@greatapps/common 1.1.65 → 1.1.67

package/dist/modules/auth/actions/login.action.mjs

@@ -1,9 +1,17 @@
 "use server";
 import { authService } from "../services/auth.service";
 import { getClientInfoFromRequest } from "../../../infra/utils/client-info";
+import { ApiError } from "../../../infra/api/types";
 async function loginAction(credentials) {
-  const clientInfo = await getClientInfoFromRequest();
-  return await authService.login(credentials, clientInfo);
+  try {
+    const clientInfo = await getClientInfoFromRequest();
+    return await authService.login(credentials, clientInfo);
+  } catch (error) {
+    if (error instanceof ApiError) {
+      throw new Error(error.message);
+    }
+    throw new Error("Erro ao realizar login. Tente novamente.");
+  }
 }
 export {
   loginAction

package/dist/modules/auth/actions/login.action.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/auth/actions/login.action.ts"],"sourcesContent":["'use server';\r\n\r\nimport { authService } from '../services/auth.service';\r\nimport { LoginRequest, LoginResponse } from '../schema';\r\nimport { getClientInfoFromRequest } from '../../../infra/utils/client-info';\r\n\r\nexport async function loginAction(credentials: LoginRequest): Promise<LoginResponse> {\r\n  const clientInfo = await getClientInfoFromRequest();\r\n\r\n  return await authService.login(credentials, clientInfo)\r\n}\r\n"],"mappings":";AAEA,SAAS,mBAAmB;AAE5B,SAAS,gCAAgC;AAEzC,eAAsB,YAAY,aAAmD;AACnF,QAAM,aAAa,MAAM,yBAAyB;AAElD,SAAO,MAAM,YAAY,MAAM,aAAa,UAAU;AACxD;","names":[]}
+{"version":3,"sources":["../../../../src/modules/auth/actions/login.action.ts"],"sourcesContent":["'use server';\r\n\r\nimport { authService } from '../services/auth.service';\r\nimport { LoginRequest, LoginResponse } from '../schema';\r\nimport { getClientInfoFromRequest } from '../../../infra/utils/client-info';\r\nimport { ApiError } from '../../../infra/api/types';\r\n\r\nexport async function loginAction(credentials: LoginRequest): Promise<LoginResponse> {\r\n  try {\r\n    const clientInfo = await getClientInfoFromRequest();\r\n    return await authService.login(credentials, clientInfo);\r\n  } catch (error) {\r\n    if (error instanceof ApiError) {\r\n      throw new Error(error.message); // Error puro propaga a mensagem\r\n    }\r\n    throw new Error('Erro ao realizar login. Tente novamente.');\r\n  }\r\n}\r\n\r\n"],"mappings":";AAEA,SAAS,mBAAmB;AAE5B,SAAS,gCAAgC;AACzC,SAAS,gBAAgB;AAEzB,eAAsB,YAAY,aAAmD;AACnF,MAAI;AACF,UAAM,aAAa,MAAM,yBAAyB;AAClD,WAAO,MAAM,YAAY,MAAM,aAAa,UAAU;AAAA,EACxD,SAAS,OAAO;AACd,QAAI,iBAAiB,UAAU;AAC7B,YAAM,IAAI,MAAM,MAAM,OAAO;AAAA,IAC/B;AACA,UAAM,IAAI,MAAM,0CAA0C;AAAA,EAC5D;AACF;","names":[]}

package/dist/modules/auth/services/auth.service.mjs

@@ -60,20 +60,16 @@ class AuthService {
       payload
     );
     if (response.status === 0) {
-      throw new ApiError(
-        response.message || "C\xF3digo 2FA inv\xE1lido",
-        response.code || "TWO_FACTOR_FAILED",
-        401
-      );
+      throw new ApiError("C\xF3digo 2FA inv\xE1lido", "TWO_FACTOR_FAILED", 401);
     }
-    if (!response.cookie) {
+    if (!response?.data?.cookie) {
       throw new ApiError(
         "Resposta de autentica\xE7\xE3o inv\xE1lida ap\xF3s 2FA",
         "INVALID_RESPONSE",
         500
       );
     }
-    await this.setAuthCookie(response.cookie);
+    await this.setAuthCookie(response.data.cookie);
     return { success: true };
   }
   async register(data) {
@@ -232,10 +228,10 @@ class AuthService {
   }
   async setAuthCookie(token) {
     const cookieStore = await cookies();
-    const options = { ...COOKIE_OPTIONS, maxAge: COOKIE_MAX_AGE };
-    console.log("[AuthService.setAuthCookie] setting cookie with options", JSON.stringify(options));
-    cookieStore.set(AUTH_COOKIE_NAME, token, options);
-    console.log("[AuthService.setAuthCookie] cookie set, verifying...", cookieStore.get(AUTH_COOKIE_NAME)?.value?.substring(0, 20));
+    cookieStore.set(AUTH_COOKIE_NAME, token, {
+      ...COOKIE_OPTIONS,
+      maxAge: COOKIE_MAX_AGE
+    });
   }
   async removeAuthCookie() {
     const cookieStore = await cookies();

package/dist/modules/auth/services/auth.service.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/auth/services/auth.service.ts"],"sourcesContent":["import { cookies } from \"next/headers\";\r\n\r\nimport { api } from \"../../../infra/api/client\";\r\nimport { ApiError } from \"../../../infra/api/types\";\r\nimport { User } from \"../../users/schema\";\r\nimport {\r\n  ClientInfo,\r\n  ForgotPasswordRequest,\r\n  ForgotPasswordResponse,\r\n  GeoLocation,\r\n  LoginApiResponse,\r\n  LoginRequest,\r\n  LoginResponse,\r\n  LogoutApiResponse,\r\n  LogoutRequest,\r\n  LogoutResponse,\r\n  RegisterApiRequest,\r\n  RegisterApiResponse,\r\n  RegisterRequest,\r\n  RegisterResponse,\r\n  ResendVerificationRequest,\r\n  ResendVerificationResponse,\r\n  ResetPasswordRequest,\r\n  ResetPasswordResponse,\r\n  SessionKeepRequest,\r\n  SessionKeepResponse,\r\n  TwoFactorApiResponse,\r\n  TwoFactorRequest,\r\n  TwoFactorResponse,\r\n  VerifyEmailRequest,\r\n  VerifyEmailResponse,\r\n} from \"../schema\";\r\n\r\nconst AUTH_COOKIE_NAME = \"greatapps\";\r\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 30;\r\n\r\nconst COOKIE_OPTIONS = {\r\n  httpOnly: true,\r\n  secure: process.env.NODE_ENV === \"production\",\r\n  sameSite: \"lax\" as const,\r\n  path: \"/\",\r\n  domain: process.env.DOMAIN_COOKIE,\r\n};\r\n\r\nclass AuthService {\r\n  async login(\r\n    credentials: LoginRequest,\r\n    clientInfo: ClientInfo\r\n  ): Promise<LoginResponse> {\r\n    const response = await api.apps.post<LoginApiResponse>(\"/auth/login\", {\r\n      email: credentials.email,\r\n      password: credentials.password,\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n    });\r\n\r\n    console.log(\"[AuthService.login] response\", JSON.stringify(response));\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"E-mail ou senha incorretos\",\r\n        response.code || \"LOGIN_FAILED\",\r\n        401\r\n      );\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    if (response.two_factor_required) {\r\n      return { twoFactorRequired: true, cookie: response.cookie };\r\n    }\r\n\r\n    await this.setAuthCookie(response.cookie);\r\n\r\n    return {\r\n      user: {} as User,\r\n      accessToken: response.cookie,\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n    };\r\n  }\r\n\r\n  async verifyTwoFactor(\r\n    cookie: string,\r\n    code: number,\r\n    clientInfo: ClientInfo\r\n  ): Promise<TwoFactorResponse> {\r\n    const payload: TwoFactorRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n      code,\r\n    };\r\n\r\n    const response = await api.apps.post<TwoFactorApiResponse>(\r\n      \"/auth/code\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"Código 2FA inválido\",\r\n        response.code || \"TWO_FACTOR_FAILED\",\r\n        401\r\n      );\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida após 2FA\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    await this.setAuthCookie(response.cookie);\r\n\r\n    return { success: true };\r\n  }\r\n  async register(data: RegisterRequest): Promise<RegisterResponse> {\r\n    const today = new Date();\r\n    const trialEndDate = new Date(today);\r\n    trialEndDate.setDate(today.getDate() + 7); // 7 dias de trial\r\n\r\n    const payload: RegisterApiRequest = {\r\n      name: data.accountName,\r\n      bussiness_type: data.businessType,\r\n      language: \"pt-br\",\r\n      timezone: \"America/Sao_Paulo\",\r\n      currency: \"BRL\",\r\n      user: {\r\n        id_api: \"\",\r\n        name: data.name,\r\n        last_name: data.lastName || \"\",\r\n        rg: data.rg || \"\",\r\n        cpf: data.cpf || \"\",\r\n        gender: data.gender,\r\n        email: data.email,\r\n        phone: data.phone,\r\n        password: data.password,\r\n        profile: \"owner\",\r\n        language: \"pt-br\",\r\n      },\r\n      subscription: {\r\n        type: \"trial\",\r\n        id_cupom: \"\",\r\n        id_plan: 1,\r\n        due_date: trialEndDate.toISOString().split(\"T\")[0],\r\n        id_product: 1,\r\n      },\r\n    };\r\n\r\n    const response = await api.apps.post<RegisterApiResponse>(\r\n      \"/accounts\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"Erro ao criar conta\",\r\n        \"REGISTER_FAILED\",\r\n        400\r\n      );\r\n    }\r\n\r\n    if (!response.data || response.data.length === 0) {\r\n      throw new ApiError(\r\n        \"Resposta de registro inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    const accountData = response.data[0];\r\n\r\n    // Retornar sem token pois o registro não retorna cookie diretamente\r\n    // O usuário precisará fazer login após o registro\r\n    // O usuário completo será carregado após o login\r\n    return {\r\n      user: {} as User, // Placeholder, será preenchido após login\r\n      accessToken: \"\",\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n      requiresEmailVerification: !accountData.verified,\r\n    };\r\n  }\r\n\r\n  async logout(clientInfo: ClientInfo): Promise<LogoutResponse> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      throw new ApiError(\r\n        \"Usuário não autenticado\",\r\n        \"NOT_AUTHENTICATED_LOGOUT\",\r\n        401\r\n      );\r\n    }\r\n\r\n    const payload: LogoutRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n    };\r\n\r\n    try {\r\n      const response = await api.apps.post<LogoutApiResponse>(\r\n        \"/auth/logout\",\r\n        payload\r\n      );\r\n\r\n      if (response.status === 0) {\r\n        throw new ApiError(\r\n          response.message || \"Erro ao realizar logout\",\r\n          response.code || \"LOGOUT_FAILED\",\r\n          400\r\n        );\r\n      }\r\n    } finally {\r\n      await this.removeAuthCookie()\r\n    }\r\n\r\n    return {\r\n      success: true,\r\n    };\r\n  }\r\n\r\n  async forgotPassword(\r\n    _data: ForgotPasswordRequest\r\n  ): Promise<ForgotPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Recuperação de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resetPassword(\r\n    _data: ResetPasswordRequest\r\n  ): Promise<ResetPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Redefinição de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async verifyEmail(_data: VerifyEmailRequest): Promise<VerifyEmailResponse> {\r\n    throw new ApiError(\r\n      \"Verificação de email não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resendVerification(\r\n    _data: ResendVerificationRequest\r\n  ): Promise<ResendVerificationResponse> {\r\n    throw new ApiError(\r\n      \"Reenvio de verificação não implementado\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async validateSession(clientInfo: ClientInfo): Promise<boolean> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      return false;\r\n    }\r\n\r\n    try {\r\n      const payload: SessionKeepRequest = {\r\n        location: clientInfo.location,\r\n        ip: clientInfo.ip,\r\n        timezone: clientInfo.timezone,\r\n        agent: clientInfo.agent,\r\n        cookie,\r\n      };\r\n\r\n      const response = await api.apps.post<SessionKeepResponse>(\r\n        \"/auth/keep\",\r\n        payload\r\n      );\r\n\r\n      return response.status === 1;\r\n    } catch (error) {\r\n      console.error(\"[AuthService] validateSession error\", error);\r\n      return false;\r\n    }\r\n  }\r\n\r\n  async isAuthenticated(): Promise<boolean> {\r\n    const token = await this.getToken();\r\n    return !!token;\r\n  }\r\n\r\n  async getToken(): Promise<string | undefined> {\r\n    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;\r\n    const cookieStore = await cookies();\r\n    return cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n  }\r\n\r\n  private async setAuthCookie(token: string): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    const options = { ...COOKIE_OPTIONS, maxAge: COOKIE_MAX_AGE };\r\n    console.log(\"[AuthService.setAuthCookie] setting cookie with options\", JSON.stringify(options));\r\n    cookieStore.set(AUTH_COOKIE_NAME, token, options);\r\n    console.log(\"[AuthService.setAuthCookie] cookie set, verifying...\", cookieStore.get(AUTH_COOKIE_NAME)?.value?.substring(0, 20));\r\n  }\r\n\r\n  async removeAuthCookie(): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    cookieStore.delete({\r\n      name: AUTH_COOKIE_NAME,\r\n      ...COOKIE_OPTIONS,\r\n    });\r\n  }\r\n}\r\n\r\nexport const authService = new AuthService();\r\n\r\nexport type { ClientInfo, GeoLocation };\r\n"],"mappings":"AAAA,SAAS,eAAe;AAExB,SAAS,WAAW;AACpB,SAAS,gBAAgB;AA8BzB,MAAM,mBAAmB;AACzB,MAAM,iBAAiB,KAAK,KAAK,KAAK;AAEtC,MAAM,iBAAiB;AAAA,EACrB,UAAU;AAAA,EACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ,QAAQ,IAAI;AACtB;AAEA,MAAM,YAAY;AAAA,EAChB,MAAM,MACJ,aACA,YACwB;AACxB,UAAM,WAAW,MAAM,IAAI,KAAK,KAAuB,eAAe;AAAA,MACpE,OAAO,YAAY;AAAA,MACnB,UAAU,YAAY;AAAA,MACtB,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,IACpB,CAAC;AAED,YAAQ,IAAI,gCAAgC,KAAK,UAAU,QAAQ,CAAC;AAEpE,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS,qBAAqB;AAChC,aAAO,EAAE,mBAAmB,MAAM,QAAQ,SAAS,OAAO;AAAA,IAC5D;AAEA,UAAM,KAAK,cAAc,SAAS,MAAM;AAExC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,aAAa,SAAS;AAAA,MACtB,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAM,gBACJ,QACA,MACA,YAC4B;AAC5B,UAAM,UAA4B;AAAA,MAChC,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,IAAI,KAAK;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,KAAK,cAAc,SAAS,MAAM;AAExC,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAAA,EACA,MAAM,SAAS,MAAkD;AAC/D,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,eAAe,IAAI,KAAK,KAAK;AACnC,iBAAa,QAAQ,MAAM,QAAQ,IAAI,CAAC;AAExC,UAAM,UAA8B;AAAA,MAClC,MAAM,KAAK;AAAA,MACX,gBAAgB,KAAK;AAAA,MACrB,UAAU;AAAA,MACV,UAAU;AAAA,MACV,UAAU;AAAA,MACV,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,WAAW,KAAK,YAAY;AAAA,QAC5B,IAAI,KAAK,MAAM;AAAA,QACf,KAAK,KAAK,OAAO;AAAA,QACjB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA,QACf,SAAS;AAAA,QACT,UAAU;AAAA,MACZ;AAAA,MACA,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU,aAAa,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,QACjD,YAAY;AAAA,MACd;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,IAAI,KAAK;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ,SAAS,KAAK,WAAW,GAAG;AAChD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,cAAc,SAAS,KAAK,CAAC;AAKnC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,MACpE,2BAA2B,CAAC,YAAY;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,YAAiD;AAC5D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAyB;AAAA,MAC7B,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,IAAI,KAAK;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AAEA,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,IAAI;AAAA,UACR,SAAS,WAAW;AAAA,UACpB,SAAS,QAAQ;AAAA,UACjB;AAAA,QACF;AAAA,MACF;AAAA,IACF,UAAE;AACA,YAAM,KAAK,iBAAiB;AAAA,IAC9B;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EAEA,MAAM,eACJ,OACiC;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,OACgC;AAChC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,OAAyD;AACzE,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBACJ,OACqC;AACrC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,YAA0C;AAC9D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,UAA8B;AAAA,QAClC,UAAU,WAAW;AAAA,QACrB,IAAI,WAAW;AAAA,QACf,UAAU,WAAW;AAAA,QACrB,OAAO,WAAW;AAAA,QAClB;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,IAAI,KAAK;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AAEA,aAAO,SAAS,WAAW;AAAA,IAC7B,SAAS,OAAO;AACd,cAAQ,MAAM,uCAAuC,KAAK;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,kBAAoC;AACxC,UAAM,QAAQ,MAAM,KAAK,SAAS;AAClC,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,WAAwC;AAC5C,QAAI,QAAQ,IAAI,iBAAkB,QAAO,QAAQ,IAAI;AACrD,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,gBAAgB,GAAG;AAAA,EAC5C;AAAA,EAEA,MAAc,cAAc,OAA8B;AACxD,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,UAAU,EAAE,GAAG,gBAAgB,QAAQ,eAAe;AAC5D,YAAQ,IAAI,2DAA2D,KAAK,UAAU,OAAO,CAAC;AAC9F,gBAAY,IAAI,kBAAkB,OAAO,OAAO;AAChD,YAAQ,IAAI,wDAAwD,YAAY,IAAI,gBAAgB,GAAG,OAAO,UAAU,GAAG,EAAE,CAAC;AAAA,EAChI;AAAA,EAEA,MAAM,mBAAkC;AACtC,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,OAAO;AAAA,MACjB,MAAM;AAAA,MACN,GAAG;AAAA,IACL,CAAC;AAAA,EACH;AACF;AAEO,MAAM,cAAc,IAAI,YAAY;","names":[]}
+{"version":3,"sources":["../../../../src/modules/auth/services/auth.service.ts"],"sourcesContent":["import { cookies } from \"next/headers\";\r\n\r\nimport { api } from \"../../../infra/api/client\";\r\nimport { ApiError } from \"../../../infra/api/types\";\r\nimport { User } from \"../../users/schema\";\r\nimport {\r\n  ClientInfo,\r\n  ForgotPasswordRequest,\r\n  ForgotPasswordResponse,\r\n  GeoLocation,\r\n  LoginApiResponse,\r\n  LoginRequest,\r\n  LoginResponse,\r\n  LogoutApiResponse,\r\n  LogoutRequest,\r\n  LogoutResponse,\r\n  RegisterApiRequest,\r\n  RegisterApiResponse,\r\n  RegisterRequest,\r\n  RegisterResponse,\r\n  ResendVerificationRequest,\r\n  ResendVerificationResponse,\r\n  ResetPasswordRequest,\r\n  ResetPasswordResponse,\r\n  SessionKeepRequest,\r\n  SessionKeepResponse,\r\n  TwoFactorApiResponse,\r\n  TwoFactorRequest,\r\n  TwoFactorResponse,\r\n  VerifyEmailRequest,\r\n  VerifyEmailResponse,\r\n} from \"../schema\";\r\n\r\nconst AUTH_COOKIE_NAME = \"greatapps\";\r\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 30;\r\n\r\nconst COOKIE_OPTIONS = {\r\n  httpOnly: true,\r\n  secure: process.env.NODE_ENV === \"production\",\r\n  sameSite: \"lax\" as const,\r\n  path: \"/\",\r\n  domain: process.env.DOMAIN_COOKIE,\r\n};\r\n\r\nclass AuthService {\r\n  async login(\r\n    credentials: LoginRequest,\r\n    clientInfo: ClientInfo\r\n  ): Promise<LoginResponse> {\r\n    const response = await api.apps.post<LoginApiResponse>(\"/auth/login\", {\r\n      email: credentials.email,\r\n      password: credentials.password,\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n    });\r\n\r\n    console.log(\"[AuthService.login] response\", JSON.stringify(response));\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"E-mail ou senha incorretos\",\r\n        response.code || \"LOGIN_FAILED\",\r\n        401\r\n      );\r\n    }\r\n\r\n    if (!response.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    if (response.two_factor_required) {\r\n      return { twoFactorRequired: true, cookie: response.cookie };\r\n    }\r\n\r\n    await this.setAuthCookie(response.cookie);\r\n\r\n    return {\r\n      user: {} as User,\r\n      accessToken: response.cookie,\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n    };\r\n  }\r\n\r\n  async verifyTwoFactor(\r\n    cookie: string,\r\n    code: number,\r\n    clientInfo: ClientInfo\r\n  ): Promise<TwoFactorResponse> {\r\n    const payload: TwoFactorRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n      code,\r\n    };\r\n\r\n    const response = await api.apps.post<TwoFactorApiResponse>(\r\n      \"/auth/code\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\"Código 2FA inválido\", \"TWO_FACTOR_FAILED\", 401);\r\n    }\r\n\r\n    if (!response?.data?.cookie) {\r\n      throw new ApiError(\r\n        \"Resposta de autenticação inválida após 2FA\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    await this.setAuthCookie(response.data.cookie);\r\n\r\n    return { success: true };\r\n  }\r\n  async register(data: RegisterRequest): Promise<RegisterResponse> {\r\n    const today = new Date();\r\n    const trialEndDate = new Date(today);\r\n    trialEndDate.setDate(today.getDate() + 7); // 7 dias de trial\r\n\r\n    const payload: RegisterApiRequest = {\r\n      name: data.accountName,\r\n      bussiness_type: data.businessType,\r\n      language: \"pt-br\",\r\n      timezone: \"America/Sao_Paulo\",\r\n      currency: \"BRL\",\r\n      user: {\r\n        id_api: \"\",\r\n        name: data.name,\r\n        last_name: data.lastName || \"\",\r\n        rg: data.rg || \"\",\r\n        cpf: data.cpf || \"\",\r\n        gender: data.gender,\r\n        email: data.email,\r\n        phone: data.phone,\r\n        password: data.password,\r\n        profile: \"owner\",\r\n        language: \"pt-br\",\r\n      },\r\n      subscription: {\r\n        type: \"trial\",\r\n        id_cupom: \"\",\r\n        id_plan: 1,\r\n        due_date: trialEndDate.toISOString().split(\"T\")[0],\r\n        id_product: 1,\r\n      },\r\n    };\r\n\r\n    const response = await api.apps.post<RegisterApiResponse>(\r\n      \"/accounts\",\r\n      payload\r\n    );\r\n\r\n    if (response.status === 0) {\r\n      throw new ApiError(\r\n        response.message || \"Erro ao criar conta\",\r\n        \"REGISTER_FAILED\",\r\n        400\r\n      );\r\n    }\r\n\r\n    if (!response.data || response.data.length === 0) {\r\n      throw new ApiError(\r\n        \"Resposta de registro inválida\",\r\n        \"INVALID_RESPONSE\",\r\n        500\r\n      );\r\n    }\r\n\r\n    const accountData = response.data[0];\r\n\r\n    // Retornar sem token pois o registro não retorna cookie diretamente\r\n    // O usuário precisará fazer login após o registro\r\n    // O usuário completo será carregado após o login\r\n    return {\r\n      user: {} as User, // Placeholder, será preenchido após login\r\n      accessToken: \"\",\r\n      refreshToken: \"\",\r\n      expiresAt: new Date(Date.now() + COOKIE_MAX_AGE * 1000).toISOString(),\r\n      requiresEmailVerification: !accountData.verified,\r\n    };\r\n  }\r\n\r\n  async logout(clientInfo: ClientInfo): Promise<LogoutResponse> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      throw new ApiError(\r\n        \"Usuário não autenticado\",\r\n        \"NOT_AUTHENTICATED_LOGOUT\",\r\n        401\r\n      );\r\n    }\r\n\r\n    const payload: LogoutRequest = {\r\n      location: clientInfo.location,\r\n      ip: clientInfo.ip,\r\n      timezone: clientInfo.timezone,\r\n      agent: clientInfo.agent,\r\n      cookie,\r\n    };\r\n\r\n    try {\r\n      const response = await api.apps.post<LogoutApiResponse>(\r\n        \"/auth/logout\",\r\n        payload\r\n      );\r\n\r\n      if (response.status === 0) {\r\n        throw new ApiError(\r\n          response.message || \"Erro ao realizar logout\",\r\n          response.code || \"LOGOUT_FAILED\",\r\n          400\r\n        );\r\n      }\r\n    } finally {\r\n      await this.removeAuthCookie();\r\n    }\r\n\r\n    return {\r\n      success: true,\r\n    };\r\n  }\r\n\r\n  async forgotPassword(\r\n    _data: ForgotPasswordRequest\r\n  ): Promise<ForgotPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Recuperação de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resetPassword(\r\n    _data: ResetPasswordRequest\r\n  ): Promise<ResetPasswordResponse> {\r\n    throw new ApiError(\r\n      \"Redefinição de senha não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async verifyEmail(_data: VerifyEmailRequest): Promise<VerifyEmailResponse> {\r\n    throw new ApiError(\r\n      \"Verificação de email não implementada\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async resendVerification(\r\n    _data: ResendVerificationRequest\r\n  ): Promise<ResendVerificationResponse> {\r\n    throw new ApiError(\r\n      \"Reenvio de verificação não implementado\",\r\n      \"NOT_IMPLEMENTED\",\r\n      501\r\n    );\r\n  }\r\n\r\n  async validateSession(clientInfo: ClientInfo): Promise<boolean> {\r\n    const cookie = await this.getToken();\r\n\r\n    if (!cookie) {\r\n      return false;\r\n    }\r\n\r\n    try {\r\n      const payload: SessionKeepRequest = {\r\n        location: clientInfo.location,\r\n        ip: clientInfo.ip,\r\n        timezone: clientInfo.timezone,\r\n        agent: clientInfo.agent,\r\n        cookie,\r\n      };\r\n\r\n      const response = await api.apps.post<SessionKeepResponse>(\r\n        \"/auth/keep\",\r\n        payload\r\n      );\r\n\r\n      return response.status === 1;\r\n    } catch (error) {\r\n      console.error(\"[AuthService] validateSession error\", error);\r\n      return false;\r\n    }\r\n  }\r\n\r\n  async isAuthenticated(): Promise<boolean> {\r\n    const token = await this.getToken();\r\n    return !!token;\r\n  }\r\n\r\n  async getToken(): Promise<string | undefined> {\r\n    if (process.env.DUMMY_AUTH_TOKEN) return process.env.DUMMY_AUTH_TOKEN;\r\n    const cookieStore = await cookies();\r\n    return cookieStore.get(AUTH_COOKIE_NAME)?.value;\r\n  }\r\n\r\n  private async setAuthCookie(token: string): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    cookieStore.set(AUTH_COOKIE_NAME, token, {\r\n      ...COOKIE_OPTIONS,\r\n      maxAge: COOKIE_MAX_AGE,\r\n    });\r\n  }\r\n\r\n  async removeAuthCookie(): Promise<void> {\r\n    const cookieStore = await cookies();\r\n    cookieStore.delete({\r\n      name: AUTH_COOKIE_NAME,\r\n      ...COOKIE_OPTIONS,\r\n    });\r\n  }\r\n}\r\n\r\nexport const authService = new AuthService();\r\n\r\nexport type { ClientInfo, GeoLocation };\r\n"],"mappings":"AAAA,SAAS,eAAe;AAExB,SAAS,WAAW;AACpB,SAAS,gBAAgB;AA8BzB,MAAM,mBAAmB;AACzB,MAAM,iBAAiB,KAAK,KAAK,KAAK;AAEtC,MAAM,iBAAiB;AAAA,EACrB,UAAU;AAAA,EACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ,QAAQ,IAAI;AACtB;AAEA,MAAM,YAAY;AAAA,EAChB,MAAM,MACJ,aACA,YACwB;AACxB,UAAM,WAAW,MAAM,IAAI,KAAK,KAAuB,eAAe;AAAA,MACpE,OAAO,YAAY;AAAA,MACnB,UAAU,YAAY;AAAA,MACtB,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,IACpB,CAAC;AAED,YAAQ,IAAI,gCAAgC,KAAK,UAAU,QAAQ,CAAC;AAEpE,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS,qBAAqB;AAChC,aAAO,EAAE,mBAAmB,MAAM,QAAQ,SAAS,OAAO;AAAA,IAC5D;AAEA,UAAM,KAAK,cAAc,SAAS,MAAM;AAExC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,aAAa,SAAS;AAAA,MACtB,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAM,gBACJ,QACA,MACA,YAC4B;AAC5B,UAAM,UAA4B;AAAA,MAChC,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,IAAI,KAAK;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI,SAAS,6BAAuB,qBAAqB,GAAG;AAAA,IACpE;AAEA,QAAI,CAAC,UAAU,MAAM,QAAQ;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,KAAK,cAAc,SAAS,KAAK,MAAM;AAE7C,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAAA,EACA,MAAM,SAAS,MAAkD;AAC/D,UAAM,QAAQ,oBAAI,KAAK;AACvB,UAAM,eAAe,IAAI,KAAK,KAAK;AACnC,iBAAa,QAAQ,MAAM,QAAQ,IAAI,CAAC;AAExC,UAAM,UAA8B;AAAA,MAClC,MAAM,KAAK;AAAA,MACX,gBAAgB,KAAK;AAAA,MACrB,UAAU;AAAA,MACV,UAAU;AAAA,MACV,UAAU;AAAA,MACV,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,WAAW,KAAK,YAAY;AAAA,QAC5B,IAAI,KAAK,MAAM;AAAA,QACf,KAAK,KAAK,OAAO;AAAA,QACjB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA,QACf,SAAS;AAAA,QACT,UAAU;AAAA,MACZ;AAAA,MACA,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU,aAAa,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,QACjD,YAAY;AAAA,MACd;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,IAAI,KAAK;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,SAAS,WAAW;AAAA,QACpB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,QAAQ,SAAS,KAAK,WAAW,GAAG;AAChD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,cAAc,SAAS,KAAK,CAAC;AAKnC,WAAO;AAAA,MACL,MAAM,CAAC;AAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,GAAI,EAAE,YAAY;AAAA,MACpE,2BAA2B,CAAC,YAAY;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,YAAiD;AAC5D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAyB;AAAA,MAC7B,UAAU,WAAW;AAAA,MACrB,IAAI,WAAW;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,IAAI,KAAK;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AAEA,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,IAAI;AAAA,UACR,SAAS,WAAW;AAAA,UACpB,SAAS,QAAQ;AAAA,UACjB;AAAA,QACF;AAAA,MACF;AAAA,IACF,UAAE;AACA,YAAM,KAAK,iBAAiB;AAAA,IAC9B;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EAEA,MAAM,eACJ,OACiC;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,OACgC;AAChC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,OAAyD;AACzE,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBACJ,OACqC;AACrC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,YAA0C;AAC9D,UAAM,SAAS,MAAM,KAAK,SAAS;AAEnC,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,UAA8B;AAAA,QAClC,UAAU,WAAW;AAAA,QACrB,IAAI,WAAW;AAAA,QACf,UAAU,WAAW;AAAA,QACrB,OAAO,WAAW;AAAA,QAClB;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,IAAI,KAAK;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AAEA,aAAO,SAAS,WAAW;AAAA,IAC7B,SAAS,OAAO;AACd,cAAQ,MAAM,uCAAuC,KAAK;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,kBAAoC;AACxC,UAAM,QAAQ,MAAM,KAAK,SAAS;AAClC,WAAO,CAAC,CAAC;AAAA,EACX;AAAA,EAEA,MAAM,WAAwC;AAC5C,QAAI,QAAQ,IAAI,iBAAkB,QAAO,QAAQ,IAAI;AACrD,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,gBAAgB,GAAG;AAAA,EAC5C;AAAA,EAEA,MAAc,cAAc,OAA8B;AACxD,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,IAAI,kBAAkB,OAAO;AAAA,MACvC,GAAG;AAAA,MACH,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,mBAAkC;AACtC,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,OAAO;AAAA,MACjB,MAAM;AAAA,MACN,GAAG;AAAA,IACL,CAAC;AAAA,EACH;AACF;AAEO,MAAM,cAAc,IAAI,YAAY;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greatapps/common",
-  "version": "1.1.65",
+  "version": "1.1.67",
   "description": "Shared library for GreatApps frontend applications",
   "main": "./dist/index.mjs",
   "types": "./src/index.ts",

package/src/modules/auth/actions/login.action.ts

@@ -3,9 +3,17 @@
 import { authService } from '../services/auth.service';
 import { LoginRequest, LoginResponse } from '../schema';
 import { getClientInfoFromRequest } from '../../../infra/utils/client-info';
+import { ApiError } from '../../../infra/api/types';
 
 export async function loginAction(credentials: LoginRequest): Promise<LoginResponse> {
-  const clientInfo = await getClientInfoFromRequest();
-
-  return await authService.login(credentials, clientInfo)
+  try {
+    const clientInfo = await getClientInfoFromRequest();
+    return await authService.login(credentials, clientInfo);
+  } catch (error) {
+    if (error instanceof ApiError) {
+      throw new Error(error.message); // Error puro propaga a mensagem
+    }
+    throw new Error('Erro ao realizar login. Tente novamente.');
+  }
 }
+

package/src/modules/auth/schema.ts

@@ -31,9 +31,9 @@ export interface TwoFactorRequest {
 
 export interface TwoFactorApiResponse {
   status: 0 | 1;
-  message: string;
-  code?: string;
-  cookie?: string;
+  data?: {
+    cookie: string;
+  };
 }
 
 export interface TwoFactorResponse {

package/src/modules/auth/services/auth.service.ts

@@ -108,14 +108,10 @@ class AuthService {
     );
 
     if (response.status === 0) {
-      throw new ApiError(
-        response.message || "Código 2FA inválido",
-        response.code || "TWO_FACTOR_FAILED",
-        401
-      );
+      throw new ApiError("Código 2FA inválido", "TWO_FACTOR_FAILED", 401);
     }
 
-    if (!response.cookie) {
+    if (!response?.data?.cookie) {
       throw new ApiError(
         "Resposta de autenticação inválida após 2FA",
         "INVALID_RESPONSE",
@@ -123,7 +119,7 @@ class AuthService {
       );
     }
 
-    await this.setAuthCookie(response.cookie);
+    await this.setAuthCookie(response.data.cookie);
 
     return { success: true };
   }
@@ -228,7 +224,7 @@ class AuthService {
         );
       }
     } finally {
-      await this.removeAuthCookie()
+      await this.removeAuthCookie();
     }
 
     return {
@@ -315,10 +311,10 @@ class AuthService {
 
   private async setAuthCookie(token: string): Promise<void> {
     const cookieStore = await cookies();
-    const options = { ...COOKIE_OPTIONS, maxAge: COOKIE_MAX_AGE };
-    console.log("[AuthService.setAuthCookie] setting cookie with options", JSON.stringify(options));
-    cookieStore.set(AUTH_COOKIE_NAME, token, options);
-    console.log("[AuthService.setAuthCookie] cookie set, verifying...", cookieStore.get(AUTH_COOKIE_NAME)?.value?.substring(0, 20));
+    cookieStore.set(AUTH_COOKIE_NAME, token, {
+      ...COOKIE_OPTIONS,
+      maxAge: COOKIE_MAX_AGE,
+    });
   }
 
   async removeAuthCookie(): Promise<void> {