@intlayer/backend 3.0.2 → 3.1.0

package/dist/cjs/controllers/sessionAuth.controller.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/sessionAuth.controller.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\nimport { logger } from '@logger';\nimport type { ResponseWithInformation } from '@middlewares/sessionAuth.middleware';\nimport { sessionAuthRoutes } from '@routes/sessionAuth.routes';\nimport { sendEmail } from '@services/email.service';\nimport * as sessionAuthService from '@services/sessionAuth.service';\nimport * as userService from '@services/user.service';\nimport { generateToken } from '@utils/CSRF';\nimport { ErrorHandler, AppError, GenericError } from '@utils/errors';\nimport { HttpStatusCodes } from '@utils/httpStatusCodes';\nimport { mapUserToAPI } from '@utils/mapper/user';\nimport { formatResponse, type ResponseData } from '@utils/responseData';\nimport type { NextFunction, Request, Response } from 'express';\nimport { Types } from 'mongoose';\nimport { v4 as uuidv4 } from 'uuid';\nimport { Organization } from '@/types/organization.types';\nimport { Project } from '@/types/project.types';\nimport type {\n  Session,\n  GithubSessionProvider,\n  GoogleSessionProvider,\n} from '@/types/session.types';\nimport type { UserAPI, UserData } from '@/types/user.types';\n\nexport type CSRFTokenData = { csrf_token: string };\nexport type SetCSRFTokenResult = ResponseData<CSRFTokenData>;\n\nexport const setCSRFToken = (\n  req: Request,\n  res: Response<SetCSRFTokenResult>,\n  _next: NextFunction\n) => {\n  const csrf_token = generateToken(req, res);\n\n  const responseData = formatResponse<CSRFTokenData>({\n    data: { csrf_token },\n  });\n\n  res.locals.csrf_token = csrf_token;\n  res.json(responseData);\n};\n\nexport type RegisterBody = { email: string; password: string };\nexport type RegisterResult = ResponseData<UserAPI>;\n\n/**\n * Handles user registration.\n */\nexport const registerEmailPassword = async (\n  req: Request<any, any, RegisterBody>,\n  res: ResponseWithInformation<RegisterResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user } = res.locals;\n\n  if (user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_ALREADY_LOGGED_IN');\n    return;\n  }\n\n  const userData = req.body;\n\n  try {\n    let user = await userService.getUserByEmail(userData.email);\n\n    if (user) {\n      const emailProvider = user.provider?.find(\n        (provider) => provider.provider === 'email'\n      );\n\n      if (emailProvider) {\n        if (emailProvider.emailValidated) {\n          ErrorHandler.handleGenericErrorResponse(\n            res,\n            'EMAIL_ALREADY_VALIDATED'\n          );\n          return;\n        } else {\n          user = await sessionAuthService.updateUserProvider(\n            user._id,\n            'email',\n            {\n              secret: uuidv4(),\n            }\n          );\n        }\n      } else {\n        user = await sessionAuthService.addUserProvider(user._id, {\n          provider: 'email',\n          emailValidated: undefined,\n          secret: uuidv4(),\n        });\n      }\n    } else {\n      user = await userService.createUser(userData);\n      logger.info(`New registration: ${user.name} - ${user.email}`);\n    }\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_CREATION_FAILED', {\n        email: userData.email,\n      });\n      return;\n    }\n\n    await sessionAuthService.setUserAuth(res, user);\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type LoginBody = {\n  email: string;\n  password: string;\n};\nexport type LoginResult = ResponseData<UserAPI>;\n\n/**\n * Handles user login.\n */\nexport const loginEmailPassword = async (\n  req: Request<any, any, LoginBody>,\n  res: ResponseWithInformation<LoginResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user } = res.locals;\n\n  if (user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_ALREADY_LOGGED_IN');\n    return;\n  }\n\n  const { email, password } = req.body;\n\n  try {\n    const { user: loggedInUser, error } =\n      await sessionAuthService.testUserPassword(email, password);\n\n    if (error) {\n      if (!user) {\n        ErrorHandler.handleGenericErrorResponse(res, 'LOGIN_FAILED');\n        return;\n      }\n    }\n\n    if (!loggedInUser) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    await sessionAuthService.setUserAuth(res, loggedInUser);\n\n    const formattedUser = mapUserToAPI(loggedInUser);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    logger.info(`Login: ${loggedInUser.email}`);\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type LogoutResult = ResponseData<undefined>;\n\n/**\n * Handles user logout and clears cookies.\n */\nexport const logOut = async (\n  _req: Request,\n  res: ResponseWithInformation<LogoutResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n    return;\n  }\n\n  await sessionAuthService.clearUserAuth(res);\n  sessionAuthService.clearOrganizationAuth(res);\n  sessionAuthService.clearProjectAuth(res);\n\n  logger.info(`Logout: ${user.name} - ${user.email}`);\n\n  const responseData = formatResponse<undefined>({ data: undefined });\n\n  res.json(responseData);\n};\n\nexport type UpdatePasswordBody = {\n  oldPassword: string;\n  newPassword: string;\n};\nexport type UpdatePasswordResult = ResponseData<UserAPI>;\n\n/**\n * Updates the user's password.\n */\nexport const updatePassword = async (\n  req: Request<undefined, any, UpdatePasswordBody>,\n  res: ResponseWithInformation<UpdatePasswordResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { oldPassword, newPassword } = req.body;\n  let { user } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n    return;\n  }\n\n  try {\n    const { error } = await sessionAuthService.testUserPassword(\n      user.email,\n      oldPassword\n    );\n\n    if (error) {\n      ErrorHandler.handleGenericErrorResponse(res, 'LOGIN_FAILED');\n      return;\n    }\n\n    user = await sessionAuthService.changeUserPassword(\n      user._id,\n      oldPassword,\n      newPassword\n    );\n\n    if (!user || typeof user !== 'object') {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_DATA_NOT_FOUND');\n      return;\n    }\n\n    logger.info(\n      `Password changed - User : Name : ${user.name}, id : ${String(user._id)}`\n    );\n\n    const formattedUser = mapUserToAPI(user);\n\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type ValidEmailParams = { secret: string; userId: string };\nexport type ValidEmailResult = ResponseData<UserAPI>;\n\n/**\n * Validates a user's email based on the provided secret and user ID.\n */\nexport const validEmail = async (\n  req: Request<ValidEmailParams, any, any>,\n  res: ResponseWithInformation<ValidEmailResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId, secret } = req.params;\n  const { organization } = res.locals;\n\n  if (!Types.ObjectId.isValid(userId.toString())) {\n    ErrorHandler.handleGenericErrorResponse(res, 'INVALID_USER_ID');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_FOUND');\n    return;\n  }\n\n  const user = await userService.getUserById(userId);\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND', { userId });\n    return;\n  }\n\n  await sessionAuthService.activateUser(user._id, secret);\n\n  logger.info(\n    `User activated - User: Name: ${user.name}, id: ${String(user._id)}`\n  );\n\n  await sendEmail({\n    type: 'welcome',\n    to: user.email,\n    username: user.name,\n    loginLink: sessionAuthRoutes.loginEmailPassword.url,\n  });\n\n  const formattedUser = mapUserToAPI(user);\n  const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n  res.json(responseData);\n};\n\nexport type AskResetPasswordBody = {\n  email: string;\n};\nexport type AskResetPasswordResult = ResponseData<undefined>;\n\n/**\n * Requests a password reset for a user.\n */\nexport const askResetPassword = async (\n  req: Request<undefined, any, AskResetPasswordBody>,\n  res: ResponseWithInformation<AskResetPasswordResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { email } = req.body as Partial<AskResetPasswordBody>;\n\n  if (!email) {\n    ErrorHandler.handleGenericErrorResponse(res, 'EMAIL_NOT_PROVIDED');\n    return;\n  }\n\n  try {\n    const updatedUser = await sessionAuthService.requestPasswordReset(email);\n\n    if (!updatedUser) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND', { email });\n      return;\n    }\n\n    logger.info(\n      `Ask changing password - User: Name: ${updatedUser.name}, id: ${String(updatedUser._id)}`\n    );\n\n    await sendEmail({\n      type: 'resetPassword',\n      to: updatedUser.email,\n      username: updatedUser.name,\n      resetLink: sessionAuthRoutes.resetPassword.url({\n        userId: String(updatedUser._id),\n        secret:\n          updatedUser.provider?.find(\n            (provider) => provider.provider === 'email'\n          )?.secret ?? '',\n      }),\n    });\n\n    const responseData = formatResponse<undefined>({ data: undefined });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type ResetPasswordParams = { secret: string; userId: string };\nexport type ResetPasswordResult = ResponseData<UserAPI>;\n\n/**\n * Resets a user's password based on the provided secret and user ID.\n */\nexport const resetPassword = async (\n  req: Request<ResetPasswordParams, any, any>,\n  res: Response<ResetPasswordResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { secret, userId } = req.params as Partial<ResetPasswordParams>;\n  const password: string = req.body.password;\n\n  const userIdString = String(userId);\n\n  if (!userId || !userIdString || !Types.ObjectId.isValid(userIdString)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'INVALID_USER_ID', { userId });\n    return;\n  }\n\n  if (!secret) {\n    ErrorHandler.handleGenericErrorResponse(res, 'SECRET_NOT_PROVIDED');\n    return;\n  }\n\n  try {\n    const updatedUser = await sessionAuthService.resetUserPassword(\n      userId,\n      secret,\n      password\n    );\n\n    logger.info(\n      `Password changed - User: Name: ${updatedUser.name}, id: ${String(updatedUser._id)}`\n    );\n\n    await sendEmail({\n      type: 'passwordChangeConfirmation',\n      to: updatedUser.email,\n      username: updatedUser.name,\n    });\n\n    const formattedUser = mapUserToAPI(updatedUser);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type CreateSessionBody = {\n  sessionToken: string;\n  userId: string;\n  expires: Date;\n};\nexport type CreateSessionResult = ResponseData<Session>;\n\nexport type GetSessionInformationQuery = {\n  session_token?: string;\n};\ntype SessionInformation = {\n  user: UserAPI | null;\n  organization: Organization | null;\n  project: Project | null;\n  session: Session | null;\n};\nexport type GetSessionInformationResult = ResponseData<SessionInformation>;\n\n/**\n * Gets information about a session for a user.\n */\nexport const getSessionInformation = async (\n  req: Request<undefined, undefined, undefined, GetSessionInformationQuery>,\n  res: ResponseWithInformation<GetSessionInformationResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { session_token: sessionToken } = req.query;\n\n  let { user } = res.locals;\n  const { organization, project } = res.locals;\n\n  try {\n    if (sessionToken) {\n      user = await userService.getUserBySession(sessionToken);\n    }\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    const session = user.session;\n\n    if (!session) {\n      ErrorHandler.handleGenericErrorResponse(res, 'SESSION_NOT_FOUND');\n      return;\n    }\n\n    const formattedUser: SessionInformation['user'] = {\n      ...mapUserToAPI(user),\n      role: 'user',\n    };\n\n    const responseData = formatResponse<SessionInformation>({\n      data: { session, user: formattedUser, organization, project },\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GithubLoginQueryParams = {\n  origin: string;\n};\nexport type GithubLoginQueryResult = ResponseData<undefined>;\n\nexport const githubLoginQuery = (\n  req: Request<undefined, undefined, undefined, GithubLoginQueryParams>,\n  res: ResponseWithInformation<GithubLoginQueryResult>,\n  _next: NextFunction\n): void => {\n  const { origin } = req.query;\n  const { user } = res.locals;\n\n  if (user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_ALREADY_LOGGED_IN');\n    return;\n  }\n\n  const encodedOrigin = encodeURIComponent(origin);\n\n  const redirectURI = `${process.env.BACKEND_URL}/api/auth/callback/github?redirect_uri=${encodedOrigin}`;\n  const encodedRedirectURI = encodeURIComponent(redirectURI);\n\n  res.redirect(\n    `https://github.com/login/oauth/authorize?client_id=${process.env.GITHUB_CLIENT_ID}&redirect_uri=${encodedRedirectURI}`\n  );\n};\n\nexport type GithubCallbackQuery = {\n  code: string;\n  redirect_uri: string;\n};\n\nexport type GithubCallbackResult = ResponseData<UserAPI>;\n\n/**\n * Handles GitHub OAuth callback.\n */\nexport const githubCallback = async (\n  req: Request<undefined, undefined, undefined, GithubCallbackQuery>,\n  res: ResponseWithInformation<GithubCallbackResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { code, redirect_uri } = req.query;\n\n  if (!code) {\n    const errorMessage = 'Code not provided';\n\n    logger.error(errorMessage);\n\n    res.redirect(redirect_uri);\n    return;\n  }\n\n  if (!redirect_uri) {\n    const errorMessage = 'Redirect URI not provided';\n\n    logger.error(errorMessage);\n\n    res.redirect(redirect_uri);\n    return;\n  }\n\n  try {\n    const tokenResponse = await fetch(\n      'https://github.com/login/oauth/access_token',\n      {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Accept: 'application/json',\n        },\n        body: JSON.stringify({\n          client_id: process.env.GITHUB_CLIENT_ID,\n          client_secret: process.env.GITHUB_CLIENT_SECRET,\n          code,\n        }),\n      }\n    );\n\n    const tokenData = await tokenResponse.json();\n\n    const userResponse = await fetch('https://api.github.com/user', {\n      method: 'GET',\n      headers: {\n        Authorization: `Bearer ${tokenData.access_token}`,\n        Accept: 'application/vnd.github.v3+json',\n      },\n    });\n\n    if (!userResponse.ok) {\n      throw new GenericError('GITHUB_FETCH_USER_DATA_FAILED', { userResponse });\n    }\n\n    const userData = await userResponse.json();\n\n    const emailResponse = await fetch('https://api.github.com/user/emails', {\n      method: 'GET',\n      headers: {\n        Authorization: `Bearer ${tokenData.access_token}`,\n        Accept: 'application/vnd.github.v3+json',\n      },\n    });\n\n    if (!emailResponse.ok) {\n      throw new GenericError('GIT_HUB_FETCH_USER_EMAIL_FAILED', {\n        emailResponse,\n      });\n    }\n\n    const emails: { primary: boolean; email: string }[] =\n      await emailResponse.json();\n\n    const primaryEmail = emails.find((email) => email.primary)?.email;\n\n    if (!primaryEmail) {\n      const errorMessage = 'Primary email not found';\n\n      logger.error(errorMessage);\n\n      const responseCode = HttpStatusCodes.NOT_FOUND_404;\n\n      res.redirect(responseCode, redirect_uri);\n      return;\n    }\n\n    let existingUser = await userService.getUserByEmail(primaryEmail);\n\n    if (existingUser) {\n      const existingProvider = await sessionAuthService.getUserProvider(\n        existingUser._id,\n        'github'\n      );\n\n      if (existingProvider?.providerAccountId !== userData.id) {\n        const updatedUser = await sessionAuthService.updateUserProvider(\n          existingUser._id,\n          'github',\n          {\n            providerAccountId: userData.id,\n          }\n        );\n\n        logger.info(\n          `GitHub login provider updated - User: Name: ${updatedUser.name}, id: ${String(updatedUser._id)}`\n        );\n\n        if (updatedUser) {\n          existingUser = updatedUser;\n        }\n      }\n\n      const updatedUser = await userService.updateUserById(existingUser._id, {\n        name: existingUser.name ?? userData.name,\n      });\n\n      await sessionAuthService.setUserAuth(res, updatedUser);\n\n      res.redirect(redirect_uri);\n      return;\n    }\n\n    const userInformation: UserData = {\n      name: userData.name,\n      email: primaryEmail,\n    };\n\n    const userProvider: GithubSessionProvider = {\n      provider: 'github',\n      providerAccountId: userData.id,\n    };\n\n    const user = await userService.createUser({\n      ...userInformation,\n      provider: [userProvider],\n    });\n\n    await sessionAuthService.setUserAuth(res, user);\n\n    logger.info(\n      `GitHub login - User: Name: ${user.name}, id: ${String(user._id)}`\n    );\n\n    await sendEmail({\n      type: 'welcome',\n      to: user.email,\n      username: user.name,\n      loginLink: sessionAuthRoutes.loginEmailPassword.url,\n    });\n\n    res.redirect(redirect_uri);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GoogleLoginQueryParams = {\n  origin: string;\n};\n\nexport type GoogleLoginResult = ResponseData<undefined>;\n\nexport const googleLoginQuery = (\n  req: Request<undefined, undefined, undefined, GoogleLoginQueryParams>,\n  res: ResponseWithInformation<GoogleLoginResult>,\n  _next: NextFunction\n): void => {\n  const { origin } = req.query;\n  const { user } = res.locals;\n\n  if (user) {\n    const errorMessage = `User already logged in - ${user?.email}`;\n\n    logger.error(errorMessage);\n\n    res.redirect(origin);\n    return;\n  }\n\n  const responseType = 'code';\n  const scope = [\n    'https%3A//www.googleapis.com/auth/userinfo.email',\n    'https%3A//www.googleapis.com/auth/userinfo.profile',\n  ].join(' ');\n  const includeGrantedScopes = 'false';\n\n  const encodedOrigin = encodeURIComponent(origin);\n  const state = JSON.stringify({ redirect_uri: encodedOrigin });\n\n  const redirectURI = `${process.env.BACKEND_URL}/api/auth/callback/google`;\n\n  res.redirect(\n    `https://accounts.google.com/o/oauth2/v2/auth?client_id=${process.env.GOOGLE_CLIENT_ID}&redirect_uri=${redirectURI}&response_type=${responseType}&scope=${scope}&include_granted_scopes=${includeGrantedScopes}&state=${state}`\n  );\n};\n\nexport type GoogleCallbackQuery = {\n  code: string;\n  state: string;\n};\n\nexport type GoogleCallbackResult = ResponseData<UserAPI>;\n\n/**\n * Handles Google OAuth 2 callback.\n */\nexport const googleCallback = async (\n  req: Request<undefined, undefined, undefined, GoogleCallbackQuery>,\n  res: ResponseWithInformation<GoogleCallbackResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { code, state } = req.query;\n\n  const decodedState = decodeURIComponent(state);\n  const { redirect_uri } = JSON.parse(decodedState);\n\n  if (!code) {\n    const errorMessage = 'code not provided';\n\n    logger.error(errorMessage);\n\n    const responseCode = HttpStatusCodes.BAD_REQUEST_400;\n\n    res.redirect(responseCode, redirect_uri);\n    return;\n  }\n\n  if (!redirect_uri) {\n    const errorMessage = 'Redirect URI not provided';\n\n    logger.error(errorMessage);\n\n    const responseCode = HttpStatusCodes.BAD_REQUEST_400;\n\n    res.redirect(responseCode, redirect_uri);\n    return;\n  }\n\n  try {\n    // Exchange the authorization code for an access token\n    const tokenResponse = await fetch('https://oauth2.googleapis.com/token', {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({\n        code,\n        redirect_uri: `${process.env.BACKEND_URL}/api/auth/callback/google`,\n        client_id: process.env.GOOGLE_CLIENT_ID!,\n        client_secret: process.env.GOOGLE_CLIENT_SECRET!,\n        grant_type: 'authorization_code',\n      }),\n    });\n\n    const responseData = await tokenResponse.json();\n\n    const { access_token: accessToken } = responseData;\n\n    if (!accessToken) {\n      const errorMessage = 'Failed to fetch access_token';\n\n      logger.error(errorMessage);\n\n      const responseCode = HttpStatusCodes.INTERNAL_SERVER_ERROR_500;\n\n      res.redirect(responseCode, redirect_uri);\n      return;\n    }\n\n    const userResponse = await fetch(\n      'https://www.googleapis.com/oauth2/v3/userinfo',\n      {\n        method: 'GET',\n        headers: {\n          Authorization: `Bearer ${accessToken}`,\n        },\n      }\n    );\n\n    const userData = await userResponse.json();\n\n    if (!userData.email) {\n      const errorMessage = 'Failed to fetch user data from Google';\n\n      logger.error(errorMessage);\n\n      const responseCode = HttpStatusCodes.INTERNAL_SERVER_ERROR_500;\n\n      res.redirect(responseCode, redirect_uri);\n      return;\n    }\n\n    let existingUser = await userService.getUserByEmail(userData.email);\n\n    if (existingUser) {\n      const existingProvider = await sessionAuthService.getUserProvider(\n        existingUser._id,\n        'google'\n      );\n\n      if (existingProvider?.providerAccountId !== userData.sub) {\n        const updatedUser = await sessionAuthService.updateUserProvider(\n          existingUser._id,\n          'google',\n          {\n            providerAccountId: userData.id,\n          }\n        );\n\n        logger.info(\n          `Google login provider updated - User: Name: ${updatedUser.name}, id: ${String(updatedUser._id)}`\n        );\n\n        if (updatedUser) {\n          existingUser = updatedUser;\n        }\n      }\n\n      const updatedUser = await userService.updateUserById(existingUser._id, {\n        name: existingUser.name ?? userData.name,\n      });\n\n      await sessionAuthService.setUserAuth(res, updatedUser);\n\n      res.redirect(redirect_uri);\n      return;\n    }\n\n    const userInformation: UserData = {\n      name: userData.name,\n      email: userData.email,\n    };\n\n    const userProvider: GoogleSessionProvider = {\n      provider: 'google',\n      providerAccountId: userData.id,\n    };\n\n    const user = await userService.createUser({\n      ...userInformation,\n      provider: [userProvider],\n    });\n\n    await sessionAuthService.setUserAuth(res, user);\n\n    logger.info(\n      `Google login - User: Name: ${user.name}, id: ${String(user._id)}`\n    );\n\n    await sendEmail({\n      type: 'welcome',\n      to: user.email,\n      username: user.name,\n      loginLink: sessionAuthRoutes.loginEmailPassword.url,\n    });\n\n    // res.redirect(redirect_uri);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,oBAAuB;AAEvB,yBAAkC;AAClC,mBAA0B;AAC1B,yBAAoC;AACpC,kBAA6B;AAC7B,kBAA8B;AAC9B,oBAAqD;AACrD,6BAAgC;AAChC,kBAA6B;AAC7B,0BAAkD;AAElD,sBAAsB;AACtB,kBAA6B;AAatB,MAAM,eAAe,CAC1B,KACA,KACA,UACG;AACH,QAAM,iBAAa,2BAAc,KAAK,GAAG;AAEzC,QAAM,mBAAe,oCAA8B;AAAA,IACjD,MAAM,EAAE,WAAW;AAAA,EACrB,CAAC;AAED,MAAI,OAAO,aAAa;AACxB,MAAI,KAAK,YAAY;AACvB;AAQO,MAAM,wBAAwB,OACnC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,MAAM;AACR,+BAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,EACF;AAEA,QAAM,WAAW,IAAI;AAErB,MAAI;AACF,QAAIA,QAAO,MAAM,YAAY,eAAe,SAAS,KAAK;AAE1D,QAAIA,OAAM;AACR,YAAM,gBAAgBA,MAAK,UAAU;AAAA,QACnC,CAAC,aAAa,SAAS,aAAa;AAAA,MACtC;AAEA,UAAI,eAAe;AACjB,YAAI,cAAc,gBAAgB;AAChC,qCAAa;AAAA,YACX;AAAA,YACA;AAAA,UACF;AACA;AAAA,QACF,OAAO;AACL,UAAAA,QAAO,MAAM,mBAAmB;AAAA,YAC9BA,MAAK;AAAA,YACL;AAAA,YACA;AAAA,cACE,YAAQ,YAAAC,IAAO;AAAA,YACjB;AAAA,UACF;AAAA,QACF;AAAA,MACF,OAAO;AACL,QAAAD,QAAO,MAAM,mBAAmB,gBAAgBA,MAAK,KAAK;AAAA,UACxD,UAAU;AAAA,UACV,gBAAgB;AAAA,UAChB,YAAQ,YAAAC,IAAO;AAAA,QACjB,CAAC;AAAA,MACH;AAAA,IACF,OAAO;AACL,MAAAD,QAAO,MAAM,YAAY,WAAW,QAAQ;AAC5C,2BAAO,KAAK,qBAAqBA,MAAK,IAAI,MAAMA,MAAK,KAAK,EAAE;AAAA,IAC9D;AAEA,QAAI,CAACA,OAAM;AACT,iCAAa,2BAA2B,KAAK,wBAAwB;AAAA,QACnE,OAAO,SAAS;AAAA,MAClB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,mBAAmB,YAAY,KAAKA,KAAI;AAE9C,UAAM,oBAAgB,0BAAaA,KAAI;AACvC,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,qBAAqB,OAChC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,MAAM;AACR,+BAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,EACF;AAEA,QAAM,EAAE,OAAO,SAAS,IAAI,IAAI;AAEhC,MAAI;AACF,UAAM,EAAE,MAAM,cAAc,MAAM,IAChC,MAAM,mBAAmB,iBAAiB,OAAO,QAAQ;AAE3D,QAAI,OAAO;AACT,UAAI,CAAC,MAAM;AACT,mCAAa,2BAA2B,KAAK,cAAc;AAC3D;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,cAAc;AACjB,iCAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAEA,UAAM,mBAAmB,YAAY,KAAK,YAAY;AAEtD,UAAM,oBAAgB,0BAAa,YAAY;AAC/C,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,yBAAO,KAAK,UAAU,aAAa,KAAK,EAAE;AAE1C,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAOO,MAAM,SAAS,OACpB,MACA,KACA,UACkB;AAClB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,CAAC,MAAM;AACT,+BAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,EACF;AAEA,QAAM,mBAAmB,cAAc,GAAG;AAC1C,qBAAmB,sBAAsB,GAAG;AAC5C,qBAAmB,iBAAiB,GAAG;AAEvC,uBAAO,KAAK,WAAW,KAAK,IAAI,MAAM,KAAK,KAAK,EAAE;AAElD,QAAM,mBAAe,oCAA0B,EAAE,MAAM,OAAU,CAAC;AAElE,MAAI,KAAK,YAAY;AACvB;AAWO,MAAM,iBAAiB,OAC5B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,aAAa,YAAY,IAAI,IAAI;AACzC,MAAI,EAAE,KAAK,IAAI,IAAI;AAEnB,MAAI,CAAC,MAAM;AACT,+BAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,EACF;AAEA,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,MAAM,mBAAmB;AAAA,MACzC,KAAK;AAAA,MACL;AAAA,IACF;AAEA,QAAI,OAAO;AACT,iCAAa,2BAA2B,KAAK,cAAc;AAC3D;AAAA,IACF;AAEA,WAAO,MAAM,mBAAmB;AAAA,MAC9B,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAEA,QAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,iCAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,IACF;AAEA,yBAAO;AAAA,MACL,oCAAoC,KAAK,IAAI,UAAU,OAAO,KAAK,GAAG,CAAC;AAAA,IACzE;AAEA,UAAM,oBAAgB,0BAAa,IAAI;AAEvC,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,QAAQ,OAAO,IAAI,IAAI;AAC/B,QAAM,EAAE,aAAa,IAAI,IAAI;AAE7B,MAAI,CAAC,sBAAM,SAAS,QAAQ,OAAO,SAAS,CAAC,GAAG;AAC9C,+BAAa,2BAA2B,KAAK,iBAAiB;AAC9D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,+BAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,EACF;AAEA,QAAM,OAAO,MAAM,YAAY,YAAY,MAAM;AAEjD,MAAI,CAAC,MAAM;AACT,+BAAa,2BAA2B,KAAK,kBAAkB,EAAE,OAAO,CAAC;AACzE;AAAA,EACF;AAEA,QAAM,mBAAmB,aAAa,KAAK,KAAK,MAAM;AAEtD,uBAAO;AAAA,IACL,gCAAgC,KAAK,IAAI,SAAS,OAAO,KAAK,GAAG,CAAC;AAAA,EACpE;AAEA,YAAM,wBAAU;AAAA,IACd,MAAM;AAAA,IACN,IAAI,KAAK;AAAA,IACT,UAAU,KAAK;AAAA,IACf,WAAW,qCAAkB,mBAAmB;AAAA,EAClD,CAAC;AAED,QAAM,oBAAgB,0BAAa,IAAI;AACvC,QAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,MAAI,KAAK,YAAY;AACvB;AAUO,MAAM,mBAAmB,OAC9B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI,CAAC,OAAO;AACV,+BAAa,2BAA2B,KAAK,oBAAoB;AACjE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,mBAAmB,qBAAqB,KAAK;AAEvE,QAAI,CAAC,aAAa;AAChB,iCAAa,2BAA2B,KAAK,kBAAkB,EAAE,MAAM,CAAC;AACxE;AAAA,IACF;AAEA,yBAAO;AAAA,MACL,uCAAuC,YAAY,IAAI,SAAS,OAAO,YAAY,GAAG,CAAC;AAAA,IACzF;AAEA,cAAM,wBAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,YAAY;AAAA,MAChB,UAAU,YAAY;AAAA,MACtB,WAAW,qCAAkB,cAAc,IAAI;AAAA,QAC7C,QAAQ,OAAO,YAAY,GAAG;AAAA,QAC9B,QACE,YAAY,UAAU;AAAA,UACpB,CAAC,aAAa,SAAS,aAAa;AAAA,QACtC,GAAG,UAAU;AAAA,MACjB,CAAC;AAAA,IACH,CAAC;AAED,UAAM,mBAAe,oCAA0B,EAAE,MAAM,OAAU,CAAC;AAElE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,gBAAgB,OAC3B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,QAAQ,OAAO,IAAI,IAAI;AAC/B,QAAM,WAAmB,IAAI,KAAK;AAElC,QAAM,eAAe,OAAO,MAAM;AAElC,MAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,sBAAM,SAAS,QAAQ,YAAY,GAAG;AACrE,+BAAa,2BAA2B,KAAK,mBAAmB,EAAE,OAAO,CAAC;AAC1E;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ;AACX,+BAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,mBAAmB;AAAA,MAC3C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,yBAAO;AAAA,MACL,kCAAkC,YAAY,IAAI,SAAS,OAAO,YAAY,GAAG,CAAC;AAAA,IACpF;AAEA,cAAM,wBAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,YAAY;AAAA,MAChB,UAAU,YAAY;AAAA,IACxB,CAAC;AAED,UAAM,oBAAgB,0BAAa,WAAW;AAC9C,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAuBO,MAAM,wBAAwB,OACnC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,eAAe,aAAa,IAAI,IAAI;AAE5C,MAAI,EAAE,KAAK,IAAI,IAAI;AACnB,QAAM,EAAE,cAAc,QAAQ,IAAI,IAAI;AAEtC,MAAI;AACF,QAAI,cAAc;AAChB,aAAO,MAAM,YAAY,iBAAiB,YAAY;AAAA,IACxD;AAEA,QAAI,CAAC,MAAM;AACT,iCAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAEA,UAAM,UAAU,KAAK;AAErB,QAAI,CAAC,SAAS;AACZ,iCAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,UAAM,gBAA4C;AAAA,MAChD,OAAG,0BAAa,IAAI;AAAA,MACpB,MAAM;AAAA,IACR;AAEA,UAAM,mBAAe,oCAAmC;AAAA,MACtD,MAAM,EAAE,SAAS,MAAM,eAAe,cAAc,QAAQ;AAAA,IAC9D,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAOO,MAAM,mBAAmB,CAC9B,KACA,KACA,UACS;AACT,QAAM,EAAE,OAAO,IAAI,IAAI;AACvB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,MAAM;AACR,+BAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,EACF;AAEA,QAAM,gBAAgB,mBAAmB,MAAM;AAE/C,QAAM,cAAc,GAAG,QAAQ,IAAI,WAAW,0CAA0C,aAAa;AACrG,QAAM,qBAAqB,mBAAmB,WAAW;AAEzD,MAAI;AAAA,IACF,sDAAsD,QAAQ,IAAI,gBAAgB,iBAAiB,kBAAkB;AAAA,EACvH;AACF;AAYO,MAAM,iBAAiB,OAC5B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,aAAa,IAAI,IAAI;AAEnC,MAAI,CAAC,MAAM;AACT,UAAM,eAAe;AAErB,yBAAO,MAAM,YAAY;AAEzB,QAAI,SAAS,YAAY;AACzB;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,UAAM,eAAe;AAErB,yBAAO,MAAM,YAAY;AAEzB,QAAI,SAAS,YAAY;AACzB;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,QAAQ;AAAA,QACV;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,WAAW,QAAQ,IAAI;AAAA,UACvB,eAAe,QAAQ,IAAI;AAAA,UAC3B;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,cAAc,KAAK;AAE3C,UAAM,eAAe,MAAM,MAAM,+BAA+B;AAAA,MAC9D,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,UAAU,YAAY;AAAA,QAC/C,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAED,QAAI,CAAC,aAAa,IAAI;AACpB,YAAM,IAAI,2BAAa,iCAAiC,EAAE,aAAa,CAAC;AAAA,IAC1E;AAEA,UAAM,WAAW,MAAM,aAAa,KAAK;AAEzC,UAAM,gBAAgB,MAAM,MAAM,sCAAsC;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,UAAU,YAAY;AAAA,QAC/C,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAED,QAAI,CAAC,cAAc,IAAI;AACrB,YAAM,IAAI,2BAAa,mCAAmC;AAAA,QACxD;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,SACJ,MAAM,cAAc,KAAK;AAE3B,UAAM,eAAe,OAAO,KAAK,CAAC,UAAU,MAAM,OAAO,GAAG;AAE5D,QAAI,CAAC,cAAc;AACjB,YAAM,eAAe;AAErB,2BAAO,MAAM,YAAY;AAEzB,YAAM,eAAe,uCAAgB;AAErC,UAAI,SAAS,cAAc,YAAY;AACvC;AAAA,IACF;AAEA,QAAI,eAAe,MAAM,YAAY,eAAe,YAAY;AAEhE,QAAI,cAAc;AAChB,YAAM,mBAAmB,MAAM,mBAAmB;AAAA,QAChD,aAAa;AAAA,QACb;AAAA,MACF;AAEA,UAAI,kBAAkB,sBAAsB,SAAS,IAAI;AACvD,cAAME,eAAc,MAAM,mBAAmB;AAAA,UAC3C,aAAa;AAAA,UACb;AAAA,UACA;AAAA,YACE,mBAAmB,SAAS;AAAA,UAC9B;AAAA,QACF;AAEA,6BAAO;AAAA,UACL,+CAA+CA,aAAY,IAAI,SAAS,OAAOA,aAAY,GAAG,CAAC;AAAA,QACjG;AAEA,YAAIA,cAAa;AACf,yBAAeA;AAAA,QACjB;AAAA,MACF;AAEA,YAAM,cAAc,MAAM,YAAY,eAAe,aAAa,KAAK;AAAA,QACrE,MAAM,aAAa,QAAQ,SAAS;AAAA,MACtC,CAAC;AAED,YAAM,mBAAmB,YAAY,KAAK,WAAW;AAErD,UAAI,SAAS,YAAY;AACzB;AAAA,IACF;AAEA,UAAM,kBAA4B;AAAA,MAChC,MAAM,SAAS;AAAA,MACf,OAAO;AAAA,IACT;AAEA,UAAM,eAAsC;AAAA,MAC1C,UAAU;AAAA,MACV,mBAAmB,SAAS;AAAA,IAC9B;AAEA,UAAM,OAAO,MAAM,YAAY,WAAW;AAAA,MACxC,GAAG;AAAA,MACH,UAAU,CAAC,YAAY;AAAA,IACzB,CAAC;AAED,UAAM,mBAAmB,YAAY,KAAK,IAAI;AAE9C,yBAAO;AAAA,MACL,8BAA8B,KAAK,IAAI,SAAS,OAAO,KAAK,GAAG,CAAC;AAAA,IAClE;AAEA,cAAM,wBAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,WAAW,qCAAkB,mBAAmB;AAAA,IAClD,CAAC;AAED,QAAI,SAAS,YAAY;AAAA,EAC3B,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,mBAAmB,CAC9B,KACA,KACA,UACS;AACT,QAAM,EAAE,OAAO,IAAI,IAAI;AACvB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,MAAM;AACR,UAAM,eAAe,4BAA4B,MAAM,KAAK;AAE5D,yBAAO,MAAM,YAAY;AAEzB,QAAI,SAAS,MAAM;AACnB;AAAA,EACF;AAEA,QAAM,eAAe;AACrB,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,EACF,EAAE,KAAK,GAAG;AACV,QAAM,uBAAuB;AAE7B,QAAM,gBAAgB,mBAAmB,MAAM;AAC/C,QAAM,QAAQ,KAAK,UAAU,EAAE,cAAc,cAAc,CAAC;AAE5D,QAAM,cAAc,GAAG,QAAQ,IAAI,WAAW;AAE9C,MAAI;AAAA,IACF,0DAA0D,QAAQ,IAAI,gBAAgB,iBAAiB,WAAW,kBAAkB,YAAY,UAAU,KAAK,2BAA2B,oBAAoB,UAAU,KAAK;AAAA,EAC/N;AACF;AAYO,MAAM,iBAAiB,OAC5B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,MAAM,IAAI,IAAI;AAE5B,QAAM,eAAe,mBAAmB,KAAK;AAC7C,QAAM,EAAE,aAAa,IAAI,KAAK,MAAM,YAAY;AAEhD,MAAI,CAAC,MAAM;AACT,UAAM,eAAe;AAErB,yBAAO,MAAM,YAAY;AAEzB,UAAM,eAAe,uCAAgB;AAErC,QAAI,SAAS,cAAc,YAAY;AACvC;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,UAAM,eAAe;AAErB,yBAAO,MAAM,YAAY;AAEzB,UAAM,eAAe,uCAAgB;AAErC,QAAI,SAAS,cAAc,YAAY;AACvC;AAAA,EACF;AAEA,MAAI;AAEF,UAAM,gBAAgB,MAAM,MAAM,uCAAuC;AAAA,MACvE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,IAAI,gBAAgB;AAAA,QACxB;AAAA,QACA,cAAc,GAAG,QAAQ,IAAI,WAAW;AAAA,QACxC,WAAW,QAAQ,IAAI;AAAA,QACvB,eAAe,QAAQ,IAAI;AAAA,QAC3B,YAAY;AAAA,MACd,CAAC;AAAA,IACH,CAAC;AAED,UAAM,eAAe,MAAM,cAAc,KAAK;AAE9C,UAAM,EAAE,cAAc,YAAY,IAAI;AAEtC,QAAI,CAAC,aAAa;AAChB,YAAM,eAAe;AAErB,2BAAO,MAAM,YAAY;AAEzB,YAAM,eAAe,uCAAgB;AAErC,UAAI,SAAS,cAAc,YAAY;AACvC;AAAA,IACF;AAEA,UAAM,eAAe,MAAM;AAAA,MACzB;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,UAAU,WAAW;AAAA,QACtC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,aAAa,KAAK;AAEzC,QAAI,CAAC,SAAS,OAAO;AACnB,YAAM,eAAe;AAErB,2BAAO,MAAM,YAAY;AAEzB,YAAM,eAAe,uCAAgB;AAErC,UAAI,SAAS,cAAc,YAAY;AACvC;AAAA,IACF;AAEA,QAAI,eAAe,MAAM,YAAY,eAAe,SAAS,KAAK;AAElE,QAAI,cAAc;AAChB,YAAM,mBAAmB,MAAM,mBAAmB;AAAA,QAChD,aAAa;AAAA,QACb;AAAA,MACF;AAEA,UAAI,kBAAkB,sBAAsB,SAAS,KAAK;AACxD,cAAMA,eAAc,MAAM,mBAAmB;AAAA,UAC3C,aAAa;AAAA,UACb;AAAA,UACA;AAAA,YACE,mBAAmB,SAAS;AAAA,UAC9B;AAAA,QACF;AAEA,6BAAO;AAAA,UACL,+CAA+CA,aAAY,IAAI,SAAS,OAAOA,aAAY,GAAG,CAAC;AAAA,QACjG;AAEA,YAAIA,cAAa;AACf,yBAAeA;AAAA,QACjB;AAAA,MACF;AAEA,YAAM,cAAc,MAAM,YAAY,eAAe,aAAa,KAAK;AAAA,QACrE,MAAM,aAAa,QAAQ,SAAS;AAAA,MACtC,CAAC;AAED,YAAM,mBAAmB,YAAY,KAAK,WAAW;AAErD,UAAI,SAAS,YAAY;AACzB;AAAA,IACF;AAEA,UAAM,kBAA4B;AAAA,MAChC,MAAM,SAAS;AAAA,MACf,OAAO,SAAS;AAAA,IAClB;AAEA,UAAM,eAAsC;AAAA,MAC1C,UAAU;AAAA,MACV,mBAAmB,SAAS;AAAA,IAC9B;AAEA,UAAM,OAAO,MAAM,YAAY,WAAW;AAAA,MACxC,GAAG;AAAA,MACH,UAAU,CAAC,YAAY;AAAA,IACzB,CAAC;AAED,UAAM,mBAAmB,YAAY,KAAK,IAAI;AAE9C,yBAAO;AAAA,MACL,8BAA8B,KAAK,IAAI,SAAS,OAAO,KAAK,GAAG,CAAC;AAAA,IAClE;AAEA,cAAM,wBAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,WAAW,qCAAkB,mBAAmB;AAAA,IAClD,CAAC;AAAA,EAGH,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":["user","uuidv4","updatedUser"]}
+{"version":3,"sources":["../../../src/controllers/sessionAuth.controller.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\nimport { logger } from '@logger';\nimport type { ResponseWithInformation } from '@middlewares/sessionAuth.middleware';\nimport { sessionAuthRoutes } from '@routes/sessionAuth.routes';\nimport { sendEmail } from '@services/email.service';\nimport * as sessionAuthService from '@services/sessionAuth.service';\nimport * as userService from '@services/user.service';\nimport { generateToken } from '@utils/CSRF';\nimport { ErrorHandler, AppError, GenericError } from '@utils/errors';\nimport { HttpStatusCodes } from '@utils/httpStatusCodes';\nimport { mapOrganizationToAPI } from '@utils/mapper/organization';\nimport { mapProjectToAPI } from '@utils/mapper/project';\nimport { mapUserToAPI } from '@utils/mapper/user';\nimport { formatResponse, type ResponseData } from '@utils/responseData';\nimport type { NextFunction, Request, Response } from 'express';\nimport { Types } from 'mongoose';\nimport { v4 as uuidv4 } from 'uuid';\nimport { Organization, OrganizationAPI } from '@/types/organization.types';\nimport { Project, ProjectAPI } from '@/types/project.types';\nimport type {\n  Session,\n  GithubSessionProvider,\n  GoogleSessionProvider,\n} from '@/types/session.types';\nimport type { UserAPI, UserData } from '@/types/user.types';\n\nexport type CSRFTokenData = { csrf_token: string };\nexport type SetCSRFTokenResult = ResponseData<CSRFTokenData>;\n\nexport const setCSRFToken = (\n  req: Request,\n  res: Response<SetCSRFTokenResult>,\n  _next: NextFunction\n) => {\n  const csrf_token = generateToken(req, res);\n\n  const responseData = formatResponse<CSRFTokenData>({\n    data: { csrf_token },\n  });\n\n  res.locals.csrf_token = csrf_token;\n  res.json(responseData);\n};\n\nexport type RegisterBody = { email: string; password: string };\nexport type RegisterResult = ResponseData<UserAPI>;\n\n/**\n * Handles user registration.\n */\nexport const registerEmailPassword = async (\n  req: Request<any, any, RegisterBody>,\n  res: ResponseWithInformation<RegisterResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user } = res.locals;\n\n  if (user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_ALREADY_LOGGED_IN');\n    return;\n  }\n\n  const userData = req.body;\n\n  try {\n    let user = await userService.getUserByEmail(userData.email);\n\n    if (user) {\n      const emailProvider = user.provider?.find(\n        (provider) => provider.provider === 'email'\n      );\n\n      if (emailProvider) {\n        if (emailProvider.emailValidated) {\n          ErrorHandler.handleGenericErrorResponse(\n            res,\n            'EMAIL_ALREADY_VALIDATED'\n          );\n          return;\n        } else {\n          user = await sessionAuthService.updateUserProvider(\n            user._id,\n            'email',\n            {\n              secret: uuidv4(),\n            }\n          );\n        }\n      } else {\n        user = await sessionAuthService.addUserProvider(user._id, {\n          provider: 'email',\n          emailValidated: undefined,\n          secret: uuidv4(),\n        });\n      }\n    } else {\n      user = await userService.createUser(userData);\n      logger.info(`New registration: ${user.name} - ${user.email}`);\n    }\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_CREATION_FAILED', {\n        email: userData.email,\n      });\n      return;\n    }\n\n    await sessionAuthService.setUserAuth(res, user);\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type LoginBody = {\n  email: string;\n  password: string;\n};\nexport type LoginResult = ResponseData<UserAPI>;\n\n/**\n * Handles user login.\n */\nexport const loginEmailPassword = async (\n  req: Request<any, any, LoginBody>,\n  res: ResponseWithInformation<LoginResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user } = res.locals;\n\n  if (user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_ALREADY_LOGGED_IN');\n    return;\n  }\n\n  const { email, password } = req.body;\n\n  try {\n    const { user: loggedInUser, error } =\n      await sessionAuthService.testUserPassword(email, password);\n\n    if (error) {\n      if (!user) {\n        ErrorHandler.handleGenericErrorResponse(res, 'LOGIN_FAILED');\n        return;\n      }\n    }\n\n    if (!loggedInUser) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    await sessionAuthService.setUserAuth(res, loggedInUser);\n\n    const formattedUser = mapUserToAPI(loggedInUser);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    logger.info(`Login: ${loggedInUser.email}`);\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type LogoutResult = ResponseData<undefined>;\n\n/**\n * Handles user logout and clears cookies.\n */\nexport const logOut = async (\n  _req: Request,\n  res: ResponseWithInformation<LogoutResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  await sessionAuthService.clearUserAuth(res);\n  sessionAuthService.clearOrganizationAuth(res);\n  sessionAuthService.clearProjectAuth(res);\n\n  logger.info(`Logout: ${user.name} - ${user.email}`);\n\n  const responseData = formatResponse<undefined>({ data: undefined });\n\n  res.json(responseData);\n};\n\nexport type UpdatePasswordBody = {\n  oldPassword: string;\n  newPassword: string;\n};\nexport type UpdatePasswordResult = ResponseData<UserAPI>;\n\n/**\n * Updates the user's password.\n */\nexport const updatePassword = async (\n  req: Request<undefined, any, UpdatePasswordBody>,\n  res: ResponseWithInformation<UpdatePasswordResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { oldPassword, newPassword } = req.body;\n  let { user } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    const { error } = await sessionAuthService.testUserPassword(\n      user.email,\n      oldPassword\n    );\n\n    if (error) {\n      ErrorHandler.handleGenericErrorResponse(res, 'LOGIN_FAILED');\n      return;\n    }\n\n    user = await sessionAuthService.changeUserPassword(\n      user._id,\n      oldPassword,\n      newPassword\n    );\n\n    if (!user || typeof user !== 'object') {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_DATA_NOT_FOUND');\n      return;\n    }\n\n    logger.info(\n      `Password changed - User : Name : ${user.name}, id : ${String(user._id)}`\n    );\n\n    const formattedUser = mapUserToAPI(user);\n\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type ValidEmailParams = { secret: string; userId: string };\nexport type ValidEmailResult = ResponseData<UserAPI>;\n\n/**\n * Validates a user's email based on the provided secret and user ID.\n */\nexport const validEmail = async (\n  req: Request<ValidEmailParams, any, any>,\n  res: ResponseWithInformation<ValidEmailResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId, secret } = req.params;\n  const { organization } = res.locals;\n\n  if (!Types.ObjectId.isValid(userId.toString())) {\n    ErrorHandler.handleGenericErrorResponse(res, 'INVALID_USER_ID');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  const user = await userService.getUserById(userId);\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED', {\n      userId,\n    });\n    return;\n  }\n\n  await sessionAuthService.activateUser(user._id, secret);\n\n  logger.info(\n    `User activated - User: Name: ${user.name}, id: ${String(user._id)}`\n  );\n\n  await sendEmail({\n    type: 'welcome',\n    to: user.email,\n    username: user.name,\n    loginLink: sessionAuthRoutes.loginEmailPassword.url,\n  });\n\n  const formattedUser = mapUserToAPI(user);\n  const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n  res.json(responseData);\n};\n\nexport type AskResetPasswordBody = {\n  email: string;\n};\nexport type AskResetPasswordResult = ResponseData<undefined>;\n\n/**\n * Requests a password reset for a user.\n */\nexport const askResetPassword = async (\n  req: Request<undefined, any, AskResetPasswordBody>,\n  res: ResponseWithInformation<AskResetPasswordResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { email } = req.body as Partial<AskResetPasswordBody>;\n\n  if (!email) {\n    ErrorHandler.handleGenericErrorResponse(res, 'EMAIL_NOT_PROVIDED');\n    return;\n  }\n\n  try {\n    const updatedUser = await sessionAuthService.requestPasswordReset(email);\n\n    if (!updatedUser) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND', { email });\n      return;\n    }\n\n    logger.info(\n      `Ask changing password - User: Name: ${updatedUser.name}, id: ${String(updatedUser._id)}`\n    );\n\n    await sendEmail({\n      type: 'resetPassword',\n      to: updatedUser.email,\n      username: updatedUser.name,\n      resetLink: sessionAuthRoutes.resetPassword.url({\n        userId: String(updatedUser._id),\n        secret:\n          updatedUser.provider?.find(\n            (provider) => provider.provider === 'email'\n          )?.secret ?? '',\n      }),\n    });\n\n    const responseData = formatResponse<undefined>({ data: undefined });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type ResetPasswordParams = { secret: string; userId: string };\nexport type ResetPasswordResult = ResponseData<UserAPI>;\n\n/**\n * Resets a user's password based on the provided secret and user ID.\n */\nexport const resetPassword = async (\n  req: Request<ResetPasswordParams, any, any>,\n  res: Response<ResetPasswordResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { secret, userId } = req.params as Partial<ResetPasswordParams>;\n  const password: string = req.body.password;\n\n  const userIdString = String(userId);\n\n  if (!userId || !userIdString || !Types.ObjectId.isValid(userIdString)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'INVALID_USER_ID', { userId });\n    return;\n  }\n\n  if (!secret) {\n    ErrorHandler.handleGenericErrorResponse(res, 'SECRET_NOT_PROVIDED');\n    return;\n  }\n\n  try {\n    const updatedUser = await sessionAuthService.resetUserPassword(\n      userId,\n      secret,\n      password\n    );\n\n    logger.info(\n      `Password changed - User: Name: ${updatedUser.name}, id: ${String(updatedUser._id)}`\n    );\n\n    await sendEmail({\n      type: 'passwordChangeConfirmation',\n      to: updatedUser.email,\n      username: updatedUser.name,\n    });\n\n    const formattedUser = mapUserToAPI(updatedUser);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type CreateSessionBody = {\n  sessionToken: string;\n  userId: string;\n  expires: Date;\n};\nexport type CreateSessionResult = ResponseData<Session>;\n\nexport type GetSessionInformationQuery = {\n  session_token?: string;\n};\ntype SessionInformation = {\n  user: UserAPI | null;\n  organization: OrganizationAPI | null;\n  project: ProjectAPI | null;\n  session: Session | null;\n};\nexport type GetSessionInformationResult = ResponseData<SessionInformation>;\n\n/**\n * Gets information about a session for a user.\n */\nexport const getSessionInformation = async (\n  req: Request<undefined, undefined, undefined, GetSessionInformationQuery>,\n  res: ResponseWithInformation<GetSessionInformationResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { session_token: sessionToken } = req.query;\n\n  let { user } = res.locals;\n  const { organization, project, isOrganizationAdmin, isProjectAdmin } =\n    res.locals;\n\n  try {\n    if (sessionToken) {\n      user = await userService.getUserBySession(sessionToken);\n    }\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n      return;\n    }\n\n    const session = user.session;\n\n    if (!session) {\n      ErrorHandler.handleGenericErrorResponse(res, 'SESSION_NOT_FOUND');\n      return;\n    }\n\n    const formattedUser: SessionInformation['user'] = {\n      ...mapUserToAPI(user),\n      role: 'user',\n    };\n\n    const responseData = formatResponse<SessionInformation>({\n      data: {\n        session,\n        user: formattedUser,\n        organization: organization?._id\n          ? mapOrganizationToAPI(organization, isOrganizationAdmin)\n          : null,\n        project: project?._id\n          ? mapProjectToAPI(project, user, isProjectAdmin)\n          : null,\n      },\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GithubLoginQueryParams = {\n  origin: string;\n};\nexport type GithubLoginQueryResult = ResponseData<undefined>;\n\nexport const githubLoginQuery = (\n  req: Request<undefined, undefined, undefined, GithubLoginQueryParams>,\n  res: ResponseWithInformation<GithubLoginQueryResult>,\n  _next: NextFunction\n): void => {\n  const { origin } = req.query;\n  const { user } = res.locals;\n\n  if (user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_ALREADY_LOGGED_IN');\n    return;\n  }\n\n  const encodedOrigin = encodeURIComponent(origin);\n\n  const redirectURI = `${process.env.BACKEND_URL}/api/auth/callback/github?redirect_uri=${encodedOrigin}`;\n  const encodedRedirectURI = encodeURIComponent(redirectURI);\n\n  res.redirect(\n    `https://github.com/login/oauth/authorize?client_id=${process.env.GITHUB_CLIENT_ID}&redirect_uri=${encodedRedirectURI}`\n  );\n};\n\nexport type GithubCallbackQuery = {\n  code: string;\n  redirect_uri: string;\n};\n\nexport type GithubCallbackResult = ResponseData<UserAPI>;\n\n/**\n * Handles GitHub OAuth callback.\n */\nexport const githubCallback = async (\n  req: Request<undefined, undefined, undefined, GithubCallbackQuery>,\n  res: ResponseWithInformation<GithubCallbackResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { code, redirect_uri } = req.query;\n\n  if (!code) {\n    const errorMessage = 'Code not provided';\n\n    logger.error(errorMessage);\n\n    res.redirect(redirect_uri);\n    return;\n  }\n\n  if (!redirect_uri) {\n    const errorMessage = 'Redirect URI not provided';\n\n    logger.error(errorMessage);\n\n    res.redirect(redirect_uri);\n    return;\n  }\n\n  try {\n    const tokenResponse = await fetch(\n      'https://github.com/login/oauth/access_token',\n      {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Accept: 'application/json',\n        },\n        body: JSON.stringify({\n          client_id: process.env.GITHUB_CLIENT_ID,\n          client_secret: process.env.GITHUB_CLIENT_SECRET,\n          code,\n        }),\n      }\n    );\n\n    const tokenData = await tokenResponse.json();\n\n    const userResponse = await fetch('https://api.github.com/user', {\n      method: 'GET',\n      headers: {\n        Authorization: `Bearer ${tokenData.access_token}`,\n        Accept: 'application/vnd.github.v3+json',\n      },\n    });\n\n    if (!userResponse.ok) {\n      throw new GenericError('GITHUB_FETCH_USER_DATA_FAILED', { userResponse });\n    }\n\n    const userData = await userResponse.json();\n\n    const emailResponse = await fetch('https://api.github.com/user/emails', {\n      method: 'GET',\n      headers: {\n        Authorization: `Bearer ${tokenData.access_token}`,\n        Accept: 'application/vnd.github.v3+json',\n      },\n    });\n\n    if (!emailResponse.ok) {\n      throw new GenericError('GIT_HUB_FETCH_USER_EMAIL_FAILED', {\n        emailResponse,\n      });\n    }\n\n    const emails: { primary: boolean; email: string }[] =\n      await emailResponse.json();\n\n    const primaryEmail = emails.find((email) => email.primary)?.email;\n\n    if (!primaryEmail) {\n      const errorMessage = 'Primary email not found';\n\n      logger.error(errorMessage);\n\n      const responseCode = HttpStatusCodes.NOT_FOUND_404;\n\n      res.redirect(responseCode, redirect_uri);\n      return;\n    }\n\n    let existingUser = await userService.getUserByEmail(primaryEmail);\n\n    if (existingUser) {\n      const existingProvider = await sessionAuthService.getUserProvider(\n        existingUser._id,\n        'github'\n      );\n\n      if (existingProvider?.providerAccountId !== userData.id) {\n        const updatedUser = await sessionAuthService.updateUserProvider(\n          existingUser._id,\n          'github',\n          {\n            providerAccountId: userData.id,\n          }\n        );\n\n        logger.info(\n          `GitHub login provider updated - User: Name: ${updatedUser.name}, id: ${String(updatedUser._id)}`\n        );\n\n        if (updatedUser) {\n          existingUser = updatedUser;\n        }\n      }\n\n      const updatedUser = await userService.updateUserById(existingUser._id, {\n        name: existingUser.name ?? userData.name,\n      });\n\n      await sessionAuthService.setUserAuth(res, updatedUser);\n\n      res.redirect(redirect_uri);\n      return;\n    }\n\n    const userInformation: UserData = {\n      name: userData.name,\n      email: primaryEmail,\n    };\n\n    const userProvider: GithubSessionProvider = {\n      provider: 'github',\n      providerAccountId: userData.id,\n    };\n\n    const user = await userService.createUser({\n      ...userInformation,\n      provider: [userProvider],\n    });\n\n    await sessionAuthService.setUserAuth(res, user);\n\n    logger.info(\n      `GitHub login - User: Name: ${user.name}, id: ${String(user._id)}`\n    );\n\n    await sendEmail({\n      type: 'welcome',\n      to: user.email,\n      username: user.name,\n      loginLink: sessionAuthRoutes.loginEmailPassword.url,\n    });\n\n    res.redirect(redirect_uri);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GoogleLoginQueryParams = {\n  origin: string;\n};\n\nexport type GoogleLoginResult = ResponseData<undefined>;\n\nexport const googleLoginQuery = (\n  req: Request<undefined, undefined, undefined, GoogleLoginQueryParams>,\n  res: ResponseWithInformation<GoogleLoginResult>,\n  _next: NextFunction\n): void => {\n  const { origin } = req.query;\n  const { user } = res.locals;\n\n  if (user) {\n    const errorMessage = `User already logged in - ${user?.email}`;\n\n    logger.error(errorMessage);\n\n    res.redirect(origin);\n    return;\n  }\n\n  const responseType = 'code';\n  const scope = [\n    'https%3A//www.googleapis.com/auth/userinfo.email',\n    'https%3A//www.googleapis.com/auth/userinfo.profile',\n  ].join(' ');\n  const includeGrantedScopes = 'false';\n\n  const encodedOrigin = encodeURIComponent(origin);\n  const state = JSON.stringify({ redirect_uri: encodedOrigin });\n\n  const redirectURI = `${process.env.BACKEND_URL}/api/auth/callback/google`;\n\n  res.redirect(\n    `https://accounts.google.com/o/oauth2/v2/auth?client_id=${process.env.GOOGLE_CLIENT_ID}&redirect_uri=${redirectURI}&response_type=${responseType}&scope=${scope}&include_granted_scopes=${includeGrantedScopes}&state=${state}`\n  );\n};\n\nexport type GoogleCallbackQuery = {\n  code: string;\n  state: string;\n};\n\nexport type GoogleCallbackResult = ResponseData<UserAPI>;\n\n/**\n * Handles Google OAuth 2 callback.\n */\nexport const googleCallback = async (\n  req: Request<undefined, undefined, undefined, GoogleCallbackQuery>,\n  res: ResponseWithInformation<GoogleCallbackResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { code, state } = req.query;\n\n  const decodedState = decodeURIComponent(state);\n  const { redirect_uri } = JSON.parse(decodedState);\n\n  if (!code) {\n    const errorMessage = 'code not provided';\n\n    logger.error(errorMessage);\n\n    const responseCode = HttpStatusCodes.BAD_REQUEST_400;\n\n    res.redirect(responseCode, redirect_uri);\n    return;\n  }\n\n  if (!redirect_uri) {\n    const errorMessage = 'Redirect URI not provided';\n\n    logger.error(errorMessage);\n\n    const responseCode = HttpStatusCodes.BAD_REQUEST_400;\n\n    res.redirect(responseCode, redirect_uri);\n    return;\n  }\n\n  try {\n    // Exchange the authorization code for an access token\n    const tokenResponse = await fetch('https://oauth2.googleapis.com/token', {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({\n        code,\n        redirect_uri: `${process.env.BACKEND_URL}/api/auth/callback/google`,\n        client_id: process.env.GOOGLE_CLIENT_ID!,\n        client_secret: process.env.GOOGLE_CLIENT_SECRET!,\n        grant_type: 'authorization_code',\n      }),\n    });\n\n    const responseData = await tokenResponse.json();\n\n    const { access_token: accessToken } = responseData;\n\n    if (!accessToken) {\n      const errorMessage = 'Failed to fetch access_token';\n\n      logger.error(errorMessage);\n\n      const responseCode = HttpStatusCodes.INTERNAL_SERVER_ERROR_500;\n\n      res.redirect(responseCode, redirect_uri);\n      return;\n    }\n\n    const userResponse = await fetch(\n      'https://www.googleapis.com/oauth2/v3/userinfo',\n      {\n        method: 'GET',\n        headers: {\n          Authorization: `Bearer ${accessToken}`,\n        },\n      }\n    );\n\n    const userData = await userResponse.json();\n\n    if (!userData.email) {\n      const errorMessage = 'Failed to fetch user data from Google';\n\n      logger.error(errorMessage);\n\n      const responseCode = HttpStatusCodes.INTERNAL_SERVER_ERROR_500;\n\n      res.redirect(responseCode, redirect_uri);\n      return;\n    }\n\n    let existingUser = await userService.getUserByEmail(userData.email);\n\n    if (existingUser) {\n      const existingProvider = await sessionAuthService.getUserProvider(\n        existingUser._id,\n        'google'\n      );\n\n      if (existingProvider?.providerAccountId !== userData.sub) {\n        const updatedUser = await sessionAuthService.updateUserProvider(\n          existingUser._id,\n          'google',\n          {\n            providerAccountId: userData.id,\n          }\n        );\n\n        logger.info(\n          `Google login provider updated - User: Name: ${updatedUser.name}, id: ${String(updatedUser._id)}`\n        );\n\n        if (updatedUser) {\n          existingUser = updatedUser;\n        }\n      }\n\n      const updatedUser = await userService.updateUserById(existingUser._id, {\n        name: existingUser.name ?? userData.name,\n      });\n\n      await sessionAuthService.setUserAuth(res, updatedUser);\n\n      res.redirect(redirect_uri);\n      return;\n    }\n\n    const userInformation: UserData = {\n      name: userData.name,\n      email: userData.email,\n    };\n\n    const userProvider: GoogleSessionProvider = {\n      provider: 'google',\n      providerAccountId: userData.id,\n    };\n\n    const user = await userService.createUser({\n      ...userInformation,\n      provider: [userProvider],\n    });\n\n    await sessionAuthService.setUserAuth(res, user);\n\n    logger.info(\n      `Google login - User: Name: ${user.name}, id: ${String(user._id)}`\n    );\n\n    await sendEmail({\n      type: 'welcome',\n      to: user.email,\n      username: user.name,\n      loginLink: sessionAuthRoutes.loginEmailPassword.url,\n    });\n\n    // res.redirect(redirect_uri);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,oBAAuB;AAEvB,yBAAkC;AAClC,mBAA0B;AAC1B,yBAAoC;AACpC,kBAA6B;AAC7B,kBAA8B;AAC9B,oBAAqD;AACrD,6BAAgC;AAChC,0BAAqC;AACrC,qBAAgC;AAChC,kBAA6B;AAC7B,0BAAkD;AAElD,sBAAsB;AACtB,kBAA6B;AAatB,MAAM,eAAe,CAC1B,KACA,KACA,UACG;AACH,QAAM,iBAAa,2BAAc,KAAK,GAAG;AAEzC,QAAM,mBAAe,oCAA8B;AAAA,IACjD,MAAM,EAAE,WAAW;AAAA,EACrB,CAAC;AAED,MAAI,OAAO,aAAa;AACxB,MAAI,KAAK,YAAY;AACvB;AAQO,MAAM,wBAAwB,OACnC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,MAAM;AACR,+BAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,EACF;AAEA,QAAM,WAAW,IAAI;AAErB,MAAI;AACF,QAAIA,QAAO,MAAM,YAAY,eAAe,SAAS,KAAK;AAE1D,QAAIA,OAAM;AACR,YAAM,gBAAgBA,MAAK,UAAU;AAAA,QACnC,CAAC,aAAa,SAAS,aAAa;AAAA,MACtC;AAEA,UAAI,eAAe;AACjB,YAAI,cAAc,gBAAgB;AAChC,qCAAa;AAAA,YACX;AAAA,YACA;AAAA,UACF;AACA;AAAA,QACF,OAAO;AACL,UAAAA,QAAO,MAAM,mBAAmB;AAAA,YAC9BA,MAAK;AAAA,YACL;AAAA,YACA;AAAA,cACE,YAAQ,YAAAC,IAAO;AAAA,YACjB;AAAA,UACF;AAAA,QACF;AAAA,MACF,OAAO;AACL,QAAAD,QAAO,MAAM,mBAAmB,gBAAgBA,MAAK,KAAK;AAAA,UACxD,UAAU;AAAA,UACV,gBAAgB;AAAA,UAChB,YAAQ,YAAAC,IAAO;AAAA,QACjB,CAAC;AAAA,MACH;AAAA,IACF,OAAO;AACL,MAAAD,QAAO,MAAM,YAAY,WAAW,QAAQ;AAC5C,2BAAO,KAAK,qBAAqBA,MAAK,IAAI,MAAMA,MAAK,KAAK,EAAE;AAAA,IAC9D;AAEA,QAAI,CAACA,OAAM;AACT,iCAAa,2BAA2B,KAAK,wBAAwB;AAAA,QACnE,OAAO,SAAS;AAAA,MAClB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,mBAAmB,YAAY,KAAKA,KAAI;AAE9C,UAAM,oBAAgB,0BAAaA,KAAI;AACvC,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,qBAAqB,OAChC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,MAAM;AACR,+BAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,EACF;AAEA,QAAM,EAAE,OAAO,SAAS,IAAI,IAAI;AAEhC,MAAI;AACF,UAAM,EAAE,MAAM,cAAc,MAAM,IAChC,MAAM,mBAAmB,iBAAiB,OAAO,QAAQ;AAE3D,QAAI,OAAO;AACT,UAAI,CAAC,MAAM;AACT,mCAAa,2BAA2B,KAAK,cAAc;AAC3D;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,cAAc;AACjB,iCAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAEA,UAAM,mBAAmB,YAAY,KAAK,YAAY;AAEtD,UAAM,oBAAgB,0BAAa,YAAY;AAC/C,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,yBAAO,KAAK,UAAU,aAAa,KAAK,EAAE;AAE1C,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAOO,MAAM,SAAS,OACpB,MACA,KACA,UACkB;AAClB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,CAAC,MAAM;AACT,+BAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,QAAM,mBAAmB,cAAc,GAAG;AAC1C,qBAAmB,sBAAsB,GAAG;AAC5C,qBAAmB,iBAAiB,GAAG;AAEvC,uBAAO,KAAK,WAAW,KAAK,IAAI,MAAM,KAAK,KAAK,EAAE;AAElD,QAAM,mBAAe,oCAA0B,EAAE,MAAM,OAAU,CAAC;AAElE,MAAI,KAAK,YAAY;AACvB;AAWO,MAAM,iBAAiB,OAC5B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,aAAa,YAAY,IAAI,IAAI;AACzC,MAAI,EAAE,KAAK,IAAI,IAAI;AAEnB,MAAI,CAAC,MAAM;AACT,+BAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,MAAM,mBAAmB;AAAA,MACzC,KAAK;AAAA,MACL;AAAA,IACF;AAEA,QAAI,OAAO;AACT,iCAAa,2BAA2B,KAAK,cAAc;AAC3D;AAAA,IACF;AAEA,WAAO,MAAM,mBAAmB;AAAA,MAC9B,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAEA,QAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,iCAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,IACF;AAEA,yBAAO;AAAA,MACL,oCAAoC,KAAK,IAAI,UAAU,OAAO,KAAK,GAAG,CAAC;AAAA,IACzE;AAEA,UAAM,oBAAgB,0BAAa,IAAI;AAEvC,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,QAAQ,OAAO,IAAI,IAAI;AAC/B,QAAM,EAAE,aAAa,IAAI,IAAI;AAE7B,MAAI,CAAC,sBAAM,SAAS,QAAQ,OAAO,SAAS,CAAC,GAAG;AAC9C,+BAAa,2BAA2B,KAAK,iBAAiB;AAC9D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,+BAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,QAAM,OAAO,MAAM,YAAY,YAAY,MAAM;AAEjD,MAAI,CAAC,MAAM;AACT,+BAAa,2BAA2B,KAAK,oBAAoB;AAAA,MAC/D;AAAA,IACF,CAAC;AACD;AAAA,EACF;AAEA,QAAM,mBAAmB,aAAa,KAAK,KAAK,MAAM;AAEtD,uBAAO;AAAA,IACL,gCAAgC,KAAK,IAAI,SAAS,OAAO,KAAK,GAAG,CAAC;AAAA,EACpE;AAEA,YAAM,wBAAU;AAAA,IACd,MAAM;AAAA,IACN,IAAI,KAAK;AAAA,IACT,UAAU,KAAK;AAAA,IACf,WAAW,qCAAkB,mBAAmB;AAAA,EAClD,CAAC;AAED,QAAM,oBAAgB,0BAAa,IAAI;AACvC,QAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,MAAI,KAAK,YAAY;AACvB;AAUO,MAAM,mBAAmB,OAC9B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI,CAAC,OAAO;AACV,+BAAa,2BAA2B,KAAK,oBAAoB;AACjE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,mBAAmB,qBAAqB,KAAK;AAEvE,QAAI,CAAC,aAAa;AAChB,iCAAa,2BAA2B,KAAK,kBAAkB,EAAE,MAAM,CAAC;AACxE;AAAA,IACF;AAEA,yBAAO;AAAA,MACL,uCAAuC,YAAY,IAAI,SAAS,OAAO,YAAY,GAAG,CAAC;AAAA,IACzF;AAEA,cAAM,wBAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,YAAY;AAAA,MAChB,UAAU,YAAY;AAAA,MACtB,WAAW,qCAAkB,cAAc,IAAI;AAAA,QAC7C,QAAQ,OAAO,YAAY,GAAG;AAAA,QAC9B,QACE,YAAY,UAAU;AAAA,UACpB,CAAC,aAAa,SAAS,aAAa;AAAA,QACtC,GAAG,UAAU;AAAA,MACjB,CAAC;AAAA,IACH,CAAC;AAED,UAAM,mBAAe,oCAA0B,EAAE,MAAM,OAAU,CAAC;AAElE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,gBAAgB,OAC3B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,QAAQ,OAAO,IAAI,IAAI;AAC/B,QAAM,WAAmB,IAAI,KAAK;AAElC,QAAM,eAAe,OAAO,MAAM;AAElC,MAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,sBAAM,SAAS,QAAQ,YAAY,GAAG;AACrE,+BAAa,2BAA2B,KAAK,mBAAmB,EAAE,OAAO,CAAC;AAC1E;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ;AACX,+BAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,mBAAmB;AAAA,MAC3C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,yBAAO;AAAA,MACL,kCAAkC,YAAY,IAAI,SAAS,OAAO,YAAY,GAAG,CAAC;AAAA,IACpF;AAEA,cAAM,wBAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,YAAY;AAAA,MAChB,UAAU,YAAY;AAAA,IACxB,CAAC;AAED,UAAM,oBAAgB,0BAAa,WAAW;AAC9C,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAuBO,MAAM,wBAAwB,OACnC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,eAAe,aAAa,IAAI,IAAI;AAE5C,MAAI,EAAE,KAAK,IAAI,IAAI;AACnB,QAAM,EAAE,cAAc,SAAS,qBAAqB,eAAe,IACjE,IAAI;AAEN,MAAI;AACF,QAAI,cAAc;AAChB,aAAO,MAAM,YAAY,iBAAiB,YAAY;AAAA,IACxD;AAEA,QAAI,CAAC,MAAM;AACT,iCAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,IACF;AAEA,UAAM,UAAU,KAAK;AAErB,QAAI,CAAC,SAAS;AACZ,iCAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,UAAM,gBAA4C;AAAA,MAChD,OAAG,0BAAa,IAAI;AAAA,MACpB,MAAM;AAAA,IACR;AAEA,UAAM,mBAAe,oCAAmC;AAAA,MACtD,MAAM;AAAA,QACJ;AAAA,QACA,MAAM;AAAA,QACN,cAAc,cAAc,UACxB,0CAAqB,cAAc,mBAAmB,IACtD;AAAA,QACJ,SAAS,SAAS,UACd,gCAAgB,SAAS,MAAM,cAAc,IAC7C;AAAA,MACN;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAOO,MAAM,mBAAmB,CAC9B,KACA,KACA,UACS;AACT,QAAM,EAAE,OAAO,IAAI,IAAI;AACvB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,MAAM;AACR,+BAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,EACF;AAEA,QAAM,gBAAgB,mBAAmB,MAAM;AAE/C,QAAM,cAAc,GAAG,QAAQ,IAAI,WAAW,0CAA0C,aAAa;AACrG,QAAM,qBAAqB,mBAAmB,WAAW;AAEzD,MAAI;AAAA,IACF,sDAAsD,QAAQ,IAAI,gBAAgB,iBAAiB,kBAAkB;AAAA,EACvH;AACF;AAYO,MAAM,iBAAiB,OAC5B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,aAAa,IAAI,IAAI;AAEnC,MAAI,CAAC,MAAM;AACT,UAAM,eAAe;AAErB,yBAAO,MAAM,YAAY;AAEzB,QAAI,SAAS,YAAY;AACzB;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,UAAM,eAAe;AAErB,yBAAO,MAAM,YAAY;AAEzB,QAAI,SAAS,YAAY;AACzB;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,QAAQ;AAAA,QACV;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,WAAW,QAAQ,IAAI;AAAA,UACvB,eAAe,QAAQ,IAAI;AAAA,UAC3B;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,cAAc,KAAK;AAE3C,UAAM,eAAe,MAAM,MAAM,+BAA+B;AAAA,MAC9D,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,UAAU,YAAY;AAAA,QAC/C,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAED,QAAI,CAAC,aAAa,IAAI;AACpB,YAAM,IAAI,2BAAa,iCAAiC,EAAE,aAAa,CAAC;AAAA,IAC1E;AAEA,UAAM,WAAW,MAAM,aAAa,KAAK;AAEzC,UAAM,gBAAgB,MAAM,MAAM,sCAAsC;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,UAAU,YAAY;AAAA,QAC/C,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAED,QAAI,CAAC,cAAc,IAAI;AACrB,YAAM,IAAI,2BAAa,mCAAmC;AAAA,QACxD;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,SACJ,MAAM,cAAc,KAAK;AAE3B,UAAM,eAAe,OAAO,KAAK,CAAC,UAAU,MAAM,OAAO,GAAG;AAE5D,QAAI,CAAC,cAAc;AACjB,YAAM,eAAe;AAErB,2BAAO,MAAM,YAAY;AAEzB,YAAM,eAAe,uCAAgB;AAErC,UAAI,SAAS,cAAc,YAAY;AACvC;AAAA,IACF;AAEA,QAAI,eAAe,MAAM,YAAY,eAAe,YAAY;AAEhE,QAAI,cAAc;AAChB,YAAM,mBAAmB,MAAM,mBAAmB;AAAA,QAChD,aAAa;AAAA,QACb;AAAA,MACF;AAEA,UAAI,kBAAkB,sBAAsB,SAAS,IAAI;AACvD,cAAME,eAAc,MAAM,mBAAmB;AAAA,UAC3C,aAAa;AAAA,UACb;AAAA,UACA;AAAA,YACE,mBAAmB,SAAS;AAAA,UAC9B;AAAA,QACF;AAEA,6BAAO;AAAA,UACL,+CAA+CA,aAAY,IAAI,SAAS,OAAOA,aAAY,GAAG,CAAC;AAAA,QACjG;AAEA,YAAIA,cAAa;AACf,yBAAeA;AAAA,QACjB;AAAA,MACF;AAEA,YAAM,cAAc,MAAM,YAAY,eAAe,aAAa,KAAK;AAAA,QACrE,MAAM,aAAa,QAAQ,SAAS;AAAA,MACtC,CAAC;AAED,YAAM,mBAAmB,YAAY,KAAK,WAAW;AAErD,UAAI,SAAS,YAAY;AACzB;AAAA,IACF;AAEA,UAAM,kBAA4B;AAAA,MAChC,MAAM,SAAS;AAAA,MACf,OAAO;AAAA,IACT;AAEA,UAAM,eAAsC;AAAA,MAC1C,UAAU;AAAA,MACV,mBAAmB,SAAS;AAAA,IAC9B;AAEA,UAAM,OAAO,MAAM,YAAY,WAAW;AAAA,MACxC,GAAG;AAAA,MACH,UAAU,CAAC,YAAY;AAAA,IACzB,CAAC;AAED,UAAM,mBAAmB,YAAY,KAAK,IAAI;AAE9C,yBAAO;AAAA,MACL,8BAA8B,KAAK,IAAI,SAAS,OAAO,KAAK,GAAG,CAAC;AAAA,IAClE;AAEA,cAAM,wBAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,WAAW,qCAAkB,mBAAmB;AAAA,IAClD,CAAC;AAED,QAAI,SAAS,YAAY;AAAA,EAC3B,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,mBAAmB,CAC9B,KACA,KACA,UACS;AACT,QAAM,EAAE,OAAO,IAAI,IAAI;AACvB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,MAAM;AACR,UAAM,eAAe,4BAA4B,MAAM,KAAK;AAE5D,yBAAO,MAAM,YAAY;AAEzB,QAAI,SAAS,MAAM;AACnB;AAAA,EACF;AAEA,QAAM,eAAe;AACrB,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,EACF,EAAE,KAAK,GAAG;AACV,QAAM,uBAAuB;AAE7B,QAAM,gBAAgB,mBAAmB,MAAM;AAC/C,QAAM,QAAQ,KAAK,UAAU,EAAE,cAAc,cAAc,CAAC;AAE5D,QAAM,cAAc,GAAG,QAAQ,IAAI,WAAW;AAE9C,MAAI;AAAA,IACF,0DAA0D,QAAQ,IAAI,gBAAgB,iBAAiB,WAAW,kBAAkB,YAAY,UAAU,KAAK,2BAA2B,oBAAoB,UAAU,KAAK;AAAA,EAC/N;AACF;AAYO,MAAM,iBAAiB,OAC5B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,MAAM,IAAI,IAAI;AAE5B,QAAM,eAAe,mBAAmB,KAAK;AAC7C,QAAM,EAAE,aAAa,IAAI,KAAK,MAAM,YAAY;AAEhD,MAAI,CAAC,MAAM;AACT,UAAM,eAAe;AAErB,yBAAO,MAAM,YAAY;AAEzB,UAAM,eAAe,uCAAgB;AAErC,QAAI,SAAS,cAAc,YAAY;AACvC;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,UAAM,eAAe;AAErB,yBAAO,MAAM,YAAY;AAEzB,UAAM,eAAe,uCAAgB;AAErC,QAAI,SAAS,cAAc,YAAY;AACvC;AAAA,EACF;AAEA,MAAI;AAEF,UAAM,gBAAgB,MAAM,MAAM,uCAAuC;AAAA,MACvE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,IAAI,gBAAgB;AAAA,QACxB;AAAA,QACA,cAAc,GAAG,QAAQ,IAAI,WAAW;AAAA,QACxC,WAAW,QAAQ,IAAI;AAAA,QACvB,eAAe,QAAQ,IAAI;AAAA,QAC3B,YAAY;AAAA,MACd,CAAC;AAAA,IACH,CAAC;AAED,UAAM,eAAe,MAAM,cAAc,KAAK;AAE9C,UAAM,EAAE,cAAc,YAAY,IAAI;AAEtC,QAAI,CAAC,aAAa;AAChB,YAAM,eAAe;AAErB,2BAAO,MAAM,YAAY;AAEzB,YAAM,eAAe,uCAAgB;AAErC,UAAI,SAAS,cAAc,YAAY;AACvC;AAAA,IACF;AAEA,UAAM,eAAe,MAAM;AAAA,MACzB;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,UAAU,WAAW;AAAA,QACtC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,aAAa,KAAK;AAEzC,QAAI,CAAC,SAAS,OAAO;AACnB,YAAM,eAAe;AAErB,2BAAO,MAAM,YAAY;AAEzB,YAAM,eAAe,uCAAgB;AAErC,UAAI,SAAS,cAAc,YAAY;AACvC;AAAA,IACF;AAEA,QAAI,eAAe,MAAM,YAAY,eAAe,SAAS,KAAK;AAElE,QAAI,cAAc;AAChB,YAAM,mBAAmB,MAAM,mBAAmB;AAAA,QAChD,aAAa;AAAA,QACb;AAAA,MACF;AAEA,UAAI,kBAAkB,sBAAsB,SAAS,KAAK;AACxD,cAAMA,eAAc,MAAM,mBAAmB;AAAA,UAC3C,aAAa;AAAA,UACb;AAAA,UACA;AAAA,YACE,mBAAmB,SAAS;AAAA,UAC9B;AAAA,QACF;AAEA,6BAAO;AAAA,UACL,+CAA+CA,aAAY,IAAI,SAAS,OAAOA,aAAY,GAAG,CAAC;AAAA,QACjG;AAEA,YAAIA,cAAa;AACf,yBAAeA;AAAA,QACjB;AAAA,MACF;AAEA,YAAM,cAAc,MAAM,YAAY,eAAe,aAAa,KAAK;AAAA,QACrE,MAAM,aAAa,QAAQ,SAAS;AAAA,MACtC,CAAC;AAED,YAAM,mBAAmB,YAAY,KAAK,WAAW;AAErD,UAAI,SAAS,YAAY;AACzB;AAAA,IACF;AAEA,UAAM,kBAA4B;AAAA,MAChC,MAAM,SAAS;AAAA,MACf,OAAO,SAAS;AAAA,IAClB;AAEA,UAAM,eAAsC;AAAA,MAC1C,UAAU;AAAA,MACV,mBAAmB,SAAS;AAAA,IAC9B;AAEA,UAAM,OAAO,MAAM,YAAY,WAAW;AAAA,MACxC,GAAG;AAAA,MACH,UAAU,CAAC,YAAY;AAAA,IACzB,CAAC;AAED,UAAM,mBAAmB,YAAY,KAAK,IAAI;AAE9C,yBAAO;AAAA,MACL,8BAA8B,KAAK,IAAI,SAAS,OAAO,KAAK,GAAG,CAAC;AAAA,IAClE;AAEA,cAAM,wBAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,WAAW,qCAAkB,mBAAmB;AAAA,IAClD,CAAC;AAAA,EAGH,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":["user","uuidv4","updatedUser"]}

package/dist/cjs/controllers/user.controller.cjs

@@ -48,7 +48,7 @@ var import_responseData = require('./../utils/responseData.cjs');
 const createUser = async (req, res, _next) => {
   const user = req.body;
   if (!user) {
-    import_errors.ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_FOUND");
+    import_errors.ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
     return;
   }
   try {
@@ -71,10 +71,8 @@ const createUser = async (req, res, _next) => {
 const getUsers = async (req, res, _next) => {
   const { user } = res.locals;
   if (!user) {
-    if (!user) {
-      import_errors.ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_FOUND");
-      return;
-    }
+    import_errors.ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
+    return;
   }
   const { filters, pageSize, skip, page, getNumberOfPages } = (0, import_getOrganizationFiltersAndPagination.getOrganizationFiltersAndPagination)(req);
   try {
@@ -100,10 +98,8 @@ const getUserById = async (req, res, _next) => {
   try {
     const user = await userService.getUserById(userId);
     if (!user) {
-      if (!user) {
-        import_errors.ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_FOUND");
-        return;
-      }
+      import_errors.ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
+      return;
     }
     const formattedUser = (0, import_user.mapUserToAPI)(user);
     const responseData = (0, import_responseData.formatResponse)({ data: formattedUser });
@@ -119,10 +115,8 @@ const getUserByEmail = async (req, res, _next) => {
   try {
     const user = await userService.getUserByEmail(email);
     if (!user) {
-      if (!user) {
-        import_errors.ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_FOUND");
-        return;
-      }
+      import_errors.ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
+      return;
     }
     const formattedUser = (0, import_user.mapUserToAPI)(user);
     const responseData = (0, import_responseData.formatResponse)({ data: formattedUser });
@@ -149,10 +143,8 @@ const updateUser = async (req, res, _next) => {
   const userData = req.body;
   const { user } = res.locals;
   if (!user) {
-    if (!user) {
-      import_errors.ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_FOUND");
-      return;
-    }
+    import_errors.ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
+    return;
   }
   if (typeof userData !== "object") {
     import_errors.ErrorHandler.handleGenericErrorResponse(res, "USER_DATA_NOT_FOUND");

package/dist/cjs/controllers/user.controller.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/user.controller.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\nimport { logger } from '@logger';\nimport type { ResponseWithInformation } from '@middlewares/sessionAuth.middleware';\nimport { sessionAuthRoutes } from '@routes/sessionAuth.routes';\nimport { sendEmail } from '@services/email.service';\nimport * as userService from '@services/user.service';\nimport { AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport { getOrganizationFiltersAndPagination } from '@utils/filtersAndPagination/getOrganizationFiltersAndPagination';\nimport type { UserFiltersParam } from '@utils/filtersAndPagination/getUserFiltersAndPagination';\nimport { mapUsersToAPI, mapUserToAPI } from '@utils/mapper/user';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request } from 'express';\nimport type { SessionProviders } from '@/types/session.types';\nimport type {\n  User,\n  UserAPI,\n  UserWithPasswordNotHashed,\n} from '@/types/user.types';\n\nexport type CreateUserBody = { email: string; password?: string };\nexport type CreateUserResult = ResponseData<UserAPI>;\n\n/**\n * Creates a new user.\n */\nexport const createUser = async (\n  req: Request<any, any, UserWithPasswordNotHashed>,\n  res: ResponseWithInformation<CreateUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const user: UserWithPasswordNotHashed | undefined = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n    return;\n  }\n\n  try {\n    const newUser = await userService.createUser(user);\n\n    await sendEmail({\n      type: 'welcome',\n      to: newUser.email,\n      username: newUser.name,\n      loginLink: sessionAuthRoutes.loginEmailPassword.url,\n    });\n\n    const formattedUser = mapUserToAPI(newUser);\n\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUsersParams = FiltersAndPagination<UserFiltersParam>;\nexport type GetUsersResult = PaginatedResponse<UserAPI>;\n\n/**\n * Retrieves a list of users based on filters and pagination.\n */\nexport const getUsers = async (\n  req: Request<GetUsersParams>,\n  res: ResponseWithInformation<GetUsersResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user } = res.locals;\n\n  if (!user) {\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n  }\n\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getOrganizationFiltersAndPagination(req);\n\n  try {\n    const users = await userService.findUsers(filters, skip, pageSize);\n    const totalItems = await userService.countUsers(filters);\n\n    const formattedUsers = mapUsersToAPI(users);\n\n    const responseData = formatPaginatedResponse<UserAPI>({\n      data: formattedUsers,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUserByIdParams = { userId: string };\nexport type GetUserByIdResult = ResponseData<UserAPI>;\n\nexport const getUserById = async (\n  req: Request<GetUserByIdParams>,\n  res: ResponseWithInformation<GetUserByIdResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId } = req.params;\n\n  try {\n    const user = await userService.getUserById(userId);\n\n    if (!user) {\n      if (!user) {\n        ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n        return;\n      }\n    }\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUserByEmailParams = { email: string };\nexport type GetUserByEmailResult = ResponseData<UserAPI>;\n\nexport const getUserByEmail = async (\n  req: Request<GetUserByEmailParams>,\n  res: ResponseWithInformation<GetUserByEmailResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { email } = req.params;\n\n  try {\n    const user = await userService.getUserByEmail(email);\n\n    if (!user) {\n      if (!user) {\n        ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n        return;\n      }\n    }\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n  }\n};\n\nexport type GetUserByAccountParams = {\n  providerAccountId: string;\n  provider: SessionProviders['provider'];\n};\nexport type GetUserByAccountResult = ResponseData<UserAPI>;\n\n/**\n * Retrieves a user by account.\n */\nexport const getUserByAccount = async (\n  req: Request<GetUserByAccountParams>,\n  res: ResponseWithInformation<GetUserByAccountResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { providerAccountId, provider } = req.params;\n\n  try {\n    const user = await userService.getUserByAccount(\n      provider,\n      providerAccountId\n    );\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n  }\n};\n\nexport type UpdateUserBody = Partial<User>;\nexport type UpdateUserResult = ResponseData<UserAPI>;\n\n/**\n * Updates user information (phone number, date of birth).\n */\nexport const updateUser = async (\n  req: Request<any, any, UpdateUserBody | undefined>,\n  res: ResponseWithInformation<UpdateUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const userData = req.body;\n  const { user } = res.locals;\n\n  if (!user) {\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n  }\n\n  if (typeof userData !== 'object') {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_DATA_NOT_FOUND');\n    return;\n  }\n\n  try {\n    const updatedUser = await userService.updateUserById(user._id, userData);\n\n    logger.info(\n      `User updated: Name: ${updatedUser.name}, id: ${String(updatedUser._id)}`\n    );\n\n    const formattedUser = mapUserToAPI(updatedUser);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteUserParams = { userId: string };\nexport type DeleteUserResult = ResponseData<UserAPI>;\n\n/**\n * Deletes a user based on the provided ID.\n */\nexport const deleteUser = async (\n  req: Request<any, any, DeleteUserParams>,\n  res: ResponseWithInformation<DeleteUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId } = req.params;\n\n  try {\n    const user = await userService.deleteUser(userId);\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,oBAAuB;AAEvB,yBAAkC;AAClC,mBAA0B;AAC1B,kBAA6B;AAC7B,oBAAuC;AAEvC,iDAAoD;AAEpD,kBAA4C;AAC5C,0BAKO;AAeA,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,OAA8C,IAAI;AAExD,MAAI,CAAC,MAAM;AACT,+BAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,YAAY,WAAW,IAAI;AAEjD,cAAM,wBAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,WAAW,qCAAkB,mBAAmB;AAAA,IAClD,CAAC;AAED,UAAM,oBAAgB,0BAAa,OAAO;AAE1C,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,WAAW,OACtB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,CAAC,MAAM;AACT,QAAI,CAAC,MAAM;AACT,iCAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAAA,EACF;AAEA,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,QACtD,gFAAoC,GAAG;AAEzC,MAAI;AACF,UAAM,QAAQ,MAAM,YAAY,UAAU,SAAS,MAAM,QAAQ;AACjE,UAAM,aAAa,MAAM,YAAY,WAAW,OAAO;AAEvD,UAAM,qBAAiB,2BAAc,KAAK;AAE1C,UAAM,mBAAe,6CAAiC;AAAA,MACpD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAKO,MAAM,cAAc,OACzB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,OAAO,IAAI,IAAI;AAEvB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,YAAY,MAAM;AAEjD,QAAI,CAAC,MAAM;AACT,UAAI,CAAC,MAAM;AACT,mCAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,MACF;AAAA,IACF;AAEA,UAAM,oBAAgB,0BAAa,IAAI;AACvC,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAKO,MAAM,iBAAiB,OAC5B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,eAAe,KAAK;AAEnD,QAAI,CAAC,MAAM;AACT,UAAI,CAAC,MAAM;AACT,mCAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,MACF;AAAA,IACF;AAEA,UAAM,oBAAgB,0BAAa,IAAI;AACvC,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAAA,EAC5D;AACF;AAWO,MAAM,mBAAmB,OAC9B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,mBAAmB,SAAS,IAAI,IAAI;AAE5C,MAAI;AACF,UAAM,OAAO,MAAM,YAAY;AAAA,MAC7B;AAAA,MACA;AAAA,IACF;AAEA,UAAM,oBAAgB,0BAAa,IAAI;AACvC,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAAA,EAC5D;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,WAAW,IAAI;AACrB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,CAAC,MAAM;AACT,QAAI,CAAC,MAAM;AACT,iCAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAAA,EACF;AAEA,MAAI,OAAO,aAAa,UAAU;AAChC,+BAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,YAAY,eAAe,KAAK,KAAK,QAAQ;AAEvE,yBAAO;AAAA,MACL,uBAAuB,YAAY,IAAI,SAAS,OAAO,YAAY,GAAG,CAAC;AAAA,IACzE;AAEA,UAAM,oBAAgB,0BAAa,WAAW;AAC9C,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,OAAO,IAAI,IAAI;AAEvB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,WAAW,MAAM;AAEhD,UAAM,oBAAgB,0BAAa,IAAI;AACvC,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/controllers/user.controller.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\nimport { logger } from '@logger';\nimport type { ResponseWithInformation } from '@middlewares/sessionAuth.middleware';\nimport { sessionAuthRoutes } from '@routes/sessionAuth.routes';\nimport { sendEmail } from '@services/email.service';\nimport * as userService from '@services/user.service';\nimport { AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport { getOrganizationFiltersAndPagination } from '@utils/filtersAndPagination/getOrganizationFiltersAndPagination';\nimport type { UserFiltersParam } from '@utils/filtersAndPagination/getUserFiltersAndPagination';\nimport { mapUsersToAPI, mapUserToAPI } from '@utils/mapper/user';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request } from 'express';\nimport type { SessionProviders } from '@/types/session.types';\nimport type {\n  User,\n  UserAPI,\n  UserWithPasswordNotHashed,\n} from '@/types/user.types';\n\nexport type CreateUserBody = { email: string; password?: string };\nexport type CreateUserResult = ResponseData<UserAPI>;\n\n/**\n * Creates a new user.\n */\nexport const createUser = async (\n  req: Request<any, any, UserWithPasswordNotHashed>,\n  res: ResponseWithInformation<CreateUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const user: UserWithPasswordNotHashed | undefined = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    const newUser = await userService.createUser(user);\n\n    await sendEmail({\n      type: 'welcome',\n      to: newUser.email,\n      username: newUser.name,\n      loginLink: sessionAuthRoutes.loginEmailPassword.url,\n    });\n\n    const formattedUser = mapUserToAPI(newUser);\n\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUsersParams = FiltersAndPagination<UserFiltersParam>;\nexport type GetUsersResult = PaginatedResponse<UserAPI>;\n\n/**\n * Retrieves a list of users based on filters and pagination.\n */\nexport const getUsers = async (\n  req: Request<GetUsersParams>,\n  res: ResponseWithInformation<GetUsersResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getOrganizationFiltersAndPagination(req);\n\n  try {\n    const users = await userService.findUsers(filters, skip, pageSize);\n    const totalItems = await userService.countUsers(filters);\n\n    const formattedUsers = mapUsersToAPI(users);\n\n    const responseData = formatPaginatedResponse<UserAPI>({\n      data: formattedUsers,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUserByIdParams = { userId: string };\nexport type GetUserByIdResult = ResponseData<UserAPI>;\n\nexport const getUserById = async (\n  req: Request<GetUserByIdParams>,\n  res: ResponseWithInformation<GetUserByIdResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId } = req.params;\n\n  try {\n    const user = await userService.getUserById(userId);\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n      return;\n    }\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUserByEmailParams = { email: string };\nexport type GetUserByEmailResult = ResponseData<UserAPI>;\n\nexport const getUserByEmail = async (\n  req: Request<GetUserByEmailParams>,\n  res: ResponseWithInformation<GetUserByEmailResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { email } = req.params;\n\n  try {\n    const user = await userService.getUserByEmail(email);\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n      return;\n    }\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n  }\n};\n\nexport type GetUserByAccountParams = {\n  providerAccountId: string;\n  provider: SessionProviders['provider'];\n};\nexport type GetUserByAccountResult = ResponseData<UserAPI>;\n\n/**\n * Retrieves a user by account.\n */\nexport const getUserByAccount = async (\n  req: Request<GetUserByAccountParams>,\n  res: ResponseWithInformation<GetUserByAccountResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { providerAccountId, provider } = req.params;\n\n  try {\n    const user = await userService.getUserByAccount(\n      provider,\n      providerAccountId\n    );\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n  }\n};\n\nexport type UpdateUserBody = Partial<User>;\nexport type UpdateUserResult = ResponseData<UserAPI>;\n\n/**\n * Updates user information (phone number, date of birth).\n */\nexport const updateUser = async (\n  req: Request<any, any, UpdateUserBody | undefined>,\n  res: ResponseWithInformation<UpdateUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const userData = req.body;\n  const { user } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (typeof userData !== 'object') {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_DATA_NOT_FOUND');\n    return;\n  }\n\n  try {\n    const updatedUser = await userService.updateUserById(user._id, userData);\n\n    logger.info(\n      `User updated: Name: ${updatedUser.name}, id: ${String(updatedUser._id)}`\n    );\n\n    const formattedUser = mapUserToAPI(updatedUser);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteUserParams = { userId: string };\nexport type DeleteUserResult = ResponseData<UserAPI>;\n\n/**\n * Deletes a user based on the provided ID.\n */\nexport const deleteUser = async (\n  req: Request<any, any, DeleteUserParams>,\n  res: ResponseWithInformation<DeleteUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId } = req.params;\n\n  try {\n    const user = await userService.deleteUser(userId);\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,oBAAuB;AAEvB,yBAAkC;AAClC,mBAA0B;AAC1B,kBAA6B;AAC7B,oBAAuC;AAEvC,iDAAoD;AAEpD,kBAA4C;AAC5C,0BAKO;AAeA,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,OAA8C,IAAI;AAExD,MAAI,CAAC,MAAM;AACT,+BAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,YAAY,WAAW,IAAI;AAEjD,cAAM,wBAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,WAAW,qCAAkB,mBAAmB;AAAA,IAClD,CAAC;AAED,UAAM,oBAAgB,0BAAa,OAAO;AAE1C,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,WAAW,OACtB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,CAAC,MAAM;AACT,+BAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,QACtD,gFAAoC,GAAG;AAEzC,MAAI;AACF,UAAM,QAAQ,MAAM,YAAY,UAAU,SAAS,MAAM,QAAQ;AACjE,UAAM,aAAa,MAAM,YAAY,WAAW,OAAO;AAEvD,UAAM,qBAAiB,2BAAc,KAAK;AAE1C,UAAM,mBAAe,6CAAiC;AAAA,MACpD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAKO,MAAM,cAAc,OACzB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,OAAO,IAAI,IAAI;AAEvB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,YAAY,MAAM;AAEjD,QAAI,CAAC,MAAM;AACT,iCAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,IACF;AAEA,UAAM,oBAAgB,0BAAa,IAAI;AACvC,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAKO,MAAM,iBAAiB,OAC5B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,eAAe,KAAK;AAEnD,QAAI,CAAC,MAAM;AACT,iCAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,IACF;AAEA,UAAM,oBAAgB,0BAAa,IAAI;AACvC,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAAA,EAC5D;AACF;AAWO,MAAM,mBAAmB,OAC9B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,mBAAmB,SAAS,IAAI,IAAI;AAE5C,MAAI;AACF,UAAM,OAAO,MAAM,YAAY;AAAA,MAC7B;AAAA,MACA;AAAA,IACF;AAEA,UAAM,oBAAgB,0BAAa,IAAI;AACvC,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAAA,EAC5D;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,WAAW,IAAI;AACrB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,CAAC,MAAM;AACT,+BAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,OAAO,aAAa,UAAU;AAChC,+BAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,YAAY,eAAe,KAAK,KAAK,QAAQ;AAEvE,yBAAO;AAAA,MACL,uBAAuB,YAAY,IAAI,SAAS,OAAO,YAAY,GAAG,CAAC;AAAA,IACzE;AAEA,UAAM,oBAAgB,0BAAa,WAAW;AAC9C,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,OAAO,IAAI,IAAI;AAEvB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,WAAW,MAAM;AAEhD,UAAM,oBAAgB,0BAAa,IAAI;AACvC,UAAM,mBAAe,oCAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,+BAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}

package/dist/cjs/export.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/export.ts"],"sourcesContent":["// Routes\nexport { userRoutes } from '@routes/user.routes';\nexport { organizationRoutes } from '@routes/organization.routes';\nexport { projectRoutes } from '@routes/project.routes';\nexport { dictionaryRoutes } from '@routes/dictionary.routes';\nexport { sessionAuthRoutes } from '@routes/sessionAuth.routes';\n\n// Controllers types\nexport type * from '@controllers/sessionAuth.controller';\nexport type * from '@controllers/oAuth2.controller';\nexport type * from '@controllers/organization.controller';\nexport type * from '@controllers/project.controller';\nexport type * from '@controllers/projectAccessKey.controller';\nexport type * from '@controllers/user.controller';\nexport type * from '@controllers/dictionary.controller';\n\n// Objects types\nexport type * from '@/types/organization.types';\nexport type * from '@/types/project.types';\nexport type * from '@/types/user.types';\nexport type * from '@/types/dictionary.types';\n\n// Utils\nexport * from '@utils/cookies';\nexport * from '@utils/httpStatusCodes';\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,kBAA2B;AAC3B,0BAAmC;AACnC,qBAA8B;AAC9B,wBAAiC;AACjC,yBAAkC;AAkBlC,2BAAc,2BAvBd;AAwBA,2BAAc,mCAxBd;","names":[]}
+{"version":3,"sources":["../../src/export.ts"],"sourcesContent":["// Routes\nexport { userRoutes } from '@routes/user.routes';\nexport { organizationRoutes } from '@routes/organization.routes';\nexport { projectRoutes } from '@routes/project.routes';\nexport { dictionaryRoutes } from '@routes/dictionary.routes';\nexport { sessionAuthRoutes } from '@routes/sessionAuth.routes';\n\n// Controllers types\nexport type * from '@controllers/sessionAuth.controller';\nexport type * from '@controllers/oAuth2.controller';\nexport type * from '@controllers/organization.controller';\nexport type * from '@controllers/project.controller';\nexport type * from '@controllers/projectAccessKey.controller';\nexport type * from '@controllers/user.controller';\nexport type * from '@controllers/dictionary.controller';\n\n// Objects types\nexport type * from '@/types/organization.types';\nexport type * from '@/types/project.types';\nexport type * from '@/types/user.types';\nexport type * from '@/types/dictionary.types';\nexport type * from '@/types/plan.types';\n\n// Utils\nexport * from '@utils/cookies';\nexport * from '@utils/httpStatusCodes';\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,kBAA2B;AAC3B,0BAAmC;AACnC,qBAA8B;AAC9B,wBAAiC;AACjC,yBAAkC;AAmBlC,2BAAc,2BAxBd;AAyBA,2BAAc,mCAzBd;","names":[]}

package/dist/cjs/index.cjs

@@ -37,7 +37,6 @@ var import_cors = __toESM(require("cors"), 1);
 var import_dotenv = __toESM(require("dotenv"), 1);
 var import_express = __toESM(require("express"), 1);
 var import_express_intlayer = require("express-intlayer");
-var import_admin = require('./middlewares/admin.middleware.cjs');
 var import_oAuth2 = require('./middlewares/oAuth2.middleware.cjs');
 var import_request = require('./middlewares/request.middleware.cjs');
 var import_sessionAuth = require('./middlewares/sessionAuth.middleware.cjs');
@@ -46,6 +45,7 @@ var import_organization = require('./routes/organization.routes.cjs');
 var import_project = require('./routes/project.routes.cjs');
 var import_sessionAuth2 = require('./routes/sessionAuth.routes.cjs');
 var import_user = require('./routes/user.routes.cjs');
+var import_stripe = require('./webhooks/stripe.cjs');
 var import_oAuth22 = require('./controllers/oAuth2.controller.cjs');
 var import_sessionAuth3 = require('./controllers/sessionAuth.controller.cjs');
 var import_CSRF = require('./utils/CSRF.cjs');
@@ -86,6 +86,8 @@ app.get("/", (_req, res) => {
 app.use(/(.*)/, import_sessionAuth.checkUser);
 app.use(/(.*)/, import_sessionAuth.checkOrganization);
 app.use(/(.*)/, import_sessionAuth.checkProject);
+app.use(/(.*)/, import_sessionAuth.checkAdmin);
+app.post("/webhook/stripe", (0, import_express.raw)({ type: "application/json" }), import_stripe.stripeWebhook);
 if (isDev) {
   app.use(import_request.logAPIRequestURL);
 }
@@ -110,7 +112,6 @@ app.use(/(.*)/, (req, res, next) => {
   }
   next();
 });
-app.use(/(.*)/, import_admin.checkAdmin);
 app.use("/api/user", import_user.userRouter);
 app.use("/api/organization", import_organization.organizationRouter);
 app.use("/api/project", import_project.projectRouter);

package/dist/cjs/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/index.ts"],"sourcesContent":["/* eslint-disable import/order */\n\n// Libraries\nimport compression from 'compression';\nimport cookieParser from 'cookie-parser';\nimport cors, { type CorsOptions } from 'cors';\nimport dotenv from 'dotenv';\nimport express, { type Express } from 'express';\nimport { intlayer, t } from 'express-intlayer';\n\n// Middlewares\nimport { checkAdmin } from '@middlewares/admin.middleware';\nimport {\n  attachOAuthInstance,\n  authenticateOAuth2,\n  RequestWithOAuth2Information,\n} from '@middlewares/oAuth2.middleware';\nimport { logAPIRequestURL } from '@middlewares/request.middleware';\nimport {\n  checkUser,\n  checkOrganization,\n  checkProject,\n  ResponseWithInformation,\n} from '@middlewares/sessionAuth.middleware';\n\n// Routes\nimport { dictionaryRouter } from '@routes/dictionary.routes';\nimport { organizationRouter } from '@routes/organization.routes';\nimport { projectRouter } from '@routes/project.routes';\nimport { sessionAuthRouter } from '@routes/sessionAuth.routes';\nimport { userRouter } from '@routes/user.routes';\n\n// Controllers\nimport { getOAuth2Token } from '@controllers/oAuth2.controller';\nimport {\n  getSessionInformation,\n  setCSRFToken,\n} from '@controllers/sessionAuth.controller';\n\n// Utils\nimport { doubleCsrfProtection } from '@utils/CSRF';\nimport { connectDB } from '@utils/mongoDB/connectDB';\n\n// Logger\nimport { logger } from './logger';\n\nconst app: Express = express();\n\napp.disable('x-powered-by'); // Disabled to prevent attackers from knowing that the app is running Express\n\n// Environment variables\nconst env = app.get('env');\n\nlogger.info(`run as ${env}`);\n\ndotenv.config({ path: ['.env', `.env.${env}`] });\n\nconst isDev = env === 'development';\n\nconnectDB();\n\n// Compress all HTTP responses\napp.use(compression());\n\n// Parse incoming requests with JSON payloads\napp.use(express.json({ limit: '50mb' }));\n\n// Parse incoming requests with urlencoded payloads\napp.use(express.urlencoded({ extended: true }));\n\n// Parse incoming requests with cookies\napp.use(cookieParser());\n\n// Load internationalization request handler\napp.use(intlayer());\n\n// CORS\nconst whitelist: string[] = [process.env.CLIENT_URL!];\nconst corsOptions: CorsOptions = {\n  origin: whitelist,\n  credentials: true,\n  allowedHeaders: ['authorization', 'Content-Type', 'credentials'],\n  exposedHeaders: [''],\n  preflightContinue: false,\n  methods: 'GET,HEAD,PUT,PATCH,POST,DELETE',\n};\napp.use(cors(corsOptions));\nlogger.info('url whitelist : ', whitelist.join(', '));\n\n// Liveness check\napp.get('/', (_req, res) => {\n  res.send(\n    t({\n      en: 'Ok - locale: en',\n      fr: 'Ok - locale: fr',\n      es: 'Ok - locale: es',\n    })\n  );\n});\n\n// middleware - jwt & session auth\napp.use(/(.*)/, checkUser);\napp.use(/(.*)/, checkOrganization);\napp.use(/(.*)/, checkProject);\n\n// debug\nif (isDev) {\n  app.use(logAPIRequestURL);\n}\n\n// Sessions\napp.get('/session', getSessionInformation);\napp.use('/api/auth', sessionAuthRouter);\n\n// CSRF\napp.get('/csrf-token', setCSRFToken);\n\n// oAuth2\napp.use(/(.*)/, attachOAuthInstance);\napp.post('/oauth2/token', getOAuth2Token); // Route to get the token\napp.use(/(.*)/, (req, res, next) => {\n  // If the request is not already authenticated check the oAuth2 token\n  if (!res.locals.authType) {\n    return authenticateOAuth2(\n      req as RequestWithOAuth2Information,\n      res as ResponseWithInformation,\n      next\n    );\n  }\n  next();\n});\n\n// CSRF protection\napp.use(/(.*)/, (req, res, next) => {\n  // If the request is authenticated using the session auth check the CSRF token\n  if (res.locals.authType === 'session') {\n    return doubleCsrfProtection(req, res, next);\n  }\n  next();\n});\n\n// Admin check for project and organization\napp.use(/(.*)/, checkAdmin);\n\n// Routes\napp.use('/api/user', userRouter);\napp.use('/api/organization', organizationRouter);\napp.use('/api/project', projectRouter);\napp.use('/api/dictionary', dictionaryRouter);\n\n// Server\napp.listen(process.env.PORT, () => {\n  logger.info(`Listening on port ${process.env.PORT}`);\n});\n\n// Export tu use as serverless function\nexport default app;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,yBAAwB;AACxB,2BAAyB;AACzB,kBAAuC;AACvC,oBAAmB;AACnB,qBAAsC;AACtC,8BAA4B;AAG5B,mBAA2B;AAC3B,oBAIO;AACP,qBAAiC;AACjC,yBAKO;AAGP,wBAAiC;AACjC,0BAAmC;AACnC,qBAA8B;AAC9B,IAAAA,sBAAkC;AAClC,kBAA2B;AAG3B,IAAAC,iBAA+B;AAC/B,IAAAD,sBAGO;AAGP,kBAAqC;AACrC,uBAA0B;AAG1B,oBAAuB;AAEvB,MAAM,UAAe,eAAAE,SAAQ;AAE7B,IAAI,QAAQ,cAAc;AAG1B,MAAM,MAAM,IAAI,IAAI,KAAK;AAEzB,qBAAO,KAAK,UAAU,GAAG,EAAE;AAE3B,cAAAC,QAAO,OAAO,EAAE,MAAM,CAAC,QAAQ,QAAQ,GAAG,EAAE,EAAE,CAAC;AAE/C,MAAM,QAAQ,QAAQ;AAAA,IAEtB,4BAAU;AAGV,IAAI,QAAI,mBAAAC,SAAY,CAAC;AAGrB,IAAI,IAAI,eAAAF,QAAQ,KAAK,EAAE,OAAO,OAAO,CAAC,CAAC;AAGvC,IAAI,IAAI,eAAAA,QAAQ,WAAW,EAAE,UAAU,KAAK,CAAC,CAAC;AAG9C,IAAI,QAAI,qBAAAG,SAAa,CAAC;AAGtB,IAAI,QAAI,kCAAS,CAAC;AAGlB,MAAM,YAAsB,CAAC,QAAQ,IAAI,UAAW;AACpD,MAAM,cAA2B;AAAA,EAC/B,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,gBAAgB,CAAC,iBAAiB,gBAAgB,aAAa;AAAA,EAC/D,gBAAgB,CAAC,EAAE;AAAA,EACnB,mBAAmB;AAAA,EACnB,SAAS;AACX;AACA,IAAI,QAAI,YAAAC,SAAK,WAAW,CAAC;AACzB,qBAAO,KAAK,oBAAoB,UAAU,KAAK,IAAI,CAAC;AAGpD,IAAI,IAAI,KAAK,CAAC,MAAM,QAAQ;AAC1B,MAAI;AAAA,QACF,2BAAE;AAAA,MACA,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACN,CAAC;AAAA,EACH;AACF,CAAC;AAGD,IAAI,IAAI,QAAQ,4BAAS;AACzB,IAAI,IAAI,QAAQ,oCAAiB;AACjC,IAAI,IAAI,QAAQ,+BAAY;AAG5B,IAAI,OAAO;AACT,MAAI,IAAI,+BAAgB;AAC1B;AAGA,IAAI,IAAI,YAAY,yCAAqB;AACzC,IAAI,IAAI,aAAa,qCAAiB;AAGtC,IAAI,IAAI,eAAe,gCAAY;AAGnC,IAAI,IAAI,QAAQ,iCAAmB;AACnC,IAAI,KAAK,iBAAiB,6BAAc;AACxC,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;AAElC,MAAI,CAAC,IAAI,OAAO,UAAU;AACxB,eAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,OAAK;AACP,CAAC;AAGD,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;AAElC,MAAI,IAAI,OAAO,aAAa,WAAW;AACrC,eAAO,kCAAqB,KAAK,KAAK,IAAI;AAAA,EAC5C;AACA,OAAK;AACP,CAAC;AAGD,IAAI,IAAI,QAAQ,uBAAU;AAG1B,IAAI,IAAI,aAAa,sBAAU;AAC/B,IAAI,IAAI,qBAAqB,sCAAkB;AAC/C,IAAI,IAAI,gBAAgB,4BAAa;AACrC,IAAI,IAAI,mBAAmB,kCAAgB;AAG3C,IAAI,OAAO,QAAQ,IAAI,MAAM,MAAM;AACjC,uBAAO,KAAK,qBAAqB,QAAQ,IAAI,IAAI,EAAE;AACrD,CAAC;AAGD,IAAO,cAAQ;","names":["import_sessionAuth","import_oAuth2","express","dotenv","compression","cookieParser","cors"]}
+{"version":3,"sources":["../../src/index.ts"],"sourcesContent":["/* eslint-disable import/order */\n\n// Libraries\nimport compression from 'compression';\nimport cookieParser from 'cookie-parser';\nimport cors, { type CorsOptions } from 'cors';\nimport dotenv from 'dotenv';\nimport express, { raw, type Express } from 'express';\nimport { intlayer, t } from 'express-intlayer';\n\n// Middlewares\nimport {\n  attachOAuthInstance,\n  authenticateOAuth2,\n  RequestWithOAuth2Information,\n} from '@middlewares/oAuth2.middleware';\nimport { logAPIRequestURL } from '@middlewares/request.middleware';\nimport {\n  checkUser,\n  checkOrganization,\n  checkProject,\n  checkAdmin,\n  ResponseWithInformation,\n} from '@middlewares/sessionAuth.middleware';\n\n// Routes\nimport { dictionaryRouter } from '@routes/dictionary.routes';\nimport { organizationRouter } from '@routes/organization.routes';\nimport { projectRouter } from '@routes/project.routes';\nimport { sessionAuthRouter } from '@routes/sessionAuth.routes';\nimport { userRouter } from '@routes/user.routes';\n\n// Webhooks\nimport { stripeWebhook } from '@webhooks/stripe';\n\n// Controllers\nimport { getOAuth2Token } from '@controllers/oAuth2.controller';\nimport {\n  getSessionInformation,\n  setCSRFToken,\n} from '@controllers/sessionAuth.controller';\n\n// Utils\nimport { doubleCsrfProtection } from '@utils/CSRF';\nimport { connectDB } from '@utils/mongoDB/connectDB';\n\n// Logger\nimport { logger } from './logger';\n\nconst app: Express = express();\n\napp.disable('x-powered-by'); // Disabled to prevent attackers from knowing that the app is running Express\n\n// Environment variables\nconst env = app.get('env');\n\nlogger.info(`run as ${env}`);\n\ndotenv.config({ path: ['.env', `.env.${env}`] });\n\nconst isDev = env === 'development';\n\nconnectDB();\n\n// Compress all HTTP responses\napp.use(compression());\n\n// Parse incoming requests with JSON payloads\napp.use(express.json({ limit: '50mb' }));\n\n// Parse incoming requests with urlencoded payloads\napp.use(express.urlencoded({ extended: true }));\n\n// Parse incoming requests with cookies\napp.use(cookieParser());\n\n// Load internationalization request handler\napp.use(intlayer());\n\n// CORS\nconst whitelist: string[] = [process.env.CLIENT_URL!];\nconst corsOptions: CorsOptions = {\n  origin: whitelist,\n  credentials: true,\n  allowedHeaders: ['authorization', 'Content-Type', 'credentials'],\n  exposedHeaders: [''],\n  preflightContinue: false,\n  methods: 'GET,HEAD,PUT,PATCH,POST,DELETE',\n};\napp.use(cors(corsOptions));\nlogger.info('url whitelist : ', whitelist.join(', '));\n\n// Liveness check\napp.get('/', (_req, res) => {\n  res.send(\n    t({\n      en: 'Ok - locale: en',\n      fr: 'Ok - locale: fr',\n      es: 'Ok - locale: es',\n    })\n  );\n});\n\n// middleware - jwt & session auth\napp.use(/(.*)/, checkUser);\napp.use(/(.*)/, checkOrganization);\napp.use(/(.*)/, checkProject);\napp.use(/(.*)/, checkAdmin);\n\n// Stripe webhook\napp.post('/webhook/stripe', raw({ type: 'application/json' }), stripeWebhook);\n\n// debug\nif (isDev) {\n  app.use(logAPIRequestURL);\n}\n\n// Sessions\napp.get('/session', getSessionInformation);\napp.use('/api/auth', sessionAuthRouter);\n\n// CSRF\napp.get('/csrf-token', setCSRFToken);\n\n// oAuth2\napp.use(/(.*)/, attachOAuthInstance);\napp.post('/oauth2/token', getOAuth2Token); // Route to get the token\napp.use(/(.*)/, (req, res, next) => {\n  // If the request is not already authenticated check the oAuth2 token\n  if (!res.locals.authType) {\n    return authenticateOAuth2(\n      req as RequestWithOAuth2Information,\n      res as ResponseWithInformation,\n      next\n    );\n  }\n  next();\n});\n\n// CSRF protection\napp.use(/(.*)/, (req, res, next) => {\n  // If the request is authenticated using the session auth check the CSRF token\n  if (res.locals.authType === 'session') {\n    return doubleCsrfProtection(req, res, next);\n  }\n  next();\n});\n\n// Routes\napp.use('/api/user', userRouter);\napp.use('/api/organization', organizationRouter);\napp.use('/api/project', projectRouter);\napp.use('/api/dictionary', dictionaryRouter);\n\n// Server\napp.listen(process.env.PORT, () => {\n  logger.info(`Listening on port ${process.env.PORT}`);\n});\n\n// Export tu use as serverless function\nexport default app;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,yBAAwB;AACxB,2BAAyB;AACzB,kBAAuC;AACvC,oBAAmB;AACnB,qBAA2C;AAC3C,8BAA4B;AAG5B,oBAIO;AACP,qBAAiC;AACjC,yBAMO;AAGP,wBAAiC;AACjC,0BAAmC;AACnC,qBAA8B;AAC9B,IAAAA,sBAAkC;AAClC,kBAA2B;AAG3B,oBAA8B;AAG9B,IAAAC,iBAA+B;AAC/B,IAAAD,sBAGO;AAGP,kBAAqC;AACrC,uBAA0B;AAG1B,oBAAuB;AAEvB,MAAM,UAAe,eAAAE,SAAQ;AAE7B,IAAI,QAAQ,cAAc;AAG1B,MAAM,MAAM,IAAI,IAAI,KAAK;AAEzB,qBAAO,KAAK,UAAU,GAAG,EAAE;AAE3B,cAAAC,QAAO,OAAO,EAAE,MAAM,CAAC,QAAQ,QAAQ,GAAG,EAAE,EAAE,CAAC;AAE/C,MAAM,QAAQ,QAAQ;AAAA,IAEtB,4BAAU;AAGV,IAAI,QAAI,mBAAAC,SAAY,CAAC;AAGrB,IAAI,IAAI,eAAAF,QAAQ,KAAK,EAAE,OAAO,OAAO,CAAC,CAAC;AAGvC,IAAI,IAAI,eAAAA,QAAQ,WAAW,EAAE,UAAU,KAAK,CAAC,CAAC;AAG9C,IAAI,QAAI,qBAAAG,SAAa,CAAC;AAGtB,IAAI,QAAI,kCAAS,CAAC;AAGlB,MAAM,YAAsB,CAAC,QAAQ,IAAI,UAAW;AACpD,MAAM,cAA2B;AAAA,EAC/B,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,gBAAgB,CAAC,iBAAiB,gBAAgB,aAAa;AAAA,EAC/D,gBAAgB,CAAC,EAAE;AAAA,EACnB,mBAAmB;AAAA,EACnB,SAAS;AACX;AACA,IAAI,QAAI,YAAAC,SAAK,WAAW,CAAC;AACzB,qBAAO,KAAK,oBAAoB,UAAU,KAAK,IAAI,CAAC;AAGpD,IAAI,IAAI,KAAK,CAAC,MAAM,QAAQ;AAC1B,MAAI;AAAA,QACF,2BAAE;AAAA,MACA,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACN,CAAC;AAAA,EACH;AACF,CAAC;AAGD,IAAI,IAAI,QAAQ,4BAAS;AACzB,IAAI,IAAI,QAAQ,oCAAiB;AACjC,IAAI,IAAI,QAAQ,+BAAY;AAC5B,IAAI,IAAI,QAAQ,6BAAU;AAG1B,IAAI,KAAK,uBAAmB,oBAAI,EAAE,MAAM,mBAAmB,CAAC,GAAG,2BAAa;AAG5E,IAAI,OAAO;AACT,MAAI,IAAI,+BAAgB;AAC1B;AAGA,IAAI,IAAI,YAAY,yCAAqB;AACzC,IAAI,IAAI,aAAa,qCAAiB;AAGtC,IAAI,IAAI,eAAe,gCAAY;AAGnC,IAAI,IAAI,QAAQ,iCAAmB;AACnC,IAAI,KAAK,iBAAiB,6BAAc;AACxC,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;AAElC,MAAI,CAAC,IAAI,OAAO,UAAU;AACxB,eAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,OAAK;AACP,CAAC;AAGD,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;AAElC,MAAI,IAAI,OAAO,aAAa,WAAW;AACrC,eAAO,kCAAqB,KAAK,KAAK,IAAI;AAAA,EAC5C;AACA,OAAK;AACP,CAAC;AAGD,IAAI,IAAI,aAAa,sBAAU;AAC/B,IAAI,IAAI,qBAAqB,sCAAkB;AAC/C,IAAI,IAAI,gBAAgB,4BAAa;AACrC,IAAI,IAAI,mBAAmB,kCAAgB;AAG3C,IAAI,OAAO,QAAQ,IAAI,MAAM,MAAM;AACjC,uBAAO,KAAK,qBAAqB,QAAQ,IAAI,IAAI,EAAE;AACrD,CAAC;AAGD,IAAO,cAAQ;","names":["import_sessionAuth","import_oAuth2","express","dotenv","compression","cookieParser","cors"]}

package/dist/cjs/middlewares/oAuth2.middleware.cjs

@@ -61,6 +61,16 @@ const authenticateOAuth2 = async (req, res, next) => {
       oauthResponse,
       import_oAuth2.authenticateOptions
     );
+    const {
+      organization: organizationRights,
+      project: projectRights,
+      dictionary: dictionaryRights
+    } = oAuthToken.rights;
+    res.locals.organizationRights = organizationRights;
+    res.locals.isOrganizationAdmin = organizationRights?.admin ?? false;
+    res.locals.projectRights = projectRights;
+    res.locals.isProjectAdmin = projectRights?.admin ?? false;
+    res.locals.dictionaryRights = dictionaryRights;
     const user = await import_user.UserModel.findById(oAuthToken.user._id);
     if (user) {
       res.locals.user = user;

package/dist/cjs/middlewares/oAuth2.middleware.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/middlewares/oAuth2.middleware.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\nimport { logger } from '@logger';\nimport { OrganizationModel } from '@models/organization.model';\nimport { ProjectModel } from '@models/project.model';\nimport { UserModel } from '@models/user.model';\nimport { getAuthModel, authenticateOptions } from '@utils/oAuth2';\nimport { NextFunction, Request, Response } from 'express';\nimport OAuth2Server, {\n  Request as OAuthRequest,\n  Response as OAuthResponse,\n} from 'oauth2-server';\nimport { ResponseWithInformation } from './sessionAuth.middleware';\n\n// Configuration of the OAuth server\nconst oauth = new OAuth2Server({\n  model: getAuthModel(),\n  accessTokenLifetime: 60 * 60, // 1 hour\n  allowBearerTokensInQueryString: true,\n});\n\nexport type RequestWithOAuth2Information<\n  P = any,\n  ResBody = any,\n  ReqBody = any,\n  ReqQuery = qs.ParsedQs,\n> = Request<P, ResBody, ReqBody, ReqQuery> & {\n  oauth: OAuth2Server;\n};\n\nexport const attachOAuthInstance = async (\n  req: Request,\n  _res: Response,\n  next: NextFunction\n) => {\n  // Attach the instance OAuth to the requests\n  (req as RequestWithOAuth2Information).oauth = oauth;\n\n  next();\n};\n\n// Middleware to authenticate requests\nexport const authenticateOAuth2 = async (\n  req: RequestWithOAuth2Information,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  try {\n    const hasToken = !!req.headers.authorization;\n\n    if (!hasToken) {\n      // If the request does not have a token, skip the oAuth2 authentication\n      // Necessary because the oAuth2 library will throw an error if the token is not present\n      return next();\n    }\n\n    // Authenticate the request using OAuth2\n    const oauthRequest = new OAuthRequest(req);\n\n    const oauthResponse = new OAuthResponse(res);\n\n    const oAuthToken = await req.oauth.authenticate(\n      oauthRequest,\n      oauthResponse,\n      authenticateOptions\n    );\n\n    const user = await UserModel.findById(oAuthToken.user._id);\n\n    if (user) {\n      res.locals.user = user;\n      res.locals.authType = 'oauth2';\n    }\n\n    const organization = await OrganizationModel.findById(\n      oAuthToken.organization._id\n    );\n\n    if (organization) {\n      res.locals.organization = organization;\n    }\n\n    const project = await ProjectModel.findById(oAuthToken.project._id);\n\n    if (project) {\n      res.locals.project = project;\n    }\n  } catch (err) {\n    logger.info(err);\n  }\n  next();\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,oBAAuB;AACvB,0BAAkC;AAClC,qBAA6B;AAC7B,kBAA0B;AAC1B,oBAAkD;AAElD,2BAGO;AAIP,MAAM,QAAQ,IAAI,qBAAAA,QAAa;AAAA,EAC7B,WAAO,4BAAa;AAAA,EACpB,qBAAqB,KAAK;AAAA;AAAA,EAC1B,gCAAgC;AAClC,CAAC;AAWM,MAAM,sBAAsB,OACjC,KACA,MACA,SACG;AAEH,EAAC,IAAqC,QAAQ;AAE9C,OAAK;AACP;AAGO,MAAM,qBAAqB,OAChC,KACA,KACA,SACkB;AAClB,MAAI;AACF,UAAM,WAAW,CAAC,CAAC,IAAI,QAAQ;AAE/B,QAAI,CAAC,UAAU;AAGb,aAAO,KAAK;AAAA,IACd;AAGA,UAAM,eAAe,IAAI,qBAAAC,QAAa,GAAG;AAEzC,UAAM,gBAAgB,IAAI,qBAAAC,SAAc,GAAG;AAE3C,UAAM,aAAa,MAAM,IAAI,MAAM;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,sBAAU,SAAS,WAAW,KAAK,GAAG;AAEzD,QAAI,MAAM;AACR,UAAI,OAAO,OAAO;AAClB,UAAI,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,eAAe,MAAM,sCAAkB;AAAA,MAC3C,WAAW,aAAa;AAAA,IAC1B;AAEA,QAAI,cAAc;AAChB,UAAI,OAAO,eAAe;AAAA,IAC5B;AAEA,UAAM,UAAU,MAAM,4BAAa,SAAS,WAAW,QAAQ,GAAG;AAElE,QAAI,SAAS;AACX,UAAI,OAAO,UAAU;AAAA,IACvB;AAAA,EACF,SAAS,KAAK;AACZ,yBAAO,KAAK,GAAG;AAAA,EACjB;AACA,OAAK;AACP;","names":["OAuth2Server","OAuthRequest","OAuthResponse"]}
+{"version":3,"sources":["../../../src/middlewares/oAuth2.middleware.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\nimport { logger } from '@logger';\nimport { OrganizationModel } from '@models/organization.model';\nimport { ProjectModel } from '@models/project.model';\nimport { UserModel } from '@models/user.model';\nimport { getAuthModel, authenticateOptions } from '@utils/oAuth2';\nimport { NextFunction, Request, Response } from 'express';\nimport OAuth2Server, {\n  Request as OAuthRequest,\n  Response as OAuthResponse,\n} from 'oauth2-server';\nimport { ResponseWithInformation } from './sessionAuth.middleware';\n\n// Configuration of the OAuth server\nconst oauth = new OAuth2Server({\n  model: getAuthModel(),\n  accessTokenLifetime: 60 * 60, // 1 hour\n  allowBearerTokensInQueryString: true,\n});\n\nexport type RequestWithOAuth2Information<\n  P = any,\n  ResBody = any,\n  ReqBody = any,\n  ReqQuery = qs.ParsedQs,\n> = Request<P, ResBody, ReqBody, ReqQuery> & {\n  oauth: OAuth2Server;\n};\n\nexport const attachOAuthInstance = async (\n  req: Request,\n  _res: Response,\n  next: NextFunction\n) => {\n  // Attach the instance OAuth to the requests\n  (req as RequestWithOAuth2Information).oauth = oauth;\n\n  next();\n};\n\n// Middleware to authenticate requests\nexport const authenticateOAuth2 = async (\n  req: RequestWithOAuth2Information,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  try {\n    const hasToken = !!req.headers.authorization;\n\n    if (!hasToken) {\n      // If the request does not have a token, skip the oAuth2 authentication\n      // Necessary because the oAuth2 library will throw an error if the token is not present\n      return next();\n    }\n\n    // Authenticate the request using OAuth2\n    const oauthRequest = new OAuthRequest(req);\n\n    const oauthResponse = new OAuthResponse(res);\n\n    const oAuthToken = await req.oauth.authenticate(\n      oauthRequest,\n      oauthResponse,\n      authenticateOptions\n    );\n\n    const {\n      organization: organizationRights,\n      project: projectRights,\n      dictionary: dictionaryRights,\n    } = oAuthToken.rights;\n\n    res.locals.organizationRights = organizationRights;\n    res.locals.isOrganizationAdmin = organizationRights?.admin ?? false;\n    res.locals.projectRights = projectRights;\n    res.locals.isProjectAdmin = projectRights?.admin ?? false;\n    res.locals.dictionaryRights = dictionaryRights;\n\n    const user = await UserModel.findById(oAuthToken.user._id);\n\n    if (user) {\n      res.locals.user = user;\n      res.locals.authType = 'oauth2';\n    }\n\n    const organization = await OrganizationModel.findById(\n      oAuthToken.organization._id\n    );\n\n    if (organization) {\n      res.locals.organization = organization;\n    }\n    const project = await ProjectModel.findById(oAuthToken.project._id);\n\n    if (project) {\n      res.locals.project = project;\n    }\n  } catch (err) {\n    logger.info(err);\n  }\n  next();\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,oBAAuB;AACvB,0BAAkC;AAClC,qBAA6B;AAC7B,kBAA0B;AAC1B,oBAAkD;AAElD,2BAGO;AAIP,MAAM,QAAQ,IAAI,qBAAAA,QAAa;AAAA,EAC7B,WAAO,4BAAa;AAAA,EACpB,qBAAqB,KAAK;AAAA;AAAA,EAC1B,gCAAgC;AAClC,CAAC;AAWM,MAAM,sBAAsB,OACjC,KACA,MACA,SACG;AAEH,EAAC,IAAqC,QAAQ;AAE9C,OAAK;AACP;AAGO,MAAM,qBAAqB,OAChC,KACA,KACA,SACkB;AAClB,MAAI;AACF,UAAM,WAAW,CAAC,CAAC,IAAI,QAAQ;AAE/B,QAAI,CAAC,UAAU;AAGb,aAAO,KAAK;AAAA,IACd;AAGA,UAAM,eAAe,IAAI,qBAAAC,QAAa,GAAG;AAEzC,UAAM,gBAAgB,IAAI,qBAAAC,SAAc,GAAG;AAE3C,UAAM,aAAa,MAAM,IAAI,MAAM;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM;AAAA,MACJ,cAAc;AAAA,MACd,SAAS;AAAA,MACT,YAAY;AAAA,IACd,IAAI,WAAW;AAEf,QAAI,OAAO,qBAAqB;AAChC,QAAI,OAAO,sBAAsB,oBAAoB,SAAS;AAC9D,QAAI,OAAO,gBAAgB;AAC3B,QAAI,OAAO,iBAAiB,eAAe,SAAS;AACpD,QAAI,OAAO,mBAAmB;AAE9B,UAAM,OAAO,MAAM,sBAAU,SAAS,WAAW,KAAK,GAAG;AAEzD,QAAI,MAAM;AACR,UAAI,OAAO,OAAO;AAClB,UAAI,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,eAAe,MAAM,sCAAkB;AAAA,MAC3C,WAAW,aAAa;AAAA,IAC1B;AAEA,QAAI,cAAc;AAChB,UAAI,OAAO,eAAe;AAAA,IAC5B;AACA,UAAM,UAAU,MAAM,4BAAa,SAAS,WAAW,QAAQ,GAAG;AAElE,QAAI,SAAS;AACX,UAAI,OAAO,UAAU;AAAA,IACvB;AAAA,EACF,SAAS,KAAK;AACZ,yBAAO,KAAK,GAAG;AAAA,EACjB;AACA,OAAK;AACP;","names":["OAuth2Server","OAuthRequest","OAuthResponse"]}

package/dist/cjs/middlewares/sessionAuth.middleware.cjs

@@ -28,7 +28,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var sessionAuth_middleware_exports = {};
 __export(sessionAuth_middleware_exports, {
-  AuthInformationType: () => AuthInformationType,
+  checkAdmin: () => checkAdmin,
   checkOrganization: () => checkOrganization,
   checkProject: () => checkProject,
   checkUser: () => checkUser
@@ -40,11 +40,6 @@ var import_sessionAuth = require('./../services/sessionAuth.service.cjs');
 var import_user = require('./../services/user.service.cjs');
 var import_cookies = require('./../utils/cookies.cjs');
 var import_jsonwebtoken = __toESM(require("jsonwebtoken"), 1);
-var AuthInformationType = /* @__PURE__ */ ((AuthInformationType2) => {
-  AuthInformationType2[AuthInformationType2["IsNull"] = 0] = "IsNull";
-  AuthInformationType2[AuthInformationType2["IsDefined"] = 1] = "IsDefined";
-  return AuthInformationType2;
-})(AuthInformationType || {});
 const checkUser = async (req, res, next) => {
   const { [import_cookies.Cookies.JWT_AUTH]: sessionToken } = req.cookies;
   res.locals.user = null;
@@ -120,9 +115,56 @@ const checkProject = async (req, res, next) => {
   }
   return next();
 };
+const checkAdmin = async (_req, res, next) => {
+  const { organization, project, user, authType } = res.locals;
+  if (authType !== "session") {
+    return next();
+  }
+  res.locals.organizationRights = {
+    read: false,
+    write: false,
+    admin: false
+  };
+  res.locals.projectRights = {
+    read: false,
+    write: false,
+    admin: false
+  };
+  res.locals.projectRights = {
+    read: false,
+    write: false,
+    admin: false
+  };
+  if (user) {
+    if (organization) {
+      const isOrganizationAdmin = organization.adminsIds.map((id) => String(id)).includes(String(user._id)) ?? false;
+      res.locals.isOrganizationAdmin = isOrganizationAdmin;
+      res.locals.organizationRights = {
+        read: true,
+        write: isOrganizationAdmin,
+        admin: isOrganizationAdmin
+      };
+    }
+    if (project) {
+      const isProjectAdmin = project.adminsIds.map((id) => String(id)).includes(String(user._id)) ?? false;
+      res.locals.isProjectAdmin = isProjectAdmin;
+      res.locals.projectRights = {
+        read: true,
+        write: isProjectAdmin,
+        admin: isProjectAdmin
+      };
+      res.locals.dictionaryRights = {
+        read: true,
+        write: true,
+        admin: true
+      };
+    }
+  }
+  return next();
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  AuthInformationType,
+  checkAdmin,
   checkOrganization,
   checkProject,
   checkUser

package/dist/cjs/middlewares/sessionAuth.middleware.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/middlewares/sessionAuth.middleware.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\n\nimport { OrganizationModel } from '@models/organization.model';\nimport { ProjectModel } from '@models/project.model';\nimport {\n  clearOrganizationAuth,\n  clearProjectAuth,\n} from '@services/sessionAuth.service';\nimport { getUserBySession as getUserBySessionService } from '@services/user.service';\nimport { Cookies } from '@utils/cookies';\nimport type { Request, Response, NextFunction } from 'express';\nimport jwt from 'jsonwebtoken';\nimport type {\n  Organization,\n  OrganizationDocument,\n} from '@/types/organization.types';\nimport type { Project, ProjectDocument } from '@/types/project.types';\nimport type { User, UserDocument } from '@/types/user.types';\n\nexport enum AuthInformationType {\n  IsNull,\n  IsDefined,\n}\n\nexport type ResponseWithInformation<ResBody = any> = Response<\n  ResBody,\n  {\n    user: User | null;\n    organization: Organization | null;\n    isOrganizationAdmin: boolean | null;\n    project: Project | null;\n    isProjectAdmin: boolean | null;\n    authType: 'session' | 'oauth2' | null;\n  }\n>;\n\nexport const checkUser = async (\n  req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const { [Cookies.JWT_AUTH]: sessionToken } = req.cookies;\n\n  res.locals.user = null;\n  res.locals.authType = null;\n\n  try {\n    if (sessionToken) {\n      const user: UserDocument | null = (await getUserBySessionService(\n        sessionToken\n      )) as UserDocument | null;\n\n      if (user) {\n        res.locals.user = user.toObject();\n        res.locals.authType = 'session';\n      }\n    }\n  } catch (error) {\n    console.error('Error fetching session:', error);\n  }\n\n  return next();\n};\n\nexport const checkOrganization = async (\n  req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const jwtTokenOrganization = req.cookies[Cookies.JWT_ORGANIZATION];\n\n  res.locals.organization = null;\n\n  try {\n    if (!jwtTokenOrganization || jwtTokenOrganization === 'undefined') {\n      clearOrganizationAuth(res);\n      return next();\n    }\n\n    const organizationData = jwt.verify(\n      jwtTokenOrganization,\n      process.env.JWT_TOKEN_SECRET!\n    ) as Organization;\n\n    if (!organizationData) {\n      clearOrganizationAuth(res);\n      return next();\n    }\n\n    const organization: OrganizationDocument | null =\n      await OrganizationModel.findById(organizationData._id);\n\n    if (!organization) {\n      clearOrganizationAuth(res);\n      return next();\n    }\n\n    res.locals.organization = organization.toObject();\n  } catch (error) {\n    console.error('Error fetching organization:', error);\n  }\n\n  return next();\n};\n\nexport const checkProject = async (\n  req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const jwtTokenProject = req.cookies[Cookies.JWT_PROJECT];\n  res.locals.project = null;\n\n  try {\n    if (!jwtTokenProject || jwtTokenProject === 'undefined') {\n      clearProjectAuth(res);\n      return next();\n    }\n\n    const decodedTokenProject = jwt.verify(\n      jwtTokenProject,\n      process.env.JWT_TOKEN_SECRET!\n    ) as Project;\n\n    if (!decodedTokenProject) {\n      clearProjectAuth(res);\n      return next();\n    }\n\n    const project: ProjectDocument | null = await ProjectModel.findById(\n      decodedTokenProject._id\n    );\n\n    if (\n      !project ||\n      !res.locals.organization ||\n      String(project.organizationId) !== String(res.locals.organization._id)\n    ) {\n      clearProjectAuth(res);\n      return next();\n    }\n\n    res.locals.project = project.toObject();\n  } catch (error) {\n    console.error('Error fetching project:', error);\n  }\n\n  return next();\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,0BAAkC;AAClC,qBAA6B;AAC7B,yBAGO;AACP,kBAA4D;AAC5D,qBAAwB;AAExB,0BAAgB;AAQT,IAAK,sBAAL,kBAAKA,yBAAL;AACL,EAAAA,0CAAA;AACA,EAAAA,0CAAA;AAFU,SAAAA;AAAA,GAAA;AAiBL,MAAM,YAAY,OACvB,KACA,KACA,SACkB;AAClB,QAAM,EAAE,CAAC,uBAAQ,QAAQ,GAAG,aAAa,IAAI,IAAI;AAEjD,MAAI,OAAO,OAAO;AAClB,MAAI,OAAO,WAAW;AAEtB,MAAI;AACF,QAAI,cAAc;AAChB,YAAM,OAA6B,UAAM,YAAAC;AAAA,QACvC;AAAA,MACF;AAEA,UAAI,MAAM;AACR,YAAI,OAAO,OAAO,KAAK,SAAS;AAChC,YAAI,OAAO,WAAW;AAAA,MACxB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAAA,EAChD;AAEA,SAAO,KAAK;AACd;AAEO,MAAM,oBAAoB,OAC/B,KACA,KACA,SACkB;AAClB,QAAM,uBAAuB,IAAI,QAAQ,uBAAQ,gBAAgB;AAEjE,MAAI,OAAO,eAAe;AAE1B,MAAI;AACF,QAAI,CAAC,wBAAwB,yBAAyB,aAAa;AACjE,oDAAsB,GAAG;AACzB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,mBAAmB,oBAAAC,QAAI;AAAA,MAC3B;AAAA,MACA,QAAQ,IAAI;AAAA,IACd;AAEA,QAAI,CAAC,kBAAkB;AACrB,oDAAsB,GAAG;AACzB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,eACJ,MAAM,sCAAkB,SAAS,iBAAiB,GAAG;AAEvD,QAAI,CAAC,cAAc;AACjB,oDAAsB,GAAG;AACzB,aAAO,KAAK;AAAA,IACd;AAEA,QAAI,OAAO,eAAe,aAAa,SAAS;AAAA,EAClD,SAAS,OAAO;AACd,YAAQ,MAAM,gCAAgC,KAAK;AAAA,EACrD;AAEA,SAAO,KAAK;AACd;AAEO,MAAM,eAAe,OAC1B,KACA,KACA,SACkB;AAClB,QAAM,kBAAkB,IAAI,QAAQ,uBAAQ,WAAW;AACvD,MAAI,OAAO,UAAU;AAErB,MAAI;AACF,QAAI,CAAC,mBAAmB,oBAAoB,aAAa;AACvD,+CAAiB,GAAG;AACpB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,sBAAsB,oBAAAA,QAAI;AAAA,MAC9B;AAAA,MACA,QAAQ,IAAI;AAAA,IACd;AAEA,QAAI,CAAC,qBAAqB;AACxB,+CAAiB,GAAG;AACpB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,UAAkC,MAAM,4BAAa;AAAA,MACzD,oBAAoB;AAAA,IACtB;AAEA,QACE,CAAC,WACD,CAAC,IAAI,OAAO,gBACZ,OAAO,QAAQ,cAAc,MAAM,OAAO,IAAI,OAAO,aAAa,GAAG,GACrE;AACA,+CAAiB,GAAG;AACpB,aAAO,KAAK;AAAA,IACd;AAEA,QAAI,OAAO,UAAU,QAAQ,SAAS;AAAA,EACxC,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAAA,EAChD;AAEA,SAAO,KAAK;AACd;","names":["AuthInformationType","getUserBySessionService","jwt"]}
+{"version":3,"sources":["../../../src/middlewares/sessionAuth.middleware.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\n\nimport { OrganizationModel } from '@models/organization.model';\nimport { ProjectModel } from '@models/project.model';\nimport {\n  clearOrganizationAuth,\n  clearProjectAuth,\n} from '@services/sessionAuth.service';\nimport { getUserBySession as getUserBySessionService } from '@services/user.service';\nimport { Cookies } from '@utils/cookies';\nimport type { Request, Response, NextFunction } from 'express';\nimport jwt from 'jsonwebtoken';\nimport type {\n  Organization,\n  OrganizationDocument,\n} from '@/types/organization.types';\nimport type { Project, ProjectDocument, Rights } from '@/types/project.types';\nimport type { User, UserDocument } from '@/types/user.types';\n\nexport type ResponseWithInformation<ResBody = any> = Response<\n  ResBody,\n  {\n    user: User | null;\n    // Auth Context\n    organization: Organization | null;\n    project: Project | null;\n    authType: 'session' | 'oauth2' | null;\n    // Auth Rights - oAuth2 Auth\n    organizationRights: Rights | null;\n    projectRights: Rights | null;\n    dictionaryRights: Rights | null;\n    // Auth Rights - Session Auth\n    isOrganizationAdmin: boolean | null;\n    isProjectAdmin: boolean | null;\n  }\n>;\n\nexport const checkUser = async (\n  req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const { [Cookies.JWT_AUTH]: sessionToken } = req.cookies;\n\n  res.locals.user = null;\n  res.locals.authType = null;\n\n  try {\n    if (sessionToken) {\n      const user: UserDocument | null = (await getUserBySessionService(\n        sessionToken\n      )) as UserDocument | null;\n\n      if (user) {\n        res.locals.user = user.toObject();\n        res.locals.authType = 'session';\n      }\n    }\n  } catch (error) {\n    console.error('Error fetching session:', error);\n  }\n\n  return next();\n};\n\nexport const checkOrganization = async (\n  req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const jwtTokenOrganization = req.cookies[Cookies.JWT_ORGANIZATION];\n\n  res.locals.organization = null;\n\n  try {\n    if (!jwtTokenOrganization || jwtTokenOrganization === 'undefined') {\n      clearOrganizationAuth(res);\n      return next();\n    }\n\n    const organizationData = jwt.verify(\n      jwtTokenOrganization,\n      process.env.JWT_TOKEN_SECRET!\n    ) as Organization;\n\n    if (!organizationData) {\n      clearOrganizationAuth(res);\n      return next();\n    }\n\n    const organization: OrganizationDocument | null =\n      await OrganizationModel.findById(organizationData._id);\n\n    if (!organization) {\n      clearOrganizationAuth(res);\n      return next();\n    }\n\n    res.locals.organization = organization.toObject();\n  } catch (error) {\n    console.error('Error fetching organization:', error);\n  }\n\n  return next();\n};\n\nexport const checkProject = async (\n  req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const jwtTokenProject = req.cookies[Cookies.JWT_PROJECT];\n  res.locals.project = null;\n\n  try {\n    if (!jwtTokenProject || jwtTokenProject === 'undefined') {\n      clearProjectAuth(res);\n      return next();\n    }\n\n    const decodedTokenProject = jwt.verify(\n      jwtTokenProject,\n      process.env.JWT_TOKEN_SECRET!\n    ) as Project;\n\n    if (!decodedTokenProject) {\n      clearProjectAuth(res);\n      return next();\n    }\n\n    const project: ProjectDocument | null = await ProjectModel.findById(\n      decodedTokenProject._id\n    );\n\n    if (\n      !project ||\n      !res.locals.organization ||\n      String(project.organizationId) !== String(res.locals.organization._id)\n    ) {\n      clearProjectAuth(res);\n      return next();\n    }\n\n    res.locals.project = project.toObject();\n  } catch (error) {\n    console.error('Error fetching project:', error);\n  }\n\n  return next();\n};\n\n/**\n * Middleware to check if the user is an admin of the organization or project\n * Sets the following properties in res.locals:\n * - isOrganizationAdmin: boolean\n * - isProjectAdmin: boolean\n */\nexport const checkAdmin = async (\n  _req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const { organization, project, user, authType } = res.locals;\n\n  if (authType !== 'session') {\n    return next();\n  }\n\n  res.locals.organizationRights = {\n    read: false,\n    write: false,\n    admin: false,\n  };\n  res.locals.projectRights = {\n    read: false,\n    write: false,\n    admin: false,\n  };\n  res.locals.projectRights = {\n    read: false,\n    write: false,\n    admin: false,\n  };\n\n  if (user) {\n    if (organization) {\n      const isOrganizationAdmin: boolean =\n        organization.adminsIds\n          .map((id) => String(id))\n          .includes(String(user._id)) ?? false;\n\n      res.locals.isOrganizationAdmin = isOrganizationAdmin;\n\n      res.locals.organizationRights = {\n        read: true,\n        write: isOrganizationAdmin,\n        admin: isOrganizationAdmin,\n      };\n    }\n\n    if (project) {\n      const isProjectAdmin: boolean =\n        project.adminsIds.map((id) => String(id)).includes(String(user._id)) ??\n        false;\n\n      res.locals.isProjectAdmin = isProjectAdmin;\n\n      res.locals.projectRights = {\n        read: true,\n        write: isProjectAdmin,\n        admin: isProjectAdmin,\n      };\n\n      res.locals.dictionaryRights = {\n        read: true,\n        write: true,\n        admin: true,\n      };\n    }\n  }\n\n  return next();\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,0BAAkC;AAClC,qBAA6B;AAC7B,yBAGO;AACP,kBAA4D;AAC5D,qBAAwB;AAExB,0BAAgB;AA0BT,MAAM,YAAY,OACvB,KACA,KACA,SACkB;AAClB,QAAM,EAAE,CAAC,uBAAQ,QAAQ,GAAG,aAAa,IAAI,IAAI;AAEjD,MAAI,OAAO,OAAO;AAClB,MAAI,OAAO,WAAW;AAEtB,MAAI;AACF,QAAI,cAAc;AAChB,YAAM,OAA6B,UAAM,YAAAA;AAAA,QACvC;AAAA,MACF;AAEA,UAAI,MAAM;AACR,YAAI,OAAO,OAAO,KAAK,SAAS;AAChC,YAAI,OAAO,WAAW;AAAA,MACxB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAAA,EAChD;AAEA,SAAO,KAAK;AACd;AAEO,MAAM,oBAAoB,OAC/B,KACA,KACA,SACkB;AAClB,QAAM,uBAAuB,IAAI,QAAQ,uBAAQ,gBAAgB;AAEjE,MAAI,OAAO,eAAe;AAE1B,MAAI;AACF,QAAI,CAAC,wBAAwB,yBAAyB,aAAa;AACjE,oDAAsB,GAAG;AACzB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,mBAAmB,oBAAAC,QAAI;AAAA,MAC3B;AAAA,MACA,QAAQ,IAAI;AAAA,IACd;AAEA,QAAI,CAAC,kBAAkB;AACrB,oDAAsB,GAAG;AACzB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,eACJ,MAAM,sCAAkB,SAAS,iBAAiB,GAAG;AAEvD,QAAI,CAAC,cAAc;AACjB,oDAAsB,GAAG;AACzB,aAAO,KAAK;AAAA,IACd;AAEA,QAAI,OAAO,eAAe,aAAa,SAAS;AAAA,EAClD,SAAS,OAAO;AACd,YAAQ,MAAM,gCAAgC,KAAK;AAAA,EACrD;AAEA,SAAO,KAAK;AACd;AAEO,MAAM,eAAe,OAC1B,KACA,KACA,SACkB;AAClB,QAAM,kBAAkB,IAAI,QAAQ,uBAAQ,WAAW;AACvD,MAAI,OAAO,UAAU;AAErB,MAAI;AACF,QAAI,CAAC,mBAAmB,oBAAoB,aAAa;AACvD,+CAAiB,GAAG;AACpB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,sBAAsB,oBAAAA,QAAI;AAAA,MAC9B;AAAA,MACA,QAAQ,IAAI;AAAA,IACd;AAEA,QAAI,CAAC,qBAAqB;AACxB,+CAAiB,GAAG;AACpB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,UAAkC,MAAM,4BAAa;AAAA,MACzD,oBAAoB;AAAA,IACtB;AAEA,QACE,CAAC,WACD,CAAC,IAAI,OAAO,gBACZ,OAAO,QAAQ,cAAc,MAAM,OAAO,IAAI,OAAO,aAAa,GAAG,GACrE;AACA,+CAAiB,GAAG;AACpB,aAAO,KAAK;AAAA,IACd;AAEA,QAAI,OAAO,UAAU,QAAQ,SAAS;AAAA,EACxC,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAAA,EAChD;AAEA,SAAO,KAAK;AACd;AAQO,MAAM,aAAa,OACxB,MACA,KACA,SACkB;AAClB,QAAM,EAAE,cAAc,SAAS,MAAM,SAAS,IAAI,IAAI;AAEtD,MAAI,aAAa,WAAW;AAC1B,WAAO,KAAK;AAAA,EACd;AAEA,MAAI,OAAO,qBAAqB;AAAA,IAC9B,MAAM;AAAA,IACN,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AACA,MAAI,OAAO,gBAAgB;AAAA,IACzB,MAAM;AAAA,IACN,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AACA,MAAI,OAAO,gBAAgB;AAAA,IACzB,MAAM;AAAA,IACN,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AAEA,MAAI,MAAM;AACR,QAAI,cAAc;AAChB,YAAM,sBACJ,aAAa,UACV,IAAI,CAAC,OAAO,OAAO,EAAE,CAAC,EACtB,SAAS,OAAO,KAAK,GAAG,CAAC,KAAK;AAEnC,UAAI,OAAO,sBAAsB;AAEjC,UAAI,OAAO,qBAAqB;AAAA,QAC9B,MAAM;AAAA,QACN,OAAO;AAAA,QACP,OAAO;AAAA,MACT;AAAA,IACF;AAEA,QAAI,SAAS;AACX,YAAM,iBACJ,QAAQ,UAAU,IAAI,CAAC,OAAO,OAAO,EAAE,CAAC,EAAE,SAAS,OAAO,KAAK,GAAG,CAAC,KACnE;AAEF,UAAI,OAAO,iBAAiB;AAE5B,UAAI,OAAO,gBAAgB;AAAA,QACzB,MAAM;AAAA,QACN,OAAO;AAAA,QACP,OAAO;AAAA,MACT;AAEA,UAAI,OAAO,mBAAmB;AAAA,QAC5B,MAAM;AAAA,QACN,OAAO;AAAA,QACP,OAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,SAAO,KAAK;AACd;","names":["getUserBySessionService","jwt"]}

package/dist/cjs/{middlewares/admin.middleware.cjs → models/plan.moddel.cjs}

@@ -16,29 +16,16 @@ var __copyProps = (to, from, except, desc) => {
   return to;
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var admin_middleware_exports = {};
-__export(admin_middleware_exports, {
-  checkAdmin: () => checkAdmin
+var plan_moddel_exports = {};
+__export(plan_moddel_exports, {
+  PlanModel: () => PlanModel
 });
-module.exports = __toCommonJS(admin_middleware_exports);
-const checkAdmin = async (_req, res, next) => {
-  const { organization, project, user } = res.locals;
-  res.locals.isOrganizationAdmin = false;
-  res.locals.isProjectAdmin = false;
-  if (user) {
-    if (organization) {
-      const isOrganizationAdmin = organization.adminsIds.map((id) => String(id)).includes(String(user._id)) ?? false;
-      res.locals.isOrganizationAdmin = isOrganizationAdmin;
-    }
-    if (project) {
-      const isProjectAdmin = project.adminsIds.map((id) => String(id)).includes(String(user._id)) ?? false;
-      res.locals.isProjectAdmin = isProjectAdmin;
-    }
-  }
-  return next();
-};
+module.exports = __toCommonJS(plan_moddel_exports);
+var import_plans = require('./../schemas/plans.schema.cjs');
+var import_mongoose = require("mongoose");
+const PlanModel = (0, import_mongoose.model)("plan", import_plans.planSchema);
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  checkAdmin
+  PlanModel
 });
-//# sourceMappingURL=admin.middleware.cjs.map
+//# sourceMappingURL=plan.moddel.cjs.map

package/dist/cjs/models/plan.moddel.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/models/plan.moddel.ts"],"sourcesContent":["import { planSchema } from '@schemas/plans.schema';\nimport { model } from 'mongoose';\nimport { Plan } from '@/types/plan.types';\n\nexport const PlanModel = model<Plan>('plan', planSchema);\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAA2B;AAC3B,sBAAsB;AAGf,MAAM,gBAAY,uBAAY,QAAQ,uBAAU;","names":[]}