@greatapps/common 1.1.268 → 1.1.271

package/dist/modules/auth/services/auth.service.mjs

@@ -1,6 +1,7 @@
 import { cookies } from "next/headers";
 import { api } from "../../../infra/api/client";
 import { ApiError } from "../../../infra/api/types";
+import { findWhitelabel } from "../../whitelabel/actions/find-whitelabel.action";
 const AUTH_COOKIE_NAME = "greatapps";
 const COOKIE_MAX_AGE = 60 * 60 * 24 * 30;
 const COOKIE_OPTIONS = {
@@ -289,18 +290,40 @@ class AuthService {
   }
   async setAuthCookie(token) {
     const cookieStore = await cookies();
+    const whitelabel = await findWhitelabel().catch(() => null);
+    const cookieDomain = this.normalizeCookieDomain(whitelabel?.domain) ?? this.normalizeCookieDomain(process.env.DOMAIN_COOKIE);
     cookieStore.set(AUTH_COOKIE_NAME, token, {
       ...COOKIE_OPTIONS,
+      ...cookieDomain ? { domain: cookieDomain } : {},
       maxAge: COOKIE_MAX_AGE
     });
   }
   async removeAuthCookie() {
     const cookieStore = await cookies();
+    const whitelabel = await findWhitelabel().catch(() => null);
+    const cookieDomain = this.normalizeCookieDomain(whitelabel?.domain) ?? this.normalizeCookieDomain(process.env.DOMAIN_COOKIE);
     cookieStore.delete({
       name: AUTH_COOKIE_NAME,
-      ...COOKIE_OPTIONS
+      ...COOKIE_OPTIONS,
+      ...cookieDomain ? { domain: cookieDomain } : {}
     });
   }
+  normalizeCookieDomain(domain) {
+    if (!domain) return void 0;
+    const normalized = domain.trim();
+    if (!normalized) return void 0;
+    const rawHost = (() => {
+      try {
+        return new URL(normalized).hostname;
+      } catch {
+        return normalized.replace(/^https?:\/\//i, "").replace(/^www\./i, "").split("/")[0].split(":")[0];
+      }
+    })();
+    if (!rawHost || rawHost === "localhost") {
+      return void 0;
+    }
+    return rawHost.startsWith(".") ? rawHost : `.${rawHost}`;
+  }
 }
 const authService = new AuthService();
 export {

package/dist/modules/auth/services/auth.service.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/auth/services/auth.service.ts"],"sourcesContent":["import { cookies } from \"next/headers\";\r\n\r\nimport { api } from \"../../../infra/api/client\";\r\nimport { ApiError } from \"../../../infra/api/types\";\r\nimport {\r\n  ClientInfo,\r\n  ForgotPasswordRequest,\r\n  ForgotPasswordResponse,\r\n  GeoLocation,\r\n  LoginApiResponse,\r\n  LoginRequest,\r\n  LoginResponse,\r\n  LogoutApiResponse,\r\n  LogoutRequest,\r\n  LogoutResponse,\r\n  RegisterApiRequest,\r\n  RegisterApiResponse,\r\n  RegisterRequest,\r\n  RegisterResponse,\r\n  ResendVerificationRequest,\r\n  ResendVerificationResponse,\r\n  ResetPasswordRequest,\r\n  ResetPasswordResponse,\r\n  SearchPlansApiResponse,\r\n  SessionKeepRequest,\r\n  SessionKeepResponse,\r\n  TwoFactorApiResponse,\r\n  TwoFactorRequest,\r\n  TwoFactorResponse,\r\n  VerifyEmailRequest,\r\n  VerifyEmailResponse,\r\n} from \"../schema\";\r\n\r\nconst AUTH_COOKIE_NAME = \"greatapps\";\r\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 30;\r\n\r\nconst COOKIE_OPTIONS = {\r\n  httpOnly: true,\r\n  secure: process.env.NODE_ENV === \"production\",\r\n  sameSite: \"lax\" as const,\r\n  path: \"/\",\r\n  domain: process.env.DOMAIN_COOKIE,\r\n};\r\n\r\nclass AuthService {\r\n  private async getWhitelabelToken(idWl: number): Promise<string> {\r\n    const response = await api.apps.get<{\r\n      status: 0 | 1;\r\n      data: Array<{ token: string }>;\r\n    }>(`/tokens?limit=1&page=1&sort=id:desc`, { whiteLabelId: idWl });\r\n\r\n    if (response.status === 0 || !response.data?.[0]?.token) {\r\n      throw new ApiError(\r\n        \"Token do whitelabel não encontrado\",\r\n        \"WL_TOKEN_NOT_FOUND\",\r\n        404\r\n      );\r\n    }\r\n\r\n    return response.data[0].token;\r\n  }\r\n\r\n  async login(\r\n    credentials: LoginRequest,\r\n    clientInfo: ClientInfo\r\n  ): Promise<LoginResponse> {\r\n    let requestConfig: import(\"../../../infra/api/client\").RequestConfig | undefined;\r\n\r\n    if (credentials.id_wl) {\r\n      const wlToken = await this.getWhitelabelToken(credentials.id_wl);\r\n      requestConfig = { whiteLabelId: credentials.id_wl, authToken: wlToken };\r\n    }\r\n\r\n    const response = await api.apps.post<LoginApiResponse>(\"/auth/login\", {\r\n      email: credentials.email,\r\n      password: credentials.password,\r\n      source: credentials?.source,\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n    }, requestConfig);\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"E-mail ou senha incorretos\",\r\n        response.code || \"LOGIN_FAILED\",\r\n        401\r\n      );\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    if (response.two_factor_required) {\r\n      return { result: 'two_factor_required', cookie: response.cookie };\r\n    }\r\n\r\n    await this.setAuthCookie(response.cookie);\r\n\r\n    const [{ userService }, { accountService }] = await Promise.all([\r\n      import('../../users/services/user.service'),\r\n      import('../../accounts/services/account.service'),\r\n    ]);\r\n    const [user, account] = await Promise.all([\r\n      userService.findById(),\r\n      accountService.findCurrentAccount(),\r\n    ]);\r\n\r\n    return {\r\n      result: 'success',\r\n      user,\r\n      account,\r\n      accessToken: response.cookie,\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n    };\r\n  }\r\n\r\n  async verifyTwoFactor(\r\n    cookie: string,\r\n    code: string,\r\n    clientInfo: ClientInfo\r\n  ): Promise<TwoFactorResponse> {\r\n    const payload: TwoFactorRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n      code,\r\n    };\r\n\r\n    const response = await api.apps.post<TwoFactorApiResponse>(\r\n      \"/auth/code\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\"Código 2FA inválido\", \"TWO_FACTOR_FAILED\", 401);\r\n    }\r\n\r\n    if (!response?.data?.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida após 2FA\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    await this.setAuthCookie(response.data.cookie);\r\n\r\n    return { status: 1 };\r\n  }\r\n  async register(data: RegisterRequest, clientInfo: ClientInfo): Promise<RegisterResponse> {\r\n    const today = new Date();\r\n    const trialEndDate = new Date(today);\r\n    trialEndDate.setDate(today.getDate() + 7); // 7 dias de trial\r\n\r\n    const idPlan = await this.resolvePlanId(data.idPlan);\r\n\r\n    const payload: RegisterApiRequest = {\r\n      name: data.accountName,\r\n      bussiness_type: data.businessType ?? 0,\r\n      language: \"pt-br\",\r\n      timezone: \"America/Sao_Paulo\",\r\n      currency: \"BRL\",\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      agent: clientInfo.agent,\r\n      user: {\r\n        id_api: \"\",\r\n        name: data.name,\r\n        last_name: data.lastName || \"\",\r\n        rg: data.rg || \"\",\r\n        cpf: data.cpf || \"\",\r\n        gender: data.gender,\r\n        email: data.email,\r\n        phone: data.phone,\r\n        password: data.password,\r\n        profile: \"owner\",\r\n        language: \"pt-br\",\r\n      },\r\n      subscription: {\r\n        type: \"trial\",\r\n        id_cupom: data.couponCode || \"\",\r\n        id_plan: idPlan,\r\n        due_date: trialEndDate.toISOString().split(\"T\")[0],\r\n        id_product: 1,\r\n      },\r\n    };\r\n\r\n    const response = await api.apps.post<RegisterApiResponse>(\r\n      \"/accounts\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"Erro ao criar conta\",\r\n        \"REGISTER_FAILED\",\r\n        400\r\n      );\r\n    }\r\n\r\n    if (!response.data || response.data.length === 0) {\r\n      throw new ApiError(\r\n        \"Resposta de registro inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    const accountData = response.data[0];\r\n\r\n    await this.setAuthCookie(response.cookie);\r\n\r\n    const [{ userService }, { accountService }] = await Promise.all([\r\n      import('../../users/services/user.service'),\r\n      import('../../accounts/services/account.service'),\r\n    ]);\r\n    const [user, account] = await Promise.all([\r\n      userService.findById(),\r\n      accountService.findCurrentAccount(),\r\n    ]);\r\n\r\n    return {\r\n      user,\r\n      account,\r\n      accessToken: response.cookie,\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n      requiresEmailVerification: !accountData.verified,\r\n    };\r\n  }\r\n\r\n  async logout(clientInfo: ClientInfo): Promise<LogoutResponse> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      throw new ApiError(\r\n        \"Usuário não autenticado\",\r\n        \"NOT_AUTHENTICATED_LOGOUT\",\r\n        401\r\n      );\r\n    }\r\n\r\n    const payload: LogoutRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n    };\r\n\r\n    try {\r\n      const response = await api.apps.post<LogoutApiResponse>(\r\n        \"/auth/logout\",\r\n        payload\r\n      );\r\n\r\n      if (response.status === 0) {\r\n        throw new ApiError(\r\n          response.message || \"Erro ao realizar logout\",\r\n          response.code || \"LOGOUT_FAILED\",\r\n          400\r\n        );\r\n      }\r\n    } finally {\r\n      await this.removeAuthCookie();\r\n    }\r\n\r\n    return {\r\n      success: true,\r\n    };\r\n  }\r\n\r\n  async forgotPassword(\r\n    _data: ForgotPasswordRequest\r\n  ): Promise<ForgotPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Recuperação de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resetPassword(\r\n    _data: ResetPasswordRequest\r\n  ): Promise<ResetPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Redefinição de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async verifyEmail(_data: VerifyEmailRequest): Promise<VerifyEmailResponse> {\r\n    throw new ApiError(\r\n      \"Verificação de email não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resendVerification(\r\n    _data: ResendVerificationRequest\r\n  ): Promise<ResendVerificationResponse> {\r\n    throw new ApiError(\r\n      \"Reenvio de verificação não implementado\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async validateSession(clientInfo: ClientInfo): Promise<boolean> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      return false;\r\n    }\r\n\r\n    try {\r\n      const payload: SessionKeepRequest = {\r\n        location: clientInfo.location,\r\n        ip: clientInfo.ip,\r\n        timezone: clientInfo.timezone,\r\n        agent: clientInfo.agent,\r\n        cookie,\r\n      };\r\n\r\n      const response = await api.apps.post<SessionKeepResponse>(\r\n        \"/auth/keep\",\r\n        payload\r\n      );\r\n\r\n      return response.status === 1;\r\n    } catch (error) {\r\n      console.error(\"[AuthService] validateSession error\", error);\r\n      return false;\r\n    }\r\n  }\r\n\r\n  async isAuthenticated(): Promise<boolean> {\r\n    const token = await this.getToken();\r\n    return !!token;\r\n  }\r\n\r\n  async getToken(): Promise<string | undefined> {\r\n    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;\r\n    const cookieStore = await cookies();\r\n    return cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n  }\r\n\r\n  private async resolvePlanId(idPlan?: number | string): Promise<number> {\r\n    if (idPlan === undefined || idPlan === null) return 1;\r\n    if (typeof idPlan === 'number') return idPlan;\r\n\r\n    const response = await api.apps.get<SearchPlansApiResponse>(\r\n      `/plans?search=${encodeURIComponent(idPlan)}`\r\n    );\r\n\r\n    if (response.status === 0 || !response.data || response.data.length === 0) {\r\n      throw new ApiError(\r\n        `Plano \"${idPlan}\" não encontrado`,\r\n        \"PLAN_NOT_FOUND\",\r\n        404\r\n      );\r\n    }\r\n\r\n    return response.data[0].id;\r\n  }\r\n\r\n  private async setAuthCookie(token: string): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    cookieStore.set(AUTH_COOKIE_NAME, token, {\r\n      ...COOKIE_OPTIONS,\r\n      maxAge: COOKIE_MAX_AGE,\r\n    });\r\n  }\r\n\r\n  async removeAuthCookie(): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    cookieStore.delete({\r\n      name: AUTH_COOKIE_NAME,\r\n      ...COOKIE_OPTIONS,\r\n    });\r\n  }\r\n}\r\n\r\nexport const authService = new AuthService();\r\n\r\nexport type { ClientInfo, GeoLocation };\r\n"],"mappings":"AAAA,SAAS,eAAe;AAExB,SAAS,WAAW;AACpB,SAAS,gBAAgB;AA8BzB,MAAM,mBAAmB;AACzB,MAAM,iBAAiB,KAAK,KAAK,KAAK;AAEtC,MAAM,iBAAiB;AAAA,EACrB,UAAU;AAAA,EACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ,QAAQ,IAAI;AACtB;AAEA,MAAM,YAAY;AAAA,EAChB,MAAc,mBAAmB,MAA+B;AAC9D,UAAM,WAAW,MAAM,IAAI,KAAK,IAG7B,uCAAuC,EAAE,cAAc,KAAK,CAAC;AAEhE,QAAI,SAAS,WAAW,KAAK,CAAC,SAAS,OAAO,CAAC,GAAG,OAAO;AACvD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,CAAC,EAAE;AAAA,EAC1B;AAAA,EAEA,MAAM,MACJ,aACA,YACwB;AACxB,QAAI;AAEJ,QAAI,YAAY,OAAO;AACrB,YAAM,UAAU,MAAM,KAAK,mBAAmB,YAAY,KAAK;AAC/D,sBAAgB,EAAE,cAAc,YAAY,OAAO,WAAW,QAAQ;AAAA,IACxE;AAEA,UAAM,WAAW,MAAM,IAAI,KAAK,KAAuB,eAAe;AAAA,MACpE,OAAO,YAAY;AAAA,MACnB,UAAU,YAAY;AAAA,MACtB,QAAQ,aAAa;AAAA,MACrB,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,IACpB,GAAG,aAAa;AAEhB,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS,qBAAqB;AAChC,aAAO,EAAE,QAAQ,uBAAuB,QAAQ,SAAS,OAAO;AAAA,IAClE;AAEA,UAAM,KAAK,cAAc,SAAS,MAAM;AAExC,UAAM,CAAC,EAAE,YAAY,GAAG,EAAE,eAAe,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC9D,OAAO,mCAAmC;AAAA,MAC1C,OAAO,yCAAyC;AAAA,IAClD,CAAC;AACD,UAAM,CAAC,MAAM,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,MACxC,YAAY,SAAS;AAAA,MACrB,eAAe,mBAAmB;AAAA,IACpC,CAAC;AAED,WAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,aAAa,SAAS;AAAA,MACtB,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAM,gBACJ,QACA,MACA,YAC4B;AAC5B,UAAM,UAA4B;AAAA,MAChC,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,IAAI,KAAK;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI,SAAS,6BAAuB,qBAAqB,GAAG;AAAA,IACpE;AAEA,QAAI,CAAC,UAAU,MAAM,QAAQ;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,KAAK,cAAc,SAAS,KAAK,MAAM;AAE7C,WAAO,EAAE,QAAQ,EAAE;AAAA,EACrB;AAAA,EACA,MAAM,SAAS,MAAuB,YAAmD;AACvF,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,eAAe,IAAI,KAAK,KAAK;AACnC,iBAAa,QAAQ,MAAM,QAAQ,IAAI,CAAC;AAExC,UAAM,SAAS,MAAM,KAAK,cAAc,KAAK,MAAM;AAEnD,UAAM,UAA8B;AAAA,MAClC,MAAM,KAAK;AAAA,MACX,gBAAgB,KAAK,gBAAgB;AAAA,MACrC,UAAU;AAAA,MACV,UAAU;AAAA,MACV,UAAU;AAAA,MACV,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,OAAO,WAAW;AAAA,MAClB,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,WAAW,KAAK,YAAY;AAAA,QAC5B,IAAI,KAAK,MAAM;AAAA,QACf,KAAK,KAAK,OAAO;AAAA,QACjB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA,QACf,SAAS;AAAA,QACT,UAAU;AAAA,MACZ;AAAA,MACA,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,UAAU,KAAK,cAAc;AAAA,QAC7B,SAAS;AAAA,QACT,UAAU,aAAa,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,QACjD,YAAY;AAAA,MACd;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,IAAI,KAAK;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ,SAAS,KAAK,WAAW,GAAG;AAChD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,cAAc,SAAS,KAAK,CAAC;AAEnC,UAAM,KAAK,cAAc,SAAS,MAAM;AAExC,UAAM,CAAC,EAAE,YAAY,GAAG,EAAE,eAAe,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC9D,OAAO,mCAAmC;AAAA,MAC1C,OAAO,yCAAyC;AAAA,IAClD,CAAC;AACD,UAAM,CAAC,MAAM,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,MACxC,YAAY,SAAS;AAAA,MACrB,eAAe,mBAAmB;AAAA,IACpC,CAAC;AAED,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,aAAa,SAAS;AAAA,MACtB,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,MACpE,2BAA2B,CAAC,YAAY;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,YAAiD;AAC5D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAyB;AAAA,MAC7B,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,IAAI,KAAK;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AAEA,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,IAAI;AAAA,UACR,SAAS,WAAW;AAAA,UACpB,SAAS,QAAQ;AAAA,UACjB;AAAA,QACF;AAAA,MACF;AAAA,IACF,UAAE;AACA,YAAM,KAAK,iBAAiB;AAAA,IAC9B;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EAEA,MAAM,eACJ,OACiC;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,OACgC;AAChC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,OAAyD;AACzE,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBACJ,OACqC;AACrC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,YAA0C;AAC9D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,UAA8B;AAAA,QAClC,UAAU,WAAW;AAAA,QACrB,IAAI,WAAW;AAAA,QACf,UAAU,WAAW;AAAA,QACrB,OAAO,WAAW;AAAA,QAClB;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,IAAI,KAAK;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AAEA,aAAO,SAAS,WAAW;AAAA,IAC7B,SAAS,OAAO;AACd,cAAQ,MAAM,uCAAuC,KAAK;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,kBAAoC;AACxC,UAAM,QAAQ,MAAM,KAAK,SAAS;AAClC,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,WAAwC;AAC5C,QAAI,QAAQ,IAAI,iBAAkB,QAAO,QAAQ,IAAI;AACrD,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,gBAAgB,GAAG;AAAA,EAC5C;AAAA,EAEA,MAAc,cAAc,QAA2C;AACrE,QAAI,WAAW,UAAa,WAAW,KAAM,QAAO;AACpD,QAAI,OAAO,WAAW,SAAU,QAAO;AAEvC,UAAM,WAAW,MAAM,IAAI,KAAK;AAAA,MAC9B,iBAAiB,mBAAmB,MAAM,CAAC;AAAA,IAC7C;AAEA,QAAI,SAAS,WAAW,KAAK,CAAC,SAAS,QAAQ,SAAS,KAAK,WAAW,GAAG;AACzE,YAAM,IAAI;AAAA,QACR,UAAU,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,CAAC,EAAE;AAAA,EAC1B;AAAA,EAEA,MAAc,cAAc,OAA8B;AACxD,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,IAAI,kBAAkB,OAAO;AAAA,MACvC,GAAG;AAAA,MACH,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,mBAAkC;AACtC,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,OAAO;AAAA,MACjB,MAAM;AAAA,MACN,GAAG;AAAA,IACL,CAAC;AAAA,EACH;AACF;AAEO,MAAM,cAAc,IAAI,YAAY;","names":[]}
+{"version":3,"sources":["../../../../src/modules/auth/services/auth.service.ts"],"sourcesContent":["import { cookies } from \"next/headers\";\r\n\r\nimport { api } from \"../../../infra/api/client\";\r\nimport { ApiError } from \"../../../infra/api/types\";\r\nimport { findWhitelabel } from \"../../whitelabel/actions/find-whitelabel.action\";\r\nimport {\r\n  ClientInfo,\r\n  ForgotPasswordRequest,\r\n  ForgotPasswordResponse,\r\n  GeoLocation,\r\n  LoginApiResponse,\r\n  LoginRequest,\r\n  LoginResponse,\r\n  LogoutApiResponse,\r\n  LogoutRequest,\r\n  LogoutResponse,\r\n  RegisterApiRequest,\r\n  RegisterApiResponse,\r\n  RegisterRequest,\r\n  RegisterResponse,\r\n  ResendVerificationRequest,\r\n  ResendVerificationResponse,\r\n  ResetPasswordRequest,\r\n  ResetPasswordResponse,\r\n  SearchPlansApiResponse,\r\n  SessionKeepRequest,\r\n  SessionKeepResponse,\r\n  TwoFactorApiResponse,\r\n  TwoFactorRequest,\r\n  TwoFactorResponse,\r\n  VerifyEmailRequest,\r\n  VerifyEmailResponse,\r\n} from \"../schema\";\r\n\r\nconst AUTH_COOKIE_NAME = \"greatapps\";\r\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 30;\r\n\r\nconst COOKIE_OPTIONS = {\r\n  httpOnly: true,\r\n  secure: process.env.NODE_ENV === \"production\",\r\n  sameSite: \"lax\" as const,\r\n  path: \"/\",\r\n  domain: process.env.DOMAIN_COOKIE,\r\n};\r\n\r\nclass AuthService {\r\n  private async getWhitelabelToken(idWl: number): Promise<string> {\r\n    const response = await api.apps.get<{\r\n      status: 0 | 1;\r\n      data: Array<{ token: string }>;\r\n    }>(`/tokens?limit=1&page=1&sort=id:desc`, { whiteLabelId: idWl });\r\n\r\n    if (response.status === 0 || !response.data?.[0]?.token) {\r\n      throw new ApiError(\r\n        \"Token do whitelabel não encontrado\",\r\n        \"WL_TOKEN_NOT_FOUND\",\r\n        404\r\n      );\r\n    }\r\n\r\n    return response.data[0].token;\r\n  }\r\n\r\n  async login(\r\n    credentials: LoginRequest,\r\n    clientInfo: ClientInfo\r\n  ): Promise<LoginResponse> {\r\n    let requestConfig: import(\"../../../infra/api/client\").RequestConfig | undefined;\r\n\r\n    if (credentials.id_wl) {\r\n      const wlToken = await this.getWhitelabelToken(credentials.id_wl);\r\n      requestConfig = { whiteLabelId: credentials.id_wl, authToken: wlToken };\r\n    }\r\n\r\n    const response = await api.apps.post<LoginApiResponse>(\"/auth/login\", {\r\n      email: credentials.email,\r\n      password: credentials.password,\r\n      source: credentials?.source,\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n    }, requestConfig);\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"E-mail ou senha incorretos\",\r\n        response.code || \"LOGIN_FAILED\",\r\n        401\r\n      );\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    if (response.two_factor_required) {\r\n      return { result: 'two_factor_required', cookie: response.cookie };\r\n    }\r\n\r\n    await this.setAuthCookie(response.cookie);\r\n\r\n    const [{ userService }, { accountService }] = await Promise.all([\r\n      import('../../users/services/user.service'),\r\n      import('../../accounts/services/account.service'),\r\n    ]);\r\n    const [user, account] = await Promise.all([\r\n      userService.findById(),\r\n      accountService.findCurrentAccount(),\r\n    ]);\r\n\r\n    return {\r\n      result: 'success',\r\n      user,\r\n      account,\r\n      accessToken: response.cookie,\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n    };\r\n  }\r\n\r\n  async verifyTwoFactor(\r\n    cookie: string,\r\n    code: string,\r\n    clientInfo: ClientInfo\r\n  ): Promise<TwoFactorResponse> {\r\n    const payload: TwoFactorRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n      code,\r\n    };\r\n\r\n    const response = await api.apps.post<TwoFactorApiResponse>(\r\n      \"/auth/code\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\"Código 2FA inválido\", \"TWO_FACTOR_FAILED\", 401);\r\n    }\r\n\r\n    if (!response?.data?.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida após 2FA\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    await this.setAuthCookie(response.data.cookie);\r\n\r\n    return { status: 1 };\r\n  }\r\n  async register(data: RegisterRequest, clientInfo: ClientInfo): Promise<RegisterResponse> {\r\n    const today = new Date();\r\n    const trialEndDate = new Date(today);\r\n    trialEndDate.setDate(today.getDate() + 7); // 7 dias de trial\r\n\r\n    const idPlan = await this.resolvePlanId(data.idPlan);\r\n\r\n    const payload: RegisterApiRequest = {\r\n      name: data.accountName,\r\n      bussiness_type: data.businessType ?? 0,\r\n      language: \"pt-br\",\r\n      timezone: \"America/Sao_Paulo\",\r\n      currency: \"BRL\",\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      agent: clientInfo.agent,\r\n      user: {\r\n        id_api: \"\",\r\n        name: data.name,\r\n        last_name: data.lastName || \"\",\r\n        rg: data.rg || \"\",\r\n        cpf: data.cpf || \"\",\r\n        gender: data.gender,\r\n        email: data.email,\r\n        phone: data.phone,\r\n        password: data.password,\r\n        profile: \"owner\",\r\n        language: \"pt-br\",\r\n      },\r\n      subscription: {\r\n        type: \"trial\",\r\n        id_cupom: data.couponCode || \"\",\r\n        id_plan: idPlan,\r\n        due_date: trialEndDate.toISOString().split(\"T\")[0],\r\n        id_product: 1,\r\n      },\r\n    };\r\n\r\n    const response = await api.apps.post<RegisterApiResponse>(\r\n      \"/accounts\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"Erro ao criar conta\",\r\n        \"REGISTER_FAILED\",\r\n        400\r\n      );\r\n    }\r\n\r\n    if (!response.data || response.data.length === 0) {\r\n      throw new ApiError(\r\n        \"Resposta de registro inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    const accountData = response.data[0];\r\n\r\n    await this.setAuthCookie(response.cookie);\r\n\r\n    const [{ userService }, { accountService }] = await Promise.all([\r\n      import('../../users/services/user.service'),\r\n      import('../../accounts/services/account.service'),\r\n    ]);\r\n    const [user, account] = await Promise.all([\r\n      userService.findById(),\r\n      accountService.findCurrentAccount(),\r\n    ]);\r\n\r\n    return {\r\n      user,\r\n      account,\r\n      accessToken: response.cookie,\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n      requiresEmailVerification: !accountData.verified,\r\n    };\r\n  }\r\n\r\n  async logout(clientInfo: ClientInfo): Promise<LogoutResponse> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      throw new ApiError(\r\n        \"Usuário não autenticado\",\r\n        \"NOT_AUTHENTICATED_LOGOUT\",\r\n        401\r\n      );\r\n    }\r\n\r\n    const payload: LogoutRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n    };\r\n\r\n    try {\r\n      const response = await api.apps.post<LogoutApiResponse>(\r\n        \"/auth/logout\",\r\n        payload\r\n      );\r\n\r\n      if (response.status === 0) {\r\n        throw new ApiError(\r\n          response.message || \"Erro ao realizar logout\",\r\n          response.code || \"LOGOUT_FAILED\",\r\n          400\r\n        );\r\n      }\r\n    } finally {\r\n      await this.removeAuthCookie();\r\n    }\r\n\r\n    return {\r\n      success: true,\r\n    };\r\n  }\r\n\r\n  async forgotPassword(\r\n    _data: ForgotPasswordRequest\r\n  ): Promise<ForgotPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Recuperação de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resetPassword(\r\n    _data: ResetPasswordRequest\r\n  ): Promise<ResetPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Redefinição de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async verifyEmail(_data: VerifyEmailRequest): Promise<VerifyEmailResponse> {\r\n    throw new ApiError(\r\n      \"Verificação de email não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resendVerification(\r\n    _data: ResendVerificationRequest\r\n  ): Promise<ResendVerificationResponse> {\r\n    throw new ApiError(\r\n      \"Reenvio de verificação não implementado\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async validateSession(clientInfo: ClientInfo): Promise<boolean> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      return false;\r\n    }\r\n\r\n    try {\r\n      const payload: SessionKeepRequest = {\r\n        location: clientInfo.location,\r\n        ip: clientInfo.ip,\r\n        timezone: clientInfo.timezone,\r\n        agent: clientInfo.agent,\r\n        cookie,\r\n      };\r\n\r\n      const response = await api.apps.post<SessionKeepResponse>(\r\n        \"/auth/keep\",\r\n        payload\r\n      );\r\n\r\n      return response.status === 1;\r\n    } catch (error) {\r\n      console.error(\"[AuthService] validateSession error\", error);\r\n      return false;\r\n    }\r\n  }\r\n\r\n  async isAuthenticated(): Promise<boolean> {\r\n    const token = await this.getToken();\r\n    return !!token;\r\n  }\r\n\r\n  async getToken(): Promise<string | undefined> {\r\n    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;\r\n    const cookieStore = await cookies();\r\n    return cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n  }\r\n\r\n  private async resolvePlanId(idPlan?: number | string): Promise<number> {\r\n    if (idPlan === undefined || idPlan === null) return 1;\r\n    if (typeof idPlan === 'number') return idPlan;\r\n\r\n    const response = await api.apps.get<SearchPlansApiResponse>(\r\n      `/plans?search=${encodeURIComponent(idPlan)}`\r\n    );\r\n\r\n    if (response.status === 0 || !response.data || response.data.length === 0) {\r\n      throw new ApiError(\r\n        `Plano \"${idPlan}\" não encontrado`,\r\n        \"PLAN_NOT_FOUND\",\r\n        404\r\n      );\r\n    }\r\n\r\n    return response.data[0].id;\r\n  }\r\n\r\n  private async setAuthCookie(token: string): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    const whitelabel = await findWhitelabel().catch(() => null);\r\n    const cookieDomain =\r\n      this.normalizeCookieDomain(whitelabel?.domain) ??\r\n      this.normalizeCookieDomain(process.env.DOMAIN_COOKIE);\r\n\r\n    cookieStore.set(AUTH_COOKIE_NAME, token, {\r\n      ...COOKIE_OPTIONS,\r\n      ...(cookieDomain ? { domain: cookieDomain } : {}),\r\n      maxAge: COOKIE_MAX_AGE,\r\n    });\r\n  }\r\n\r\n  async removeAuthCookie(): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    const whitelabel = await findWhitelabel().catch(() => null);\r\n    const cookieDomain =\r\n      this.normalizeCookieDomain(whitelabel?.domain) ??\r\n      this.normalizeCookieDomain(process.env.DOMAIN_COOKIE);\r\n\r\n    cookieStore.delete({\r\n      name: AUTH_COOKIE_NAME,\r\n      ...COOKIE_OPTIONS,\r\n      ...(cookieDomain ? { domain: cookieDomain } : {}),\r\n    });\r\n  }\r\n\r\n  private normalizeCookieDomain(domain?: string | null): string | undefined {\r\n    if (!domain) return undefined;\r\n\r\n    const normalized = domain.trim();\r\n    if (!normalized) return undefined;\r\n\r\n    const rawHost = (() => {\r\n      try {\r\n        return new URL(normalized).hostname;\r\n      } catch {\r\n        return normalized\r\n          .replace(/^https?:\\/\\//i, \"\")\r\n          .replace(/^www\\./i, \"\")\r\n          .split(\"/\")[0]\r\n          .split(\":\")[0];\r\n      }\r\n    })();\r\n\r\n    if (!rawHost || rawHost === \"localhost\") {\r\n      return undefined;\r\n    }\r\n\r\n    return rawHost.startsWith(\".\") ? rawHost : `.${rawHost}`;\r\n  }\r\n}\r\n\r\nexport const authService = new AuthService();\r\n\r\nexport type { ClientInfo, GeoLocation };\r\n"],"mappings":"AAAA,SAAS,eAAe;AAExB,SAAS,WAAW;AACpB,SAAS,gBAAgB;AACzB,SAAS,sBAAsB;AA8B/B,MAAM,mBAAmB;AACzB,MAAM,iBAAiB,KAAK,KAAK,KAAK;AAEtC,MAAM,iBAAiB;AAAA,EACrB,UAAU;AAAA,EACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ,QAAQ,IAAI;AACtB;AAEA,MAAM,YAAY;AAAA,EAChB,MAAc,mBAAmB,MAA+B;AAC9D,UAAM,WAAW,MAAM,IAAI,KAAK,IAG7B,uCAAuC,EAAE,cAAc,KAAK,CAAC;AAEhE,QAAI,SAAS,WAAW,KAAK,CAAC,SAAS,OAAO,CAAC,GAAG,OAAO;AACvD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,CAAC,EAAE;AAAA,EAC1B;AAAA,EAEA,MAAM,MACJ,aACA,YACwB;AACxB,QAAI;AAEJ,QAAI,YAAY,OAAO;AACrB,YAAM,UAAU,MAAM,KAAK,mBAAmB,YAAY,KAAK;AAC/D,sBAAgB,EAAE,cAAc,YAAY,OAAO,WAAW,QAAQ;AAAA,IACxE;AAEA,UAAM,WAAW,MAAM,IAAI,KAAK,KAAuB,eAAe;AAAA,MACpE,OAAO,YAAY;AAAA,MACnB,UAAU,YAAY;AAAA,MACtB,QAAQ,aAAa;AAAA,MACrB,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,IACpB,GAAG,aAAa;AAEhB,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS,qBAAqB;AAChC,aAAO,EAAE,QAAQ,uBAAuB,QAAQ,SAAS,OAAO;AAAA,IAClE;AAEA,UAAM,KAAK,cAAc,SAAS,MAAM;AAExC,UAAM,CAAC,EAAE,YAAY,GAAG,EAAE,eAAe,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC9D,OAAO,mCAAmC;AAAA,MAC1C,OAAO,yCAAyC;AAAA,IAClD,CAAC;AACD,UAAM,CAAC,MAAM,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,MACxC,YAAY,SAAS;AAAA,MACrB,eAAe,mBAAmB;AAAA,IACpC,CAAC;AAED,WAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,aAAa,SAAS;AAAA,MACtB,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAM,gBACJ,QACA,MACA,YAC4B;AAC5B,UAAM,UAA4B;AAAA,MAChC,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,IAAI,KAAK;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI,SAAS,6BAAuB,qBAAqB,GAAG;AAAA,IACpE;AAEA,QAAI,CAAC,UAAU,MAAM,QAAQ;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,KAAK,cAAc,SAAS,KAAK,MAAM;AAE7C,WAAO,EAAE,QAAQ,EAAE;AAAA,EACrB;AAAA,EACA,MAAM,SAAS,MAAuB,YAAmD;AACvF,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,eAAe,IAAI,KAAK,KAAK;AACnC,iBAAa,QAAQ,MAAM,QAAQ,IAAI,CAAC;AAExC,UAAM,SAAS,MAAM,KAAK,cAAc,KAAK,MAAM;AAEnD,UAAM,UAA8B;AAAA,MAClC,MAAM,KAAK;AAAA,MACX,gBAAgB,KAAK,gBAAgB;AAAA,MACrC,UAAU;AAAA,MACV,UAAU;AAAA,MACV,UAAU;AAAA,MACV,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,OAAO,WAAW;AAAA,MAClB,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,WAAW,KAAK,YAAY;AAAA,QAC5B,IAAI,KAAK,MAAM;AAAA,QACf,KAAK,KAAK,OAAO;AAAA,QACjB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA,QACf,SAAS;AAAA,QACT,UAAU;AAAA,MACZ;AAAA,MACA,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,UAAU,KAAK,cAAc;AAAA,QAC7B,SAAS;AAAA,QACT,UAAU,aAAa,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,QACjD,YAAY;AAAA,MACd;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,IAAI,KAAK;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ,SAAS,KAAK,WAAW,GAAG;AAChD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,cAAc,SAAS,KAAK,CAAC;AAEnC,UAAM,KAAK,cAAc,SAAS,MAAM;AAExC,UAAM,CAAC,EAAE,YAAY,GAAG,EAAE,eAAe,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC9D,OAAO,mCAAmC;AAAA,MAC1C,OAAO,yCAAyC;AAAA,IAClD,CAAC;AACD,UAAM,CAAC,MAAM,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,MACxC,YAAY,SAAS;AAAA,MACrB,eAAe,mBAAmB;AAAA,IACpC,CAAC;AAED,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,aAAa,SAAS;AAAA,MACtB,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,MACpE,2BAA2B,CAAC,YAAY;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,YAAiD;AAC5D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAyB;AAAA,MAC7B,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,IAAI,KAAK;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AAEA,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,IAAI;AAAA,UACR,SAAS,WAAW;AAAA,UACpB,SAAS,QAAQ;AAAA,UACjB;AAAA,QACF;AAAA,MACF;AAAA,IACF,UAAE;AACA,YAAM,KAAK,iBAAiB;AAAA,IAC9B;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EAEA,MAAM,eACJ,OACiC;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,OACgC;AAChC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,OAAyD;AACzE,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBACJ,OACqC;AACrC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,YAA0C;AAC9D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,UAA8B;AAAA,QAClC,UAAU,WAAW;AAAA,QACrB,IAAI,WAAW;AAAA,QACf,UAAU,WAAW;AAAA,QACrB,OAAO,WAAW;AAAA,QAClB;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,IAAI,KAAK;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AAEA,aAAO,SAAS,WAAW;AAAA,IAC7B,SAAS,OAAO;AACd,cAAQ,MAAM,uCAAuC,KAAK;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,kBAAoC;AACxC,UAAM,QAAQ,MAAM,KAAK,SAAS;AAClC,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,WAAwC;AAC5C,QAAI,QAAQ,IAAI,iBAAkB,QAAO,QAAQ,IAAI;AACrD,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,gBAAgB,GAAG;AAAA,EAC5C;AAAA,EAEA,MAAc,cAAc,QAA2C;AACrE,QAAI,WAAW,UAAa,WAAW,KAAM,QAAO;AACpD,QAAI,OAAO,WAAW,SAAU,QAAO;AAEvC,UAAM,WAAW,MAAM,IAAI,KAAK;AAAA,MAC9B,iBAAiB,mBAAmB,MAAM,CAAC;AAAA,IAC7C;AAEA,QAAI,SAAS,WAAW,KAAK,CAAC,SAAS,QAAQ,SAAS,KAAK,WAAW,GAAG;AACzE,YAAM,IAAI;AAAA,QACR,UAAU,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,CAAC,EAAE;AAAA,EAC1B;AAAA,EAEA,MAAc,cAAc,OAA8B;AACxD,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,aAAa,MAAM,eAAe,EAAE,MAAM,MAAM,IAAI;AAC1D,UAAM,eACJ,KAAK,sBAAsB,YAAY,MAAM,KAC7C,KAAK,sBAAsB,QAAQ,IAAI,aAAa;AAEtD,gBAAY,IAAI,kBAAkB,OAAO;AAAA,MACvC,GAAG;AAAA,MACH,GAAI,eAAe,EAAE,QAAQ,aAAa,IAAI,CAAC;AAAA,MAC/C,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,mBAAkC;AACtC,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,aAAa,MAAM,eAAe,EAAE,MAAM,MAAM,IAAI;AAC1D,UAAM,eACJ,KAAK,sBAAsB,YAAY,MAAM,KAC7C,KAAK,sBAAsB,QAAQ,IAAI,aAAa;AAEtD,gBAAY,OAAO;AAAA,MACjB,MAAM;AAAA,MACN,GAAG;AAAA,MACH,GAAI,eAAe,EAAE,QAAQ,aAAa,IAAI,CAAC;AAAA,IACjD,CAAC;AAAA,EACH;AAAA,EAEQ,sBAAsB,QAA4C;AACxE,QAAI,CAAC,OAAQ,QAAO;AAEpB,UAAM,aAAa,OAAO,KAAK;AAC/B,QAAI,CAAC,WAAY,QAAO;AAExB,UAAM,WAAW,MAAM;AACrB,UAAI;AACF,eAAO,IAAI,IAAI,UAAU,EAAE;AAAA,MAC7B,QAAQ;AACN,eAAO,WACJ,QAAQ,iBAAiB,EAAE,EAC3B,QAAQ,WAAW,EAAE,EACrB,MAAM,GAAG,EAAE,CAAC,EACZ,MAAM,GAAG,EAAE,CAAC;AAAA,MACjB;AAAA,IACF,GAAG;AAEH,QAAI,CAAC,WAAW,YAAY,aAAa;AACvC,aAAO;AAAA,IACT;AAEA,WAAO,QAAQ,WAAW,GAAG,IAAI,UAAU,IAAI,OAAO;AAAA,EACxD;AACF;AAEO,MAAM,cAAc,IAAI,YAAY;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greatapps/common",
-  "version": "1.1.268",
+  "version": "1.1.271",
   "description": "Shared library for GreatApps frontend applications",
   "main": "./dist/index.mjs",
   "types": "./src/index.ts",

package/src/modules/auth/services/auth.service.ts

@@ -2,6 +2,7 @@ import { cookies } from "next/headers";
 
 import { api } from "../../../infra/api/client";
 import { ApiError } from "../../../infra/api/types";
+import { findWhitelabel } from "../../whitelabel/actions/find-whitelabel.action";
 import {
   ClientInfo,
   ForgotPasswordRequest,
@@ -386,19 +387,56 @@ class AuthService {
 
   private async setAuthCookie(token: string): Promise<void> {
     const cookieStore = await cookies();
+    const whitelabel = await findWhitelabel().catch(() => null);
+    const cookieDomain =
+      this.normalizeCookieDomain(whitelabel?.domain) ??
+      this.normalizeCookieDomain(process.env.DOMAIN_COOKIE);
+
     cookieStore.set(AUTH_COOKIE_NAME, token, {
       ...COOKIE_OPTIONS,
+      ...(cookieDomain ? { domain: cookieDomain } : {}),
       maxAge: COOKIE_MAX_AGE,
     });
   }
 
   async removeAuthCookie(): Promise<void> {
     const cookieStore = await cookies();
+    const whitelabel = await findWhitelabel().catch(() => null);
+    const cookieDomain =
+      this.normalizeCookieDomain(whitelabel?.domain) ??
+      this.normalizeCookieDomain(process.env.DOMAIN_COOKIE);
+
     cookieStore.delete({
       name: AUTH_COOKIE_NAME,
       ...COOKIE_OPTIONS,
+      ...(cookieDomain ? { domain: cookieDomain } : {}),
     });
   }
+
+  private normalizeCookieDomain(domain?: string | null): string | undefined {
+    if (!domain) return undefined;
+
+    const normalized = domain.trim();
+    if (!normalized) return undefined;
+
+    const rawHost = (() => {
+      try {
+        return new URL(normalized).hostname;
+      } catch {
+        return normalized
+          .replace(/^https?:\/\//i, "")
+          .replace(/^www\./i, "")
+          .split("/")[0]
+          .split(":")[0];
+      }
+    })();
+
+    if (!rawHost || rawHost === "localhost") {
+      return undefined;
+    }
+
+    return rawHost.startsWith(".") ? rawHost : `.${rawHost}`;
+  }
 }
 
 export const authService = new AuthService();