@greatapps/common 1.1.52 → 1.1.55

package/dist/modules/auth/actions/validate-session.action.mjs

@@ -28,14 +28,14 @@ async function validateSessionAction() {
     const clientInfo = await getClientInfoFromRequest();
     const isValid = await authService.validateSession(clientInfo);
     if (!isValid) {
-      cookieStore.delete("greatapps");
+      await authService.removeAuthCookie();
       await redirectToLogin();
       return false;
     }
     return true;
   } catch (error) {
     console.error("[validateSessionAction] Error:", error);
-    cookieStore.delete("greatapps");
+    await authService.removeAuthCookie();
     await redirectToLogin();
     return false;
   }

package/dist/modules/auth/actions/validate-session.action.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/auth/actions/validate-session.action.ts"],"sourcesContent":["'use server';\r\n\r\nimport { redirect } from 'next/navigation';\r\nimport { cookies, headers } from 'next/headers';\r\nimport { authService } from '../services/auth.service';\r\nimport { getClientInfoFromRequest } from '../../../infra/utils/client-info';\r\n\r\nasync function redirectToLogin() {\r\n  const h = await headers();\r\n  const referer = h.get('referer') || '/';\r\n\r\n  if (!referer) {\r\n    redirect('/login');\r\n    return;\r\n  }\r\n\r\n  const url = new URL(referer);\r\n\r\n  if (['/login', '/register', '/forgot-password'].includes(url.pathname)) {\r\n    return;\r\n  }\r\n\r\n  redirect('/login');\r\n}\r\n\r\nexport async function validateSessionAction(): Promise<boolean> {\r\n  if (process.env.DUMMY_AUTH_TOKEN) return true;\r\n\r\n  const cookieStore = await cookies();\r\n  const cookie = cookieStore.get('greatapps')?.value;\r\n\r\n  if (!cookie) {\r\n    await redirectToLogin();\r\n    return false;\r\n  }\r\n\r\n  try {\r\n    const clientInfo = await getClientInfoFromRequest();\r\n    const isValid = await authService.validateSession(clientInfo);\r\n\r\n    if (!isValid) {\r\n      cookieStore.delete('greatapps');\r\n      await redirectToLogin();\r\n      return false;\r\n    }\r\n\r\n    return true;\r\n  } catch (error) {\r\n    console.error('[validateSessionAction] Error:', error);\r\n    cookieStore.delete('greatapps');\r\n    await redirectToLogin();\r\n    return false;\r\n  }\r\n}\r\n"],"mappings":";AAEA,SAAS,gBAAgB;AACzB,SAAS,SAAS,eAAe;AACjC,SAAS,mBAAmB;AAC5B,SAAS,gCAAgC;AAEzC,eAAe,kBAAkB;AAC/B,QAAM,IAAI,MAAM,QAAQ;AACxB,QAAM,UAAU,EAAE,IAAI,SAAS,KAAK;AAEpC,MAAI,CAAC,SAAS;AACZ,aAAS,QAAQ;AACjB;AAAA,EACF;AAEA,QAAM,MAAM,IAAI,IAAI,OAAO;AAE3B,MAAI,CAAC,UAAU,aAAa,kBAAkB,EAAE,SAAS,IAAI,QAAQ,GAAG;AACtE;AAAA,EACF;AAEA,WAAS,QAAQ;AACnB;AAEA,eAAsB,wBAA0C;AAC9D,MAAI,QAAQ,IAAI,iBAAkB,QAAO;AAEzC,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,SAAS,YAAY,IAAI,WAAW,GAAG;AAE7C,MAAI,CAAC,QAAQ;AACX,UAAM,gBAAgB;AACtB,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,aAAa,MAAM,yBAAyB;AAClD,UAAM,UAAU,MAAM,YAAY,gBAAgB,UAAU;AAE5D,QAAI,CAAC,SAAS;AACZ,kBAAY,OAAO,WAAW;AAC9B,YAAM,gBAAgB;AACtB,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,kCAAkC,KAAK;AACrD,gBAAY,OAAO,WAAW;AAC9B,UAAM,gBAAgB;AACtB,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/modules/auth/actions/validate-session.action.ts"],"sourcesContent":["'use server';\r\n\r\nimport { redirect } from 'next/navigation';\r\nimport { cookies, headers } from 'next/headers';\r\nimport { authService } from '../services/auth.service';\r\nimport { getClientInfoFromRequest } from '../../../infra/utils/client-info';\r\n\r\nasync function redirectToLogin() {\r\n  const h = await headers();\r\n  const referer = h.get('referer') || '/';\r\n\r\n  if (!referer) {\r\n    redirect('/login');\r\n    return;\r\n  }\r\n\r\n  const url = new URL(referer);\r\n\r\n  if (['/login', '/register', '/forgot-password'].includes(url.pathname)) {\r\n    return;\r\n  }\r\n\r\n  redirect('/login');\r\n}\r\n\r\nexport async function validateSessionAction(): Promise<boolean> {\r\n  if (process.env.DUMMY_AUTH_TOKEN) return true;\r\n\r\n  const cookieStore = await cookies();\r\n  const cookie = cookieStore.get('greatapps')?.value;\r\n\r\n  if (!cookie) {\r\n    await redirectToLogin();\r\n    return false;\r\n  }\r\n\r\n  try {\r\n    const clientInfo = await getClientInfoFromRequest();\r\n    const isValid = await authService.validateSession(clientInfo);\r\n\r\n    if (!isValid) {\r\n      await authService.removeAuthCookie();\r\n      await redirectToLogin();\r\n      return false;\r\n    }\r\n\r\n    return true;\r\n  } catch (error) {\r\n    console.error('[validateSessionAction] Error:', error);\r\n    await authService.removeAuthCookie();\r\n    await redirectToLogin();\r\n    return false;\r\n  }\r\n}\r\n"],"mappings":";AAEA,SAAS,gBAAgB;AACzB,SAAS,SAAS,eAAe;AACjC,SAAS,mBAAmB;AAC5B,SAAS,gCAAgC;AAEzC,eAAe,kBAAkB;AAC/B,QAAM,IAAI,MAAM,QAAQ;AACxB,QAAM,UAAU,EAAE,IAAI,SAAS,KAAK;AAEpC,MAAI,CAAC,SAAS;AACZ,aAAS,QAAQ;AACjB;AAAA,EACF;AAEA,QAAM,MAAM,IAAI,IAAI,OAAO;AAE3B,MAAI,CAAC,UAAU,aAAa,kBAAkB,EAAE,SAAS,IAAI,QAAQ,GAAG;AACtE;AAAA,EACF;AAEA,WAAS,QAAQ;AACnB;AAEA,eAAsB,wBAA0C;AAC9D,MAAI,QAAQ,IAAI,iBAAkB,QAAO;AAEzC,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,SAAS,YAAY,IAAI,WAAW,GAAG;AAE7C,MAAI,CAAC,QAAQ;AACX,UAAM,gBAAgB;AACtB,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,aAAa,MAAM,yBAAyB;AAClD,UAAM,UAAU,MAAM,YAAY,gBAAgB,UAAU;AAE5D,QAAI,CAAC,SAAS;AACZ,YAAM,YAAY,iBAAiB;AACnC,YAAM,gBAAgB;AACtB,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,kCAAkC,KAAK;AACrD,UAAM,YAAY,iBAAiB;AACnC,UAAM,gBAAgB;AACtB,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/modules/auth/services/auth.service.mjs

@@ -12,22 +12,12 @@ const COOKIE_OPTIONS = {
   path: "/",
   domain: process.env.DOMAIN_COOKIE
 };
-async function setAuthCookie(token) {
-  const cookieStore = await cookies();
-  cookieStore.set(AUTH_COOKIE_NAME, token, { ...COOKIE_OPTIONS, maxAge: COOKIE_MAX_AGE });
-}
-async function removeAuthCookie() {
-  const cookieStore = await cookies();
-  cookieStore.delete({ name: AUTH_COOKIE_NAME, ...COOKIE_OPTIONS });
-}
-async function getAuthCookie() {
-  if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;
-  const cookieStore = await cookies();
-  return cookieStore.get(AUTH_COOKIE_NAME)?.value;
-}
 async function setPending2FACookie(token) {
   const cookieStore = await cookies();
-  cookieStore.set(PENDING_2FA_COOKIE_NAME, token, { ...COOKIE_OPTIONS, maxAge: PENDING_2FA_MAX_AGE });
+  cookieStore.set(PENDING_2FA_COOKIE_NAME, token, {
+    ...COOKIE_OPTIONS,
+    maxAge: PENDING_2FA_MAX_AGE
+  });
 }
 async function removePending2FACookie() {
   const cookieStore = await cookies();
@@ -48,16 +38,24 @@ class AuthService {
       agent: clientInfo.agent
     });
     if (response.status === 0) {
-      throw new ApiError(response.message || "E-mail ou senha incorretos", "LOGIN_FAILED", 401);
+      throw new ApiError(
+        response.message || "E-mail ou senha incorretos",
+        response.code || "LOGIN_FAILED",
+        401
+      );
     }
     if (!response.cookie) {
-      throw new ApiError("Resposta de autentica\xE7\xE3o inv\xE1lida", "INVALID_RESPONSE", 500);
+      throw new ApiError(
+        "Resposta de autentica\xE7\xE3o inv\xE1lida",
+        "INVALID_RESPONSE",
+        500
+      );
     }
     if (response.two_factor_authentication) {
       await setPending2FACookie(response.cookie);
       return { twoFactorRequired: true };
     }
-    await setAuthCookie(response.cookie);
+    await this.setAuthCookie(response.cookie);
     return {
       user: {},
       accessToken: response.cookie,
@@ -68,7 +66,11 @@ class AuthService {
   async verifyTwoFactor(code, clientInfo) {
     const pendingCookie = await getPending2FACookie();
     if (!pendingCookie) {
-      throw new ApiError("Nenhuma autentica\xE7\xE3o 2FA pendente", "NO_PENDING_2FA", 400);
+      throw new ApiError(
+        "Nenhuma autentica\xE7\xE3o 2FA pendente",
+        "NO_PENDING_2FA",
+        400
+      );
     }
     const payload = {
       location: clientInfo.location,
@@ -78,14 +80,28 @@ class AuthService {
       cookie: pendingCookie,
       code
     };
-    const response = await apiClient.post("/auth/code", payload);
+    const response = await apiClient.post(
+      "/auth/code",
+      payload
+    );
     if (response.status === 0) {
-      throw new ApiError(response.message || "C\xF3digo 2FA inv\xE1lido", "TWO_FACTOR_FAILED", 401);
+      throw new ApiError(
+        response.message || "C\xF3digo 2FA inv\xE1lido",
+        response.code || "TWO_FACTOR_FAILED",
+        401
+      );
     }
     if (!response.cookie) {
-      throw new ApiError("Resposta de autentica\xE7\xE3o inv\xE1lida ap\xF3s 2FA", "INVALID_RESPONSE", 500);
+      throw new ApiError(
+        "Resposta de autentica\xE7\xE3o inv\xE1lida ap\xF3s 2FA",
+        "INVALID_RESPONSE",
+        500
+      );
     }
-    await Promise.all([setAuthCookie(response.cookie), removePending2FACookie()]);
+    await Promise.all([
+      this.setAuthCookie(response.cookie),
+      removePending2FACookie()
+    ]);
     return { success: true };
   }
   async isTwoFactorPending() {
@@ -123,12 +139,23 @@ class AuthService {
         id_product: 1
       }
     };
-    const response = await apiClient.post("/accounts", payload);
+    const response = await apiClient.post(
+      "/accounts",
+      payload
+    );
     if (response.status === 0) {
-      throw new ApiError(response.message || "Erro ao criar conta", "REGISTER_FAILED", 400);
+      throw new ApiError(
+        response.message || "Erro ao criar conta",
+        "REGISTER_FAILED",
+        400
+      );
     }
     if (!response.data || response.data.length === 0) {
-      throw new ApiError("Resposta de registro inv\xE1lida", "INVALID_RESPONSE", 500);
+      throw new ApiError(
+        "Resposta de registro inv\xE1lida",
+        "INVALID_RESPONSE",
+        500
+      );
     }
     const accountData = response.data[0];
     return {
@@ -141,9 +168,13 @@ class AuthService {
     };
   }
   async logout(clientInfo) {
-    const cookie = await getAuthCookie();
+    const cookie = await this.getToken();
     if (!cookie) {
-      throw new ApiError("Usu\xE1rio n\xE3o autenticado", "NOT_AUTHENTICATED", 401);
+      throw new ApiError(
+        "Usu\xE1rio n\xE3o autenticado",
+        "NOT_AUTHENTICATED_LOGOUT",
+        401
+      );
     }
     const payload = {
       location: clientInfo.location,
@@ -153,31 +184,54 @@ class AuthService {
       cookie
     };
     try {
-      const response = await apiClient.post("/auth/logout", payload);
+      const response = await apiClient.post(
+        "/auth/logout",
+        payload
+      );
       if (response.status === 0) {
-        throw new ApiError(response.message || "Erro ao realizar logout", "LOGOUT_FAILED", 400);
+        throw new ApiError(
+          response.message || "Erro ao realizar logout",
+          response.code || "LOGOUT_FAILED",
+          400
+        );
       }
     } finally {
-      await Promise.all([removeAuthCookie(), removePending2FACookie()]);
+      await Promise.all([this.removeAuthCookie(), removePending2FACookie()]);
     }
     return {
       success: true
     };
   }
   async forgotPassword(_data) {
-    throw new ApiError("Recupera\xE7\xE3o de senha n\xE3o implementada", "NOT_IMPLEMENTED", 501);
+    throw new ApiError(
+      "Recupera\xE7\xE3o de senha n\xE3o implementada",
+      "NOT_IMPLEMENTED",
+      501
+    );
   }
   async resetPassword(_data) {
-    throw new ApiError("Redefini\xE7\xE3o de senha n\xE3o implementada", "NOT_IMPLEMENTED", 501);
+    throw new ApiError(
+      "Redefini\xE7\xE3o de senha n\xE3o implementada",
+      "NOT_IMPLEMENTED",
+      501
+    );
   }
   async verifyEmail(_data) {
-    throw new ApiError("Verifica\xE7\xE3o de email n\xE3o implementada", "NOT_IMPLEMENTED", 501);
+    throw new ApiError(
+      "Verifica\xE7\xE3o de email n\xE3o implementada",
+      "NOT_IMPLEMENTED",
+      501
+    );
   }
   async resendVerification(_data) {
-    throw new ApiError("Reenvio de verifica\xE7\xE3o n\xE3o implementado", "NOT_IMPLEMENTED", 501);
+    throw new ApiError(
+      "Reenvio de verifica\xE7\xE3o n\xE3o implementado",
+      "NOT_IMPLEMENTED",
+      501
+    );
   }
   async validateSession(clientInfo) {
-    const cookie = await getAuthCookie();
+    const cookie = await this.getToken();
     if (!cookie) {
       return false;
     }
@@ -189,7 +243,10 @@ class AuthService {
         agent: clientInfo.agent,
         cookie
       };
-      const response = await apiClient.post("/auth/keep", payload);
+      const response = await apiClient.post(
+        "/auth/keep",
+        payload
+      );
       return response.status === 1;
     } catch (error) {
       console.error("[AuthService] validateSession error", error);
@@ -197,11 +254,27 @@ class AuthService {
     }
   }
   async isAuthenticated() {
-    const token = await getAuthCookie();
+    const token = await this.getToken();
     return !!token;
   }
   async getToken() {
-    return getAuthCookie();
+    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;
+    const cookieStore = await cookies();
+    return cookieStore.get(AUTH_COOKIE_NAME)?.value;
+  }
+  async setAuthCookie(token) {
+    const cookieStore = await cookies();
+    cookieStore.set(AUTH_COOKIE_NAME, token, {
+      ...COOKIE_OPTIONS,
+      maxAge: COOKIE_MAX_AGE
+    });
+  }
+  async removeAuthCookie() {
+    const cookieStore = await cookies();
+    cookieStore.delete({
+      name: AUTH_COOKIE_NAME,
+      ...COOKIE_OPTIONS
+    });
   }
 }
 const authService = new AuthService();

package/dist/modules/auth/services/auth.service.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/auth/services/auth.service.ts"],"sourcesContent":["\r\nimport { cookies } from 'next/headers';\r\n\r\nimport { apiClient } from '../../../infra/api/client';\r\nimport { ApiError } from '../../../infra/api/types';\r\nimport { User } from '../../users/schema';\r\nimport {\r\n  ClientInfo,\r\n  ForgotPasswordRequest,\r\n  ForgotPasswordResponse,\r\n  GeoLocation,\r\n  LoginApiResponse,\r\n  LoginRequest,\r\n  LoginResponse,\r\n  LogoutApiResponse,\r\n  LogoutRequest,\r\n  LogoutResponse,\r\n  RegisterApiRequest,\r\n  RegisterApiResponse,\r\n  RegisterRequest,\r\n  RegisterResponse,\r\n  ResendVerificationRequest,\r\n  ResendVerificationResponse,\r\n  ResetPasswordRequest,\r\n  ResetPasswordResponse,\r\n  SessionKeepRequest,\r\n  SessionKeepResponse,\r\n  TwoFactorApiResponse,\r\n  TwoFactorRequest,\r\n  TwoFactorResponse,\r\n  VerifyEmailRequest,\r\n  VerifyEmailResponse,\r\n} from '../schema';\r\n\r\nconst AUTH_COOKIE_NAME = 'greatapps';\r\nconst PENDING_2FA_COOKIE_NAME = 'greatapps_2fa_pending';\r\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 30;\r\nconst PENDING_2FA_MAX_AGE = 60 * 10; // 10 minutos para completar o 2FA\r\n\r\nconst COOKIE_OPTIONS = {\r\n  httpOnly: true,\r\n  secure: process.env.NODE_ENV === 'production',\r\n  sameSite: 'lax' as const,\r\n  path: '/',\r\n  domain: process.env.DOMAIN_COOKIE,\r\n};\r\n\r\nasync function setAuthCookie(token: string): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.set(AUTH_COOKIE_NAME, token, { ...COOKIE_OPTIONS, maxAge: COOKIE_MAX_AGE });\r\n}\r\n\r\nasync function removeAuthCookie(): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.delete({ name: AUTH_COOKIE_NAME, ...COOKIE_OPTIONS });\r\n}\r\n\r\nasync function getAuthCookie(): Promise<string | undefined> {\r\n  if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;\r\n  const cookieStore = await cookies();\r\n  return cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n}\r\n\r\nasync function setPending2FACookie(token: string): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.set(PENDING_2FA_COOKIE_NAME, token, { ...COOKIE_OPTIONS, maxAge: PENDING_2FA_MAX_AGE });\r\n}\r\n\r\nasync function removePending2FACookie(): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.delete({ name: PENDING_2FA_COOKIE_NAME, ...COOKIE_OPTIONS });\r\n}\r\n\r\nasync function getPending2FACookie(): Promise<string | undefined> {\r\n  const cookieStore = await cookies();\r\n  return cookieStore.get(PENDING_2FA_COOKIE_NAME)?.value;\r\n}\r\n\r\nclass AuthService {\r\n  async login(credentials: LoginRequest, clientInfo: ClientInfo): Promise<LoginResponse> {\r\n    const response = await apiClient.post<LoginApiResponse>('/auth/login', {\r\n      email: credentials.email,\r\n      password: credentials.password,\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n    });\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(response.message || 'E-mail ou senha incorretos', 'LOGIN_FAILED', 401);\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError('Resposta de autenticação inválida', 'INVALID_RESPONSE', 500);\r\n    }\r\n\r\n    if (response.two_factor_authentication) {\r\n      // Armazena o cookie temporariamente até o 2FA ser concluído.\r\n      // O cookie principal NÃO é setado aqui para evitar falso positivo em isAuthenticated().\r\n      await setPending2FACookie(response.cookie);\r\n      return { twoFactorRequired: true };\r\n    }\r\n\r\n    await setAuthCookie(response.cookie);\r\n\r\n    return {\r\n      user: {} as User,\r\n      accessToken: response.cookie,\r\n      refreshToken: '',\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n    };\r\n  }\r\n\r\n  async verifyTwoFactor(code: number, clientInfo: ClientInfo): Promise<TwoFactorResponse> {\r\n    const pendingCookie = await getPending2FACookie();\r\n\r\n    if (!pendingCookie) {\r\n      throw new ApiError('Nenhuma autenticação 2FA pendente', 'NO_PENDING_2FA', 400);\r\n    }\r\n\r\n    const payload: TwoFactorRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie: pendingCookie,\r\n      code,\r\n    };\r\n\r\n    const response = await apiClient.post<TwoFactorApiResponse>('/auth/code', payload);\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(response.message || 'Código 2FA inválido', 'TWO_FACTOR_FAILED', 401);\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError('Resposta de autenticação inválida após 2FA', 'INVALID_RESPONSE', 500);\r\n    }\r\n\r\n    await Promise.all([setAuthCookie(response.cookie), removePending2FACookie()]);\r\n\r\n    return { success: true };\r\n  }\r\n\r\n  async isTwoFactorPending(): Promise<boolean> {\r\n    const pending = await getPending2FACookie();\r\n    return !!pending;\r\n  }\r\n\r\n  async register(data: RegisterRequest): Promise<RegisterResponse> {\r\n    const today = new Date();\r\n    const trialEndDate = new Date(today);\r\n    trialEndDate.setDate(today.getDate() + 7); // 7 dias de trial\r\n\r\n    const payload: RegisterApiRequest = {\r\n      name: data.accountName,\r\n      bussiness_type: data.businessType,\r\n      language: 'pt-br',\r\n      timezone: 'America/Sao_Paulo',\r\n      currency: 'BRL',\r\n      user: {\r\n        id_api: '',\r\n        name: data.name,\r\n        last_name: data.lastName || '',\r\n        rg: data.rg || '',\r\n        cpf: data.cpf || '',\r\n        gender: data.gender,\r\n        email: data.email,\r\n        phone: data.phone,\r\n        password: data.password,\r\n        profile: 'owner',\r\n        language: 'pt-br',\r\n      },\r\n      subscription: {\r\n        type: 'trial',\r\n        id_cupom: '',\r\n        id_plan: 1,\r\n        due_date: trialEndDate.toISOString().split('T')[0],\r\n        id_product: 1,\r\n      },\r\n    };\r\n\r\n    const response = await apiClient.post<RegisterApiResponse>('/accounts', payload);\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(response.message || 'Erro ao criar conta', 'REGISTER_FAILED', 400);\r\n    }\r\n\r\n    if (!response.data || response.data.length === 0) {\r\n      throw new ApiError('Resposta de registro inválida', 'INVALID_RESPONSE', 500);\r\n    }\r\n\r\n    const accountData = response.data[0];\r\n\r\n    // Retornar sem token pois o registro não retorna cookie diretamente\r\n    // O usuário precisará fazer login após o registro\r\n    // O usuário completo será carregado após o login\r\n    return {\r\n      user: {} as User, // Placeholder, será preenchido após login\r\n      accessToken: '',\r\n      refreshToken: '',\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n      requiresEmailVerification: !accountData.verified,\r\n    };\r\n  }\r\n\r\n  async logout(clientInfo: ClientInfo): Promise<LogoutResponse> {\r\n    const cookie = await getAuthCookie();\r\n\r\n    if (!cookie) {\r\n      throw new ApiError('Usuário não autenticado', 'NOT_AUTHENTICATED', 401);\r\n    }\r\n\r\n    const payload: LogoutRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n    };\r\n\r\n    try {\r\n      const response = await apiClient.post<LogoutApiResponse>('/auth/logout', payload);\r\n\r\n      if (response.status === 0) {\r\n        throw new ApiError(response.message || 'Erro ao realizar logout', 'LOGOUT_FAILED', 400);\r\n      }\r\n    } finally {\r\n      await Promise.all([removeAuthCookie(), removePending2FACookie()]);\r\n    }\r\n\r\n    return {\r\n      success: true,\r\n    };\r\n  }\r\n\r\n  async forgotPassword(_data: ForgotPasswordRequest): Promise<ForgotPasswordResponse> {\r\n    throw new ApiError('Recuperação de senha não implementada', 'NOT_IMPLEMENTED', 501);\r\n  }\r\n\r\n  async resetPassword(_data: ResetPasswordRequest): Promise<ResetPasswordResponse> {\r\n    throw new ApiError('Redefinição de senha não implementada', 'NOT_IMPLEMENTED', 501);\r\n  }\r\n\r\n  async verifyEmail(_data: VerifyEmailRequest): Promise<VerifyEmailResponse> {\r\n    throw new ApiError('Verificação de email não implementada', 'NOT_IMPLEMENTED', 501);\r\n  }\r\n\r\n  async resendVerification(_data: ResendVerificationRequest): Promise<ResendVerificationResponse> {\r\n    throw new ApiError('Reenvio de verificação não implementado', 'NOT_IMPLEMENTED', 501);\r\n  }\r\n\r\n  async validateSession(clientInfo: ClientInfo): Promise<boolean> {\r\n    const cookie = await getAuthCookie();\r\n\r\n    if (!cookie) {\r\n      return false;\r\n    }\r\n\r\n    try {\r\n      const payload: SessionKeepRequest = {\r\n        location: clientInfo.location,\r\n        ip: clientInfo.ip,\r\n        timezone: clientInfo.timezone,\r\n        agent: clientInfo.agent,\r\n        cookie,\r\n      };\r\n\r\n      const response = await apiClient.post<SessionKeepResponse>('/auth/keep', payload);\r\n\r\n      return response.status === 1;\r\n    } catch (error) {\r\n      console.error('[AuthService] validateSession error', error);\r\n      return false;\r\n    }\r\n  }\r\n\r\n  async isAuthenticated(): Promise<boolean> {\r\n    const token = await getAuthCookie();\r\n    return !!token;\r\n  }\r\n\r\n  async getToken(): Promise<string | undefined> {\r\n    return getAuthCookie();\r\n  }\r\n}\r\n\r\nexport const authService = new AuthService();\r\n\r\nexport type { ClientInfo, GeoLocation };\r\n"],"mappings":"AACA,SAAS,eAAe;AAExB,SAAS,iBAAiB;AAC1B,SAAS,gBAAgB;AA8BzB,MAAM,mBAAmB;AACzB,MAAM,0BAA0B;AAChC,MAAM,iBAAiB,KAAK,KAAK,KAAK;AACtC,MAAM,sBAAsB,KAAK;AAEjC,MAAM,iBAAiB;AAAA,EACrB,UAAU;AAAA,EACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ,QAAQ,IAAI;AACtB;AAEA,eAAe,cAAc,OAA8B;AACzD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,kBAAkB,OAAO,EAAE,GAAG,gBAAgB,QAAQ,eAAe,CAAC;AACxF;AAEA,eAAe,mBAAkC;AAC/C,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,OAAO,EAAE,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAClE;AAEA,eAAe,gBAA6C;AAC1D,MAAI,QAAQ,IAAI,iBAAkB,QAAO,QAAQ,IAAI;AACrD,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,gBAAgB,GAAG;AAC5C;AAEA,eAAe,oBAAoB,OAA8B;AAC/D,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,yBAAyB,OAAO,EAAE,GAAG,gBAAgB,QAAQ,oBAAoB,CAAC;AACpG;AAEA,eAAe,yBAAwC;AACrD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,OAAO,EAAE,MAAM,yBAAyB,GAAG,eAAe,CAAC;AACzE;AAEA,eAAe,sBAAmD;AAChE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,uBAAuB,GAAG;AACnD;AAEA,MAAM,YAAY;AAAA,EAChB,MAAM,MAAM,aAA2B,YAAgD;AACrF,UAAM,WAAW,MAAM,UAAU,KAAuB,eAAe;AAAA,MACrE,OAAO,YAAY;AAAA,MACnB,UAAU,YAAY;AAAA,MACtB,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,IACpB,CAAC;AAED,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI,SAAS,SAAS,WAAW,8BAA8B,gBAAgB,GAAG;AAAA,IAC1F;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI,SAAS,8CAAqC,oBAAoB,GAAG;AAAA,IACjF;AAEA,QAAI,SAAS,2BAA2B;AAGtC,YAAM,oBAAoB,SAAS,MAAM;AACzC,aAAO,EAAE,mBAAmB,KAAK;AAAA,IACnC;AAEA,UAAM,cAAc,SAAS,MAAM;AAEnC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,aAAa,SAAS;AAAA,MACtB,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,MAAc,YAAoD;AACtF,UAAM,gBAAgB,MAAM,oBAAoB;AAEhD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,SAAS,2CAAqC,kBAAkB,GAAG;AAAA,IAC/E;AAEA,UAAM,UAA4B;AAAA,MAChC,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,UAAU,KAA2B,cAAc,OAAO;AAEjF,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI,SAAS,SAAS,WAAW,6BAAuB,qBAAqB,GAAG;AAAA,IACxF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI,SAAS,0DAA8C,oBAAoB,GAAG;AAAA,IAC1F;AAEA,UAAM,QAAQ,IAAI,CAAC,cAAc,SAAS,MAAM,GAAG,uBAAuB,CAAC,CAAC;AAE5E,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAAA,EAEA,MAAM,qBAAuC;AAC3C,UAAM,UAAU,MAAM,oBAAoB;AAC1C,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,SAAS,MAAkD;AAC/D,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,eAAe,IAAI,KAAK,KAAK;AACnC,iBAAa,QAAQ,MAAM,QAAQ,IAAI,CAAC;AAExC,UAAM,UAA8B;AAAA,MAClC,MAAM,KAAK;AAAA,MACX,gBAAgB,KAAK;AAAA,MACrB,UAAU;AAAA,MACV,UAAU;AAAA,MACV,UAAU;AAAA,MACV,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,WAAW,KAAK,YAAY;AAAA,QAC5B,IAAI,KAAK,MAAM;AAAA,QACf,KAAK,KAAK,OAAO;AAAA,QACjB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA,QACf,SAAS;AAAA,QACT,UAAU;AAAA,MACZ;AAAA,MACA,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU,aAAa,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,QACjD,YAAY;AAAA,MACd;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,UAAU,KAA0B,aAAa,OAAO;AAE/E,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI,SAAS,SAAS,WAAW,uBAAuB,mBAAmB,GAAG;AAAA,IACtF;AAEA,QAAI,CAAC,SAAS,QAAQ,SAAS,KAAK,WAAW,GAAG;AAChD,YAAM,IAAI,SAAS,oCAAiC,oBAAoB,GAAG;AAAA,IAC7E;AAEA,UAAM,cAAc,SAAS,KAAK,CAAC;AAKnC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,MACpE,2BAA2B,CAAC,YAAY;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,YAAiD;AAC5D,UAAM,SAAS,MAAM,cAAc;AAEnC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,SAAS,iCAA2B,qBAAqB,GAAG;AAAA,IACxE;AAEA,UAAM,UAAyB;AAAA,MAC7B,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,UAAU,KAAwB,gBAAgB,OAAO;AAEhF,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,IAAI,SAAS,SAAS,WAAW,2BAA2B,iBAAiB,GAAG;AAAA,MACxF;AAAA,IACF,UAAE;AACA,YAAM,QAAQ,IAAI,CAAC,iBAAiB,GAAG,uBAAuB,CAAC,CAAC;AAAA,IAClE;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EAEA,MAAM,eAAe,OAA+D;AAClF,UAAM,IAAI,SAAS,kDAAyC,mBAAmB,GAAG;AAAA,EACpF;AAAA,EAEA,MAAM,cAAc,OAA6D;AAC/E,UAAM,IAAI,SAAS,kDAAyC,mBAAmB,GAAG;AAAA,EACpF;AAAA,EAEA,MAAM,YAAY,OAAyD;AACzE,UAAM,IAAI,SAAS,kDAAyC,mBAAmB,GAAG;AAAA,EACpF;AAAA,EAEA,MAAM,mBAAmB,OAAuE;AAC9F,UAAM,IAAI,SAAS,oDAA2C,mBAAmB,GAAG;AAAA,EACtF;AAAA,EAEA,MAAM,gBAAgB,YAA0C;AAC9D,UAAM,SAAS,MAAM,cAAc;AAEnC,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,UAA8B;AAAA,QAClC,UAAU,WAAW;AAAA,QACrB,IAAI,WAAW;AAAA,QACf,UAAU,WAAW;AAAA,QACrB,OAAO,WAAW;AAAA,QAClB;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,UAAU,KAA0B,cAAc,OAAO;AAEhF,aAAO,SAAS,WAAW;AAAA,IAC7B,SAAS,OAAO;AACd,cAAQ,MAAM,uCAAuC,KAAK;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,kBAAoC;AACxC,UAAM,QAAQ,MAAM,cAAc;AAClC,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,WAAwC;AAC5C,WAAO,cAAc;AAAA,EACvB;AACF;AAEO,MAAM,cAAc,IAAI,YAAY;","names":[]}
+{"version":3,"sources":["../../../../src/modules/auth/services/auth.service.ts"],"sourcesContent":["import { cookies } from \"next/headers\";\r\n\r\nimport { apiClient } from \"../../../infra/api/client\";\r\nimport { ApiError } from \"../../../infra/api/types\";\r\nimport { User } from \"../../users/schema\";\r\nimport {\r\n  ClientInfo,\r\n  ForgotPasswordRequest,\r\n  ForgotPasswordResponse,\r\n  GeoLocation,\r\n  LoginApiResponse,\r\n  LoginRequest,\r\n  LoginResponse,\r\n  LogoutApiResponse,\r\n  LogoutRequest,\r\n  LogoutResponse,\r\n  RegisterApiRequest,\r\n  RegisterApiResponse,\r\n  RegisterRequest,\r\n  RegisterResponse,\r\n  ResendVerificationRequest,\r\n  ResendVerificationResponse,\r\n  ResetPasswordRequest,\r\n  ResetPasswordResponse,\r\n  SessionKeepRequest,\r\n  SessionKeepResponse,\r\n  TwoFactorApiResponse,\r\n  TwoFactorRequest,\r\n  TwoFactorResponse,\r\n  VerifyEmailRequest,\r\n  VerifyEmailResponse,\r\n} from \"../schema\";\r\n\r\nconst AUTH_COOKIE_NAME = \"greatapps\";\r\nconst PENDING_2FA_COOKIE_NAME = \"greatapps_2fa_pending\";\r\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 30;\r\nconst PENDING_2FA_MAX_AGE = 60 * 10; // 10 minutos para completar o 2FA\r\n\r\nconst COOKIE_OPTIONS = {\r\n  httpOnly: true,\r\n  secure: process.env.NODE_ENV === \"production\",\r\n  sameSite: \"lax\" as const,\r\n  path: \"/\",\r\n  domain: process.env.DOMAIN_COOKIE,\r\n};\r\n\r\nasync function setPending2FACookie(token: string): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.set(PENDING_2FA_COOKIE_NAME, token, {\r\n    ...COOKIE_OPTIONS,\r\n    maxAge: PENDING_2FA_MAX_AGE,\r\n  });\r\n}\r\n\r\nasync function removePending2FACookie(): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.delete({ name: PENDING_2FA_COOKIE_NAME, ...COOKIE_OPTIONS });\r\n}\r\n\r\nasync function getPending2FACookie(): Promise<string | undefined> {\r\n  const cookieStore = await cookies();\r\n  return cookieStore.get(PENDING_2FA_COOKIE_NAME)?.value;\r\n}\r\n\r\nclass AuthService {\r\n  async login(\r\n    credentials: LoginRequest,\r\n    clientInfo: ClientInfo\r\n  ): Promise<LoginResponse> {\r\n    const response = await apiClient.post<LoginApiResponse>(\"/auth/login\", {\r\n      email: credentials.email,\r\n      password: credentials.password,\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n    });\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"E-mail ou senha incorretos\",\r\n        response.code || \"LOGIN_FAILED\",\r\n        401\r\n      );\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    if (response.two_factor_authentication) {\r\n      await setPending2FACookie(response.cookie);\r\n      return { twoFactorRequired: true };\r\n    }\r\n\r\n    await this.setAuthCookie(response.cookie);\r\n\r\n    return {\r\n      user: {} as User,\r\n      accessToken: response.cookie,\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n    };\r\n  }\r\n\r\n  async verifyTwoFactor(\r\n    code: number,\r\n    clientInfo: ClientInfo\r\n  ): Promise<TwoFactorResponse> {\r\n    const pendingCookie = await getPending2FACookie();\r\n\r\n    if (!pendingCookie) {\r\n      throw new ApiError(\r\n        \"Nenhuma autenticação 2FA pendente\",\r\n        \"NO_PENDING_2FA\",\r\n        400\r\n      );\r\n    }\r\n\r\n    const payload: TwoFactorRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie: pendingCookie,\r\n      code,\r\n    };\r\n\r\n    const response = await apiClient.post<TwoFactorApiResponse>(\r\n      \"/auth/code\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"Código 2FA inválido\",\r\n        response.code || \"TWO_FACTOR_FAILED\",\r\n        401\r\n      );\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida após 2FA\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    await Promise.all([\r\n      this.setAuthCookie(response.cookie),\r\n      removePending2FACookie(),\r\n    ]);\r\n\r\n    return { success: true };\r\n  }\r\n\r\n  async isTwoFactorPending(): Promise<boolean> {\r\n    const pending = await getPending2FACookie();\r\n    return !!pending;\r\n  }\r\n\r\n  async register(data: RegisterRequest): Promise<RegisterResponse> {\r\n    const today = new Date();\r\n    const trialEndDate = new Date(today);\r\n    trialEndDate.setDate(today.getDate() + 7); // 7 dias de trial\r\n\r\n    const payload: RegisterApiRequest = {\r\n      name: data.accountName,\r\n      bussiness_type: data.businessType,\r\n      language: \"pt-br\",\r\n      timezone: \"America/Sao_Paulo\",\r\n      currency: \"BRL\",\r\n      user: {\r\n        id_api: \"\",\r\n        name: data.name,\r\n        last_name: data.lastName || \"\",\r\n        rg: data.rg || \"\",\r\n        cpf: data.cpf || \"\",\r\n        gender: data.gender,\r\n        email: data.email,\r\n        phone: data.phone,\r\n        password: data.password,\r\n        profile: \"owner\",\r\n        language: \"pt-br\",\r\n      },\r\n      subscription: {\r\n        type: \"trial\",\r\n        id_cupom: \"\",\r\n        id_plan: 1,\r\n        due_date: trialEndDate.toISOString().split(\"T\")[0],\r\n        id_product: 1,\r\n      },\r\n    };\r\n\r\n    const response = await apiClient.post<RegisterApiResponse>(\r\n      \"/accounts\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"Erro ao criar conta\",\r\n        \"REGISTER_FAILED\",\r\n        400\r\n      );\r\n    }\r\n\r\n    if (!response.data || response.data.length === 0) {\r\n      throw new ApiError(\r\n        \"Resposta de registro inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    const accountData = response.data[0];\r\n\r\n    // Retornar sem token pois o registro não retorna cookie diretamente\r\n    // O usuário precisará fazer login após o registro\r\n    // O usuário completo será carregado após o login\r\n    return {\r\n      user: {} as User, // Placeholder, será preenchido após login\r\n      accessToken: \"\",\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n      requiresEmailVerification: !accountData.verified,\r\n    };\r\n  }\r\n\r\n  async logout(clientInfo: ClientInfo): Promise<LogoutResponse> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      throw new ApiError(\r\n        \"Usuário não autenticado\",\r\n        \"NOT_AUTHENTICATED_LOGOUT\",\r\n        401\r\n      );\r\n    }\r\n\r\n    const payload: LogoutRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n    };\r\n\r\n    try {\r\n      const response = await apiClient.post<LogoutApiResponse>(\r\n        \"/auth/logout\",\r\n        payload\r\n      );\r\n\r\n      if (response.status === 0) {\r\n        throw new ApiError(\r\n          response.message || \"Erro ao realizar logout\",\r\n          response.code || \"LOGOUT_FAILED\",\r\n          400\r\n        );\r\n      }\r\n    } finally {\r\n      await Promise.all([this.removeAuthCookie(), removePending2FACookie()]);\r\n    }\r\n\r\n    return {\r\n      success: true,\r\n    };\r\n  }\r\n\r\n  async forgotPassword(\r\n    _data: ForgotPasswordRequest\r\n  ): Promise<ForgotPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Recuperação de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resetPassword(\r\n    _data: ResetPasswordRequest\r\n  ): Promise<ResetPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Redefinição de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async verifyEmail(_data: VerifyEmailRequest): Promise<VerifyEmailResponse> {\r\n    throw new ApiError(\r\n      \"Verificação de email não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resendVerification(\r\n    _data: ResendVerificationRequest\r\n  ): Promise<ResendVerificationResponse> {\r\n    throw new ApiError(\r\n      \"Reenvio de verificação não implementado\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async validateSession(clientInfo: ClientInfo): Promise<boolean> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      return false;\r\n    }\r\n\r\n    try {\r\n      const payload: SessionKeepRequest = {\r\n        location: clientInfo.location,\r\n        ip: clientInfo.ip,\r\n        timezone: clientInfo.timezone,\r\n        agent: clientInfo.agent,\r\n        cookie,\r\n      };\r\n\r\n      const response = await apiClient.post<SessionKeepResponse>(\r\n        \"/auth/keep\",\r\n        payload\r\n      );\r\n\r\n      return response.status === 1;\r\n    } catch (error) {\r\n      console.error(\"[AuthService] validateSession error\", error);\r\n      return false;\r\n    }\r\n  }\r\n\r\n  async isAuthenticated(): Promise<boolean> {\r\n    const token = await this.getToken();\r\n    return !!token;\r\n  }\r\n\r\n  async getToken(): Promise<string | undefined> {\r\n    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;\r\n    const cookieStore = await cookies();\r\n    return cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n  }\r\n\r\n  private async setAuthCookie(token: string): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    cookieStore.set(AUTH_COOKIE_NAME, token, {\r\n      ...COOKIE_OPTIONS,\r\n      maxAge: COOKIE_MAX_AGE,\r\n    });\r\n  }\r\n\r\n  async removeAuthCookie(): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    cookieStore.delete({\r\n      name: AUTH_COOKIE_NAME,\r\n      ...COOKIE_OPTIONS,\r\n    });\r\n  }\r\n}\r\n\r\nexport const authService = new AuthService();\r\n\r\nexport type { ClientInfo, GeoLocation };\r\n"],"mappings":"AAAA,SAAS,eAAe;AAExB,SAAS,iBAAiB;AAC1B,SAAS,gBAAgB;AA8BzB,MAAM,mBAAmB;AACzB,MAAM,0BAA0B;AAChC,MAAM,iBAAiB,KAAK,KAAK,KAAK;AACtC,MAAM,sBAAsB,KAAK;AAEjC,MAAM,iBAAiB;AAAA,EACrB,UAAU;AAAA,EACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ,QAAQ,IAAI;AACtB;AAEA,eAAe,oBAAoB,OAA8B;AAC/D,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,yBAAyB,OAAO;AAAA,IAC9C,GAAG;AAAA,IACH,QAAQ;AAAA,EACV,CAAC;AACH;AAEA,eAAe,yBAAwC;AACrD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,OAAO,EAAE,MAAM,yBAAyB,GAAG,eAAe,CAAC;AACzE;AAEA,eAAe,sBAAmD;AAChE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,uBAAuB,GAAG;AACnD;AAEA,MAAM,YAAY;AAAA,EAChB,MAAM,MACJ,aACA,YACwB;AACxB,UAAM,WAAW,MAAM,UAAU,KAAuB,eAAe;AAAA,MACrE,OAAO,YAAY;AAAA,MACnB,UAAU,YAAY;AAAA,MACtB,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,IACpB,CAAC;AAED,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS,2BAA2B;AACtC,YAAM,oBAAoB,SAAS,MAAM;AACzC,aAAO,EAAE,mBAAmB,KAAK;AAAA,IACnC;AAEA,UAAM,KAAK,cAAc,SAAS,MAAM;AAExC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,aAAa,SAAS;AAAA,MACtB,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAM,gBACJ,MACA,YAC4B;AAC5B,UAAM,gBAAgB,MAAM,oBAAoB;AAEhD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAA4B;AAAA,MAChC,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,UAAU;AAAA,MAC/B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,QAAQ,IAAI;AAAA,MAChB,KAAK,cAAc,SAAS,MAAM;AAAA,MAClC,uBAAuB;AAAA,IACzB,CAAC;AAED,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAAA,EAEA,MAAM,qBAAuC;AAC3C,UAAM,UAAU,MAAM,oBAAoB;AAC1C,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,SAAS,MAAkD;AAC/D,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,eAAe,IAAI,KAAK,KAAK;AACnC,iBAAa,QAAQ,MAAM,QAAQ,IAAI,CAAC;AAExC,UAAM,UAA8B;AAAA,MAClC,MAAM,KAAK;AAAA,MACX,gBAAgB,KAAK;AAAA,MACrB,UAAU;AAAA,MACV,UAAU;AAAA,MACV,UAAU;AAAA,MACV,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,WAAW,KAAK,YAAY;AAAA,QAC5B,IAAI,KAAK,MAAM;AAAA,QACf,KAAK,KAAK,OAAO;AAAA,QACjB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA,QACf,SAAS;AAAA,QACT,UAAU;AAAA,MACZ;AAAA,MACA,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU,aAAa,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,QACjD,YAAY;AAAA,MACd;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,UAAU;AAAA,MAC/B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ,SAAS,KAAK,WAAW,GAAG;AAChD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,cAAc,SAAS,KAAK,CAAC;AAKnC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,MACpE,2BAA2B,CAAC,YAAY;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,YAAiD;AAC5D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAyB;AAAA,MAC7B,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,UAAU;AAAA,QAC/B;AAAA,QACA;AAAA,MACF;AAEA,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,IAAI;AAAA,UACR,SAAS,WAAW;AAAA,UACpB,SAAS,QAAQ;AAAA,UACjB;AAAA,QACF;AAAA,MACF;AAAA,IACF,UAAE;AACA,YAAM,QAAQ,IAAI,CAAC,KAAK,iBAAiB,GAAG,uBAAuB,CAAC,CAAC;AAAA,IACvE;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EAEA,MAAM,eACJ,OACiC;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,OACgC;AAChC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,OAAyD;AACzE,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBACJ,OACqC;AACrC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,YAA0C;AAC9D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,UAA8B;AAAA,QAClC,UAAU,WAAW;AAAA,QACrB,IAAI,WAAW;AAAA,QACf,UAAU,WAAW;AAAA,QACrB,OAAO,WAAW;AAAA,QAClB;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,UAAU;AAAA,QAC/B;AAAA,QACA;AAAA,MACF;AAEA,aAAO,SAAS,WAAW;AAAA,IAC7B,SAAS,OAAO;AACd,cAAQ,MAAM,uCAAuC,KAAK;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,kBAAoC;AACxC,UAAM,QAAQ,MAAM,KAAK,SAAS;AAClC,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,WAAwC;AAC5C,QAAI,QAAQ,IAAI,iBAAkB,QAAO,QAAQ,IAAI;AACrD,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,gBAAgB,GAAG;AAAA,EAC5C;AAAA,EAEA,MAAc,cAAc,OAA8B;AACxD,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,IAAI,kBAAkB,OAAO;AAAA,MACvC,GAAG;AAAA,MACH,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,mBAAkC;AACtC,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,OAAO;AAAA,MACjB,MAAM;AAAA,MACN,GAAG;AAAA,IACL,CAAC;AAAA,EACH;AACF;AAEO,MAAM,cAAc,IAAI,YAAY;","names":[]}

package/dist/modules/auth/utils/get-user-context.mjs

@@ -6,7 +6,7 @@ async function getUserContext() {
   const cookieStore = await cookies();
   const token = process.env.DUMMY_AUTH_TOKEN || cookieStore.get(AUTH_COOKIE_NAME)?.value;
   if (!token) {
-    throw new ApiError("Usu\xE1rio n\xE3o autenticado", "NOT_AUTHENTICATED", 401);
+    throw new ApiError("Usu\xE1rio n\xE3o autenticado", "NOT_AUTHENTICATED_GUC", 401);
   }
   try {
     const payload = JSON.parse(atob(token.split(".")[1]));

package/dist/modules/auth/utils/get-user-context.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/auth/utils/get-user-context.ts"],"sourcesContent":["import 'server-only';\r\n\r\nimport { cookies } from 'next/headers';\r\nimport { ApiError } from '../../../infra/api/types';\r\nimport { JWTPayload } from '../../users/schema';\r\n\r\nconst AUTH_COOKIE_NAME = 'greatapps';\r\n\r\nexport async function getUserContext(): Promise<{\r\n  id_account: number;\r\n  id_user: number;\r\n}> {\r\n  const cookieStore = await cookies();\r\n  const token = process.env.DUMMY_AUTH_TOKEN || cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n\r\n  if (!token) {\r\n    throw new ApiError('Usuário não autenticado', 'NOT_AUTHENTICATED', 401);\r\n  }\r\n\r\n  try {\r\n    const payload = JSON.parse(atob(token.split('.')[1])) as JWTPayload;\r\n\r\n    return {\r\n      id_account: payload.id_account,\r\n      id_user: payload.id_user,\r\n    };\r\n  } catch {\r\n    throw new ApiError('Token inválido', 'INVALID_TOKEN', 401);\r\n  }\r\n}\r\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,eAAe;AACxB,SAAS,gBAAgB;AAGzB,MAAM,mBAAmB;AAEzB,eAAsB,iBAGnB;AACD,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,QAAQ,QAAQ,IAAI,oBAAoB,YAAY,IAAI,gBAAgB,GAAG;AAEjF,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,SAAS,iCAA2B,qBAAqB,GAAG;AAAA,EACxE;AAEA,MAAI;AACF,UAAM,UAAU,KAAK,MAAM,KAAK,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AAEpD,WAAO;AAAA,MACL,YAAY,QAAQ;AAAA,MACpB,SAAS,QAAQ;AAAA,IACnB;AAAA,EACF,QAAQ;AACN,UAAM,IAAI,SAAS,qBAAkB,iBAAiB,GAAG;AAAA,EAC3D;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/modules/auth/utils/get-user-context.ts"],"sourcesContent":["import 'server-only';\r\n\r\nimport { cookies } from 'next/headers';\r\nimport { ApiError } from '../../../infra/api/types';\r\nimport { JWTPayload } from '../../users/schema';\r\n\r\nconst AUTH_COOKIE_NAME = 'greatapps';\r\n\r\nexport async function getUserContext(): Promise<{\r\n  id_account: number;\r\n  id_user: number;\r\n}> {\r\n  const cookieStore = await cookies();\r\n  const token = process.env.DUMMY_AUTH_TOKEN || cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n\r\n  if (!token) {\r\n    throw new ApiError('Usuário não autenticado', 'NOT_AUTHENTICATED_GUC', 401);\r\n  }\r\n\r\n  try {\r\n    const payload = JSON.parse(atob(token.split('.')[1])) as JWTPayload;\r\n\r\n    return {\r\n      id_account: payload.id_account,\r\n      id_user: payload.id_user,\r\n    };\r\n  } catch {\r\n    throw new ApiError('Token inválido', 'INVALID_TOKEN', 401);\r\n  }\r\n}\r\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,eAAe;AACxB,SAAS,gBAAgB;AAGzB,MAAM,mBAAmB;AAEzB,eAAsB,iBAGnB;AACD,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,QAAQ,QAAQ,IAAI,oBAAoB,YAAY,IAAI,gBAAgB,GAAG;AAEjF,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,SAAS,iCAA2B,yBAAyB,GAAG;AAAA,EAC5E;AAEA,MAAI;AACF,UAAM,UAAU,KAAK,MAAM,KAAK,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AAEpD,WAAO;AAAA,MACL,YAAY,QAAQ;AAAA,MACpB,SAAS,QAAQ;AAAA,IACnB;AAAA,EACF,QAAQ;AACN,UAAM,IAAI,SAAS,qBAAkB,iBAAiB,GAAG;AAAA,EAC3D;AACF;","names":[]}

package/dist/modules/users/services/user.service.mjs

@@ -9,7 +9,7 @@ class UserService {
     const cookieStore = await cookies();
     const token = cookieStore.get(AUTH_COOKIE_NAME)?.value;
     if (!token) {
-      throw new ApiError("N\xE3o autenticado", "NOT_AUTHENTICATED", 401);
+      throw new ApiError("N\xE3o autenticado", "NOT_AUTHENTICATED_GAT", 401);
     }
     return token;
   }

package/dist/modules/users/services/user.service.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/users/services/user.service.ts"],"sourcesContent":["\r\nimport { cookies } from 'next/headers';\r\n\r\nimport { ApiError } from '../../../infra/api/types';\r\nimport { GetUserDataResponse, JWTPayload, User } from '../schema';\r\nimport { findWhitelabel } from '../../whitelabel/actions/find-whitelabel.action';\r\n\r\nconst AUTH_COOKIE_NAME = 'greatapps';\r\nconst API_BASE_URL = process.env.GAPPS_R3_API_URL || 'https://r3-api.greatapps.dev.br';\r\n\r\nclass UserService {\r\n  private async getAuthToken(): Promise<string> {\r\n    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;\r\n    const cookieStore = await cookies();\r\n    const token = cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n\r\n    if (!token) {\r\n      throw new ApiError('Não autenticado', 'NOT_AUTHENTICATED', 401);\r\n    }\r\n\r\n    return token;\r\n  }\r\n\r\n  private decodeJWT(token: string): JWTPayload {\r\n    try {\r\n      return JSON.parse(atob(token.split('.')[1])) as JWTPayload;\r\n    } catch {\r\n      throw new ApiError('Token inválido', 'INVALID_TOKEN', 401);\r\n    }\r\n  }\r\n\r\n  async findById(): Promise<User> {\r\n    const token = await this.getAuthToken();\r\n    const payload = this.decodeJWT(token);\r\n\r\n    const { id_wl, id_account, id_user } = payload;\r\n    const { token: wlToken } = await findWhitelabel();\r\n\r\n    const url = `${API_BASE_URL}/v1/pt-br/${id_wl}/accounts/${id_account}/users/${id_user}`;\r\n\r\n    const response = await fetch(url, {\r\n      method: 'GET',\r\n      headers: {\r\n        'Content-Type': 'application/json',\r\n        authorization: wlToken,\r\n      },\r\n    });\r\n\r\n    if (!response.ok) {\r\n      throw new ApiError('Erro ao buscar dados do usuário', 'FETCH_ERROR', response.status);\r\n    }\r\n\r\n    const data = (await response.json()) as GetUserDataResponse;\r\n\r\n    if (data.status === 0 || !data.data || data.data.length === 0) {\r\n      throw new ApiError('Dados do usuário não encontrados', 'USER_NOT_FOUND', 404);\r\n    }\r\n\r\n    return data.data[0];\r\n  }\r\n}\r\n\r\nexport const userService = new UserService();\r\n"],"mappings":"AACA,SAAS,eAAe;AAExB,SAAS,gBAAgB;AAEzB,SAAS,sBAAsB;AAE/B,MAAM,mBAAmB;AACzB,MAAM,eAAe,QAAQ,IAAI,oBAAoB;AAErD,MAAM,YAAY;AAAA,EAChB,MAAc,eAAgC;AAC5C,QAAI,QAAQ,IAAI,iBAAkB,QAAO,QAAQ,IAAI;AACrD,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,QAAQ,YAAY,IAAI,gBAAgB,GAAG;AAEjD,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,SAAS,sBAAmB,qBAAqB,GAAG;AAAA,IAChE;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,UAAU,OAA2B;AAC3C,QAAI;AACF,aAAO,KAAK,MAAM,KAAK,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AAAA,IAC7C,QAAQ;AACN,YAAM,IAAI,SAAS,qBAAkB,iBAAiB,GAAG;AAAA,IAC3D;AAAA,EACF;AAAA,EAEA,MAAM,WAA0B;AAC9B,UAAM,QAAQ,MAAM,KAAK,aAAa;AACtC,UAAM,UAAU,KAAK,UAAU,KAAK;AAEpC,UAAM,EAAE,OAAO,YAAY,QAAQ,IAAI;AACvC,UAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,eAAe;AAEhD,UAAM,MAAM,GAAG,YAAY,aAAa,KAAK,aAAa,UAAU,UAAU,OAAO;AAErF,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,SAAS,sCAAmC,eAAe,SAAS,MAAM;AAAA,IACtF;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAElC,QAAI,KAAK,WAAW,KAAK,CAAC,KAAK,QAAQ,KAAK,KAAK,WAAW,GAAG;AAC7D,YAAM,IAAI,SAAS,0CAAoC,kBAAkB,GAAG;AAAA,IAC9E;AAEA,WAAO,KAAK,KAAK,CAAC;AAAA,EACpB;AACF;AAEO,MAAM,cAAc,IAAI,YAAY;","names":[]}
+{"version":3,"sources":["../../../../src/modules/users/services/user.service.ts"],"sourcesContent":["\r\nimport { cookies } from 'next/headers';\r\n\r\nimport { ApiError } from '../../../infra/api/types';\r\nimport { GetUserDataResponse, JWTPayload, User } from '../schema';\r\nimport { findWhitelabel } from '../../whitelabel/actions/find-whitelabel.action';\r\n\r\nconst AUTH_COOKIE_NAME = 'greatapps';\r\nconst API_BASE_URL = process.env.GAPPS_R3_API_URL || 'https://r3-api.greatapps.dev.br';\r\n\r\nclass UserService {\r\n  private async getAuthToken(): Promise<string> {\r\n    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;\r\n    const cookieStore = await cookies();\r\n    const token = cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n\r\n    if (!token) {\r\n      throw new ApiError('Não autenticado', 'NOT_AUTHENTICATED_GAT', 401);\r\n    }\r\n\r\n    return token;\r\n  }\r\n\r\n  private decodeJWT(token: string): JWTPayload {\r\n    try {\r\n      return JSON.parse(atob(token.split('.')[1])) as JWTPayload;\r\n    } catch {\r\n      throw new ApiError('Token inválido', 'INVALID_TOKEN', 401);\r\n    }\r\n  }\r\n\r\n  async findById(): Promise<User> {\r\n    const token = await this.getAuthToken();\r\n    const payload = this.decodeJWT(token);\r\n\r\n    const { id_wl, id_account, id_user } = payload;\r\n    const { token: wlToken } = await findWhitelabel();\r\n\r\n    const url = `${API_BASE_URL}/v1/pt-br/${id_wl}/accounts/${id_account}/users/${id_user}`;\r\n\r\n    const response = await fetch(url, {\r\n      method: 'GET',\r\n      headers: {\r\n        'Content-Type': 'application/json',\r\n        authorization: wlToken,\r\n      },\r\n    });\r\n\r\n    if (!response.ok) {\r\n      throw new ApiError('Erro ao buscar dados do usuário', 'FETCH_ERROR', response.status);\r\n    }\r\n\r\n    const data = (await response.json()) as GetUserDataResponse;\r\n\r\n    if (data.status === 0 || !data.data || data.data.length === 0) {\r\n      throw new ApiError('Dados do usuário não encontrados', 'USER_NOT_FOUND', 404);\r\n    }\r\n\r\n    return data.data[0];\r\n  }\r\n}\r\n\r\nexport const userService = new UserService();\r\n"],"mappings":"AACA,SAAS,eAAe;AAExB,SAAS,gBAAgB;AAEzB,SAAS,sBAAsB;AAE/B,MAAM,mBAAmB;AACzB,MAAM,eAAe,QAAQ,IAAI,oBAAoB;AAErD,MAAM,YAAY;AAAA,EAChB,MAAc,eAAgC;AAC5C,QAAI,QAAQ,IAAI,iBAAkB,QAAO,QAAQ,IAAI;AACrD,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,QAAQ,YAAY,IAAI,gBAAgB,GAAG;AAEjD,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,SAAS,sBAAmB,yBAAyB,GAAG;AAAA,IACpE;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,UAAU,OAA2B;AAC3C,QAAI;AACF,aAAO,KAAK,MAAM,KAAK,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AAAA,IAC7C,QAAQ;AACN,YAAM,IAAI,SAAS,qBAAkB,iBAAiB,GAAG;AAAA,IAC3D;AAAA,EACF;AAAA,EAEA,MAAM,WAA0B;AAC9B,UAAM,QAAQ,MAAM,KAAK,aAAa;AACtC,UAAM,UAAU,KAAK,UAAU,KAAK;AAEpC,UAAM,EAAE,OAAO,YAAY,QAAQ,IAAI;AACvC,UAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,eAAe;AAEhD,UAAM,MAAM,GAAG,YAAY,aAAa,KAAK,aAAa,UAAU,UAAU,OAAO;AAErF,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,SAAS,sCAAmC,eAAe,SAAS,MAAM;AAAA,IACtF;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAElC,QAAI,KAAK,WAAW,KAAK,CAAC,KAAK,QAAQ,KAAK,KAAK,WAAW,GAAG;AAC7D,YAAM,IAAI,SAAS,0CAAoC,kBAAkB,GAAG;AAAA,IAC9E;AAEA,WAAO,KAAK,KAAK,CAAC;AAAA,EACpB;AACF;AAEO,MAAM,cAAc,IAAI,YAAY;","names":[]}

package/dist/providers/auth.provider.mjs

@@ -40,6 +40,7 @@ function AuthProvider({ children }) {
     async (credentials) => {
       await loginMutate(credentials, {
         onSuccess: (data) => {
+          if (data.twoFactorRequired) return;
           invalidateUser();
           invalidateAccount();
           setUserData(data.user);

package/dist/providers/auth.provider.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/providers/auth.provider.tsx"],"sourcesContent":["\"use client\";\r\n\r\nimport {\r\n  createContext,\r\n  ReactNode,\r\n  useCallback,\r\n  useContext,\r\n  useMemo,\r\n} from \"react\";\r\nimport {\r\n  useUserQuery,\r\n  useSetUserData,\r\n  useInvalidateUser,\r\n  useUserValidateSession,\r\n} from \"../modules/auth/hooks/useUserQuery\";\r\nimport { useLogin } from \"../modules/auth/hooks/login.hook\";\r\nimport { useRegister } from \"../modules/auth/hooks/register.hook\";\r\nimport { useLogout } from \"../modules/auth/hooks/logout.hook\";\r\nimport {\r\n  AuthState,\r\n  LoginRequest,\r\n  RegisterRequest,\r\n} from \"../modules/auth/schema\";\r\nimport {\r\n  useCurrentAccount,\r\n  useInvalidateAccount,\r\n} from \"../modules/accounts/hooks/current-account.hook\";\r\nimport { useRouter } from \"next/navigation\";\r\n\r\ninterface AuthContextProps extends AuthState {\r\n  login: (credentials: LoginRequest) => Promise<void>;\r\n  register: (data: RegisterRequest) => Promise<void>;\r\n  logout: () => Promise<void>;\r\n}\r\n\r\nexport const AuthContext = createContext<AuthContextProps | undefined>(\r\n  undefined,\r\n);\r\n\r\ninterface AuthProviderProps {\r\n  children: ReactNode;\r\n}\r\n\r\nexport function AuthProvider({ children }: AuthProviderProps) {\r\n  const { data: user, isLoading: isQueryLoading } = useUserQuery();\r\n  const { data: account, isLoading: isAccountLoading } = useCurrentAccount();\r\n  const { isLoading: isSessionLoading } = useUserValidateSession();\r\n\r\n  const setUserData = useSetUserData();\r\n  const invalidateUser = useInvalidateUser();\r\n  const invalidateAccount = useInvalidateAccount();\r\n\r\n  const router = useRouter();\r\n\r\n  const { mutateAsync: loginMutate, isPending: isLogging } = useLogin();\r\n  const { mutateAsync: registerMutate, isPending: isRegistering } =\r\n    useRegister();\r\n  const { mutateAsync: logoutMutate, isPending: isLoggingOut } = useLogout();\r\n\r\n  const isAuthenticated = !!user;\r\n  const isLoading =\r\n    isLogging ||\r\n    isRegistering ||\r\n    isLoggingOut ||\r\n    isQueryLoading ||\r\n    isAccountLoading ||\r\n    isSessionLoading;\r\n\r\n  const login = useCallback(\r\n    async (credentials: LoginRequest): Promise<void> => {\r\n      await loginMutate(credentials, {\r\n        onSuccess: (data) => {\r\n          invalidateUser();\r\n          invalidateAccount();\r\n          setUserData(data.user);\r\n        },\r\n      });\r\n    },\r\n    [setUserData, invalidateUser, invalidateAccount],\r\n  );\r\n\r\n  const register = useCallback(\r\n    async (data: RegisterRequest): Promise<void> => {\r\n      await registerMutate(data, {\r\n        onSuccess: (data) => {\r\n          invalidateUser();\r\n          invalidateAccount();\r\n          setUserData(data.user);\r\n        },\r\n      });\r\n    },\r\n    [setUserData, invalidateUser, invalidateAccount],\r\n  );\r\n\r\n  const logout = useCallback(async (): Promise<void> => {\r\n    await logoutMutate(undefined, {\r\n      onSuccess: () => {\r\n        invalidateUser();\r\n        router.push(\"/login\");\r\n      },\r\n    });\r\n  }, [setUserData]);\r\n\r\n  const value: AuthContextProps = useMemo(\r\n    () => ({\r\n      user: user ?? null,\r\n      account: account ?? null,\r\n      isAuthenticated,\r\n      isLoading,\r\n      login,\r\n      register,\r\n      logout,\r\n    }),\r\n    [user, isAuthenticated, isLoading, login, register, logout],\r\n  );\r\n\r\n  return <AuthContext.Provider value={value}>{children}</AuthContext.Provider>;\r\n}\r\n\r\nexport function useAuth(): AuthContextProps {\r\n  const context = useContext(AuthContext);\r\n\r\n  if (context === undefined) {\r\n    throw new Error(\"useAuth deve ser usado dentro de um AuthProvider\");\r\n  }\r\n\r\n  return context;\r\n}\r\n"],"mappings":";AAoHS;AAlHT;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gBAAgB;AACzB,SAAS,mBAAmB;AAC5B,SAAS,iBAAiB;AAM1B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,iBAAiB;AAQnB,MAAM,cAAc;AAAA,EACzB;AACF;AAMO,SAAS,aAAa,EAAE,SAAS,GAAsB;AAC5D,QAAM,EAAE,MAAM,MAAM,WAAW,eAAe,IAAI,aAAa;AAC/D,QAAM,EAAE,MAAM,SAAS,WAAW,iBAAiB,IAAI,kBAAkB;AACzE,QAAM,EAAE,WAAW,iBAAiB,IAAI,uBAAuB;AAE/D,QAAM,cAAc,eAAe;AACnC,QAAM,iBAAiB,kBAAkB;AACzC,QAAM,oBAAoB,qBAAqB;AAE/C,QAAM,SAAS,UAAU;AAEzB,QAAM,EAAE,aAAa,aAAa,WAAW,UAAU,IAAI,SAAS;AACpE,QAAM,EAAE,aAAa,gBAAgB,WAAW,cAAc,IAC5D,YAAY;AACd,QAAM,EAAE,aAAa,cAAc,WAAW,aAAa,IAAI,UAAU;AAEzE,QAAM,kBAAkB,CAAC,CAAC;AAC1B,QAAM,YACJ,aACA,iBACA,gBACA,kBACA,oBACA;AAEF,QAAM,QAAQ;AAAA,IACZ,OAAO,gBAA6C;AAClD,YAAM,YAAY,aAAa;AAAA,QAC7B,WAAW,CAAC,SAAS;AACnB,yBAAe;AACf,4BAAkB;AAClB,sBAAY,KAAK,IAAI;AAAA,QACvB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,CAAC,aAAa,gBAAgB,iBAAiB;AAAA,EACjD;AAEA,QAAM,WAAW;AAAA,IACf,OAAO,SAAyC;AAC9C,YAAM,eAAe,MAAM;AAAA,QACzB,WAAW,CAACA,UAAS;AACnB,yBAAe;AACf,4BAAkB;AAClB,sBAAYA,MAAK,IAAI;AAAA,QACvB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,CAAC,aAAa,gBAAgB,iBAAiB;AAAA,EACjD;AAEA,QAAM,SAAS,YAAY,YAA2B;AACpD,UAAM,aAAa,QAAW;AAAA,MAC5B,WAAW,MAAM;AACf,uBAAe;AACf,eAAO,KAAK,QAAQ;AAAA,MACtB;AAAA,IACF,CAAC;AAAA,EACH,GAAG,CAAC,WAAW,CAAC;AAEhB,QAAM,QAA0B;AAAA,IAC9B,OAAO;AAAA,MACL,MAAM,QAAQ;AAAA,MACd,SAAS,WAAW;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,CAAC,MAAM,iBAAiB,WAAW,OAAO,UAAU,MAAM;AAAA,EAC5D;AAEA,SAAO,oBAAC,YAAY,UAAZ,EAAqB,OAAe,UAAS;AACvD;AAEO,SAAS,UAA4B;AAC1C,QAAM,UAAU,WAAW,WAAW;AAEtC,MAAI,YAAY,QAAW;AACzB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AAEA,SAAO;AACT;","names":["data"]}
+{"version":3,"sources":["../../src/providers/auth.provider.tsx"],"sourcesContent":["\"use client\";\r\n\r\nimport {\r\n  createContext,\r\n  ReactNode,\r\n  useCallback,\r\n  useContext,\r\n  useMemo,\r\n} from \"react\";\r\nimport {\r\n  useUserQuery,\r\n  useSetUserData,\r\n  useInvalidateUser,\r\n  useUserValidateSession,\r\n} from \"../modules/auth/hooks/useUserQuery\";\r\nimport { useLogin } from \"../modules/auth/hooks/login.hook\";\r\nimport { useRegister } from \"../modules/auth/hooks/register.hook\";\r\nimport { useLogout } from \"../modules/auth/hooks/logout.hook\";\r\nimport {\r\n  AuthState,\r\n  LoginRequest,\r\n  RegisterRequest,\r\n} from \"../modules/auth/schema\";\r\nimport {\r\n  useCurrentAccount,\r\n  useInvalidateAccount,\r\n} from \"../modules/accounts/hooks/current-account.hook\";\r\nimport { useRouter } from \"next/navigation\";\r\n\r\ninterface AuthContextProps extends AuthState {\r\n  login: (credentials: LoginRequest) => Promise<void>;\r\n  register: (data: RegisterRequest) => Promise<void>;\r\n  logout: () => Promise<void>;\r\n}\r\n\r\nexport const AuthContext = createContext<AuthContextProps | undefined>(\r\n  undefined,\r\n);\r\n\r\ninterface AuthProviderProps {\r\n  children: ReactNode;\r\n}\r\n\r\nexport function AuthProvider({ children }: AuthProviderProps) {\r\n  const { data: user, isLoading: isQueryLoading } = useUserQuery();\r\n  const { data: account, isLoading: isAccountLoading } = useCurrentAccount();\r\n  const { isLoading: isSessionLoading } = useUserValidateSession();\r\n\r\n  const setUserData = useSetUserData();\r\n  const invalidateUser = useInvalidateUser();\r\n  const invalidateAccount = useInvalidateAccount();\r\n\r\n  const router = useRouter();\r\n\r\n  const { mutateAsync: loginMutate, isPending: isLogging } = useLogin();\r\n  const { mutateAsync: registerMutate, isPending: isRegistering } =\r\n    useRegister();\r\n  const { mutateAsync: logoutMutate, isPending: isLoggingOut } = useLogout();\r\n\r\n  const isAuthenticated = !!user;\r\n  const isLoading =\r\n    isLogging ||\r\n    isRegistering ||\r\n    isLoggingOut ||\r\n    isQueryLoading ||\r\n    isAccountLoading ||\r\n    isSessionLoading;\r\n\r\n  const login = useCallback(\r\n    async (credentials: LoginRequest): Promise<void> => {\r\n      await loginMutate(credentials, {\r\n        onSuccess: (data) => {\r\n          if (data.twoFactorRequired) return;\r\n          invalidateUser();\r\n          invalidateAccount();\r\n          setUserData(data.user);\r\n        },\r\n      });\r\n    },\r\n    [setUserData, invalidateUser, invalidateAccount],\r\n  );\r\n\r\n  const register = useCallback(\r\n    async (data: RegisterRequest): Promise<void> => {\r\n      await registerMutate(data, {\r\n        onSuccess: (data) => {\r\n          invalidateUser();\r\n          invalidateAccount();\r\n          setUserData(data.user);\r\n        },\r\n      });\r\n    },\r\n    [setUserData, invalidateUser, invalidateAccount],\r\n  );\r\n\r\n  const logout = useCallback(async (): Promise<void> => {\r\n    await logoutMutate(undefined, {\r\n      onSuccess: () => {\r\n        invalidateUser();\r\n        router.push(\"/login\");\r\n      },\r\n    });\r\n  }, [setUserData]);\r\n\r\n  const value: AuthContextProps = useMemo(\r\n    () => ({\r\n      user: user ?? null,\r\n      account: account ?? null,\r\n      isAuthenticated,\r\n      isLoading,\r\n      login,\r\n      register,\r\n      logout,\r\n    }),\r\n    [user, isAuthenticated, isLoading, login, register, logout],\r\n  );\r\n\r\n  return <AuthContext.Provider value={value}>{children}</AuthContext.Provider>;\r\n}\r\n\r\nexport function useAuth(): AuthContextProps {\r\n  const context = useContext(AuthContext);\r\n\r\n  if (context === undefined) {\r\n    throw new Error(\"useAuth deve ser usado dentro de um AuthProvider\");\r\n  }\r\n\r\n  return context;\r\n}\r\n"],"mappings":";AAqHS;AAnHT;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gBAAgB;AACzB,SAAS,mBAAmB;AAC5B,SAAS,iBAAiB;AAM1B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,iBAAiB;AAQnB,MAAM,cAAc;AAAA,EACzB;AACF;AAMO,SAAS,aAAa,EAAE,SAAS,GAAsB;AAC5D,QAAM,EAAE,MAAM,MAAM,WAAW,eAAe,IAAI,aAAa;AAC/D,QAAM,EAAE,MAAM,SAAS,WAAW,iBAAiB,IAAI,kBAAkB;AACzE,QAAM,EAAE,WAAW,iBAAiB,IAAI,uBAAuB;AAE/D,QAAM,cAAc,eAAe;AACnC,QAAM,iBAAiB,kBAAkB;AACzC,QAAM,oBAAoB,qBAAqB;AAE/C,QAAM,SAAS,UAAU;AAEzB,QAAM,EAAE,aAAa,aAAa,WAAW,UAAU,IAAI,SAAS;AACpE,QAAM,EAAE,aAAa,gBAAgB,WAAW,cAAc,IAC5D,YAAY;AACd,QAAM,EAAE,aAAa,cAAc,WAAW,aAAa,IAAI,UAAU;AAEzE,QAAM,kBAAkB,CAAC,CAAC;AAC1B,QAAM,YACJ,aACA,iBACA,gBACA,kBACA,oBACA;AAEF,QAAM,QAAQ;AAAA,IACZ,OAAO,gBAA6C;AAClD,YAAM,YAAY,aAAa;AAAA,QAC7B,WAAW,CAAC,SAAS;AACnB,cAAI,KAAK,kBAAmB;AAC5B,yBAAe;AACf,4BAAkB;AAClB,sBAAY,KAAK,IAAI;AAAA,QACvB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,CAAC,aAAa,gBAAgB,iBAAiB;AAAA,EACjD;AAEA,QAAM,WAAW;AAAA,IACf,OAAO,SAAyC;AAC9C,YAAM,eAAe,MAAM;AAAA,QACzB,WAAW,CAACA,UAAS;AACnB,yBAAe;AACf,4BAAkB;AAClB,sBAAYA,MAAK,IAAI;AAAA,QACvB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,CAAC,aAAa,gBAAgB,iBAAiB;AAAA,EACjD;AAEA,QAAM,SAAS,YAAY,YAA2B;AACpD,UAAM,aAAa,QAAW;AAAA,MAC5B,WAAW,MAAM;AACf,uBAAe;AACf,eAAO,KAAK,QAAQ;AAAA,MACtB;AAAA,IACF,CAAC;AAAA,EACH,GAAG,CAAC,WAAW,CAAC;AAEhB,QAAM,QAA0B;AAAA,IAC9B,OAAO;AAAA,MACL,MAAM,QAAQ;AAAA,MACd,SAAS,WAAW;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,CAAC,MAAM,iBAAiB,WAAW,OAAO,UAAU,MAAM;AAAA,EAC5D;AAEA,SAAO,oBAAC,YAAY,UAAZ,EAAqB,OAAe,UAAS;AACvD;AAEO,SAAS,UAA4B;AAC1C,QAAM,UAAU,WAAW,WAAW;AAEtC,MAAI,YAAY,QAAW;AACzB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AAEA,SAAO;AACT;","names":["data"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greatapps/common",
-  "version": "1.1.52",
+  "version": "1.1.55",
   "description": "Shared library for GreatApps frontend applications",
   "main": "./dist/index.mjs",
   "types": "./src/index.ts",

package/src/modules/auth/actions/validate-session.action.ts

@@ -39,7 +39,7 @@ export async function validateSessionAction(): Promise<boolean> {
     const isValid = await authService.validateSession(clientInfo);
 
     if (!isValid) {
-      cookieStore.delete('greatapps');
+      await authService.removeAuthCookie();
       await redirectToLogin();
       return false;
     }
@@ -47,7 +47,7 @@ export async function validateSessionAction(): Promise<boolean> {
     return true;
   } catch (error) {
     console.error('[validateSessionAction] Error:', error);
-    cookieStore.delete('greatapps');
+    await authService.removeAuthCookie();
     await redirectToLogin();
     return false;
   }

package/src/modules/auth/schema.ts

@@ -11,6 +11,7 @@ export interface ClientInfo {
 export interface LoginApiResponse {
   status: 0 | 1;
   message: string;
+  code?: string;
   cookie?: string;
   two_factor_authentication?: boolean;
 }
@@ -31,6 +32,7 @@ export interface TwoFactorRequest {
 export interface TwoFactorApiResponse {
   status: 0 | 1;
   message: string;
+  code?: string;
   cookie?: string;
 }
 
@@ -231,6 +233,7 @@ export interface LogoutRequest {
 export interface LogoutApiResponse {
   status: 0 | 1;
   message: string;
+  code?: string;
 }
 
 export interface LogoutResponse {

package/src/modules/auth/services/auth.service.ts

@@ -1,9 +1,8 @@
+import { cookies } from "next/headers";
 
-import { cookies } from 'next/headers';
-
-import { apiClient } from '../../../infra/api/client';
-import { ApiError } from '../../../infra/api/types';
-import { User } from '../../users/schema';
+import { apiClient } from "../../../infra/api/client";
+import { ApiError } from "../../../infra/api/types";
+import { User } from "../../users/schema";
 import {
   ClientInfo,
   ForgotPasswordRequest,
@@ -30,40 +29,27 @@ import {
   TwoFactorResponse,
   VerifyEmailRequest,
   VerifyEmailResponse,
-} from '../schema';
+} from "../schema";
 
-const AUTH_COOKIE_NAME = 'greatapps';
-const PENDING_2FA_COOKIE_NAME = 'greatapps_2fa_pending';
+const AUTH_COOKIE_NAME = "greatapps";
+const PENDING_2FA_COOKIE_NAME = "greatapps_2fa_pending";
 const COOKIE_MAX_AGE = 60 * 60 * 24 * 30;
 const PENDING_2FA_MAX_AGE = 60 * 10; // 10 minutos para completar o 2FA
 
 const COOKIE_OPTIONS = {
   httpOnly: true,
-  secure: process.env.NODE_ENV === 'production',
-  sameSite: 'lax' as const,
-  path: '/',
+  secure: process.env.NODE_ENV === "production",
+  sameSite: "lax" as const,
+  path: "/",
   domain: process.env.DOMAIN_COOKIE,
 };
 
-async function setAuthCookie(token: string): Promise<void> {
-  const cookieStore = await cookies();
-  cookieStore.set(AUTH_COOKIE_NAME, token, { ...COOKIE_OPTIONS, maxAge: COOKIE_MAX_AGE });
-}
-
-async function removeAuthCookie(): Promise<void> {
-  const cookieStore = await cookies();
-  cookieStore.delete({ name: AUTH_COOKIE_NAME, ...COOKIE_OPTIONS });
-}
-
-async function getAuthCookie(): Promise<string | undefined> {
-  if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;
-  const cookieStore = await cookies();
-  return cookieStore.get(AUTH_COOKIE_NAME)?.value;
-}
-
 async function setPending2FACookie(token: string): Promise<void> {
   const cookieStore = await cookies();
-  cookieStore.set(PENDING_2FA_COOKIE_NAME, token, { ...COOKIE_OPTIONS, maxAge: PENDING_2FA_MAX_AGE });
+  cookieStore.set(PENDING_2FA_COOKIE_NAME, token, {
+    ...COOKIE_OPTIONS,
+    maxAge: PENDING_2FA_MAX_AGE,
+  });
 }
 
 async function removePending2FACookie(): Promise<void> {
@@ -77,8 +63,11 @@ async function getPending2FACookie(): Promise<string | undefined> {
 }
 
 class AuthService {
-  async login(credentials: LoginRequest, clientInfo: ClientInfo): Promise<LoginResponse> {
-    const response = await apiClient.post<LoginApiResponse>('/auth/login', {
+  async login(
+    credentials: LoginRequest,
+    clientInfo: ClientInfo
+  ): Promise<LoginResponse> {
+    const response = await apiClient.post<LoginApiResponse>("/auth/login", {
       email: credentials.email,
       password: credentials.password,
       location: clientInfo.location,
@@ -88,35 +77,48 @@ class AuthService {
     });
 
     if (response.status === 0) {
-      throw new ApiError(response.message || 'E-mail ou senha incorretos', 'LOGIN_FAILED', 401);
+      throw new ApiError(
+        response.message || "E-mail ou senha incorretos",
+        response.code || "LOGIN_FAILED",
+        401
+      );
     }
 
     if (!response.cookie) {
-      throw new ApiError('Resposta de autenticação inválida', 'INVALID_RESPONSE', 500);
+      throw new ApiError(
+        "Resposta de autenticação inválida",
+        "INVALID_RESPONSE",
+        500
+      );
     }
 
     if (response.two_factor_authentication) {
-      // Armazena o cookie temporariamente até o 2FA ser concluído.
-      // O cookie principal NÃO é setado aqui para evitar falso positivo em isAuthenticated().
       await setPending2FACookie(response.cookie);
       return { twoFactorRequired: true };
     }
 
-    await setAuthCookie(response.cookie);
+    await this.setAuthCookie(response.cookie);
 
     return {
       user: {} as User,
       accessToken: response.cookie,
-      refreshToken: '',
+      refreshToken: "",
       expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),
     };
   }
 
-  async verifyTwoFactor(code: number, clientInfo: ClientInfo): Promise<TwoFactorResponse> {
+  async verifyTwoFactor(
+    code: number,
+    clientInfo: ClientInfo
+  ): Promise<TwoFactorResponse> {
     const pendingCookie = await getPending2FACookie();
 
     if (!pendingCookie) {
-      throw new ApiError('Nenhuma autenticação 2FA pendente', 'NO_PENDING_2FA', 400);
+      throw new ApiError(
+        "Nenhuma autenticação 2FA pendente",
+        "NO_PENDING_2FA",
+        400
+      );
     }
 
     const payload: TwoFactorRequest = {
@@ -128,17 +130,31 @@ class AuthService {
       code,
     };
 
-    const response = await apiClient.post<TwoFactorApiResponse>('/auth/code', payload);
+    const response = await apiClient.post<TwoFactorApiResponse>(
+      "/auth/code",
+      payload
+    );
 
     if (response.status === 0) {
-      throw new ApiError(response.message || 'Código 2FA inválido', 'TWO_FACTOR_FAILED', 401);
+      throw new ApiError(
+        response.message || "Código 2FA inválido",
+        response.code || "TWO_FACTOR_FAILED",
+        401
+      );
     }
 
     if (!response.cookie) {
-      throw new ApiError('Resposta de autenticação inválida após 2FA', 'INVALID_RESPONSE', 500);
+      throw new ApiError(
+        "Resposta de autenticação inválida após 2FA",
+        "INVALID_RESPONSE",
+        500
+      );
     }
 
-    await Promise.all([setAuthCookie(response.cookie), removePending2FACookie()]);
+    await Promise.all([
+      this.setAuthCookie(response.cookie),
+      removePending2FACookie(),
+    ]);
 
     return { success: true };
   }
@@ -156,39 +172,50 @@ class AuthService {
     const payload: RegisterApiRequest = {
       name: data.accountName,
       bussiness_type: data.businessType,
-      language: 'pt-br',
-      timezone: 'America/Sao_Paulo',
-      currency: 'BRL',
+      language: "pt-br",
+      timezone: "America/Sao_Paulo",
+      currency: "BRL",
       user: {
-        id_api: '',
+        id_api: "",
         name: data.name,
-        last_name: data.lastName || '',
-        rg: data.rg || '',
-        cpf: data.cpf || '',
+        last_name: data.lastName || "",
+        rg: data.rg || "",
+        cpf: data.cpf || "",
         gender: data.gender,
         email: data.email,
         phone: data.phone,
         password: data.password,
-        profile: 'owner',
-        language: 'pt-br',
+        profile: "owner",
+        language: "pt-br",
       },
       subscription: {
-        type: 'trial',
-        id_cupom: '',
+        type: "trial",
+        id_cupom: "",
         id_plan: 1,
-        due_date: trialEndDate.toISOString().split('T')[0],
+        due_date: trialEndDate.toISOString().split("T")[0],
         id_product: 1,
       },
     };
 
-    const response = await apiClient.post<RegisterApiResponse>('/accounts', payload);
+    const response = await apiClient.post<RegisterApiResponse>(
+      "/accounts",
+      payload
+    );
 
     if (response.status === 0) {
-      throw new ApiError(response.message || 'Erro ao criar conta', 'REGISTER_FAILED', 400);
+      throw new ApiError(
+        response.message || "Erro ao criar conta",
+        "REGISTER_FAILED",
+        400
+      );
     }
 
     if (!response.data || response.data.length === 0) {
-      throw new ApiError('Resposta de registro inválida', 'INVALID_RESPONSE', 500);
+      throw new ApiError(
+        "Resposta de registro inválida",
+        "INVALID_RESPONSE",
+        500
+      );
     }
 
     const accountData = response.data[0];
@@ -198,18 +225,22 @@ class AuthService {
     // O usuário completo será carregado após o login
     return {
       user: {} as User, // Placeholder, será preenchido após login
-      accessToken: '',
-      refreshToken: '',
+      accessToken: "",
+      refreshToken: "",
       expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),
       requiresEmailVerification: !accountData.verified,
     };
   }
 
   async logout(clientInfo: ClientInfo): Promise<LogoutResponse> {
-    const cookie = await getAuthCookie();
+    const cookie = await this.getToken();
 
     if (!cookie) {
-      throw new ApiError('Usuário não autenticado', 'NOT_AUTHENTICATED', 401);
+      throw new ApiError(
+        "Usuário não autenticado",
+        "NOT_AUTHENTICATED_LOGOUT",
+        401
+      );
     }
 
     const payload: LogoutRequest = {
@@ -221,13 +252,20 @@ class AuthService {
     };
 
     try {
-      const response = await apiClient.post<LogoutApiResponse>('/auth/logout', payload);
+      const response = await apiClient.post<LogoutApiResponse>(
+        "/auth/logout",
+        payload
+      );
 
       if (response.status === 0) {
-        throw new ApiError(response.message || 'Erro ao realizar logout', 'LOGOUT_FAILED', 400);
+        throw new ApiError(
+          response.message || "Erro ao realizar logout",
+          response.code || "LOGOUT_FAILED",
+          400
+        );
       }
     } finally {
-      await Promise.all([removeAuthCookie(), removePending2FACookie()]);
+      await Promise.all([this.removeAuthCookie(), removePending2FACookie()]);
     }
 
     return {
@@ -235,24 +273,46 @@ class AuthService {
     };
   }
 
-  async forgotPassword(_data: ForgotPasswordRequest): Promise<ForgotPasswordResponse> {
-    throw new ApiError('Recuperação de senha não implementada', 'NOT_IMPLEMENTED', 501);
+  async forgotPassword(
+    _data: ForgotPasswordRequest
+  ): Promise<ForgotPasswordResponse> {
+    throw new ApiError(
+      "Recuperação de senha não implementada",
+      "NOT_IMPLEMENTED",
+      501
+    );
   }
 
-  async resetPassword(_data: ResetPasswordRequest): Promise<ResetPasswordResponse> {
-    throw new ApiError('Redefinição de senha não implementada', 'NOT_IMPLEMENTED', 501);
+  async resetPassword(
+    _data: ResetPasswordRequest
+  ): Promise<ResetPasswordResponse> {
+    throw new ApiError(
+      "Redefinição de senha não implementada",
+      "NOT_IMPLEMENTED",
+      501
+    );
   }
 
   async verifyEmail(_data: VerifyEmailRequest): Promise<VerifyEmailResponse> {
-    throw new ApiError('Verificação de email não implementada', 'NOT_IMPLEMENTED', 501);
+    throw new ApiError(
+      "Verificação de email não implementada",
+      "NOT_IMPLEMENTED",
+      501
+    );
   }
 
-  async resendVerification(_data: ResendVerificationRequest): Promise<ResendVerificationResponse> {
-    throw new ApiError('Reenvio de verificação não implementado', 'NOT_IMPLEMENTED', 501);
+  async resendVerification(
+    _data: ResendVerificationRequest
+  ): Promise<ResendVerificationResponse> {
+    throw new ApiError(
+      "Reenvio de verificação não implementado",
+      "NOT_IMPLEMENTED",
+      501
+    );
   }
 
   async validateSession(clientInfo: ClientInfo): Promise<boolean> {
-    const cookie = await getAuthCookie();
+    const cookie = await this.getToken();
 
     if (!cookie) {
       return false;
@@ -267,22 +327,43 @@ class AuthService {
         cookie,
       };
 
-      const response = await apiClient.post<SessionKeepResponse>('/auth/keep', payload);
+      const response = await apiClient.post<SessionKeepResponse>(
+        "/auth/keep",
+        payload
+      );
 
       return response.status === 1;
     } catch (error) {
-      console.error('[AuthService] validateSession error', error);
+      console.error("[AuthService] validateSession error", error);
       return false;
     }
   }
 
   async isAuthenticated(): Promise<boolean> {
-    const token = await getAuthCookie();
+    const token = await this.getToken();
     return !!token;
   }
 
   async getToken(): Promise<string | undefined> {
-    return getAuthCookie();
+    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;
+    const cookieStore = await cookies();
+    return cookieStore.get(AUTH_COOKIE_NAME)?.value;
+  }
+
+  private async setAuthCookie(token: string): Promise<void> {
+    const cookieStore = await cookies();
+    cookieStore.set(AUTH_COOKIE_NAME, token, {
+      ...COOKIE_OPTIONS,
+      maxAge: COOKIE_MAX_AGE,
+    });
+  }
+
+  async removeAuthCookie(): Promise<void> {
+    const cookieStore = await cookies();
+    cookieStore.delete({
+      name: AUTH_COOKIE_NAME,
+      ...COOKIE_OPTIONS,
+    });
   }
 }
 

package/src/modules/auth/utils/get-user-context.ts

@@ -14,7 +14,7 @@ export async function getUserContext(): Promise<{
   const token = process.env.DUMMY_AUTH_TOKEN || cookieStore.get(AUTH_COOKIE_NAME)?.value;
 
   if (!token) {
-    throw new ApiError('Usuário não autenticado', 'NOT_AUTHENTICATED', 401);
+    throw new ApiError('Usuário não autenticado', 'NOT_AUTHENTICATED_GUC', 401);
   }
 
   try {

package/src/modules/users/services/user.service.ts

@@ -15,7 +15,7 @@ class UserService {
     const token = cookieStore.get(AUTH_COOKIE_NAME)?.value;
 
     if (!token) {
-      throw new ApiError('Não autenticado', 'NOT_AUTHENTICATED', 401);
+      throw new ApiError('Não autenticado', 'NOT_AUTHENTICATED_GAT', 401);
     }
 
     return token;

package/src/providers/auth.provider.tsx

@@ -70,6 +70,7 @@ export function AuthProvider({ children }: AuthProviderProps) {
     async (credentials: LoginRequest): Promise<void> => {
       await loginMutate(credentials, {
         onSuccess: (data) => {
+          if (data.twoFactorRequired) return;
           invalidateUser();
           invalidateAccount();
           setUserData(data.user);