@fdm-monster/server 2.0.9 → 2.0.11

package/dist/server.env.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.env.ts"],"names":["ensurePortSet","fetchServerPort","setupEnvConfig","setupSentry","logger","Logger","environment","process","env","AppConstants","NODE_ENV_KEY","knownEnvNames","includes","newEnvName","defaultProductionEnv","warn","log","ensurePackageVersionSet","ENABLE_PROMETHEUS_METRICS","collectDefaultMetrics","register","removeSingleMetric","packageJsonVersion","require","packageJsonPath","version","VERSION_KEY","port","SERVER_PORT_KEY","Number","isNaN","parseInt","defaultServerPort","toString","sentryDsnToken","getEnvOrDefault","sentryCustomDsnToken","sentryCustomDsnDefault","Sentry","init","dsn","NODE_ENV","release","npm_package_version","enabled","isTestEnvironment","tracesSampleRate","isProductionEnvironment","on","e","message","errorSummary","error","captureException","docsUrl"],"mappings":";;;;;;;;;;;QAsEgBA;eAAAA;;QA/BAC;eAAAA;;QA/BAC;eAAAA;;QAyCAC;eAAAA;;;8DAjDQ;iCACK;wBACW;0BACoC;4BAC/C;yBACG;4BACgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEzC,SAASD;IACd,MAAME,SAAS,IAAIC,qBAAM,CAAC;IAC1B,MAAMC,cAAcC,QAAQC,GAAG,CAACC,6BAAY,CAACC,YAAY,CAAC;IAC1D,IAAI,CAACJ,eAAe,CAACG,6BAAY,CAACE,aAAa,CAACC,QAAQ,CAACN,cAAc;QACrE,MAAMO,aAAaJ,6BAAY,CAACK,oBAAoB;QACpDP,QAAQC,GAAG,CAACC,6BAAY,CAACC,YAAY,CAAC,GAAGG;QACzCT,OAAOW,IAAI,CAAC,CAAC,SAAS,EAAGT,YAAa,mDAAmD,EAAGO,YAAa;IAC3G,OAAO;QACLT,OAAOY,GAAG,CAAC,CAAC,mCAAmC,EAAGV,YAAa,CAAC,CAAC;IACnE;IAEAW;IACAd;IACAH;IAGA,IAAIO,QAAQC,GAAG,CAACC,6BAAY,CAACS,yBAAyB,CAAC,KAAK,QAAQ;QAClEC,IAAAA,iCAAqB,EAAC;YAAEC,UAAAA,oBAAQ;QAAC;QACjCA,oBAAQ,CAACC,kBAAkB,CAAC;IAC9B;AACF;AAEA,SAASJ;IACP,MAAMb,SAAS,IAAIC,qBAAM,CAAC;IAC1B,MAAMiB,qBAAqBC,QAAQC,IAAAA,wBAAe,KAAIC,OAAO;IAC7DlB,QAAQC,GAAG,CAACC,6BAAY,CAACiB,WAAW,CAAC,KAAKJ;IAE1ClB,OAAOY,GAAG,CAAC,CAAC,yBAAyB,EAAGT,QAAQC,GAAG,CAACC,6BAAY,CAACiB,WAAW,CAAC,EAAG;AAClF;AAGO,SAASzB;IACd,IAAI0B,OAAOpB,QAAQC,GAAG,CAACC,6BAAY,CAACmB,eAAe,CAAC;IACpD,IAAIC,OAAOC,KAAK,CAACD,OAAOE,QAAQ,CAACJ,QAAS;QAExCpB,QAAQC,GAAG,CAACC,6BAAY,CAACmB,eAAe,CAAC,GAAGnB,6BAAY,CAACuB,iBAAiB,CAACC,QAAQ;QACnFN,OAAOpB,QAAQC,GAAG,CAACC,6BAAY,CAACmB,eAAe,CAAC;IAClD;IACA,OAAOD;AACT;AAEO,SAASxB;IACd,MAAMC,SAAS,IAAIC,qBAAM,CAAC;IAC1B,MAAM6B,iBAAiBC,IAAAA,yBAAe,EAAC1B,6BAAY,CAAC2B,oBAAoB,EAAE3B,6BAAY,CAAC4B,sBAAsB;IAE7GC,MAAOC,IAAI,CAAC;QACVC,KAAKN;QACL5B,aAAaC,QAAQC,GAAG,CAACiC,QAAQ;QACjCC,SAASnC,QAAQC,GAAG,CAACmC,mBAAmB;QACxCC,SAAS,CAACC,IAAAA,2BAAiB;QAC3BC,kBAAkBC,IAAAA,iCAAuB,MAAK,OAAO;IACvD;IAEAxC,QAAQyC,EAAE,CAAC,sBAAsB,CAACC;QAChC,MAAMC,UAAU,CAAC,4BAA4B,EAAGC,IAAAA,wBAAY,EAACF,IAAK;QAClE7C,OAAOgD,KAAK,CAACF;QAGbZ,MAAOe,gBAAgB,CAACJ;IAC1B;AACF;AAEO,SAASjD;IACd,MAAMI,SAAS,IAAIC,qBAAM,CAAC;IAC1BJ;IAEA,IAAI,CAACM,QAAQC,GAAG,CAACC,6BAAY,CAACmB,eAAe,CAAC,EAAE;QAC9CxB,OAAOY,GAAG,CAAC,CAAC,EAAE,EAAGP,6BAAY,CAACmB,eAAe,CAAE,gCAAgC,CAAC;QAChFxB,OAAOY,GAAG,CAAC,CAAC,yBAAyB,EAAGP,6BAAY,CAAC6C,OAAO,CAAE,sBAAsB,CAAC;QACrF/C,QAAQC,GAAG,CAACC,6BAAY,CAACmB,eAAe,CAAC,GAAGnB,6BAAY,CAACuB,iBAAiB,CAACC,QAAQ;IACrF;AACF"}
+{"version":3,"file":"server.env.js","names":["Logger"],"sources":["../src/server.env.ts"],"sourcesContent":["import * as Sentry from \"@sentry/node\";\nimport { readFileSync } from \"node:fs\";\nimport { AppConstants } from \"./server.constants\";\nimport { LoggerService as Logger } from \"./handlers/logger\";\nimport { getEnvOrDefault, isProductionEnvironment, isTestEnvironment } from \"./utils/env.utils\";\nimport { errorSummary } from \"./utils/error.utils\";\nimport { packageJsonPath } from \"@/utils/fs.utils\";\nimport { collectDefaultMetrics, register } from \"prom-client\";\n\nexport function setupEnvConfig() {\n  const logger = new Logger(\"FDM-Environment\");\n  const environment = process.env[AppConstants.NODE_ENV_KEY];\n  if (!environment || !AppConstants.knownEnvNames.includes(environment)) {\n    const newEnvName = AppConstants.defaultProductionEnv;\n    process.env[AppConstants.NODE_ENV_KEY] = newEnvName;\n    logger.warn(`NODE_ENV=${environment} was not set, or not known. Defaulting to NODE_ENV=${newEnvName}`);\n  } else {\n    logger.log(`✓ NODE_ENV variable correctly set (${environment})`);\n  }\n\n  ensurePackageVersionSet();\n  setupSentry();\n  ensurePortSet();\n\n  // Optional: Enable collection of default metrics like memory, CPU, etc.\n  if (process.env[AppConstants.ENABLE_PROMETHEUS_METRICS] === \"true\") {\n    collectDefaultMetrics({ register });\n    register.removeSingleMetric(\"nodejs_version_info\");\n  }\n}\n\nfunction ensurePackageVersionSet() {\n  const logger = new Logger(\"FDM-Environment\");\n  const packageJson = JSON.parse(readFileSync(packageJsonPath(), \"utf-8\"));\n  const packageJsonVersion = packageJson.version;\n  process.env[AppConstants.VERSION_KEY] ??= packageJsonVersion;\n\n  logger.log(`✓ Running server version ${process.env[AppConstants.VERSION_KEY]}`);\n}\n\nexport function fetchServerPort() {\n  let port = process.env[AppConstants.SERVER_PORT_KEY];\n  if (Number.isNaN(Number.parseInt(port!))) {\n    // Update config immediately\n    process.env[AppConstants.SERVER_PORT_KEY] = AppConstants.defaultServerPort.toString();\n    port = process.env[AppConstants.SERVER_PORT_KEY];\n  }\n  return port;\n}\n\nexport function setupSentry() {\n  const logger = new Logger(\"FDM-Environment\");\n  const sentryDsnToken = getEnvOrDefault(AppConstants.sentryCustomDsnToken, AppConstants.sentryCustomDsnDefault);\n\n  Sentry.init({\n    dsn: sentryDsnToken,\n    environment: process.env.NODE_ENV,\n    release: process.env.npm_package_version,\n    enabled: !isTestEnvironment(),\n    tracesSampleRate: isProductionEnvironment() ? 0.25 : 1,\n  });\n\n  process.on(\"unhandledRejection\", (e) => {\n    const message = `Unhandled rejection error - ${errorSummary(e)}`;\n    logger.error(message);\n\n    // The server must not crash\n    Sentry.captureException(e);\n  });\n}\n\nexport function ensurePortSet() {\n  const logger = new Logger(\"FDM-Environment\");\n  fetchServerPort();\n\n  if (!process.env[AppConstants.SERVER_PORT_KEY]) {\n    logger.log(`~ ${AppConstants.SERVER_PORT_KEY} environment variable is not set`);\n    logger.log(`Please make sure to read ${AppConstants.docsUrl} for more information.`);\n    process.env[AppConstants.SERVER_PORT_KEY] = AppConstants.defaultServerPort.toString();\n  }\n}\n"],"mappings":";;;;;;;;;AASA,SAAgB,iBAAiB;CAC/B,MAAM,SAAS,IAAIA,cAAO,kBAAkB;CAC5C,MAAM,cAAc,QAAQ,IAAI,aAAa;AAC7C,KAAI,CAAC,eAAe,CAAC,aAAa,cAAc,SAAS,YAAY,EAAE;EACrE,MAAM,aAAa,aAAa;AAChC,UAAQ,IAAI,aAAa,gBAAgB;AACzC,SAAO,KAAK,YAAY,YAAY,qDAAqD,aAAa;OAEtG,QAAO,IAAI,sCAAsC,YAAY,GAAG;AAGlE,0BAAyB;AACzB,cAAa;AACb,gBAAe;AAGf,KAAI,QAAQ,IAAI,aAAa,+BAA+B,QAAQ;AAClE,wBAAsB,EAAE,UAAU,CAAC;AACnC,WAAS,mBAAmB,sBAAsB;;;AAItD,SAAS,0BAA0B;CACjC,MAAM,SAAS,IAAIA,cAAO,kBAAkB;CAE5C,MAAM,qBADc,KAAK,MAAM,aAAa,iBAAiB,EAAE,QAAQ,CACjC,CAAC;AACvC,SAAQ,IAAI,aAAa,iBAAiB;AAE1C,QAAO,IAAI,4BAA4B,QAAQ,IAAI,aAAa,eAAe;;AAGjF,SAAgB,kBAAkB;CAChC,IAAI,OAAO,QAAQ,IAAI,aAAa;AACpC,KAAI,OAAO,MAAM,OAAO,SAAS,KAAM,CAAC,EAAE;AAExC,UAAQ,IAAI,aAAa,mBAAmB,aAAa,kBAAkB,UAAU;AACrF,SAAO,QAAQ,IAAI,aAAa;;AAElC,QAAO;;AAGT,SAAgB,cAAc;CAC5B,MAAM,SAAS,IAAIA,cAAO,kBAAkB;CAC5C,MAAM,iBAAiB,gBAAgB,aAAa,sBAAsB,aAAa,uBAAuB;AAE9G,QAAO,KAAK;EACV,KAAK;EACL,aAAa,QAAQ,IAAI;EACzB,SAAS,QAAQ,IAAI;EACrB,SAAS,CAAC,mBAAmB;EAC7B,kBAAkB,yBAAyB,GAAG,MAAO;EACtD,CAAC;AAEF,SAAQ,GAAG,uBAAuB,MAAM;EACtC,MAAM,UAAU,+BAA+B,aAAa,EAAE;AAC9D,SAAO,MAAM,QAAQ;AAGrB,SAAO,iBAAiB,EAAE;GAC1B;;AAGJ,SAAgB,gBAAgB;CAC9B,MAAM,SAAS,IAAIA,cAAO,kBAAkB;AAC5C,kBAAiB;AAEjB,KAAI,CAAC,QAAQ,IAAI,aAAa,kBAAkB;AAC9C,SAAO,IAAI,KAAK,aAAa,gBAAgB,kCAAkC;AAC/E,SAAO,IAAI,4BAA4B,aAAa,QAAQ,wBAAwB;AACpF,UAAQ,IAAI,aAAa,mBAAmB,aAAa,kBAAkB,UAAU"}

package/dist/server.host.js

@@ -1,101 +1,68 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "ServerHost", {
-    enumerable: true,
-    get: function() {
-        return ServerHost;
-    }
-});
-const _express = /*#__PURE__*/ _interop_require_default(require("express"));
-const _connecthistoryapifallback = /*#__PURE__*/ _interop_require_default(require("connect-history-api-fallback"));
-const _nodepath = require("node:path");
-const _serverenv = require("./server.env");
-const _runtimeexceptions = require("./exceptions/runtime.exceptions");
-const _serverconstants = require("./server.constants");
-const _fsutils = require("./utils/fs.utils");
-const _loadcontrollers = require("./shared/load-controllers");
-const _swagger = require("./utils/swagger/swagger");
-function _interop_require_default(obj) {
-    return obj && obj.__esModule ? obj : {
-        default: obj
-    };
-}
-class ServerHost {
-    configService;
-    bootTask;
-    socketIoGateway;
-    typeormService;
-    exceptionFilter;
-    logger;
-    constructor(loggerFactory, configService, bootTask, socketIoGateway, typeormService, exceptionFilter){
-        this.configService = configService;
-        this.bootTask = bootTask;
-        this.socketIoGateway = socketIoGateway;
-        this.typeormService = typeormService;
-        this.exceptionFilter = exceptionFilter;
-        this.logger = loggerFactory(ServerHost.name);
-    }
-    async boot(app, quick_boot = false, listenRequests = true) {
-        await this.serveControllerRoutes(app);
-        if (!quick_boot) {
-            await this.bootTask.runOnce();
-        }
-        if (listenRequests) return this.httpListen(app);
-    }
-    hasConnected() {
-        return this.typeormService.hasConnected();
-    }
-    async serveControllerRoutes(app) {
-        const swaggerDisabled = process.env[_serverconstants.AppConstants.DISABLE_SWAGGER_OPENAPI] === "true";
-        app.use((req, res, next)=>{
-            if (!req.originalUrl.startsWith("/metrics") && !req.originalUrl.startsWith("/api") && !req.originalUrl.startsWith("/api-docs") && !req.originalUrl.startsWith("/socket.io")) {
-                (0, _connecthistoryapifallback.default)()(req, res, next);
-            } else {
-                next();
-            }
-        }).use((0, _loadcontrollers.loadControllersFunc)());
-        if (swaggerDisabled) {
-            this.logger.log("Swagger/OpenAPI documentation disabled");
-        } else {
-            await (0, _swagger.setupSwagger)(app, this.logger);
-            this.logger.log("Swagger/OpenAPI documentation enabled");
-        }
-        const bundleDistPath = (0, _nodepath.join)((0, _fsutils.getMediaPath)(), _serverconstants.AppConstants.defaultClientBundleStorage, "dist");
-        const backupClientPath = (0, _nodepath.join)((0, _fsutils.superRootPath)(), "node_modules", _serverconstants.AppConstants.clientPackageName, "dist");
-        app.use(_express.default.static(bundleDistPath));
-        app.use(_express.default.static(backupClientPath));
-        app.get("*", (req, _)=>{
-            const path = req.originalUrl;
-            let resource = "MVC";
-            if (path.startsWith("/socket.io") || path.startsWith("/api") || path.startsWith("/metrics") || path.startsWith("/api-docs")) {
-                resource = "API";
-            } else if (path.endsWith(".min.js")) {
-                resource = "client-bundle";
-            }
-            this.logger.error(`${resource} resource at '${path}' was not found`);
-            if (!path.startsWith("/socket.io")) {
-                throw new _runtimeexceptions.NotFoundException(`${resource} resource was not found`, path);
-            }
-        });
-        app.use(this.exceptionFilter.handle.bind(this.exceptionFilter));
-    }
-    async httpListen(app) {
-        const port = (0, _serverenv.fetchServerPort)();
-        if (!port || Number.isNaN(Number.parseInt(port))) {
-            throw new Error("The FDM Server requires a numeric port input argument to run");
-        }
-        const swaggerDisabled = process.env[_serverconstants.AppConstants.DISABLE_SWAGGER_OPENAPI] === "true";
-        const hostOrFqdn = "0.0.0.0";
-        const server = app.listen(Number.parseInt(port), hostOrFqdn, ()=>{
-            this.logger.log(`Server started... open it at http://127.0.0.1:${port}`);
-            if (!swaggerDisabled) {
-                this.logger.log(`API Documentation available at http://127.0.0.1:${port}/api-docs`);
-            }
-        });
-        this.socketIoGateway.attachServer(server);
-    }
-}
+import { NotFoundException } from "./exceptions/runtime.exceptions.js";
+import { AppConstants } from "./server.constants.js";
+import { getMediaPath, superRootPath } from "./utils/fs.utils.js";
+import { fetchServerPort } from "./server.env.js";
+import { loadControllersFunc } from "./shared/load-controllers.js";
+import { setupSwagger } from "./utils/swagger/swagger.js";
+import { join } from "node:path";
+import express from "express";
+import history from "connect-history-api-fallback";
+//#region src/server.host.ts
+var ServerHost = class ServerHost {
+	logger;
+	constructor(loggerFactory, configService, bootTask, socketIoGateway, typeormService, exceptionFilter) {
+		this.configService = configService;
+		this.bootTask = bootTask;
+		this.socketIoGateway = socketIoGateway;
+		this.typeormService = typeormService;
+		this.exceptionFilter = exceptionFilter;
+		this.logger = loggerFactory(ServerHost.name);
+	}
+	async boot(app, quick_boot = false, listenRequests = true) {
+		await this.serveControllerRoutes(app);
+		if (!quick_boot) await this.bootTask.runOnce();
+		if (listenRequests) return this.httpListen(app);
+	}
+	hasConnected() {
+		return this.typeormService.hasConnected();
+	}
+	async serveControllerRoutes(app) {
+		const swaggerDisabled = process.env[AppConstants.DISABLE_SWAGGER_OPENAPI] === "true";
+		app.use((req, res, next) => {
+			if (!req.originalUrl.startsWith("/metrics") && !req.originalUrl.startsWith("/api") && !req.originalUrl.startsWith("/api-docs") && !req.originalUrl.startsWith("/socket.io")) history()(req, res, next);
+			else next();
+		}).use(await loadControllersFunc());
+		if (swaggerDisabled) this.logger.log("Swagger/OpenAPI documentation disabled");
+		else {
+			await setupSwagger(app, this.logger);
+			this.logger.log("Swagger/OpenAPI documentation enabled");
+		}
+		const bundleDistPath = join(getMediaPath(), AppConstants.defaultClientBundleStorage, "dist");
+		const backupClientPath = join(superRootPath(), "node_modules", AppConstants.clientPackageName, "dist");
+		app.use(express.static(bundleDistPath));
+		app.use(express.static(backupClientPath));
+		app.get("*", (req, _) => {
+			const path = req.originalUrl;
+			let resource = "MVC";
+			if (path.startsWith("/socket.io") || path.startsWith("/api") || path.startsWith("/metrics") || path.startsWith("/api-docs")) resource = "API";
+			else if (path.endsWith(".min.js")) resource = "client-bundle";
+			this.logger.error(`${resource} resource at '${path}' was not found`);
+			if (!path.startsWith("/socket.io")) throw new NotFoundException(`${resource} resource was not found`, path);
+		});
+		app.use(this.exceptionFilter.handle.bind(this.exceptionFilter));
+	}
+	async httpListen(app) {
+		const port = fetchServerPort();
+		if (!port || Number.isNaN(Number.parseInt(port))) throw new Error("The FDM Server requires a numeric port input argument to run");
+		const swaggerDisabled = process.env[AppConstants.DISABLE_SWAGGER_OPENAPI] === "true";
+		const server = app.listen(Number.parseInt(port), "0.0.0.0", () => {
+			this.logger.log(`Server started... open it at http://127.0.0.1:${port}`);
+			if (!swaggerDisabled) this.logger.log(`API Documentation available at http://127.0.0.1:${port}/api-docs`);
+		});
+		this.socketIoGateway.attachServer(server);
+	}
+};
+//#endregion
+export { ServerHost };
 
 //# sourceMappingURL=server.host.js.map

package/dist/server.host.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.host.ts"],"names":["ServerHost","logger","loggerFactory","configService","bootTask","socketIoGateway","typeormService","exceptionFilter","name","boot","app","quick_boot","listenRequests","serveControllerRoutes","runOnce","httpListen","hasConnected","swaggerDisabled","process","env","AppConstants","DISABLE_SWAGGER_OPENAPI","use","req","res","next","originalUrl","startsWith","history","loadControllersFunc","log","setupSwagger","bundleDistPath","join","getMediaPath","defaultClientBundleStorage","backupClientPath","superRootPath","clientPackageName","express","static","get","_","path","resource","endsWith","error","NotFoundException","handle","bind","port","fetchServerPort","Number","isNaN","parseInt","Error","hostOrFqdn","server","listen","attachServer"],"mappings":";;;;+BAiBaA;;;eAAAA;;;gEAjBwB;kFACjB;0BAEC;2BAEW;mCACE;iCACL;yBACe;iCAMR;yBACP;;;;;;AAEtB,MAAMA;;;;;;IACMC,OAAsB;IAEvC,YACEC,aAA6B,EAC7B,AAAiBC,aAA6B,EAC9C,AAAiBC,QAAkB,EACnC,AAAiBC,eAAgC,EACjD,AAAiBC,cAA8B,EAC/C,AAAiBC,eAAgC,CACjD;aALiBJ,gBAAAA;aACAC,WAAAA;aACAC,kBAAAA;aACAC,iBAAAA;aACAC,kBAAAA;QAEjB,IAAI,CAACN,MAAM,GAAGC,cAAcF,WAAWQ,IAAI;IAC7C;IAEA,MAAMC,KAAKC,GAAgB,EAAEC,aAAa,KAAK,EAAEC,iBAAiB,IAAI,EAAE;QACtE,MAAM,IAAI,CAACC,qBAAqB,CAACH;QAEjC,IAAI,CAACC,YAAY;YACf,MAAM,IAAI,CAACP,QAAQ,CAACU,OAAO;QAC7B;QAEA,IAAIF,gBAAgB,OAAO,IAAI,CAACG,UAAU,CAACL;IAC7C;IAEAM,eAAe;QACb,OAAO,IAAI,CAACV,cAAc,CAACU,YAAY;IACzC;IAEA,MAAMH,sBAAsBH,GAAgB,EAAE;QAC5C,MAAMO,kBAAkBC,QAAQC,GAAG,CAACC,6BAAY,CAACC,uBAAuB,CAAC,KAAK;QAG9EX,IACGY,GAAG,CAAC,CAACC,KAAKC,KAAKC;YACd,IACE,CAACF,IAAIG,WAAW,CAACC,UAAU,CAAC,eAC5B,CAACJ,IAAIG,WAAW,CAACC,UAAU,CAAC,WAC5B,CAACJ,IAAIG,WAAW,CAACC,UAAU,CAAC,gBAC5B,CAACJ,IAAIG,WAAW,CAACC,UAAU,CAAC,eAC5B;gBACAC,IAAAA,kCAAO,IAAGL,KAAKC,KAAKC;YACtB,OAAO;gBACLA;YACF;QACF,GACCH,GAAG,CAACO,IAAAA,oCAAmB;QAG1B,IAAIZ,iBAAiB;YACnB,IAAI,CAAChB,MAAM,CAAC6B,GAAG,CAAC;QAClB,OAAO;YACL,MAAMC,IAAAA,qBAAY,EAACrB,KAAK,IAAI,CAACT,MAAM;YACnC,IAAI,CAACA,MAAM,CAAC6B,GAAG,CAAC;QAClB;QAEA,MAAME,iBAAiBC,IAAAA,cAAI,EAACC,IAAAA,qBAAY,KAAId,6BAAY,CAACe,0BAA0B,EAAE;QACrF,MAAMC,mBAAmBH,IAAAA,cAAI,EAACI,IAAAA,sBAAa,KAAI,gBAAgBjB,6BAAY,CAACkB,iBAAiB,EAAE;QAG/F5B,IAAIY,GAAG,CAACiB,gBAAO,CAACC,MAAM,CAACR;QAGvBtB,IAAIY,GAAG,CAACiB,gBAAO,CAACC,MAAM,CAACJ;QAEvB1B,IAAI+B,GAAG,CAAC,KAAK,CAAClB,KAAKmB;YACjB,MAAMC,OAAOpB,IAAIG,WAAW;YAE5B,IAAIkB,WAAW;YACf,IAAID,KAAKhB,UAAU,CAAC,iBAAiBgB,KAAKhB,UAAU,CAAC,WAAWgB,KAAKhB,UAAU,CAAC,eAAegB,KAAKhB,UAAU,CAAC,cAAc;gBAC3HiB,WAAW;YACb,OAAO,IAAID,KAAKE,QAAQ,CAAC,YAAY;gBACnCD,WAAW;YACb;YAEA,IAAI,CAAC3C,MAAM,CAAC6C,KAAK,CAAC,GAAGF,SAAS,cAAc,EAAED,KAAK,eAAe,CAAC;YAEnE,IAAI,CAACA,KAAKhB,UAAU,CAAC,eAAe;gBAClC,MAAM,IAAIoB,oCAAiB,CAAC,GAAGH,SAAS,uBAAuB,CAAC,EAAED;YACpE;QACF;QAEAjC,IAAIY,GAAG,CAAC,IAAI,CAACf,eAAe,CAACyC,MAAM,CAACC,IAAI,CAAC,IAAI,CAAC1C,eAAe;IAC/D;IAEA,MAAMQ,WAAWL,GAAgB,EAAE;QACjC,MAAMwC,OAAOC,IAAAA,0BAAe;QAE5B,IAAI,CAACD,QAAQE,OAAOC,KAAK,CAACD,OAAOE,QAAQ,CAACJ,QAAQ;YAChD,MAAM,IAAIK,MAAM;QAClB;QAEA,MAAMtC,kBAAkBC,QAAQC,GAAG,CAACC,6BAAY,CAACC,uBAAuB,CAAC,KAAK;QAC9E,MAAMmC,aAAa;QACnB,MAAMC,SAAS/C,IAAIgD,MAAM,CAACN,OAAOE,QAAQ,CAACJ,OAAOM,YAAY;YAC3D,IAAI,CAACvD,MAAM,CAAC6B,GAAG,CAAC,CAAC,8CAA8C,EAAEoB,MAAM;YACvE,IAAI,CAACjC,iBAAiB;gBACpB,IAAI,CAAChB,MAAM,CAAC6B,GAAG,CAAC,CAAC,gDAAgD,EAAEoB,KAAK,SAAS,CAAC;YACpF;QACF;QACA,IAAI,CAAC7C,eAAe,CAACsD,YAAY,CAACF;IACpC;AACF"}
+{"version":3,"file":"server.host.js","names":[],"sources":["../src/server.host.ts"],"sourcesContent":["import express, { Application } from \"express\";\nimport history from \"connect-history-api-fallback\";\nimport { LoggerService } from \"./handlers/logger\";\nimport { join } from \"node:path\";\nimport { ExceptionFilter } from \"./middleware/exception.filter\";\nimport { fetchServerPort } from \"./server.env\";\nimport { NotFoundException } from \"./exceptions/runtime.exceptions\";\nimport { AppConstants } from \"./server.constants\";\nimport { getMediaPath, superRootPath } from \"./utils/fs.utils\";\nimport { SocketIoGateway } from \"@/state/socket-io.gateway\";\nimport { BootTask } from \"./tasks/boot.task\";\nimport type { IConfigService } from \"@/services/core/config.service\";\nimport type { ILoggerFactory } from \"@/handlers/logger-factory\";\nimport { TypeormService } from \"@/services/typeorm/typeorm.service\";\nimport { loadControllersFunc } from \"@/shared/load-controllers\";\nimport { setupSwagger } from \"@/utils/swagger/swagger\";\n\nexport class ServerHost {\n  private readonly logger: LoggerService;\n\n  constructor(\n    loggerFactory: ILoggerFactory,\n    private readonly configService: IConfigService,\n    private readonly bootTask: BootTask,\n    private readonly socketIoGateway: SocketIoGateway,\n    private readonly typeormService: TypeormService,\n    private readonly exceptionFilter: ExceptionFilter,\n  ) {\n    this.logger = loggerFactory(ServerHost.name);\n  }\n\n  async boot(app: Application, quick_boot = false, listenRequests = true) {\n    await this.serveControllerRoutes(app);\n\n    if (!quick_boot) {\n      await this.bootTask.runOnce();\n    }\n\n    if (listenRequests) return this.httpListen(app);\n  }\n\n  hasConnected() {\n    return this.typeormService.hasConnected();\n  }\n\n  async serveControllerRoutes(app: Application) {\n    const swaggerDisabled = process.env[AppConstants.DISABLE_SWAGGER_OPENAPI] === \"true\";\n\n    // Catches any HTML request to paths like / or file/ as long as its text/html\n    app\n      .use((req, res, next) => {\n        if (\n          !req.originalUrl.startsWith(\"/metrics\") &&\n          !req.originalUrl.startsWith(\"/api\") &&\n          !req.originalUrl.startsWith(\"/api-docs\") &&\n          !req.originalUrl.startsWith(\"/socket.io\")\n        ) {\n          history()(req, res, next);\n        } else {\n          next();\n        }\n      })\n      .use(await loadControllersFunc());\n\n    // Setup Swagger documentation (if enabled)\n    if (swaggerDisabled) {\n      this.logger.log(\"Swagger/OpenAPI documentation disabled\");\n    } else {\n      await setupSwagger(app, this.logger);\n      this.logger.log(\"Swagger/OpenAPI documentation enabled\");\n    }\n\n    const bundleDistPath = join(getMediaPath(), AppConstants.defaultClientBundleStorage, \"dist\");\n    const backupClientPath = join(superRootPath(), \"node_modules\", AppConstants.clientPackageName, \"dist\");\n\n    // Serve the main bundle\n    app.use(express.static(bundleDistPath));\n\n    // Serve the backup client\n    app.use(express.static(backupClientPath));\n\n    app.get(\"*\", (req, _) => {\n      const path = req.originalUrl;\n\n      let resource = \"MVC\";\n      if (\n        path.startsWith(\"/socket.io\") ||\n        path.startsWith(\"/api\") ||\n        path.startsWith(\"/metrics\") ||\n        path.startsWith(\"/api-docs\")\n      ) {\n        resource = \"API\";\n      } else if (path.endsWith(\".min.js\")) {\n        resource = \"client-bundle\";\n      }\n\n      this.logger.error(`${resource} resource at '${path}' was not found`);\n\n      if (!path.startsWith(\"/socket.io\")) {\n        throw new NotFoundException(`${resource} resource was not found`, path);\n      }\n    });\n\n    app.use(this.exceptionFilter.handle.bind(this.exceptionFilter));\n  }\n\n  async httpListen(app: Application) {\n    const port = fetchServerPort();\n\n    if (!port || Number.isNaN(Number.parseInt(port))) {\n      throw new Error(\"The FDM Server requires a numeric port input argument to run\");\n    }\n\n    const swaggerDisabled = process.env[AppConstants.DISABLE_SWAGGER_OPENAPI] === \"true\";\n    const hostOrFqdn = \"0.0.0.0\";\n    const server = app.listen(Number.parseInt(port), hostOrFqdn, () => {\n      this.logger.log(`Server started... open it at http://127.0.0.1:${port}`);\n      if (!swaggerDisabled) {\n        this.logger.log(`API Documentation available at http://127.0.0.1:${port}/api-docs`);\n      }\n    });\n    this.socketIoGateway.attachServer(server);\n  }\n}\n"],"mappings":";;;;;;;;;;AAiBA,IAAa,aAAb,MAAa,WAAW;CACtB;CAEA,YACE,eACA,eACA,UACA,iBACA,gBACA,iBACA;AALiB,OAAA,gBAAA;AACA,OAAA,WAAA;AACA,OAAA,kBAAA;AACA,OAAA,iBAAA;AACA,OAAA,kBAAA;AAEjB,OAAK,SAAS,cAAc,WAAW,KAAK;;CAG9C,MAAM,KAAK,KAAkB,aAAa,OAAO,iBAAiB,MAAM;AACtE,QAAM,KAAK,sBAAsB,IAAI;AAErC,MAAI,CAAC,WACH,OAAM,KAAK,SAAS,SAAS;AAG/B,MAAI,eAAgB,QAAO,KAAK,WAAW,IAAI;;CAGjD,eAAe;AACb,SAAO,KAAK,eAAe,cAAc;;CAG3C,MAAM,sBAAsB,KAAkB;EAC5C,MAAM,kBAAkB,QAAQ,IAAI,aAAa,6BAA6B;AAG9E,MACG,KAAK,KAAK,KAAK,SAAS;AACvB,OACE,CAAC,IAAI,YAAY,WAAW,WAAW,IACvC,CAAC,IAAI,YAAY,WAAW,OAAO,IACnC,CAAC,IAAI,YAAY,WAAW,YAAY,IACxC,CAAC,IAAI,YAAY,WAAW,aAAa,CAEzC,UAAS,CAAC,KAAK,KAAK,KAAK;OAEzB,OAAM;IAER,CACD,IAAI,MAAM,qBAAqB,CAAC;AAGnC,MAAI,gBACF,MAAK,OAAO,IAAI,yCAAyC;OACpD;AACL,SAAM,aAAa,KAAK,KAAK,OAAO;AACpC,QAAK,OAAO,IAAI,wCAAwC;;EAG1D,MAAM,iBAAiB,KAAK,cAAc,EAAE,aAAa,4BAA4B,OAAO;EAC5F,MAAM,mBAAmB,KAAK,eAAe,EAAE,gBAAgB,aAAa,mBAAmB,OAAO;AAGtG,MAAI,IAAI,QAAQ,OAAO,eAAe,CAAC;AAGvC,MAAI,IAAI,QAAQ,OAAO,iBAAiB,CAAC;AAEzC,MAAI,IAAI,MAAM,KAAK,MAAM;GACvB,MAAM,OAAO,IAAI;GAEjB,IAAI,WAAW;AACf,OACE,KAAK,WAAW,aAAa,IAC7B,KAAK,WAAW,OAAO,IACvB,KAAK,WAAW,WAAW,IAC3B,KAAK,WAAW,YAAY,CAE5B,YAAW;YACF,KAAK,SAAS,UAAU,CACjC,YAAW;AAGb,QAAK,OAAO,MAAM,GAAG,SAAS,gBAAgB,KAAK,iBAAiB;AAEpE,OAAI,CAAC,KAAK,WAAW,aAAa,CAChC,OAAM,IAAI,kBAAkB,GAAG,SAAS,0BAA0B,KAAK;IAEzE;AAEF,MAAI,IAAI,KAAK,gBAAgB,OAAO,KAAK,KAAK,gBAAgB,CAAC;;CAGjE,MAAM,WAAW,KAAkB;EACjC,MAAM,OAAO,iBAAiB;AAE9B,MAAI,CAAC,QAAQ,OAAO,MAAM,OAAO,SAAS,KAAK,CAAC,CAC9C,OAAM,IAAI,MAAM,+DAA+D;EAGjF,MAAM,kBAAkB,QAAQ,IAAI,aAAa,6BAA6B;EAE9E,MAAM,SAAS,IAAI,OAAO,OAAO,SAAS,KAAK,EAAE,iBAAkB;AACjE,QAAK,OAAO,IAAI,iDAAiD,OAAO;AACxE,OAAI,CAAC,gBACH,MAAK,OAAO,IAAI,mDAAmD,KAAK,WAAW;IAErF;AACF,OAAK,gBAAgB,aAAa,OAAO"}

package/dist/services/authentication/auth.service.js

@@ -1,128 +1,105 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "AuthService", {
-    enumerable: true,
-    get: function() {
-        return AuthService;
-    }
-});
-const _runtimeexceptions = require("../../exceptions/runtime.exceptions");
-const _cryptoutils = require("../../utils/crypto.utils");
-const _authorizationconstants = require("../../constants/authorization.constants");
-const _node = require("@sentry/node");
-class AuthService {
-    userService;
-    jwtService;
-    settingsStore;
-    refreshTokenService;
-    logger;
-    blacklistedJwtCache = {};
-    constructor(loggerFactory, userService, jwtService, settingsStore, refreshTokenService){
-        this.userService = userService;
-        this.jwtService = jwtService;
-        this.settingsStore = settingsStore;
-        this.refreshTokenService = refreshTokenService;
-        this.logger = loggerFactory(AuthService.name);
-    }
-    async loginUser(username, password) {
-        const userDoc = await this.userService.findRawByUsername(username);
-        if (!userDoc) {
-            throw new _runtimeexceptions.AuthenticationError("Login incorrect", _authorizationconstants.AUTH_ERROR_REASON.IncorrectCredentials);
-        }
-        const result = (0, _cryptoutils.comparePasswordHash)(password, userDoc.passwordHash);
-        if (!result) {
-            throw new _runtimeexceptions.AuthenticationError("Login incorrect", _authorizationconstants.AUTH_ERROR_REASON.IncorrectCredentials);
-        }
-        const userId = userDoc.id;
-        const token = await this.signJwtToken(userId);
-        await this.refreshTokenService.purgeOutdatedRefreshTokensByUserId(userId);
-        await this.purgeOutdatedBlacklistedJwtCache();
-        const refreshToken = await this.refreshTokenService.createRefreshTokenForUserId(userId);
-        return {
-            token,
-            refreshToken
-        };
-    }
-    async logoutUserId(userId, jwtToken) {
-        await this.refreshTokenService.deleteRefreshTokenByUserId(userId);
-        if (jwtToken?.length) {
-            this.blacklistedJwtCache[jwtToken] = {
-                userId,
-                createdAt: Date.now()
-            };
-            await this.purgeOutdatedBlacklistedJwtCache();
-        }
-    }
-    async purgeOutdatedBlacklistedJwtCache() {
-        try {
-            const { jwtExpiresIn } = await this.settingsStore.getCredentialSettings();
-            const now = Date.now();
-            const keys = Object.keys(this.blacklistedJwtCache);
-            for (const key of keys){
-                const { createdAt } = this.blacklistedJwtCache[key];
-                if (now - createdAt > jwtExpiresIn) {
-                    delete this.blacklistedJwtCache[key];
-                }
-            }
-        } catch (err) {
-            this.logger.error("Failed to purge blacklisted jwt cache", err);
-            (0, _node.captureException)(err);
-        }
-    }
-    async logoutUserRefreshToken(refreshToken) {
-        const userRefreshToken = await this.getValidRefreshToken(refreshToken);
-        await this.refreshTokenService.deleteRefreshTokenByUserId(userRefreshToken.userId);
-    }
-    async renewLoginByRefreshToken(refreshToken) {
-        const userRefreshToken = await this.getValidRefreshToken(refreshToken);
-        const userId = userRefreshToken.userId;
-        const user = await this.userService.getUser(userId);
-        if (!user) {
-            await this.refreshTokenService.deleteRefreshToken(refreshToken);
-            throw new _runtimeexceptions.AuthenticationError("User not found", _authorizationconstants.AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken);
-        }
-        const token = await this.signJwtToken(userId);
-        await this.increaseRefreshTokenAttemptsUsed(userRefreshToken.refreshToken);
-        return token;
-    }
-    isJwtTokenBlacklisted(jwtToken) {
-        return this.blacklistedJwtCache[jwtToken];
-    }
-    async getValidRefreshToken(refreshToken) {
-        const userRefreshToken = await this.refreshTokenService.getRefreshToken(refreshToken);
-        if (Date.now() > userRefreshToken.expiresAt) {
-            await this.refreshTokenService.deleteRefreshTokenByUserId(userRefreshToken.userId);
-            throw new _runtimeexceptions.AuthenticationError("Refresh token expired, login required", _authorizationconstants.AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken);
-        }
-        return userRefreshToken;
-    }
-    async increaseRefreshTokenAttemptsUsed(refreshToken) {
-        const { refreshTokenAttempts } = await this.settingsStore.getCredentialSettings();
-        const userRefreshToken = await this.getValidRefreshToken(refreshToken);
-        const attemptsUsed = userRefreshToken.refreshAttemptsUsed;
-        if (refreshTokenAttempts !== -1) {
-            if (attemptsUsed >= refreshTokenAttempts) {
-                await this.refreshTokenService.deleteRefreshTokenByUserId(userRefreshToken.userId);
-                throw new _runtimeexceptions.AuthenticationError("Refresh token attempts exceeded, login required", _authorizationconstants.AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken);
-            }
-        }
-        await this.refreshTokenService.updateRefreshTokenAttempts(refreshToken, attemptsUsed + 1);
-    }
-    async signJwtToken(userId) {
-        const user = await this.userService.getUser(userId);
-        if (!user) {
-            throw new _runtimeexceptions.AuthenticationError("User not found", _authorizationconstants.AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken);
-        }
-        if (user.needsPasswordChange) {
-            throw new _runtimeexceptions.AuthenticationError("Password change required", _authorizationconstants.AUTH_ERROR_REASON.PasswordChangeRequired);
-        }
-        if (!user.isVerified) {
-            throw new _runtimeexceptions.AuthenticationError("User is not verified yet", _authorizationconstants.AUTH_ERROR_REASON.AccountNotVerified);
-        }
-        return this.jwtService.signJwtToken(userId, user.username);
-    }
-}
+import { AuthenticationError } from "../../exceptions/runtime.exceptions.js";
+import { AUTH_ERROR_REASON } from "../../constants/authorization.constants.js";
+import { comparePasswordHash } from "../../utils/crypto.utils.js";
+import { captureException } from "@sentry/node";
+//#region src/services/authentication/auth.service.ts
+var AuthService = class AuthService {
+	logger;
+	/**
+	*  When users are blacklisted at runtime, this cache can make quick work of rejecting them
+	*/
+	blacklistedJwtCache = {};
+	constructor(loggerFactory, userService, jwtService, settingsStore, refreshTokenService) {
+		this.userService = userService;
+		this.jwtService = jwtService;
+		this.settingsStore = settingsStore;
+		this.refreshTokenService = refreshTokenService;
+		this.logger = loggerFactory(AuthService.name);
+	}
+	async loginUser(username, password) {
+		const userDoc = await this.userService.findRawByUsername(username);
+		if (!userDoc) throw new AuthenticationError("Login incorrect", AUTH_ERROR_REASON.IncorrectCredentials);
+		if (!comparePasswordHash(password, userDoc.passwordHash)) throw new AuthenticationError("Login incorrect", AUTH_ERROR_REASON.IncorrectCredentials);
+		const userId = userDoc.id;
+		const token = await this.signJwtToken(userId);
+		await this.refreshTokenService.purgeOutdatedRefreshTokensByUserId(userId);
+		await this.purgeOutdatedBlacklistedJwtCache();
+		return {
+			token,
+			refreshToken: await this.refreshTokenService.createRefreshTokenForUserId(userId)
+		};
+	}
+	async logoutUserId(userId, jwtToken) {
+		await this.refreshTokenService.deleteRefreshTokenByUserId(userId);
+		if (jwtToken?.length) {
+			this.blacklistedJwtCache[jwtToken] = {
+				userId,
+				createdAt: Date.now()
+			};
+			await this.purgeOutdatedBlacklistedJwtCache();
+		}
+	}
+	async purgeOutdatedBlacklistedJwtCache() {
+		try {
+			const { jwtExpiresIn } = await this.settingsStore.getCredentialSettings();
+			const now = Date.now();
+			const keys = Object.keys(this.blacklistedJwtCache);
+			for (const key of keys) {
+				const { createdAt } = this.blacklistedJwtCache[key];
+				if (now - createdAt > jwtExpiresIn) delete this.blacklistedJwtCache[key];
+			}
+		} catch (err) {
+			this.logger.error("Failed to purge blacklisted jwt cache", err);
+			captureException(err);
+		}
+	}
+	async logoutUserRefreshToken(refreshToken) {
+		const userRefreshToken = await this.getValidRefreshToken(refreshToken);
+		await this.refreshTokenService.deleteRefreshTokenByUserId(userRefreshToken.userId);
+	}
+	async renewLoginByRefreshToken(refreshToken) {
+		const userRefreshToken = await this.getValidRefreshToken(refreshToken);
+		const userId = userRefreshToken.userId;
+		if (!await this.userService.getUser(userId)) {
+			await this.refreshTokenService.deleteRefreshToken(refreshToken);
+			throw new AuthenticationError("User not found", AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken);
+		}
+		const token = await this.signJwtToken(userId);
+		await this.increaseRefreshTokenAttemptsUsed(userRefreshToken.refreshToken);
+		return token;
+	}
+	isJwtTokenBlacklisted(jwtToken) {
+		return this.blacklistedJwtCache[jwtToken];
+	}
+	async getValidRefreshToken(refreshToken) {
+		const userRefreshToken = await this.refreshTokenService.getRefreshToken(refreshToken);
+		if (Date.now() > userRefreshToken.expiresAt) {
+			await this.refreshTokenService.deleteRefreshTokenByUserId(userRefreshToken.userId);
+			throw new AuthenticationError("Refresh token expired, login required", AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken);
+		}
+		return userRefreshToken;
+	}
+	async increaseRefreshTokenAttemptsUsed(refreshToken) {
+		const { refreshTokenAttempts } = await this.settingsStore.getCredentialSettings();
+		const userRefreshToken = await this.getValidRefreshToken(refreshToken);
+		const attemptsUsed = userRefreshToken.refreshAttemptsUsed;
+		if (refreshTokenAttempts !== -1) {
+			if (attemptsUsed >= refreshTokenAttempts) {
+				await this.refreshTokenService.deleteRefreshTokenByUserId(userRefreshToken.userId);
+				throw new AuthenticationError("Refresh token attempts exceeded, login required", AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken);
+			}
+		}
+		await this.refreshTokenService.updateRefreshTokenAttempts(refreshToken, attemptsUsed + 1);
+	}
+	async signJwtToken(userId) {
+		const user = await this.userService.getUser(userId);
+		if (!user) throw new AuthenticationError("User not found", AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken);
+		if (user.needsPasswordChange) throw new AuthenticationError("Password change required", AUTH_ERROR_REASON.PasswordChangeRequired);
+		if (!user.isVerified) throw new AuthenticationError("User is not verified yet", AUTH_ERROR_REASON.AccountNotVerified);
+		return this.jwtService.signJwtToken(userId, user.username);
+	}
+};
+//#endregion
+export { AuthService };
 
 //# sourceMappingURL=auth.service.js.map

package/dist/services/authentication/auth.service.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/services/authentication/auth.service.ts"],"names":["AuthService","logger","blacklistedJwtCache","loggerFactory","userService","jwtService","settingsStore","refreshTokenService","name","loginUser","username","password","userDoc","findRawByUsername","AuthenticationError","AUTH_ERROR_REASON","IncorrectCredentials","result","comparePasswordHash","passwordHash","userId","id","token","signJwtToken","purgeOutdatedRefreshTokensByUserId","purgeOutdatedBlacklistedJwtCache","refreshToken","createRefreshTokenForUserId","logoutUserId","jwtToken","deleteRefreshTokenByUserId","length","createdAt","Date","now","jwtExpiresIn","getCredentialSettings","keys","Object","key","err","error","captureException","logoutUserRefreshToken","userRefreshToken","getValidRefreshToken","renewLoginByRefreshToken","user","getUser","deleteRefreshToken","InvalidOrExpiredRefreshToken","increaseRefreshTokenAttemptsUsed","isJwtTokenBlacklisted","getRefreshToken","expiresAt","refreshTokenAttempts","attemptsUsed","refreshAttemptsUsed","updateRefreshTokenAttempts","needsPasswordChange","PasswordChangeRequired","isVerified","AccountNotVerified"],"mappings":";;;;+BAaaA;;;eAAAA;;;mCAbuB;6BACA;wCAQF;sBACD;AAG1B,MAAMA;;;;;IACMC,OAAsB;IAI/BC,sBAA6E,CAAC,EAAE;IAExF,YACEC,aAA6B,EAC7B,AAAiBC,WAA+B,EAChD,AAAiBC,UAAuB,EACxC,AAAiBC,aAA4B,EAC7C,AAAiBC,mBAAyC,CAC1D;aAJiBH,cAAAA;aACAC,aAAAA;aACAC,gBAAAA;aACAC,sBAAAA;QAEjB,IAAI,CAACN,MAAM,GAAGE,cAAcH,YAAYQ,IAAI;IAC9C;IAEA,MAAMC,UAAUC,QAAgB,EAAEC,QAAgB,EAAE;QAClD,MAAMC,UAAU,MAAM,IAAI,CAACR,WAAW,CAACS,iBAAiB,CAACH;QACzD,IAAI,CAACE,SAAS;YACZ,MAAM,IAAIE,sCAAmB,CAAC,mBAAmBC,yCAAiB,CAACC,oBAAoB;QACzF;QACA,MAAMC,SAASC,IAAAA,gCAAmB,EAACP,UAAUC,QAAQO,YAAY;QACjE,IAAI,CAACF,QAAQ;YACX,MAAM,IAAIH,sCAAmB,CAAC,mBAAmBC,yCAAiB,CAACC,oBAAoB;QACzF;QAEA,MAAMI,SAASR,QAAQS,EAAE;QACzB,MAAMC,QAAQ,MAAM,IAAI,CAACC,YAAY,CAACH;QACtC,MAAM,IAAI,CAACb,mBAAmB,CAACiB,kCAAkC,CAACJ;QAClE,MAAM,IAAI,CAACK,gCAAgC;QAE3C,MAAMC,eAAe,MAAM,IAAI,CAACnB,mBAAmB,CAACoB,2BAA2B,CAACP;QAChF,OAAO;YACLE;YACAI;QACF;IACF;IAEA,MAAME,aAAaR,MAAc,EAAES,QAAiB,EAAE;QACpD,MAAM,IAAI,CAACtB,mBAAmB,CAACuB,0BAA0B,CAACV;QAC1D,IAAIS,UAAUE,QAAQ;YACpB,IAAI,CAAC7B,mBAAmB,CAAC2B,SAAS,GAAG;gBAAET;gBAAQY,WAAWC,KAAKC,GAAG;YAAG;YACrE,MAAM,IAAI,CAACT,gCAAgC;QAC7C;IACF;IAEA,MAAMA,mCAAmC;QACvC,IAAI;YACF,MAAM,EAAEU,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC7B,aAAa,CAAC8B,qBAAqB;YACvE,MAAMF,MAAMD,KAAKC,GAAG;YACpB,MAAMG,OAAOC,OAAOD,IAAI,CAAC,IAAI,CAACnC,mBAAmB;YACjD,KAAK,MAAMqC,OAAOF,KAAM;gBACtB,MAAM,EAAEL,SAAS,EAAE,GAAG,IAAI,CAAC9B,mBAAmB,CAACqC,IAAI;gBACnD,IAAIL,MAAMF,YAAYG,cAAc;oBAClC,OAAO,IAAI,CAACjC,mBAAmB,CAACqC,IAAI;gBACtC;YACF;QACF,EAAE,OAAOC,KAAK;YACZ,IAAI,CAACvC,MAAM,CAACwC,KAAK,CAAC,yCAAyCD;YAC3DE,IAAAA,sBAAgB,EAACF;QACnB;IACF;IAEA,MAAMG,uBAAuBjB,YAAoB,EAAE;QACjD,MAAMkB,mBAAmB,MAAM,IAAI,CAACC,oBAAoB,CAACnB;QACzD,MAAM,IAAI,CAACnB,mBAAmB,CAACuB,0BAA0B,CAACc,iBAAiBxB,MAAM;IACnF;IAEA,MAAM0B,yBAAyBpB,YAAoB,EAAmB;QACpE,MAAMkB,mBAAmB,MAAM,IAAI,CAACC,oBAAoB,CAACnB;QAEzD,MAAMN,SAASwB,iBAAiBxB,MAAM;QACtC,MAAM2B,OAAO,MAAM,IAAI,CAAC3C,WAAW,CAAC4C,OAAO,CAAC5B;QAC5C,IAAI,CAAC2B,MAAM;YACT,MAAM,IAAI,CAACxC,mBAAmB,CAAC0C,kBAAkB,CAACvB;YAClD,MAAM,IAAIZ,sCAAmB,CAAC,kBAAkBC,yCAAiB,CAACmC,4BAA4B;QAChG;QAGA,MAAM5B,QAAQ,MAAM,IAAI,CAACC,YAAY,CAACH;QACtC,MAAM,IAAI,CAAC+B,gCAAgC,CAACP,iBAAiBlB,YAAY;QACzE,OAAOJ;IACT;IAEA8B,sBAAsBvB,QAAgB,EAAE;QACtC,OAAO,IAAI,CAAC3B,mBAAmB,CAAC2B,SAAS;IAC3C;IAEA,MAAMgB,qBAAqBnB,YAAoB,EAAE;QAC/C,MAAMkB,mBAAmB,MAAM,IAAI,CAACrC,mBAAmB,CAAC8C,eAAe,CAAC3B;QACxE,IAAIO,KAAKC,GAAG,KAAKU,iBAAiBU,SAAS,EAAE;YAC3C,MAAM,IAAI,CAAC/C,mBAAmB,CAACuB,0BAA0B,CAACc,iBAAiBxB,MAAM;YACjF,MAAM,IAAIN,sCAAmB,CAC3B,yCACAC,yCAAiB,CAACmC,4BAA4B;QAElD;QACA,OAAON;IACT;IAEA,MAAMO,iCAAiCzB,YAAoB,EAAiB;QAC1E,MAAM,EAAE6B,oBAAoB,EAAE,GAAG,MAAM,IAAI,CAACjD,aAAa,CAAC8B,qBAAqB;QAC/E,MAAMQ,mBAAmB,MAAM,IAAI,CAACC,oBAAoB,CAACnB;QACzD,MAAM8B,eAAeZ,iBAAiBa,mBAAmB;QAGzD,IAAIF,yBAAyB,CAAC,GAAG;YAC/B,IAAIC,gBAAgBD,sBAAsB;gBACxC,MAAM,IAAI,CAAChD,mBAAmB,CAACuB,0BAA0B,CAACc,iBAAiBxB,MAAM;gBACjF,MAAM,IAAIN,sCAAmB,CAC3B,mDACAC,yCAAiB,CAACmC,4BAA4B;YAElD;QACF;QAEA,MAAM,IAAI,CAAC3C,mBAAmB,CAACmD,0BAA0B,CAAChC,cAAc8B,eAAe;IACzF;IAEA,MAAMjC,aAAaH,MAAc,EAAE;QACjC,MAAM2B,OAAO,MAAM,IAAI,CAAC3C,WAAW,CAAC4C,OAAO,CAAC5B;QAC5C,IAAI,CAAC2B,MAAM;YACT,MAAM,IAAIjC,sCAAmB,CAAC,kBAAkBC,yCAAiB,CAACmC,4BAA4B;QAChG;QACA,IAAIH,KAAKY,mBAAmB,EAAE;YAC5B,MAAM,IAAI7C,sCAAmB,CAAC,4BAA4BC,yCAAiB,CAAC6C,sBAAsB;QACpG;QACA,IAAI,CAACb,KAAKc,UAAU,EAAE;YACpB,MAAM,IAAI/C,sCAAmB,CAAC,4BAA4BC,yCAAiB,CAAC+C,kBAAkB;QAChG;QACA,OAAO,IAAI,CAACzD,UAAU,CAACkB,YAAY,CAACH,QAAQ2B,KAAKrC,QAAQ;IAC3D;AACF"}
+{"version":3,"file":"auth.service.js","names":[],"sources":["../../../src/services/authentication/auth.service.ts"],"sourcesContent":["import { AuthenticationError } from \"@/exceptions/runtime.exceptions\";\nimport { comparePasswordHash } from \"@/utils/crypto.utils\";\nimport { SettingsStore } from \"@/state/settings.store\";\nimport { LoggerService } from \"@/handlers/logger\";\nimport type { ILoggerFactory } from \"@/handlers/logger-factory\";\nimport type { IUserService } from \"@/services/interfaces/user-service.interface\";\nimport type { IJwtService } from \"@/services/interfaces/jwt.service.interface\";\nimport type { IAuthService } from \"@/services/interfaces/auth.service.interface\";\nimport type { IRefreshTokenService } from \"@/services/interfaces/refresh-token.service.interface\";\nimport { AUTH_ERROR_REASON } from \"@/constants/authorization.constants\";\nimport { captureException } from \"@sentry/node\";\nimport { User } from \"@/entities\";\n\nexport class AuthService implements IAuthService {\n  private readonly logger: LoggerService;\n  /**\n   *  When users are blacklisted at runtime, this cache can make quick work of rejecting them\n   */\n  private blacklistedJwtCache: Record<string, { userId: number; createdAt: number }> = {};\n\n  constructor(\n    loggerFactory: ILoggerFactory,\n    private readonly userService: IUserService<User>,\n    private readonly jwtService: IJwtService,\n    private readonly settingsStore: SettingsStore,\n    private readonly refreshTokenService: IRefreshTokenService,\n  ) {\n    this.logger = loggerFactory(AuthService.name);\n  }\n\n  async loginUser(username: string, password: string) {\n    const userDoc = await this.userService.findRawByUsername(username);\n    if (!userDoc) {\n      throw new AuthenticationError(\"Login incorrect\", AUTH_ERROR_REASON.IncorrectCredentials);\n    }\n    const result = comparePasswordHash(password, userDoc.passwordHash);\n    if (!result) {\n      throw new AuthenticationError(\"Login incorrect\", AUTH_ERROR_REASON.IncorrectCredentials);\n    }\n\n    const userId = userDoc.id;\n    const token = await this.signJwtToken(userId);\n    await this.refreshTokenService.purgeOutdatedRefreshTokensByUserId(userId);\n    await this.purgeOutdatedBlacklistedJwtCache();\n\n    const refreshToken = await this.refreshTokenService.createRefreshTokenForUserId(userId);\n    return {\n      token,\n      refreshToken,\n    };\n  }\n\n  async logoutUserId(userId: number, jwtToken?: string) {\n    await this.refreshTokenService.deleteRefreshTokenByUserId(userId);\n    if (jwtToken?.length) {\n      this.blacklistedJwtCache[jwtToken] = { userId, createdAt: Date.now() };\n      await this.purgeOutdatedBlacklistedJwtCache();\n    }\n  }\n\n  async purgeOutdatedBlacklistedJwtCache() {\n    try {\n      const { jwtExpiresIn } = await this.settingsStore.getCredentialSettings();\n      const now = Date.now();\n      const keys = Object.keys(this.blacklistedJwtCache);\n      for (const key of keys) {\n        const { createdAt } = this.blacklistedJwtCache[key];\n        if (now - createdAt > jwtExpiresIn) {\n          delete this.blacklistedJwtCache[key];\n        }\n      }\n    } catch (err) {\n      this.logger.error(\"Failed to purge blacklisted jwt cache\", err);\n      captureException(err);\n    }\n  }\n\n  async logoutUserRefreshToken(refreshToken: string) {\n    const userRefreshToken = await this.getValidRefreshToken(refreshToken);\n    await this.refreshTokenService.deleteRefreshTokenByUserId(userRefreshToken.userId);\n  }\n\n  async renewLoginByRefreshToken(refreshToken: string): Promise<string> {\n    const userRefreshToken = await this.getValidRefreshToken(refreshToken);\n\n    const userId = userRefreshToken.userId;\n    const user = await this.userService.getUser(userId);\n    if (!user) {\n      await this.refreshTokenService.deleteRefreshToken(refreshToken);\n      throw new AuthenticationError(\"User not found\", AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken);\n    }\n\n    // If the user is not found at this point, then the user was deleted\n    const token = await this.signJwtToken(userId);\n    await this.increaseRefreshTokenAttemptsUsed(userRefreshToken.refreshToken);\n    return token;\n  }\n\n  isJwtTokenBlacklisted(jwtToken: string) {\n    return this.blacklistedJwtCache[jwtToken];\n  }\n\n  async getValidRefreshToken(refreshToken: string) {\n    const userRefreshToken = await this.refreshTokenService.getRefreshToken(refreshToken);\n    if (Date.now() > userRefreshToken.expiresAt) {\n      await this.refreshTokenService.deleteRefreshTokenByUserId(userRefreshToken.userId);\n      throw new AuthenticationError(\n        \"Refresh token expired, login required\",\n        AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken,\n      );\n    }\n    return userRefreshToken;\n  }\n\n  async increaseRefreshTokenAttemptsUsed(refreshToken: string): Promise<void> {\n    const { refreshTokenAttempts } = await this.settingsStore.getCredentialSettings();\n    const userRefreshToken = await this.getValidRefreshToken(refreshToken);\n    const attemptsUsed = userRefreshToken.refreshAttemptsUsed;\n\n    // If no attempts are set, then we don't care about attempts\n    if (refreshTokenAttempts !== -1) {\n      if (attemptsUsed >= refreshTokenAttempts) {\n        await this.refreshTokenService.deleteRefreshTokenByUserId(userRefreshToken.userId);\n        throw new AuthenticationError(\n          \"Refresh token attempts exceeded, login required\",\n          AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken,\n        );\n      }\n    }\n\n    await this.refreshTokenService.updateRefreshTokenAttempts(refreshToken, attemptsUsed + 1);\n  }\n\n  async signJwtToken(userId: number) {\n    const user = await this.userService.getUser(userId);\n    if (!user) {\n      throw new AuthenticationError(\"User not found\", AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken);\n    }\n    if (user.needsPasswordChange) {\n      throw new AuthenticationError(\"Password change required\", AUTH_ERROR_REASON.PasswordChangeRequired);\n    }\n    if (!user.isVerified) {\n      throw new AuthenticationError(\"User is not verified yet\", AUTH_ERROR_REASON.AccountNotVerified);\n    }\n    return this.jwtService.signJwtToken(userId, user.username);\n  }\n}\n"],"mappings":";;;;;AAaA,IAAa,cAAb,MAAa,YAAoC;CAC/C;;;;CAIA,sBAAqF,EAAE;CAEvF,YACE,eACA,aACA,YACA,eACA,qBACA;AAJiB,OAAA,cAAA;AACA,OAAA,aAAA;AACA,OAAA,gBAAA;AACA,OAAA,sBAAA;AAEjB,OAAK,SAAS,cAAc,YAAY,KAAK;;CAG/C,MAAM,UAAU,UAAkB,UAAkB;EAClD,MAAM,UAAU,MAAM,KAAK,YAAY,kBAAkB,SAAS;AAClE,MAAI,CAAC,QACH,OAAM,IAAI,oBAAoB,mBAAmB,kBAAkB,qBAAqB;AAG1F,MAAI,CADW,oBAAoB,UAAU,QAAQ,aAC1C,CACT,OAAM,IAAI,oBAAoB,mBAAmB,kBAAkB,qBAAqB;EAG1F,MAAM,SAAS,QAAQ;EACvB,MAAM,QAAQ,MAAM,KAAK,aAAa,OAAO;AAC7C,QAAM,KAAK,oBAAoB,mCAAmC,OAAO;AACzE,QAAM,KAAK,kCAAkC;AAG7C,SAAO;GACL;GACA,cAAA,MAHyB,KAAK,oBAAoB,4BAA4B,OAAO;GAItF;;CAGH,MAAM,aAAa,QAAgB,UAAmB;AACpD,QAAM,KAAK,oBAAoB,2BAA2B,OAAO;AACjE,MAAI,UAAU,QAAQ;AACpB,QAAK,oBAAoB,YAAY;IAAE;IAAQ,WAAW,KAAK,KAAK;IAAE;AACtE,SAAM,KAAK,kCAAkC;;;CAIjD,MAAM,mCAAmC;AACvC,MAAI;GACF,MAAM,EAAE,iBAAiB,MAAM,KAAK,cAAc,uBAAuB;GACzE,MAAM,MAAM,KAAK,KAAK;GACtB,MAAM,OAAO,OAAO,KAAK,KAAK,oBAAoB;AAClD,QAAK,MAAM,OAAO,MAAM;IACtB,MAAM,EAAE,cAAc,KAAK,oBAAoB;AAC/C,QAAI,MAAM,YAAY,aACpB,QAAO,KAAK,oBAAoB;;WAG7B,KAAK;AACZ,QAAK,OAAO,MAAM,yCAAyC,IAAI;AAC/D,oBAAiB,IAAI;;;CAIzB,MAAM,uBAAuB,cAAsB;EACjD,MAAM,mBAAmB,MAAM,KAAK,qBAAqB,aAAa;AACtE,QAAM,KAAK,oBAAoB,2BAA2B,iBAAiB,OAAO;;CAGpF,MAAM,yBAAyB,cAAuC;EACpE,MAAM,mBAAmB,MAAM,KAAK,qBAAqB,aAAa;EAEtE,MAAM,SAAS,iBAAiB;AAEhC,MAAI,CAAC,MADc,KAAK,YAAY,QAAQ,OAAO,EACxC;AACT,SAAM,KAAK,oBAAoB,mBAAmB,aAAa;AAC/D,SAAM,IAAI,oBAAoB,kBAAkB,kBAAkB,6BAA6B;;EAIjG,MAAM,QAAQ,MAAM,KAAK,aAAa,OAAO;AAC7C,QAAM,KAAK,iCAAiC,iBAAiB,aAAa;AAC1E,SAAO;;CAGT,sBAAsB,UAAkB;AACtC,SAAO,KAAK,oBAAoB;;CAGlC,MAAM,qBAAqB,cAAsB;EAC/C,MAAM,mBAAmB,MAAM,KAAK,oBAAoB,gBAAgB,aAAa;AACrF,MAAI,KAAK,KAAK,GAAG,iBAAiB,WAAW;AAC3C,SAAM,KAAK,oBAAoB,2BAA2B,iBAAiB,OAAO;AAClF,SAAM,IAAI,oBACR,yCACA,kBAAkB,6BACnB;;AAEH,SAAO;;CAGT,MAAM,iCAAiC,cAAqC;EAC1E,MAAM,EAAE,yBAAyB,MAAM,KAAK,cAAc,uBAAuB;EACjF,MAAM,mBAAmB,MAAM,KAAK,qBAAqB,aAAa;EACtE,MAAM,eAAe,iBAAiB;AAGtC,MAAI,yBAAyB;OACvB,gBAAgB,sBAAsB;AACxC,UAAM,KAAK,oBAAoB,2BAA2B,iBAAiB,OAAO;AAClF,UAAM,IAAI,oBACR,mDACA,kBAAkB,6BACnB;;;AAIL,QAAM,KAAK,oBAAoB,2BAA2B,cAAc,eAAe,EAAE;;CAG3F,MAAM,aAAa,QAAgB;EACjC,MAAM,OAAO,MAAM,KAAK,YAAY,QAAQ,OAAO;AACnD,MAAI,CAAC,KACH,OAAM,IAAI,oBAAoB,kBAAkB,kBAAkB,6BAA6B;AAEjG,MAAI,KAAK,oBACP,OAAM,IAAI,oBAAoB,4BAA4B,kBAAkB,uBAAuB;AAErG,MAAI,CAAC,KAAK,WACR,OAAM,IAAI,oBAAoB,4BAA4B,kBAAkB,mBAAmB;AAEjG,SAAO,KAAK,WAAW,aAAa,QAAQ,KAAK,SAAS"}

package/dist/services/authentication/jwt.service.js

@@ -1,34 +1,25 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "JwtService", {
-    enumerable: true,
-    get: function() {
-        return JwtService;
-    }
-});
-const _jsonwebtoken = require("jsonwebtoken");
-const _serverconstants = require("../../server.constants");
-class JwtService {
-    settingsStore;
-    configService;
-    constructor(settingsStore, configService){
-        this.settingsStore = settingsStore;
-        this.configService = configService;
-    }
-    async signJwtToken(userId, username) {
-        const { jwtSecret, jwtExpiresIn } = await this.settingsStore.getCredentialSettings();
-        return (0, _jsonwebtoken.sign)({
-            userId,
-            username
-        }, jwtSecret, {
-            expiresIn: jwtExpiresIn,
-            subject: userId.toString(),
-            audience: this.configService.get(_serverconstants.AppConstants.OVERRIDE_JWT_AUDIENCE, _serverconstants.AppConstants.DEFAULT_JWT_AUDIENCE),
-            issuer: this.configService.get(_serverconstants.AppConstants.OVERRIDE_JWT_ISSUER, _serverconstants.AppConstants.DEFAULT_JWT_ISSUER)
-        });
-    }
-}
+import { AppConstants } from "../../server.constants.js";
+import jwt from "jsonwebtoken";
+//#region src/services/authentication/jwt.service.ts
+var JwtService = class {
+	constructor(settingsStore, configService) {
+		this.settingsStore = settingsStore;
+		this.configService = configService;
+	}
+	async signJwtToken(userId, username) {
+		const { jwtSecret, jwtExpiresIn } = await this.settingsStore.getCredentialSettings();
+		return jwt.sign({
+			userId,
+			username
+		}, jwtSecret, {
+			expiresIn: jwtExpiresIn,
+			subject: userId.toString(),
+			audience: this.configService.get(AppConstants.OVERRIDE_JWT_AUDIENCE, AppConstants.DEFAULT_JWT_AUDIENCE),
+			issuer: this.configService.get(AppConstants.OVERRIDE_JWT_ISSUER, AppConstants.DEFAULT_JWT_ISSUER)
+		});
+	}
+};
+//#endregion
+export { JwtService };
 
 //# sourceMappingURL=jwt.service.js.map