@greatapps/common 1.1.588 → 1.1.591

package/dist/modules/auth/utils/require-token-not-expired.mjs

@@ -0,0 +1,26 @@
+import "server-only";
+import { cookies } from "next/headers";
+import { ApiError } from "../../../infra/api/types";
+const AUTH_COOKIE_NAME = "greatapps";
+async function requireTokenNotExpired() {
+  if (process.env.DUMMY_AUTH_TOKEN) return;
+  const cookieStore = await cookies();
+  const token = cookieStore.get(AUTH_COOKIE_NAME)?.value;
+  if (!token) {
+    throw new ApiError("Sess\xE3o inv\xE1lida ou expirada", "SESSION_INVALID", 401);
+  }
+  try {
+    const payload = JSON.parse(atob(token.split(".")[1]));
+    const now = Math.floor(Date.now() / 1e3);
+    if (!payload.exp || payload.exp <= now) {
+      throw new ApiError("Sess\xE3o inv\xE1lida ou expirada", "SESSION_INVALID", 401);
+    }
+  } catch (err) {
+    if (err instanceof ApiError) throw err;
+    throw new ApiError("Sess\xE3o inv\xE1lida ou expirada", "SESSION_INVALID", 401);
+  }
+}
+export {
+  requireTokenNotExpired
+};
+//# sourceMappingURL=require-token-not-expired.mjs.map

package/dist/modules/auth/utils/require-token-not-expired.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/modules/auth/utils/require-token-not-expired.ts"],"sourcesContent":["import 'server-only';\n\nimport { cookies } from 'next/headers';\nimport { ApiError } from '../../../infra/api/types';\n\nconst AUTH_COOKIE_NAME = 'greatapps';\n\n/**\n * Verifica se o JWT do cookie `greatapps` não expirou checando o campo `exp`\n * no payload, sem bater no backend.\n *\n * - Se o token não existe → SESSION_INVALID 401\n * - Se o token é malformado → SESSION_INVALID 401\n * - Se `exp` não existe ou já passou → SESSION_INVALID 401\n *\n * Isso substitui o `requireValidSession` (que fazia POST /auth/keep) no\n * `safeMutationAction`, eliminando 1 round-trip ao backend por mutation.\n */\nexport async function requireTokenNotExpired(): Promise<void> {\n  if (process.env.DUMMY_AUTH_TOKEN) return;\n\n  const cookieStore = await cookies();\n  const token = cookieStore.get(AUTH_COOKIE_NAME)?.value;\n\n  if (!token) {\n    throw new ApiError('Sessão inválida ou expirada', 'SESSION_INVALID', 401);\n  }\n\n  try {\n    const payload = JSON.parse(atob(token.split('.')[1]));\n    const now = Math.floor(Date.now() / 1000);\n\n    if (!payload.exp || payload.exp <= now) {\n      throw new ApiError('Sessão inválida ou expirada', 'SESSION_INVALID', 401);\n    }\n  } catch (err) {\n    if (err instanceof ApiError) throw err;\n    throw new ApiError('Sessão inválida ou expirada', 'SESSION_INVALID', 401);\n  }\n}\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,eAAe;AACxB,SAAS,gBAAgB;AAEzB,MAAM,mBAAmB;AAazB,eAAsB,yBAAwC;AAC5D,MAAI,QAAQ,IAAI,iBAAkB;AAElC,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,QAAQ,YAAY,IAAI,gBAAgB,GAAG;AAEjD,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,SAAS,qCAA+B,mBAAmB,GAAG;AAAA,EAC1E;AAEA,MAAI;AACF,UAAM,UAAU,KAAK,MAAM,KAAK,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AACpD,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAExC,QAAI,CAAC,QAAQ,OAAO,QAAQ,OAAO,KAAK;AACtC,YAAM,IAAI,SAAS,qCAA+B,mBAAmB,GAAG;AAAA,IAC1E;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,eAAe,SAAU,OAAM;AACnC,UAAM,IAAI,SAAS,qCAA+B,mBAAmB,GAAG;AAAA,EAC1E;AACF;","names":[]}

package/dist/modules/whitelabel/services/whitelabel.service.mjs

@@ -27,7 +27,7 @@ class WhitelabelService {
   createCache() {
     return new greatCache({
       service: "whitelabel-service",
-      version: "1.0.2",
+      version: "1.0.3",
       domain: "whitelabel-cache.greatapps.com.br",
       ambient: process.env.NODE_ENV || "development"
     });

package/dist/modules/whitelabel/services/whitelabel.service.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/whitelabel/services/whitelabel.service.ts"],"sourcesContent":["import greatCache from \"@greatapps/cache\";\r\nimport { ApiError } from \"../../../infra/api/types\";\r\nimport { WhitelabelTokenApiResponse, WhitelabelTokenData } from \"../schema\";\r\nimport { normalizeHostname } from \"../utils/normalize-hostname\";\r\n\r\nclass WhitelabelService {\r\n  private getApiUrl(): string {\r\n    const apiUrl = process.env.GAPPS_R3_API_URL;\r\n    if (!apiUrl) {\r\n      throw new ApiError(\r\n        \"GAPPS_R3_API_URL not configured\",\r\n        \"CONFIG_ERROR\",\r\n        500,\r\n      );\r\n    }\r\n    return apiUrl;\r\n  }\r\n\r\n  private getToken(): string {\r\n    const token = process.env.WHITELABEL_TOKEN_MASTER;\r\n    if (!token) {\r\n      throw new ApiError(\r\n        \"WHITELABEL_TOKEN_MASTER not configured\",\r\n        \"CONFIG_ERROR\",\r\n        500,\r\n      );\r\n    }\r\n    return token;\r\n  }\r\n\r\n  private createCache() {\r\n    return new greatCache({\r\n      service: \"whitelabel-service\",\r\n      version: \"1.0.2\",\r\n      domain: \"whitelabel-cache.greatapps.com.br\",\r\n      ambient: process.env.NODE_ENV || \"development\",\r\n    });\r\n  }\r\n\r\n  private getCacheKey(hostname: string): string {\r\n    return `whitelabel-token-${hostname}`;\r\n  }\r\n\r\n  private async fetchFromApi(hostname: string): Promise<WhitelabelTokenData> {\r\n    const apiUrl = this.getApiUrl();\r\n    const whitelabelMasterToken = this.getToken();\r\n    const url = `${apiUrl}/v1/pt-br/1/whitelabel/${hostname}/token`;\r\n\r\n    console.log(\"[WhitelabelService] Fetching token for domain\", { url });\r\n\r\n    const response = await fetch(url, {\r\n      method: \"GET\",\r\n      headers: {\r\n        authorization: whitelabelMasterToken,\r\n      },\r\n    });\r\n\r\n    if (!response.ok) {\r\n      console.error(\"[WhitelabelService] Failed to fetch whitelabel token\", {\r\n        response,\r\n      });\r\n      throw new ApiError(\r\n        `Failed to fetch whitelabel token: ${response.status}`,\r\n        \"FETCH_ERROR\",\r\n        response.status,\r\n      );\r\n    }\r\n\r\n    const result: WhitelabelTokenApiResponse = await response.json();\r\n\r\n    if (result.status !== 1 || !result.data?.length) {\r\n      throw new ApiError(\"Whitelabel token not found\", \"TOKEN_NOT_FOUND\", 404);\r\n    }\r\n\r\n    return result.data[0];\r\n  }\r\n\r\n  async getTokenByDomain(hostname: string): Promise<WhitelabelTokenData> {\r\n    hostname = `${normalizeHostname(process.env.WHITELABEL_DOMAIN || hostname)}`;\r\n    console.debug(\"[WhitelabelService] Getting token for domain\", {\r\n      hostname,\r\n      byEnv: process.env.WHITELABEL_DOMAIN,\r\n    });\r\n\r\n    const cache = this.createCache();\r\n    const cacheKey = this.getCacheKey(hostname);\r\n\r\n    const cachedData = await cache.select(cacheKey);\r\n    console.debug(\"[WhitelabelService] Cache lookup for domain\", {\r\n      cacheKey,\r\n      cachedData,\r\n    });\r\n\r\n    if (cachedData.status == 1 && \"data\" in cachedData && cachedData.data) {\r\n      console.log(\"[WhitelabelService] Cache hit for domain\", { hostname });\r\n      return JSON.parse(cachedData.data) as WhitelabelTokenData;\r\n    }\r\n\r\n    const data = await this.fetchFromApi(hostname);\r\n\r\n    await cache.insert(cacheKey, JSON.stringify(data), 604800);\r\n\r\n    return data;\r\n  }\r\n\r\n  async getTokenByWhitelabelId(idWl: number): Promise<string> {\r\n    const apiUrl = this.getApiUrl();\r\n    const masterToken = this.getToken();\r\n    const url = `${apiUrl}/v1/pt-br/${idWl}/tokens?limit=1&page=1&sort=id:desc`;\r\n    console.debug(\"[WhitelabelService] Fetching token by whitelabel ID\", {\r\n      url,\r\n      config: {\r\n        method: \"GET\",\r\n        headers: { authorization: masterToken },\r\n      },\r\n    });\r\n\r\n    const response = await fetch(url, {\r\n      method: \"GET\",\r\n      headers: { authorization: masterToken },\r\n    });\r\n\r\n    console.debug(\"[WhitelabelService] Response received for whitelabel ID\", {\r\n      response,\r\n    });\r\n\r\n    if (!response.ok) {\r\n      throw new ApiError(\r\n        `Failed to fetch whitelabel token: ${response.status}`,\r\n        \"WL_TOKEN_NOT_FOUND\",\r\n        response.status,\r\n      );\r\n    }\r\n\r\n    const result: WhitelabelTokenApiResponse = await response.json();\r\n\r\n    if (result.status !== 1 || !result.data?.length) {\r\n      throw new ApiError(\r\n        \"Token do whitelabel não encontrado\",\r\n        \"WL_TOKEN_NOT_FOUND\",\r\n        404,\r\n      );\r\n    }\r\n\r\n    return result.data[0].token;\r\n  }\r\n\r\n  async revalidateByDomain(hostname: string): Promise<WhitelabelTokenData> {\r\n    hostname = `${normalizeHostname(process.env.WHITELABEL_DOMAIN || hostname)}`;\r\n    console.debug(\"[WhitelabelService] Getting token for domain\", {\r\n      hostname,\r\n      byEnv: process.env.WHITELABEL_DOMAIN,\r\n    });\r\n\r\n    const cache = this.createCache();\r\n    const cacheKey = this.getCacheKey(hostname);\r\n\r\n    console.log(\"[WhitelabelService] Revalidating cache for domain\", {\r\n      hostname,\r\n      cacheKey,\r\n    });\r\n    \r\n    await cache.delete(cacheKey);\r\n\r\n    const data = await this.fetchFromApi(hostname);\r\n\r\n    await cache.insert(cacheKey, JSON.stringify(data), 604800);\r\n\r\n    console.log(\"[WhitelabelService] Cache revalidated for domain\", {\r\n      hostname,\r\n    });\r\n\r\n    return data;\r\n  }\r\n}\r\n\r\nexport const whitelabelService = new WhitelabelService();\r\n"],"mappings":"AAAA,OAAO,gBAAgB;AACvB,SAAS,gBAAgB;AAEzB,SAAS,yBAAyB;AAElC,MAAM,kBAAkB;AAAA,EACd,YAAoB;AAC1B,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,WAAmB;AACzB,UAAM,QAAQ,QAAQ,IAAI;AAC1B,QAAI,CAAC,OAAO;AACV,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc;AACpB,WAAO,IAAI,WAAW;AAAA,MACpB,SAAS;AAAA,MACT,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,SAAS,QAAQ,IAAI,YAAY;AAAA,IACnC,CAAC;AAAA,EACH;AAAA,EAEQ,YAAY,UAA0B;AAC5C,WAAO,oBAAoB,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAc,aAAa,UAAgD;AACzE,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,wBAAwB,KAAK,SAAS;AAC5C,UAAM,MAAM,GAAG,MAAM,0BAA0B,QAAQ;AAEvD,YAAQ,IAAI,iDAAiD,EAAE,IAAI,CAAC;AAEpE,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,cAAQ,MAAM,wDAAwD;AAAA,QACpE;AAAA,MACF,CAAC;AACD,YAAM,IAAI;AAAA,QACR,qCAAqC,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,SAAqC,MAAM,SAAS,KAAK;AAE/D,QAAI,OAAO,WAAW,KAAK,CAAC,OAAO,MAAM,QAAQ;AAC/C,YAAM,IAAI,SAAS,8BAA8B,mBAAmB,GAAG;AAAA,IACzE;AAEA,WAAO,OAAO,KAAK,CAAC;AAAA,EACtB;AAAA,EAEA,MAAM,iBAAiB,UAAgD;AACrE,eAAW,GAAG,kBAAkB,QAAQ,IAAI,qBAAqB,QAAQ,CAAC;AAC1E,YAAQ,MAAM,gDAAgD;AAAA,MAC5D;AAAA,MACA,OAAO,QAAQ,IAAI;AAAA,IACrB,CAAC;AAED,UAAM,QAAQ,KAAK,YAAY;AAC/B,UAAM,WAAW,KAAK,YAAY,QAAQ;AAE1C,UAAM,aAAa,MAAM,MAAM,OAAO,QAAQ;AAC9C,YAAQ,MAAM,+CAA+C;AAAA,MAC3D;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,WAAW,UAAU,KAAK,UAAU,cAAc,WAAW,MAAM;AACrE,cAAQ,IAAI,4CAA4C,EAAE,SAAS,CAAC;AACpE,aAAO,KAAK,MAAM,WAAW,IAAI;AAAA,IACnC;AAEA,UAAM,OAAO,MAAM,KAAK,aAAa,QAAQ;AAE7C,UAAM,MAAM,OAAO,UAAU,KAAK,UAAU,IAAI,GAAG,MAAM;AAEzD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,uBAAuB,MAA+B;AAC1D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,cAAc,KAAK,SAAS;AAClC,UAAM,MAAM,GAAG,MAAM,aAAa,IAAI;AACtC,YAAQ,MAAM,uDAAuD;AAAA,MACnE;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,YAAY;AAAA,MACxC;AAAA,IACF,CAAC;AAED,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS,EAAE,eAAe,YAAY;AAAA,IACxC,CAAC;AAED,YAAQ,MAAM,2DAA2D;AAAA,MACvE;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,qCAAqC,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,SAAqC,MAAM,SAAS,KAAK;AAE/D,QAAI,OAAO,WAAW,KAAK,CAAC,OAAO,MAAM,QAAQ;AAC/C,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,OAAO,KAAK,CAAC,EAAE;AAAA,EACxB;AAAA,EAEA,MAAM,mBAAmB,UAAgD;AACvE,eAAW,GAAG,kBAAkB,QAAQ,IAAI,qBAAqB,QAAQ,CAAC;AAC1E,YAAQ,MAAM,gDAAgD;AAAA,MAC5D;AAAA,MACA,OAAO,QAAQ,IAAI;AAAA,IACrB,CAAC;AAED,UAAM,QAAQ,KAAK,YAAY;AAC/B,UAAM,WAAW,KAAK,YAAY,QAAQ;AAE1C,YAAQ,IAAI,qDAAqD;AAAA,MAC/D;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,MAAM,OAAO,QAAQ;AAE3B,UAAM,OAAO,MAAM,KAAK,aAAa,QAAQ;AAE7C,UAAM,MAAM,OAAO,UAAU,KAAK,UAAU,IAAI,GAAG,MAAM;AAEzD,YAAQ,IAAI,oDAAoD;AAAA,MAC9D;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AACF;AAEO,MAAM,oBAAoB,IAAI,kBAAkB;","names":[]}
+{"version":3,"sources":["../../../../src/modules/whitelabel/services/whitelabel.service.ts"],"sourcesContent":["import greatCache from \"@greatapps/cache\";\r\nimport { ApiError } from \"../../../infra/api/types\";\r\nimport { WhitelabelTokenApiResponse, WhitelabelTokenData } from \"../schema\";\r\nimport { normalizeHostname } from \"../utils/normalize-hostname\";\r\n\r\nclass WhitelabelService {\r\n  private getApiUrl(): string {\r\n    const apiUrl = process.env.GAPPS_R3_API_URL;\r\n    if (!apiUrl) {\r\n      throw new ApiError(\r\n        \"GAPPS_R3_API_URL not configured\",\r\n        \"CONFIG_ERROR\",\r\n        500,\r\n      );\r\n    }\r\n    return apiUrl;\r\n  }\r\n\r\n  private getToken(): string {\r\n    const token = process.env.WHITELABEL_TOKEN_MASTER;\r\n    if (!token) {\r\n      throw new ApiError(\r\n        \"WHITELABEL_TOKEN_MASTER not configured\",\r\n        \"CONFIG_ERROR\",\r\n        500,\r\n      );\r\n    }\r\n    return token;\r\n  }\r\n\r\n  private createCache() {\r\n    return new greatCache({\r\n      service: \"whitelabel-service\",\r\n      version: \"1.0.3\",\r\n      domain: \"whitelabel-cache.greatapps.com.br\",\r\n      ambient: process.env.NODE_ENV || \"development\",\r\n    });\r\n  }\r\n\r\n  private getCacheKey(hostname: string): string {\r\n    return `whitelabel-token-${hostname}`;\r\n  }\r\n\r\n  private async fetchFromApi(hostname: string): Promise<WhitelabelTokenData> {\r\n    const apiUrl = this.getApiUrl();\r\n    const whitelabelMasterToken = this.getToken();\r\n    const url = `${apiUrl}/v1/pt-br/1/whitelabel/${hostname}/token`;\r\n\r\n    console.log(\"[WhitelabelService] Fetching token for domain\", { url });\r\n\r\n    const response = await fetch(url, {\r\n      method: \"GET\",\r\n      headers: {\r\n        authorization: whitelabelMasterToken,\r\n      },\r\n    });\r\n\r\n    if (!response.ok) {\r\n      console.error(\"[WhitelabelService] Failed to fetch whitelabel token\", {\r\n        response,\r\n      });\r\n      throw new ApiError(\r\n        `Failed to fetch whitelabel token: ${response.status}`,\r\n        \"FETCH_ERROR\",\r\n        response.status,\r\n      );\r\n    }\r\n\r\n    const result: WhitelabelTokenApiResponse = await response.json();\r\n\r\n    if (result.status !== 1 || !result.data?.length) {\r\n      throw new ApiError(\"Whitelabel token not found\", \"TOKEN_NOT_FOUND\", 404);\r\n    }\r\n\r\n    return result.data[0];\r\n  }\r\n\r\n  async getTokenByDomain(hostname: string): Promise<WhitelabelTokenData> {\r\n    hostname = `${normalizeHostname(process.env.WHITELABEL_DOMAIN || hostname)}`;\r\n    console.debug(\"[WhitelabelService] Getting token for domain\", {\r\n      hostname,\r\n      byEnv: process.env.WHITELABEL_DOMAIN,\r\n    });\r\n\r\n    const cache = this.createCache();\r\n    const cacheKey = this.getCacheKey(hostname);\r\n\r\n    const cachedData = await cache.select(cacheKey);\r\n    console.debug(\"[WhitelabelService] Cache lookup for domain\", {\r\n      cacheKey,\r\n      cachedData,\r\n    });\r\n\r\n    if (cachedData.status == 1 && \"data\" in cachedData && cachedData.data) {\r\n      console.log(\"[WhitelabelService] Cache hit for domain\", { hostname });\r\n      return JSON.parse(cachedData.data) as WhitelabelTokenData;\r\n    }\r\n\r\n    const data = await this.fetchFromApi(hostname);\r\n\r\n    await cache.insert(cacheKey, JSON.stringify(data), 604800);\r\n\r\n    return data;\r\n  }\r\n\r\n  async getTokenByWhitelabelId(idWl: number): Promise<string> {\r\n    const apiUrl = this.getApiUrl();\r\n    const masterToken = this.getToken();\r\n    const url = `${apiUrl}/v1/pt-br/${idWl}/tokens?limit=1&page=1&sort=id:desc`;\r\n    console.debug(\"[WhitelabelService] Fetching token by whitelabel ID\", {\r\n      url,\r\n      config: {\r\n        method: \"GET\",\r\n        headers: { authorization: masterToken },\r\n      },\r\n    });\r\n\r\n    const response = await fetch(url, {\r\n      method: \"GET\",\r\n      headers: { authorization: masterToken },\r\n    });\r\n\r\n    console.debug(\"[WhitelabelService] Response received for whitelabel ID\", {\r\n      response,\r\n    });\r\n\r\n    if (!response.ok) {\r\n      throw new ApiError(\r\n        `Failed to fetch whitelabel token: ${response.status}`,\r\n        \"WL_TOKEN_NOT_FOUND\",\r\n        response.status,\r\n      );\r\n    }\r\n\r\n    const result: WhitelabelTokenApiResponse = await response.json();\r\n\r\n    if (result.status !== 1 || !result.data?.length) {\r\n      throw new ApiError(\r\n        \"Token do whitelabel não encontrado\",\r\n        \"WL_TOKEN_NOT_FOUND\",\r\n        404,\r\n      );\r\n    }\r\n\r\n    return result.data[0].token;\r\n  }\r\n\r\n  async revalidateByDomain(hostname: string): Promise<WhitelabelTokenData> {\r\n    hostname = `${normalizeHostname(process.env.WHITELABEL_DOMAIN || hostname)}`;\r\n    console.debug(\"[WhitelabelService] Getting token for domain\", {\r\n      hostname,\r\n      byEnv: process.env.WHITELABEL_DOMAIN,\r\n    });\r\n\r\n    const cache = this.createCache();\r\n    const cacheKey = this.getCacheKey(hostname);\r\n\r\n    console.log(\"[WhitelabelService] Revalidating cache for domain\", {\r\n      hostname,\r\n      cacheKey,\r\n    });\r\n    \r\n    await cache.delete(cacheKey);\r\n\r\n    const data = await this.fetchFromApi(hostname);\r\n\r\n    await cache.insert(cacheKey, JSON.stringify(data), 604800);\r\n\r\n    console.log(\"[WhitelabelService] Cache revalidated for domain\", {\r\n      hostname,\r\n    });\r\n\r\n    return data;\r\n  }\r\n}\r\n\r\nexport const whitelabelService = new WhitelabelService();\r\n"],"mappings":"AAAA,OAAO,gBAAgB;AACvB,SAAS,gBAAgB;AAEzB,SAAS,yBAAyB;AAElC,MAAM,kBAAkB;AAAA,EACd,YAAoB;AAC1B,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,WAAmB;AACzB,UAAM,QAAQ,QAAQ,IAAI;AAC1B,QAAI,CAAC,OAAO;AACV,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc;AACpB,WAAO,IAAI,WAAW;AAAA,MACpB,SAAS;AAAA,MACT,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,SAAS,QAAQ,IAAI,YAAY;AAAA,IACnC,CAAC;AAAA,EACH;AAAA,EAEQ,YAAY,UAA0B;AAC5C,WAAO,oBAAoB,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAc,aAAa,UAAgD;AACzE,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,wBAAwB,KAAK,SAAS;AAC5C,UAAM,MAAM,GAAG,MAAM,0BAA0B,QAAQ;AAEvD,YAAQ,IAAI,iDAAiD,EAAE,IAAI,CAAC;AAEpE,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,cAAQ,MAAM,wDAAwD;AAAA,QACpE;AAAA,MACF,CAAC;AACD,YAAM,IAAI;AAAA,QACR,qCAAqC,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,SAAqC,MAAM,SAAS,KAAK;AAE/D,QAAI,OAAO,WAAW,KAAK,CAAC,OAAO,MAAM,QAAQ;AAC/C,YAAM,IAAI,SAAS,8BAA8B,mBAAmB,GAAG;AAAA,IACzE;AAEA,WAAO,OAAO,KAAK,CAAC;AAAA,EACtB;AAAA,EAEA,MAAM,iBAAiB,UAAgD;AACrE,eAAW,GAAG,kBAAkB,QAAQ,IAAI,qBAAqB,QAAQ,CAAC;AAC1E,YAAQ,MAAM,gDAAgD;AAAA,MAC5D;AAAA,MACA,OAAO,QAAQ,IAAI;AAAA,IACrB,CAAC;AAED,UAAM,QAAQ,KAAK,YAAY;AAC/B,UAAM,WAAW,KAAK,YAAY,QAAQ;AAE1C,UAAM,aAAa,MAAM,MAAM,OAAO,QAAQ;AAC9C,YAAQ,MAAM,+CAA+C;AAAA,MAC3D;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,WAAW,UAAU,KAAK,UAAU,cAAc,WAAW,MAAM;AACrE,cAAQ,IAAI,4CAA4C,EAAE,SAAS,CAAC;AACpE,aAAO,KAAK,MAAM,WAAW,IAAI;AAAA,IACnC;AAEA,UAAM,OAAO,MAAM,KAAK,aAAa,QAAQ;AAE7C,UAAM,MAAM,OAAO,UAAU,KAAK,UAAU,IAAI,GAAG,MAAM;AAEzD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,uBAAuB,MAA+B;AAC1D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,cAAc,KAAK,SAAS;AAClC,UAAM,MAAM,GAAG,MAAM,aAAa,IAAI;AACtC,YAAQ,MAAM,uDAAuD;AAAA,MACnE;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,YAAY;AAAA,MACxC;AAAA,IACF,CAAC;AAED,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS,EAAE,eAAe,YAAY;AAAA,IACxC,CAAC;AAED,YAAQ,MAAM,2DAA2D;AAAA,MACvE;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,qCAAqC,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,SAAqC,MAAM,SAAS,KAAK;AAE/D,QAAI,OAAO,WAAW,KAAK,CAAC,OAAO,MAAM,QAAQ;AAC/C,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,OAAO,KAAK,CAAC,EAAE;AAAA,EACxB;AAAA,EAEA,MAAM,mBAAmB,UAAgD;AACvE,eAAW,GAAG,kBAAkB,QAAQ,IAAI,qBAAqB,QAAQ,CAAC;AAC1E,YAAQ,MAAM,gDAAgD;AAAA,MAC5D;AAAA,MACA,OAAO,QAAQ,IAAI;AAAA,IACrB,CAAC;AAED,UAAM,QAAQ,KAAK,YAAY;AAC/B,UAAM,WAAW,KAAK,YAAY,QAAQ;AAE1C,YAAQ,IAAI,qDAAqD;AAAA,MAC/D;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,MAAM,OAAO,QAAQ;AAE3B,UAAM,OAAO,MAAM,KAAK,aAAa,QAAQ;AAE7C,UAAM,MAAM,OAAO,UAAU,KAAK,UAAU,IAAI,GAAG,MAAM;AAEzD,YAAQ,IAAI,oDAAoD;AAAA,MAC9D;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AACF;AAEO,MAAM,oBAAoB,IAAI,kBAAkB;","names":[]}

package/dist/server.mjs

@@ -61,6 +61,7 @@ import {
 import { getClientInfoFromRequest } from "./infra/utils/client-info";
 import { getUserContext } from "./modules/auth/utils/get-user-context";
 import { requireValidSession } from "./modules/auth/utils/require-valid-session";
+import { requireTokenNotExpired } from "./modules/auth/utils/require-token-not-expired";
 import { buildWlOverride, buildWlOverrideFromJwt } from "./modules/auth/utils/build-wl-override";
 import { safeServerAction } from "./utils/safeServerAction";
 import { safeMutationAction } from "./utils/safeMutationAction";
@@ -120,6 +121,7 @@ export {
   removeProjectUserAction,
   requestEmailChangeAction,
   requestPhoneChangeAction,
+  requireTokenNotExpired,
   requireValidSession,
   resolvePlanExtrasPrices,
   revalidateWhitelabelAction,

package/dist/server.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import 'server-only';\r\n\r\n// API Client\r\nexport { ApiClient, api, apiClient } from './infra/api/client';\r\n\r\n// Services\r\nexport { authService } from './modules/auth/services/auth.service';\r\nexport { whitelabelService } from './modules/whitelabel/services/whitelabel.service';\r\nexport { revalidateWhitelabelAction } from './modules/whitelabel/actions/revalidate-whitelabel.action';\r\nexport { assertManagementPermission } from './modules/auth/utils/assert-management-permission';\r\nexport { assertManagementSubscription } from './modules/auth/utils/assert-management-subscription';\r\nexport { assertSubscriptionAddon } from './modules/auth/utils/assert-subscription-addon';\r\nexport { assertPaidSubscription } from './modules/auth/utils/assert-paid-subscription';\r\nexport { subscriptionsService } from './modules/subscriptions/services/subscriptions.service';\r\nexport { plansService } from './modules/plans/services/plans.service';\r\nexport { cardsService } from './modules/cards/services/cards.service';\r\nexport { iaCreditsService } from './modules/ia-credits/services/ia-credits.service';\r\n\r\n// Actions\r\nexport { findWhitelabel } from './modules/whitelabel/actions/find-whitelabel.action';\r\nexport { validateSessionAction } from './modules/auth/actions/validate-session.action';\r\nexport { findUserById } from './modules/users/action/find-user-by-id.action';\r\nexport { findCurrentAccount } from './modules/accounts/actions/find-current-account.action';\r\nexport { getAccountTokenAction } from './modules/accounts/actions/get-account-token.action';\r\nexport { listSubscriptionsAction } from './modules/subscriptions/actions/list-subscriptions.action';\r\nexport { findPlanByIdAction } from './modules/plans/actions/find-plan-by-id.action';\r\nexport { listPlansAction } from './modules/plans/actions/list-plans.action';\r\nexport { calculateSubscriptionAction } from './modules/subscriptions/actions/calculate-subscription.action';\r\nexport { updateSubscriptionPlanAction } from './modules/subscriptions/actions/update-subscription-plan.action';\r\nexport { updateSubscriptionPaymentAction } from './modules/subscriptions/actions/update-subscription-payment.action';\r\nexport { listCardsAction } from './modules/cards/actions/list-cards.action';\r\nexport { createCardAction } from './modules/cards/actions/create-card.action';\r\nexport { resolvePlanExtrasPrices } from './modules/subscriptions/utils/resolve-plan-extras-prices';\r\nexport { hasSubscriptionExpired } from './modules/subscriptions/utils/has-subscription-expired';\r\nexport { listIaCreditsAction } from './modules/ia-credits/actions/list-ia-credits.action';\r\nexport { countPagesAction } from './modules/pages/actions/count-pages.action';\r\n\r\n// Project Services & Actions (server-only)\r\nexport { projectsService } from './modules/projects/services/projects.service';\r\nexport { listProjectsAction } from './modules/projects/actions/list-projects.action';\r\nexport { findProjectAction } from './modules/projects/actions/find-project.action';\r\nexport { createProjectAction } from './modules/projects/actions/create-project.action';\r\nexport { updateProjectAction } from './modules/projects/actions/update-project.action';\r\nexport { deleteProjectAction } from './modules/projects/actions/delete-project.action';\r\n\r\n// Project Users Services & Actions (server-only)\r\nexport { projectUsersService } from './modules/projects/services/project-users.service';\r\nexport { listProjectUsersAction } from './modules/projects/actions/list-project-users.action';\r\nexport { listAvailableUsersAction } from './modules/projects/actions/list-available-users.action';\r\nexport { addProjectUserAction } from './modules/projects/actions/add-project-user.action';\r\nexport { removeProjectUserAction } from './modules/projects/actions/remove-project-user.action';\r\n\r\n// Account Services & Actions (server-only)\r\nexport { accountService } from './modules/accounts/services/account.service';\r\nexport { twoFactorService } from './modules/accounts/services/two-factor.service';\r\nexport {\r\n  listAccountUsersAction,\r\n  updateUserAction,\r\n  updateAccountAction,\r\n  updateAccountUserByIdAction,\r\n  deleteAccountUserAction,\r\n  deleteAccountAction,\r\n  createAccountUserAction,\r\n  changePasswordAction,\r\n  requestEmailChangeAction,\r\n  confirmEmailChangeAction,\r\n  requestPhoneChangeAction,\r\n  confirmPhoneChangeAction,\r\n  generateTwoFactorAction,\r\n  confirmTwoFactorAction,\r\n  disableTwoFactorAction,\r\n} from './modules/accounts/actions/account-management.action';\r\n\r\n// Server Utils\r\nexport { getClientInfoFromRequest } from './infra/utils/client-info';\r\nexport { getUserContext } from './modules/auth/utils/get-user-context';\r\nexport { requireValidSession } from './modules/auth/utils/require-valid-session';\r\nexport { buildWlOverride, buildWlOverrideFromJwt } from './modules/auth/utils/build-wl-override';\r\nexport { safeServerAction } from './utils/safeServerAction';\r\nexport { safeMutationAction } from './utils/safeMutationAction';\r\n\r\n// Image Processing (server-side)\r\nexport { processImageAction } from './modules/images/actions/process-image.action';\r\nexport { processImage } from './modules/images/services/image-processing.service';\r\nexport type {\r\n  ProcessImageInput,\r\n  ProcessImageOutput,\r\n  ProcessImageActionInput,\r\n  ProcessImageActionOutput,\r\n} from './modules/images/types/image.type';\r\n"],"mappings":"AAAA,OAAO;AAGP,SAAS,WAAW,KAAK,iBAAiB;AAG1C,SAAS,mBAAmB;AAC5B,SAAS,yBAAyB;AAClC,SAAS,kCAAkC;AAC3C,SAAS,kCAAkC;AAC3C,SAAS,oCAAoC;AAC7C,SAAS,+BAA+B;AACxC,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AAGjC,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,+BAA+B;AACxC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC,SAAS,mCAAmC;AAC5C,SAAS,oCAAoC;AAC7C,SAAS,uCAAuC;AAChD,SAAS,uBAAuB;AAChC,SAAS,wBAAwB;AACjC,SAAS,+BAA+B;AACxC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,wBAAwB;AAGjC,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AACnC,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AAGpC,SAAS,2BAA2B;AACpC,SAAS,8BAA8B;AACvC,SAAS,gCAAgC;AACzC,SAAS,4BAA4B;AACrC,SAAS,+BAA+B;AAGxC,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,2BAA2B;AACpC,SAAS,iBAAiB,8BAA8B;AACxD,SAAS,wBAAwB;AACjC,SAAS,0BAA0B;AAGnC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;","names":[]}
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import 'server-only';\r\n\r\n// API Client\r\nexport { ApiClient, api, apiClient } from './infra/api/client';\r\n\r\n// Services\r\nexport { authService } from './modules/auth/services/auth.service';\r\nexport { whitelabelService } from './modules/whitelabel/services/whitelabel.service';\r\nexport { revalidateWhitelabelAction } from './modules/whitelabel/actions/revalidate-whitelabel.action';\r\nexport { assertManagementPermission } from './modules/auth/utils/assert-management-permission';\r\nexport { assertManagementSubscription } from './modules/auth/utils/assert-management-subscription';\r\nexport { assertSubscriptionAddon } from './modules/auth/utils/assert-subscription-addon';\r\nexport { assertPaidSubscription } from './modules/auth/utils/assert-paid-subscription';\r\nexport { subscriptionsService } from './modules/subscriptions/services/subscriptions.service';\r\nexport { plansService } from './modules/plans/services/plans.service';\r\nexport { cardsService } from './modules/cards/services/cards.service';\r\nexport { iaCreditsService } from './modules/ia-credits/services/ia-credits.service';\r\n\r\n// Actions\r\nexport { findWhitelabel } from './modules/whitelabel/actions/find-whitelabel.action';\r\nexport { validateSessionAction } from './modules/auth/actions/validate-session.action';\r\nexport { findUserById } from './modules/users/action/find-user-by-id.action';\r\nexport { findCurrentAccount } from './modules/accounts/actions/find-current-account.action';\r\nexport { getAccountTokenAction } from './modules/accounts/actions/get-account-token.action';\r\nexport { listSubscriptionsAction } from './modules/subscriptions/actions/list-subscriptions.action';\r\nexport { findPlanByIdAction } from './modules/plans/actions/find-plan-by-id.action';\r\nexport { listPlansAction } from './modules/plans/actions/list-plans.action';\r\nexport { calculateSubscriptionAction } from './modules/subscriptions/actions/calculate-subscription.action';\r\nexport { updateSubscriptionPlanAction } from './modules/subscriptions/actions/update-subscription-plan.action';\r\nexport { updateSubscriptionPaymentAction } from './modules/subscriptions/actions/update-subscription-payment.action';\r\nexport { listCardsAction } from './modules/cards/actions/list-cards.action';\r\nexport { createCardAction } from './modules/cards/actions/create-card.action';\r\nexport { resolvePlanExtrasPrices } from './modules/subscriptions/utils/resolve-plan-extras-prices';\r\nexport { hasSubscriptionExpired } from './modules/subscriptions/utils/has-subscription-expired';\r\nexport { listIaCreditsAction } from './modules/ia-credits/actions/list-ia-credits.action';\r\nexport { countPagesAction } from './modules/pages/actions/count-pages.action';\r\n\r\n// Project Services & Actions (server-only)\r\nexport { projectsService } from './modules/projects/services/projects.service';\r\nexport { listProjectsAction } from './modules/projects/actions/list-projects.action';\r\nexport { findProjectAction } from './modules/projects/actions/find-project.action';\r\nexport { createProjectAction } from './modules/projects/actions/create-project.action';\r\nexport { updateProjectAction } from './modules/projects/actions/update-project.action';\r\nexport { deleteProjectAction } from './modules/projects/actions/delete-project.action';\r\n\r\n// Project Users Services & Actions (server-only)\r\nexport { projectUsersService } from './modules/projects/services/project-users.service';\r\nexport { listProjectUsersAction } from './modules/projects/actions/list-project-users.action';\r\nexport { listAvailableUsersAction } from './modules/projects/actions/list-available-users.action';\r\nexport { addProjectUserAction } from './modules/projects/actions/add-project-user.action';\r\nexport { removeProjectUserAction } from './modules/projects/actions/remove-project-user.action';\r\n\r\n// Account Services & Actions (server-only)\r\nexport { accountService } from './modules/accounts/services/account.service';\r\nexport { twoFactorService } from './modules/accounts/services/two-factor.service';\r\nexport {\r\n  listAccountUsersAction,\r\n  updateUserAction,\r\n  updateAccountAction,\r\n  updateAccountUserByIdAction,\r\n  deleteAccountUserAction,\r\n  deleteAccountAction,\r\n  createAccountUserAction,\r\n  changePasswordAction,\r\n  requestEmailChangeAction,\r\n  confirmEmailChangeAction,\r\n  requestPhoneChangeAction,\r\n  confirmPhoneChangeAction,\r\n  generateTwoFactorAction,\r\n  confirmTwoFactorAction,\r\n  disableTwoFactorAction,\r\n} from './modules/accounts/actions/account-management.action';\r\n\r\n// Server Utils\r\nexport { getClientInfoFromRequest } from './infra/utils/client-info';\r\nexport { getUserContext } from './modules/auth/utils/get-user-context';\r\nexport { requireValidSession } from './modules/auth/utils/require-valid-session';\r\nexport { requireTokenNotExpired } from './modules/auth/utils/require-token-not-expired';\r\nexport { buildWlOverride, buildWlOverrideFromJwt } from './modules/auth/utils/build-wl-override';\r\nexport { safeServerAction } from './utils/safeServerAction';\r\nexport { safeMutationAction } from './utils/safeMutationAction';\r\n\r\n// Image Processing (server-side)\r\nexport { processImageAction } from './modules/images/actions/process-image.action';\r\nexport { processImage } from './modules/images/services/image-processing.service';\r\nexport type {\r\n  ProcessImageInput,\r\n  ProcessImageOutput,\r\n  ProcessImageActionInput,\r\n  ProcessImageActionOutput,\r\n} from './modules/images/types/image.type';\r\n"],"mappings":"AAAA,OAAO;AAGP,SAAS,WAAW,KAAK,iBAAiB;AAG1C,SAAS,mBAAmB;AAC5B,SAAS,yBAAyB;AAClC,SAAS,kCAAkC;AAC3C,SAAS,kCAAkC;AAC3C,SAAS,oCAAoC;AAC7C,SAAS,+BAA+B;AACxC,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AAGjC,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,+BAA+B;AACxC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC,SAAS,mCAAmC;AAC5C,SAAS,oCAAoC;AAC7C,SAAS,uCAAuC;AAChD,SAAS,uBAAuB;AAChC,SAAS,wBAAwB;AACjC,SAAS,+BAA+B;AACxC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,wBAAwB;AAGjC,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AACnC,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AAGpC,SAAS,2BAA2B;AACpC,SAAS,8BAA8B;AACvC,SAAS,gCAAgC;AACzC,SAAS,4BAA4B;AACrC,SAAS,+BAA+B;AAGxC,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,2BAA2B;AACpC,SAAS,8BAA8B;AACvC,SAAS,iBAAiB,8BAA8B;AACxD,SAAS,wBAAwB;AACjC,SAAS,0BAA0B;AAGnC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;","names":[]}

package/dist/utils/safeMutationAction.mjs

@@ -1,9 +1,9 @@
 import "server-only";
-import { requireValidSession } from "../modules/auth/utils/require-valid-session";
+import { requireTokenNotExpired } from "../modules/auth/utils/require-token-not-expired";
 import { safeServerAction } from "./safeServerAction";
 async function safeMutationAction(fn) {
   return safeServerAction(async () => {
-    await requireValidSession();
+    await requireTokenNotExpired();
     return fn();
   });
 }

package/dist/utils/safeMutationAction.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utils/safeMutationAction.ts"],"sourcesContent":["import 'server-only';\n\nimport type { ActionResult } from '../infra/api/types';\nimport { requireValidSession } from '../modules/auth/utils/require-valid-session';\nimport { safeServerAction } from './safeServerAction';\n\n/**\n * Wrapper para server actions que mutam estado (delete/update/create/publish/\n * billing/etc.). Faz validação de sessão contra o backend (`POST /auth/keep`)\n * antes de executar a ação e roteia erros via `safeServerAction`.\n *\n * A validação é deduplicada por request — múltiplas actions sensíveis que\n * rodem dentro de uma mesma request pagam 1 round-trip ao backend, não N.\n *\n * Motivação (resumo): o backend confia no par `(whitelabel-token, id_account\n * no path)` nos endpoints de CRUD; o Next.js deriva `id_account` de\n * `atob(cookie)` sem verificar assinatura. Chamar `requireValidSession`\n * aqui garante que o cookie corresponde a uma sessão real no banco antes\n * de qualquer mutação.\n *\n * Para reads não-sensíveis, continue usando `safeServerAction` direto.\n */\nexport async function safeMutationAction<T>(\n  fn: () => Promise<T>\n): Promise<ActionResult<T>> {\n  return safeServerAction(async () => {\n    await requireValidSession();\n    return fn();\n  });\n}\n"],"mappings":"AAAA,OAAO;AAGP,SAAS,2BAA2B;AACpC,SAAS,wBAAwB;AAkBjC,eAAsB,mBACpB,IAC0B;AAC1B,SAAO,iBAAiB,YAAY;AAClC,UAAM,oBAAoB;AAC1B,WAAO,GAAG;AAAA,EACZ,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../../src/utils/safeMutationAction.ts"],"sourcesContent":["import 'server-only';\n\nimport type { ActionResult } from '../infra/api/types';\nimport { requireTokenNotExpired } from '../modules/auth/utils/require-token-not-expired';\nimport { safeServerAction } from './safeServerAction';\n\n/**\n * Wrapper para server actions que mutam estado (delete/update/create/publish/\n * billing/etc.). Verifica se o JWT do cookie não expirou antes de executar\n * a ação e roteia erros via `safeServerAction`.\n *\n * A verificação é feita localmente decodificando o campo `exp` do JWT —\n * sem round-trip ao backend.\n *\n * Para reads não-sensíveis, continue usando `safeServerAction` direto.\n */\nexport async function safeMutationAction<T>(\n  fn: () => Promise<T>\n): Promise<ActionResult<T>> {\n  return safeServerAction(async () => {\n    await requireTokenNotExpired();\n    return fn();\n  });\n}\n"],"mappings":"AAAA,OAAO;AAGP,SAAS,8BAA8B;AACvC,SAAS,wBAAwB;AAYjC,eAAsB,mBACpB,IAC0B;AAC1B,SAAO,iBAAiB,YAAY;AAClC,UAAM,uBAAuB;AAC7B,WAAO,GAAG;AAAA,EACZ,CAAC;AACH;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greatapps/common",
-  "version": "1.1.588",
+  "version": "1.1.591",
   "description": "Shared library for GreatApps frontend applications",
   "main": "./dist/index.mjs",
   "types": "./src/index.ts",

package/src/modules/auth/utils/require-token-not-expired.ts

@@ -0,0 +1,40 @@
+import 'server-only';
+
+import { cookies } from 'next/headers';
+import { ApiError } from '../../../infra/api/types';
+
+const AUTH_COOKIE_NAME = 'greatapps';
+
+/**
+ * Verifica se o JWT do cookie `greatapps` não expirou checando o campo `exp`
+ * no payload, sem bater no backend.
+ *
+ * - Se o token não existe → SESSION_INVALID 401
+ * - Se o token é malformado → SESSION_INVALID 401
+ * - Se `exp` não existe ou já passou → SESSION_INVALID 401
+ *
+ * Isso substitui o `requireValidSession` (que fazia POST /auth/keep) no
+ * `safeMutationAction`, eliminando 1 round-trip ao backend por mutation.
+ */
+export async function requireTokenNotExpired(): Promise<void> {
+  if (process.env.DUMMY_AUTH_TOKEN) return;
+
+  const cookieStore = await cookies();
+  const token = cookieStore.get(AUTH_COOKIE_NAME)?.value;
+
+  if (!token) {
+    throw new ApiError('Sessão inválida ou expirada', 'SESSION_INVALID', 401);
+  }
+
+  try {
+    const payload = JSON.parse(atob(token.split('.')[1]));
+    const now = Math.floor(Date.now() / 1000);
+
+    if (!payload.exp || payload.exp <= now) {
+      throw new ApiError('Sessão inválida ou expirada', 'SESSION_INVALID', 401);
+    }
+  } catch (err) {
+    if (err instanceof ApiError) throw err;
+    throw new ApiError('Sessão inválida ou expirada', 'SESSION_INVALID', 401);
+  }
+}

package/src/modules/whitelabel/services/whitelabel.service.ts

@@ -31,7 +31,7 @@ class WhitelabelService {
   private createCache() {
     return new greatCache({
       service: "whitelabel-service",
-      version: "1.0.2",
+      version: "1.0.3",
       domain: "whitelabel-cache.greatapps.com.br",
       ambient: process.env.NODE_ENV || "development",
     });

package/src/server.ts

@@ -75,6 +75,7 @@ export {
 export { getClientInfoFromRequest } from './infra/utils/client-info';
 export { getUserContext } from './modules/auth/utils/get-user-context';
 export { requireValidSession } from './modules/auth/utils/require-valid-session';
+export { requireTokenNotExpired } from './modules/auth/utils/require-token-not-expired';
 export { buildWlOverride, buildWlOverrideFromJwt } from './modules/auth/utils/build-wl-override';
 export { safeServerAction } from './utils/safeServerAction';
 export { safeMutationAction } from './utils/safeMutationAction';

package/src/utils/safeMutationAction.ts

@@ -1,22 +1,16 @@
 import 'server-only';
 
 import type { ActionResult } from '../infra/api/types';
-import { requireValidSession } from '../modules/auth/utils/require-valid-session';
+import { requireTokenNotExpired } from '../modules/auth/utils/require-token-not-expired';
 import { safeServerAction } from './safeServerAction';
 
 /**
  * Wrapper para server actions que mutam estado (delete/update/create/publish/
- * billing/etc.). Faz validação de sessão contra o backend (`POST /auth/keep`)
- * antes de executar a ação e roteia erros via `safeServerAction`.
+ * billing/etc.). Verifica se o JWT do cookie não expirou antes de executar
+ * a ação e roteia erros via `safeServerAction`.
  *
- * A validação é deduplicada por request — múltiplas actions sensíveis que
- * rodem dentro de uma mesma request pagam 1 round-trip ao backend, não N.
- *
- * Motivação (resumo): o backend confia no par `(whitelabel-token, id_account
- * no path)` nos endpoints de CRUD; o Next.js deriva `id_account` de
- * `atob(cookie)` sem verificar assinatura. Chamar `requireValidSession`
- * aqui garante que o cookie corresponde a uma sessão real no banco antes
- * de qualquer mutação.
+ * A verificação é feita localmente decodificando o campo `exp` do JWT —
+ * sem round-trip ao backend.
  *
  * Para reads não-sensíveis, continue usando `safeServerAction` direto.
  */
@@ -24,7 +18,7 @@ export async function safeMutationAction<T>(
   fn: () => Promise<T>
 ): Promise<ActionResult<T>> {
   return safeServerAction(async () => {
-    await requireValidSession();
+    await requireTokenNotExpired();
     return fn();
   });
 }