@greatapps/common 1.1.52 → 1.1.53

package/dist/modules/auth/actions/validate-session.action.mjs

@@ -28,14 +28,14 @@ async function validateSessionAction() {
     const clientInfo = await getClientInfoFromRequest();
     const isValid = await authService.validateSession(clientInfo);
     if (!isValid) {
-      cookieStore.delete("greatapps");
+      await authService.removeAuthCookie();
       await redirectToLogin();
       return false;
     }
     return true;
   } catch (error) {
     console.error("[validateSessionAction] Error:", error);
-    cookieStore.delete("greatapps");
+    await authService.removeAuthCookie();
     await redirectToLogin();
     return false;
   }

package/dist/modules/auth/actions/validate-session.action.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/auth/actions/validate-session.action.ts"],"sourcesContent":["'use server';\r\n\r\nimport { redirect } from 'next/navigation';\r\nimport { cookies, headers } from 'next/headers';\r\nimport { authService } from '../services/auth.service';\r\nimport { getClientInfoFromRequest } from '../../../infra/utils/client-info';\r\n\r\nasync function redirectToLogin() {\r\n  const h = await headers();\r\n  const referer = h.get('referer') || '/';\r\n\r\n  if (!referer) {\r\n    redirect('/login');\r\n    return;\r\n  }\r\n\r\n  const url = new URL(referer);\r\n\r\n  if (['/login', '/register', '/forgot-password'].includes(url.pathname)) {\r\n    return;\r\n  }\r\n\r\n  redirect('/login');\r\n}\r\n\r\nexport async function validateSessionAction(): Promise<boolean> {\r\n  if (process.env.DUMMY_AUTH_TOKEN) return true;\r\n\r\n  const cookieStore = await cookies();\r\n  const cookie = cookieStore.get('greatapps')?.value;\r\n\r\n  if (!cookie) {\r\n    await redirectToLogin();\r\n    return false;\r\n  }\r\n\r\n  try {\r\n    const clientInfo = await getClientInfoFromRequest();\r\n    const isValid = await authService.validateSession(clientInfo);\r\n\r\n    if (!isValid) {\r\n      cookieStore.delete('greatapps');\r\n      await redirectToLogin();\r\n      return false;\r\n    }\r\n\r\n    return true;\r\n  } catch (error) {\r\n    console.error('[validateSessionAction] Error:', error);\r\n    cookieStore.delete('greatapps');\r\n    await redirectToLogin();\r\n    return false;\r\n  }\r\n}\r\n"],"mappings":";AAEA,SAAS,gBAAgB;AACzB,SAAS,SAAS,eAAe;AACjC,SAAS,mBAAmB;AAC5B,SAAS,gCAAgC;AAEzC,eAAe,kBAAkB;AAC/B,QAAM,IAAI,MAAM,QAAQ;AACxB,QAAM,UAAU,EAAE,IAAI,SAAS,KAAK;AAEpC,MAAI,CAAC,SAAS;AACZ,aAAS,QAAQ;AACjB;AAAA,EACF;AAEA,QAAM,MAAM,IAAI,IAAI,OAAO;AAE3B,MAAI,CAAC,UAAU,aAAa,kBAAkB,EAAE,SAAS,IAAI,QAAQ,GAAG;AACtE;AAAA,EACF;AAEA,WAAS,QAAQ;AACnB;AAEA,eAAsB,wBAA0C;AAC9D,MAAI,QAAQ,IAAI,iBAAkB,QAAO;AAEzC,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,SAAS,YAAY,IAAI,WAAW,GAAG;AAE7C,MAAI,CAAC,QAAQ;AACX,UAAM,gBAAgB;AACtB,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,aAAa,MAAM,yBAAyB;AAClD,UAAM,UAAU,MAAM,YAAY,gBAAgB,UAAU;AAE5D,QAAI,CAAC,SAAS;AACZ,kBAAY,OAAO,WAAW;AAC9B,YAAM,gBAAgB;AACtB,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,kCAAkC,KAAK;AACrD,gBAAY,OAAO,WAAW;AAC9B,UAAM,gBAAgB;AACtB,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/modules/auth/actions/validate-session.action.ts"],"sourcesContent":["'use server';\r\n\r\nimport { redirect } from 'next/navigation';\r\nimport { cookies, headers } from 'next/headers';\r\nimport { authService } from '../services/auth.service';\r\nimport { getClientInfoFromRequest } from '../../../infra/utils/client-info';\r\n\r\nasync function redirectToLogin() {\r\n  const h = await headers();\r\n  const referer = h.get('referer') || '/';\r\n\r\n  if (!referer) {\r\n    redirect('/login');\r\n    return;\r\n  }\r\n\r\n  const url = new URL(referer);\r\n\r\n  if (['/login', '/register', '/forgot-password'].includes(url.pathname)) {\r\n    return;\r\n  }\r\n\r\n  redirect('/login');\r\n}\r\n\r\nexport async function validateSessionAction(): Promise<boolean> {\r\n  if (process.env.DUMMY_AUTH_TOKEN) return true;\r\n\r\n  const cookieStore = await cookies();\r\n  const cookie = cookieStore.get('greatapps')?.value;\r\n\r\n  if (!cookie) {\r\n    await redirectToLogin();\r\n    return false;\r\n  }\r\n\r\n  try {\r\n    const clientInfo = await getClientInfoFromRequest();\r\n    const isValid = await authService.validateSession(clientInfo);\r\n\r\n    if (!isValid) {\r\n      await authService.removeAuthCookie();\r\n      await redirectToLogin();\r\n      return false;\r\n    }\r\n\r\n    return true;\r\n  } catch (error) {\r\n    console.error('[validateSessionAction] Error:', error);\r\n    await authService.removeAuthCookie();\r\n    await redirectToLogin();\r\n    return false;\r\n  }\r\n}\r\n"],"mappings":";AAEA,SAAS,gBAAgB;AACzB,SAAS,SAAS,eAAe;AACjC,SAAS,mBAAmB;AAC5B,SAAS,gCAAgC;AAEzC,eAAe,kBAAkB;AAC/B,QAAM,IAAI,MAAM,QAAQ;AACxB,QAAM,UAAU,EAAE,IAAI,SAAS,KAAK;AAEpC,MAAI,CAAC,SAAS;AACZ,aAAS,QAAQ;AACjB;AAAA,EACF;AAEA,QAAM,MAAM,IAAI,IAAI,OAAO;AAE3B,MAAI,CAAC,UAAU,aAAa,kBAAkB,EAAE,SAAS,IAAI,QAAQ,GAAG;AACtE;AAAA,EACF;AAEA,WAAS,QAAQ;AACnB;AAEA,eAAsB,wBAA0C;AAC9D,MAAI,QAAQ,IAAI,iBAAkB,QAAO;AAEzC,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,SAAS,YAAY,IAAI,WAAW,GAAG;AAE7C,MAAI,CAAC,QAAQ;AACX,UAAM,gBAAgB;AACtB,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,aAAa,MAAM,yBAAyB;AAClD,UAAM,UAAU,MAAM,YAAY,gBAAgB,UAAU;AAE5D,QAAI,CAAC,SAAS;AACZ,YAAM,YAAY,iBAAiB;AACnC,YAAM,gBAAgB;AACtB,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,kCAAkC,KAAK;AACrD,UAAM,YAAY,iBAAiB;AACnC,UAAM,gBAAgB;AACtB,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/modules/auth/services/auth.service.mjs

@@ -12,19 +12,6 @@ const COOKIE_OPTIONS = {
   path: "/",
   domain: process.env.DOMAIN_COOKIE
 };
-async function setAuthCookie(token) {
-  const cookieStore = await cookies();
-  cookieStore.set(AUTH_COOKIE_NAME, token, { ...COOKIE_OPTIONS, maxAge: COOKIE_MAX_AGE });
-}
-async function removeAuthCookie() {
-  const cookieStore = await cookies();
-  cookieStore.delete({ name: AUTH_COOKIE_NAME, ...COOKIE_OPTIONS });
-}
-async function getAuthCookie() {
-  if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;
-  const cookieStore = await cookies();
-  return cookieStore.get(AUTH_COOKIE_NAME)?.value;
-}
 async function setPending2FACookie(token) {
   const cookieStore = await cookies();
   cookieStore.set(PENDING_2FA_COOKIE_NAME, token, { ...COOKIE_OPTIONS, maxAge: PENDING_2FA_MAX_AGE });
@@ -57,7 +44,7 @@ class AuthService {
       await setPending2FACookie(response.cookie);
       return { twoFactorRequired: true };
     }
-    await setAuthCookie(response.cookie);
+    await this.setAuthCookie(response.cookie);
     return {
       user: {},
       accessToken: response.cookie,
@@ -85,7 +72,7 @@ class AuthService {
     if (!response.cookie) {
       throw new ApiError("Resposta de autentica\xE7\xE3o inv\xE1lida ap\xF3s 2FA", "INVALID_RESPONSE", 500);
     }
-    await Promise.all([setAuthCookie(response.cookie), removePending2FACookie()]);
+    await Promise.all([this.setAuthCookie(response.cookie), removePending2FACookie()]);
     return { success: true };
   }
   async isTwoFactorPending() {
@@ -141,7 +128,7 @@ class AuthService {
     };
   }
   async logout(clientInfo) {
-    const cookie = await getAuthCookie();
+    const cookie = await this.getToken();
     if (!cookie) {
       throw new ApiError("Usu\xE1rio n\xE3o autenticado", "NOT_AUTHENTICATED", 401);
     }
@@ -158,7 +145,7 @@ class AuthService {
         throw new ApiError(response.message || "Erro ao realizar logout", "LOGOUT_FAILED", 400);
       }
     } finally {
-      await Promise.all([removeAuthCookie(), removePending2FACookie()]);
+      await Promise.all([this.removeAuthCookie(), removePending2FACookie()]);
     }
     return {
       success: true
@@ -177,7 +164,7 @@ class AuthService {
     throw new ApiError("Reenvio de verifica\xE7\xE3o n\xE3o implementado", "NOT_IMPLEMENTED", 501);
   }
   async validateSession(clientInfo) {
-    const cookie = await getAuthCookie();
+    const cookie = await this.getToken();
     if (!cookie) {
       return false;
     }
@@ -197,11 +184,27 @@ class AuthService {
     }
   }
   async isAuthenticated() {
-    const token = await getAuthCookie();
+    const token = await this.getToken();
     return !!token;
   }
   async getToken() {
-    return getAuthCookie();
+    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;
+    const cookieStore = await cookies();
+    return cookieStore.get(AUTH_COOKIE_NAME)?.value;
+  }
+  async setAuthCookie(token) {
+    const cookieStore = await cookies();
+    cookieStore.set(AUTH_COOKIE_NAME, token, {
+      ...COOKIE_OPTIONS,
+      maxAge: COOKIE_MAX_AGE
+    });
+  }
+  async removeAuthCookie() {
+    const cookieStore = await cookies();
+    cookieStore.delete({
+      name: AUTH_COOKIE_NAME,
+      ...COOKIE_OPTIONS
+    });
   }
 }
 const authService = new AuthService();

package/dist/modules/auth/services/auth.service.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/auth/services/auth.service.ts"],"sourcesContent":["\r\nimport { cookies } from 'next/headers';\r\n\r\nimport { apiClient } from '../../../infra/api/client';\r\nimport { ApiError } from '../../../infra/api/types';\r\nimport { User } from '../../users/schema';\r\nimport {\r\n  ClientInfo,\r\n  ForgotPasswordRequest,\r\n  ForgotPasswordResponse,\r\n  GeoLocation,\r\n  LoginApiResponse,\r\n  LoginRequest,\r\n  LoginResponse,\r\n  LogoutApiResponse,\r\n  LogoutRequest,\r\n  LogoutResponse,\r\n  RegisterApiRequest,\r\n  RegisterApiResponse,\r\n  RegisterRequest,\r\n  RegisterResponse,\r\n  ResendVerificationRequest,\r\n  ResendVerificationResponse,\r\n  ResetPasswordRequest,\r\n  ResetPasswordResponse,\r\n  SessionKeepRequest,\r\n  SessionKeepResponse,\r\n  TwoFactorApiResponse,\r\n  TwoFactorRequest,\r\n  TwoFactorResponse,\r\n  VerifyEmailRequest,\r\n  VerifyEmailResponse,\r\n} from '../schema';\r\n\r\nconst AUTH_COOKIE_NAME = 'greatapps';\r\nconst PENDING_2FA_COOKIE_NAME = 'greatapps_2fa_pending';\r\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 30;\r\nconst PENDING_2FA_MAX_AGE = 60 * 10; // 10 minutos para completar o 2FA\r\n\r\nconst COOKIE_OPTIONS = {\r\n  httpOnly: true,\r\n  secure: process.env.NODE_ENV === 'production',\r\n  sameSite: 'lax' as const,\r\n  path: '/',\r\n  domain: process.env.DOMAIN_COOKIE,\r\n};\r\n\r\nasync function setAuthCookie(token: string): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.set(AUTH_COOKIE_NAME, token, { ...COOKIE_OPTIONS, maxAge: COOKIE_MAX_AGE });\r\n}\r\n\r\nasync function removeAuthCookie(): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.delete({ name: AUTH_COOKIE_NAME, ...COOKIE_OPTIONS });\r\n}\r\n\r\nasync function getAuthCookie(): Promise<string | undefined> {\r\n  if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;\r\n  const cookieStore = await cookies();\r\n  return cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n}\r\n\r\nasync function setPending2FACookie(token: string): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.set(PENDING_2FA_COOKIE_NAME, token, { ...COOKIE_OPTIONS, maxAge: PENDING_2FA_MAX_AGE });\r\n}\r\n\r\nasync function removePending2FACookie(): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.delete({ name: PENDING_2FA_COOKIE_NAME, ...COOKIE_OPTIONS });\r\n}\r\n\r\nasync function getPending2FACookie(): Promise<string | undefined> {\r\n  const cookieStore = await cookies();\r\n  return cookieStore.get(PENDING_2FA_COOKIE_NAME)?.value;\r\n}\r\n\r\nclass AuthService {\r\n  async login(credentials: LoginRequest, clientInfo: ClientInfo): Promise<LoginResponse> {\r\n    const response = await apiClient.post<LoginApiResponse>('/auth/login', {\r\n      email: credentials.email,\r\n      password: credentials.password,\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n    });\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(response.message || 'E-mail ou senha incorretos', 'LOGIN_FAILED', 401);\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError('Resposta de autenticação inválida', 'INVALID_RESPONSE', 500);\r\n    }\r\n\r\n    if (response.two_factor_authentication) {\r\n      // Armazena o cookie temporariamente até o 2FA ser concluído.\r\n      // O cookie principal NÃO é setado aqui para evitar falso positivo em isAuthenticated().\r\n      await setPending2FACookie(response.cookie);\r\n      return { twoFactorRequired: true };\r\n    }\r\n\r\n    await setAuthCookie(response.cookie);\r\n\r\n    return {\r\n      user: {} as User,\r\n      accessToken: response.cookie,\r\n      refreshToken: '',\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n    };\r\n  }\r\n\r\n  async verifyTwoFactor(code: number, clientInfo: ClientInfo): Promise<TwoFactorResponse> {\r\n    const pendingCookie = await getPending2FACookie();\r\n\r\n    if (!pendingCookie) {\r\n      throw new ApiError('Nenhuma autenticação 2FA pendente', 'NO_PENDING_2FA', 400);\r\n    }\r\n\r\n    const payload: TwoFactorRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie: pendingCookie,\r\n      code,\r\n    };\r\n\r\n    const response = await apiClient.post<TwoFactorApiResponse>('/auth/code', payload);\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(response.message || 'Código 2FA inválido', 'TWO_FACTOR_FAILED', 401);\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError('Resposta de autenticação inválida após 2FA', 'INVALID_RESPONSE', 500);\r\n    }\r\n\r\n    await Promise.all([setAuthCookie(response.cookie), removePending2FACookie()]);\r\n\r\n    return { success: true };\r\n  }\r\n\r\n  async isTwoFactorPending(): Promise<boolean> {\r\n    const pending = await getPending2FACookie();\r\n    return !!pending;\r\n  }\r\n\r\n  async register(data: RegisterRequest): Promise<RegisterResponse> {\r\n    const today = new Date();\r\n    const trialEndDate = new Date(today);\r\n    trialEndDate.setDate(today.getDate() + 7); // 7 dias de trial\r\n\r\n    const payload: RegisterApiRequest = {\r\n      name: data.accountName,\r\n      bussiness_type: data.businessType,\r\n      language: 'pt-br',\r\n      timezone: 'America/Sao_Paulo',\r\n      currency: 'BRL',\r\n      user: {\r\n        id_api: '',\r\n        name: data.name,\r\n        last_name: data.lastName || '',\r\n        rg: data.rg || '',\r\n        cpf: data.cpf || '',\r\n        gender: data.gender,\r\n        email: data.email,\r\n        phone: data.phone,\r\n        password: data.password,\r\n        profile: 'owner',\r\n        language: 'pt-br',\r\n      },\r\n      subscription: {\r\n        type: 'trial',\r\n        id_cupom: '',\r\n        id_plan: 1,\r\n        due_date: trialEndDate.toISOString().split('T')[0],\r\n        id_product: 1,\r\n      },\r\n    };\r\n\r\n    const response = await apiClient.post<RegisterApiResponse>('/accounts', payload);\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(response.message || 'Erro ao criar conta', 'REGISTER_FAILED', 400);\r\n    }\r\n\r\n    if (!response.data || response.data.length === 0) {\r\n      throw new ApiError('Resposta de registro inválida', 'INVALID_RESPONSE', 500);\r\n    }\r\n\r\n    const accountData = response.data[0];\r\n\r\n    // Retornar sem token pois o registro não retorna cookie diretamente\r\n    // O usuário precisará fazer login após o registro\r\n    // O usuário completo será carregado após o login\r\n    return {\r\n      user: {} as User, // Placeholder, será preenchido após login\r\n      accessToken: '',\r\n      refreshToken: '',\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n      requiresEmailVerification: !accountData.verified,\r\n    };\r\n  }\r\n\r\n  async logout(clientInfo: ClientInfo): Promise<LogoutResponse> {\r\n    const cookie = await getAuthCookie();\r\n\r\n    if (!cookie) {\r\n      throw new ApiError('Usuário não autenticado', 'NOT_AUTHENTICATED', 401);\r\n    }\r\n\r\n    const payload: LogoutRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n    };\r\n\r\n    try {\r\n      const response = await apiClient.post<LogoutApiResponse>('/auth/logout', payload);\r\n\r\n      if (response.status === 0) {\r\n        throw new ApiError(response.message || 'Erro ao realizar logout', 'LOGOUT_FAILED', 400);\r\n      }\r\n    } finally {\r\n      await Promise.all([removeAuthCookie(), removePending2FACookie()]);\r\n    }\r\n\r\n    return {\r\n      success: true,\r\n    };\r\n  }\r\n\r\n  async forgotPassword(_data: ForgotPasswordRequest): Promise<ForgotPasswordResponse> {\r\n    throw new ApiError('Recuperação de senha não implementada', 'NOT_IMPLEMENTED', 501);\r\n  }\r\n\r\n  async resetPassword(_data: ResetPasswordRequest): Promise<ResetPasswordResponse> {\r\n    throw new ApiError('Redefinição de senha não implementada', 'NOT_IMPLEMENTED', 501);\r\n  }\r\n\r\n  async verifyEmail(_data: VerifyEmailRequest): Promise<VerifyEmailResponse> {\r\n    throw new ApiError('Verificação de email não implementada', 'NOT_IMPLEMENTED', 501);\r\n  }\r\n\r\n  async resendVerification(_data: ResendVerificationRequest): Promise<ResendVerificationResponse> {\r\n    throw new ApiError('Reenvio de verificação não implementado', 'NOT_IMPLEMENTED', 501);\r\n  }\r\n\r\n  async validateSession(clientInfo: ClientInfo): Promise<boolean> {\r\n    const cookie = await getAuthCookie();\r\n\r\n    if (!cookie) {\r\n      return false;\r\n    }\r\n\r\n    try {\r\n      const payload: SessionKeepRequest = {\r\n        location: clientInfo.location,\r\n        ip: clientInfo.ip,\r\n        timezone: clientInfo.timezone,\r\n        agent: clientInfo.agent,\r\n        cookie,\r\n      };\r\n\r\n      const response = await apiClient.post<SessionKeepResponse>('/auth/keep', payload);\r\n\r\n      return response.status === 1;\r\n    } catch (error) {\r\n      console.error('[AuthService] validateSession error', error);\r\n      return false;\r\n    }\r\n  }\r\n\r\n  async isAuthenticated(): Promise<boolean> {\r\n    const token = await getAuthCookie();\r\n    return !!token;\r\n  }\r\n\r\n  async getToken(): Promise<string | undefined> {\r\n    return getAuthCookie();\r\n  }\r\n}\r\n\r\nexport const authService = new AuthService();\r\n\r\nexport type { ClientInfo, GeoLocation };\r\n"],"mappings":"AACA,SAAS,eAAe;AAExB,SAAS,iBAAiB;AAC1B,SAAS,gBAAgB;AA8BzB,MAAM,mBAAmB;AACzB,MAAM,0BAA0B;AAChC,MAAM,iBAAiB,KAAK,KAAK,KAAK;AACtC,MAAM,sBAAsB,KAAK;AAEjC,MAAM,iBAAiB;AAAA,EACrB,UAAU;AAAA,EACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ,QAAQ,IAAI;AACtB;AAEA,eAAe,cAAc,OAA8B;AACzD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,kBAAkB,OAAO,EAAE,GAAG,gBAAgB,QAAQ,eAAe,CAAC;AACxF;AAEA,eAAe,mBAAkC;AAC/C,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,OAAO,EAAE,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAClE;AAEA,eAAe,gBAA6C;AAC1D,MAAI,QAAQ,IAAI,iBAAkB,QAAO,QAAQ,IAAI;AACrD,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,gBAAgB,GAAG;AAC5C;AAEA,eAAe,oBAAoB,OAA8B;AAC/D,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,yBAAyB,OAAO,EAAE,GAAG,gBAAgB,QAAQ,oBAAoB,CAAC;AACpG;AAEA,eAAe,yBAAwC;AACrD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,OAAO,EAAE,MAAM,yBAAyB,GAAG,eAAe,CAAC;AACzE;AAEA,eAAe,sBAAmD;AAChE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,uBAAuB,GAAG;AACnD;AAEA,MAAM,YAAY;AAAA,EAChB,MAAM,MAAM,aAA2B,YAAgD;AACrF,UAAM,WAAW,MAAM,UAAU,KAAuB,eAAe;AAAA,MACrE,OAAO,YAAY;AAAA,MACnB,UAAU,YAAY;AAAA,MACtB,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,IACpB,CAAC;AAED,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI,SAAS,SAAS,WAAW,8BAA8B,gBAAgB,GAAG;AAAA,IAC1F;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI,SAAS,8CAAqC,oBAAoB,GAAG;AAAA,IACjF;AAEA,QAAI,SAAS,2BAA2B;AAGtC,YAAM,oBAAoB,SAAS,MAAM;AACzC,aAAO,EAAE,mBAAmB,KAAK;AAAA,IACnC;AAEA,UAAM,cAAc,SAAS,MAAM;AAEnC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,aAAa,SAAS;AAAA,MACtB,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,MAAc,YAAoD;AACtF,UAAM,gBAAgB,MAAM,oBAAoB;AAEhD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,SAAS,2CAAqC,kBAAkB,GAAG;AAAA,IAC/E;AAEA,UAAM,UAA4B;AAAA,MAChC,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,UAAU,KAA2B,cAAc,OAAO;AAEjF,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI,SAAS,SAAS,WAAW,6BAAuB,qBAAqB,GAAG;AAAA,IACxF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI,SAAS,0DAA8C,oBAAoB,GAAG;AAAA,IAC1F;AAEA,UAAM,QAAQ,IAAI,CAAC,cAAc,SAAS,MAAM,GAAG,uBAAuB,CAAC,CAAC;AAE5E,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAAA,EAEA,MAAM,qBAAuC;AAC3C,UAAM,UAAU,MAAM,oBAAoB;AAC1C,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,SAAS,MAAkD;AAC/D,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,eAAe,IAAI,KAAK,KAAK;AACnC,iBAAa,QAAQ,MAAM,QAAQ,IAAI,CAAC;AAExC,UAAM,UAA8B;AAAA,MAClC,MAAM,KAAK;AAAA,MACX,gBAAgB,KAAK;AAAA,MACrB,UAAU;AAAA,MACV,UAAU;AAAA,MACV,UAAU;AAAA,MACV,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,WAAW,KAAK,YAAY;AAAA,QAC5B,IAAI,KAAK,MAAM;AAAA,QACf,KAAK,KAAK,OAAO;AAAA,QACjB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA,QACf,SAAS;AAAA,QACT,UAAU;AAAA,MACZ;AAAA,MACA,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU,aAAa,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,QACjD,YAAY;AAAA,MACd;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,UAAU,KAA0B,aAAa,OAAO;AAE/E,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI,SAAS,SAAS,WAAW,uBAAuB,mBAAmB,GAAG;AAAA,IACtF;AAEA,QAAI,CAAC,SAAS,QAAQ,SAAS,KAAK,WAAW,GAAG;AAChD,YAAM,IAAI,SAAS,oCAAiC,oBAAoB,GAAG;AAAA,IAC7E;AAEA,UAAM,cAAc,SAAS,KAAK,CAAC;AAKnC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,MACpE,2BAA2B,CAAC,YAAY;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,YAAiD;AAC5D,UAAM,SAAS,MAAM,cAAc;AAEnC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,SAAS,iCAA2B,qBAAqB,GAAG;AAAA,IACxE;AAEA,UAAM,UAAyB;AAAA,MAC7B,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,UAAU,KAAwB,gBAAgB,OAAO;AAEhF,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,IAAI,SAAS,SAAS,WAAW,2BAA2B,iBAAiB,GAAG;AAAA,MACxF;AAAA,IACF,UAAE;AACA,YAAM,QAAQ,IAAI,CAAC,iBAAiB,GAAG,uBAAuB,CAAC,CAAC;AAAA,IAClE;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EAEA,MAAM,eAAe,OAA+D;AAClF,UAAM,IAAI,SAAS,kDAAyC,mBAAmB,GAAG;AAAA,EACpF;AAAA,EAEA,MAAM,cAAc,OAA6D;AAC/E,UAAM,IAAI,SAAS,kDAAyC,mBAAmB,GAAG;AAAA,EACpF;AAAA,EAEA,MAAM,YAAY,OAAyD;AACzE,UAAM,IAAI,SAAS,kDAAyC,mBAAmB,GAAG;AAAA,EACpF;AAAA,EAEA,MAAM,mBAAmB,OAAuE;AAC9F,UAAM,IAAI,SAAS,oDAA2C,mBAAmB,GAAG;AAAA,EACtF;AAAA,EAEA,MAAM,gBAAgB,YAA0C;AAC9D,UAAM,SAAS,MAAM,cAAc;AAEnC,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,UAA8B;AAAA,QAClC,UAAU,WAAW;AAAA,QACrB,IAAI,WAAW;AAAA,QACf,UAAU,WAAW;AAAA,QACrB,OAAO,WAAW;AAAA,QAClB;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,UAAU,KAA0B,cAAc,OAAO;AAEhF,aAAO,SAAS,WAAW;AAAA,IAC7B,SAAS,OAAO;AACd,cAAQ,MAAM,uCAAuC,KAAK;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,kBAAoC;AACxC,UAAM,QAAQ,MAAM,cAAc;AAClC,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,WAAwC;AAC5C,WAAO,cAAc;AAAA,EACvB;AACF;AAEO,MAAM,cAAc,IAAI,YAAY;","names":[]}
+{"version":3,"sources":["../../../../src/modules/auth/services/auth.service.ts"],"sourcesContent":["\r\nimport { cookies } from 'next/headers';\r\n\r\nimport { apiClient } from '../../../infra/api/client';\r\nimport { ApiError } from '../../../infra/api/types';\r\nimport { User } from '../../users/schema';\r\nimport {\r\n  ClientInfo,\r\n  ForgotPasswordRequest,\r\n  ForgotPasswordResponse,\r\n  GeoLocation,\r\n  LoginApiResponse,\r\n  LoginRequest,\r\n  LoginResponse,\r\n  LogoutApiResponse,\r\n  LogoutRequest,\r\n  LogoutResponse,\r\n  RegisterApiRequest,\r\n  RegisterApiResponse,\r\n  RegisterRequest,\r\n  RegisterResponse,\r\n  ResendVerificationRequest,\r\n  ResendVerificationResponse,\r\n  ResetPasswordRequest,\r\n  ResetPasswordResponse,\r\n  SessionKeepRequest,\r\n  SessionKeepResponse,\r\n  TwoFactorApiResponse,\r\n  TwoFactorRequest,\r\n  TwoFactorResponse,\r\n  VerifyEmailRequest,\r\n  VerifyEmailResponse,\r\n} from '../schema';\r\n\r\nconst AUTH_COOKIE_NAME = 'greatapps';\r\nconst PENDING_2FA_COOKIE_NAME = 'greatapps_2fa_pending';\r\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 30;\r\nconst PENDING_2FA_MAX_AGE = 60 * 10; // 10 minutos para completar o 2FA\r\n\r\nconst COOKIE_OPTIONS = {\r\n  httpOnly: true,\r\n  secure: process.env.NODE_ENV === 'production',\r\n  sameSite: 'lax' as const,\r\n  path: '/',\r\n  domain: process.env.DOMAIN_COOKIE,\r\n};\r\n\r\nasync function setPending2FACookie(token: string): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.set(PENDING_2FA_COOKIE_NAME, token, { ...COOKIE_OPTIONS, maxAge: PENDING_2FA_MAX_AGE });\r\n}\r\n\r\nasync function removePending2FACookie(): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.delete({ name: PENDING_2FA_COOKIE_NAME, ...COOKIE_OPTIONS });\r\n}\r\n\r\nasync function getPending2FACookie(): Promise<string | undefined> {\r\n  const cookieStore = await cookies();\r\n  return cookieStore.get(PENDING_2FA_COOKIE_NAME)?.value;\r\n}\r\n\r\nclass AuthService {\r\n  async login(credentials: LoginRequest, clientInfo: ClientInfo): Promise<LoginResponse> {\r\n    const response = await apiClient.post<LoginApiResponse>('/auth/login', {\r\n      email: credentials.email,\r\n      password: credentials.password,\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n    });\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(response.message || 'E-mail ou senha incorretos', 'LOGIN_FAILED', 401);\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError('Resposta de autenticação inválida', 'INVALID_RESPONSE', 500);\r\n    }\r\n\r\n    if (response.two_factor_authentication) {\r\n      // Armazena o cookie temporariamente até o 2FA ser concluído.\r\n      // O cookie principal NÃO é setado aqui para evitar falso positivo em isAuthenticated().\r\n      await setPending2FACookie(response.cookie);\r\n      return { twoFactorRequired: true };\r\n    }\r\n\r\n    await this.setAuthCookie(response.cookie);\r\n\r\n    return {\r\n      user: {} as User,\r\n      accessToken: response.cookie,\r\n      refreshToken: '',\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n    };\r\n  }\r\n\r\n  async verifyTwoFactor(code: number, clientInfo: ClientInfo): Promise<TwoFactorResponse> {\r\n    const pendingCookie = await getPending2FACookie();\r\n\r\n    if (!pendingCookie) {\r\n      throw new ApiError('Nenhuma autenticação 2FA pendente', 'NO_PENDING_2FA', 400);\r\n    }\r\n\r\n    const payload: TwoFactorRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie: pendingCookie,\r\n      code,\r\n    };\r\n\r\n    const response = await apiClient.post<TwoFactorApiResponse>('/auth/code', payload);\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(response.message || 'Código 2FA inválido', 'TWO_FACTOR_FAILED', 401);\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError('Resposta de autenticação inválida após 2FA', 'INVALID_RESPONSE', 500);\r\n    }\r\n\r\n    await Promise.all([this.setAuthCookie(response.cookie), removePending2FACookie()]);\r\n\r\n    return { success: true };\r\n  }\r\n\r\n  async isTwoFactorPending(): Promise<boolean> {\r\n    const pending = await getPending2FACookie();\r\n    return !!pending;\r\n  }\r\n\r\n  async register(data: RegisterRequest): Promise<RegisterResponse> {\r\n    const today = new Date();\r\n    const trialEndDate = new Date(today);\r\n    trialEndDate.setDate(today.getDate() + 7); // 7 dias de trial\r\n\r\n    const payload: RegisterApiRequest = {\r\n      name: data.accountName,\r\n      bussiness_type: data.businessType,\r\n      language: 'pt-br',\r\n      timezone: 'America/Sao_Paulo',\r\n      currency: 'BRL',\r\n      user: {\r\n        id_api: '',\r\n        name: data.name,\r\n        last_name: data.lastName || '',\r\n        rg: data.rg || '',\r\n        cpf: data.cpf || '',\r\n        gender: data.gender,\r\n        email: data.email,\r\n        phone: data.phone,\r\n        password: data.password,\r\n        profile: 'owner',\r\n        language: 'pt-br',\r\n      },\r\n      subscription: {\r\n        type: 'trial',\r\n        id_cupom: '',\r\n        id_plan: 1,\r\n        due_date: trialEndDate.toISOString().split('T')[0],\r\n        id_product: 1,\r\n      },\r\n    };\r\n\r\n    const response = await apiClient.post<RegisterApiResponse>('/accounts', payload);\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(response.message || 'Erro ao criar conta', 'REGISTER_FAILED', 400);\r\n    }\r\n\r\n    if (!response.data || response.data.length === 0) {\r\n      throw new ApiError('Resposta de registro inválida', 'INVALID_RESPONSE', 500);\r\n    }\r\n\r\n    const accountData = response.data[0];\r\n\r\n    // Retornar sem token pois o registro não retorna cookie diretamente\r\n    // O usuário precisará fazer login após o registro\r\n    // O usuário completo será carregado após o login\r\n    return {\r\n      user: {} as User, // Placeholder, será preenchido após login\r\n      accessToken: '',\r\n      refreshToken: '',\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n      requiresEmailVerification: !accountData.verified,\r\n    };\r\n  }\r\n\r\n  async logout(clientInfo: ClientInfo): Promise<LogoutResponse> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      throw new ApiError('Usuário não autenticado', 'NOT_AUTHENTICATED', 401);\r\n    }\r\n\r\n    const payload: LogoutRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n    };\r\n\r\n    try {\r\n      const response = await apiClient.post<LogoutApiResponse>('/auth/logout', payload);\r\n\r\n      if (response.status === 0) {\r\n        throw new ApiError(response.message || 'Erro ao realizar logout', 'LOGOUT_FAILED', 400);\r\n      }\r\n    } finally {\r\n      await Promise.all([this.removeAuthCookie(), removePending2FACookie()]);\r\n    }\r\n\r\n    return {\r\n      success: true,\r\n    };\r\n  }\r\n\r\n  async forgotPassword(_data: ForgotPasswordRequest): Promise<ForgotPasswordResponse> {\r\n    throw new ApiError('Recuperação de senha não implementada', 'NOT_IMPLEMENTED', 501);\r\n  }\r\n\r\n  async resetPassword(_data: ResetPasswordRequest): Promise<ResetPasswordResponse> {\r\n    throw new ApiError('Redefinição de senha não implementada', 'NOT_IMPLEMENTED', 501);\r\n  }\r\n\r\n  async verifyEmail(_data: VerifyEmailRequest): Promise<VerifyEmailResponse> {\r\n    throw new ApiError('Verificação de email não implementada', 'NOT_IMPLEMENTED', 501);\r\n  }\r\n\r\n  async resendVerification(_data: ResendVerificationRequest): Promise<ResendVerificationResponse> {\r\n    throw new ApiError('Reenvio de verificação não implementado', 'NOT_IMPLEMENTED', 501);\r\n  }\r\n\r\n  async validateSession(clientInfo: ClientInfo): Promise<boolean> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      return false;\r\n    }\r\n\r\n    try {\r\n      const payload: SessionKeepRequest = {\r\n        location: clientInfo.location,\r\n        ip: clientInfo.ip,\r\n        timezone: clientInfo.timezone,\r\n        agent: clientInfo.agent,\r\n        cookie,\r\n      };\r\n\r\n      const response = await apiClient.post<SessionKeepResponse>('/auth/keep', payload);\r\n\r\n      return response.status === 1;\r\n    } catch (error) {\r\n      console.error('[AuthService] validateSession error', error);\r\n      return false;\r\n    }\r\n  }\r\n\r\n  async isAuthenticated(): Promise<boolean> {\r\n    const token = await this.getToken();\r\n    return !!token;\r\n  }\r\n\r\n  async getToken(): Promise<string | undefined> {\r\n    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;\r\n    const cookieStore = await cookies();\r\n    return cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n  }\r\n\r\n\r\n  private async setAuthCookie(token: string): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    cookieStore.set(AUTH_COOKIE_NAME, token, {\r\n      ...COOKIE_OPTIONS,\r\n      maxAge: COOKIE_MAX_AGE,\r\n    });\r\n  }\r\n\r\n\r\n  async removeAuthCookie(): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    cookieStore.delete({\r\n      name: AUTH_COOKIE_NAME,\r\n      ...COOKIE_OPTIONS,\r\n    });\r\n  }\r\n}\r\n\r\nexport const authService = new AuthService();\r\n\r\nexport type { ClientInfo, GeoLocation };\r\n"],"mappings":"AACA,SAAS,eAAe;AAExB,SAAS,iBAAiB;AAC1B,SAAS,gBAAgB;AA8BzB,MAAM,mBAAmB;AACzB,MAAM,0BAA0B;AAChC,MAAM,iBAAiB,KAAK,KAAK,KAAK;AACtC,MAAM,sBAAsB,KAAK;AAEjC,MAAM,iBAAiB;AAAA,EACrB,UAAU;AAAA,EACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ,QAAQ,IAAI;AACtB;AAEA,eAAe,oBAAoB,OAA8B;AAC/D,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,yBAAyB,OAAO,EAAE,GAAG,gBAAgB,QAAQ,oBAAoB,CAAC;AACpG;AAEA,eAAe,yBAAwC;AACrD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,OAAO,EAAE,MAAM,yBAAyB,GAAG,eAAe,CAAC;AACzE;AAEA,eAAe,sBAAmD;AAChE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,uBAAuB,GAAG;AACnD;AAEA,MAAM,YAAY;AAAA,EAChB,MAAM,MAAM,aAA2B,YAAgD;AACrF,UAAM,WAAW,MAAM,UAAU,KAAuB,eAAe;AAAA,MACrE,OAAO,YAAY;AAAA,MACnB,UAAU,YAAY;AAAA,MACtB,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,IACpB,CAAC;AAED,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI,SAAS,SAAS,WAAW,8BAA8B,gBAAgB,GAAG;AAAA,IAC1F;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI,SAAS,8CAAqC,oBAAoB,GAAG;AAAA,IACjF;AAEA,QAAI,SAAS,2BAA2B;AAGtC,YAAM,oBAAoB,SAAS,MAAM;AACzC,aAAO,EAAE,mBAAmB,KAAK;AAAA,IACnC;AAEA,UAAM,KAAK,cAAc,SAAS,MAAM;AAExC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,aAAa,SAAS;AAAA,MACtB,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,MAAc,YAAoD;AACtF,UAAM,gBAAgB,MAAM,oBAAoB;AAEhD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,SAAS,2CAAqC,kBAAkB,GAAG;AAAA,IAC/E;AAEA,UAAM,UAA4B;AAAA,MAChC,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,UAAU,KAA2B,cAAc,OAAO;AAEjF,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI,SAAS,SAAS,WAAW,6BAAuB,qBAAqB,GAAG;AAAA,IACxF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI,SAAS,0DAA8C,oBAAoB,GAAG;AAAA,IAC1F;AAEA,UAAM,QAAQ,IAAI,CAAC,KAAK,cAAc,SAAS,MAAM,GAAG,uBAAuB,CAAC,CAAC;AAEjF,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAAA,EAEA,MAAM,qBAAuC;AAC3C,UAAM,UAAU,MAAM,oBAAoB;AAC1C,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,SAAS,MAAkD;AAC/D,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,eAAe,IAAI,KAAK,KAAK;AACnC,iBAAa,QAAQ,MAAM,QAAQ,IAAI,CAAC;AAExC,UAAM,UAA8B;AAAA,MAClC,MAAM,KAAK;AAAA,MACX,gBAAgB,KAAK;AAAA,MACrB,UAAU;AAAA,MACV,UAAU;AAAA,MACV,UAAU;AAAA,MACV,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,WAAW,KAAK,YAAY;AAAA,QAC5B,IAAI,KAAK,MAAM;AAAA,QACf,KAAK,KAAK,OAAO;AAAA,QACjB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA,QACf,SAAS;AAAA,QACT,UAAU;AAAA,MACZ;AAAA,MACA,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU,aAAa,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,QACjD,YAAY;AAAA,MACd;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,UAAU,KAA0B,aAAa,OAAO;AAE/E,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI,SAAS,SAAS,WAAW,uBAAuB,mBAAmB,GAAG;AAAA,IACtF;AAEA,QAAI,CAAC,SAAS,QAAQ,SAAS,KAAK,WAAW,GAAG;AAChD,YAAM,IAAI,SAAS,oCAAiC,oBAAoB,GAAG;AAAA,IAC7E;AAEA,UAAM,cAAc,SAAS,KAAK,CAAC;AAKnC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,MACpE,2BAA2B,CAAC,YAAY;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,YAAiD;AAC5D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,SAAS,iCAA2B,qBAAqB,GAAG;AAAA,IACxE;AAEA,UAAM,UAAyB;AAAA,MAC7B,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,UAAU,KAAwB,gBAAgB,OAAO;AAEhF,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,IAAI,SAAS,SAAS,WAAW,2BAA2B,iBAAiB,GAAG;AAAA,MACxF;AAAA,IACF,UAAE;AACA,YAAM,QAAQ,IAAI,CAAC,KAAK,iBAAiB,GAAG,uBAAuB,CAAC,CAAC;AAAA,IACvE;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EAEA,MAAM,eAAe,OAA+D;AAClF,UAAM,IAAI,SAAS,kDAAyC,mBAAmB,GAAG;AAAA,EACpF;AAAA,EAEA,MAAM,cAAc,OAA6D;AAC/E,UAAM,IAAI,SAAS,kDAAyC,mBAAmB,GAAG;AAAA,EACpF;AAAA,EAEA,MAAM,YAAY,OAAyD;AACzE,UAAM,IAAI,SAAS,kDAAyC,mBAAmB,GAAG;AAAA,EACpF;AAAA,EAEA,MAAM,mBAAmB,OAAuE;AAC9F,UAAM,IAAI,SAAS,oDAA2C,mBAAmB,GAAG;AAAA,EACtF;AAAA,EAEA,MAAM,gBAAgB,YAA0C;AAC9D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,UAA8B;AAAA,QAClC,UAAU,WAAW;AAAA,QACrB,IAAI,WAAW;AAAA,QACf,UAAU,WAAW;AAAA,QACrB,OAAO,WAAW;AAAA,QAClB;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,UAAU,KAA0B,cAAc,OAAO;AAEhF,aAAO,SAAS,WAAW;AAAA,IAC7B,SAAS,OAAO;AACd,cAAQ,MAAM,uCAAuC,KAAK;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,kBAAoC;AACxC,UAAM,QAAQ,MAAM,KAAK,SAAS;AAClC,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,WAAwC;AAC5C,QAAI,QAAQ,IAAI,iBAAkB,QAAO,QAAQ,IAAI;AACrD,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,gBAAgB,GAAG;AAAA,EAC5C;AAAA,EAGA,MAAc,cAAc,OAA8B;AACxD,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,IAAI,kBAAkB,OAAO;AAAA,MACvC,GAAG;AAAA,MACH,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAAA,EAGA,MAAM,mBAAkC;AACtC,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,OAAO;AAAA,MACjB,MAAM;AAAA,MACN,GAAG;AAAA,IACL,CAAC;AAAA,EACH;AACF;AAEO,MAAM,cAAc,IAAI,YAAY;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greatapps/common",
-  "version": "1.1.52",
+  "version": "1.1.53",
   "description": "Shared library for GreatApps frontend applications",
   "main": "./dist/index.mjs",
   "types": "./src/index.ts",

package/src/modules/auth/actions/validate-session.action.ts

@@ -39,7 +39,7 @@ export async function validateSessionAction(): Promise<boolean> {
     const isValid = await authService.validateSession(clientInfo);
 
     if (!isValid) {
-      cookieStore.delete('greatapps');
+      await authService.removeAuthCookie();
       await redirectToLogin();
       return false;
     }
@@ -47,7 +47,7 @@ export async function validateSessionAction(): Promise<boolean> {
     return true;
   } catch (error) {
     console.error('[validateSessionAction] Error:', error);
-    cookieStore.delete('greatapps');
+    await authService.removeAuthCookie();
     await redirectToLogin();
     return false;
   }

package/src/modules/auth/services/auth.service.ts

@@ -45,22 +45,6 @@ const COOKIE_OPTIONS = {
   domain: process.env.DOMAIN_COOKIE,
 };
 
-async function setAuthCookie(token: string): Promise<void> {
-  const cookieStore = await cookies();
-  cookieStore.set(AUTH_COOKIE_NAME, token, { ...COOKIE_OPTIONS, maxAge: COOKIE_MAX_AGE });
-}
-
-async function removeAuthCookie(): Promise<void> {
-  const cookieStore = await cookies();
-  cookieStore.delete({ name: AUTH_COOKIE_NAME, ...COOKIE_OPTIONS });
-}
-
-async function getAuthCookie(): Promise<string | undefined> {
-  if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;
-  const cookieStore = await cookies();
-  return cookieStore.get(AUTH_COOKIE_NAME)?.value;
-}
-
 async function setPending2FACookie(token: string): Promise<void> {
   const cookieStore = await cookies();
   cookieStore.set(PENDING_2FA_COOKIE_NAME, token, { ...COOKIE_OPTIONS, maxAge: PENDING_2FA_MAX_AGE });
@@ -102,7 +86,7 @@ class AuthService {
       return { twoFactorRequired: true };
     }
 
-    await setAuthCookie(response.cookie);
+    await this.setAuthCookie(response.cookie);
 
     return {
       user: {} as User,
@@ -138,7 +122,7 @@ class AuthService {
       throw new ApiError('Resposta de autenticação inválida após 2FA', 'INVALID_RESPONSE', 500);
     }
 
-    await Promise.all([setAuthCookie(response.cookie), removePending2FACookie()]);
+    await Promise.all([this.setAuthCookie(response.cookie), removePending2FACookie()]);
 
     return { success: true };
   }
@@ -206,7 +190,7 @@ class AuthService {
   }
 
   async logout(clientInfo: ClientInfo): Promise<LogoutResponse> {
-    const cookie = await getAuthCookie();
+    const cookie = await this.getToken();
 
     if (!cookie) {
       throw new ApiError('Usuário não autenticado', 'NOT_AUTHENTICATED', 401);
@@ -227,7 +211,7 @@ class AuthService {
         throw new ApiError(response.message || 'Erro ao realizar logout', 'LOGOUT_FAILED', 400);
       }
     } finally {
-      await Promise.all([removeAuthCookie(), removePending2FACookie()]);
+      await Promise.all([this.removeAuthCookie(), removePending2FACookie()]);
     }
 
     return {
@@ -252,7 +236,7 @@ class AuthService {
   }
 
   async validateSession(clientInfo: ClientInfo): Promise<boolean> {
-    const cookie = await getAuthCookie();
+    const cookie = await this.getToken();
 
     if (!cookie) {
       return false;
@@ -277,12 +261,32 @@ class AuthService {
   }
 
   async isAuthenticated(): Promise<boolean> {
-    const token = await getAuthCookie();
+    const token = await this.getToken();
     return !!token;
   }
 
   async getToken(): Promise<string | undefined> {
-    return getAuthCookie();
+    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;
+    const cookieStore = await cookies();
+    return cookieStore.get(AUTH_COOKIE_NAME)?.value;
+  }
+
+
+  private async setAuthCookie(token: string): Promise<void> {
+    const cookieStore = await cookies();
+    cookieStore.set(AUTH_COOKIE_NAME, token, {
+      ...COOKIE_OPTIONS,
+      maxAge: COOKIE_MAX_AGE,
+    });
+  }
+
+
+  async removeAuthCookie(): Promise<void> {
+    const cookieStore = await cookies();
+    cookieStore.delete({
+      name: AUTH_COOKIE_NAME,
+      ...COOKIE_OPTIONS,
+    });
   }
 }