@fivepixels-js/lite-api 0.2.1

package/dist/app.js

@@ -0,0 +1,70 @@
+import Fastify, { LogController } from 'fastify';
+import { registerErrorHandlers } from './errors/error-handler.js';
+import { registerCommunityApi } from './plugins/community-api.plugin.js';
+import { registerCors } from './plugins/cors.plugin.js';
+import { registerSwagger } from './plugins/swagger.plugin.js';
+import { registerHealthRoute } from './routes/health.route.js';
+import { registerVersionRoute } from './routes/version.route.js';
+export async function buildApp(options) {
+    const requestStartedAt = new WeakMap();
+    const app = Fastify({
+        bodyLimit: 1024 * 1024,
+        logController: new LogController({ disableRequestLogging: true }),
+        trustProxy: options.config.trustedProxies.length > 0
+            ? options.config.trustedProxies
+            : false,
+        logger: options.logger === false ? false : {
+            level: options.config.logLevel,
+            redact: {
+                paths: [
+                    'req.headers.authorization',
+                    'request.headers.authorization',
+                    'req.body.password',
+                    'request.body.password',
+                    'req.body.refreshToken',
+                    'request.body.refreshToken',
+                ],
+                censor: '[REDACTED]',
+            },
+        },
+    });
+    app.addHook('onRequest', (request, _reply, done) => {
+        requestStartedAt.set(request, process.hrtime.bigint());
+        done();
+    });
+    app.addHook('onResponse', (request, reply, done) => {
+        const startedAt = requestStartedAt.get(request);
+        const durationMs = startedAt === undefined
+            ? 0
+            : Number(process.hrtime.bigint() - startedAt) / 1_000_000;
+        const requestPath = request.url.split('?', 1)[0] ?? request.url;
+        const path = request.routeOptions.url || requestPath;
+        const logFields = {
+            requestId: request.id,
+            method: request.method,
+            path,
+            statusCode: reply.statusCode,
+            durationMs: Math.round(durationMs * 100) / 100,
+        };
+        if (requestPath === '/health') {
+            request.log.debug(logFields, 'Request completed');
+        }
+        else {
+            request.log.info(logFields, 'Request completed');
+        }
+        done();
+    });
+    registerErrorHandlers(app);
+    await registerCors(app, options.config.corsOrigins);
+    await registerSwagger(app, options.config.docsEnabled);
+    await registerCommunityApi(app, options.database, options.config);
+    registerHealthRoute(app, options.database);
+    registerVersionRoute(app);
+    app.addHook('onClose', async () => {
+        if (options.database.open)
+            options.database.close();
+        await Promise.resolve();
+    });
+    return app;
+}
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAMjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAQjE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACrD,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAAkB,CAAC;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC;QAClB,SAAS,EAAE,IAAI,GAAG,IAAI;QACtB,aAAa,EAAE,IAAI,aAAa,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;QACjE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;YAClD,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc;YAC/B,CAAC,CAAC,KAAK;QACT,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACzC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;YAC9B,MAAM,EAAE;gBACN,KAAK,EAAE;oBACL,2BAA2B;oBAC3B,+BAA+B;oBAC/B,mBAAmB;oBACnB,uBAAuB;oBACvB,uBAAuB;oBACvB,2BAA2B;iBAC5B;gBACD,MAAM,EAAE,YAAY;aACrB;SACF;KACF,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACjD,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACjD,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,SAAS,KAAK,SAAS;YACxC,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;QAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC;QAChE,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,WAAW,CAAC;QACrD,MAAM,SAAS,GAAG;YAChB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI;YACJ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG;SAC/C,CAAC;QACF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAE1B,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAChC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI;YAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpD,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/auth/identity.repository.d.ts

@@ -0,0 +1,62 @@
+import type { SqliteDatabase } from '../db/connection.js';
+export interface IdentityUserRecord {
+    createdAt: string;
+    id: string;
+    profileImageUrl: string | null;
+    statusCode: number;
+    updatedAt: string;
+    userName: string;
+}
+export interface AuthenticationUserRecord {
+    id: string;
+    loginId: string;
+    profileImageUrl: string | null;
+    userName: string;
+}
+export interface CredentialWithUserRecord extends AuthenticationUserRecord {
+    failedLoginCount: number;
+    lockedUntil: string | null;
+    passwordHash: string;
+    statusCode: number;
+    version: number;
+}
+export interface RegisterAccountInput {
+    createdAt: string;
+    email: string;
+    id: string;
+    loginId: string;
+    passwordHash: string;
+    userName: string;
+}
+export interface RefreshTokenInput {
+    createdAt: string;
+    expiresAt: string;
+    id: string;
+    tokenHash: Buffer;
+    userId: string;
+}
+export type NewRefreshTokenInput = Omit<RefreshTokenInput, 'userId'>;
+export type RefreshRotationResult = {
+    kind: 'invalid';
+    reuseDetected: boolean;
+} | {
+    kind: 'user-blocked';
+} | {
+    kind: 'rotated';
+    user: AuthenticationUserRecord;
+};
+export declare class IdentityRepository {
+    private readonly database;
+    constructor(database: SqliteDatabase);
+    registerAccount(input: RegisterAccountInput): void;
+    findCredentialByLoginId(loginId: string): CredentialWithUserRecord | undefined;
+    recordFailedLogin(userId: string, now: string, lockedUntil: string, maxFailedLoginAttempts: number): void;
+    completeLogin(credential: CredentialWithUserRecord, now: string, refreshToken: NewRefreshTokenInput, replacementHash?: string): boolean;
+    rotateRefreshToken(tokenHash: Buffer, replacement: NewRefreshTokenInput, now: string): RefreshRotationResult;
+    logout(tokenHash: Buffer, now: string): void;
+    findUserById(userId: string): IdentityUserRecord | undefined;
+    private insertRefreshToken;
+    private revokeRefreshToken;
+    private revokeActiveRefreshTokens;
+}
+//# sourceMappingURL=identity.repository.d.ts.map

package/dist/auth/identity.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.repository.d.ts","sourceRoot":"","sources":["../../src/auth/identity.repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAyB,SAAQ,wBAAwB;IACxE,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;AAErE,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,wBAAwB,CAAA;CAAE,CAAC;AA0BxD,qBAAa,kBAAkB;IACV,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,cAAc;IAErD,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI;IAmClD,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS;IAmB9E,iBAAiB,CACtB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,EACnB,sBAAsB,EAAE,MAAM,GAC7B,IAAI;IAoBA,aAAa,CAClB,UAAU,EAAE,wBAAwB,EACpC,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,oBAAoB,EAClC,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO;IAqBH,kBAAkB,CACvB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,oBAAoB,EACjC,GAAG,EAAE,MAAM,GACV,qBAAqB;IAuEjB,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAQ5C,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAcnE,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,yBAAyB;CAOlC"}

package/dist/auth/identity.repository.js

@@ -0,0 +1,202 @@
+export class IdentityRepository {
+    database;
+    constructor(database) {
+        this.database = database;
+    }
+    registerAccount(input) {
+        this.database.transaction(() => {
+            this.database.prepare(`
+        INSERT INTO users (
+          user_id, status_code, user_name, profile_image_url, created_at, updated_at
+        ) VALUES (?, 1, ?, NULL, ?, ?)
+      `).run(input.id, input.userName, input.createdAt, input.createdAt);
+            this.database.prepare(`
+        INSERT INTO local_credentials (
+          user_id,
+          login_id,
+          email,
+          password_hash,
+          failed_login_count,
+          locked_until,
+          email_verified_at,
+          password_changed_at,
+          last_login_at,
+          lock_version,
+          created_at,
+          updated_at
+        ) VALUES (?, ?, ?, ?, 0, NULL, NULL, ?, NULL, 0, ?, ?)
+      `).run(input.id, input.loginId, input.email, input.passwordHash, input.createdAt, input.createdAt, input.createdAt);
+        }).immediate();
+    }
+    findCredentialByLoginId(loginId) {
+        const row = this.database.prepare(`
+      SELECT
+        users.user_id AS id,
+        users.status_code AS statusCode,
+        users.user_name AS userName,
+        users.profile_image_url AS profileImageUrl,
+        local_credentials.login_id AS loginId,
+        local_credentials.password_hash AS passwordHash,
+        local_credentials.failed_login_count AS failedLoginCount,
+        local_credentials.locked_until AS lockedUntil,
+        local_credentials.lock_version AS version
+      FROM local_credentials
+      INNER JOIN users ON users.user_id = local_credentials.user_id
+      WHERE local_credentials.login_id = ? COLLATE NOCASE
+    `).get(loginId);
+        return row;
+    }
+    recordFailedLogin(userId, now, lockedUntil, maxFailedLoginAttempts) {
+        const nextCount = `
+      CASE
+        WHEN locked_until IS NOT NULL AND locked_until <= @now THEN 1
+        ELSE failed_login_count + 1
+      END
+    `;
+        this.database.prepare(`
+      UPDATE local_credentials
+      SET failed_login_count = ${nextCount},
+          locked_until = CASE
+            WHEN (${nextCount}) >= @maxFailedLoginAttempts THEN @lockedUntil
+            ELSE NULL
+          END,
+          updated_at = @now,
+          lock_version = lock_version + 1
+      WHERE user_id = @userId
+    `).run({ userId, now, lockedUntil, maxFailedLoginAttempts });
+    }
+    completeLogin(credential, now, refreshToken, replacementHash) {
+        return this.database.transaction(() => {
+            const updated = this.database.prepare(`
+        UPDATE local_credentials
+        SET password_hash = ?,
+            failed_login_count = 0,
+            locked_until = NULL,
+            last_login_at = ?,
+            updated_at = ?,
+            lock_version = lock_version + 1
+        WHERE user_id = ? AND password_hash = ? AND lock_version = ?
+          AND (locked_until IS NULL OR locked_until <= ?)
+          AND EXISTS (SELECT 1 FROM users WHERE user_id = local_credentials.user_id AND status_code = 1)
+      `).run(replacementHash ?? credential.passwordHash, now, now, credential.id, credential.passwordHash, credential.version, now);
+            if (updated.changes !== 1)
+                return false;
+            this.insertRefreshToken({ ...refreshToken, userId: credential.id });
+            return true;
+        }).immediate();
+    }
+    rotateRefreshToken(tokenHash, replacement, now) {
+        return this.database.transaction(() => {
+            const storedToken = this.database.prepare(`
+        SELECT
+          token.refresh_token_id AS id,
+          token.user_id AS userId,
+          token.expires_at AS expiresAt,
+          token.revoked_at AS revokedAt,
+          token.replaced_by_token_id AS replacedByTokenId,
+          users.status_code AS statusCode,
+          users.user_name AS userName,
+          users.profile_image_url AS profileImageUrl,
+          credential.login_id AS credentialLoginId
+        FROM auth_refresh_tokens AS token
+        INNER JOIN users ON users.user_id = token.user_id
+        LEFT JOIN local_credentials AS credential ON credential.user_id = token.user_id
+        WHERE token.token_hash = ?
+      `).get(tokenHash);
+            if (storedToken === undefined)
+                return { kind: 'invalid', reuseDetected: false };
+            if (storedToken.revokedAt !== null) {
+                if (storedToken.replacedByTokenId !== null) {
+                    this.revokeActiveRefreshTokens(storedToken.userId, now);
+                }
+                return {
+                    kind: 'invalid',
+                    reuseDetected: storedToken.replacedByTokenId !== null,
+                };
+            }
+            if (storedToken.expiresAt <= now) {
+                this.revokeRefreshToken(storedToken.id, now);
+                return { kind: 'invalid', reuseDetected: false };
+            }
+            if (storedToken.statusCode !== 1) {
+                this.revokeActiveRefreshTokens(storedToken.userId, now);
+                return { kind: 'user-blocked' };
+            }
+            if (storedToken.credentialLoginId === null) {
+                this.revokeActiveRefreshTokens(storedToken.userId, now);
+                return { kind: 'invalid', reuseDetected: false };
+            }
+            this.insertRefreshToken({ ...replacement, userId: storedToken.userId });
+            const updated = this.database.prepare(`
+        UPDATE auth_refresh_tokens
+        SET last_used_at = ?,
+            revoked_at = ?,
+            replaced_by_token_id = ?,
+            lock_version = lock_version + 1
+        WHERE refresh_token_id = ? AND revoked_at IS NULL
+      `).run(now, now, replacement.id, storedToken.id);
+            if (updated.changes !== 1) {
+                throw new Error('refresh-token-rotation-conflict');
+            }
+            return {
+                kind: 'rotated',
+                user: {
+                    id: storedToken.userId,
+                    loginId: storedToken.credentialLoginId,
+                    userName: storedToken.userName,
+                    profileImageUrl: storedToken.profileImageUrl,
+                },
+            };
+        }).immediate();
+    }
+    logout(tokenHash, now) {
+        this.database.prepare(`
+      UPDATE auth_refresh_tokens
+      SET revoked_at = ?, lock_version = lock_version + 1
+      WHERE token_hash = ? AND revoked_at IS NULL
+    `).run(now, tokenHash);
+    }
+    findUserById(userId) {
+        return this.database.prepare(`
+      SELECT
+        user_id AS id,
+        status_code AS statusCode,
+        user_name AS userName,
+        profile_image_url AS profileImageUrl,
+        created_at AS createdAt,
+        updated_at AS updatedAt
+      FROM users
+      WHERE user_id = ?
+    `).get(userId);
+    }
+    insertRefreshToken(input) {
+        this.database.prepare(`
+      INSERT INTO auth_refresh_tokens (
+        refresh_token_id,
+        user_id,
+        token_hash,
+        expires_at,
+        last_used_at,
+        revoked_at,
+        replaced_by_token_id,
+        lock_version,
+        created_at
+      ) VALUES (?, ?, ?, ?, NULL, NULL, NULL, 0, ?)
+    `).run(input.id, input.userId, input.tokenHash, input.expiresAt, input.createdAt);
+    }
+    revokeRefreshToken(refreshTokenId, now) {
+        this.database.prepare(`
+      UPDATE auth_refresh_tokens
+      SET revoked_at = ?, lock_version = lock_version + 1
+      WHERE refresh_token_id = ? AND revoked_at IS NULL
+    `).run(now, refreshTokenId);
+    }
+    revokeActiveRefreshTokens(userId, now) {
+        this.database.prepare(`
+      UPDATE auth_refresh_tokens
+      SET revoked_at = ?, lock_version = lock_version + 1
+      WHERE user_id = ? AND revoked_at IS NULL
+    `).run(now, userId);
+    }
+}
+//# sourceMappingURL=identity.repository.js.map

package/dist/auth/identity.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.repository.js","sourceRoot":"","sources":["../../src/auth/identity.repository.ts"],"names":[],"mappings":"AA0EA,MAAM,OAAO,kBAAkB;IACO;IAApC,YAAoC,QAAwB;QAAxB,aAAQ,GAAR,QAAQ,CAAgB;IAAG,CAAC;IAEzD,eAAe,CAAC,KAA2B;QAChD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;OAIrB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAEnE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;OAerB,CAAC,CAAC,GAAG,CACJ,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,CAChB,CAAC;QACJ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACjB,CAAC;IAEM,uBAAuB,CAAC,OAAe;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;;;;;;;;;;;KAcjC,CAAC,CAAC,GAAG,CAAC,OAAO,CAA8B,CAAC;QAC7C,OAAO,GAAG,CAAC;IACb,CAAC;IAEM,iBAAiB,CACtB,MAAc,EACd,GAAW,EACX,WAAmB,EACnB,sBAA8B;QAE9B,MAAM,SAAS,GAAG;;;;;KAKjB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;iCAEO,SAAS;;oBAEtB,SAAS;;;;;;KAMxB,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAC/D,CAAC;IAEM,aAAa,CAClB,UAAoC,EACpC,GAAW,EACX,YAAkC,EAClC,eAAwB;QAExB,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;;;;;;;;OAWrC,CAAC,CAAC,GAAG,CAAC,eAAe,IAAI,UAAU,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,EACzD,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACnE,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACxC,IAAI,CAAC,kBAAkB,CAAC,EAAE,GAAG,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACjB,CAAC;IAEM,kBAAkB,CACvB,SAAiB,EACjB,WAAiC,EACjC,GAAW;QAEX,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAA0B,EAAE;YAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;OAezC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAgC,CAAC;YAEjD,IAAI,WAAW,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;YAEhF,IAAI,WAAW,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBACnC,IAAI,WAAW,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;oBAC3C,IAAI,CAAC,yBAAyB,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC1D,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,aAAa,EAAE,WAAW,CAAC,iBAAiB,KAAK,IAAI;iBACtD,CAAC;YACJ,CAAC;YAED,IAAI,WAAW,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBACjC,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC7C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;YACnD,CAAC;YAED,IAAI,WAAW,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,yBAAyB,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACxD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;YAClC,CAAC;YAED,IAAI,WAAW,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;gBAC3C,IAAI,CAAC,yBAAyB,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACxD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;YACnD,CAAC;YAED,IAAI,CAAC,kBAAkB,CAAC,EAAE,GAAG,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;;;;OAOrC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;YACjD,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE;oBACJ,EAAE,EAAE,WAAW,CAAC,MAAM;oBACtB,OAAO,EAAE,WAAW,CAAC,iBAAiB;oBACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;oBAC9B,eAAe,EAAE,WAAW,CAAC,eAAe;iBAC7C;aACF,CAAC;QACJ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACjB,CAAC;IAEM,MAAM,CAAC,SAAiB,EAAE,GAAW;QAC1C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;KAIrB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACzB,CAAC;IAEM,YAAY,CAAC,MAAc;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;;;;;;;KAU5B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAmC,CAAC;IACnD,CAAC;IAEO,kBAAkB,CAAC,KAAwB;QACjD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;;;;;;;;;KAYrB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACpF,CAAC;IAEO,kBAAkB,CAAC,cAAsB,EAAE,GAAW;QAC5D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;KAIrB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC9B,CAAC;IAEO,yBAAyB,CAAC,MAAc,EAAE,GAAW;QAC3D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;KAIrB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtB,CAAC;CACF"}

package/dist/auth/identity.routes.d.ts

@@ -0,0 +1,5 @@
+import type { FastifyInstance } from 'fastify';
+import type { AppConfig } from '../config/config.js';
+import type { SqliteDatabase } from '../db/connection.js';
+export declare function registerIdentityRoutes(app: FastifyInstance, database: SqliteDatabase, config: AppConfig): Promise<void>;
+//# sourceMappingURL=identity.routes.d.ts.map

package/dist/auth/identity.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.routes.d.ts","sourceRoot":"","sources":["../../src/auth/identity.routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAgB1D,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,IAAI,CAAC,CAuDf"}

package/dist/auth/identity.routes.js

@@ -0,0 +1,56 @@
+import rateLimit from '@fastify/rate-limit';
+import { successResponse } from '../community/contracts.js';
+import { IdentityRepository } from './identity.repository.js';
+import { loginRouteSchema, logoutRouteSchema, refreshRouteSchema, registerRouteSchema, } from './identity.schemas.js';
+import { IdentityService } from './identity.service.js';
+import { PasswordService } from './password.service.js';
+import { TokenService } from './token.service.js';
+export async function registerIdentityRoutes(app, database, config) {
+    await app.register(rateLimit, {
+        global: false,
+    });
+    const repository = new IdentityRepository(database);
+    const passwordService = new PasswordService();
+    const tokenService = new TokenService(config, (payload, options) => app.jwt.sign(payload, options));
+    const service = new IdentityService(repository, passwordService, tokenService, config);
+    app.post('/auth/register', {
+        schema: registerRouteSchema,
+        config: {
+            rateLimit: { max: 5, timeWindow: '1 hour', groupId: 'auth-register' },
+        },
+    }, async (request, reply) => {
+        const result = await service.register(request.body);
+        request.log.info({ userId: result.id }, 'Fivepixels registration succeeded');
+        return reply.code(201).send(successResponse(result, undefined, '회원가입했습니다.'));
+    });
+    app.post('/auth/login', {
+        schema: loginRouteSchema,
+        config: {
+            rateLimit: { max: 10, timeWindow: '1 minute', groupId: 'auth-login' },
+        },
+    }, async (request) => {
+        const result = await service.login(request.body);
+        request.log.info({ userId: result.user.id }, 'Fivepixels login succeeded');
+        return successResponse(result, undefined, '로그인했습니다.');
+    });
+    app.post('/auth/refresh', {
+        schema: refreshRouteSchema,
+        config: {
+            rateLimit: { max: 30, timeWindow: '1 minute', groupId: 'auth-refresh' },
+        },
+    }, (request) => {
+        const result = service.refresh(request.body.refreshToken);
+        request.log.info({ userId: result.user.id }, 'Fivepixels token refreshed');
+        return successResponse(result, undefined, '토큰을 갱신했습니다.');
+    });
+    app.post('/auth/logout', {
+        schema: logoutRouteSchema,
+        config: {
+            rateLimit: { max: 30, timeWindow: '1 minute', groupId: 'auth-logout' },
+        },
+    }, (request) => {
+        const result = service.logout(request.body.refreshToken);
+        return successResponse(result, undefined, '로그아웃했습니다.');
+    });
+}
+//# sourceMappingURL=identity.routes.js.map

package/dist/auth/identity.routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.routes.js","sourceRoot":"","sources":["../../src/auth/identity.routes.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,qBAAqB,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAA2C,MAAM,uBAAuB,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAMlD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAoB,EACpB,QAAwB,EACxB,MAAiB;IAEjB,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE;QAC5B,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,YAAY,GAAG,IAAI,YAAY,CACnC,MAAM,EACN,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CACrD,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IAEvF,GAAG,CAAC,IAAI,CAA4B,gBAAgB,EAAE;QACpD,MAAM,EAAE,mBAAmB;QAC3B,MAAM,EAAE;YACN,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE;SACtE;KACF,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAC7E,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAyB,aAAa,EAAE;QAC9C,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE;YACN,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE;SACtE;KACF,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAC3E,OAAO,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAA2B,eAAe,EAAE;QAClD,MAAM,EAAE,kBAAkB;QAC1B,MAAM,EAAE;YACN,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE;SACxE;KACF,EAAE,CAAC,OAAO,EAAE,EAAE;QACb,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAC3E,OAAO,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAA2B,cAAc,EAAE;QACjD,MAAM,EAAE,iBAAiB;QACzB,MAAM,EAAE;YACN,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE;SACvE;KACF,EAAE,CAAC,OAAO,EAAE,EAAE;QACb,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzD,OAAO,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC"}