@flusys/nestjs-auth 7.0.2 → 8.0.0-beta.1

package/fesm/index.js

@@ -1,12 +1,1437 @@
-export * from './config';
-export * from './controllers';
-export * from './docs';
-export * from './dtos';
-export * from './entities';
-export * from './enums';
-export * from './helpers';
-export * from './interceptors';
-export * from './interfaces';
-export * from './modules';
-export * from './services';
-export * from './strategies/jwt.strategy';
+import { ExtractJwt, Strategy } from "passport-jwt";
+import * as __rspack_external__nestjs_passport_18907953 from "@nestjs/passport";
+export const __rspack_esm_id = 410;
+export const __rspack_esm_ids = [410];
+export const __webpack_modules__ = {
+1333(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _auth_constants_js__rspack_import_0 = __webpack_require__(5588);
+/* import */ var _event_actions_js__rspack_import_1 = __webpack_require__(7987);
+/* import */ var _message_keys_js__rspack_import_2 = __webpack_require__(5363);
+
+
+
+
+__webpack_require__.d(__webpack_exports__, {
+  EV: () => (/* reexport safe */ _auth_constants_js__rspack_import_0.EV),
+  HZ: () => (/* reexport safe */ _message_keys_js__rspack_import_2.HZ),
+  I7: () => (/* reexport safe */ (/* inlined export _auth_constants_js__rspack_import_0 */3500)),
+  OF: () => (/* reexport safe */ _message_keys_js__rspack_import_2.OF),
+  PR: () => (/* reexport safe */ _auth_constants_js__rspack_import_0.PR),
+  Vl: () => (/* reexport safe */ _auth_constants_js__rspack_import_0.Vl),
+  W1: () => (/* reexport safe */ _message_keys_js__rspack_import_2.W1),
+  aK: () => (/* reexport safe */ (/* inlined export _auth_constants_js__rspack_import_0 */12)),
+  gm: () => (/* reexport safe */ _event_actions_js__rspack_import_1.g),
+  hg: () => (/* reexport safe */ _message_keys_js__rspack_import_2.hg),
+  jt: () => (/* reexport safe */ _auth_constants_js__rspack_import_0.jt),
+  jz: () => (/* reexport safe */ _message_keys_js__rspack_import_2.jz),
+  kP: () => (/* reexport safe */ (/* inlined export _auth_constants_js__rspack_import_0 */600000)),
+  mK: () => (/* reexport safe */ _message_keys_js__rspack_import_2.mK),
+  nV: () => (/* reexport safe */ (/* inlined export _event_actions_js__rspack_import_1 */"auth")),
+  ny: () => (/* reexport safe */ _message_keys_js__rspack_import_2.ny),
+  ov: () => (/* reexport safe */ _event_actions_js__rspack_import_1.o),
+  rv: () => (/* reexport safe */ _auth_constants_js__rspack_import_0.rv),
+  sv: () => (/* reexport safe */ _message_keys_js__rspack_import_2.sv),
+  xe: () => (/* reexport safe */ _auth_constants_js__rspack_import_0.xe)
+});
+
+
+},
+4706(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  J: () => (/* reexport */ authSwaggerConfig)
+});
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/docs/auth-swagger.config.ts
+// ============================================================================
+// Company feature exclusions
+// ============================================================================
+const COMPANY_RELATED_TAGS = [
+    'Companies',
+    'Branches',
+    'User Permissions',
+    'Company Selection'
+];
+const COMPANY_SCHEMA_EXCLUSIONS = [
+    // Request DTOs
+    {
+        schemaName: 'RegistrationDto',
+        properties: [
+            'companySlug',
+            'branchSlug',
+            'newCompanyName',
+            'newCompanyPhone',
+            'newCompanyAddress'
+        ]
+    },
+    {
+        schemaName: 'SelectDto',
+        properties: [
+            'sessionId',
+            'companyId',
+            'branchId'
+        ]
+    },
+    {
+        schemaName: 'SwitchCompanyDto',
+        properties: [
+            'companyId',
+            'branchId'
+        ]
+    },
+    // Response DTOs
+    {
+        schemaName: 'RegistrationResponseDto',
+        properties: [
+            'company',
+            'branch'
+        ]
+    },
+    {
+        schemaName: 'LoginResponseDto',
+        properties: [
+            'company',
+            'branch'
+        ]
+    },
+    {
+        schemaName: 'MeResponseDto',
+        properties: [
+            'company',
+            'branch'
+        ]
+    },
+    // Nested helper DTOs
+    {
+        schemaName: 'CompanyInfoDto',
+        properties: [
+            'id',
+            'name',
+            'slug',
+            'logoId'
+        ]
+    },
+    {
+        schemaName: 'BranchInfoDto',
+        properties: [
+            'id',
+            'name',
+            'slug',
+            'logoId'
+        ]
+    },
+    {
+        schemaName: 'BranchSelectionInfoDto',
+        properties: [
+            'id',
+            'name',
+            'slug',
+            'logoId'
+        ]
+    },
+    {
+        schemaName: 'CompanyWithBranchesDto',
+        properties: [
+            'id',
+            'name',
+            'slug',
+            'logoId',
+            'branches'
+        ]
+    },
+    {
+        schemaName: 'CompanySelectionResponseDto',
+        properties: [
+            'requiresSelection',
+            'sessionId',
+            'expiresAt',
+            'user',
+            'companies'
+        ]
+    },
+    // Company management DTOs
+    {
+        schemaName: 'CreateCompanyDto',
+        properties: [
+            'name',
+            'slug',
+            'logoId',
+            'address',
+            'phone',
+            'email',
+            'website',
+            'serial',
+            'isActive',
+            'settings',
+            'additionalFields'
+        ]
+    },
+    {
+        schemaName: 'UpdateCompanyDto',
+        properties: [
+            'id',
+            'name',
+            'slug',
+            'logoId',
+            'address',
+            'phone',
+            'email',
+            'website',
+            'serial',
+            'isActive',
+            'settings',
+            'additionalFields'
+        ]
+    },
+    {
+        schemaName: 'CompanyResponseDto',
+        properties: [
+            'id',
+            'name',
+            'slug',
+            'logoId',
+            'address',
+            'phone',
+            'email',
+            'website',
+            'serial',
+            'isActive',
+            'settings',
+            'additionalFields',
+            'readOnly',
+            'createdAt',
+            'updatedAt'
+        ]
+    },
+    // Branch management DTOs
+    {
+        schemaName: 'CreateCompanyBranchDto',
+        properties: [
+            'name',
+            'slug',
+            'companyId',
+            'parentId',
+            'logoId',
+            'address',
+            'phone',
+            'email',
+            'serial',
+            'isActive',
+            'additionalFields'
+        ]
+    },
+    {
+        schemaName: 'UpdateCompanyBranchDto',
+        properties: [
+            'id',
+            'name',
+            'slug',
+            'companyId',
+            'parentId',
+            'logoId',
+            'address',
+            'phone',
+            'email',
+            'serial',
+            'isActive',
+            'additionalFields'
+        ]
+    },
+    {
+        schemaName: 'CompanyBranchResponseDto',
+        properties: [
+            'id',
+            'name',
+            'slug',
+            'companyId',
+            'parentId',
+            'logoId',
+            'address',
+            'phone',
+            'email',
+            'serial',
+            'isActive',
+            'additionalFields',
+            'readOnly',
+            'createdAt',
+            'updatedAt'
+        ]
+    },
+    // User permission DTOs
+    {
+        schemaName: 'UserCompanyPermissionDto',
+        properties: [
+            'id',
+            'userId',
+            'companyId',
+            'companyName',
+            'companySlug'
+        ]
+    },
+    {
+        schemaName: 'UserBranchPermissionDto',
+        properties: [
+            'id',
+            'userId',
+            'branchId',
+            'branchName',
+            'branchSlug',
+            'companyId'
+        ]
+    },
+    {
+        schemaName: 'AssignUserCompanyDto',
+        properties: [
+            'userId',
+            'items'
+        ]
+    },
+    {
+        schemaName: 'AssignUserBranchDto',
+        properties: [
+            'userId',
+            'items'
+        ]
+    },
+    {
+        schemaName: 'PermissionItemDto',
+        properties: [
+            'targetId',
+            'isAdd'
+        ]
+    },
+    {
+        schemaName: 'UserCompaniesResponseDto',
+        properties: [
+            'data'
+        ]
+    },
+    {
+        schemaName: 'UserBranchesResponseDto',
+        properties: [
+            'data'
+        ]
+    }
+];
+const COMPANY_EXAMPLE_EXCLUSIONS = [
+    {
+        pathPattern: '/auth/login',
+        method: 'post',
+        examples: [
+            'loginSuccessWithCompany',
+            'companySelection'
+        ]
+    }
+];
+// ============================================================================
+// Email verification exclusions
+// ============================================================================
+const EMAIL_VERIFICATION_PATHS = [
+    '/auth/forgot-password',
+    '/auth/reset-password',
+    '/auth/resend-verification',
+    '/auth/verify-email'
+];
+const EMAIL_VERIFICATION_SCHEMA_EXCLUSIONS = [
+    {
+        schemaName: 'RegistrationResponseDto',
+        properties: [
+            'requiresEmailVerification'
+        ]
+    },
+    {
+        schemaName: 'LoginResponseRequiresEmailVerificationDto',
+        properties: [
+            'requiresEmailVerification',
+            'email'
+        ]
+    }
+];
+const EMAIL_VERIFICATION_EXAMPLE_EXCLUSIONS = [
+    {
+        pathPattern: '/auth/login',
+        method: 'post',
+        examples: [
+            'emailVerification'
+        ]
+    }
+];
+// ============================================================================
+// Description builder
+// ============================================================================
+function buildDescription(enableCompanyFeature, enableEmailVerification, isMultiTenant) {
+    const multiTenantNote = isMultiTenant ? `\n> **Multi-Tenant Mode**: Include \`x-tenant-id\` header to target a specific tenant database.\n` : '';
+    const features = [
+        '- User registration',
+        '- Login with email/password',
+        '- Social sign-in (Google, Facebook, LinkedIn, Microsoft)',
+        '- JWT token-based authentication',
+        ...enableEmailVerification ? [
+            '- Email verification',
+            '- Forgot/reset password'
+        ] : [],
+        ...enableCompanyFeature ? [
+            '- Company/Branch selection flow (multi-company enabled)'
+        ] : [],
+        '- Token refresh',
+        '- Password change'
+    ].join('\n');
+    const loginFlowSection = enableCompanyFeature ? `
+### Authentication Flow
+
+#### Simple Login (single company/branch)
+\`\`\`
+POST /auth/login → { accessToken, refreshToken, user, company, branch }
+\`\`\`
+
+#### Multi-Company Login (multiple companies or branches)
+\`\`\`
+POST /auth/login → { requiresSelection: true, sessionId, companies }
+POST /auth/select → { accessToken, refreshToken, user, company, branch }
+\`\`\`
+${enableEmailVerification ? `
+#### Email Verification Required
+\`\`\`
+POST /auth/login → { requiresEmailVerification: true, email }
+POST /auth/verify-email → { accessToken, refreshToken, user }
+\`\`\`
+` : ''}
+### Company/Branch Selection Endpoints
+- \`POST /auth/select\` - Complete login by selecting company and branch
+- \`POST /auth/switch-company\` - Switch to different company/branch while logged in
+` : `
+### Authentication Flow
+\`\`\`
+POST /auth/login → { accessToken, refreshToken, user }
+\`\`\`
+${enableEmailVerification ? `
+#### Email Verification Required
+\`\`\`
+POST /auth/login → { requiresEmailVerification: true, email }
+POST /auth/verify-email → { accessToken, refreshToken, user }
+\`\`\`
+` : ''}`;
+    const emailVerificationSection = enableEmailVerification ? `
+### Email Verification Endpoints
+- \`POST /auth/forgot-password\` - Request password reset email
+- \`POST /auth/reset-password\` - Reset password using token
+- \`POST /auth/resend-verification\` - Resend verification email
+- \`POST /auth/verify-email\` - Verify email using token
+` : '';
+    const socialSection = `
+### Social Sign-In Endpoints
+- \`POST /auth/social/providers\` - List the providers an administrator enabled
+- \`POST /auth/social/authorize\` - Start a sign-in and get the provider's consent URL
+- \`POST /auth/social/callback\` - Exchange the provider's code for a session
+- \`POST /auth/social-config/*\` - Manage provider credentials
+`;
+    const administrationSection = enableCompanyFeature ? `
+### Administration Endpoints
+- \`POST /administration/users/*\` - User management
+- \`POST /administration/company/*\` - Company management
+- \`POST /administration/branch/*\` - Branch management
+- \`POST /administration/user-permissions/*\` - User permission management
+` : `
+### Administration Endpoints
+- \`POST /administration/users/*\` - User management
+`;
+    const registrationSection = enableCompanyFeature ? `
+### Registration Flow
+
+**Simple registration:**
+\`\`\`json
+{ "name": "John Doe", "email": "john@example.com", "password": "password123" }
+\`\`\`
+
+**Join existing company:**
+\`\`\`json
+{ "name": "John Doe", "email": "john@example.com", "password": "password123", "companySlug": "acme-corp", "branchSlug": "main-branch" }
+\`\`\`
+
+**Create new company:**
+\`\`\`json
+{ "name": "John Doe", "email": "john@example.com", "password": "password123", "newCompanyName": "My New Company" }
+\`\`\`
+` : `
+### Registration Flow
+\`\`\`json
+{ "name": "John Doe", "email": "john@example.com", "password": "password123" }
+\`\`\`
+`;
+    return `
+## Authentication API
+${multiTenantNote}
+Handles user authentication${enableCompanyFeature ? ', company/branch management' : ''}, and registration.
+
+### Features
+${features}
+${loginFlowSection}${emailVerificationSection}${socialSection}${administrationSection}${registrationSection}`;
+}
+// ============================================================================
+// Config factory
+// ============================================================================
+function authSwaggerConfig(bootstrapConfig) {
+    const enableCompanyFeature = bootstrapConfig?.enableCompanyFeature ?? true;
+    const enableEmailVerification = bootstrapConfig?.enableEmailVerification ?? true;
+    const isMultiTenant = bootstrapConfig?.databaseMode === 'multi-tenant';
+    const excludeTags = enableCompanyFeature ? [] : COMPANY_RELATED_TAGS;
+    const excludeSchemaProperties = [
+        ...enableCompanyFeature ? [] : COMPANY_SCHEMA_EXCLUSIONS,
+        ...enableEmailVerification ? [] : EMAIL_VERIFICATION_SCHEMA_EXCLUSIONS
+    ];
+    // Merge example exclusions — both may target /auth/login with different example names
+    const excludeExamples = [
+        ...enableCompanyFeature ? [] : COMPANY_EXAMPLE_EXCLUSIONS,
+        ...enableEmailVerification ? [] : EMAIL_VERIFICATION_EXAMPLE_EXCLUSIONS
+    ];
+    const excludePaths = enableEmailVerification ? undefined : EMAIL_VERIFICATION_PATHS;
+    return {
+        title: 'Auth API',
+        description: buildDescription(enableCompanyFeature, enableEmailVerification, isMultiTenant),
+        version: '1.0',
+        path: 'api/docs/auth',
+        bearerAuth: true,
+        excludeTags,
+        excludeSchemaProperties: excludeSchemaProperties.length ? excludeSchemaProperties : undefined,
+        excludeExamples: excludeExamples.length ? excludeExamples : undefined,
+        excludePaths
+    };
+}
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/docs/index.ts
+
+
+
+},
+9029(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _authentication_dto_js__rspack_import_0 = __webpack_require__(8978);
+/* import */ var _company_branch_dto_js__rspack_import_1 = __webpack_require__(9556);
+/* import */ var _company_dto_js__rspack_import_2 = __webpack_require__(1845);
+/* import */ var _social_auth_dto_js__rspack_import_3 = __webpack_require__(430);
+/* import */ var _user_dto_js__rspack_import_4 = __webpack_require__(7265);
+/* import */ var _user_permission_dto_js__rspack_import_5 = __webpack_require__(3939);
+
+
+
+
+
+
+
+__webpack_require__.d(__webpack_exports__, {
+  $h: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.$h),
+  DU: () => (/* reexport safe */ _user_permission_dto_js__rspack_import_5.DU),
+  ET: () => (/* reexport safe */ _company_branch_dto_js__rspack_import_1.ET),
+  G3: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.G3),
+  Ky: () => (/* reexport safe */ _company_dto_js__rspack_import_2.Ky),
+  LU: () => (/* reexport safe */ _user_permission_dto_js__rspack_import_5.LU),
+  Oo: () => (/* reexport safe */ _company_branch_dto_js__rspack_import_1.Oo),
+  Oz: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.Oz),
+  QW: () => (/* reexport safe */ _social_auth_dto_js__rspack_import_3.QW),
+  Qf: () => (/* reexport safe */ _user_dto_js__rspack_import_4.Qf),
+  Qm: () => (/* reexport safe */ _user_permission_dto_js__rspack_import_5.Qm),
+  RP: () => (/* reexport safe */ _user_permission_dto_js__rspack_import_5.RP),
+  RQ: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.RQ),
+  SN: () => (/* reexport safe */ _social_auth_dto_js__rspack_import_3.SN),
+  TF: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.TF),
+  TG: () => (/* reexport safe */ _user_dto_js__rspack_import_4.TG),
+  UQ: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.UQ),
+  US: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.US),
+  Uu: () => (/* reexport safe */ _user_permission_dto_js__rspack_import_5.Uu),
+  Vw: () => (/* reexport safe */ _company_branch_dto_js__rspack_import_1.Vw),
+  X8: () => (/* reexport safe */ _social_auth_dto_js__rspack_import_3.X8),
+  _M: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0._M),
+  a2: () => (/* reexport safe */ _social_auth_dto_js__rspack_import_3.a2),
+  aZ: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.aZ),
+  cd: () => (/* reexport safe */ _company_dto_js__rspack_import_2.cd),
+  dp: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.dp),
+  fF: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.fF),
+  fP: () => (/* reexport safe */ _social_auth_dto_js__rspack_import_3.fP),
+  gw: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.gw),
+  iJ: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.iJ),
+  k2: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.k2),
+  kd: () => (/* reexport safe */ _social_auth_dto_js__rspack_import_3.kd),
+  kq: () => (/* reexport safe */ _user_dto_js__rspack_import_4.kq),
+  l4: () => (/* reexport safe */ _company_dto_js__rspack_import_2.l4),
+  mG: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.mG),
+  pb: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.pb),
+  pd: () => (/* reexport safe */ _social_auth_dto_js__rspack_import_3.pd),
+  qW: () => (/* reexport safe */ _user_permission_dto_js__rspack_import_5.qW),
+  rl: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.rl),
+  rn: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.rn),
+  s4: () => (/* reexport safe */ _social_auth_dto_js__rspack_import_3.s4),
+  sx: () => (/* reexport safe */ _user_dto_js__rspack_import_4.sx),
+  vb: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.vb),
+  wc: () => (/* reexport safe */ _user_permission_dto_js__rspack_import_5.wc),
+  xG: () => (/* reexport safe */ _authentication_dto_js__rspack_import_0.xG)
+});
+
+
+},
+5180(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _app_user_entity_js__rspack_import_0 = __webpack_require__(4758);
+/* import */ var _company_branch_entity_js__rspack_import_1 = __webpack_require__(1923);
+/* import */ var _company_entity_js__rspack_import_2 = __webpack_require__(8538);
+/* import */ var _pending_registration_entity_js__rspack_import_3 = __webpack_require__(9388);
+/* import */ var _social_auth_config_entity_js__rspack_import_4 = __webpack_require__(2020);
+/* import */ var _user_company_permission_entity_js__rspack_import_5 = __webpack_require__(2377);
+/* import */ var _user_token_entity_js__rspack_import_6 = __webpack_require__(9696);
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+const BaseEntities = [
+    _app_user_entity_js__rspack_import_0/* .AppUser */.$,
+    _user_token_entity_js__rspack_import_6/* .UserToken */.L,
+    _social_auth_config_entity_js__rspack_import_4/* .SocialAuthConfig */.G
+];
+const EmailEntities = [
+    _pending_registration_entity_js__rspack_import_3/* .PendingRegistration */.N
+];
+const CompanyEntities = [
+    _company_entity_js__rspack_import_2/* .Company */.C,
+    _company_branch_entity_js__rspack_import_1/* .CompanyBranch */.A,
+    _user_company_permission_entity_js__rspack_import_5/* .UserCompanyPermission */.I
+];
+function getAuthEntitiesByConfig(config) {
+    const { enableCompanyFeature = false, enableEmailVerification = true } = config;
+    const entities = [
+        ...BaseEntities
+    ];
+    if (enableEmailVerification) {
+        entities.push(...EmailEntities);
+    }
+    if (enableCompanyFeature) {
+        entities.push(...CompanyEntities);
+    }
+    return entities;
+}
+
+__webpack_require__.d(__webpack_exports__, {
+  $u: () => (/* reexport safe */ _app_user_entity_js__rspack_import_0.$),
+  At: () => (/* reexport safe */ _company_branch_entity_js__rspack_import_1.A),
+  CC: () => (/* reexport safe */ _company_entity_js__rspack_import_2.C),
+  GB: () => (/* reexport safe */ _social_auth_config_entity_js__rspack_import_4.G),
+  Iq: () => (/* reexport safe */ _user_company_permission_entity_js__rspack_import_5.I),
+  Li: () => (/* reexport safe */ _user_token_entity_js__rspack_import_6.L),
+  Ni: () => (/* reexport safe */ _pending_registration_entity_js__rspack_import_3.N),
+  eZ: () => (/* reexport safe */ _user_company_permission_entity_js__rspack_import_5.e),
+  getAuthEntitiesByConfig: () => (getAuthEntitiesByConfig),
+  ks: () => (/* reexport safe */ _user_token_entity_js__rspack_import_6.k)
+});
+
+
+},
+8351(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _social_provider_type_enum_js__rspack_import_0 = __webpack_require__(5142);
+/* import */ var _user_org_permission_type_enum_js__rspack_import_1 = __webpack_require__(5081);
+
+
+
+__webpack_require__.d(__webpack_exports__, {
+  e: () => (/* reexport safe */ _user_org_permission_type_enum_js__rspack_import_1.e),
+  u: () => (/* reexport safe */ _social_provider_type_enum_js__rspack_import_0.u)
+});
+
+
+},
+892(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _auth_response_mapper_js__rspack_import_0 = __webpack_require__(2295);
+/* import */ var _token_helper_js__rspack_import_1 = __webpack_require__(1379);
+
+
+
+__webpack_require__.d(__webpack_exports__, {
+  $C: () => (/* reexport safe */ _auth_response_mapper_js__rspack_import_0.$C),
+  FV: () => (/* reexport safe */ _auth_response_mapper_js__rspack_import_0.FV),
+  QH: () => (/* reexport safe */ _auth_response_mapper_js__rspack_import_0.QH),
+  e: () => (/* reexport safe */ _token_helper_js__rspack_import_1.e),
+  om: () => (/* reexport safe */ _token_helper_js__rspack_import_1.o)
+});
+
+
+},
+3716(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  C8: () => (/* reexport */ interfaces/* .AUTH_EMAIL_PROVIDER */.C),
+  ov: () => (/* reexport */ config/* .AUTH_EVENT_ACTIONS */.ov),
+  gm: () => (/* reexport */ config/* .AUTH_EVENT_ENTITIES */.gm),
+  nV: () => (/* reexport */ config/* .AUTH_EVENT_MODULE */.nV),
+  mK: () => (/* reexport */ config/* .AUTH_MESSAGES */.mK),
+  xe: () => (/* reexport */ config/* .AUTH_MODULE_OPTIONS */.xe),
+  $u: () => (/* reexport */ entities/* .AppUser */.$u),
+  qW: () => (/* reexport */ dtos/* .AssignUserBranchDto */.qW),
+  DU: () => (/* reexport */ dtos/* .AssignUserCompanyDto */.DU),
+  WE: () => (/* reexport */ services/* .AuthConfigService */.WE),
+  vS: () => (/* reexport */ services/* .AuthDataSourceProvider */.vS),
+  Gw: () => (/* reexport */ services/* .AuthEmailService */.Gw),
+  r: () => (/* reexport */ modules/* .AuthModule */.r),
+  $3: () => (/* reexport */ controllers/* .AuthenticationController */.$3),
+  kX: () => (/* reexport */ services/* .AuthenticationService */.kX),
+  aK: () => (/* reexport */ config/* .BCRYPT_SALT_ROUNDS */.aK),
+  W1: () => (/* reexport */ config/* .BRANCH_MESSAGES */.W1),
+  zF: () => (/* reexport */ controllers/* .BranchController */.zF),
+  UQ: () => (/* reexport */ dtos/* .BranchInfoDto */.UQ),
+  G3: () => (/* reexport */ dtos/* .BranchSelectionInfoDto */.G3),
+  O_: () => (/* reexport */ services/* .BranchService */.O_),
+  hg: () => (/* reexport */ config/* .COMPANY_MESSAGES */.hg),
+  $h: () => (/* reexport */ dtos/* .ChangePasswordDto */.$h),
+  t7: () => (/* reexport */ interceptors/* .ClearToken */.t),
+  CC: () => (/* reexport */ entities/* .Company */.CC),
+  At: () => (/* reexport */ entities/* .CompanyBranch */.At),
+  ET: () => (/* reexport */ dtos/* .CompanyBranchResponseDto */.ET),
+  wD: () => (/* reexport */ controllers/* .CompanyController */.wD),
+  fF: () => (/* reexport */ dtos/* .CompanyInfoDto */.fF),
+  cd: () => (/* reexport */ dtos/* .CompanyResponseDto */.cd),
+  Qg: () => (/* reexport */ controllers/* .CompanySelectionController */.Qg),
+  iJ: () => (/* reexport */ dtos/* .CompanySelectionResponseDto */.iJ),
+  vB: () => (/* reexport */ services/* .CompanySelectionSessionService */.vB),
+  Bl: () => (/* reexport */ services/* .CompanyService */.Bl),
+  TF: () => (/* reexport */ dtos/* .CompanyWithBranchesDto */.TF),
+  Vw: () => (/* reexport */ dtos/* .CreateCompanyBranchDto */.Vw),
+  l4: () => (/* reexport */ dtos/* .CreateCompanyDto */.l4),
+  X8: () => (/* reexport */ dtos/* .CreateSocialAuthConfigDto */.X8),
+  TG: () => (/* reexport */ dtos/* .CreateUserDto */.TG),
+  rv: () => (/* reexport */ config/* .DEFAULT_COOKIE_NAME */.rv),
+  sv: () => (/* reexport */ config/* .EMAIL_VERIFICATION_MESSAGES */.sv),
+  Q1: () => (/* reexport */ controllers/* .EmailVerificationController */.Q1),
+  mG: () => (/* reexport */ dtos/* .ForgotPasswordDto */.mG),
+  Ps: () => (/* reexport */ jwt_strategy/* .JwtStrategy */.P),
+  pb: () => (/* reexport */ dtos/* .LoginDto */.pb),
+  gw: () => (/* reexport */ dtos/* .LoginResponseDto */.gw),
+  rn: () => (/* reexport */ dtos/* .LoginResponseRequiresEmailVerificationDto */.rn),
+  I7: () => (/* reexport */ config/* .MAX_COOKIE_BYTES */.I7),
+  vb: () => (/* reexport */ dtos/* .MeResponseDto */.vb),
+  Ni: () => (/* reexport */ entities/* .PendingRegistration */.Ni),
+  Uu: () => (/* reexport */ dtos/* .PermissionItemDto */.Uu),
+  eZ: () => (/* reexport */ entities/* .PermissionType */.eZ),
+  k2: () => (/* reexport */ dtos/* .RefreshTokenDto */.k2),
+  xG: () => (/* reexport */ dtos/* .RegistrationDto */.xG),
+  _M: () => (/* reexport */ dtos/* .RegistrationResponseDto */._M),
+  Oz: () => (/* reexport */ dtos/* .ResendVerificationDto */.Oz),
+  US: () => (/* reexport */ dtos/* .ResetPasswordDto */.US),
+  Vl: () => (/* reexport */ config/* .SESSION_CACHE_PREFIX */.Vl),
+  HZ: () => (/* reexport */ config/* .SOCIAL_AUTH_CONFIG_MESSAGES */.HZ),
+  OF: () => (/* reexport */ config/* .SOCIAL_AUTH_MESSAGES */.OF),
+  PR: () => (/* reexport */ config/* .SOCIAL_STATE_PREFIX */.PR),
+  kP: () => (/* reexport */ config/* .SOCIAL_STATE_TTL_MS */.kP),
+  aZ: () => (/* reexport */ dtos/* .SelectDto */.aZ),
+  Ab: () => (/* reexport */ interceptors/* .SetToken */.A),
+  GB: () => (/* reexport */ entities/* .SocialAuthConfig */.GB),
+  O3: () => (/* reexport */ controllers/* .SocialAuthConfigController */.O3),
+  SN: () => (/* reexport */ dtos/* .SocialAuthConfigResponseDto */.SN),
+  t_: () => (/* reexport */ services/* .SocialAuthConfigService */.t_),
+  eA: () => (/* reexport */ controllers/* .SocialAuthController */.eA),
+  Jn: () => (/* reexport */ services/* .SocialAuthService */.Jn),
+  s4: () => (/* reexport */ dtos/* .SocialAuthorizeDto */.s4),
+  pd: () => (/* reexport */ dtos/* .SocialAuthorizeResponseDto */.pd),
+  QW: () => (/* reexport */ dtos/* .SocialCallbackDto */.QW),
+  a2: () => (/* reexport */ dtos/* .SocialProviderInfoDto */.a2),
+  uH: () => (/* reexport */ enums/* .SocialProviderTypeEnum */.u),
+  fP: () => (/* reexport */ dtos/* .SocialProvidersDto */.fP),
+  RQ: () => (/* reexport */ dtos/* .SwitchCompanyDto */.RQ),
+  EV: () => (/* reexport */ config/* .TOKEN_REVOKED_PREFIX */.EV),
+  ks: () => (/* reexport */ entities/* .TokenType */.ks),
+  jt: () => (/* reexport */ config/* .USER_ENRICHER */.jt),
+  ny: () => (/* reexport */ config/* .USER_MESSAGES */.ny),
+  jz: () => (/* reexport */ config/* .USER_PERMISSION_MESSAGES */.jz),
+  Oo: () => (/* reexport */ dtos/* .UpdateCompanyBranchDto */.Oo),
+  Ky: () => (/* reexport */ dtos/* .UpdateCompanyDto */.Ky),
+  kd: () => (/* reexport */ dtos/* .UpdateSocialAuthConfigDto */.kd),
+  Qf: () => (/* reexport */ dtos/* .UpdateUserDto */.Qf),
+  Qm: () => (/* reexport */ dtos/* .UserBranchPermissionDto */.Qm),
+  wc: () => (/* reexport */ dtos/* .UserBranchesResponseDto */.wc),
+  LU: () => (/* reexport */ dtos/* .UserCompaniesResponseDto */.LU),
+  Iq: () => (/* reexport */ entities/* .UserCompanyPermission */.Iq),
+  RP: () => (/* reexport */ dtos/* .UserCompanyPermissionDto */.RP),
+  SZ: () => (/* reexport */ controllers/* .UserController */.SZ),
+  dp: () => (/* reexport */ dtos/* .UserInfoDto */.dp),
+  sx: () => (/* reexport */ dtos/* .UserLookupResponseDto */.sx),
+  rl: () => (/* reexport */ controllers/* .UserPermissionController */.rl),
+  OE: () => (/* reexport */ services/* .UserPermissionService */.OE),
+  kq: () => (/* reexport */ dtos/* .UserResponseDto */.kq),
+  DL: () => (/* reexport */ services/* .UserService */.DL),
+  Li: () => (/* reexport */ entities/* .UserToken */.Li),
+  KI: () => (/* reexport */ dtos/* .VerifyEmailDto */.rl),
+  aL: () => (/* reexport */ docs/* .authSwaggerConfig */.J),
+  e: () => (/* reexport */ helpers/* .generateTokens */.e),
+  QB: () => (/* reexport */ entities.getAuthEntitiesByConfig),
+  V8: () => (/* reexport */ social_provider_registry/* .getSocialProvider */.V),
+  om: () => (/* reexport */ helpers/* .parseExpiryToMs */.om),
+  QH: () => (/* reexport */ helpers/* .toBranchInfo */.QH),
+  $C: () => (/* reexport */ helpers/* .toCompanyInfo */.$C),
+  FV: () => (/* reexport */ helpers/* .toUserInfo */.FV)
+});
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/index.ts
+var config = __webpack_require__(1333);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/controllers/index.ts + 11 modules
+var controllers = __webpack_require__(1003);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/docs/index.ts + 1 modules
+var docs = __webpack_require__(4706);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/dtos/index.ts
+var dtos = __webpack_require__(9029);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/entities/index.ts
+var entities = __webpack_require__(5180);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/enums/index.ts
+var enums = __webpack_require__(8351);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/helpers/index.ts
+var helpers = __webpack_require__(892);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/index.ts
+var interceptors = __webpack_require__(1867);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/interfaces/index.ts
+var interfaces = __webpack_require__(9487);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/modules/index.ts + 1 modules
+var modules = __webpack_require__(7579);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/providers/social-provider.registry.ts + 5 modules
+var social_provider_registry = __webpack_require__(6928);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/providers/index.ts
+
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/index.ts
+var services = __webpack_require__(8811);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/strategies/jwt.strategy.ts + 1 modules
+var jwt_strategy = __webpack_require__(5389);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/index.ts
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+},
+1867(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _clear_token_interceptor_js__rspack_import_0 = __webpack_require__(5207);
+/* import */ var _set_token_interceptor_js__rspack_import_1 = __webpack_require__(8359);
+
+
+
+__webpack_require__.d(__webpack_exports__, {
+  A: () => (/* reexport safe */ _set_token_interceptor_js__rspack_import_1.A),
+  t: () => (/* reexport safe */ _clear_token_interceptor_js__rspack_import_0.t)
+});
+
+
+},
+9487(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _auth_email_provider_interface_js__rspack_import_0 = __webpack_require__(9125);
+
+
+
+
+
+
+
+
+
+__webpack_require__.d(__webpack_exports__, {
+  C: () => (/* reexport safe */ _auth_email_provider_interface_js__rspack_import_0.C)
+});
+
+
+},
+7579(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  r: () => (/* reexport */ AuthModule)
+});
+
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/modules"
+var modules_ = __webpack_require__(1236);
+// EXTERNAL MODULE: external "@nestjs/common"
+var common_ = __webpack_require__(6157);
+// EXTERNAL MODULE: external "@nestjs/jwt"
+var jwt_ = __webpack_require__(2125);
+// EXTERNAL MODULE: external "@nestjs/passport"
+var passport_ = __webpack_require__(3794);
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/guards"
+var guards_ = __webpack_require__(3513);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/auth.constants.ts
+var auth_constants = __webpack_require__(5588);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/controllers/index.ts + 11 modules
+var src_controllers = __webpack_require__(1003);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/entities/index.ts
+var entities = __webpack_require__(5180);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/clear-token.interceptor.ts
+var clear_token_interceptor = __webpack_require__(5207);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/set-token.interceptor.ts + 1 modules
+var set_token_interceptor = __webpack_require__(8359);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/index.ts
+var services = __webpack_require__(8811);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
+var auth_config_service = __webpack_require__(6514);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
+var auth_datasource_provider = __webpack_require__(2732);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/strategies/jwt.strategy.ts + 1 modules
+var jwt_strategy = __webpack_require__(5389);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/modules/auth.module.ts
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+class AuthModule {
+    static forRoot(options) {
+        const optionsProvider = {
+            provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
+            useValue: options
+        };
+        return this.buildModule(options, [
+            optionsProvider,
+            ...options.providers ?? []
+        ]);
+    }
+    static forRootAsync(options) {
+        const asyncProviders = this.createAsyncProviders(options);
+        return this.buildModule(options, [
+            ...asyncProviders,
+            ...options.providers ?? []
+        ], options.imports);
+    }
+    static buildModule(options, providers, externalImports = []) {
+        const { global = false, includeController = true, bootstrapAppConfig } = options;
+        const featureFlags = this.getFeatureFlags(bootstrapAppConfig);
+        return {
+            module: AuthModule,
+            global,
+            imports: [
+                ...externalImports,
+                ...this.buildImports()
+            ],
+            controllers: this.buildControllers(includeController, featureFlags),
+            providers: [
+                ...providers,
+                ...this.buildProviders(featureFlags)
+            ],
+            exports: this.buildExports(featureFlags)
+        };
+    }
+    static getFeatureFlags(bootstrapAppConfig) {
+        return {
+            enableCompanyFeature: bootstrapAppConfig?.enableCompanyFeature ?? false,
+            enableEmailVerification: bootstrapAppConfig?.enableEmailVerification ?? true
+        };
+    }
+    static buildImports() {
+        return [
+            passport_.PassportModule.register({
+                defaultStrategy: 'jwt'
+            }),
+            jwt_.JwtModule.register({}),
+            modules_.CacheModule,
+            modules_.UtilsModule
+        ];
+    }
+    static buildControllers(includeController, flags) {
+        if (!includeController) return [];
+        const controllers = [
+            src_controllers/* .AuthenticationController */.$3,
+            src_controllers/* .SocialAuthController */.eA,
+            src_controllers/* .SocialAuthConfigController */.O3,
+            src_controllers/* .UserController */.SZ
+        ];
+        if (flags.enableEmailVerification) {
+            controllers.push(src_controllers/* .EmailVerificationController */.Q1);
+        }
+        if (flags.enableCompanyFeature) {
+            controllers.push(src_controllers/* .CompanySelectionController */.Qg, src_controllers/* .CompanyController */.wD, src_controllers/* .BranchController */.zF, src_controllers/* .UserPermissionController */.rl);
+        }
+        return controllers;
+    }
+    static buildProviders(flags) {
+        const providers = [
+            auth_config_service/* .AuthConfigService */.W,
+            auth_datasource_provider/* .AuthDataSourceProvider */.v,
+            jwt_strategy/* .JwtStrategy */.P,
+            guards_.JwtAuthGuard,
+            services/* .AuthenticationService */.kX,
+            services/* .SocialAuthService */.Jn,
+            services/* .SocialAuthConfigService */.t_,
+            set_token_interceptor/* .SetToken */.A,
+            clear_token_interceptor/* .ClearToken */.t,
+            services/* .UserService */.DL,
+            (0,modules_.createModuleEventsProvider)('auth', auth_constants/* .AUTH_MODULE_OPTIONS */.xe)
+        ];
+        if (flags.enableEmailVerification) {
+            providers.push(services/* .AuthEmailService */.Gw);
+        }
+        if (flags.enableCompanyFeature) {
+            providers.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE);
+        }
+        return providers;
+    }
+    static buildExports(flags) {
+        const exports = [
+            passport_.PassportModule,
+            auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
+            auth_config_service/* .AuthConfigService */.W,
+            auth_datasource_provider/* .AuthDataSourceProvider */.v,
+            jwt_strategy/* .JwtStrategy */.P,
+            guards_.JwtAuthGuard,
+            services/* .AuthenticationService */.kX,
+            services/* .SocialAuthService */.Jn,
+            services/* .SocialAuthConfigService */.t_,
+            services/* .UserService */.DL
+        ];
+        if (flags.enableEmailVerification) {
+            exports.push(services/* .AuthEmailService */.Gw);
+        }
+        if (flags.enableCompanyFeature) {
+            exports.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE);
+        }
+        return exports;
+    }
+    static createAsyncProviders(options) {
+        const staticOptions = {
+            global: options.global,
+            includeController: options.includeController,
+            bootstrapAppConfig: options.bootstrapAppConfig
+        };
+        if (options.useFactory) {
+            return [
+                {
+                    provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
+                    useFactory: async (...args)=>({
+                            ...staticOptions,
+                            config: await options.useFactory(...args)
+                        }),
+                    inject: options.inject || []
+                }
+            ];
+        }
+        if (options.useClass) {
+            return [
+                {
+                    provide: options.useClass,
+                    useClass: options.useClass
+                },
+                {
+                    provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
+                    useFactory: async (factory)=>({
+                            ...staticOptions,
+                            config: await factory.createAuthOptions()
+                        }),
+                    inject: [
+                        options.useClass
+                    ]
+                }
+            ];
+        }
+        if (options.useExisting) {
+            return [
+                {
+                    provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
+                    useFactory: async (factory)=>({
+                            ...staticOptions,
+                            config: await factory.createAuthOptions()
+                        }),
+                    inject: [
+                        options.useExisting
+                    ]
+                }
+            ];
+        }
+        return [
+            {
+                provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
+                useValue: staticOptions
+            }
+        ];
+    }
+    static getEntities(config) {
+        return (0,entities.getAuthEntitiesByConfig)({
+            enableCompanyFeature: config.enableCompanyFeature ?? false,
+            enableEmailVerification: config.enableEmailVerification ?? true
+        });
+    }
+}
+AuthModule = _ts_decorate([
+    (0,common_.Module)({})
+], AuthModule);
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/modules/index.ts
+
+
+
+},
+8811(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _authentication_service_js__rspack_import_0 = __webpack_require__(4722);
+/* import */ var _auth_email_service_js__rspack_import_1 = __webpack_require__(3221);
+/* import */ var _company_selection_session_service_js__rspack_import_2 = __webpack_require__(5811);
+/* import */ var _social_auth_service_js__rspack_import_3 = __webpack_require__(2786);
+/* import */ var _social_auth_config_service_js__rspack_import_4 = __webpack_require__(8275);
+/* import */ var _user_service_js__rspack_import_5 = __webpack_require__(7229);
+/* import */ var _company_service_js__rspack_import_6 = __webpack_require__(9201);
+/* import */ var _branch_service_js__rspack_import_7 = __webpack_require__(5402);
+/* import */ var _user_permission_service_js__rspack_import_8 = __webpack_require__(5291);
+/* import */ var _auth_config_service_js__rspack_import_9 = __webpack_require__(6514);
+/* import */ var _auth_datasource_provider_js__rspack_import_10 = __webpack_require__(2732);
+
+
+
+
+
+
+
+
+
+
+
+
+__webpack_require__.d(__webpack_exports__, {
+  Bl: () => (/* reexport safe */ _company_service_js__rspack_import_6.B),
+  DL: () => (/* reexport safe */ _user_service_js__rspack_import_5.D),
+  Gw: () => (/* reexport safe */ _auth_email_service_js__rspack_import_1.G),
+  Jn: () => (/* reexport safe */ _social_auth_service_js__rspack_import_3.J),
+  OE: () => (/* reexport safe */ _user_permission_service_js__rspack_import_8.O),
+  O_: () => (/* reexport safe */ _branch_service_js__rspack_import_7.O),
+  WE: () => (/* reexport safe */ _auth_config_service_js__rspack_import_9.W),
+  kX: () => (/* reexport safe */ _authentication_service_js__rspack_import_0.k),
+  t_: () => (/* reexport safe */ _social_auth_config_service_js__rspack_import_4.t),
+  vB: () => (/* reexport safe */ _company_selection_session_service_js__rspack_import_2.v),
+  vS: () => (/* reexport safe */ _auth_datasource_provider_js__rspack_import_10.v)
+});
+
+
+},
+5389(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  P: () => (/* binding */ JwtStrategy)
+});
+
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/constants"
+var constants_ = __webpack_require__(9140);
+// EXTERNAL MODULE: external "@nestjs/common"
+var common_ = __webpack_require__(6157);
+// EXTERNAL MODULE: external "@nestjs/core"
+var core_ = __webpack_require__(3075);
+// EXTERNAL MODULE: external "@nestjs/passport"
+var passport_ = __webpack_require__(3794);
+;// CONCATENATED MODULE: external "passport-jwt"
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/message-keys.ts
+var message_keys = __webpack_require__(5363);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/entities/app-user.entity.ts
+var app_user_entity = __webpack_require__(4758);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
+var auth_config_service = __webpack_require__(6514);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
+var auth_datasource_provider = __webpack_require__(2732);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/authentication.service.ts + 1 modules
+var authentication_service = __webpack_require__(4722);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/strategies/jwt.strategy.ts
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+
+
+
+
+function hasCompanyContext(payload) {
+    return 'companyId' in payload && payload.companyId != null;
+}
+class JwtStrategy extends (0,passport_.PassportStrategy)(Strategy, 'jwt') {
+    authConfig;
+    moduleRef;
+    constructor(authConfig, moduleRef){
+        super({
+            jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+            ignoreExpiration: false,
+            secretOrKeyProvider: (_req, _token, done)=>{
+                done(null, this.authConfig.getJwtSecret());
+            },
+            passReqToCallback: true
+        }), this.authConfig = authConfig, this.moduleRef = moduleRef;
+    }
+    async validate(_req, payload) {
+        const userRepo = await this.resolveUserRepository();
+        await this.checkTokenRevocation(payload);
+        const user = await userRepo.findOne({
+            where: {
+                id: payload.id,
+                isActive: true
+            }
+        });
+        if (!user) {
+            throw new common_.UnauthorizedException({
+                message: 'User not found or inactive',
+                messageKey: message_keys/* .USER_MESSAGES.NOT_FOUND */.ny.NOT_FOUND
+            });
+        }
+        return this.buildUserInfo(payload);
+    }
+    async resolveUserRepository() {
+        try {
+            const provider = await this.moduleRef.resolve(auth_datasource_provider/* .AuthDataSourceProvider */.v, undefined, {
+                strict: false
+            });
+            if (provider) {
+                return provider.getRepository(app_user_entity/* .AppUser */.$);
+            }
+        } catch  {
+            throw new common_.UnauthorizedException({
+                message: 'Unable to access user data',
+                messageKey: constants_.SYSTEM_MESSAGES.SERVICE_NOT_AVAILABLE,
+                messageVariables: {
+                    provider: 'DataSourceProvider',
+                    available: ''
+                }
+            });
+        }
+        throw new common_.UnauthorizedException({
+            message: 'User repository not available',
+            messageKey: constants_.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE,
+            messageVariables: {
+                entity: 'User'
+            }
+        });
+    }
+    async checkTokenRevocation(payload) {
+        if (!payload.iat) return;
+        try {
+            const authService = await this.moduleRef.resolve(authentication_service/* .AuthenticationService */.k, undefined, {
+                strict: false
+            });
+            if (authService && await authService.isTokenRevoked(payload.id, payload.iat)) {
+                throw new common_.UnauthorizedException({
+                    message: 'Token has been revoked',
+                    messageKey: message_keys/* .AUTH_MESSAGES.TOKEN_REVOKED */.mK.TOKEN_REVOKED
+                });
+            }
+        } catch (err) {
+            if (err instanceof common_.UnauthorizedException) throw err;
+        }
+    }
+    buildUserInfo(payload) {
+        const base = {
+            id: payload.id,
+            email: payload.email
+        };
+        if (!hasCompanyContext(payload)) {
+            return base;
+        }
+        return {
+            ...base,
+            companyId: payload.companyId,
+            ...payload.branchId && {
+                branchId: payload.branchId
+            }
+        };
+    }
+}
+JwtStrategy = _ts_decorate([
+    (0,common_.Injectable)(),
+    _ts_param(0, (0,common_.Inject)(auth_config_service/* .AuthConfigService */.W)),
+    _ts_param(1, (0,common_.Inject)(core_.ModuleRef)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof auth_config_service/* .AuthConfigService */.W === "undefined" ? Object : auth_config_service/* .AuthConfigService */.W,
+        typeof core_.ModuleRef === "undefined" ? Object : core_.ModuleRef
+    ])
+], JwtStrategy);
+
+
+},
+3794(module) {
+
+module.exports = __rspack_external__nestjs_passport_18907953;
+
+
+},
+
+};
+import { __webpack_require__ } from './runtime.js';
+var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
+import * as __rspack_chunk_1 from './370.js';
+__webpack_require__.C(__rspack_chunk_1);
+import * as __rspack_chunk_2 from './446.js';
+__webpack_require__.C(__rspack_chunk_2);
+import * as __rspack_chunk_3 from './24.js';
+__webpack_require__.C(__rspack_chunk_3);
+import * as __rspack_chunk_4 from './118.js';
+__webpack_require__.C(__rspack_chunk_4);
+import * as __rspack_chunk_5 from './120.js';
+__webpack_require__.C(__rspack_chunk_5);
+import * as __rspack_chunk_6 from './index.js';
+__webpack_require__.C(__rspack_chunk_6);
+var __webpack_exports__ = __webpack_exec__(3716);var __webpack_exports__AUTH_EMAIL_PROVIDER = __webpack_exports__.C8;
+var __webpack_exports__AUTH_EVENT_ACTIONS = __webpack_exports__.ov;
+var __webpack_exports__AUTH_EVENT_ENTITIES = __webpack_exports__.gm;
+var __webpack_exports__AUTH_EVENT_MODULE = __webpack_exports__.nV;
+var __webpack_exports__AUTH_MESSAGES = __webpack_exports__.mK;
+var __webpack_exports__AUTH_MODULE_OPTIONS = __webpack_exports__.xe;
+var __webpack_exports__AppUser = __webpack_exports__.$u;
+var __webpack_exports__AssignUserBranchDto = __webpack_exports__.qW;
+var __webpack_exports__AssignUserCompanyDto = __webpack_exports__.DU;
+var __webpack_exports__AuthConfigService = __webpack_exports__.WE;
+var __webpack_exports__AuthDataSourceProvider = __webpack_exports__.vS;
+var __webpack_exports__AuthEmailService = __webpack_exports__.Gw;
+var __webpack_exports__AuthModule = __webpack_exports__.r;
+var __webpack_exports__AuthenticationController = __webpack_exports__.$3;
+var __webpack_exports__AuthenticationService = __webpack_exports__.kX;
+var __webpack_exports__BCRYPT_SALT_ROUNDS = __webpack_exports__.aK;
+var __webpack_exports__BRANCH_MESSAGES = __webpack_exports__.W1;
+var __webpack_exports__BranchController = __webpack_exports__.zF;
+var __webpack_exports__BranchInfoDto = __webpack_exports__.UQ;
+var __webpack_exports__BranchSelectionInfoDto = __webpack_exports__.G3;
+var __webpack_exports__BranchService = __webpack_exports__.O_;
+var __webpack_exports__COMPANY_MESSAGES = __webpack_exports__.hg;
+var __webpack_exports__ChangePasswordDto = __webpack_exports__.$h;
+var __webpack_exports__ClearToken = __webpack_exports__.t7;
+var __webpack_exports__Company = __webpack_exports__.CC;
+var __webpack_exports__CompanyBranch = __webpack_exports__.At;
+var __webpack_exports__CompanyBranchResponseDto = __webpack_exports__.ET;
+var __webpack_exports__CompanyController = __webpack_exports__.wD;
+var __webpack_exports__CompanyInfoDto = __webpack_exports__.fF;
+var __webpack_exports__CompanyResponseDto = __webpack_exports__.cd;
+var __webpack_exports__CompanySelectionController = __webpack_exports__.Qg;
+var __webpack_exports__CompanySelectionResponseDto = __webpack_exports__.iJ;
+var __webpack_exports__CompanySelectionSessionService = __webpack_exports__.vB;
+var __webpack_exports__CompanyService = __webpack_exports__.Bl;
+var __webpack_exports__CompanyWithBranchesDto = __webpack_exports__.TF;
+var __webpack_exports__CreateCompanyBranchDto = __webpack_exports__.Vw;
+var __webpack_exports__CreateCompanyDto = __webpack_exports__.l4;
+var __webpack_exports__CreateSocialAuthConfigDto = __webpack_exports__.X8;
+var __webpack_exports__CreateUserDto = __webpack_exports__.TG;
+var __webpack_exports__DEFAULT_COOKIE_NAME = __webpack_exports__.rv;
+var __webpack_exports__EMAIL_VERIFICATION_MESSAGES = __webpack_exports__.sv;
+var __webpack_exports__EmailVerificationController = __webpack_exports__.Q1;
+var __webpack_exports__ForgotPasswordDto = __webpack_exports__.mG;
+var __webpack_exports__JwtStrategy = __webpack_exports__.Ps;
+var __webpack_exports__LoginDto = __webpack_exports__.pb;
+var __webpack_exports__LoginResponseDto = __webpack_exports__.gw;
+var __webpack_exports__LoginResponseRequiresEmailVerificationDto = __webpack_exports__.rn;
+var __webpack_exports__MAX_COOKIE_BYTES = __webpack_exports__.I7;
+var __webpack_exports__MeResponseDto = __webpack_exports__.vb;
+var __webpack_exports__PendingRegistration = __webpack_exports__.Ni;
+var __webpack_exports__PermissionItemDto = __webpack_exports__.Uu;
+var __webpack_exports__PermissionType = __webpack_exports__.eZ;
+var __webpack_exports__RefreshTokenDto = __webpack_exports__.k2;
+var __webpack_exports__RegistrationDto = __webpack_exports__.xG;
+var __webpack_exports__RegistrationResponseDto = __webpack_exports__._M;
+var __webpack_exports__ResendVerificationDto = __webpack_exports__.Oz;
+var __webpack_exports__ResetPasswordDto = __webpack_exports__.US;
+var __webpack_exports__SESSION_CACHE_PREFIX = __webpack_exports__.Vl;
+var __webpack_exports__SOCIAL_AUTH_CONFIG_MESSAGES = __webpack_exports__.HZ;
+var __webpack_exports__SOCIAL_AUTH_MESSAGES = __webpack_exports__.OF;
+var __webpack_exports__SOCIAL_STATE_PREFIX = __webpack_exports__.PR;
+var __webpack_exports__SOCIAL_STATE_TTL_MS = __webpack_exports__.kP;
+var __webpack_exports__SelectDto = __webpack_exports__.aZ;
+var __webpack_exports__SetToken = __webpack_exports__.Ab;
+var __webpack_exports__SocialAuthConfig = __webpack_exports__.GB;
+var __webpack_exports__SocialAuthConfigController = __webpack_exports__.O3;
+var __webpack_exports__SocialAuthConfigResponseDto = __webpack_exports__.SN;
+var __webpack_exports__SocialAuthConfigService = __webpack_exports__.t_;
+var __webpack_exports__SocialAuthController = __webpack_exports__.eA;
+var __webpack_exports__SocialAuthService = __webpack_exports__.Jn;
+var __webpack_exports__SocialAuthorizeDto = __webpack_exports__.s4;
+var __webpack_exports__SocialAuthorizeResponseDto = __webpack_exports__.pd;
+var __webpack_exports__SocialCallbackDto = __webpack_exports__.QW;
+var __webpack_exports__SocialProviderInfoDto = __webpack_exports__.a2;
+var __webpack_exports__SocialProviderTypeEnum = __webpack_exports__.uH;
+var __webpack_exports__SocialProvidersDto = __webpack_exports__.fP;
+var __webpack_exports__SwitchCompanyDto = __webpack_exports__.RQ;
+var __webpack_exports__TOKEN_REVOKED_PREFIX = __webpack_exports__.EV;
+var __webpack_exports__TokenType = __webpack_exports__.ks;
+var __webpack_exports__USER_ENRICHER = __webpack_exports__.jt;
+var __webpack_exports__USER_MESSAGES = __webpack_exports__.ny;
+var __webpack_exports__USER_PERMISSION_MESSAGES = __webpack_exports__.jz;
+var __webpack_exports__UpdateCompanyBranchDto = __webpack_exports__.Oo;
+var __webpack_exports__UpdateCompanyDto = __webpack_exports__.Ky;
+var __webpack_exports__UpdateSocialAuthConfigDto = __webpack_exports__.kd;
+var __webpack_exports__UpdateUserDto = __webpack_exports__.Qf;
+var __webpack_exports__UserBranchPermissionDto = __webpack_exports__.Qm;
+var __webpack_exports__UserBranchesResponseDto = __webpack_exports__.wc;
+var __webpack_exports__UserCompaniesResponseDto = __webpack_exports__.LU;
+var __webpack_exports__UserCompanyPermission = __webpack_exports__.Iq;
+var __webpack_exports__UserCompanyPermissionDto = __webpack_exports__.RP;
+var __webpack_exports__UserController = __webpack_exports__.SZ;
+var __webpack_exports__UserInfoDto = __webpack_exports__.dp;
+var __webpack_exports__UserLookupResponseDto = __webpack_exports__.sx;
+var __webpack_exports__UserPermissionController = __webpack_exports__.rl;
+var __webpack_exports__UserPermissionService = __webpack_exports__.OE;
+var __webpack_exports__UserResponseDto = __webpack_exports__.kq;
+var __webpack_exports__UserService = __webpack_exports__.DL;
+var __webpack_exports__UserToken = __webpack_exports__.Li;
+var __webpack_exports__VerifyEmailDto = __webpack_exports__.KI;
+var __webpack_exports__authSwaggerConfig = __webpack_exports__.aL;
+var __webpack_exports__generateTokens = __webpack_exports__.e;
+var __webpack_exports__getAuthEntitiesByConfig = __webpack_exports__.QB;
+var __webpack_exports__getSocialProvider = __webpack_exports__.V8;
+var __webpack_exports__parseExpiryToMs = __webpack_exports__.om;
+var __webpack_exports__toBranchInfo = __webpack_exports__.QH;
+var __webpack_exports__toCompanyInfo = __webpack_exports__.$C;
+var __webpack_exports__toUserInfo = __webpack_exports__.FV;
+export { __webpack_exports__AUTH_EMAIL_PROVIDER as AUTH_EMAIL_PROVIDER, __webpack_exports__AUTH_EVENT_ACTIONS as AUTH_EVENT_ACTIONS, __webpack_exports__AUTH_EVENT_ENTITIES as AUTH_EVENT_ENTITIES, __webpack_exports__AUTH_EVENT_MODULE as AUTH_EVENT_MODULE, __webpack_exports__AUTH_MESSAGES as AUTH_MESSAGES, __webpack_exports__AUTH_MODULE_OPTIONS as AUTH_MODULE_OPTIONS, __webpack_exports__AppUser as AppUser, __webpack_exports__AssignUserBranchDto as AssignUserBranchDto, __webpack_exports__AssignUserCompanyDto as AssignUserCompanyDto, __webpack_exports__AuthConfigService as AuthConfigService, __webpack_exports__AuthDataSourceProvider as AuthDataSourceProvider, __webpack_exports__AuthEmailService as AuthEmailService, __webpack_exports__AuthModule as AuthModule, __webpack_exports__AuthenticationController as AuthenticationController, __webpack_exports__AuthenticationService as AuthenticationService, __webpack_exports__BCRYPT_SALT_ROUNDS as BCRYPT_SALT_ROUNDS, __webpack_exports__BRANCH_MESSAGES as BRANCH_MESSAGES, __webpack_exports__BranchController as BranchController, __webpack_exports__BranchInfoDto as BranchInfoDto, __webpack_exports__BranchSelectionInfoDto as BranchSelectionInfoDto, __webpack_exports__BranchService as BranchService, __webpack_exports__COMPANY_MESSAGES as COMPANY_MESSAGES, __webpack_exports__ChangePasswordDto as ChangePasswordDto, __webpack_exports__ClearToken as ClearToken, __webpack_exports__Company as Company, __webpack_exports__CompanyBranch as CompanyBranch, __webpack_exports__CompanyBranchResponseDto as CompanyBranchResponseDto, __webpack_exports__CompanyController as CompanyController, __webpack_exports__CompanyInfoDto as CompanyInfoDto, __webpack_exports__CompanyResponseDto as CompanyResponseDto, __webpack_exports__CompanySelectionController as CompanySelectionController, __webpack_exports__CompanySelectionResponseDto as CompanySelectionResponseDto, __webpack_exports__CompanySelectionSessionService as CompanySelectionSessionService, __webpack_exports__CompanyService as CompanyService, __webpack_exports__CompanyWithBranchesDto as CompanyWithBranchesDto, __webpack_exports__CreateCompanyBranchDto as CreateCompanyBranchDto, __webpack_exports__CreateCompanyDto as CreateCompanyDto, __webpack_exports__CreateSocialAuthConfigDto as CreateSocialAuthConfigDto, __webpack_exports__CreateUserDto as CreateUserDto, __webpack_exports__DEFAULT_COOKIE_NAME as DEFAULT_COOKIE_NAME, __webpack_exports__EMAIL_VERIFICATION_MESSAGES as EMAIL_VERIFICATION_MESSAGES, __webpack_exports__EmailVerificationController as EmailVerificationController, __webpack_exports__ForgotPasswordDto as ForgotPasswordDto, __webpack_exports__JwtStrategy as JwtStrategy, __webpack_exports__LoginDto as LoginDto, __webpack_exports__LoginResponseDto as LoginResponseDto, __webpack_exports__LoginResponseRequiresEmailVerificationDto as LoginResponseRequiresEmailVerificationDto, __webpack_exports__MAX_COOKIE_BYTES as MAX_COOKIE_BYTES, __webpack_exports__MeResponseDto as MeResponseDto, __webpack_exports__PendingRegistration as PendingRegistration, __webpack_exports__PermissionItemDto as PermissionItemDto, __webpack_exports__PermissionType as PermissionType, __webpack_exports__RefreshTokenDto as RefreshTokenDto, __webpack_exports__RegistrationDto as RegistrationDto, __webpack_exports__RegistrationResponseDto as RegistrationResponseDto, __webpack_exports__ResendVerificationDto as ResendVerificationDto, __webpack_exports__ResetPasswordDto as ResetPasswordDto, __webpack_exports__SESSION_CACHE_PREFIX as SESSION_CACHE_PREFIX, __webpack_exports__SOCIAL_AUTH_CONFIG_MESSAGES as SOCIAL_AUTH_CONFIG_MESSAGES, __webpack_exports__SOCIAL_AUTH_MESSAGES as SOCIAL_AUTH_MESSAGES, __webpack_exports__SOCIAL_STATE_PREFIX as SOCIAL_STATE_PREFIX, __webpack_exports__SOCIAL_STATE_TTL_MS as SOCIAL_STATE_TTL_MS, __webpack_exports__SelectDto as SelectDto, __webpack_exports__SetToken as SetToken, __webpack_exports__SocialAuthConfig as SocialAuthConfig, __webpack_exports__SocialAuthConfigController as SocialAuthConfigController, __webpack_exports__SocialAuthConfigResponseDto as SocialAuthConfigResponseDto, __webpack_exports__SocialAuthConfigService as SocialAuthConfigService, __webpack_exports__SocialAuthController as SocialAuthController, __webpack_exports__SocialAuthService as SocialAuthService, __webpack_exports__SocialAuthorizeDto as SocialAuthorizeDto, __webpack_exports__SocialAuthorizeResponseDto as SocialAuthorizeResponseDto, __webpack_exports__SocialCallbackDto as SocialCallbackDto, __webpack_exports__SocialProviderInfoDto as SocialProviderInfoDto, __webpack_exports__SocialProviderTypeEnum as SocialProviderTypeEnum, __webpack_exports__SocialProvidersDto as SocialProvidersDto, __webpack_exports__SwitchCompanyDto as SwitchCompanyDto, __webpack_exports__TOKEN_REVOKED_PREFIX as TOKEN_REVOKED_PREFIX, __webpack_exports__TokenType as TokenType, __webpack_exports__USER_ENRICHER as USER_ENRICHER, __webpack_exports__USER_MESSAGES as USER_MESSAGES, __webpack_exports__USER_PERMISSION_MESSAGES as USER_PERMISSION_MESSAGES, __webpack_exports__UpdateCompanyBranchDto as UpdateCompanyBranchDto, __webpack_exports__UpdateCompanyDto as UpdateCompanyDto, __webpack_exports__UpdateSocialAuthConfigDto as UpdateSocialAuthConfigDto, __webpack_exports__UpdateUserDto as UpdateUserDto, __webpack_exports__UserBranchPermissionDto as UserBranchPermissionDto, __webpack_exports__UserBranchesResponseDto as UserBranchesResponseDto, __webpack_exports__UserCompaniesResponseDto as UserCompaniesResponseDto, __webpack_exports__UserCompanyPermission as UserCompanyPermission, __webpack_exports__UserCompanyPermissionDto as UserCompanyPermissionDto, __webpack_exports__UserController as UserController, __webpack_exports__UserInfoDto as UserInfoDto, __webpack_exports__UserLookupResponseDto as UserLookupResponseDto, __webpack_exports__UserPermissionController as UserPermissionController, __webpack_exports__UserPermissionService as UserPermissionService, __webpack_exports__UserResponseDto as UserResponseDto, __webpack_exports__UserService as UserService, __webpack_exports__UserToken as UserToken, __webpack_exports__VerifyEmailDto as VerifyEmailDto, __webpack_exports__authSwaggerConfig as authSwaggerConfig, __webpack_exports__generateTokens as generateTokens, __webpack_exports__getAuthEntitiesByConfig as getAuthEntitiesByConfig, __webpack_exports__getSocialProvider as getSocialProvider, __webpack_exports__parseExpiryToMs as parseExpiryToMs, __webpack_exports__toBranchInfo as toBranchInfo, __webpack_exports__toCompanyInfo as toCompanyInfo, __webpack_exports__toUserInfo as toUserInfo };