@digitaldefiance/node-express-suite 1.0.22 → 1.0.23

package/dist/middlewares/authenticate-crypto.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authenticate-crypto.d.ts","sourceRoot":"","sources":["../../src/middlewares/authenticate-crypto.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,aAAa,EAId,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAiB,KAAK,EAAE,MAAM,UAAU,CAAC;AAIhD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAOzD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,cAAc,SAAS,MAAM,GAAG,aAAa,EAE7C,WAAW,EAAE,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,EAC3G,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,EAClB,iBAAiB,GAAE,cAAuD,GACzE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CA2M1B"}

package/dist/middlewares/authenticate-crypto.js

@@ -1,146 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.authenticateCrypto = authenticateCrypto;
-const ecies_lib_1 = require("@digitaldefiance/ecies-lib");
-const node_ecies_lib_1 = require("@digitaldefiance/node-ecies-lib");
-const suite_core_lib_1 = require("@digitaldefiance/suite-core-lib");
-const enumerations_1 = require("../enumerations");
-const errors_1 = require("../errors");
-const registry_1 = require("../registry");
-const backup_code_1 = require("../services/backup-code");
-const key_wrapping_1 = require("../services/key-wrapping");
-const role_1 = require("../services/role");
-const user_1 = require("../services/user");
-const utils_1 = require("../utils");
-/**
- * Middleware to authenticate crypto operations requiring private key access
- * Expects mnemonic or password in request body for fresh authentication
- */
-async function authenticateCrypto(application, req, res, next, activeStatusValue = suite_core_lib_1.AccountStatus.Active) {
-    if (!req.user) {
-        return res
-            .status(401)
-            .send(
-        // amazonq-ignore-next-line false positive, hardcoded string
-        (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_InvalidToken));
-    }
-    // Try validatedBody first (if validation has run), then fall back to raw body
-    // Note: This middleware runs BEFORE validation, so validatedBody may not exist yet
-    const validatedBody = req
-        .validatedBody;
-    const rawBody = req.body;
-    const sourceBody = validatedBody ?? rawBody;
-    if (!sourceBody) {
-        return res.status(400).send({
-            // amazonq-ignore-next-line false positive, hardcoded string
-            message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_MnemonicOrPasswordRequired),
-        });
-    }
-    const mnemonic = typeof sourceBody['mnemonic'] === 'string'
-        ? sourceBody['mnemonic']
-        : undefined;
-    const password = 
-    // amazonq-ignore-next-line false positive
-    typeof sourceBody['password'] === 'string'
-        ? sourceBody['password']
-        : undefined;
-    if (!mnemonic && !password) {
-        return res.status(400).send({
-            // amazonq-ignore-next-line false positive, hardcoded string
-            message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_MnemonicOrPasswordRequired),
-        });
-    }
-    const UserModel = application.getModel(enumerations_1.BaseModelName.User);
-    const config = {
-        curveName: application.constants.ECIES.CURVE_NAME,
-        primaryKeyDerivationPath: application.constants.ECIES.PRIMARY_KEY_DERIVATION_PATH,
-        mnemonicStrength: application.constants.ECIES.MNEMONIC_STRENGTH,
-        symmetricAlgorithm: application.constants.ECIES.SYMMETRIC_ALGORITHM_CONFIGURATION,
-        symmetricKeyBits: application.constants.ECIES.SYMMETRIC.KEY_BITS,
-        symmetricKeyMode: application.constants.ECIES.SYMMETRIC.MODE,
-    };
-    const keyWrappingService = new key_wrapping_1.KeyWrappingService();
-    const roleService = new role_1.RoleService(application);
-    const userService = new user_1.UserService(application, roleService, registry_1.emailServiceRegistry.getService(), keyWrappingService, new backup_code_1.BackupCodeService(application, new node_ecies_lib_1.ECIESService(config), keyWrappingService, roleService));
-    try {
-        return await (0, utils_1.withTransaction)(application.db.connection, application.environment.mongo.useTransactions, undefined, async (sess) => {
-            const userDoc = await UserModel.findById(req.user.id)
-                .session(sess ?? null)
-                .exec();
-            if (!userDoc || userDoc.accountStatus !== activeStatusValue) {
-                return (res
-                    .status(403)
-                    .send(
-                // amazonq-ignore-next-line false positive, hardcoded string
-                (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_UserNotFound)));
-            }
-            // Ensure we're only authenticating the currently logged-in user
-            if (userDoc._id.toString() !== req.user.id) {
-                return (res
-                    .status(403)
-                    .send(
-                // amazonq-ignore-next-line false positive, hardcoded string
-                (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_InvalidCredentials)));
-            }
-            let loginResult;
-            if (mnemonic) {
-                // Authenticate with mnemonic
-                const userMnemonic = new ecies_lib_1.SecureString(mnemonic);
-                try {
-                    loginResult = await userService.loginWithMnemonic(userDoc.email, userMnemonic, sess);
-                }
-                finally {
-                    userMnemonic.dispose();
-                }
-            }
-            else if (password) {
-                // Authenticate with password
-                loginResult = await userService.loginWithPassword(userDoc.email, password, sess);
-            }
-            else {
-                // Should not happen due to earlier guard; keeps TypeScript happy
-                return res.status(400).send({
-                    // amazonq-ignore-next-line false positive, hardcoded string
-                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_MnemonicOrPasswordRequired),
-                });
-            }
-            // Double-check authenticated user matches logged-in user
-            if (loginResult.userDoc._id.toString() !== req.user.id) {
-                return (res
-                    .status(403)
-                    .send(
-                // amazonq-ignore-next-line false positive, hardcoded string
-                (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_InvalidCredentials)));
-            }
-            // Attach the fully authenticated member (with private key) to the request
-            req.eciesUser = loginResult.userMember;
-            // Do not attach the admin user to the request; it's a process-wide singleton
-            // and must not be disposed as part of request cleanup.
-            next();
-            return;
-        }, {
-            timeoutMs: application.environment.mongo.transactionTimeout,
-        });
-    }
-    catch (err) {
-        if (err instanceof suite_core_lib_1.InvalidCredentialsError ||
-            err instanceof errors_1.InvalidPasswordError) {
-            // amazonq-ignore-next-line false positive
-            console.error('Crypto authentication failed:', `userId=${String(req.user?.id || 'unknown').replace(/[\r\n]/g, '')} hasPassword=${!!password} hasMnemonic=${!!mnemonic}`);
-            return res.status(401).send({
-                // amazonq-ignore-next-line false positive, hardcoded string
-                message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_InvalidCredentials),
-            });
-        }
-        const sanitizedErr = err instanceof Error
-            ? err.message.replace(/[\r\n]/g, ' ')
-            : String(err).replace(/[\r\n]/g, ' ');
-        console.error('Unexpected error in authenticateCrypto:', sanitizedErr);
-        return res.status(500).send({
-            // amazonq-ignore-next-line false positive, hardcoded string
-            message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_UnexpectedError),
-            error: err,
-        });
-    }
-}
-//# sourceMappingURL=authenticate-crypto.js.map

package/dist/middlewares/authenticate-crypto.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authenticate-crypto.js","sourceRoot":"","sources":["../../src/middlewares/authenticate-crypto.ts"],"names":[],"mappings":";;AA+BA,gDAmNC;AAlPD,0DAAwE;AACxE,oEAGyC;AACzC,oEAKyC;AAIzC,kDAAgD;AAChD,sCAAiD;AAEjD,0CAAmD;AACnD,yDAA4D;AAC5D,2DAA8D;AAC9D,2CAA+C;AAC/C,2CAA+C;AAC/C,oCAA2C;AAK3C;;;GAGG;AACI,KAAK,UAAU,kBAAkB,CAGtC,WAA2G,EAC3G,GAAY,EACZ,GAAa,EACb,IAAkB,EAClB,oBAAoC,8BAAa,CAAC,MAAwB;IAE1E,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,GAAG;aACP,MAAM,CAAC,GAAG,CAAC;aACX,IAAI;QACH,4DAA4D;QAC5D,IAAA,wCAAuB,EAAC,mCAAkB,CAAC,uBAAuB,CAAC,CACpE,CAAC;IACN,CAAC;IAED,8EAA8E;IAC9E,mFAAmF;IACnF,MAAM,aAAa,GAAI,GAA6C;SACjE,aAAoD,CAAC;IACxD,MAAM,OAAO,GAAG,GAAG,CAAC,IAA2C,CAAC;IAChE,MAAM,UAAU,GAAG,aAAa,IAAI,OAAO,CAAC;IAE5C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,4DAA4D;YAC5D,OAAO,EAAE,IAAA,wCAAuB,EAC9B,mCAAkB,CAAC,qCAAqC,CACzD;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GACZ,OAAO,UAAU,CAAC,UAAU,CAAC,KAAK,QAAQ;QACxC,CAAC,CAAE,UAAU,CAAC,UAAU,CAAY;QACpC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,QAAQ;IACZ,0CAA0C;IAC1C,OAAO,UAAU,CAAC,UAAU,CAAC,KAAK,QAAQ;QACxC,CAAC,CAAE,UAAU,CAAC,UAAU,CAAY;QACpC,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,4DAA4D;YAC5D,OAAO,EAAE,IAAA,wCAAuB,EAC9B,mCAAkB,CAAC,qCAAqC,CACzD;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CACpC,4BAAa,CAAC,IAAI,CACnB,CAAC;IACF,MAAM,MAAM,GAAiB;QAC3B,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU;QACjD,wBAAwB,EACtB,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,2BAA2B;QACzD,gBAAgB,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB;QAC/D,kBAAkB,EAChB,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,iCAAiC;QAC/D,gBAAgB,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ;QAChE,gBAAgB,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI;KAC7D,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,iCAAkB,EAAE,CAAC;IAEpD,MAAM,WAAW,GAAG,IAAI,kBAAW,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,IAAI,kBAAW,CACjC,WAAW,EACX,WAAW,EACX,+BAAoB,CAAC,UAAU,EAAE,EACjC,kBAAkB,EAClB,IAAI,+BAAiB,CACnB,WAAW,EACX,IAAI,6BAAY,CAAC,MAAM,CAAC,EACxB,kBAAkB,EAClB,WAAW,CACZ,CACF,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,MAAM,IAAA,uBAAe,EAC1B,WAAW,CAAC,EAAE,CAAC,UAAU,EACzB,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,eAAe,EAC7C,SAAS,EACT,KAAK,EAAE,IAA+B,EAAE,EAAE;YACxC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAK,CAAC,EAAE,CAAC;iBACnD,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;iBACrB,IAAI,EAAE,CAAC;YAEV,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,aAAa,KAAK,iBAAiB,EAAE,CAAC;gBAC5D,OAAO,CACL,GAAG;qBACA,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI;gBACH,4DAA4D;gBAC5D,IAAA,wCAAuB,EACrB,mCAAkB,CAAC,uBAAuB,CAC3C,CACF,CACJ,CAAC;YACJ,CAAC;YAED,gEAAgE;YAChE,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,CAAC;gBAC5C,OAAO,CACL,GAAG;qBACA,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI;gBACH,4DAA4D;gBAC5D,IAAA,wCAAuB,EACrB,mCAAkB,CAAC,6BAA6B,CACjD,CACF,CACJ,CAAC;YACJ,CAAC;YAED,IAAI,WAIH,CAAC;YAEF,IAAI,QAAQ,EAAE,CAAC;gBACb,6BAA6B;gBAC7B,MAAM,YAAY,GAAG,IAAI,wBAAY,CAAC,QAAQ,CAAC,CAAC;gBAChD,IAAI,CAAC;oBACH,WAAW,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAC/C,OAAO,CAAC,KAAK,EACb,YAAY,EACZ,IAAI,CACL,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,YAAY,CAAC,OAAO,EAAE,CAAC;gBACzB,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,EAAE,CAAC;gBACpB,6BAA6B;gBAC7B,WAAW,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAC/C,OAAO,CAAC,KAAK,EACb,QAAQ,EACR,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,iEAAiE;gBACjE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC1B,4DAA4D;oBAC5D,OAAO,EAAE,IAAA,wCAAuB,EAC9B,mCAAkB,CAAC,qCAAqC,CACzD;iBACF,CAAC,CAAC;YACL,CAAC;YAED,yDAAyD;YACzD,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,CAAC;gBACxD,OAAO,CACL,GAAG;qBACA,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI;gBACH,4DAA4D;gBAC5D,IAAA,wCAAuB,EACrB,mCAAkB,CAAC,6BAA6B,CACjD,CACF,CACJ,CAAC;YACJ,CAAC;YAED,0EAA0E;YAC1E,GAAG,CAAC,SAAS,GAAG,WAAW,CAAC,UAAU,CAAC;YACvC,6EAA6E;YAC7E,uDAAuD;YAEvD,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC,EACD;YACE,SAAS,EAAE,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,kBAAkB;SAC5D,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IACE,GAAG,YAAY,wCAAuB;YACtC,GAAG,YAAY,6BAAoB,EACnC,CAAC;YACD,0CAA0C;YAC1C,OAAO,CAAC,KAAK,CACX,+BAA+B,EAC/B,UAAU,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,SAAS,CAAC,CAAC,OAAO,CACjD,SAAS,EACT,EAAE,CACH,gBAAgB,CAAC,CAAC,QAAQ,gBAAgB,CAAC,CAAC,QAAQ,EAAE,CACxD,CAAC;YACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,4DAA4D;gBAC5D,OAAO,EAAE,IAAA,wCAAuB,EAC9B,mCAAkB,CAAC,6BAA6B,CACjD;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,YAAY,GAChB,GAAG,YAAY,KAAK;YAClB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;YACrC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,YAAY,CAAC,CAAC;QACvE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,4DAA4D;YAC5D,OAAO,EAAE,IAAA,wCAAuB,EAC9B,mCAAkB,CAAC,sBAAsB,CAC1C;YACD,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/middlewares/authenticate-token.d.ts

@@ -1,24 +0,0 @@
-import { ITokenRole, ITokenUser } from '@digitaldefiance/suite-core-lib';
-import { NextFunction, Request, Response } from 'express';
-import { IncomingHttpHeaders } from 'http';
-import { Types } from 'mongoose';
-import { IApplication } from '../interfaces/application';
-import { IBaseDocument } from '../documents';
-import { Environment } from '../environment';
-import { IConstants } from '../interfaces';
-/**
- * Find the auth token in the headers
- * @param headers The headers
- * @returns The auth token
- */
-export declare function findAuthToken(headers: IncomingHttpHeaders): string | null;
-/**
- * Middleware to authenticate a token
- * @param application The application
- * @param req The request
- * @param res The response
- * @param next The next function
- * @returns The response
- */
-export declare function authenticateToken<I = Types.ObjectId, D extends Date = Date, TTokenRole extends ITokenRole<I, D> = ITokenRole<I, D>, TTokenUser extends ITokenUser = ITokenUser, TApplication extends IApplication<any, Types.ObjectId, IBaseDocument<any, Types.ObjectId>, Environment, IConstants> = IApplication<any, Types.ObjectId, IBaseDocument<any, Types.ObjectId>, Environment, IConstants>>(application: TApplication, req: Request, res: Response, next: NextFunction): Promise<Response>;
-//# sourceMappingURL=authenticate-token.d.ts.map

package/dist/middlewares/authenticate-token.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authenticate-token.d.ts","sourceRoot":"","sources":["../../src/middlewares/authenticate-token.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,UAAU,EACV,UAAU,EAEX,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAC3C,OAAO,EAAiB,KAAK,EAAE,MAAM,UAAU,CAAC;AAIhD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAKzD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,CASzE;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,CAAC,GAAG,KAAK,CAAC,QAAQ,EAClB,CAAC,SAAS,IAAI,GAAG,IAAI,EACrB,UAAU,SAAS,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,EACtD,UAAU,SAAS,UAAU,GAAG,UAAU,EAC1C,YAAY,SAAS,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,EAEpN,WAAW,EAAE,YAAY,EACzB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,QAAQ,CAAC,CA6FnB"}

package/dist/middlewares/authenticate-token.js

@@ -1,102 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.findAuthToken = findAuthToken;
-exports.authenticateToken = authenticateToken;
-const i18n_lib_1 = require("@digitaldefiance/i18n-lib");
-const suite_core_lib_1 = require("@digitaldefiance/suite-core-lib");
-const base_model_name_1 = require("../enumerations/base-model-name");
-const token_expired_1 = require("../errors/token-expired");
-const jwt_1 = require("../services/jwt");
-const request_user_1 = require("../services/request-user");
-const role_1 = require("../services/role");
-const utils_1 = require("../utils");
-/**
- * Find the auth token in the headers
- * @param headers The headers
- * @returns The auth token
- */
-function findAuthToken(headers) {
-    const authHeader = headers['Authorization'] || headers['authorization'];
-    if (authHeader && typeof authHeader === 'string') {
-        const parts = authHeader.split(' ');
-        if (parts.length === 2 && parts[0].toLowerCase() === 'bearer') {
-            return parts[1];
-        }
-    }
-    return null;
-}
-/**
- * Middleware to authenticate a token
- * @param application The application
- * @param req The request
- * @param res The response
- * @param next The next function
- * @returns The response
- */
-async function authenticateToken(application, req, res, next) {
-    const UserModel = application.getModel(base_model_name_1.BaseModelName.User);
-    const token = findAuthToken(req.headers);
-    if (token == null) {
-        return res
-            .status(401)
-            .send((0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_InvalidToken));
-    }
-    try {
-        return await (0, utils_1.withTransaction)(application.db.connection, application.environment.mongo.useTransactions, undefined, async (sess) => {
-            const jwtService = new jwt_1.JwtService(application);
-            const user = await jwtService.verifyToken(token);
-            if (user === null) {
-                return (res
-                    .status(403)
-                    .send(
-                // amazonq-ignore-next-line false positive, hardcoded string
-                (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_UserNotFound)));
-            }
-            const userDoc = await UserModel.findById(user.userId, {
-                password: 0,
-            })
-                .session(sess ?? null)
-                .exec();
-            if (!userDoc || userDoc.accountStatus !== suite_core_lib_1.AccountStatus.Active) {
-                return (res
-                    .status(403)
-                    .send(
-                // amazonq-ignore-next-line false positive, hardcoded string
-                (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_UserNotFound)));
-            }
-            const roleService = new role_1.RoleService(application);
-            const roles = await roleService.getUserRoles(userDoc._id, sess);
-            const tokenRoles = roleService.rolesToTokenRoles(roles);
-            req.user = request_user_1.RequestUserService.makeRequestUserDTO(userDoc, tokenRoles);
-            const context = i18n_lib_1.GlobalActiveContext.getInstance();
-            context.userLanguage = userDoc.siteLanguage ?? context.userLanguage;
-            context.setLanguageContextSpace('user');
-            context.userTimezone = new i18n_lib_1.Timezone(userDoc.timezone);
-            next();
-            return res;
-        }, {
-            timeoutMs: application.environment.mongo.transactionTimeout,
-        });
-    }
-    catch (err) {
-        if (err instanceof token_expired_1.TokenExpiredError) {
-            return res.status(401).send({
-                message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_TokenExpired),
-                error: err,
-            });
-        }
-        else if (err instanceof Error && err.name === 'JsonWebTokenError') {
-            return res.status(400).send({
-                message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_InvalidToken),
-                error: err,
-            });
-        }
-        else {
-            return res.status(500).send({
-                message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_UnexpectedError),
-                error: err,
-            });
-        }
-    }
-}
-//# sourceMappingURL=authenticate-token.js.map

package/dist/middlewares/authenticate-token.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authenticate-token.js","sourceRoot":"","sources":["../../src/middlewares/authenticate-token.ts"],"names":[],"mappings":";;AA4BA,sCASC;AAUD,8CAwGC;AAvJD,wDAA0E;AAC1E,oEAMyC;AAKzC,qEAAgE;AAChE,2DAA4D;AAE5D,yCAA6C;AAC7C,2DAA8D;AAC9D,2CAA+C;AAC/C,oCAA2C;AAK3C;;;;GAIG;AACH,SAAgB,aAAa,CAAC,OAA4B;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IACxE,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,iBAAiB,CAOrC,WAAyB,EACzB,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAgB,+BAAa,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,OAAO,GAAG;aACP,MAAM,CAAC,GAAG,CAAC;aACX,IAAI,CACH,IAAA,wCAAuB,EAAC,mCAAkB,CAAC,uBAAuB,CAAC,CACpE,CAAC;IACN,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,IAAA,uBAAe,EAC1B,WAAW,CAAC,EAAE,CAAC,UAAU,EACzB,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,eAAe,EAC7C,SAAS,EACT,KAAK,EAAE,IAA+B,EAAE,EAAE;YACxC,MAAM,UAAU,GAAG,IAAI,gBAAU,CAM/B,WAAW,CAAC,CAAC;YACf,MAAM,IAAI,GAAsB,MAAM,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,OAAO,CACL,GAAG;qBACA,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI;gBACH,4DAA4D;gBAC5D,IAAA,wCAAuB,EACrB,mCAAkB,CAAC,uBAAuB,CAC3C,CACF,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE;gBACpD,QAAQ,EAAE,CAAC;aACZ,CAAC;iBACC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;iBACrB,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,aAAa,KAAK,8BAAa,CAAC,MAAM,EAAE,CAAC;gBAC/D,OAAO,CACL,GAAG;qBACA,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI;gBACH,4DAA4D;gBAC5D,IAAA,wCAAuB,EACrB,mCAAkB,CAAC,uBAAuB,CAC3C,CACF,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAgB,IAAI,kBAAW,CAAC,WAAW,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChE,MAAM,UAAU,GAAG,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACxD,GAAG,CAAC,IAAI,GAAG,iCAAkB,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,8BAAmB,CAAC,WAAW,EAAE,CAAC;YAClD,OAAO,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC;YACpE,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,CAAC,YAAY,GAAG,IAAI,mBAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACtD,IAAI,EAAE,CAAC;YACP,OAAO,GAAG,CAAC;QACb,CAAC,EACD;YACE,SAAS,EAAE,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,kBAAkB;SAC5D,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iCAAiB,EAAE,CAAC;YACrC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,IAAA,wCAAuB,EAC9B,mCAAkB,CAAC,uBAAuB,CAC3C;gBACD,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACpE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,IAAA,wCAAuB,EAC9B,mCAAkB,CAAC,uBAAuB,CAC3C;gBACD,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,IAAA,wCAAuB,EAC9B,mCAAkB,CAAC,sBAAsB,CAC1C;gBACD,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/middlewares/cleanup-crypto.d.ts

@@ -1,7 +0,0 @@
-import { NextFunction, Request, Response } from 'express';
-/**
- * Middleware to clean up crypto resources after request completion
- * Should be used after crypto operations to ensure private keys are disposed
- */
-export declare function cleanupCrypto(req: Request, res: Response, next: NextFunction): void;
-//# sourceMappingURL=cleanup-crypto.d.ts.map

package/dist/middlewares/cleanup-crypto.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cleanup-crypto.d.ts","sourceRoot":"","sources":["../../src/middlewares/cleanup-crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE1D;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,IAAI,CA6BN"}

package/dist/middlewares/cleanup-crypto.js

@@ -1,32 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.cleanupCrypto = cleanupCrypto;
-/**
- * Middleware to clean up crypto resources after request completion
- * Should be used after crypto operations to ensure private keys are disposed
- */
-function cleanupCrypto(req, res, next) {
-    // Store original end function
-    const originalEnd = res.end;
-    // Override end function to cleanup before response
-    const wrappedEnd = function (...args) {
-        // Cleanup eciesUser if it exists
-        if (req.eciesUser) {
-            try {
-                // Dispose of sensitive cryptographic material
-                req.eciesUser.dispose();
-                req.eciesUser = undefined;
-            }
-            catch (error) {
-                console.error('Error cleaning up crypto resources:', error);
-            }
-        }
-        // Do not dispose system user here; it may be a process-wide singleton
-        // Call original end function
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        return originalEnd.apply(this, args);
-    };
-    res.end = wrappedEnd;
-    next();
-}
-//# sourceMappingURL=cleanup-crypto.js.map

package/dist/middlewares/cleanup-crypto.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cleanup-crypto.js","sourceRoot":"","sources":["../../src/middlewares/cleanup-crypto.ts"],"names":[],"mappings":";;AAMA,sCAiCC;AArCD;;;GAGG;AACH,SAAgB,aAAa,CAC3B,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,8BAA8B;IAC9B,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC;IAE5B,mDAAmD;IACnD,MAAM,UAAU,GAAG,UAA0B,GAAG,IAAe;QAC7D,iCAAiC;QACjC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,8CAA8C;gBAC9C,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACxB,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,sEAAsE;QAEtE,6BAA6B;QAC7B,8DAA8D;QAC9D,OAAQ,WAAoD,CAAC,KAAK,CAChE,IAAI,EACJ,IAAI,CACL,CAAC;IACJ,CAA8B,CAAC;IAE/B,GAAG,CAAC,GAAG,GAAG,UAAU,CAAC;IAErB,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/middlewares/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middlewares/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC"}

package/dist/middlewares/index.js

@@ -1,21 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./authenticate-crypto"), exports);
-__exportStar(require("./authenticate-token"), exports);
-__exportStar(require("./cleanup-crypto"), exports);
-__exportStar(require("./set-global-context-language"), exports);
-//# sourceMappingURL=index.js.map

package/dist/middlewares/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,uDAAqC;AACrC,mDAAiC;AACjC,gEAA8C"}

package/dist/middlewares/set-global-context-language.d.ts

@@ -1,3 +0,0 @@
-import { NextFunction, Request, Response } from 'express';
-export declare function setGlobalContextLanguageFromRequest(req: Request, res: Response, next: NextFunction): void;
-//# sourceMappingURL=set-global-context-language.d.ts.map

package/dist/middlewares/set-global-context-language.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"set-global-context-language.d.ts","sourceRoot":"","sources":["../../src/middlewares/set-global-context-language.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE1D,wBAAgB,mCAAmC,CACjD,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,QAYnB"}

package/dist/middlewares/set-global-context-language.js

@@ -1,14 +0,0 @@
-"use strict";
-// src/middlewares/injectMongooseContext.ts
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.setGlobalContextLanguageFromRequest = setGlobalContextLanguageFromRequest;
-const i18n_lib_1 = require("@digitaldefiance/i18n-lib");
-function setGlobalContextLanguageFromRequest(req, res, next) {
-    // Use fallback chain: accept-language -> user preference -> site default
-    const language = i18n_lib_1.LanguageRegistry.getMatchingLanguageCode(req.headers['accept-language'], req.user?.siteLanguage);
-    const context = i18n_lib_1.GlobalActiveContext.getInstance();
-    context.setUserLanguage(language);
-    context.setLanguageContextSpace('user');
-    next();
-}
-//# sourceMappingURL=set-global-context-language.js.map

package/dist/middlewares/set-global-context-language.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"set-global-context-language.js","sourceRoot":"","sources":["../../src/middlewares/set-global-context-language.ts"],"names":[],"mappings":";AAAA,2CAA2C;;AAQ3C,kFAeC;AArBD,wDAGmC;AAGnC,SAAgB,mCAAmC,CACjD,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,yEAAyE;IACzE,MAAM,QAAQ,GAAG,2BAAgB,CAAC,uBAAuB,CACvD,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAW,EACxC,GAAG,CAAC,IAAI,EAAE,YAAsB,CACjC,CAAC;IAEF,MAAM,OAAO,GAAG,8BAAmB,CAAC,WAAW,EAAE,CAAC;IAClD,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAClC,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/middlewares.d.ts

@@ -1,18 +0,0 @@
-import { Application } from 'express';
-import { IncomingMessage, ServerResponse } from 'http';
-export declare class Middlewares {
-    /**
-     * Initialize the middleware
-     * @param app - Express application
-     */
-    static init(app: Application, corsWhitelist: string[], csp: {
-        defaultSrc: (string | ((req: IncomingMessage, res: ServerResponse) => string))[];
-        imgSrc: (string | ((req: IncomingMessage, res: ServerResponse) => string))[];
-        connectSrc: (string | ((req: IncomingMessage, res: ServerResponse) => string))[];
-        scriptSrc: (string | ((req: IncomingMessage, res: ServerResponse) => string))[];
-        styleSrc: (string | ((req: IncomingMessage, res: ServerResponse) => string))[];
-        fontSrc: (string | ((req: IncomingMessage, res: ServerResponse) => string))[];
-        frameSrc: (string | ((req: IncomingMessage, res: ServerResponse) => string))[];
-    }): void;
-}
-//# sourceMappingURL=middlewares.d.ts.map

package/dist/middlewares.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"middlewares.d.ts","sourceRoot":"","sources":["../src/middlewares.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,WAAW,EAMZ,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AA8BvD,qBAAa,WAAW;IACtB;;;OAGG;WACW,IAAI,CAChB,GAAG,EAAE,WAAW,EAChB,aAAa,EAAE,MAAM,EAAE,EACvB,GAAG,EAAE;QACH,UAAU,EAAE,CACR,MAAM,GACN,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,MAAM,CAAC,CAC1D,EAAE,CAAC;QACJ,MAAM,EAAE,CACJ,MAAM,GACN,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,MAAM,CAAC,CAC1D,EAAE,CAAC;QACJ,UAAU,EAAE,CACR,MAAM,GACN,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,MAAM,CAAC,CAC1D,EAAE,CAAC;QACJ,SAAS,EAAE,CACP,MAAM,GACN,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,MAAM,CAAC,CAC1D,EAAE,CAAC;QACJ,QAAQ,EAAE,CACN,MAAM,GACN,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,MAAM,CAAC,CAC1D,EAAE,CAAC;QACJ,OAAO,EAAE,CACL,MAAM,GACN,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,MAAM,CAAC,CAC1D,EAAE,CAAC;QACJ,QAAQ,EAAE,CACN,MAAM,GACN,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,MAAM,CAAC,CAC1D,EAAE,CAAC;KACL,GACA,IAAI;CAwCR"}

package/dist/middlewares.js

@@ -1,76 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Middlewares = void 0;
-const cors_1 = __importDefault(require("cors"));
-const crypto_1 = require("crypto");
-const express_1 = require("express");
-const helmet_1 = __importDefault(require("helmet"));
-const corsOptionsDelegate = (corsWhitelist) => {
-    return (req, callback) => {
-        let corsOptions;
-        const origin = req.headers.origin;
-        if (origin &&
-            corsWhitelist.find((w) => {
-                if (w instanceof RegExp) {
-                    return w.test(origin);
-                }
-                else {
-                    return w === origin;
-                }
-            })) {
-            corsOptions = { origin: true };
-        }
-        else {
-            corsOptions = { origin: false };
-        }
-        callback(null, corsOptions);
-    };
-};
-class Middlewares {
-    /**
-     * Initialize the middleware
-     * @param app - Express application
-     */
-    static init(app, corsWhitelist, csp) {
-        // Helmet helps you secure your Express apps by setting various HTTP headers
-        // CSP nonce
-        app.use((req, res, next) => {
-            res.locals['cspNonce'] = (0, crypto_1.randomBytes)(32).toString('hex');
-            next();
-        });
-        app.use((0, helmet_1.default)({
-            contentSecurityPolicy: {
-                directives: {
-                    defaultSrc: ["'self'", ...csp.defaultSrc],
-                    imgSrc: ["'self'", 'data:', 'blob:', ...csp.imgSrc],
-                    connectSrc: ["'self'", ...csp.connectSrc],
-                    scriptSrc: [
-                        "'self'",
-                        //"'unsafe-inline'",
-                        "'strict-dynamic'",
-                        (req, res) => `'nonce-${res.locals['cspNonce']}'`,
-                        ...csp.scriptSrc,
-                    ],
-                    styleSrc: [
-                        "'self'",
-                        // "'unsafe-inline'",
-                        ...csp.styleSrc,
-                    ],
-                    fontSrc: ["'self'", ...csp.fontSrc],
-                    frameSrc: ["'self'", ...csp.frameSrc],
-                },
-            },
-        }));
-        // Enable CORS
-        app.use((0, cors_1.default)(corsOptionsDelegate(corsWhitelist)));
-        // Parse incoming requests with JSON payloads
-        app.use((0, express_1.json)());
-        // Parse incoming requests with urlencoded payloads
-        app.use((0, express_1.urlencoded)({ extended: true }));
-    }
-}
-exports.Middlewares = Middlewares;
-//# sourceMappingURL=middlewares.js.map

package/dist/middlewares.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"middlewares.js","sourceRoot":"","sources":["../src/middlewares.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AACxB,mCAAqC;AACrC,qCAOiB;AACjB,oDAA4B;AAG5B,MAAM,mBAAmB,GAAG,CAAC,aAAuB,EAAE,EAAE;IACtD,OAAO,CACL,GAAqB,EACrB,QAGS,EACT,EAAE;QACF,IAAI,WAA6B,CAAC;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IACE,MAAM;YACN,aAAa,CAAC,IAAI,CAAC,CAAC,CAAkB,EAAE,EAAE;gBACxC,IAAI,CAAC,YAAY,MAAM,EAAE,CAAC;oBACxB,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,MAAM,CAAC;gBACtB,CAAC;YACH,CAAC,CAAC,EACF,CAAC;YACD,WAAW,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAClC,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC9B,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAa,WAAW;IACtB;;;OAGG;IACI,MAAM,CAAC,IAAI,CAChB,GAAgB,EAChB,aAAuB,EACvB,GA6BC;QAED,4EAA4E;QAC5E,YAAY;QACZ,GAAG,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAC1D,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CACL,IAAA,gBAAM,EAAC;YACL,qBAAqB,EAAE;gBACrB,UAAU,EAAE;oBACV,UAAU,EAAE,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC;oBACzC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;oBACnD,UAAU,EAAE,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC;oBACzC,SAAS,EAAE;wBACT,QAAQ;wBACR,oBAAoB;wBACpB,kBAAkB;wBAClB,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE,CAC5C,UAAW,GAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG;wBACnD,GAAG,GAAG,CAAC,SAAS;qBACjB;oBACD,QAAQ,EAAE;wBACR,QAAQ;wBACR,qBAAqB;wBACrB,GAAG,GAAG,CAAC,QAAQ;qBAChB;oBACD,OAAO,EAAE,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;oBACnC,QAAQ,EAAE,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC;iBACtC;aACF;SACF,CAAC,CACH,CAAC;QACF,cAAc;QACd,GAAG,CAAC,GAAG,CAAC,IAAA,cAAI,EAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAClD,6CAA6C;QAC7C,GAAG,CAAC,GAAG,CAAC,IAAA,cAAI,GAAE,CAAC,CAAC;QAChB,mDAAmD;QACnD,GAAG,CAAC,GAAG,CAAC,IAAA,oBAAU,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;CACF;AA9ED,kCA8EC"}

package/dist/model-registry.d.ts

@@ -1,23 +0,0 @@
-import { Model, Document as MongooseDocument, Schema } from 'mongoose';
-import { IBaseDocument } from './documents/base';
-export type ModelRegistration<T, U extends IBaseDocument<T>> = {
-    modelName: string;
-    schema: Schema;
-    model: Model<U>;
-    collection: string;
-    discriminators?: unknown;
-};
-declare class ModelRegistry {
-    protected static _instance: ModelRegistry;
-    protected _models: Map<string, ModelRegistration<any, IBaseDocument<any>>>;
-    private constructor();
-    static get instance(): ModelRegistry;
-    register<T, U extends IBaseDocument<T>>(registration: ModelRegistration<T, U>): void;
-    get<T, U extends IBaseDocument<T>>(modelName: string): ModelRegistration<T, U>;
-    getTypedModel<TDoc extends MongooseDocument>(modelName: string): Model<TDoc>;
-    getTypedSchema<TDoc extends MongooseDocument>(modelName: string): Schema<TDoc>;
-    has(modelName: string): boolean;
-    list(): string[];
-}
-export { ModelRegistry };
-//# sourceMappingURL=model-registry.d.ts.map

package/dist/model-registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-registry.d.ts","sourceRoot":"","sources":["../src/model-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGjD,MAAM,MAAM,iBAAiB,CAAC,CAAC,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,IAAI;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,cAAM,aAAa;IACjB,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC;IAC1C,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAC9D;IAEZ,OAAO;IAEP,WAAkB,QAAQ,IAAI,aAAa,CAK1C;IAEM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,EAC3C,YAAY,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,GACpC,IAAI;IAOA,GAAG,CAAC,CAAC,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,GAChB,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC;IAQnB,aAAa,CAAC,IAAI,SAAS,gBAAgB,EAChD,SAAS,EAAE,MAAM,GAChB,KAAK,CAAC,IAAI,CAAC;IAQP,cAAc,CAAC,IAAI,SAAS,gBAAgB,EACjD,SAAS,EAAE,MAAM,GAChB,MAAM,CAAC,IAAI,CAAC;IAQR,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAI/B,IAAI,IAAI,MAAM,EAAE;CAGxB;AAED,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/model-registry.js

@@ -1,47 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ModelRegistry = void 0;
-const errors_1 = require("./errors");
-class ModelRegistry {
-    constructor() {
-        this._models = new Map();
-    }
-    static get instance() {
-        if (!ModelRegistry._instance) {
-            ModelRegistry._instance = new ModelRegistry();
-        }
-        return ModelRegistry._instance;
-    }
-    register(registration) {
-        this._models.set(registration.modelName, registration);
-    }
-    get(modelName) {
-        const result = this._models.get(modelName);
-        if (result === undefined) {
-            throw new errors_1.InvalidModelError(modelName);
-        }
-        return result;
-    }
-    getTypedModel(modelName) {
-        const result = this._models.get(modelName);
-        if (result === undefined) {
-            throw new errors_1.InvalidModelError(modelName);
-        }
-        return result.model;
-    }
-    getTypedSchema(modelName) {
-        const result = this._models.get(modelName);
-        if (result === undefined) {
-            throw new errors_1.InvalidModelError(modelName);
-        }
-        return result.schema;
-    }
-    has(modelName) {
-        return this._models.has(modelName);
-    }
-    list() {
-        return Array.from(this._models.keys());
-    }
-}
-exports.ModelRegistry = ModelRegistry;
-//# sourceMappingURL=model-registry.js.map

package/dist/model-registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-registry.js","sourceRoot":"","sources":["../src/model-registry.ts"],"names":[],"mappings":";;;AAEA,qCAA6C;AAU7C,MAAM,aAAa;IAKjB;QAHU,YAAO,GACf,IAAI,GAAG,EAAE,CAAC;IAEW,CAAC;IAEjB,MAAM,KAAK,QAAQ;QACxB,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;YAC7B,aAAa,CAAC,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;QAChD,CAAC;QACD,OAAO,aAAa,CAAC,SAAS,CAAC;IACjC,CAAC;IAEM,QAAQ,CACb,YAAqC;QAErC,IAAI,CAAC,OAAO,CAAC,GAAG,CACd,YAAY,CAAC,SAAS,EACtB,YAAuC,CACxC,CAAC;IACJ,CAAC;IAEM,GAAG,CACR,SAAiB;QAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAA4B,CAAC;QACtE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,0BAAiB,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,aAAa,CAClB,SAAiB;QAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,0BAAiB,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC,KAAoB,CAAC;IACrC,CAAC;IAEM,cAAc,CACnB,SAAiB;QAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,0BAAiB,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC,MAAsB,CAAC;IACvC,CAAC;IAEM,GAAG,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAEM,IAAI;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;CACF;AAEQ,sCAAa"}

package/dist/models/email-token.d.ts

@@ -1,11 +0,0 @@
-import { Connection, Schema } from 'mongoose';
-import { IEmailTokenDocument } from '../documents/email-token';
-import { BaseModelName } from '../enumerations';
-import { SchemaCollection } from '../enumerations/schema-collection';
-export declare function EmailTokenModel<TModelName extends string = BaseModelName, TCollection extends string = SchemaCollection>(connection: Connection, modelName?: TModelName, collection?: TCollection, schema?: Schema<IEmailTokenDocument>): import("mongoose").Model<IEmailTokenDocument, {}, {}, {}, import("mongoose").Document<unknown, {}, IEmailTokenDocument, {}, {}> & import("mongoose").Document<import("mongoose").Types.ObjectId, any, any, Record<string, any>, {}> & import("@digitaldefiance/suite-core-lib").IEmailTokenBase<import("mongoose").Types.ObjectId, Date, import("@digitaldefiance/suite-core-lib").EmailTokenType> & Required<{
-    _id: import("mongoose").Types.ObjectId;
-}> & {
-    __v: number;
-}, any>;
-export default EmailTokenModel;
-//# sourceMappingURL=email-token.d.ts.map

package/dist/models/email-token.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-token.d.ts","sourceRoot":"","sources":["../../src/models/email-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAGrE,wBAAgB,eAAe,CAC7B,UAAU,SAAS,MAAM,GAAG,aAAa,EACzC,WAAW,SAAS,MAAM,GAAG,gBAAgB,EAE7C,UAAU,EAAE,UAAU,EACtB,SAAS,GAAE,UAAmD,EAC9D,UAAU,GAAE,WAAwD,EACpE,MAAM,GAAE,MAAM,CAAC,mBAAmB,CAAoB;;;;QAGvD;AAED,eAAe,eAAe,CAAC"}

package/dist/models/email-token.js

@@ -1,11 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EmailTokenModel = EmailTokenModel;
-const enumerations_1 = require("../enumerations");
-const schema_collection_1 = require("../enumerations/schema-collection");
-const email_token_1 = require("../schemas/email-token");
-function EmailTokenModel(connection, modelName = enumerations_1.BaseModelName.EmailToken, collection = schema_collection_1.SchemaCollection.EmailToken, schema = email_token_1.EmailTokenSchema) {
-    return connection.model(modelName, schema, collection);
-}
-exports.default = EmailTokenModel;
-//# sourceMappingURL=email-token.js.map