@greatapps/common 1.1.56 → 1.1.57

package/dist/modules/auth/services/auth.service.mjs

@@ -2,9 +2,7 @@ import { cookies } from "next/headers";
 import { apiClient } from "../../../infra/api/client";
 import { ApiError } from "../../../infra/api/types";
 const AUTH_COOKIE_NAME = "greatapps";
-const PENDING_2FA_COOKIE_NAME = "greatapps_2fa_pending";
 const COOKIE_MAX_AGE = 60 * 60 * 24 * 30;
-const PENDING_2FA_MAX_AGE = 60 * 10;
 const COOKIE_OPTIONS = {
   httpOnly: true,
   secure: process.env.NODE_ENV === "production",
@@ -12,21 +10,6 @@ const COOKIE_OPTIONS = {
   path: "/",
   domain: process.env.DOMAIN_COOKIE
 };
-async function setPending2FACookie(token) {
-  const cookieStore = await cookies();
-  cookieStore.set(PENDING_2FA_COOKIE_NAME, token, {
-    ...COOKIE_OPTIONS,
-    maxAge: PENDING_2FA_MAX_AGE
-  });
-}
-async function removePending2FACookie() {
-  const cookieStore = await cookies();
-  cookieStore.delete({ name: PENDING_2FA_COOKIE_NAME, ...COOKIE_OPTIONS });
-}
-async function getPending2FACookie() {
-  const cookieStore = await cookies();
-  return cookieStore.get(PENDING_2FA_COOKIE_NAME)?.value;
-}
 class AuthService {
   async login(credentials, clientInfo) {
     const response = await apiClient.post("/auth/login", {
@@ -52,8 +35,7 @@ class AuthService {
       );
     }
     if (response.two_factor_required) {
-      await setPending2FACookie(response.cookie);
-      return { twoFactorRequired: true };
+      return { twoFactorRequired: true, cookie: response.cookie };
     }
     await this.setAuthCookie(response.cookie);
     return {
@@ -63,21 +45,13 @@ class AuthService {
       expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1e3).toISOString()
     };
   }
-  async verifyTwoFactor(code, clientInfo) {
-    const pendingCookie = await getPending2FACookie();
-    if (!pendingCookie) {
-      throw new ApiError(
-        "Nenhuma autentica\xE7\xE3o 2FA pendente",
-        "NO_PENDING_2FA",
-        400
-      );
-    }
+  async verifyTwoFactor(cookie, code, clientInfo) {
     const payload = {
       location: clientInfo.location,
       ip: clientInfo.ip,
       timezone: clientInfo.timezone,
       agent: clientInfo.agent,
-      cookie: pendingCookie,
+      cookie,
       code
     };
     const response = await apiClient.post(
@@ -98,16 +72,9 @@ class AuthService {
         500
       );
     }
-    await Promise.all([
-      this.setAuthCookie(response.cookie),
-      removePending2FACookie()
-    ]);
+    await this.setAuthCookie(response.cookie);
     return { success: true };
   }
-  async isTwoFactorPending() {
-    const pending = await getPending2FACookie();
-    return !!pending;
-  }
   async register(data) {
     const today = /* @__PURE__ */ new Date();
     const trialEndDate = new Date(today);

package/dist/modules/auth/services/auth.service.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/auth/services/auth.service.ts"],"sourcesContent":["import { cookies } from \"next/headers\";\r\n\r\nimport { apiClient } from \"../../../infra/api/client\";\r\nimport { ApiError } from \"../../../infra/api/types\";\r\nimport { User } from \"../../users/schema\";\r\nimport {\r\n  ClientInfo,\r\n  ForgotPasswordRequest,\r\n  ForgotPasswordResponse,\r\n  GeoLocation,\r\n  LoginApiResponse,\r\n  LoginRequest,\r\n  LoginResponse,\r\n  LogoutApiResponse,\r\n  LogoutRequest,\r\n  LogoutResponse,\r\n  RegisterApiRequest,\r\n  RegisterApiResponse,\r\n  RegisterRequest,\r\n  RegisterResponse,\r\n  ResendVerificationRequest,\r\n  ResendVerificationResponse,\r\n  ResetPasswordRequest,\r\n  ResetPasswordResponse,\r\n  SessionKeepRequest,\r\n  SessionKeepResponse,\r\n  TwoFactorApiResponse,\r\n  TwoFactorRequest,\r\n  TwoFactorResponse,\r\n  VerifyEmailRequest,\r\n  VerifyEmailResponse,\r\n} from \"../schema\";\r\n\r\nconst AUTH_COOKIE_NAME = \"greatapps\";\r\nconst PENDING_2FA_COOKIE_NAME = \"greatapps_2fa_pending\";\r\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 30;\r\nconst PENDING_2FA_MAX_AGE = 60 * 10; // 10 minutos para completar o 2FA\r\n\r\nconst COOKIE_OPTIONS = {\r\n  httpOnly: true,\r\n  secure: process.env.NODE_ENV === \"production\",\r\n  sameSite: \"lax\" as const,\r\n  path: \"/\",\r\n  domain: process.env.DOMAIN_COOKIE,\r\n};\r\n\r\nasync function setPending2FACookie(token: string): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.set(PENDING_2FA_COOKIE_NAME, token, {\r\n    ...COOKIE_OPTIONS,\r\n    maxAge: PENDING_2FA_MAX_AGE,\r\n  });\r\n}\r\n\r\nasync function removePending2FACookie(): Promise<void> {\r\n  const cookieStore = await cookies();\r\n  cookieStore.delete({ name: PENDING_2FA_COOKIE_NAME, ...COOKIE_OPTIONS });\r\n}\r\n\r\nasync function getPending2FACookie(): Promise<string | undefined> {\r\n  const cookieStore = await cookies();\r\n  return cookieStore.get(PENDING_2FA_COOKIE_NAME)?.value;\r\n}\r\n\r\nclass AuthService {\r\n  async login(\r\n    credentials: LoginRequest,\r\n    clientInfo: ClientInfo\r\n  ): Promise<LoginResponse> {\r\n    const response = await apiClient.post<LoginApiResponse>(\"/auth/login\", {\r\n      email: credentials.email,\r\n      password: credentials.password,\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n    });\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"E-mail ou senha incorretos\",\r\n        response.code || \"LOGIN_FAILED\",\r\n        401\r\n      );\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    if (response.two_factor_required) {\r\n      await setPending2FACookie(response.cookie);\r\n      return { twoFactorRequired: true };\r\n    }\r\n\r\n    await this.setAuthCookie(response.cookie);\r\n\r\n    return {\r\n      user: {} as User,\r\n      accessToken: response.cookie,\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n    };\r\n  }\r\n\r\n  async verifyTwoFactor(\r\n    code: number,\r\n    clientInfo: ClientInfo\r\n  ): Promise<TwoFactorResponse> {\r\n    const pendingCookie = await getPending2FACookie();\r\n\r\n    if (!pendingCookie) {\r\n      throw new ApiError(\r\n        \"Nenhuma autenticação 2FA pendente\",\r\n        \"NO_PENDING_2FA\",\r\n        400\r\n      );\r\n    }\r\n\r\n    const payload: TwoFactorRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie: pendingCookie,\r\n      code,\r\n    };\r\n\r\n    const response = await apiClient.post<TwoFactorApiResponse>(\r\n      \"/auth/code\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"Código 2FA inválido\",\r\n        response.code || \"TWO_FACTOR_FAILED\",\r\n        401\r\n      );\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida após 2FA\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    await Promise.all([\r\n      this.setAuthCookie(response.cookie),\r\n      removePending2FACookie(),\r\n    ]);\r\n\r\n    return { success: true };\r\n  }\r\n\r\n  async isTwoFactorPending(): Promise<boolean> {\r\n    const pending = await getPending2FACookie();\r\n    return !!pending;\r\n  }\r\n\r\n  async register(data: RegisterRequest): Promise<RegisterResponse> {\r\n    const today = new Date();\r\n    const trialEndDate = new Date(today);\r\n    trialEndDate.setDate(today.getDate() + 7); // 7 dias de trial\r\n\r\n    const payload: RegisterApiRequest = {\r\n      name: data.accountName,\r\n      bussiness_type: data.businessType,\r\n      language: \"pt-br\",\r\n      timezone: \"America/Sao_Paulo\",\r\n      currency: \"BRL\",\r\n      user: {\r\n        id_api: \"\",\r\n        name: data.name,\r\n        last_name: data.lastName || \"\",\r\n        rg: data.rg || \"\",\r\n        cpf: data.cpf || \"\",\r\n        gender: data.gender,\r\n        email: data.email,\r\n        phone: data.phone,\r\n        password: data.password,\r\n        profile: \"owner\",\r\n        language: \"pt-br\",\r\n      },\r\n      subscription: {\r\n        type: \"trial\",\r\n        id_cupom: \"\",\r\n        id_plan: 1,\r\n        due_date: trialEndDate.toISOString().split(\"T\")[0],\r\n        id_product: 1,\r\n      },\r\n    };\r\n\r\n    const response = await apiClient.post<RegisterApiResponse>(\r\n      \"/accounts\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"Erro ao criar conta\",\r\n        \"REGISTER_FAILED\",\r\n        400\r\n      );\r\n    }\r\n\r\n    if (!response.data || response.data.length === 0) {\r\n      throw new ApiError(\r\n        \"Resposta de registro inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    const accountData = response.data[0];\r\n\r\n    // Retornar sem token pois o registro não retorna cookie diretamente\r\n    // O usuário precisará fazer login após o registro\r\n    // O usuário completo será carregado após o login\r\n    return {\r\n      user: {} as User, // Placeholder, será preenchido após login\r\n      accessToken: \"\",\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n      requiresEmailVerification: !accountData.verified,\r\n    };\r\n  }\r\n\r\n  async logout(clientInfo: ClientInfo): Promise<LogoutResponse> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      throw new ApiError(\r\n        \"Usuário não autenticado\",\r\n        \"NOT_AUTHENTICATED_LOGOUT\",\r\n        401\r\n      );\r\n    }\r\n\r\n    const payload: LogoutRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n    };\r\n\r\n    try {\r\n      const response = await apiClient.post<LogoutApiResponse>(\r\n        \"/auth/logout\",\r\n        payload\r\n      );\r\n\r\n      if (response.status === 0) {\r\n        throw new ApiError(\r\n          response.message || \"Erro ao realizar logout\",\r\n          response.code || \"LOGOUT_FAILED\",\r\n          400\r\n        );\r\n      }\r\n    } finally {\r\n      await Promise.all([this.removeAuthCookie(), removePending2FACookie()]);\r\n    }\r\n\r\n    return {\r\n      success: true,\r\n    };\r\n  }\r\n\r\n  async forgotPassword(\r\n    _data: ForgotPasswordRequest\r\n  ): Promise<ForgotPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Recuperação de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resetPassword(\r\n    _data: ResetPasswordRequest\r\n  ): Promise<ResetPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Redefinição de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async verifyEmail(_data: VerifyEmailRequest): Promise<VerifyEmailResponse> {\r\n    throw new ApiError(\r\n      \"Verificação de email não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resendVerification(\r\n    _data: ResendVerificationRequest\r\n  ): Promise<ResendVerificationResponse> {\r\n    throw new ApiError(\r\n      \"Reenvio de verificação não implementado\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async validateSession(clientInfo: ClientInfo): Promise<boolean> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      return false;\r\n    }\r\n\r\n    try {\r\n      const payload: SessionKeepRequest = {\r\n        location: clientInfo.location,\r\n        ip: clientInfo.ip,\r\n        timezone: clientInfo.timezone,\r\n        agent: clientInfo.agent,\r\n        cookie,\r\n      };\r\n\r\n      const response = await apiClient.post<SessionKeepResponse>(\r\n        \"/auth/keep\",\r\n        payload\r\n      );\r\n\r\n      return response.status === 1;\r\n    } catch (error) {\r\n      console.error(\"[AuthService] validateSession error\", error);\r\n      return false;\r\n    }\r\n  }\r\n\r\n  async isAuthenticated(): Promise<boolean> {\r\n    const token = await this.getToken();\r\n    return !!token;\r\n  }\r\n\r\n  async getToken(): Promise<string | undefined> {\r\n    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;\r\n    const cookieStore = await cookies();\r\n    return cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n  }\r\n\r\n  private async setAuthCookie(token: string): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    cookieStore.set(AUTH_COOKIE_NAME, token, {\r\n      ...COOKIE_OPTIONS,\r\n      maxAge: COOKIE_MAX_AGE,\r\n    });\r\n  }\r\n\r\n  async removeAuthCookie(): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    cookieStore.delete({\r\n      name: AUTH_COOKIE_NAME,\r\n      ...COOKIE_OPTIONS,\r\n    });\r\n  }\r\n}\r\n\r\nexport const authService = new AuthService();\r\n\r\nexport type { ClientInfo, GeoLocation };\r\n"],"mappings":"AAAA,SAAS,eAAe;AAExB,SAAS,iBAAiB;AAC1B,SAAS,gBAAgB;AA8BzB,MAAM,mBAAmB;AACzB,MAAM,0BAA0B;AAChC,MAAM,iBAAiB,KAAK,KAAK,KAAK;AACtC,MAAM,sBAAsB,KAAK;AAEjC,MAAM,iBAAiB;AAAA,EACrB,UAAU;AAAA,EACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ,QAAQ,IAAI;AACtB;AAEA,eAAe,oBAAoB,OAA8B;AAC/D,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,yBAAyB,OAAO;AAAA,IAC9C,GAAG;AAAA,IACH,QAAQ;AAAA,EACV,CAAC;AACH;AAEA,eAAe,yBAAwC;AACrD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,OAAO,EAAE,MAAM,yBAAyB,GAAG,eAAe,CAAC;AACzE;AAEA,eAAe,sBAAmD;AAChE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,uBAAuB,GAAG;AACnD;AAEA,MAAM,YAAY;AAAA,EAChB,MAAM,MACJ,aACA,YACwB;AACxB,UAAM,WAAW,MAAM,UAAU,KAAuB,eAAe;AAAA,MACrE,OAAO,YAAY;AAAA,MACnB,UAAU,YAAY;AAAA,MACtB,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,IACpB,CAAC;AAED,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS,qBAAqB;AAChC,YAAM,oBAAoB,SAAS,MAAM;AACzC,aAAO,EAAE,mBAAmB,KAAK;AAAA,IACnC;AAEA,UAAM,KAAK,cAAc,SAAS,MAAM;AAExC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,aAAa,SAAS;AAAA,MACtB,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAM,gBACJ,MACA,YAC4B;AAC5B,UAAM,gBAAgB,MAAM,oBAAoB;AAEhD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAA4B;AAAA,MAChC,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,UAAU;AAAA,MAC/B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,QAAQ,IAAI;AAAA,MAChB,KAAK,cAAc,SAAS,MAAM;AAAA,MAClC,uBAAuB;AAAA,IACzB,CAAC;AAED,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAAA,EAEA,MAAM,qBAAuC;AAC3C,UAAM,UAAU,MAAM,oBAAoB;AAC1C,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,SAAS,MAAkD;AAC/D,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,eAAe,IAAI,KAAK,KAAK;AACnC,iBAAa,QAAQ,MAAM,QAAQ,IAAI,CAAC;AAExC,UAAM,UAA8B;AAAA,MAClC,MAAM,KAAK;AAAA,MACX,gBAAgB,KAAK;AAAA,MACrB,UAAU;AAAA,MACV,UAAU;AAAA,MACV,UAAU;AAAA,MACV,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,WAAW,KAAK,YAAY;AAAA,QAC5B,IAAI,KAAK,MAAM;AAAA,QACf,KAAK,KAAK,OAAO;AAAA,QACjB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA,QACf,SAAS;AAAA,QACT,UAAU;AAAA,MACZ;AAAA,MACA,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU,aAAa,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,QACjD,YAAY;AAAA,MACd;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,UAAU;AAAA,MAC/B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ,SAAS,KAAK,WAAW,GAAG;AAChD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,cAAc,SAAS,KAAK,CAAC;AAKnC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,MACpE,2BAA2B,CAAC,YAAY;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,YAAiD;AAC5D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAyB;AAAA,MAC7B,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,UAAU;AAAA,QAC/B;AAAA,QACA;AAAA,MACF;AAEA,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,IAAI;AAAA,UACR,SAAS,WAAW;AAAA,UACpB,SAAS,QAAQ;AAAA,UACjB;AAAA,QACF;AAAA,MACF;AAAA,IACF,UAAE;AACA,YAAM,QAAQ,IAAI,CAAC,KAAK,iBAAiB,GAAG,uBAAuB,CAAC,CAAC;AAAA,IACvE;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EAEA,MAAM,eACJ,OACiC;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,OACgC;AAChC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,OAAyD;AACzE,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBACJ,OACqC;AACrC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,YAA0C;AAC9D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,UAA8B;AAAA,QAClC,UAAU,WAAW;AAAA,QACrB,IAAI,WAAW;AAAA,QACf,UAAU,WAAW;AAAA,QACrB,OAAO,WAAW;AAAA,QAClB;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,UAAU;AAAA,QAC/B;AAAA,QACA;AAAA,MACF;AAEA,aAAO,SAAS,WAAW;AAAA,IAC7B,SAAS,OAAO;AACd,cAAQ,MAAM,uCAAuC,KAAK;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,kBAAoC;AACxC,UAAM,QAAQ,MAAM,KAAK,SAAS;AAClC,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,WAAwC;AAC5C,QAAI,QAAQ,IAAI,iBAAkB,QAAO,QAAQ,IAAI;AACrD,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,gBAAgB,GAAG;AAAA,EAC5C;AAAA,EAEA,MAAc,cAAc,OAA8B;AACxD,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,IAAI,kBAAkB,OAAO;AAAA,MACvC,GAAG;AAAA,MACH,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,mBAAkC;AACtC,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,OAAO;AAAA,MACjB,MAAM;AAAA,MACN,GAAG;AAAA,IACL,CAAC;AAAA,EACH;AACF;AAEO,MAAM,cAAc,IAAI,YAAY;","names":[]}
+{"version":3,"sources":["../../../../src/modules/auth/services/auth.service.ts"],"sourcesContent":["import { cookies } from \"next/headers\";\r\n\r\nimport { apiClient } from \"../../../infra/api/client\";\r\nimport { ApiError } from \"../../../infra/api/types\";\r\nimport { User } from \"../../users/schema\";\r\nimport {\r\n  ClientInfo,\r\n  ForgotPasswordRequest,\r\n  ForgotPasswordResponse,\r\n  GeoLocation,\r\n  LoginApiResponse,\r\n  LoginRequest,\r\n  LoginResponse,\r\n  LogoutApiResponse,\r\n  LogoutRequest,\r\n  LogoutResponse,\r\n  RegisterApiRequest,\r\n  RegisterApiResponse,\r\n  RegisterRequest,\r\n  RegisterResponse,\r\n  ResendVerificationRequest,\r\n  ResendVerificationResponse,\r\n  ResetPasswordRequest,\r\n  ResetPasswordResponse,\r\n  SessionKeepRequest,\r\n  SessionKeepResponse,\r\n  TwoFactorApiResponse,\r\n  TwoFactorRequest,\r\n  TwoFactorResponse,\r\n  VerifyEmailRequest,\r\n  VerifyEmailResponse,\r\n} from \"../schema\";\r\n\r\nconst AUTH_COOKIE_NAME = \"greatapps\";\r\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 30;\r\n\r\nconst COOKIE_OPTIONS = {\r\n  httpOnly: true,\r\n  secure: process.env.NODE_ENV === \"production\",\r\n  sameSite: \"lax\" as const,\r\n  path: \"/\",\r\n  domain: process.env.DOMAIN_COOKIE,\r\n};\r\n\r\nclass AuthService {\r\n  async login(\r\n    credentials: LoginRequest,\r\n    clientInfo: ClientInfo\r\n  ): Promise<LoginResponse> {\r\n    const response = await apiClient.post<LoginApiResponse>(\"/auth/login\", {\r\n      email: credentials.email,\r\n      password: credentials.password,\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n    });\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"E-mail ou senha incorretos\",\r\n        response.code || \"LOGIN_FAILED\",\r\n        401\r\n      );\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    if (response.two_factor_required) {\r\n      return { twoFactorRequired: true, cookie: response.cookie };\r\n    }\r\n\r\n    await this.setAuthCookie(response.cookie);\r\n\r\n    return {\r\n      user: {} as User,\r\n      accessToken: response.cookie,\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n    };\r\n  }\r\n\r\n  async verifyTwoFactor(\r\n    cookie: string,\r\n    code: number,\r\n    clientInfo: ClientInfo\r\n  ): Promise<TwoFactorResponse> {\r\n    const payload: TwoFactorRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n      code,\r\n    };\r\n\r\n    const response = await apiClient.post<TwoFactorApiResponse>(\r\n      \"/auth/code\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"Código 2FA inválido\",\r\n        response.code || \"TWO_FACTOR_FAILED\",\r\n        401\r\n      );\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida após 2FA\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    await this.setAuthCookie(response.cookie);\r\n\r\n    return { success: true };\r\n  }\r\n  async register(data: RegisterRequest): Promise<RegisterResponse> {\r\n    const today = new Date();\r\n    const trialEndDate = new Date(today);\r\n    trialEndDate.setDate(today.getDate() + 7); // 7 dias de trial\r\n\r\n    const payload: RegisterApiRequest = {\r\n      name: data.accountName,\r\n      bussiness_type: data.businessType,\r\n      language: \"pt-br\",\r\n      timezone: \"America/Sao_Paulo\",\r\n      currency: \"BRL\",\r\n      user: {\r\n        id_api: \"\",\r\n        name: data.name,\r\n        last_name: data.lastName || \"\",\r\n        rg: data.rg || \"\",\r\n        cpf: data.cpf || \"\",\r\n        gender: data.gender,\r\n        email: data.email,\r\n        phone: data.phone,\r\n        password: data.password,\r\n        profile: \"owner\",\r\n        language: \"pt-br\",\r\n      },\r\n      subscription: {\r\n        type: \"trial\",\r\n        id_cupom: \"\",\r\n        id_plan: 1,\r\n        due_date: trialEndDate.toISOString().split(\"T\")[0],\r\n        id_product: 1,\r\n      },\r\n    };\r\n\r\n    const response = await apiClient.post<RegisterApiResponse>(\r\n      \"/accounts\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"Erro ao criar conta\",\r\n        \"REGISTER_FAILED\",\r\n        400\r\n      );\r\n    }\r\n\r\n    if (!response.data || response.data.length === 0) {\r\n      throw new ApiError(\r\n        \"Resposta de registro inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    const accountData = response.data[0];\r\n\r\n    // Retornar sem token pois o registro não retorna cookie diretamente\r\n    // O usuário precisará fazer login após o registro\r\n    // O usuário completo será carregado após o login\r\n    return {\r\n      user: {} as User, // Placeholder, será preenchido após login\r\n      accessToken: \"\",\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n      requiresEmailVerification: !accountData.verified,\r\n    };\r\n  }\r\n\r\n  async logout(clientInfo: ClientInfo): Promise<LogoutResponse> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      throw new ApiError(\r\n        \"Usuário não autenticado\",\r\n        \"NOT_AUTHENTICATED_LOGOUT\",\r\n        401\r\n      );\r\n    }\r\n\r\n    const payload: LogoutRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n    };\r\n\r\n    try {\r\n      const response = await apiClient.post<LogoutApiResponse>(\r\n        \"/auth/logout\",\r\n        payload\r\n      );\r\n\r\n      if (response.status === 0) {\r\n        throw new ApiError(\r\n          response.message || \"Erro ao realizar logout\",\r\n          response.code || \"LOGOUT_FAILED\",\r\n          400\r\n        );\r\n      }\r\n    } finally {\r\n      await Promise.all([this.removeAuthCookie(), removePending2FACookie()]);\r\n    }\r\n\r\n    return {\r\n      success: true,\r\n    };\r\n  }\r\n\r\n  async forgotPassword(\r\n    _data: ForgotPasswordRequest\r\n  ): Promise<ForgotPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Recuperação de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resetPassword(\r\n    _data: ResetPasswordRequest\r\n  ): Promise<ResetPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Redefinição de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async verifyEmail(_data: VerifyEmailRequest): Promise<VerifyEmailResponse> {\r\n    throw new ApiError(\r\n      \"Verificação de email não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resendVerification(\r\n    _data: ResendVerificationRequest\r\n  ): Promise<ResendVerificationResponse> {\r\n    throw new ApiError(\r\n      \"Reenvio de verificação não implementado\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async validateSession(clientInfo: ClientInfo): Promise<boolean> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      return false;\r\n    }\r\n\r\n    try {\r\n      const payload: SessionKeepRequest = {\r\n        location: clientInfo.location,\r\n        ip: clientInfo.ip,\r\n        timezone: clientInfo.timezone,\r\n        agent: clientInfo.agent,\r\n        cookie,\r\n      };\r\n\r\n      const response = await apiClient.post<SessionKeepResponse>(\r\n        \"/auth/keep\",\r\n        payload\r\n      );\r\n\r\n      return response.status === 1;\r\n    } catch (error) {\r\n      console.error(\"[AuthService] validateSession error\", error);\r\n      return false;\r\n    }\r\n  }\r\n\r\n  async isAuthenticated(): Promise<boolean> {\r\n    const token = await this.getToken();\r\n    return !!token;\r\n  }\r\n\r\n  async getToken(): Promise<string | undefined> {\r\n    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;\r\n    const cookieStore = await cookies();\r\n    return cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n  }\r\n\r\n  private async setAuthCookie(token: string): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    cookieStore.set(AUTH_COOKIE_NAME, token, {\r\n      ...COOKIE_OPTIONS,\r\n      maxAge: COOKIE_MAX_AGE,\r\n    });\r\n  }\r\n\r\n  async removeAuthCookie(): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    cookieStore.delete({\r\n      name: AUTH_COOKIE_NAME,\r\n      ...COOKIE_OPTIONS,\r\n    });\r\n  }\r\n}\r\n\r\nexport const authService = new AuthService();\r\n\r\nexport type { ClientInfo, GeoLocation };\r\n"],"mappings":"AAAA,SAAS,eAAe;AAExB,SAAS,iBAAiB;AAC1B,SAAS,gBAAgB;AA8BzB,MAAM,mBAAmB;AACzB,MAAM,iBAAiB,KAAK,KAAK,KAAK;AAEtC,MAAM,iBAAiB;AAAA,EACrB,UAAU;AAAA,EACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ,QAAQ,IAAI;AACtB;AAEA,MAAM,YAAY;AAAA,EAChB,MAAM,MACJ,aACA,YACwB;AACxB,UAAM,WAAW,MAAM,UAAU,KAAuB,eAAe;AAAA,MACrE,OAAO,YAAY;AAAA,MACnB,UAAU,YAAY;AAAA,MACtB,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,IACpB,CAAC;AAED,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS,qBAAqB;AAChC,aAAO,EAAE,mBAAmB,MAAM,QAAQ,SAAS,OAAO;AAAA,IAC5D;AAEA,UAAM,KAAK,cAAc,SAAS,MAAM;AAExC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,aAAa,SAAS;AAAA,MACtB,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAM,gBACJ,QACA,MACA,YAC4B;AAC5B,UAAM,UAA4B;AAAA,MAChC,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,UAAU;AAAA,MAC/B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,KAAK,cAAc,SAAS,MAAM;AAExC,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAAA,EACA,MAAM,SAAS,MAAkD;AAC/D,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,eAAe,IAAI,KAAK,KAAK;AACnC,iBAAa,QAAQ,MAAM,QAAQ,IAAI,CAAC;AAExC,UAAM,UAA8B;AAAA,MAClC,MAAM,KAAK;AAAA,MACX,gBAAgB,KAAK;AAAA,MACrB,UAAU;AAAA,MACV,UAAU;AAAA,MACV,UAAU;AAAA,MACV,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,WAAW,KAAK,YAAY;AAAA,QAC5B,IAAI,KAAK,MAAM;AAAA,QACf,KAAK,KAAK,OAAO;AAAA,QACjB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA,QACf,SAAS;AAAA,QACT,UAAU;AAAA,MACZ;AAAA,MACA,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU,aAAa,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,QACjD,YAAY;AAAA,MACd;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,UAAU;AAAA,MAC/B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ,SAAS,KAAK,WAAW,GAAG;AAChD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,cAAc,SAAS,KAAK,CAAC;AAKnC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,MACpE,2BAA2B,CAAC,YAAY;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,YAAiD;AAC5D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAyB;AAAA,MAC7B,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,UAAU;AAAA,QAC/B;AAAA,QACA;AAAA,MACF;AAEA,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,IAAI;AAAA,UACR,SAAS,WAAW;AAAA,UACpB,SAAS,QAAQ;AAAA,UACjB;AAAA,QACF;AAAA,MACF;AAAA,IACF,UAAE;AACA,YAAM,QAAQ,IAAI,CAAC,KAAK,iBAAiB,GAAG,uBAAuB,CAAC,CAAC;AAAA,IACvE;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EAEA,MAAM,eACJ,OACiC;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,OACgC;AAChC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,OAAyD;AACzE,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBACJ,OACqC;AACrC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,YAA0C;AAC9D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,UAA8B;AAAA,QAClC,UAAU,WAAW;AAAA,QACrB,IAAI,WAAW;AAAA,QACf,UAAU,WAAW;AAAA,QACrB,OAAO,WAAW;AAAA,QAClB;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,UAAU;AAAA,QAC/B;AAAA,QACA;AAAA,MACF;AAEA,aAAO,SAAS,WAAW;AAAA,IAC7B,SAAS,OAAO;AACd,cAAQ,MAAM,uCAAuC,KAAK;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,kBAAoC;AACxC,UAAM,QAAQ,MAAM,KAAK,SAAS;AAClC,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,WAAwC;AAC5C,QAAI,QAAQ,IAAI,iBAAkB,QAAO,QAAQ,IAAI;AACrD,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,gBAAgB,GAAG;AAAA,EAC5C;AAAA,EAEA,MAAc,cAAc,OAA8B;AACxD,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,IAAI,kBAAkB,OAAO;AAAA,MACvC,GAAG;AAAA,MACH,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,mBAAkC;AACtC,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,OAAO;AAAA,MACjB,MAAM;AAAA,MACN,GAAG;AAAA,IACL,CAAC;AAAA,EACH;AACF;AAEO,MAAM,cAAc,IAAI,YAAY;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greatapps/common",
-  "version": "1.1.56",
+  "version": "1.1.57",
   "description": "Shared library for GreatApps frontend applications",
   "main": "./dist/index.mjs",
   "types": "./src/index.ts",

package/src/modules/auth/schema.ts

@@ -17,7 +17,7 @@ export interface LoginApiResponse {
 }
 
 export type LoginResponse =
-  | { twoFactorRequired: true }
+  | { twoFactorRequired: true, cookie: string }
   | { twoFactorRequired?: false; user: User; accessToken: string; refreshToken: string; expiresAt: string };
 
 export interface TwoFactorRequest {

package/src/modules/auth/services/auth.service.ts

@@ -32,9 +32,7 @@ import {
 } from "../schema";
 
 const AUTH_COOKIE_NAME = "greatapps";
-const PENDING_2FA_COOKIE_NAME = "greatapps_2fa_pending";
 const COOKIE_MAX_AGE = 60 * 60 * 24 * 30;
-const PENDING_2FA_MAX_AGE = 60 * 10; // 10 minutos para completar o 2FA
 
 const COOKIE_OPTIONS = {
   httpOnly: true,
@@ -44,24 +42,6 @@ const COOKIE_OPTIONS = {
   domain: process.env.DOMAIN_COOKIE,
 };
 
-async function setPending2FACookie(token: string): Promise<void> {
-  const cookieStore = await cookies();
-  cookieStore.set(PENDING_2FA_COOKIE_NAME, token, {
-    ...COOKIE_OPTIONS,
-    maxAge: PENDING_2FA_MAX_AGE,
-  });
-}
-
-async function removePending2FACookie(): Promise<void> {
-  const cookieStore = await cookies();
-  cookieStore.delete({ name: PENDING_2FA_COOKIE_NAME, ...COOKIE_OPTIONS });
-}
-
-async function getPending2FACookie(): Promise<string | undefined> {
-  const cookieStore = await cookies();
-  return cookieStore.get(PENDING_2FA_COOKIE_NAME)?.value;
-}
-
 class AuthService {
   async login(
     credentials: LoginRequest,
@@ -93,8 +73,7 @@ class AuthService {
     }
 
     if (response.two_factor_required) {
-      await setPending2FACookie(response.cookie);
-      return { twoFactorRequired: true };
+      return { twoFactorRequired: true, cookie: response.cookie };
     }
 
     await this.setAuthCookie(response.cookie);
@@ -108,25 +87,16 @@ class AuthService {
   }
 
   async verifyTwoFactor(
+    cookie: string,
     code: number,
     clientInfo: ClientInfo
   ): Promise<TwoFactorResponse> {
-    const pendingCookie = await getPending2FACookie();
-
-    if (!pendingCookie) {
-      throw new ApiError(
-        "Nenhuma autenticação 2FA pendente",
-        "NO_PENDING_2FA",
-        400
-      );
-    }
-
     const payload: TwoFactorRequest = {
       location: clientInfo.location,
       ip: clientInfo.ip,
       timezone: clientInfo.timezone,
       agent: clientInfo.agent,
-      cookie: pendingCookie,
+      cookie,
       code,
     };
 
@@ -151,19 +121,10 @@ class AuthService {
       );
     }
 
-    await Promise.all([
-      this.setAuthCookie(response.cookie),
-      removePending2FACookie(),
-    ]);
+    await this.setAuthCookie(response.cookie);
 
     return { success: true };
   }
-
-  async isTwoFactorPending(): Promise<boolean> {
-    const pending = await getPending2FACookie();
-    return !!pending;
-  }
-
   async register(data: RegisterRequest): Promise<RegisterResponse> {
     const today = new Date();
     const trialEndDate = new Date(today);