@ever-gauzy/plugin-integration-plane-api 0.1.0

package/dist/modules/auth/auth.controller.js

@@ -0,0 +1,278 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AuthController_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const plugin_integration_plane_models_1 = require("@ever-gauzy/plugin-integration-plane-models");
+const auth_service_1 = require("./auth.service");
+const config_1 = require("../../config");
+const auth_guard_1 = require("./auth.guard");
+const dto_1 = require("../user/dto");
+let AuthController = AuthController_1 = class AuthController {
+    constructor(_authService) {
+        this._authService = _authService;
+        this.logger = new common_1.Logger(AuthController_1.name);
+    }
+    async checkExistingUser(input) {
+        return await this._authService.checkExistingUser(input);
+    }
+    async checkExistingUserSpaces(input) {
+        return await this._authService.checkExistingUser(input);
+    }
+    async getCsrfToken() {
+        return await this._authService.getCsrfToken();
+    }
+    async signIn(req, res, data, queryNextPath) {
+        return await this._authService.handleSignIn(req, res, data, queryNextPath);
+    }
+    async spacesSignIn(req, res, data, queryNextPath) {
+        return await this._authService.handleSignIn(req, res, data, queryNextPath, 'spaces');
+    }
+    async magicSignin(req, res, data, queryNextPath) {
+        return await this._authService.handleMagicSignIn(req, res, data, queryNextPath);
+    }
+    async spacesMagicSignin(req, res, data, queryNextPath) {
+        return await this._authService.handleMagicSignIn(req, res, data, queryNextPath, 'spaces');
+    }
+    async signout(res, req) {
+        (0, config_1.clearTokenChuncks)(req, res);
+        return res.redirect(req.headers.referer);
+    }
+    async spacesSignout(res, req) {
+        (0, config_1.clearTokenChuncks)(req, res);
+        return res.redirect(`${req.headers.referer}spaces`);
+    }
+    async signUp(req, res, data) {
+        var _a, _b;
+        try {
+            // 1. Attempt to register the new user
+            const user = await this._authService.signUp(data);
+            if (user) {
+                // 2. If registration is successful, sign in the user for onboarding process
+                const result = await this._authService.signIn({
+                    email: user.email,
+                    password: data.password
+                });
+                if (result.user) {
+                    // 3. Onboard the tenant using the user's email as the tenant name
+                    let tenant;
+                    try {
+                        tenant = await this._authService.onboardTenant({
+                            name: data.email.split('@')[0]
+                        }, result.token);
+                    }
+                    catch (error) {
+                        this.logger.error('Error when creating new Tenant', error instanceof Error ? error.stack : String(error));
+                    }
+                    // 4. Re-login to get fresh tokens with new tenant/role context
+                    // (the original refresh_token JWT is now stale after onboardTenant changed user's tenantId/roleId)
+                    let freshLogin = await this._authService.signIn({
+                        email: user.email,
+                        password: data.password
+                    });
+                    // 5. Create an organization for the tenant
+                    let organization;
+                    try {
+                        organization =
+                            await this._authService.signUpCreateOrganization({
+                                name: data.email.split('@')[0],
+                                currency: plugin_integration_plane_models_1.CurrenciesEnum.USD,
+                                tenantId: tenant.id
+                            }, freshLogin.token, tenant.id);
+                    }
+                    catch (error) {
+                        this.logger.error('Error when creating new default Organization', error);
+                    }
+                    // 6. Create an employee record for the user within the created organization
+                    try {
+                        await this._authService.signUpCreateEmployee({
+                            userId: user.id,
+                            organizationId: organization.id,
+                            tenantId: tenant.id
+                        }, freshLogin.token, tenant.id);
+                    }
+                    catch (error) {
+                        this.logger.error('Error when creating Employee', error instanceof Error ? error.stack : String(error));
+                    }
+                    // 7. Re-login again to get tokens that include the new employee context
+                    freshLogin = await this._authService.signIn({
+                        email: user.email,
+                        password: data.password
+                    });
+                    // 8. Split the token into chunks and set cookies for the user
+                    (0, config_1.clearTokenChuncks)(req, res);
+                    (0, config_1.sendTokenChunks)(freshLogin.token, res);
+                    // 9. Redirect the user to the onboarding page
+                    return res.redirect(`${req.headers.referer}onboarding`);
+                }
+            }
+            // 10. Redirect to error page if user registration fails
+            return res.redirect(`${req.headers.referer}?error_code=INVALID_EMAIL_SIGN_UP&error_message=INVALID_EMAIL_SIGN_UP`);
+        }
+        catch (error) {
+            // Log any errors that occur during the sign-up process
+            this.logger.error(`Sign-up error: ${((_b = (_a = error === null || error === void 0 ? void 0 : error.response) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.message) || error.message}`, error.stack);
+        }
+    }
+    async magicGenerate(input) {
+        return await this._authService.magicGenerate(input);
+    }
+    async spacesMagicGenerate(input) {
+        return await this._authService.magicGenerate(input);
+    }
+};
+exports.AuthController = AuthController;
+__decorate([
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({ summary: 'Check email' }),
+    (0, common_1.Post)('email-check'),
+    (0, auth_guard_1.Public)(),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [dto_1.CheckExistUserDTO]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "checkExistingUser", null);
+__decorate([
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({ summary: 'Check email' }),
+    (0, common_1.Post)('spaces/email-check'),
+    (0, auth_guard_1.Public)(),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [dto_1.CheckExistUserDTO]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "checkExistingUserSpaces", null);
+__decorate([
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({ summary: 'Get csrf_token' }),
+    (0, common_1.Get)('get-csrf-token'),
+    (0, auth_guard_1.Public)(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "getCsrfToken", null);
+__decorate([
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({ summary: 'Sign in' }),
+    (0, common_1.Post)('sign-in'),
+    (0, auth_guard_1.Public)(),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, common_1.Query)('next_path')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object, String]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "signIn", null);
+__decorate([
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({ summary: 'Sign in' }),
+    (0, common_1.Post)('spaces/sign-in'),
+    (0, auth_guard_1.Public)(),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, common_1.Query)('next_path')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object, String]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "spacesSignIn", null);
+__decorate([
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({ summary: 'Magic signin' }),
+    (0, common_1.Post)('magic-sign-in'),
+    (0, auth_guard_1.Public)(),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, common_1.Query)('next_path')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object, String]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "magicSignin", null);
+__decorate([
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({ summary: 'Magic signin' }),
+    (0, common_1.Post)('spaces/magic-sign-in'),
+    (0, auth_guard_1.Public)(),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, common_1.Query)('next_path')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object, String]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "spacesMagicSignin", null);
+__decorate([
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({ summary: 'Sign out' }),
+    (0, common_1.Post)('sign-out'),
+    (0, auth_guard_1.Public)(),
+    __param(0, (0, common_1.Res)()),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "signout", null);
+__decorate([
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({ summary: 'Spaces sign out' }),
+    (0, common_1.Post)('spaces/sign-out'),
+    (0, auth_guard_1.Public)(),
+    __param(0, (0, common_1.Res)()),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "spacesSignout", null);
+__decorate([
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({ summary: 'Sign up' }),
+    (0, common_1.Post)('sign-up'),
+    (0, auth_guard_1.Public)(),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __param(2, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "signUp", null);
+__decorate([
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({ summary: 'Magic generate' }),
+    (0, common_1.Post)('magic-generate'),
+    (0, auth_guard_1.Public)(),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [dto_1.UserEmailDTO]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "magicGenerate", null);
+__decorate([
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({ summary: 'Spaces magic generate' }),
+    (0, common_1.Post)('spaces/magic-generate'),
+    (0, auth_guard_1.Public)(),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [dto_1.UserEmailDTO]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "spacesMagicGenerate", null);
+exports.AuthController = AuthController = AuthController_1 = __decorate([
+    (0, swagger_1.ApiTags)('Authentication routes'),
+    (0, common_1.Controller)(),
+    __metadata("design:paramtypes", [auth_service_1.AuthService])
+], AuthController);
+//# sourceMappingURL=auth.controller.js.map

package/dist/modules/auth/auth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../../../../../packages/plugin-plane/src/modules/auth/auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAWwB;AACxB,6CAAwD;AAExD,iGAMqD;AACrD,iDAA6C;AAC7C,yCAAkE;AAClE,6CAAsC;AACtC,qCAA8D;AAKvD,IAAM,cAAc,sBAApB,MAAM,cAAc;IAG1B,YAA6B,YAAyB;QAAzB,iBAAY,GAAZ,YAAY,CAAa;QAFrC,WAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAED,CAAC;IAMpD,AAAN,KAAK,CAAC,iBAAiB,CAAS,KAAwB;QACvD,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IAMK,AAAN,KAAK,CAAC,uBAAuB,CAAS,KAAwB;QAC7D,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IAMK,AAAN,KAAK,CAAC,YAAY;QACjB,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;IAC/C,CAAC;IAMK,AAAN,KAAK,CAAC,MAAM,CACJ,GAAY,EACZ,GAAa,EACZ,IAA8C,EAClC,aAAsB;QAE1C,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAC1C,GAAG,EACH,GAAG,EACH,IAAI,EACJ,aAAa,CACb,CAAC;IACH,CAAC;IAMK,AAAN,KAAK,CAAC,YAAY,CACV,GAAY,EACZ,GAAa,EACZ,IAA8C,EAClC,aAAsB;QAE1C,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAC1C,GAAG,EACH,GAAG,EACH,IAAI,EACJ,aAAa,EACb,QAAQ,CACR,CAAC;IACH,CAAC;IAMK,AAAN,KAAK,CAAC,WAAW,CACT,GAAY,EACZ,GAAa,EACZ,IAA4D,EAChD,aAAsB;QAE1C,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAC/C,GAAG,EACH,GAAG,EACH,IAAI,EACJ,aAAa,CACb,CAAC;IACH,CAAC;IAMK,AAAN,KAAK,CAAC,iBAAiB,CACf,GAAY,EACZ,GAAa,EACZ,IAA4D,EAChD,aAAsB;QAE1C,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAC/C,GAAG,EACH,GAAG,EACH,IAAI,EACJ,aAAa,EACb,QAAQ,CACR,CAAC;IACH,CAAC;IAMK,AAAN,KAAK,CAAC,OAAO,CAAQ,GAAa,EAAS,GAAY;QACtD,IAAA,0BAAiB,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAQ,CAAC,CAAC;IAC3C,CAAC;IAMK,AAAN,KAAK,CAAC,aAAa,CAAQ,GAAa,EAAS,GAAY;QAC5D,IAAA,0BAAiB,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,QAAQ,CAAC,CAAC;IACrD,CAAC;IAMK,AAAN,KAAK,CAAC,MAAM,CACJ,GAAY,EACZ,GAAa,EACZ,IAAwB;;QAEhC,IAAI,CAAC;YACJ,sCAAsC;YACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAElD,IAAI,IAAI,EAAE,CAAC;gBACV,4EAA4E;gBAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;oBAC7C,KAAK,EAAE,IAAK,CAAC,KAAM;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACvB,CAAC,CAAC;gBAEH,IAAI,MAAO,CAAC,IAAI,EAAE,CAAC;oBAClB,kEAAkE;oBAClE,IAAI,MAAgB,CAAC;oBAErB,IAAI,CAAC;wBACJ,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAC7C;4BACC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;yBAC9B,EACD,MAAO,CAAC,KAAM,CACd,CAAC;oBACF,CAAC;oBAAC,OAAO,KAAU,EAAE,CAAC;wBACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,gCAAgC,EAChC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACpD,CAAC;oBACH,CAAC;oBAED,+DAA+D;oBAC/D,mGAAmG;oBACpG,IAAI,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;wBAC/C,KAAK,EAAE,IAAK,CAAC,KAAM;wBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBACvB,CAAC,CAAC;oBAEF,2CAA2C;oBAC3C,IAAI,YAA4B,CAAC;oBACjC,IAAI,CAAC;wBACJ,YAAY;4BACX,MAAM,IAAI,CAAC,YAAY,CAAC,wBAAwB,CAC/C;gCACC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gCAC9B,QAAQ,EAAE,gDAAc,CAAC,GAAG;gCAC/B,QAAQ,EAAE,MAAM,CAAC,EAAE;6BACnB,EACD,UAAW,CAAC,KAAM,EAClB,MAAM,CAAC,EAAE,CACN,CAAC;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,8CAA8C,EAC9C,KAAK,CACL,CAAC;oBACH,CAAC;oBAED,4EAA4E;oBAC5E,IAAI,CAAC;wBACJ,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAC3C;4BACC,MAAM,EAAE,IAAI,CAAC,EAAE;4BACf,cAAc,EAAE,YAAY,CAAC,EAAE;4BAC/B,QAAQ,EAAE,MAAO,CAAC,EAAE;yBACpB,EACD,UAAW,CAAC,KAAK,EACjB,MAAO,CAAC,EAAE,CACV,CAAC;oBACH,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,8BAA8B,EAC9B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACpD,CAAC;oBACH,CAAC;oBAED,wEAAwE;oBACzE,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;wBAC3C,KAAK,EAAE,IAAK,CAAC,KAAM;wBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBACtB,CAAC,CAAC;oBAEH,8DAA8D;oBAC9D,IAAA,0BAAiB,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBAC5B,IAAA,wBAAe,EAAC,UAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAExC,8CAA8C;oBAC9C,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,YAAY,CAAC,CAAC;gBACzD,CAAC;YACF,CAAC;YACD,wDAAwD;YACxD,OAAO,GAAG,CAAC,QAAQ,CAClB,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,uEAAuE,CAC7F,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACrB,uDAAuD;YACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,kBAAkB,CAAA,MAAA,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ,0CAAE,IAAI,0CAAE,OAAO,KAAI,KAAK,CAAC,OAAO,EAAE,EACnE,KAAK,CAAC,KAAK,CACX,CAAC;QACH,CAAC;IACF,CAAC;IAMK,AAAN,KAAK,CAAC,aAAa,CAAS,KAAmB;QAC9C,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAMK,AAAN,KAAK,CAAC,mBAAmB,CAAS,KAAmB;QACpD,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;CACD,CAAA;AAtPY,wCAAc;AASpB;IAJL,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACxC,IAAA,aAAI,EAAC,aAAa,CAAC;IACnB,IAAA,mBAAM,GAAE;IACgB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAQ,uBAAiB;;uDAEvD;AAMK;IAJL,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACxC,IAAA,aAAI,EAAC,oBAAoB,CAAC;IAC1B,IAAA,mBAAM,GAAE;IACsB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAQ,uBAAiB;;6DAE7D;AAMK;IAJL,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC3C,IAAA,YAAG,EAAC,gBAAgB,CAAC;IACrB,IAAA,mBAAM,GAAE;;;;kDAGR;AAMK;IAJL,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACpC,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,mBAAM,GAAE;IAEP,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;;;;4CAQnB;AAMK;IAJL,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACpC,IAAA,aAAI,EAAC,gBAAgB,CAAC;IACtB,IAAA,mBAAM,GAAE;IAEP,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;;;;kDASnB;AAMK;IAJL,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IACzC,IAAA,aAAI,EAAC,eAAe,CAAC;IACrB,IAAA,mBAAM,GAAE;IAEP,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;;;;iDAQnB;AAMK;IAJL,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IACzC,IAAA,aAAI,EAAC,sBAAsB,CAAC;IAC5B,IAAA,mBAAM,GAAE;IAEP,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;;;;uDASnB;AAMK;IAJL,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACrC,IAAA,aAAI,EAAC,UAAU,CAAC;IAChB,IAAA,mBAAM,GAAE;IACM,WAAA,IAAA,YAAG,GAAE,CAAA;IAAiB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;6CAGzC;AAMK;IAJL,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC5C,IAAA,aAAI,EAAC,iBAAiB,CAAC;IACvB,IAAA,mBAAM,GAAE;IACY,WAAA,IAAA,YAAG,GAAE,CAAA;IAAiB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;mDAG/C;AAMK;IAJL,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACpC,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,mBAAM,GAAE;IAEP,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;;;;4CAqGP;AAMK;IAJL,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC3C,IAAA,aAAI,EAAC,gBAAgB,CAAC;IACtB,IAAA,mBAAM,GAAE;IACY,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAQ,kBAAY;;mDAE9C;AAMK;IAJL,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;IAClD,IAAA,aAAI,EAAC,uBAAuB,CAAC;IAC7B,IAAA,mBAAM,GAAE;IACkB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAQ,kBAAY;;yDAEpD;yBArPW,cAAc;IAF1B,IAAA,iBAAO,EAAC,uBAAuB,CAAC;IAChC,IAAA,mBAAU,GAAE;qCAI+B,0BAAW;GAH1C,cAAc,CAsP1B"}

package/dist/modules/auth/auth.guard.d.ts

@@ -0,0 +1,9 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+export declare const IS_PUBLIC_KEY = "isPublic";
+export declare const Public: () => import("@nestjs/common").CustomDecorator<string>;
+export declare class AuthGuard implements CanActivate {
+    private reflector;
+    constructor(reflector: Reflector);
+    canActivate(context: ExecutionContext): boolean;
+}

package/dist/modules/auth/auth.guard.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthGuard = exports.Public = exports.IS_PUBLIC_KEY = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+exports.IS_PUBLIC_KEY = 'isPublic';
+const Public = () => (0, common_1.SetMetadata)(exports.IS_PUBLIC_KEY, true);
+exports.Public = Public;
+let AuthGuard = class AuthGuard {
+    constructor(reflector) {
+        this.reflector = reflector;
+    }
+    canActivate(context) {
+        // Check if route is marked as public
+        const isPublic = this.reflector.getAllAndOverride(exports.IS_PUBLIC_KEY, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        if (isPublic) {
+            return true;
+        }
+        const request = context.switchToHttp().getRequest();
+        const response = context.switchToHttp().getResponse();
+        const tokenChunks = [];
+        let index = 0;
+        while (request.cookies[`auth-proxy-plane-token-${index}`]) {
+            tokenChunks.push(request.cookies[`auth-proxy-plane-token-${index}`]);
+            index++;
+        }
+        const token = tokenChunks.join('');
+        if (!token) {
+            response.redirect(request.headers.referer);
+            return false;
+        }
+        return true;
+    }
+};
+exports.AuthGuard = AuthGuard;
+exports.AuthGuard = AuthGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.Reflector])
+], AuthGuard);
+//# sourceMappingURL=auth.guard.js.map

package/dist/modules/auth/auth.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.guard.js","sourceRoot":"","sources":["../../../../../../packages/plugin-plane/src/modules/auth/auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAKwB;AACxB,uCAAyC;AAG5B,QAAA,aAAa,GAAG,UAAU,CAAC;AACjC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAA,oBAAW,EAAC,qBAAa,EAAE,IAAI,CAAC,CAAC;AAAhD,QAAA,MAAM,UAA0C;AAGtD,IAAM,SAAS,GAAf,MAAM,SAAS;IACrB,YAAoB,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAE5C,WAAW,CAAC,OAAyB;QACpC,qCAAqC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,qBAAa,EAAE;YACzE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SAClB,CAAC,CAAC;QAEH,IAAI,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,WAAW,EAAY,CAAC;QAEhE,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,OAAO,OAAO,CAAC,OAAO,CAAC,0BAA0B,KAAK,EAAE,CAAC,EAAE,CAAC;YAC3D,WAAW,CAAC,IAAI,CACf,OAAO,CAAC,OAAO,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAClD,CAAC;YACF,KAAK,EAAE,CAAC;QACT,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAQ,CAAC,CAAC;YAC5C,OAAO,KAAK,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;CACD,CAAA;AApCY,8BAAS;oBAAT,SAAS;IADrB,IAAA,mBAAU,GAAE;qCAEmB,gBAAS;GAD5B,SAAS,CAoCrB"}

package/dist/modules/auth/auth.module.d.ts

@@ -0,0 +1,2 @@
+export declare class AuthModule {
+}

package/dist/modules/auth/auth.module.js

@@ -0,0 +1,30 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthModule = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const auth_service_1 = require("./auth.service");
+const auth_controller_1 = require("./auth.controller");
+const user_module_1 = require("../user/user.module");
+const employee_properties_module_1 = require("../employee-properties/employee-properties.module");
+let AuthModule = class AuthModule {
+};
+exports.AuthModule = AuthModule;
+exports.AuthModule = AuthModule = __decorate([
+    (0, common_1.Module)({
+        imports: [
+            core_1.RouterModule.register([{ path: '/auth', module: AuthModule }]),
+            user_module_1.UserModule,
+            employee_properties_module_1.EmployeePropertiesModule
+        ],
+        providers: [auth_service_1.AuthService],
+        controllers: [auth_controller_1.AuthController]
+    })
+], AuthModule);
+//# sourceMappingURL=auth.module.js.map

package/dist/modules/auth/auth.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../../../../../packages/plugin-plane/src/modules/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,uCAA4C;AAC5C,iDAA6C;AAC7C,uDAAmD;AACnD,qDAAiD;AACjD,kGAA6F;AAWtF,IAAM,UAAU,GAAhB,MAAM,UAAU;CAAG,CAAA;AAAb,gCAAU;qBAAV,UAAU;IATtB,IAAA,eAAM,EAAC;QACP,OAAO,EAAE;YACR,mBAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YAC9D,wBAAU;YACV,qDAAwB;SACxB;QACD,SAAS,EAAE,CAAC,0BAAW,CAAC;QACxB,WAAW,EAAE,CAAC,gCAAc,CAAC;KAC7B,CAAC;GACW,UAAU,CAAG"}

package/dist/modules/auth/auth.service.d.ts

@@ -0,0 +1,133 @@
+import { Request, Response } from 'express';
+import { IAuthResponse, ICheckUserExist, ID, IEmailInput, IEmployee, IEmployeeCreateInput, IMagicGenerateResponse, IOrganization, IOrganizationCreateInput, IPasswordInput, ITenant, ITenantCreateInput, IUser, IUserCodeInput, IUserEmailInput, IUserLoginInput, IUserRegisterInput } from '@ever-gauzy/plugin-integration-plane-models';
+import { ApiFetchService } from '../api-fetch/api-fetch.service';
+import { UserService } from '../user/user.service';
+import { EmployeePropertiesService } from '../employee-properties/employee-properties.service';
+export declare class AuthService extends ApiFetchService {
+    private readonly _userService;
+    private readonly _employeePropertiesService;
+    private readonly _serverFetchService;
+    constructor(_userService: UserService, _employeePropertiesService: EmployeePropertiesService, _serverFetchService: ApiFetchService);
+    private path;
+    /**
+     * Checks if a user exists based on their email. It sends a request to the email-check endpoint
+     * and determines the user's existence and the authentication method required.
+     *
+     * @param {IEmailInput & Partial<IPasswordInput>} input - The input containing the user's email and optionally their password.
+     * @returns {Promise<ICheckUserExist>} A promise resolving to an object indicating whether the user exists and the authentication status.
+     *
+     * @throws {Error} Logs the error and returns a default response if the API request fails.
+     */
+    checkExistingUser(input: IEmailInput & Partial<IPasswordInput>): Promise<ICheckUserExist>;
+    /**
+     * Authenticates a user by sending their login credentials to the server.
+     *
+     * @async
+     * @param {IUserLoginInput} credentials - The user's login credentials, including email and password.
+     * @returns {Promise<IAuthResponse | null>} A promise that resolves to the authentication response or `null` in case of an error.
+     *
+     * @throws {any} Returns the caught error if the API request fails.
+     */
+    signIn(credentials: IUserLoginInput): Promise<IAuthResponse | null>;
+    /**
+     * Handles the sign-in process including token management and redirection.
+     *
+     * @param {Request} req - The Express request object.
+     * @param {Response} res - The Express response object.
+     * @param {IUserLoginInput & { next_path?: string }} data - The login input data with optional next_path.
+     * @param {string} [queryNextPath] - Optional next path from query parameters.
+     * @returns {Promise<void>}
+     */
+    handleSignIn(req: Request, res: Response, data: IUserLoginInput & {
+        next_path?: string;
+    }, queryNextPath?: string, customRedirectPath?: string): Promise<void>;
+    /**
+     * Registers a new user by sending their details to the server.
+     *
+     * @param {IUserRegisterInput} input - The input containing the user's details.
+     * @returns {Promise<IUser>} A promise resolving to the created user object.
+     *
+     * @throws {BadRequestException} Throws an exception if the API request fails.
+     */
+    signUp(input: IUserRegisterInput): Promise<IUser>;
+    /**
+     * Generates a magic key for a user by sending their email to the server.
+     *
+     * @param {IUserEmailInput} input - The input containing the user's email.
+     * @returns {Promise<IMagicGenerateResponse>} A promise resolving to the magic key.
+     *
+     * @throws {BadRequestException} Throws an exception if the API request fails.
+     */
+    magicGenerate(input: IUserEmailInput): Promise<IMagicGenerateResponse>;
+    /**
+     * Confirms a magic signin by sending the user's email and code to the server.
+     *
+     * @param {IUserEmailInput & IUserCodeInput} input - The input containing the user's email and code.
+     * @returns {Promise<IUserSigninWorkspaceResponse>} A promise resolving to the user's signin workspace response.
+     *
+     * @throws {BadRequestException} Throws an exception if the API request fails.
+     */
+    magicSignin(input: IUserEmailInput & IUserCodeInput): Promise<IAuthResponse>;
+    /**
+     * Handles the magic sign-in process including token management and redirection.
+     *
+     * @param {Request} req - The Express request object.
+     * @param {Response} res - The Express response object.
+     * @param {IUserEmailInput & IUserCodeInput & { next_path?: string }} data - The magic sign-in input data with optional next_path.
+     * @param {string} [queryNextPath] - Optional next path from query parameters.
+     * @param {string} [customRedirectPath] - Optional custom redirect path.
+     * @returns {Promise<void>}
+     */
+    handleMagicSignIn(req: Request, res: Response, data: IUserEmailInput & IUserCodeInput & {
+        next_path?: string;
+    }, queryNextPath?: string, customRedirectPath?: string): Promise<void>;
+    /**
+     * Initiates the onboarding process for a new tenant by sending its details to the server.
+     *
+     * @param {ITenantCreateInput} input - The input containing the tenant's details.
+     * @param {string} token - The bearer token for authentication.
+     * @returns {Promise<ITenant>} A promise resolving to the created tenant object.
+     *
+     * @throws {BadRequestException} Throws an exception if the API request fails.
+     */
+    onboardTenant(input: ITenantCreateInput, token: string): Promise<ITenant>;
+    /**
+     * Refreshes the user's authentication token using a provided refresh token.
+     *
+     * @param {string} refreshToken - The refresh token to be used for obtaining a new token.
+     * @param {string} token - The bearer token for authentication.
+     * @returns {Promise<{ token: string } | null>} A promise resolving to an object containing the new token or `null` if the request fails.
+     *
+     * @throws {BadRequestException} Throws an exception if the API request fails.
+     */
+    refreshToken(refreshToken: string, token: string): Promise<{
+        token: string;
+    } | null>;
+    /**
+     * Creates a new organization by sending its details to the server.
+     *
+     * @param {IOrganizationCreateInput} input - The input containing the organization's details.
+     * @param {string} token - The bearer token for authentication.
+     * @returns {Promise<IOrganization>} A promise resolving to the created organization object.
+     *
+     * @throws {BadRequestException} Throws an exception if the API request fails.
+     */
+    signUpCreateOrganization(input: IOrganizationCreateInput, token: string, tenantId?: ID): Promise<IOrganization>;
+    /**
+     * Creates a new employee by sending their details to the server.
+     *
+     * @param {IEmployeeCreateInput} input - The input containing the employee's details.
+     * @param {string} token - The bearer token for authentication.
+     * @returns {Promise<IEmployee>} A promise resolving to the created employee object.
+     *
+     * @throws {BadRequestException} Throws an exception if the API request fails.
+     */
+    signUpCreateEmployee(input: IEmployeeCreateInput, token: string, tenantId?: ID): Promise<IEmployee>;
+    /**
+     * @description Get the CSRF token
+     * @returns {Promise<{ csrf_token: string }>} The CSRF token
+     */
+    getCsrfToken(): Promise<{
+        csrf_token: string;
+    }>;
+}