,CAAC,mBAAmB;KACnC,CAAC;sCACc,IAAI;6DAAC;iCAfV,sBAAsB;IANlC,IAAA,gBAAM,EAAC;QACN,MAAM,EAAE,oBAAW;QACnB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,KAAK;KACnB,CAAC;IACD,IAAA,eAAK,EAAC,mCAAmC,EAAE,CAAC,WAAW,CAAC,CAAC;;GAC7C,sBAAsB,CAoBlC"}

package/src/infrastructure-persistence/entities/permission.entity.d.ts

@@ -0,0 +1,17 @@
+import { Permission, Role } from '@anarchitects/auth-ts/models';
+export declare class PermissionEntity implements Permission {
+    id: string;
+    name: string;
+    description: string | null;
+    action: string;
+    subject: string;
+    conditions: Record<string, unknown> | null;
+    fields: string[] | null;
+    inverted: boolean;
+    reason: string | null;
+    roles: Role[] | null;
+    createdAt: Date;
+    updatedAt: Date;
+    constructor(partial: Partial<Permission>);
+    generateId(): void;
+}