@flusys/nestjs-auth 9.1.0-rc.1 → 9.1.1

package/fesm/360.js

@@ -0,0 +1,719 @@
+import { ExtractJwt, Strategy } from "passport-jwt";
+import * as __rspack_external__nestjs_passport_18907953 from "@nestjs/passport";
+export const __rspack_esm_id = 360;
+export const __rspack_esm_ids = [360];
+export const __webpack_modules__ = {
+5180(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _app_user_entity_js__rspack_import_0 = __webpack_require__(4758);
+/* import */ var _company_branch_entity_js__rspack_import_1 = __webpack_require__(1923);
+/* import */ var _company_entity_js__rspack_import_2 = __webpack_require__(8538);
+/* import */ var _pending_registration_entity_js__rspack_import_3 = __webpack_require__(9388);
+/* import */ var _social_auth_config_entity_js__rspack_import_4 = __webpack_require__(2020);
+/* import */ var _user_company_permission_entity_js__rspack_import_5 = __webpack_require__(2377);
+/* import */ var _user_token_entity_js__rspack_import_6 = __webpack_require__(9696);
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+const BaseEntities = [
+    _app_user_entity_js__rspack_import_0/* .AppUser */.$,
+    _user_token_entity_js__rspack_import_6/* .UserToken */.L,
+    _social_auth_config_entity_js__rspack_import_4/* .SocialAuthConfig */.G
+];
+const EmailEntities = [
+    _pending_registration_entity_js__rspack_import_3/* .PendingRegistration */.N
+];
+const CompanyEntities = [
+    _company_entity_js__rspack_import_2/* .Company */.C,
+    _company_branch_entity_js__rspack_import_1/* .CompanyBranch */.A,
+    _user_company_permission_entity_js__rspack_import_5/* .UserCompanyPermission */.I
+];
+function getAuthEntitiesByConfig(config) {
+    const { enableCompanyFeature = false, enableEmailVerification = true } = config;
+    const entities = [
+        ...BaseEntities
+    ];
+    if (enableEmailVerification) {
+        entities.push(...EmailEntities);
+    }
+    if (enableCompanyFeature) {
+        entities.push(...CompanyEntities);
+    }
+    return entities;
+}
+
+__webpack_require__.d(__webpack_exports__, {
+  $u: () => (/* reexport safe */ _app_user_entity_js__rspack_import_0.$),
+  At: () => (/* reexport safe */ _company_branch_entity_js__rspack_import_1.A),
+  CC: () => (/* reexport safe */ _company_entity_js__rspack_import_2.C),
+  GB: () => (/* reexport safe */ _social_auth_config_entity_js__rspack_import_4.G),
+  Iq: () => (/* reexport safe */ _user_company_permission_entity_js__rspack_import_5.I),
+  Li: () => (/* reexport safe */ _user_token_entity_js__rspack_import_6.L),
+  Ni: () => (/* reexport safe */ _pending_registration_entity_js__rspack_import_3.N),
+  eZ: () => (/* reexport safe */ _user_company_permission_entity_js__rspack_import_5.e),
+  getAuthEntitiesByConfig: () => (getAuthEntitiesByConfig),
+  ks: () => (/* reexport safe */ _user_token_entity_js__rspack_import_6.k)
+});
+
+
+},
+7579(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  r: () => (/* reexport */ AuthModule)
+});
+
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/interfaces"
+var interfaces_ = __webpack_require__(5103);
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/modules"
+var modules_ = __webpack_require__(1236);
+// EXTERNAL MODULE: external "@nestjs/common"
+var common_ = __webpack_require__(6157);
+// EXTERNAL MODULE: external "@nestjs/jwt"
+var jwt_ = __webpack_require__(2125);
+// EXTERNAL MODULE: external "@nestjs/passport"
+var passport_ = __webpack_require__(3794);
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/guards"
+var guards_ = __webpack_require__(3513);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/auth.constants.ts
+var auth_constants = __webpack_require__(5588);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/controllers/index.ts + 11 modules
+var src_controllers = __webpack_require__(1003);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/entities/index.ts
+var entities = __webpack_require__(5180);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/clear-token.interceptor.ts
+var clear_token_interceptor = __webpack_require__(5207);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/set-token.interceptor.ts + 1 modules
+var set_token_interceptor = __webpack_require__(8359);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/index.ts + 2 modules
+var services = __webpack_require__(8230);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
+var auth_config_service = __webpack_require__(6514);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
+var auth_datasource_provider = __webpack_require__(2732);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/strategies/jwt.strategy.ts + 1 modules
+var jwt_strategy = __webpack_require__(5389);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/modules/auth.module.ts
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+class AuthModule {
+    static forRoot(options) {
+        const optionsProvider = {
+            provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
+            useValue: options
+        };
+        return this.buildModule(options, [
+            optionsProvider,
+            ...options.providers ?? []
+        ]);
+    }
+    static forRootAsync(options) {
+        const asyncProviders = this.createAsyncProviders(options);
+        return this.buildModule(options, [
+            ...asyncProviders,
+            ...options.providers ?? []
+        ], options.imports);
+    }
+    static buildModule(options, providers, externalImports = []) {
+        const { global = false, includeController = true, bootstrapAppConfig } = options;
+        const featureFlags = this.getFeatureFlags(bootstrapAppConfig);
+        return {
+            module: AuthModule,
+            global,
+            imports: [
+                ...externalImports,
+                ...this.buildImports()
+            ],
+            controllers: this.buildControllers(includeController, featureFlags),
+            providers: [
+                ...providers,
+                ...this.buildProviders(featureFlags)
+            ],
+            exports: this.buildExports(featureFlags)
+        };
+    }
+    static getFeatureFlags(bootstrapAppConfig) {
+        return {
+            enableCompanyFeature: bootstrapAppConfig?.enableCompanyFeature ?? false,
+            enableEmailVerification: bootstrapAppConfig?.enableEmailVerification ?? true
+        };
+    }
+    static buildImports() {
+        return [
+            passport_.PassportModule.register({
+                defaultStrategy: 'jwt'
+            }),
+            jwt_.JwtModule.register({}),
+            modules_.CacheModule,
+            modules_.UtilsModule
+        ];
+    }
+    static buildControllers(includeController, flags) {
+        if (!includeController) return [];
+        const controllers = [
+            src_controllers/* .AuthenticationController */.$3,
+            src_controllers/* .SocialAuthController */.eA,
+            src_controllers/* .SocialAuthConfigController */.O3,
+            src_controllers/* .UserController */.SZ
+        ];
+        if (flags.enableEmailVerification) {
+            controllers.push(src_controllers/* .EmailVerificationController */.Q1);
+        }
+        if (flags.enableCompanyFeature) {
+            controllers.push(src_controllers/* .CompanySelectionController */.Qg, src_controllers/* .CompanyController */.wD, src_controllers/* .BranchController */.zF, src_controllers/* .UserPermissionController */.rl);
+        }
+        return controllers;
+    }
+    static buildProviders(flags) {
+        const providers = [
+            auth_config_service/* .AuthConfigService */.W,
+            auth_datasource_provider/* .AuthDataSourceProvider */.v,
+            jwt_strategy/* .JwtStrategy */.P,
+            guards_.JwtAuthGuard,
+            services/* .AuthenticationService */.kX,
+            services/* .SocialAuthService */.Jn,
+            services/* .SocialAuthConfigService */.t_,
+            set_token_interceptor/* .SetToken */.A,
+            clear_token_interceptor/* .ClearToken */.t,
+            services/* .UserService */.DL,
+            (0,modules_.createModuleEventsProvider)('auth', auth_constants/* .AUTH_MODULE_OPTIONS */.xe)
+        ];
+        if (flags.enableEmailVerification) {
+            providers.push(services/* .AuthEmailService */.Gw);
+        }
+        if (flags.enableCompanyFeature) {
+            providers.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE, {
+                provide: interfaces_.COMPANY_ACCESS_RESOLVER,
+                useClass: services/* .CompanyAccessResolverAdapter */.ht
+            }, {
+                provide: interfaces_.BRANCH_HIERARCHY_RESOLVER,
+                useClass: services/* .BranchHierarchyResolverAdapter */.XR
+            });
+        }
+        return providers;
+    }
+    static buildExports(flags) {
+        const exports = [
+            passport_.PassportModule,
+            auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
+            auth_config_service/* .AuthConfigService */.W,
+            auth_datasource_provider/* .AuthDataSourceProvider */.v,
+            jwt_strategy/* .JwtStrategy */.P,
+            guards_.JwtAuthGuard,
+            services/* .AuthenticationService */.kX,
+            services/* .SocialAuthService */.Jn,
+            services/* .SocialAuthConfigService */.t_,
+            services/* .UserService */.DL
+        ];
+        if (flags.enableEmailVerification) {
+            exports.push(services/* .AuthEmailService */.Gw);
+        }
+        if (flags.enableCompanyFeature) {
+            exports.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE, interfaces_.COMPANY_ACCESS_RESOLVER, interfaces_.BRANCH_HIERARCHY_RESOLVER);
+        }
+        return exports;
+    }
+    static createAsyncProviders(options) {
+        const staticOptions = {
+            global: options.global,
+            includeController: options.includeController,
+            bootstrapAppConfig: options.bootstrapAppConfig
+        };
+        if (options.useFactory) {
+            return [
+                {
+                    provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
+                    useFactory: async (...args)=>({
+                            ...staticOptions,
+                            config: await options.useFactory(...args)
+                        }),
+                    inject: options.inject || []
+                }
+            ];
+        }
+        if (options.useClass) {
+            return [
+                {
+                    provide: options.useClass,
+                    useClass: options.useClass
+                },
+                {
+                    provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
+                    useFactory: async (factory)=>({
+                            ...staticOptions,
+                            config: await factory.createAuthOptions()
+                        }),
+                    inject: [
+                        options.useClass
+                    ]
+                }
+            ];
+        }
+        if (options.useExisting) {
+            return [
+                {
+                    provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
+                    useFactory: async (factory)=>({
+                            ...staticOptions,
+                            config: await factory.createAuthOptions()
+                        }),
+                    inject: [
+                        options.useExisting
+                    ]
+                }
+            ];
+        }
+        return [
+            {
+                provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
+                useValue: staticOptions
+            }
+        ];
+    }
+    static getEntities(config) {
+        return (0,entities.getAuthEntitiesByConfig)({
+            enableCompanyFeature: config.enableCompanyFeature ?? false,
+            enableEmailVerification: config.enableEmailVerification ?? true
+        });
+    }
+}
+AuthModule = _ts_decorate([
+    (0,common_.Module)({})
+], AuthModule);
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/modules/index.ts
+
+
+
+},
+8230(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  WE: () => (/* reexport */ auth_config_service/* .AuthConfigService */.W),
+  vS: () => (/* reexport */ auth_datasource_provider/* .AuthDataSourceProvider */.v),
+  Gw: () => (/* reexport */ auth_email_service/* .AuthEmailService */.G),
+  kX: () => (/* reexport */ authentication_service/* .AuthenticationService */.k),
+  XR: () => (/* reexport */ BranchHierarchyResolverAdapter),
+  O_: () => (/* reexport */ branch_service/* .BranchService */.O),
+  ht: () => (/* reexport */ CompanyAccessResolverAdapter),
+  vB: () => (/* reexport */ company_selection_session_service/* .CompanySelectionSessionService */.v),
+  Bl: () => (/* reexport */ company_service/* .CompanyService */.B),
+  t_: () => (/* reexport */ social_auth_config_service/* .SocialAuthConfigService */.t),
+  Jn: () => (/* reexport */ social_auth_service/* .SocialAuthService */.J),
+  OE: () => (/* reexport */ user_permission_service/* .UserPermissionService */.O),
+  DL: () => (/* reexport */ user_service/* .UserService */.D)
+});
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/authentication.service.ts + 1 modules
+var authentication_service = __webpack_require__(4722);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-email.service.ts
+var auth_email_service = __webpack_require__(3221);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/company-selection-session.service.ts
+var company_selection_session_service = __webpack_require__(5811);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/social-auth.service.ts
+var social_auth_service = __webpack_require__(2786);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/social-auth-config.service.ts
+var social_auth_config_service = __webpack_require__(8275);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/user.service.ts
+var user_service = __webpack_require__(7229);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/company.service.ts
+var company_service = __webpack_require__(9201);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/branch.service.ts
+var branch_service = __webpack_require__(5402);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/user-permission.service.ts
+var user_permission_service = __webpack_require__(5291);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
+var auth_config_service = __webpack_require__(6514);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
+var auth_datasource_provider = __webpack_require__(2732);
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/interfaces"
+var interfaces_ = __webpack_require__(5103);
+// EXTERNAL MODULE: external "@nestjs/common"
+var common_ = __webpack_require__(6157);
+// EXTERNAL MODULE: external "@nestjs/core"
+var core_ = __webpack_require__(3075);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/services/branch-hierarchy-resolver.adapter.ts
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+class BranchHierarchyResolverAdapter {
+    moduleRef;
+    companyAccess;
+    constructor(moduleRef, companyAccess){
+        this.moduleRef = moduleRef;
+        this.companyAccess = companyAccess;
+    }
+    async getDescendantIds(branchIds, options) {
+        return (await this.resolve(branch_service/* .BranchService */.O)).getDescendantIds(branchIds, options);
+    }
+    async getAncestorIds(branchId, options) {
+        return (await this.resolve(branch_service/* .BranchService */.O)).getAncestorIds(branchId, options);
+    }
+    async isWithinBranch(branchId, ancestorId) {
+        return (await this.resolve(branch_service/* .BranchService */.O)).isWithinBranch(branchId, ancestorId);
+    }
+    async getGrantedBranchIds(userId, companyId) {
+        if (!userId) return [];
+        const { branches } = await this.companyAccess.getUserAccess(userId);
+        return branches.filter((branch)=>!companyId || branch.companyId === companyId).map((branch)=>branch.id);
+    }
+    async getGrantedDescendantIds(userId, branchIds, options) {
+        const granted = new Set(await this.getGrantedBranchIds(userId));
+        if (!granted.size) return [];
+        return (await this.getDescendantIds(branchIds, options)).filter((id)=>granted.has(id));
+    }
+    async hasBranchAccess(userId, branchId) {
+        if (!branchId) return false;
+        return (await this.getGrantedBranchIds(userId)).includes(branchId);
+    }
+    resolve(type) {
+        return this.moduleRef.resolve(type, core_.ContextIdFactory.create(), {
+            strict: false
+        });
+    }
+}
+BranchHierarchyResolverAdapter = _ts_decorate([
+    (0,common_.Injectable)(),
+    _ts_param(0, (0,common_.Inject)(core_.ModuleRef)),
+    _ts_param(1, (0,common_.Inject)(interfaces_.COMPANY_ACCESS_RESOLVER)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof core_.ModuleRef === "undefined" ? Object : core_.ModuleRef,
+        typeof ICompanyAccessResolver === "undefined" ? Object : ICompanyAccessResolver
+    ])
+], BranchHierarchyResolverAdapter);
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/services/company-access-resolver.adapter.ts
+function company_access_resolver_adapter_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function company_access_resolver_adapter_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function company_access_resolver_adapter_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+const byName = (a, b)=>a.name.localeCompare(b.name);
+/** Users of grants that still count: the grant is active and its user is active and not deleted. */ const activeUserIds = (grants)=>grants.filter((grant)=>grant.isActive && grant.user?.isActive && !grant.user.deletedAt).map((grant)=>grant.userId);
+class CompanyAccessResolverAdapter {
+    moduleRef;
+    constructor(moduleRef){
+        this.moduleRef = moduleRef;
+    }
+    async getUserAccess(userId) {
+        const permissions = await this.moduleRef.resolve(user_permission_service/* .UserPermissionService */.O, core_.ContextIdFactory.create(), {
+            strict: false
+        });
+        const [companyGrants, branchGrants] = await Promise.all([
+            permissions.findUserCompanies(userId),
+            permissions.findUserBranches(userId)
+        ]);
+        const companies = companyGrants.filter((grant)=>grant.isActive).map((grant)=>grant.company).filter((company)=>!!company?.isActive).toSorted(byName);
+        const companyIds = new Set(companies.map((company)=>company.id));
+        const branches = branchGrants.map((grant)=>grant.branch).filter((branch)=>!!branch?.isActive && companyIds.has(branch.companyId)).toSorted((a, b)=>(a.serial ?? 0) - (b.serial ?? 0) || byName(a, b));
+        return {
+            companies: companies.map(({ id, name })=>({
+                    id,
+                    name
+                })),
+            branches: branches.map(({ id, companyId, parentId, name })=>({
+                    id,
+                    companyId,
+                    parentId: parentId ?? null,
+                    name
+                }))
+        };
+    }
+    async getCompanyMembers(companyId, branchIds = []) {
+        const permissions = await this.moduleRef.resolve(user_permission_service/* .UserPermissionService */.O, core_.ContextIdFactory.create(), {
+            strict: false
+        });
+        const members = activeUserIds(await permissions.findUsersForCompany(companyId));
+        if (!branchIds.length) return [
+            ...new Set(members)
+        ];
+        const inBranches = new Set(activeUserIds((await Promise.all(branchIds.map((branchId)=>permissions.findUsersForBranch(branchId)))).flat()));
+        return [
+            ...new Set(members.filter((userId)=>inBranches.has(userId)))
+        ];
+    }
+}
+CompanyAccessResolverAdapter = company_access_resolver_adapter_ts_decorate([
+    (0,common_.Injectable)(),
+    company_access_resolver_adapter_ts_param(0, (0,common_.Inject)(core_.ModuleRef)),
+    company_access_resolver_adapter_ts_metadata("design:type", Function),
+    company_access_resolver_adapter_ts_metadata("design:paramtypes", [
+        typeof core_.ModuleRef === "undefined" ? Object : core_.ModuleRef
+    ])
+], CompanyAccessResolverAdapter);
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/services/index.ts
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+},
+5389(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  P: () => (/* binding */ JwtStrategy)
+});
+
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/constants"
+var constants_ = __webpack_require__(9140);
+// EXTERNAL MODULE: external "@nestjs/common"
+var common_ = __webpack_require__(6157);
+// EXTERNAL MODULE: external "@nestjs/core"
+var core_ = __webpack_require__(3075);
+// EXTERNAL MODULE: external "@nestjs/passport"
+var passport_ = __webpack_require__(3794);
+;// CONCATENATED MODULE: external "passport-jwt"
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/message-keys.ts
+var message_keys = __webpack_require__(5363);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/entities/app-user.entity.ts
+var app_user_entity = __webpack_require__(4758);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
+var auth_config_service = __webpack_require__(6514);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
+var auth_datasource_provider = __webpack_require__(2732);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/authentication.service.ts + 1 modules
+var authentication_service = __webpack_require__(4722);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/strategies/jwt.strategy.ts
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+
+
+
+
+function hasCompanyContext(payload) {
+    return 'companyId' in payload && payload.companyId != null;
+}
+class JwtStrategy extends (0,passport_.PassportStrategy)(Strategy, 'jwt') {
+    authConfig;
+    moduleRef;
+    constructor(authConfig, moduleRef){
+        super({
+            jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+            ignoreExpiration: false,
+            secretOrKeyProvider: (_req, _token, done)=>{
+                done(null, this.authConfig.getJwtSecret());
+            },
+            passReqToCallback: true
+        }), this.authConfig = authConfig, this.moduleRef = moduleRef;
+    }
+    async validate(_req, payload) {
+        const userRepo = await this.resolveUserRepository();
+        await this.checkTokenRevocation(payload);
+        const user = await userRepo.findOne({
+            where: {
+                id: payload.id,
+                isActive: true
+            }
+        });
+        if (!user) {
+            throw new common_.UnauthorizedException({
+                message: 'User not found or inactive',
+                messageKey: message_keys/* .USER_MESSAGES.NOT_FOUND */.ny.NOT_FOUND
+            });
+        }
+        return this.buildUserInfo(payload);
+    }
+    async resolveUserRepository() {
+        try {
+            const provider = await this.moduleRef.resolve(auth_datasource_provider/* .AuthDataSourceProvider */.v, undefined, {
+                strict: false
+            });
+            if (provider) {
+                return provider.getRepository(app_user_entity/* .AppUser */.$);
+            }
+        } catch  {
+            throw new common_.UnauthorizedException({
+                message: 'Unable to access user data',
+                messageKey: constants_.SYSTEM_MESSAGES.SERVICE_NOT_AVAILABLE,
+                messageVariables: {
+                    provider: 'DataSourceProvider',
+                    available: ''
+                }
+            });
+        }
+        throw new common_.UnauthorizedException({
+            message: 'User repository not available',
+            messageKey: constants_.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE,
+            messageVariables: {
+                entity: 'User'
+            }
+        });
+    }
+    async checkTokenRevocation(payload) {
+        if (!payload.iat) return;
+        try {
+            const authService = await this.moduleRef.resolve(authentication_service/* .AuthenticationService */.k, undefined, {
+                strict: false
+            });
+            if (authService && await authService.isTokenRevoked(payload.id, payload.iat)) {
+                throw new common_.UnauthorizedException({
+                    message: 'Token has been revoked',
+                    messageKey: message_keys/* .AUTH_MESSAGES.TOKEN_REVOKED */.mK.TOKEN_REVOKED
+                });
+            }
+        } catch (err) {
+            if (err instanceof common_.UnauthorizedException) throw err;
+        }
+    }
+    buildUserInfo(payload) {
+        const base = {
+            id: payload.id,
+            email: payload.email
+        };
+        if (!hasCompanyContext(payload)) {
+            return base;
+        }
+        return {
+            ...base,
+            companyId: payload.companyId,
+            ...payload.branchId && {
+                branchId: payload.branchId
+            }
+        };
+    }
+}
+JwtStrategy = _ts_decorate([
+    (0,common_.Injectable)(),
+    _ts_param(0, (0,common_.Inject)(auth_config_service/* .AuthConfigService */.W)),
+    _ts_param(1, (0,common_.Inject)(core_.ModuleRef)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof auth_config_service/* .AuthConfigService */.W === "undefined" ? Object : auth_config_service/* .AuthConfigService */.W,
+        typeof core_.ModuleRef === "undefined" ? Object : core_.ModuleRef
+    ])
+], JwtStrategy);
+
+
+},
+3794(module) {
+
+module.exports = __rspack_external__nestjs_passport_18907953;
+
+
+},
+
+};