@fdm-monster/server 2.0.10 → 2.1.0

package/dist/controllers/auth.controller.js

@@ -1,234 +1,165 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "AuthController", {
-    enumerable: true,
-    get: function() {
-        return AuthController;
-    }
-});
-const _awilixexpress = require("awilix-express");
-const _runtimeexceptions = require("../exceptions/runtime.exceptions");
-const _serverconstants = require("../server.constants");
-const _authcontrollervalidation = require("./validation/auth-controller.validation");
-const _authenticate = require("../middleware/authenticate");
-const _settingsstore = require("../state/settings.store");
-const _loggerfactory = require("../handlers/logger-factory");
-const _express = require("express");
-const _userserviceinterface = require("../services/interfaces/user-service.interface");
-const _authserviceinterface = require("../services/interfaces/auth.service.interface");
-const _roleserviceinterface = require("../services/interfaces/role-service.interface");
-const _demomiddleware = require("../middleware/demo.middleware");
-const _configservice = require("../services/core/config.service");
-const _usercontrollervalidation = require("./validation/user-controller.validation");
-const _validators = require("../handlers/validators");
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-class AuthController {
-    authService;
-    settingsStore;
-    userService;
-    roleService;
-    configService;
-    logger;
-    constructor(loggerFactory, authService, settingsStore, userService, roleService, configService){
-        this.authService = authService;
-        this.settingsStore = settingsStore;
-        this.userService = userService;
-        this.roleService = roleService;
-        this.configService = configService;
-        this.logger = loggerFactory(AuthController.name);
-    }
-    async login(req, res) {
-        this.logger.debug(`Login attempt from IP ${req.ip} and user-agent ${req.headers["user-agent"]}`);
-        const tokens = await this.authService.loginUser(req.body.username, req.body.password);
-        return res.send(tokens);
-    }
-    async getLoginRequired(req, res) {
-        const loginRequired = await this.settingsStore.getLoginRequired();
-        const registration = this.settingsStore.isRegistrationEnabled();
-        let wizardState = this.settingsStore.getWizardState();
-        const isDemoMode = this.configService.isDemoMode();
-        wizardState = {
-            ...wizardState,
-            wizardCompleted: isDemoMode ? true : wizardState.wizardCompleted
-        };
-        res.send({
-            loginRequired,
-            registration,
-            wizardState,
-            isDemoMode
-        });
-    }
-    async verifyLogin(req, res) {
-        return res.send({
-            success: true
-        });
-    }
-    async needsPasswordChange(req, res) {
-        const registration = this.settingsStore.isRegistrationEnabled();
-        const isLoginRequired = await this.settingsStore.getLoginRequired();
-        if (!isLoginRequired) {
-            return res.send({
-                loginRequired: isLoginRequired,
-                registration,
-                needsPasswordChange: false,
-                authenticated: true
-            });
-        }
-        if (req.isAuthenticated()) {
-            return res.send({
-                loginRequired: isLoginRequired,
-                registration,
-                needsPasswordChange: req.user?.needsPasswordChange,
-                authenticated: true
-            });
-        }
-        return res.send({
-            loginRequired: isLoginRequired,
-            needsPasswordChange: null,
-            authenticated: false
-        });
-    }
-    async refreshLogin(req, res) {
-        const { refreshToken } = await (0, _validators.validateMiddleware)(req, _authcontrollervalidation.refreshTokenSchema);
-        this.logger.debug(`Refresh login attempt from IP ${req.ip} and user-agent ${req.headers["user-agent"]}`);
-        const idToken = await this.authService.renewLoginByRefreshToken(refreshToken);
-        return res.send({
-            token: idToken
-        });
-    }
-    async logout(req, res) {
-        const isLoginRequired = await this.settingsStore.getLoginRequired();
-        if (!isLoginRequired) {
-            return res.end();
-        }
-        const jwtToken = req.headers.authorization?.replace("Bearer ", "") || undefined;
-        const userId = req.user.id;
-        await this.authService.logoutUserId(userId, jwtToken);
-        res.end();
-    }
-    async register(req, res) {
-        let registrationEnabled = this.settingsStore.isRegistrationEnabled();
-        if (!registrationEnabled) {
-            throw new _runtimeexceptions.BadRequestException("Registration is disabled. Cant register user");
-        }
-        const { username, password } = await (0, _validators.validateMiddleware)(req, _usercontrollervalidation.registerUserSchema);
-        if (username.toLowerCase().includes("admin") || username.toLowerCase().includes("root") || username.toLowerCase() === "demo") {
-            throw new _runtimeexceptions.BadRequestException("Username is not allowed");
-        }
-        const roles = await this.roleService.getAppDefaultRoleNames();
-        const result = await this.userService.register({
-            username,
-            password,
-            roles,
-            needsPasswordChange: false,
-            isDemoUser: false,
-            isRootUser: false,
-            isVerified: false
-        });
-        const userDto = this.userService.toDto(result);
-        res.send(userDto);
-    }
-}
-_ts_decorate([
-    (0, _awilixexpress.POST)(),
-    (0, _awilixexpress.route)("/login"),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _express.Request === "undefined" ? Object : _express.Request,
-        typeof _express.Response === "undefined" ? Object : _express.Response
-    ]),
-    _ts_metadata("design:returntype", Promise)
+import { __exportAll } from "../_virtual/_rolldown/runtime.js";
+import { __decorateMetadata } from "../_virtual/_@oxc-project_runtime@0.127.0/helpers/decorateMetadata.js";
+import { __decorate } from "../_virtual/_@oxc-project_runtime@0.127.0/helpers/decorate.js";
+import { BadRequestException } from "../exceptions/runtime.exceptions.js";
+import { validateMiddleware } from "../handlers/validators.js";
+import { AppConstants } from "../server.constants.js";
+import { SettingsStore } from "../state/settings.store.js";
+import { authenticate } from "../middleware/authenticate.js";
+import { demoUserNotAllowed } from "../middleware/demo.middleware.js";
+import { refreshTokenSchema } from "./validation/auth-controller.validation.js";
+import { registerUserSchema } from "./validation/user-controller.validation.js";
+import { GET, POST, before, route } from "awilix-express";
+//#region src/controllers/auth.controller.ts
+var auth_controller_exports = /* @__PURE__ */ __exportAll({ AuthController: () => AuthController });
+var _ref, _AuthController;
+let AuthController = _AuthController = class AuthController {
+	logger;
+	constructor(loggerFactory, authService, settingsStore, userService, roleService, configService) {
+		this.authService = authService;
+		this.settingsStore = settingsStore;
+		this.userService = userService;
+		this.roleService = roleService;
+		this.configService = configService;
+		this.logger = loggerFactory(_AuthController.name);
+	}
+	async login(req, res) {
+		this.logger.debug(`Login attempt from IP ${req.ip} and user-agent ${req.headers["user-agent"]}`);
+		const tokens = await this.authService.loginUser(req.body.username, req.body.password);
+		return res.send(tokens);
+	}
+	async getLoginRequired(req, res) {
+		const loginRequired = await this.settingsStore.getLoginRequired();
+		const registration = this.settingsStore.isRegistrationEnabled();
+		let wizardState = this.settingsStore.getWizardState();
+		const isDemoMode = this.configService.isDemoMode();
+		wizardState = {
+			...wizardState,
+			wizardCompleted: isDemoMode ? true : wizardState.wizardCompleted
+		};
+		res.send({
+			loginRequired,
+			registration,
+			wizardState,
+			isDemoMode
+		});
+	}
+	async verifyLogin(req, res) {
+		return res.send({ success: true });
+	}
+	async needsPasswordChange(req, res) {
+		const registration = this.settingsStore.isRegistrationEnabled();
+		const isLoginRequired = await this.settingsStore.getLoginRequired();
+		if (!isLoginRequired) return res.send({
+			loginRequired: isLoginRequired,
+			registration,
+			needsPasswordChange: false,
+			authenticated: true
+		});
+		if (req.isAuthenticated()) return res.send({
+			loginRequired: isLoginRequired,
+			registration,
+			needsPasswordChange: req.user?.needsPasswordChange,
+			authenticated: true
+		});
+		return res.send({
+			loginRequired: isLoginRequired,
+			needsPasswordChange: null,
+			authenticated: false
+		});
+	}
+	async refreshLogin(req, res) {
+		const { refreshToken } = await validateMiddleware(req, refreshTokenSchema);
+		this.logger.debug(`Refresh login attempt from IP ${req.ip} and user-agent ${req.headers["user-agent"]}`);
+		const idToken = await this.authService.renewLoginByRefreshToken(refreshToken);
+		return res.send({ token: idToken });
+	}
+	async logout(req, res) {
+		if (!await this.settingsStore.getLoginRequired()) return res.end();
+		const jwtToken = req.headers.authorization?.replace("Bearer ", "") || void 0;
+		const userId = req.user.id;
+		await this.authService.logoutUserId(userId, jwtToken);
+		res.end();
+	}
+	async register(req, res) {
+		if (!this.settingsStore.isRegistrationEnabled()) throw new BadRequestException("Registration is disabled. Cant register user");
+		const { username, password } = await validateMiddleware(req, registerUserSchema);
+		if (username.toLowerCase().includes("admin") || username.toLowerCase().includes("root") || username.toLowerCase() === "demo") throw new BadRequestException("Username is not allowed");
+		const roles = await this.roleService.getAppDefaultRoleNames();
+		const result = await this.userService.register({
+			username,
+			password,
+			roles,
+			needsPasswordChange: false,
+			isDemoUser: false,
+			isRootUser: false,
+			isVerified: false
+		});
+		const userDto = this.userService.toDto(result);
+		res.send(userDto);
+	}
+};
+__decorate([
+	POST(),
+	route("/login"),
+	__decorateMetadata("design:type", Function),
+	__decorateMetadata("design:paramtypes", [Object, Object]),
+	__decorateMetadata("design:returntype", Promise)
 ], AuthController.prototype, "login", null);
-_ts_decorate([
-    (0, _awilixexpress.GET)(),
-    (0, _awilixexpress.route)("/login-required"),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _express.Request === "undefined" ? Object : _express.Request,
-        typeof _express.Response === "undefined" ? Object : _express.Response
-    ]),
-    _ts_metadata("design:returntype", Promise)
+__decorate([
+	GET(),
+	route("/login-required"),
+	__decorateMetadata("design:type", Function),
+	__decorateMetadata("design:paramtypes", [Object, Object]),
+	__decorateMetadata("design:returntype", Promise)
 ], AuthController.prototype, "getLoginRequired", null);
-_ts_decorate([
-    (0, _awilixexpress.POST)(),
-    (0, _awilixexpress.route)("/verify"),
-    (0, _awilixexpress.before)([
-        (0, _authenticate.authenticate)()
-    ]),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _express.Request === "undefined" ? Object : _express.Request,
-        typeof _express.Response === "undefined" ? Object : _express.Response
-    ]),
-    _ts_metadata("design:returntype", Promise)
+__decorate([
+	POST(),
+	route("/verify"),
+	before([authenticate()]),
+	__decorateMetadata("design:type", Function),
+	__decorateMetadata("design:paramtypes", [Object, Object]),
+	__decorateMetadata("design:returntype", Promise)
 ], AuthController.prototype, "verifyLogin", null);
-_ts_decorate([
-    (0, _awilixexpress.POST)(),
-    (0, _awilixexpress.route)("/needs-password-change"),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _express.Request === "undefined" ? Object : _express.Request,
-        typeof _express.Response === "undefined" ? Object : _express.Response
-    ]),
-    _ts_metadata("design:returntype", Promise)
+__decorate([
+	POST(),
+	route("/needs-password-change"),
+	__decorateMetadata("design:type", Function),
+	__decorateMetadata("design:paramtypes", [Object, Object]),
+	__decorateMetadata("design:returntype", Promise)
 ], AuthController.prototype, "needsPasswordChange", null);
-_ts_decorate([
-    (0, _awilixexpress.POST)(),
-    (0, _awilixexpress.route)("/refresh"),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _express.Request === "undefined" ? Object : _express.Request,
-        typeof _express.Response === "undefined" ? Object : _express.Response
-    ]),
-    _ts_metadata("design:returntype", Promise)
+__decorate([
+	POST(),
+	route("/refresh"),
+	__decorateMetadata("design:type", Function),
+	__decorateMetadata("design:paramtypes", [Object, Object]),
+	__decorateMetadata("design:returntype", Promise)
 ], AuthController.prototype, "refreshLogin", null);
-_ts_decorate([
-    (0, _awilixexpress.POST)(),
-    (0, _awilixexpress.route)("/logout"),
-    (0, _awilixexpress.before)([
-        (0, _authenticate.authenticate)()
-    ]),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _express.Request === "undefined" ? Object : _express.Request,
-        typeof _express.Response === "undefined" ? Object : _express.Response
-    ]),
-    _ts_metadata("design:returntype", Promise)
+__decorate([
+	POST(),
+	route("/logout"),
+	before([authenticate()]),
+	__decorateMetadata("design:type", Function),
+	__decorateMetadata("design:paramtypes", [Object, Object]),
+	__decorateMetadata("design:returntype", Promise)
 ], AuthController.prototype, "logout", null);
-_ts_decorate([
-    (0, _awilixexpress.POST)(),
-    (0, _awilixexpress.route)("/register"),
-    (0, _awilixexpress.before)([
-        _demomiddleware.demoUserNotAllowed
-    ]),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _express.Request === "undefined" ? Object : _express.Request,
-        typeof _express.Response === "undefined" ? Object : _express.Response
-    ]),
-    _ts_metadata("design:returntype", Promise)
+__decorate([
+	POST(),
+	route("/register"),
+	before([demoUserNotAllowed]),
+	__decorateMetadata("design:type", Function),
+	__decorateMetadata("design:paramtypes", [Object, Object]),
+	__decorateMetadata("design:returntype", Promise)
 ], AuthController.prototype, "register", null);
-AuthController = _ts_decorate([
-    (0, _awilixexpress.route)(_serverconstants.AppConstants.apiRoute + "/auth"),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _loggerfactory.ILoggerFactory === "undefined" ? Object : _loggerfactory.ILoggerFactory,
-        typeof _authserviceinterface.IAuthService === "undefined" ? Object : _authserviceinterface.IAuthService,
-        typeof _settingsstore.SettingsStore === "undefined" ? Object : _settingsstore.SettingsStore,
-        typeof _userserviceinterface.IUserService === "undefined" ? Object : _userserviceinterface.IUserService,
-        typeof _roleserviceinterface.IRoleService === "undefined" ? Object : _roleserviceinterface.IRoleService,
-        typeof _configservice.IConfigService === "undefined" ? Object : _configservice.IConfigService
-    ])
-], AuthController);
+AuthController = _AuthController = __decorate([route(AppConstants.apiRoute + "/auth"), __decorateMetadata("design:paramtypes", [
+	Object,
+	Object,
+	typeof (_ref = typeof SettingsStore !== "undefined" && SettingsStore) === "function" ? _ref : Object,
+	Object,
+	Object,
+	Object
+])], AuthController);
+//#endregion
+export { AuthController, auth_controller_exports };
 
 //# sourceMappingURL=auth.controller.js.map

package/dist/controllers/auth.controller.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/controllers/auth.controller.ts"],"names":["AuthController","logger","loggerFactory","authService","settingsStore","userService","roleService","configService","name","login","req","res","debug","ip","headers","tokens","loginUser","body","username","password","send","getLoginRequired","loginRequired","registration","isRegistrationEnabled","wizardState","getWizardState","isDemoMode","wizardCompleted","verifyLogin","success","needsPasswordChange","isLoginRequired","authenticated","isAuthenticated","user","refreshLogin","refreshToken","validateMiddleware","refreshTokenSchema","idToken","renewLoginByRefreshToken","token","logout","end","jwtToken","authorization","replace","undefined","userId","id","logoutUserId","register","registrationEnabled","BadRequestException","registerUserSchema","toLowerCase","includes","roles","getAppDefaultRoleNames","result","isDemoUser","isRootUser","isVerified","userDto","toDto","authenticate","demoUserNotAllowed","AppConstants","apiRoute"],"mappings":";;;;+BAkBaA;;;eAAAA;;;+BAlB4B;mCACL;iCACP;0CACM;8BACN;+BACC;+BACC;yBAEG;sCACL;sCACA;sCACA;gCACM;+BACJ;0CACI;4BACA;;;;;;;;;;AAG5B,MAAMA;;;;;;IACXC,OAAsB;IAEtB,YACEC,aAA6B,EAC7B,AAAiBC,WAAyB,EAC1C,AAAiBC,aAA4B,EAC7C,AAAiBC,WAAyB,EAC1C,AAAiBC,WAAyB,EAC1C,AAAiBC,aAA6B,CAC9C;aALiBJ,cAAAA;aACAC,gBAAAA;aACAC,cAAAA;aACAC,cAAAA;aACAC,gBAAAA;QAEjB,IAAI,CAACN,MAAM,GAAGC,cAAcF,eAAeQ,IAAI;IACjD;IAEA,MAEMC,MAAMC,GAAY,EAAEC,GAAa,EAAE;QACvC,IAAI,CAACV,MAAM,CAACW,KAAK,CAAC,CAAC,sBAAsB,EAAEF,IAAIG,EAAE,CAAC,gBAAgB,EAAEH,IAAII,OAAO,CAAC,aAAa,EAAE;QAC/F,MAAMC,SAAS,MAAM,IAAI,CAACZ,WAAW,CAACa,SAAS,CAACN,IAAIO,IAAI,CAACC,QAAQ,EAAER,IAAIO,IAAI,CAACE,QAAQ;QACpF,OAAOR,IAAIS,IAAI,CAACL;IAClB;IAEA,MAEMM,iBAAiBX,GAAY,EAAEC,GAAa,EAAE;QAClD,MAAMW,gBAAgB,MAAM,IAAI,CAAClB,aAAa,CAACiB,gBAAgB;QAC/D,MAAME,eAAe,IAAI,CAACnB,aAAa,CAACoB,qBAAqB;QAC7D,IAAIC,cAAc,IAAI,CAACrB,aAAa,CAACsB,cAAc;QACnD,MAAMC,aAAa,IAAI,CAACpB,aAAa,CAACoB,UAAU;QAChDF,cAAc;YACZ,GAAGA,WAAW;YACdG,iBAAiBD,aAAa,OAAOF,YAAYG,eAAe;QAClE;QACAjB,IAAIS,IAAI,CAAC;YAAEE;YAAeC;YAAcE;YAAaE;QAAW;IAClE;IAEA,MAGME,YAAYnB,GAAY,EAAEC,GAAa,EAAE;QAC7C,OAAOA,IAAIS,IAAI,CAAC;YAAEU,SAAS;QAAK;IAClC;IAEA,MAEMC,oBAAoBrB,GAAY,EAAEC,GAAa,EAAE;QACrD,MAAMY,eAAe,IAAI,CAACnB,aAAa,CAACoB,qBAAqB;QAC7D,MAAMQ,kBAAkB,MAAM,IAAI,CAAC5B,aAAa,CAACiB,gBAAgB;QACjE,IAAI,CAACW,iBAAiB;YACpB,OAAOrB,IAAIS,IAAI,CAAC;gBACdE,eAAeU;gBACfT;gBACAQ,qBAAqB;gBACrBE,eAAe;YACjB;QACF;QAEA,IAAIvB,IAAIwB,eAAe,IAAI;YACzB,OAAOvB,IAAIS,IAAI,CAAC;gBACdE,eAAeU;gBACfT;gBACAQ,qBAAqBrB,IAAIyB,IAAI,EAAEJ;gBAC/BE,eAAe;YACjB;QACF;QAEA,OAAOtB,IAAIS,IAAI,CAAC;YACdE,eAAeU;YACfD,qBAAqB;YACrBE,eAAe;QACjB;IACF;IAEA,MAEMG,aAAa1B,GAAY,EAAEC,GAAa,EAAE;QAC9C,MAAM,EAAE0B,YAAY,EAAE,GAAG,MAAMC,IAAAA,8BAAkB,EAAC5B,KAAK6B,4CAAkB;QACzE,IAAI,CAACtC,MAAM,CAACW,KAAK,CAAC,CAAC,8BAA8B,EAAEF,IAAIG,EAAE,CAAC,gBAAgB,EAAEH,IAAII,OAAO,CAAC,aAAa,EAAE;QACvG,MAAM0B,UAAU,MAAM,IAAI,CAACrC,WAAW,CAACsC,wBAAwB,CAACJ;QAChE,OAAO1B,IAAIS,IAAI,CAAC;YAAEsB,OAAOF;QAAQ;IACnC;IAEA,MAGMG,OAAOjC,GAAY,EAAEC,GAAa,EAAE;QACxC,MAAMqB,kBAAkB,MAAM,IAAI,CAAC5B,aAAa,CAACiB,gBAAgB;QACjE,IAAI,CAACW,iBAAiB;YACpB,OAAOrB,IAAIiC,GAAG;QAChB;QAGA,MAAMC,WAAWnC,IAAII,OAAO,CAACgC,aAAa,EAAEC,QAAQ,WAAW,OAAOC;QACtE,MAAMC,SAASvC,IAAIyB,IAAI,CAAEe,EAAE;QAC3B,MAAM,IAAI,CAAC/C,WAAW,CAACgD,YAAY,CAACF,QAAQJ;QAC5ClC,IAAIiC,GAAG;IACT;IAEA,MAGMQ,SAAS1C,GAAY,EAAEC,GAAa,EAAE;QAC1C,IAAI0C,sBAAsB,IAAI,CAACjD,aAAa,CAACoB,qBAAqB;QAClE,IAAI,CAAC6B,qBAAqB;YACxB,MAAM,IAAIC,sCAAmB,CAAC;QAChC;QACA,MAAM,EAAEpC,QAAQ,EAAEC,QAAQ,EAAE,GAAG,MAAMmB,IAAAA,8BAAkB,EAAC5B,KAAK6C,4CAAkB;QAC/E,IACErC,SAASsC,WAAW,GAAGC,QAAQ,CAAC,YAChCvC,SAASsC,WAAW,GAAGC,QAAQ,CAAC,WAChCvC,SAASsC,WAAW,OAAO,QAC3B;YACA,MAAM,IAAIF,sCAAmB,CAAC;QAChC;QAEA,MAAMI,QAAQ,MAAM,IAAI,CAACpD,WAAW,CAACqD,sBAAsB;QAC3D,MAAMC,SAAS,MAAM,IAAI,CAACvD,WAAW,CAAC+C,QAAQ,CAAC;YAC7ClC;YACAC;YACAuC;YACA3B,qBAAqB;YACrB8B,YAAY;YACZC,YAAY;YAEZC,YAAY;QACd;QACA,MAAMC,UAAU,IAAI,CAAC3D,WAAW,CAAC4D,KAAK,CAACL;QACvCjD,IAAIS,IAAI,CAAC4C;IACX;AACF;;;;;;;;;;;;;;;;;;;;;;;;;QA3FWE,IAAAA,0BAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA8CZA,IAAAA,0BAAY;;;;;;;;;;;;;QAgBZC,kCAAkB;;;;;;;;;;8BArGtBC,6BAAY,CAACC,QAAQ,GAAG"}
+{"version":3,"file":"auth.controller.js","names":[],"sources":["../../src/controllers/auth.controller.ts"],"sourcesContent":["import { before, GET, POST, route } from \"awilix-express\";\nimport { BadRequestException } from \"@/exceptions/runtime.exceptions\";\nimport { AppConstants } from \"@/server.constants\";\nimport { refreshTokenSchema } from \"./validation/auth-controller.validation\";\nimport { authenticate } from \"@/middleware/authenticate\";\nimport { SettingsStore } from \"@/state/settings.store\";\nimport type { ILoggerFactory } from \"@/handlers/logger-factory\";\nimport { LoggerService } from \"@/handlers/logger\";\nimport type { Request, Response } from \"express\";\nimport type { IUserService } from \"@/services/interfaces/user-service.interface\";\nimport type { IAuthService } from \"@/services/interfaces/auth.service.interface\";\nimport type { IRoleService } from \"@/services/interfaces/role-service.interface\";\nimport { demoUserNotAllowed } from \"@/middleware/demo.middleware\";\nimport type { IConfigService } from \"@/services/core/config.service\";\nimport { registerUserSchema } from \"@/controllers/validation/user-controller.validation\";\nimport { validateMiddleware } from \"@/handlers/validators\";\n\n@route(AppConstants.apiRoute + \"/auth\")\nexport class AuthController {\n  logger: LoggerService;\n\n  constructor(\n    loggerFactory: ILoggerFactory,\n    private readonly authService: IAuthService,\n    private readonly settingsStore: SettingsStore,\n    private readonly userService: IUserService,\n    private readonly roleService: IRoleService,\n    private readonly configService: IConfigService,\n  ) {\n    this.logger = loggerFactory(AuthController.name);\n  }\n\n  @POST()\n  @route(\"/login\")\n  async login(req: Request, res: Response) {\n    this.logger.debug(`Login attempt from IP ${req.ip} and user-agent ${req.headers[\"user-agent\"]}`);\n    const tokens = await this.authService.loginUser(req.body.username, req.body.password);\n    return res.send(tokens);\n  }\n\n  @GET()\n  @route(\"/login-required\")\n  async getLoginRequired(req: Request, res: Response) {\n    const loginRequired = await this.settingsStore.getLoginRequired();\n    const registration = this.settingsStore.isRegistrationEnabled();\n    let wizardState = this.settingsStore.getWizardState();\n    const isDemoMode = this.configService.isDemoMode();\n    wizardState = {\n      ...wizardState,\n      wizardCompleted: isDemoMode ? true : wizardState.wizardCompleted,\n    };\n    res.send({ loginRequired, registration, wizardState, isDemoMode });\n  }\n\n  @POST()\n  @route(\"/verify\")\n  @before([authenticate()])\n  async verifyLogin(req: Request, res: Response) {\n    return res.send({ success: true });\n  }\n\n  @POST()\n  @route(\"/needs-password-change\")\n  async needsPasswordChange(req: Request, res: Response) {\n    const registration = this.settingsStore.isRegistrationEnabled();\n    const isLoginRequired = await this.settingsStore.getLoginRequired();\n    if (!isLoginRequired) {\n      return res.send({\n        loginRequired: isLoginRequired,\n        registration,\n        needsPasswordChange: false,\n        authenticated: true,\n      });\n    }\n\n    if (req.isAuthenticated()) {\n      return res.send({\n        loginRequired: isLoginRequired,\n        registration,\n        needsPasswordChange: req.user?.needsPasswordChange,\n        authenticated: true,\n      });\n    }\n\n    return res.send({\n      loginRequired: isLoginRequired,\n      needsPasswordChange: null,\n      authenticated: false,\n    });\n  }\n\n  @POST()\n  @route(\"/refresh\")\n  async refreshLogin(req: Request, res: Response) {\n    const { refreshToken } = await validateMiddleware(req, refreshTokenSchema);\n    this.logger.debug(`Refresh login attempt from IP ${req.ip} and user-agent ${req.headers[\"user-agent\"]}`);\n    const idToken = await this.authService.renewLoginByRefreshToken(refreshToken);\n    return res.send({ token: idToken });\n  }\n\n  @POST()\n  @route(\"/logout\")\n  @before([authenticate()])\n  async logout(req: Request, res: Response) {\n    const isLoginRequired = await this.settingsStore.getLoginRequired();\n    if (!isLoginRequired) {\n      return res.end();\n    }\n\n    // Get token from header\n    const jwtToken = req.headers.authorization?.replace(\"Bearer \", \"\") || undefined;\n    const userId = req.user!.id;\n    await this.authService.logoutUserId(userId, jwtToken);\n    res.end();\n  }\n\n  @POST()\n  @route(\"/register\")\n  @before([demoUserNotAllowed])\n  async register(req: Request, res: Response) {\n    let registrationEnabled = this.settingsStore.isRegistrationEnabled();\n    if (!registrationEnabled) {\n      throw new BadRequestException(\"Registration is disabled. Cant register user\");\n    }\n    const { username, password } = await validateMiddleware(req, registerUserSchema);\n    if (\n      username.toLowerCase().includes(\"admin\") ||\n      username.toLowerCase().includes(\"root\") ||\n      username.toLowerCase() === \"demo\"\n    ) {\n      throw new BadRequestException(\"Username is not allowed\");\n    }\n\n    const roles = await this.roleService.getAppDefaultRoleNames();\n    const result = await this.userService.register({\n      username,\n      password,\n      roles,\n      needsPasswordChange: false,\n      isDemoUser: false,\n      isRootUser: false,\n      // An admin needs to verify the user first\n      isVerified: false,\n    });\n    const userDto = this.userService.toDto(result);\n    res.send(userDto);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAkBO,IAAA,iBAAA,kBAAA,MAAM,eAAe;CAC1B;CAEA,YACE,eACA,aACA,eACA,aACA,aACA,eACA;AALiB,OAAA,cAAA;AACA,OAAA,gBAAA;AACA,OAAA,cAAA;AACA,OAAA,cAAA;AACA,OAAA,gBAAA;AAEjB,OAAK,SAAS,cAAA,gBAA6B,KAAK;;CAGlD,MAEM,MAAM,KAAc,KAAe;AACvC,OAAK,OAAO,MAAM,yBAAyB,IAAI,GAAG,kBAAkB,IAAI,QAAQ,gBAAgB;EAChG,MAAM,SAAS,MAAM,KAAK,YAAY,UAAU,IAAI,KAAK,UAAU,IAAI,KAAK,SAAS;AACrF,SAAO,IAAI,KAAK,OAAO;;CAGzB,MAEM,iBAAiB,KAAc,KAAe;EAClD,MAAM,gBAAgB,MAAM,KAAK,cAAc,kBAAkB;EACjE,MAAM,eAAe,KAAK,cAAc,uBAAuB;EAC/D,IAAI,cAAc,KAAK,cAAc,gBAAgB;EACrD,MAAM,aAAa,KAAK,cAAc,YAAY;AAClD,gBAAc;GACZ,GAAG;GACH,iBAAiB,aAAa,OAAO,YAAY;GAClD;AACD,MAAI,KAAK;GAAE;GAAe;GAAc;GAAa;GAAY,CAAC;;CAGpE,MAGM,YAAY,KAAc,KAAe;AAC7C,SAAO,IAAI,KAAK,EAAE,SAAS,MAAM,CAAC;;CAGpC,MAEM,oBAAoB,KAAc,KAAe;EACrD,MAAM,eAAe,KAAK,cAAc,uBAAuB;EAC/D,MAAM,kBAAkB,MAAM,KAAK,cAAc,kBAAkB;AACnE,MAAI,CAAC,gBACH,QAAO,IAAI,KAAK;GACd,eAAe;GACf;GACA,qBAAqB;GACrB,eAAe;GAChB,CAAC;AAGJ,MAAI,IAAI,iBAAiB,CACvB,QAAO,IAAI,KAAK;GACd,eAAe;GACf;GACA,qBAAqB,IAAI,MAAM;GAC/B,eAAe;GAChB,CAAC;AAGJ,SAAO,IAAI,KAAK;GACd,eAAe;GACf,qBAAqB;GACrB,eAAe;GAChB,CAAC;;CAGJ,MAEM,aAAa,KAAc,KAAe;EAC9C,MAAM,EAAE,iBAAiB,MAAM,mBAAmB,KAAK,mBAAmB;AAC1E,OAAK,OAAO,MAAM,iCAAiC,IAAI,GAAG,kBAAkB,IAAI,QAAQ,gBAAgB;EACxG,MAAM,UAAU,MAAM,KAAK,YAAY,yBAAyB,aAAa;AAC7E,SAAO,IAAI,KAAK,EAAE,OAAO,SAAS,CAAC;;CAGrC,MAGM,OAAO,KAAc,KAAe;AAExC,MAAI,CAAC,MADyB,KAAK,cAAc,kBAAkB,CAEjE,QAAO,IAAI,KAAK;EAIlB,MAAM,WAAW,IAAI,QAAQ,eAAe,QAAQ,WAAW,GAAG,IAAI,KAAA;EACtE,MAAM,SAAS,IAAI,KAAM;AACzB,QAAM,KAAK,YAAY,aAAa,QAAQ,SAAS;AACrD,MAAI,KAAK;;CAGX,MAGM,SAAS,KAAc,KAAe;AAE1C,MAAI,CADsB,KAAK,cAAc,uBACrB,CACtB,OAAM,IAAI,oBAAoB,+CAA+C;EAE/E,MAAM,EAAE,UAAU,aAAa,MAAM,mBAAmB,KAAK,mBAAmB;AAChF,MACE,SAAS,aAAa,CAAC,SAAS,QAAQ,IACxC,SAAS,aAAa,CAAC,SAAS,OAAO,IACvC,SAAS,aAAa,KAAK,OAE3B,OAAM,IAAI,oBAAoB,0BAA0B;EAG1D,MAAM,QAAQ,MAAM,KAAK,YAAY,wBAAwB;EAC7D,MAAM,SAAS,MAAM,KAAK,YAAY,SAAS;GAC7C;GACA;GACA;GACA,qBAAqB;GACrB,YAAY;GACZ,YAAY;GAEZ,YAAY;GACb,CAAC;EACF,MAAM,UAAU,KAAK,YAAY,MAAM,OAAO;AAC9C,MAAI,KAAK,QAAQ;;;;CAjHlB,MAAM;CACN,MAAM,SAAS;;;;;;CAOf,KAAK;CACL,MAAM,kBAAkB;;;;;;CAaxB,MAAM;CACN,MAAM,UAAU;CAChB,OAAO,CAAC,cAAc,CAAC,CAAC;;;;;;CAKxB,MAAM;CACN,MAAM,yBAAyB;;;;;;CA6B/B,MAAM;CACN,MAAM,WAAW;;;;;;CAQjB,MAAM;CACN,MAAM,UAAU;CAChB,OAAO,CAAC,cAAc,CAAC,CAAC;;;;;;CAcxB,MAAM;CACN,MAAM,YAAY;CAClB,OAAO,CAAC,mBAAmB,CAAC;;;;;+CArG9B,MAAM,aAAa,WAAW,QAAQ,EAAA,mBAAA,qBAAA"}