@intlayer/backend 5.5.11 → 5.7.0

package/dist/cjs/services/sessionAuth.service.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/services/sessionAuth.service.ts"],"sourcesContent":["import { logger } from '@logger';\nimport type { ResponseWithInformation } from '@middlewares/sessionAuth.middleware';\nimport {\n  Cookies,\n  getClearCookieOptions,\n  getCookieOptions,\n  MAX_AGE,\n} from '@utils/cookies';\nimport { ensureMongoDocumentToObject } from '@utils/ensureMongoDocumentToObject';\nimport { GenericError } from '@utils/errors';\nimport { mapUserToAPI } from '@utils/mapper/user';\nimport { compare, genSalt, hash } from 'bcryptjs';\nimport crypto from 'crypto';\nimport type { Response } from 'express';\n// @ts-ignore express-intlayer not build yet\nimport type { Organization } from '@/types/organization.types';\nimport type { Project } from '@/types/project.types';\nimport type {\n  EmailPasswordSessionProvider,\n  GithubSessionProvider,\n  GoogleSessionProvider,\n  Session,\n  SessionProviders,\n} from '@/types/session.types';\nimport type {\n  User,\n  UserDocument,\n  UserWithPasswordNotHashed,\n} from '@/types/user.types';\nimport { t } from 'express-intlayer';\nimport jwt from 'jsonwebtoken';\nimport type { ObjectId } from 'mongoose';\nimport { v4 as uuidv4 } from 'uuid';\nimport { getUserByEmail, getUserById, updateUserById } from './user.service';\n\n/**\n * Adds a session to a user or updates the existing one.\n * @param user - User object.\n * @returns Updated user object.\n */\nexport const addSession = async (user: User): Promise<UserDocument> => {\n  const userSessionToken = uuidv4();\n\n  const session: Session = {\n    sessionToken: userSessionToken,\n    expires: new Date(Date.now() + MAX_AGE),\n  };\n\n  const updatedUser: UserDocument = await updateUserById(user._id, { session });\n\n  return updatedUser;\n};\n\nexport const removeSession = async (user: User): Promise<UserDocument> => {\n  const session = undefined;\n\n  const updatedUser: UserDocument = await updateUserById(user._id, { session });\n\n  return updatedUser;\n};\n\n/**\n * Set user auth locals object\n * @param res - Express response object.\n * @param user - User object.\n */\nexport const setUserAuth = async (res: Response, user: User) => {\n  const formattedUser = mapUserToAPI(user);\n\n  const userToken = jwt.sign(formattedUser, process.env.JWT_TOKEN_SECRET!, {\n    expiresIn: MAX_AGE,\n  });\n\n  if (!userToken) {\n    throw new GenericError('JWT_TOKEN_CREATION_FAILED_USER', { user });\n  }\n\n  const cookieOptions = getCookieOptions();\n\n  res.cookie(Cookies.JWT_USER, userToken, cookieOptions);\n\n  const userWithSession: UserDocument = await addSession(user);\n\n  const userSessionToken = userWithSession.session?.sessionToken;\n\n  res.cookie(Cookies.JWT_AUTH, userSessionToken, cookieOptions);\n\n  res.locals.user = user;\n  logger.info(\n    `User logged in - User: Name: ${user.name}, id: ${String(user._id)}`\n  );\n};\n\n/**\n * Clears the JWT auth cookies and user locals object.\n * @param res - Express response object.\n */\nexport const clearUserAuth = async (res: ResponseWithInformation) => {\n  const { user } = res.locals;\n  const cookiesOptions = getClearCookieOptions();\n\n  if (user) {\n    await removeSession(user);\n  }\n\n  res.cookie(Cookies.JWT_AUTH, '', cookiesOptions);\n  res.cookie(Cookies.JWT_USER, '', cookiesOptions);\n\n  res.locals.user = null;\n  res.locals.authType = null;\n};\n\n/**\n *\n * @param res\n * @param organization\n * @returns\n */\nexport const setOrganizationAuth = (\n  res: ResponseWithInformation,\n  organization: Organization\n) => {\n  const organizationData = {\n    _id: organization._id,\n    name: organization.name,\n  };\n\n  const organizationToken = jwt.sign(\n    organizationData,\n    process.env.JWT_TOKEN_SECRET!,\n    {\n      expiresIn: MAX_AGE,\n    }\n  );\n\n  if (!organizationToken) {\n    throw new GenericError('JWT_TOKEN_CREATION_FAILED_ORGANIZATION', {\n      organization,\n    });\n  }\n\n  res.cookie(Cookies.JWT_ORGANIZATION, organizationToken, getCookieOptions());\n\n  res.locals.organization = organization;\n};\n\n/**\n * Clears the JWT organization cookies and organization locals object.\n * @param res - Express response object.\n */\nexport const clearOrganizationAuth = (res: ResponseWithInformation) => {\n  res.locals.organization = null;\n\n  res.cookie(Cookies.JWT_ORGANIZATION, '', getClearCookieOptions());\n};\n\n/**\n * Set project auth locals object\n * @param res - Express response object.\n * @param project - Project object.\n */\nexport const setProjectAuth = (\n  res: ResponseWithInformation,\n  project: Project\n) => {\n  const { organization } = res.locals;\n  const projectData = {\n    _id: project._id,\n    name: project.name,\n  };\n\n  const projectToken = jwt.sign(projectData, process.env.JWT_TOKEN_SECRET!, {\n    expiresIn: MAX_AGE,\n  });\n\n  if (!projectToken) {\n    throw new GenericError('JWT_TOKEN_CREATION_FAILED_PROJECT', {\n      project,\n    });\n  }\n\n  res.cookie(Cookies.JWT_PROJECT, projectToken, getCookieOptions());\n\n  if (!organization) {\n    throw new GenericError('ORGANIZATION_NOT_FOUND', {\n      project,\n    });\n  }\n\n  if (\n    // if the project is not in the organization's projects\n    String(organization._id) !== String(project.organizationId)\n  ) {\n    throw new GenericError('JWT_TOKEN_ORGANIZATION_MISMATCH_PROJECT', {\n      project,\n    });\n  }\n\n  res.locals.project = project;\n};\n\n/**\n * Clears the JWT project cookies and project locals object.\n * @param res - Express response object.\n */\nexport const clearProjectAuth = (res: Response) => {\n  res.locals.project = null;\n\n  res.cookie(Cookies.JWT_PROJECT, '', getClearCookieOptions());\n};\n\n/**\n * Generates a random secret string of a specified length.\n * @param length - The length of the secret.\n * @returns The generated secret string.\n */\nexport const generateSecret = (length: number): string => {\n  const characters =\n    'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';\n  return Array.from({ length }, () =>\n    characters.charAt(Math.floor(Math.random() * characters.length))\n  ).join('');\n};\n\n/**\n * Handles a password reset request for a user.\n * @param email - The user's email.\n * @param organization - The organization associated with the user.\n * @returns The user object or null if no user was found.\n */\nexport const requestPasswordReset = async (\n  email: string\n): Promise<User | null> => {\n  const user = await getUserByEmail(email);\n\n  if (!user) {\n    throw new GenericError('USER_NOT_FOUND', { email });\n  }\n\n  return updateUserProvider(user._id as unknown as string, 'email', {\n    secret: generateSecret(35),\n  });\n};\n\n/**\n * Resets a user's password.\n * @param userId - The ID of the user.\n * @param secret - The secret token associated with the user.\n * @param newPassword - The new password to set.\n * @returns The updated user or null if the reset failed.\n */\nexport const resetUserPassword = async (\n  userId: string | ObjectId,\n  secret: string,\n  newPassword: string\n): Promise<User> => {\n  const emailAndPasswordProvider = await getUserProvider(userId, 'email');\n\n  if (!emailAndPasswordProvider) {\n    throw new GenericError('USER_PROVIDER_NOT_FOUND', { userId });\n  }\n\n  if (!emailAndPasswordProvider.secret) {\n    throw new GenericError('USER_PROVIDER_SECRET_NOT_DEFINED', { userId });\n  }\n\n  if (\n    !crypto.timingSafeEqual(\n      Buffer.from(emailAndPasswordProvider.secret),\n      Buffer.from(secret)\n    )\n  ) {\n    throw new GenericError('USER_PROVIDER_SECRET_NOT_VALID', { userId });\n  }\n\n  const updatedUser: User = await updateUserProvider(userId, 'email', {\n    passwordHash: await hash(newPassword, await genSalt()),\n    secret,\n  });\n\n  return updatedUser;\n};\n\ntype UserProvider<T extends SessionProviders['provider']> = T extends 'email'\n  ? EmailPasswordSessionProvider\n  : T extends 'google'\n    ? GoogleSessionProvider\n    : T extends 'github'\n      ? GithubSessionProvider\n      : SessionProviders;\n\n/**\n * Gets a user's provider.\n * @param userId - The ID of the user.\n * @param provider - The provider to get.\n * @returns The user's provider.\n */\nexport const getUserProvider = async <T extends SessionProviders['provider']>(\n  userId: string | ObjectId,\n  provider: T,\n  providerAccountId?: string\n): Promise<UserProvider<T> | null> => {\n  const user = await getUserById(userId);\n\n  if (!user) {\n    throw new GenericError('USER_NOT_FOUND', { userId });\n  }\n\n  const userProvider = user.provider?.find(\n    (providerEl) =>\n      (providerEl.provider === provider && !providerAccountId) ||\n      (providerAccountId &&\n        (providerEl as GithubSessionProvider).providerAccountId ===\n          providerAccountId)\n  );\n\n  return (userProvider as UserProvider<T>) ?? null;\n};\n\n/**\n * Formats the given fields of a user's provider.\n * @param provider - The provider to update.\n * @param user - The user object.\n * @param providerUpdate - The updates to apply to the provider.\n * @returns The updated user provider.\n */\nexport const formatUserProviderUpdate = <\n  T extends SessionProviders['provider'],\n>(\n  provider: T,\n  user: Partial<User>,\n  providerUpdate: Partial<UserProvider<T>>\n): User['provider'] => {\n  const userProvider: SessionProviders[] = ensureMongoDocumentToObject<\n    SessionProviders[]\n  >(user.provider ?? []);\n\n  const userProviderToUpdate = userProvider?.find(\n    (providerEl) => providerEl.provider === provider\n  );\n\n  let updatedProvider: User['provider'];\n\n  if (userProviderToUpdate) {\n    const otherProviders =\n      user.provider?.filter((p) => p.provider !== provider) ?? [];\n\n    updatedProvider = [\n      ...otherProviders,\n      { ...userProviderToUpdate, ...providerUpdate, provider },\n    ];\n  } else {\n    updatedProvider = [\n      ...(user.provider ?? []),\n      { ...providerUpdate, provider } as SessionProviders,\n    ];\n  }\n\n  return updatedProvider;\n};\n\n/**\n * Updates the given fields of a user's provider.\n * @param userId - The ID of the user.\n * @param provider - The provider to update.\n * @param providerUpdate - The updates to apply to the provider.\n * @returns The updated user.\n */\nexport const updateUserProvider = async <\n  T extends SessionProviders['provider'],\n>(\n  userId: string | ObjectId,\n  provider: T,\n  providerUpdate: Partial<UserProvider<T>>\n): Promise<UserDocument> => {\n  const user = await getUserById(userId);\n\n  if (!user) {\n    throw new GenericError('USER_NOT_FOUND', { userId });\n  }\n\n  const formattedProviderToUpdate = formatUserProviderUpdate(\n    provider,\n    user,\n    providerUpdate\n  );\n\n  const updatedUser: UserDocument = await updateUserById(userId, {\n    provider: formattedProviderToUpdate,\n  });\n\n  logger.info(\n    `User provider updated - User: Name: ${updatedUser.name}, id: ${String(updatedUser._id)} - Provider: ${provider}`\n  );\n\n  return updatedUser;\n};\n\n/**\n * Updates the given fields of a user's provider.\n * @param userId - The ID of the user.\n * @param provider - The updates to apply to the provider.\n * @returns The updated user.\n */\nexport const addUserProvider = async (\n  userId: string | ObjectId,\n  provider: SessionProviders\n): Promise<UserDocument> => {\n  const user = await getUserById(userId);\n\n  if (!user) {\n    throw new GenericError('USER_NOT_FOUND', { userId });\n  }\n\n  const existingProvider = await getUserProvider(userId, provider.provider);\n\n  if (existingProvider) {\n    throw new GenericError('USER_PROVIDER_ALREADY_EXISTS', {\n      userId,\n      provider,\n    });\n  }\n\n  const updatedProvider = [...(user.provider ?? []), provider];\n\n  const updatedUser = await updateUserById(userId, {\n    provider: updatedProvider,\n  });\n\n  logger.info(\n    `User provider added - User: Name: ${updatedUser.name}, id: ${String(updatedUser._id)} - Provider: ${provider.provider}`\n  );\n\n  return updatedUser;\n};\n\n/**\n * Removes a user's provider.\n * @param userId - The ID of the user.\n * @param provider - The provider to remove.\n * @returns The updated user.\n */\nexport const removeUserProvider = async (\n  userId: string | ObjectId,\n  provider: SessionProviders['provider'],\n  providerAccountId?: string\n) => {\n  const user = await getUserById(userId);\n\n  if (!user) {\n    throw new GenericError('USER_NOT_FOUND', { userId });\n  }\n\n  const existingProvider = await getUserProvider(\n    userId,\n    provider,\n    providerAccountId\n  );\n\n  if (!existingProvider) {\n    throw new GenericError('USER_PROVIDER_NOT_FOUND', {\n      userId,\n      provider,\n    });\n  }\n\n  const updatedProvider = user.provider?.filter(\n    (p) =>\n      p.provider !== provider &&\n      (!providerAccountId ||\n        (providerAccountId &&\n          (p as GithubSessionProvider).providerAccountId !== providerAccountId))\n  );\n\n  return await updateUserById(userId, {\n    provider: updatedProvider,\n  });\n};\n\ntype TestUserPasswordResult = { user: User | null; error?: string };\n\n/**\n * Logs in a user.\n * @param email - The user's email.\n * @param password - The user's password.\n * @returns The user object.\n */\nexport const testUserPassword = async (\n  email: string,\n  password: string\n): Promise<TestUserPasswordResult> => {\n  const user = await getUserByEmail(email);\n\n  if (!user) {\n    const errorMessages = {\n      en: `User not found - ${email}`,\n      fr: `Utilisateur non trouvé - ${email}`,\n      es: `Usuario no encontrado - ${email}`,\n    };\n\n    return { user: null, error: t(errorMessages) };\n  }\n\n  const userEmailPasswordProvider = user.provider?.find(\n    (provider) => provider.provider === 'email'\n  );\n\n  if (!userEmailPasswordProvider?.passwordHash) {\n    const errorMessages = {\n      en: `User request to login but no password defined: ${user.email}`,\n      fr: `Demande de connexion d'utilisateur mais pas de mot de passe défini : ${user.email}`,\n      es: `Solicitud de inicio de sesión de usuario pero no se define la contraseña : ${user.email}`,\n    };\n\n    return { user: null, error: t(errorMessages) };\n  }\n\n  const isMatch = await compare(\n    password,\n    userEmailPasswordProvider.passwordHash\n  );\n\n  if (!isMatch) {\n    const errorMessages = {\n      en: `Incorrect email or password: ${email}`,\n      fr: `Email ou mot de passe incorrect : ${email}`,\n      es: `Correo electrónico o contraseña incorrecta : ${email}`,\n    };\n\n    logger.error(errorMessages.en);\n\n    // Await a random time to prevent brute force attacks\n    const randomNumber = Math.floor(Math.random() * 1000) + 1000;\n    await new Promise((resolve) => setTimeout(resolve, randomNumber));\n\n    return { user: null, error: t(errorMessages) };\n  }\n\n  return { user };\n};\n\n/**\n * Hashes a user's password.\n * @param userWithPasswordNotHashed - The user object with password not hashed.\n * @returns The user object with hashed password.\n */\nexport const hashUserPassword = async (\n  userWithPasswordNotHashed: UserWithPasswordNotHashed\n): Promise<Partial<UserDocument>> => {\n  const { password, ...user } = userWithPasswordNotHashed;\n\n  if (!password) {\n    throw new GenericError('USER_PASSWORD_NOT_DEFINED', { user });\n  }\n\n  const userProvider = formatUserProviderUpdate('email', user, {\n    passwordHash: await hash(password, await genSalt()),\n    secret: generateSecret(35),\n  });\n\n  return { ...user, provider: userProvider };\n};\n\n/**\n * Changes a user's password.\n * @param userId - The ID of the user.\n * @param newPassword - The user's new password.\n * @returns The updated user or null if the password change failed.\n */\nexport const changeUserPassword = async (\n  userId: string | ObjectId,\n  newPassword: string\n) => {\n  const user = await getUserById(userId);\n\n  if (!user) {\n    throw new GenericError('USER_NOT_FOUND', { userId });\n  }\n\n  const updatedUser: User = await updateUserProvider(userId, 'email', {\n    passwordHash: await hash(newPassword, await genSalt()),\n  });\n\n  return updatedUser;\n};\n\n/**\n * Resets a user's password.\n * @param userId - The ID of the user.\n * @param secret - The secret token associated with the user.\n * @param newPassword - The new password to set.\n * @returns The updated user or null if the reset failed.\n */\nexport const resetPassword = async (userId: string, password: string) => {\n  const user = await getUserById(userId);\n\n  if (!user) {\n    throw new GenericError('USER_NOT_FOUND', { userId });\n  }\n\n  const updatedUser: UserDocument = await updateUserProvider(userId, 'email', {\n    passwordHash: await hash(password, await genSalt()),\n  });\n\n  return updatedUser;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAAuB;AAEvB,qBAKO;AACP,yCAA4C;AAC5C,oBAA6B;AAC7B,kBAA6B;AAC7B,sBAAuC;AACvC,oBAAmB;AAiBnB,8BAAkB;AAClB,0BAAgB;AAEhB,kBAA6B;AAC7B,IAAAA,eAA4D;AAOrD,MAAM,aAAa,OAAO,SAAsC;AACrE,QAAM,uBAAmB,YAAAC,IAAO;AAEhC,QAAM,UAAmB;AAAA,IACvB,cAAc;AAAA,IACd,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,sBAAO;AAAA,EACxC;AAEA,QAAM,cAA4B,UAAM,6BAAe,KAAK,KAAK,EAAE,QAAQ,CAAC;AAE5E,SAAO;AACT;AAEO,MAAM,gBAAgB,OAAO,SAAsC;AACxE,QAAM,UAAU;AAEhB,QAAM,cAA4B,UAAM,6BAAe,KAAK,KAAK,EAAE,QAAQ,CAAC;AAE5E,SAAO;AACT;AAOO,MAAM,cAAc,OAAO,KAAe,SAAe;AAC9D,QAAM,oBAAgB,0BAAa,IAAI;AAEvC,QAAM,YAAY,oBAAAC,QAAI,KAAK,eAAe,QAAQ,IAAI,kBAAmB;AAAA,IACvE,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,2BAAa,kCAAkC,EAAE,KAAK,CAAC;AAAA,EACnE;AAEA,QAAM,oBAAgB,iCAAiB;AAEvC,MAAI,OAAO,uBAAQ,UAAU,WAAW,aAAa;AAErD,QAAM,kBAAgC,MAAM,WAAW,IAAI;AAE3D,QAAM,mBAAmB,gBAAgB,SAAS;AAElD,MAAI,OAAO,uBAAQ,UAAU,kBAAkB,aAAa;AAE5D,MAAI,OAAO,OAAO;AAClB,uBAAO;AAAA,IACL,gCAAgC,KAAK,IAAI,SAAS,OAAO,KAAK,GAAG,CAAC;AAAA,EACpE;AACF;AAMO,MAAM,gBAAgB,OAAO,QAAiC;AACnE,QAAM,EAAE,KAAK,IAAI,IAAI;AACrB,QAAM,qBAAiB,sCAAsB;AAE7C,MAAI,MAAM;AACR,UAAM,cAAc,IAAI;AAAA,EAC1B;AAEA,MAAI,OAAO,uBAAQ,UAAU,IAAI,cAAc;AAC/C,MAAI,OAAO,uBAAQ,UAAU,IAAI,cAAc;AAE/C,MAAI,OAAO,OAAO;AAClB,MAAI,OAAO,WAAW;AACxB;AAQO,MAAM,sBAAsB,CACjC,KACA,iBACG;AACH,QAAM,mBAAmB;AAAA,IACvB,KAAK,aAAa;AAAA,IAClB,MAAM,aAAa;AAAA,EACrB;AAEA,QAAM,oBAAoB,oBAAAA,QAAI;AAAA,IAC5B;AAAA,IACA,QAAQ,IAAI;AAAA,IACZ;AAAA,MACE,WAAW;AAAA,IACb;AAAA,EACF;AAEA,MAAI,CAAC,mBAAmB;AACtB,UAAM,IAAI,2BAAa,0CAA0C;AAAA,MAC/D;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,OAAO,uBAAQ,kBAAkB,uBAAmB,iCAAiB,CAAC;AAE1E,MAAI,OAAO,eAAe;AAC5B;AAMO,MAAM,wBAAwB,CAAC,QAAiC;AACrE,MAAI,OAAO,eAAe;AAE1B,MAAI,OAAO,uBAAQ,kBAAkB,QAAI,sCAAsB,CAAC;AAClE;AAOO,MAAM,iBAAiB,CAC5B,KACA,YACG;AACH,QAAM,EAAE,aAAa,IAAI,IAAI;AAC7B,QAAM,cAAc;AAAA,IAClB,KAAK,QAAQ;AAAA,IACb,MAAM,QAAQ;AAAA,EAChB;AAEA,QAAM,eAAe,oBAAAA,QAAI,KAAK,aAAa,QAAQ,IAAI,kBAAmB;AAAA,IACxE,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,2BAAa,qCAAqC;AAAA,MAC1D;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,OAAO,uBAAQ,aAAa,kBAAc,iCAAiB,CAAC;AAEhE,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,2BAAa,0BAA0B;AAAA,MAC/C;AAAA,IACF,CAAC;AAAA,EACH;AAEA;AAAA;AAAA,IAEE,OAAO,aAAa,GAAG,MAAM,OAAO,QAAQ,cAAc;AAAA,IAC1D;AACA,UAAM,IAAI,2BAAa,2CAA2C;AAAA,MAChE;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,OAAO,UAAU;AACvB;AAMO,MAAM,mBAAmB,CAAC,QAAkB;AACjD,MAAI,OAAO,UAAU;AAErB,MAAI,OAAO,uBAAQ,aAAa,QAAI,sCAAsB,CAAC;AAC7D;AAOO,MAAM,iBAAiB,CAAC,WAA2B;AACxD,QAAM,aACJ;AACF,SAAO,MAAM;AAAA,IAAK,EAAE,OAAO;AAAA,IAAG,MAC5B,WAAW,OAAO,KAAK,MAAM,KAAK,OAAO,IAAI,WAAW,MAAM,CAAC;AAAA,EACjE,EAAE,KAAK,EAAE;AACX;AAQO,MAAM,uBAAuB,OAClC,UACyB;AACzB,QAAM,OAAO,UAAM,6BAAe,KAAK;AAEvC,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,2BAAa,kBAAkB,EAAE,MAAM,CAAC;AAAA,EACpD;AAEA,SAAO,mBAAmB,KAAK,KAA0B,SAAS;AAAA,IAChE,QAAQ,eAAe,EAAE;AAAA,EAC3B,CAAC;AACH;AASO,MAAM,oBAAoB,OAC/B,QACA,QACA,gBACkB;AAClB,QAAM,2BAA2B,MAAM,gBAAgB,QAAQ,OAAO;AAEtE,MAAI,CAAC,0BAA0B;AAC7B,UAAM,IAAI,2BAAa,2BAA2B,EAAE,OAAO,CAAC;AAAA,EAC9D;AAEA,MAAI,CAAC,yBAAyB,QAAQ;AACpC,UAAM,IAAI,2BAAa,oCAAoC,EAAE,OAAO,CAAC;AAAA,EACvE;AAEA,MACE,CAAC,cAAAC,QAAO;AAAA,IACN,OAAO,KAAK,yBAAyB,MAAM;AAAA,IAC3C,OAAO,KAAK,MAAM;AAAA,EACpB,GACA;AACA,UAAM,IAAI,2BAAa,kCAAkC,EAAE,OAAO,CAAC;AAAA,EACrE;AAEA,QAAM,cAAoB,MAAM,mBAAmB,QAAQ,SAAS;AAAA,IAClE,cAAc,UAAM,sBAAK,aAAa,UAAM,yBAAQ,CAAC;AAAA,IACrD;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAgBO,MAAM,kBAAkB,OAC7B,QACA,UACA,sBACoC;AACpC,QAAM,OAAO,UAAM,0BAAY,MAAM;AAErC,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,2BAAa,kBAAkB,EAAE,OAAO,CAAC;AAAA,EACrD;AAEA,QAAM,eAAe,KAAK,UAAU;AAAA,IAClC,CAAC,eACE,WAAW,aAAa,YAAY,CAAC,qBACrC,qBACE,WAAqC,sBACpC;AAAA,EACR;AAEA,SAAQ,gBAAoC;AAC9C;AASO,MAAM,2BAA2B,CAGtC,UACA,MACA,mBACqB;AACrB,QAAM,mBAAmC,gEAEvC,KAAK,YAAY,CAAC,CAAC;AAErB,QAAM,uBAAuB,cAAc;AAAA,IACzC,CAAC,eAAe,WAAW,aAAa;AAAA,EAC1C;AAEA,MAAI;AAEJ,MAAI,sBAAsB;AACxB,UAAM,iBACJ,KAAK,UAAU,OAAO,CAAC,MAAM,EAAE,aAAa,QAAQ,KAAK,CAAC;AAE5D,sBAAkB;AAAA,MAChB,GAAG;AAAA,MACH,EAAE,GAAG,sBAAsB,GAAG,gBAAgB,SAAS;AAAA,IACzD;AAAA,EACF,OAAO;AACL,sBAAkB;AAAA,MAChB,GAAI,KAAK,YAAY,CAAC;AAAA,MACtB,EAAE,GAAG,gBAAgB,SAAS;AAAA,IAChC;AAAA,EACF;AAEA,SAAO;AACT;AASO,MAAM,qBAAqB,OAGhC,QACA,UACA,mBAC0B;AAC1B,QAAM,OAAO,UAAM,0BAAY,MAAM;AAErC,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,2BAAa,kBAAkB,EAAE,OAAO,CAAC;AAAA,EACrD;AAEA,QAAM,4BAA4B;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,cAA4B,UAAM,6BAAe,QAAQ;AAAA,IAC7D,UAAU;AAAA,EACZ,CAAC;AAED,uBAAO;AAAA,IACL,uCAAuC,YAAY,IAAI,SAAS,OAAO,YAAY,GAAG,CAAC,gBAAgB,QAAQ;AAAA,EACjH;AAEA,SAAO;AACT;AAQO,MAAM,kBAAkB,OAC7B,QACA,aAC0B;AAC1B,QAAM,OAAO,UAAM,0BAAY,MAAM;AAErC,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,2BAAa,kBAAkB,EAAE,OAAO,CAAC;AAAA,EACrD;AAEA,QAAM,mBAAmB,MAAM,gBAAgB,QAAQ,SAAS,QAAQ;AAExE,MAAI,kBAAkB;AACpB,UAAM,IAAI,2BAAa,gCAAgC;AAAA,MACrD;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,kBAAkB,CAAC,GAAI,KAAK,YAAY,CAAC,GAAI,QAAQ;AAE3D,QAAM,cAAc,UAAM,6BAAe,QAAQ;AAAA,IAC/C,UAAU;AAAA,EACZ,CAAC;AAED,uBAAO;AAAA,IACL,qCAAqC,YAAY,IAAI,SAAS,OAAO,YAAY,GAAG,CAAC,gBAAgB,SAAS,QAAQ;AAAA,EACxH;AAEA,SAAO;AACT;AAQO,MAAM,qBAAqB,OAChC,QACA,UACA,sBACG;AACH,QAAM,OAAO,UAAM,0BAAY,MAAM;AAErC,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,2BAAa,kBAAkB,EAAE,OAAO,CAAC;AAAA,EACrD;AAEA,QAAM,mBAAmB,MAAM;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,CAAC,kBAAkB;AACrB,UAAM,IAAI,2BAAa,2BAA2B;AAAA,MAChD;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,kBAAkB,KAAK,UAAU;AAAA,IACrC,CAAC,MACC,EAAE,aAAa,aACd,CAAC,qBACC,qBACE,EAA4B,sBAAsB;AAAA,EAC3D;AAEA,SAAO,UAAM,6BAAe,QAAQ;AAAA,IAClC,UAAU;AAAA,EACZ,CAAC;AACH;AAUO,MAAM,mBAAmB,OAC9B,OACA,aACoC;AACpC,QAAM,OAAO,UAAM,6BAAe,KAAK;AAEvC,MAAI,CAAC,MAAM;AACT,UAAM,gBAAgB;AAAA,MACpB,IAAI,oBAAoB,KAAK;AAAA,MAC7B,IAAI,+BAA4B,KAAK;AAAA,MACrC,IAAI,2BAA2B,KAAK;AAAA,IACtC;AAEA,WAAO,EAAE,MAAM,MAAM,WAAO,2BAAE,aAAa,EAAE;AAAA,EAC/C;AAEA,QAAM,4BAA4B,KAAK,UAAU;AAAA,IAC/C,CAAC,aAAa,SAAS,aAAa;AAAA,EACtC;AAEA,MAAI,CAAC,2BAA2B,cAAc;AAC5C,UAAM,gBAAgB;AAAA,MACpB,IAAI,kDAAkD,KAAK,KAAK;AAAA,MAChE,IAAI,2EAAwE,KAAK,KAAK;AAAA,MACtF,IAAI,oFAA8E,KAAK,KAAK;AAAA,IAC9F;AAEA,WAAO,EAAE,MAAM,MAAM,WAAO,2BAAE,aAAa,EAAE;AAAA,EAC/C;AAEA,QAAM,UAAU,UAAM;AAAA,IACpB;AAAA,IACA,0BAA0B;AAAA,EAC5B;AAEA,MAAI,CAAC,SAAS;AACZ,UAAM,gBAAgB;AAAA,MACpB,IAAI,gCAAgC,KAAK;AAAA,MACzC,IAAI,qCAAqC,KAAK;AAAA,MAC9C,IAAI,sDAAgD,KAAK;AAAA,IAC3D;AAEA,yBAAO,MAAM,cAAc,EAAE;AAG7B,UAAM,eAAe,KAAK,MAAM,KAAK,OAAO,IAAI,GAAI,IAAI;AACxD,UAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,YAAY,CAAC;AAEhE,WAAO,EAAE,MAAM,MAAM,WAAO,2BAAE,aAAa,EAAE;AAAA,EAC/C;AAEA,SAAO,EAAE,KAAK;AAChB;AAOO,MAAM,mBAAmB,OAC9B,8BACmC;AACnC,QAAM,EAAE,UAAU,GAAG,KAAK,IAAI;AAE9B,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,2BAAa,6BAA6B,EAAE,KAAK,CAAC;AAAA,EAC9D;AAEA,QAAM,eAAe,yBAAyB,SAAS,MAAM;AAAA,IAC3D,cAAc,UAAM,sBAAK,UAAU,UAAM,yBAAQ,CAAC;AAAA,IAClD,QAAQ,eAAe,EAAE;AAAA,EAC3B,CAAC;AAED,SAAO,EAAE,GAAG,MAAM,UAAU,aAAa;AAC3C;AAQO,MAAM,qBAAqB,OAChC,QACA,gBACG;AACH,QAAM,OAAO,UAAM,0BAAY,MAAM;AAErC,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,2BAAa,kBAAkB,EAAE,OAAO,CAAC;AAAA,EACrD;AAEA,QAAM,cAAoB,MAAM,mBAAmB,QAAQ,SAAS;AAAA,IAClE,cAAc,UAAM,sBAAK,aAAa,UAAM,yBAAQ,CAAC;AAAA,EACvD,CAAC;AAED,SAAO;AACT;AASO,MAAM,gBAAgB,OAAO,QAAgB,aAAqB;AACvE,QAAM,OAAO,UAAM,0BAAY,MAAM;AAErC,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,2BAAa,kBAAkB,EAAE,OAAO,CAAC;AAAA,EACrD;AAEA,QAAM,cAA4B,MAAM,mBAAmB,QAAQ,SAAS;AAAA,IAC1E,cAAc,UAAM,sBAAK,UAAU,UAAM,yBAAQ,CAAC;AAAA,EACpD,CAAC;AAED,SAAO;AACT;","names":["import_user","uuidv4","jwt","crypto"]}

package/dist/cjs/utils/CSRF.cjs

@@ -1,50 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var CSRF_exports = {};
-__export(CSRF_exports, {
-  doubleCsrfProtection: () => doubleCsrfProtection,
-  generateToken: () => generateCsrfToken,
-  validateRequest: () => validateRequest
-});
-module.exports = __toCommonJS(CSRF_exports);
-var import_csrf_csrf = require("csrf-csrf");
-var import_cookies = require('./cookies.cjs');
-const {
-  generateCsrfToken,
-  // Use this in your routes to provide a CSRF hash + token cookie and token.
-  validateRequest,
-  // Also a convenience if you plan on making your own middleware.
-  doubleCsrfProtection
-  // This is the default CSRF protection middleware.
-} = (0, import_csrf_csrf.doubleCsrf)({
-  getSecret: () => process.env.CSRF_SECRET,
-  getSessionIdentifier: (req) => {
-    return req.sessionID || `${req.ip}-${req.get("User-Agent")}` || "anonymous";
-  },
-  getCsrfTokenFromRequest: (req) => req.body.csrf_token,
-  cookieName: import_cookies.Cookies.XSRF_TOKEN,
-  cookieOptions: (0, import_cookies.getCookieOptions)()
-});
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  doubleCsrfProtection,
-  generateToken,
-  validateRequest
-});
-//# sourceMappingURL=CSRF.cjs.map

package/dist/cjs/utils/CSRF.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/utils/CSRF.ts"],"sourcesContent":["import { doubleCsrf } from 'csrf-csrf';\nimport { Cookies, getCookieOptions } from './cookies';\n\nconst {\n  generateCsrfToken, // Use this in your routes to provide a CSRF hash + token cookie and token.\n  validateRequest, // Also a convenience if you plan on making your own middleware.\n  doubleCsrfProtection, // This is the default CSRF protection middleware.\n} = doubleCsrf({\n  getSecret: () => process.env.CSRF_SECRET!,\n  getSessionIdentifier: (req) => {\n    // Use session ID if available, otherwise fallback to IP + User-Agent hash\n    return (\n      (req as any).sessionID ||\n      `${req.ip}-${req.get('User-Agent')}` ||\n      'anonymous'\n    );\n  },\n  getCsrfTokenFromRequest: (req) => req.body.csrf_token,\n  cookieName: Cookies.XSRF_TOKEN,\n  cookieOptions: getCookieOptions(),\n});\n\nexport {\n  doubleCsrfProtection,\n  generateCsrfToken as generateToken,\n  validateRequest,\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAA2B;AAC3B,qBAA0C;AAE1C,MAAM;AAAA,EACJ;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AACF,QAAI,6BAAW;AAAA,EACb,WAAW,MAAM,QAAQ,IAAI;AAAA,EAC7B,sBAAsB,CAAC,QAAQ;AAE7B,WACG,IAAY,aACb,GAAG,IAAI,EAAE,IAAI,IAAI,IAAI,YAAY,CAAC,MAClC;AAAA,EAEJ;AAAA,EACA,yBAAyB,CAAC,QAAQ,IAAI,KAAK;AAAA,EAC3C,YAAY,uBAAQ;AAAA,EACpB,mBAAe,iCAAiB;AAClC,CAAC;","names":[]}

package/dist/cjs/utils/cookies.cjs

@@ -1,59 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var cookies_exports = {};
-__export(cookies_exports, {
-  Cookies: () => Cookies,
-  MAX_AGE: () => MAX_AGE,
-  getClearCookieOptions: () => getClearCookieOptions,
-  getCookieOptions: () => getCookieOptions
-});
-module.exports = __toCommonJS(cookies_exports);
-const MAX_AGE = 3 * 24 * 60 * 60 * 1e3;
-var Cookies = /* @__PURE__ */ ((Cookies2) => {
-  Cookies2["JWT_AUTH"] = "intlayer_auth";
-  Cookies2["JWT_USER"] = "intlayer_user";
-  Cookies2["JWT_ORGANIZATION"] = "intlayer_organization";
-  Cookies2["JWT_PROJECT"] = "intlayer_project";
-  Cookies2["XSRF_TOKEN"] = "XSRF-TOKEN";
-  return Cookies2;
-})(Cookies || {});
-const getCookieOptions = (overwriteOption = {}) => ({
-  maxAge: MAX_AGE,
-  path: "/",
-  domain: process.env.DOMAIN,
-  httpOnly: true,
-  secure: process.env.NODE_ENV === "production",
-  // Enable for HTTPS in production
-  sameSite: "strict",
-  priority: "high",
-  ...overwriteOption
-});
-const getClearCookieOptions = (overwriteOption = {}) => ({
-  ...getCookieOptions(),
-  maxAge: 1,
-  ...overwriteOption
-});
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  Cookies,
-  MAX_AGE,
-  getClearCookieOptions,
-  getCookieOptions
-});
-//# sourceMappingURL=cookies.cjs.map

package/dist/cjs/utils/cookies.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/utils/cookies.ts"],"sourcesContent":["import type { CookieOptions } from 'express';\n\nexport const MAX_AGE = 3 * 24 * 60 * 60 * 1000; // 3 days\n\nexport enum Cookies {\n  JWT_AUTH = 'intlayer_auth',\n  JWT_USER = 'intlayer_user',\n  JWT_ORGANIZATION = 'intlayer_organization',\n  JWT_PROJECT = 'intlayer_project',\n  XSRF_TOKEN = 'XSRF-TOKEN',\n}\n\nexport const getCookieOptions = (\n  overwriteOption: Partial<CookieOptions> = {}\n): CookieOptions => ({\n  maxAge: MAX_AGE,\n  path: '/',\n  domain: process.env.DOMAIN,\n  httpOnly: true,\n  secure: process.env.NODE_ENV === 'production', // Enable for HTTPS in production\n  sameSite: 'strict',\n  priority: 'high',\n  ...overwriteOption,\n});\n\nexport const getClearCookieOptions = (\n  overwriteOption: Partial<CookieOptions> = {}\n): CookieOptions => ({\n  ...getCookieOptions(),\n  maxAge: 1,\n  ...overwriteOption,\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEO,MAAM,UAAU,IAAI,KAAK,KAAK,KAAK;AAEnC,IAAK,UAAL,kBAAKA,aAAL;AACL,EAAAA,SAAA,cAAW;AACX,EAAAA,SAAA,cAAW;AACX,EAAAA,SAAA,sBAAmB;AACnB,EAAAA,SAAA,iBAAc;AACd,EAAAA,SAAA,gBAAa;AALH,SAAAA;AAAA,GAAA;AAQL,MAAM,mBAAmB,CAC9B,kBAA0C,CAAC,OACxB;AAAA,EACnB,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ,QAAQ,IAAI;AAAA,EACpB,UAAU;AAAA,EACV,QAAQ,QAAQ,IAAI,aAAa;AAAA;AAAA,EACjC,UAAU;AAAA,EACV,UAAU;AAAA,EACV,GAAG;AACL;AAEO,MAAM,wBAAwB,CACnC,kBAA0C,CAAC,OACxB;AAAA,EACnB,GAAG,iBAAiB;AAAA,EACpB,QAAQ;AAAA,EACR,GAAG;AACL;","names":["Cookies"]}