@intlayer/backend 7.5.9 → 7.5.11

package/dist/esm/services/webhook.service.mjs

@@ -0,0 +1,164 @@
+import { logger } from "../logger/index.mjs";
+import { createHmac } from "node:crypto";
+import { Octokit } from "@octokit/rest";
+
+//#region src/services/webhook.service.ts
+/**
+* Main entry point to trigger all configured CI pipelines for a project
+*/
+const triggerAll = async (project) => {
+	const results = [];
+	if (project.repository && project.webhooks?.autoTriggerBuilds) try {
+		await triggerGitPipeline(project);
+		results.push({
+			target: project.repository.provider,
+			success: true
+		});
+	} catch (error) {
+		logger.error(`Failed to trigger ${project.repository.provider}`, error);
+		results.push({
+			target: project.repository.provider,
+			success: false,
+			message: error.message || String(error)
+		});
+	}
+	const webhooks = project.webhooks?.webhooks || [];
+	for (const hook of webhooks) {
+		if (!hook.enabled) continue;
+		try {
+			await triggerGenericWebhook(hook);
+			results.push({
+				target: hook.name,
+				success: true
+			});
+		} catch (error) {
+			logger.error(`Failed to trigger webhook ${hook.name}`, error);
+			results.push({
+				target: hook.name,
+				success: false,
+				message: error.message || String(error)
+			});
+		}
+	}
+	return results;
+};
+/**
+* Triggers a single webhook by index
+*/
+const triggerSingleWebhook = async (project, webhookIndex) => {
+	const webhooks = project.webhooks?.webhooks || [];
+	if (webhookIndex < 0 || webhookIndex >= webhooks.length) throw new Error(`Webhook index ${webhookIndex} is out of range`);
+	const hook = webhooks[webhookIndex];
+	if (!hook.enabled) throw new Error(`Webhook "${hook.name}" is disabled`);
+	try {
+		await triggerGenericWebhook(hook);
+		return {
+			target: hook.name,
+			success: true
+		};
+	} catch (error) {
+		logger.error(`Failed to trigger webhook ${hook.name}`, error);
+		return {
+			target: hook.name,
+			success: false,
+			message: error.message || String(error)
+		};
+	}
+};
+const triggerGitPipeline = async (project) => {
+	const { repository, oAuth2Access } = project;
+	if (!repository) throw new Error("No repository configured");
+	const token = oAuth2Access?.[0]?.accessToken?.[0];
+	if (!token) throw new Error("No valid OAuth token found");
+	const { provider } = repository;
+	switch (provider) {
+		case "github": return triggerGithub(repository, token);
+		case "gitlab": return triggerGitlab(repository, token);
+		case "bitbucket": return triggerBitbucket(repository, token);
+		default: throw new Error(`Unknown provider: ${provider}`);
+	}
+};
+const triggerGithub = async (repo, token) => {
+	await new Octokit({ auth: token }).repos.createDispatchEvent({
+		owner: repo.owner,
+		repo: repo.repository,
+		event_type: "intlayer_cms_update",
+		client_payload: {
+			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+			source: "intlayer-cms"
+		}
+	});
+	logger.info(`Successfully triggered GitHub Action for ${repo.owner}/${repo.repository}`);
+};
+const triggerGitlab = async (repo, token) => {
+	const projectId = encodeURIComponent(`${repo.owner}/${repo.repository}`);
+	const branch = repo.branch || "main";
+	const url = `${repo.instanceUrl || "https://gitlab.com"}/api/v4/projects/${projectId}/trigger/pipeline`;
+	const formData = new FormData();
+	formData.append("token", token);
+	formData.append("ref", branch);
+	formData.append("variables[INTLAYER_UPDATE]", "true");
+	const res = await fetch(url, {
+		method: "POST",
+		body: formData
+	});
+	if (!res.ok) {
+		const errorText = await res.text();
+		throw new Error(`GitLab error: ${res.status} - ${errorText}`);
+	}
+	logger.info(`Successfully triggered GitLab pipeline for ${repo.owner}/${repo.repository}`);
+};
+const triggerBitbucket = async (repo, token) => {
+	const workspace = repo.workspace || repo.owner;
+	const branch = repo.branch || "main";
+	const url = `https://api.bitbucket.org/2.0/repositories/${workspace}/${repo.repository}/pipelines/`;
+	const body = {
+		target: {
+			ref_type: "branch",
+			type: "pipeline_ref_target",
+			ref_name: branch
+		},
+		variables: [{
+			key: "INTLAYER_UPDATE",
+			value: "true",
+			secured: false
+		}]
+	};
+	const res = await fetch(url, {
+		method: "POST",
+		headers: {
+			Authorization: `Bearer ${token}`,
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify(body)
+	});
+	if (!res.ok) {
+		const errorText = await res.text();
+		throw new Error(`Bitbucket error: ${res.status} - ${errorText}`);
+	}
+	logger.info(`Successfully triggered Bitbucket pipeline for ${workspace}/${repo.repository}`);
+};
+const triggerGenericWebhook = async (hook) => {
+	const headers = { "Content-Type": "application/json" };
+	if (hook.secret) {
+		const payload = JSON.stringify({ event: "intlayer_cms_update" });
+		headers["X-Intlayer-Signature"] = createHmac("sha256", hook.secret).update(payload).digest("hex");
+	}
+	const res = await fetch(hook.url, {
+		method: "POST",
+		headers,
+		body: JSON.stringify({
+			event: "intlayer_cms_update",
+			timestamp: (/* @__PURE__ */ new Date()).toISOString()
+		})
+	});
+	if (!res.ok) {
+		const errorText = await res.text();
+		throw new Error(`Webhook ${hook.name} failed: ${res.status} - ${errorText}`);
+	}
+	logger.info(`Successfully triggered webhook: ${hook.name}`);
+};
+
+//#endregion
+export { triggerAll, triggerSingleWebhook };
+//# sourceMappingURL=webhook.service.mjs.map

package/dist/esm/services/webhook.service.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.service.mjs","names":["results: TriggerResult[]","error: any","headers: Record<string, string>"],"sources":["../../../src/services/webhook.service.ts"],"sourcesContent":["import { createHmac } from 'node:crypto';\nimport { logger } from '@logger';\nimport { Octokit } from '@octokit/rest';\nimport type { Project } from '@/types/project.types';\n\nexport type TriggerResult = {\n  target: string;\n  success: boolean;\n  message?: string;\n};\n\n/**\n * Main entry point to trigger all configured CI pipelines for a project\n */\nexport const triggerAll = async (\n  project: Project\n): Promise<TriggerResult[]> => {\n  const results: TriggerResult[] = [];\n\n  // Trigger Git Provider Pipeline (if configured)\n  if (project.repository && project.webhooks?.autoTriggerBuilds) {\n    try {\n      await triggerGitPipeline(project);\n      results.push({\n        target: project.repository.provider,\n        success: true,\n      });\n    } catch (error: any) {\n      logger.error(`Failed to trigger ${project.repository.provider}`, error);\n      results.push({\n        target: project.repository.provider,\n        success: false,\n        message: error.message || String(error),\n      });\n    }\n  }\n\n  // Trigger Generic Webhooks (Vercel, etc.)\n  const webhooks = project.webhooks?.webhooks || [];\n\n  // Using Promise.all is often better here, but keeping your sequential loop logic for safety\n  for (const hook of webhooks) {\n    if (!hook.enabled) continue;\n    try {\n      await triggerGenericWebhook(hook);\n      results.push({ target: hook.name, success: true });\n    } catch (error: any) {\n      logger.error(`Failed to trigger webhook ${hook.name}`, error);\n      results.push({\n        target: hook.name,\n        success: false,\n        message: error.message || String(error),\n      });\n    }\n  }\n\n  return results;\n};\n\n/**\n * Triggers a single webhook by index\n */\nexport const triggerSingleWebhook = async (\n  project: Project,\n  webhookIndex: number\n): Promise<TriggerResult> => {\n  const webhooks = project.webhooks?.webhooks || [];\n\n  if (webhookIndex < 0 || webhookIndex >= webhooks.length) {\n    throw new Error(`Webhook index ${webhookIndex} is out of range`);\n  }\n\n  const hook = webhooks[webhookIndex];\n\n  if (!hook.enabled) {\n    throw new Error(`Webhook \"${hook.name}\" is disabled`);\n  }\n\n  try {\n    await triggerGenericWebhook(hook);\n    return { target: hook.name, success: true };\n  } catch (error: any) {\n    logger.error(`Failed to trigger webhook ${hook.name}`, error);\n    return {\n      target: hook.name,\n      success: false,\n      message: error.message || String(error),\n    };\n  }\n};\n\n// Internal Helper Functions (equivalent to private static methods)\n\nconst triggerGitPipeline = async (project: Project) => {\n  const { repository, oAuth2Access } = project;\n\n  if (!repository) throw new Error('No repository configured');\n\n  const token = oAuth2Access?.[0]?.accessToken?.[0]; // Get the first valid token\n\n  if (!token) throw new Error('No valid OAuth token found');\n\n  const { provider } = repository;\n\n  switch (provider) {\n    case 'github':\n      return triggerGithub(repository, token);\n    case 'gitlab':\n      return triggerGitlab(repository, token);\n    case 'bitbucket':\n      return triggerBitbucket(repository, token);\n    default:\n      throw new Error(`Unknown provider: ${provider as string}`);\n  }\n};\n\nconst triggerGithub = async (repo: any, token: string) => {\n  const octokit = new Octokit({ auth: token });\n\n  // Triggers a 'repository_dispatch' event\n  // Workflow must listen to: types: [intlayer_cms_update]\n  await octokit.repos.createDispatchEvent({\n    owner: repo.owner,\n    repo: repo.repository,\n    event_type: 'intlayer_cms_update',\n    client_payload: {\n      timestamp: new Date().toISOString(),\n      source: 'intlayer-cms',\n    },\n  });\n\n  logger.info(\n    `Successfully triggered GitHub Action for ${repo.owner}/${repo.repository}`\n  );\n};\n\n// GitLab\nconst triggerGitlab = async (repo: any, token: string) => {\n  // GitLab needs Project ID (int) or URL-encoded path \"owner/repo\"\n  const projectId = encodeURIComponent(`${repo.owner}/${repo.repository}`);\n  const branch = repo.branch || 'main';\n  const baseUrl = repo.instanceUrl || 'https://gitlab.com';\n\n  const url = `${baseUrl}/api/v4/projects/${projectId}/trigger/pipeline`;\n\n  const formData = new FormData();\n  formData.append('token', token); // Or a specific trigger token if stored separately\n  formData.append('ref', branch);\n  formData.append('variables[INTLAYER_UPDATE]', 'true');\n\n  const res = await fetch(url, { method: 'POST', body: formData });\n  if (!res.ok) {\n    const errorText = await res.text();\n    throw new Error(`GitLab error: ${res.status} - ${errorText}`);\n  }\n\n  logger.info(\n    `Successfully triggered GitLab pipeline for ${repo.owner}/${repo.repository}`\n  );\n};\n\n// Bitbucket\nconst triggerBitbucket = async (repo: any, token: string) => {\n  const workspace = repo.workspace || repo.owner; // Bitbucket uses 'workspace'\n  const branch = repo.branch || 'main';\n  const url = `https://api.bitbucket.org/2.0/repositories/${workspace}/${repo.repository}/pipelines/`;\n\n  const body = {\n    target: {\n      ref_type: 'branch',\n      type: 'pipeline_ref_target',\n      ref_name: branch,\n      // Optional: Target a custom pipeline for security\n      // selector: { type: 'custom', pattern: 'intlayer-update' }\n    },\n    variables: [{ key: 'INTLAYER_UPDATE', value: 'true', secured: false }],\n  };\n\n  const res = await fetch(url, {\n    method: 'POST',\n    headers: {\n      Authorization: `Bearer ${token}`,\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify(body),\n  });\n\n  if (!res.ok) {\n    const errorText = await res.text();\n    throw new Error(`Bitbucket error: ${res.status} - ${errorText}`);\n  }\n\n  logger.info(\n    `Successfully triggered Bitbucket pipeline for ${workspace}/${repo.repository}`\n  );\n};\n\n// Generic Webhook\nconst triggerGenericWebhook = async (hook: any) => {\n  const headers: Record<string, string> = {\n    'Content-Type': 'application/json',\n  };\n\n  // Add secret signature if provided (for webhook verification)\n  if (hook.secret) {\n    // Simple HMAC-SHA256 signature (can be enhanced)\n    const payload = JSON.stringify({ event: 'intlayer_cms_update' });\n    const signature = createHmac('sha256', hook.secret)\n      .update(payload)\n      .digest('hex');\n    headers['X-Intlayer-Signature'] = signature;\n  }\n\n  const res = await fetch(hook.url, {\n    method: 'POST',\n    headers,\n    body: JSON.stringify({\n      event: 'intlayer_cms_update',\n      timestamp: new Date().toISOString(),\n    }),\n  });\n\n  if (!res.ok) {\n    const errorText = await res.text();\n    throw new Error(\n      `Webhook ${hook.name} failed: ${res.status} - ${errorText}`\n    );\n  }\n\n  logger.info(`Successfully triggered webhook: ${hook.name}`);\n};\n"],"mappings":";;;;;;;;AAcA,MAAa,aAAa,OACxB,YAC6B;CAC7B,MAAMA,UAA2B,EAAE;AAGnC,KAAI,QAAQ,cAAc,QAAQ,UAAU,kBAC1C,KAAI;AACF,QAAM,mBAAmB,QAAQ;AACjC,UAAQ,KAAK;GACX,QAAQ,QAAQ,WAAW;GAC3B,SAAS;GACV,CAAC;UACKC,OAAY;AACnB,SAAO,MAAM,qBAAqB,QAAQ,WAAW,YAAY,MAAM;AACvE,UAAQ,KAAK;GACX,QAAQ,QAAQ,WAAW;GAC3B,SAAS;GACT,SAAS,MAAM,WAAW,OAAO,MAAM;GACxC,CAAC;;CAKN,MAAM,WAAW,QAAQ,UAAU,YAAY,EAAE;AAGjD,MAAK,MAAM,QAAQ,UAAU;AAC3B,MAAI,CAAC,KAAK,QAAS;AACnB,MAAI;AACF,SAAM,sBAAsB,KAAK;AACjC,WAAQ,KAAK;IAAE,QAAQ,KAAK;IAAM,SAAS;IAAM,CAAC;WAC3CA,OAAY;AACnB,UAAO,MAAM,6BAA6B,KAAK,QAAQ,MAAM;AAC7D,WAAQ,KAAK;IACX,QAAQ,KAAK;IACb,SAAS;IACT,SAAS,MAAM,WAAW,OAAO,MAAM;IACxC,CAAC;;;AAIN,QAAO;;;;;AAMT,MAAa,uBAAuB,OAClC,SACA,iBAC2B;CAC3B,MAAM,WAAW,QAAQ,UAAU,YAAY,EAAE;AAEjD,KAAI,eAAe,KAAK,gBAAgB,SAAS,OAC/C,OAAM,IAAI,MAAM,iBAAiB,aAAa,kBAAkB;CAGlE,MAAM,OAAO,SAAS;AAEtB,KAAI,CAAC,KAAK,QACR,OAAM,IAAI,MAAM,YAAY,KAAK,KAAK,eAAe;AAGvD,KAAI;AACF,QAAM,sBAAsB,KAAK;AACjC,SAAO;GAAE,QAAQ,KAAK;GAAM,SAAS;GAAM;UACpCA,OAAY;AACnB,SAAO,MAAM,6BAA6B,KAAK,QAAQ,MAAM;AAC7D,SAAO;GACL,QAAQ,KAAK;GACb,SAAS;GACT,SAAS,MAAM,WAAW,OAAO,MAAM;GACxC;;;AAML,MAAM,qBAAqB,OAAO,YAAqB;CACrD,MAAM,EAAE,YAAY,iBAAiB;AAErC,KAAI,CAAC,WAAY,OAAM,IAAI,MAAM,2BAA2B;CAE5D,MAAM,QAAQ,eAAe,IAAI,cAAc;AAE/C,KAAI,CAAC,MAAO,OAAM,IAAI,MAAM,6BAA6B;CAEzD,MAAM,EAAE,aAAa;AAErB,SAAQ,UAAR;EACE,KAAK,SACH,QAAO,cAAc,YAAY,MAAM;EACzC,KAAK,SACH,QAAO,cAAc,YAAY,MAAM;EACzC,KAAK,YACH,QAAO,iBAAiB,YAAY,MAAM;EAC5C,QACE,OAAM,IAAI,MAAM,qBAAqB,WAAqB;;;AAIhE,MAAM,gBAAgB,OAAO,MAAW,UAAkB;AAKxD,OAJgB,IAAI,QAAQ,EAAE,MAAM,OAAO,CAAC,CAI9B,MAAM,oBAAoB;EACtC,OAAO,KAAK;EACZ,MAAM,KAAK;EACX,YAAY;EACZ,gBAAgB;GACd,4BAAW,IAAI,MAAM,EAAC,aAAa;GACnC,QAAQ;GACT;EACF,CAAC;AAEF,QAAO,KACL,4CAA4C,KAAK,MAAM,GAAG,KAAK,aAChE;;AAIH,MAAM,gBAAgB,OAAO,MAAW,UAAkB;CAExD,MAAM,YAAY,mBAAmB,GAAG,KAAK,MAAM,GAAG,KAAK,aAAa;CACxE,MAAM,SAAS,KAAK,UAAU;CAG9B,MAAM,MAAM,GAFI,KAAK,eAAe,qBAEb,mBAAmB,UAAU;CAEpD,MAAM,WAAW,IAAI,UAAU;AAC/B,UAAS,OAAO,SAAS,MAAM;AAC/B,UAAS,OAAO,OAAO,OAAO;AAC9B,UAAS,OAAO,8BAA8B,OAAO;CAErD,MAAM,MAAM,MAAM,MAAM,KAAK;EAAE,QAAQ;EAAQ,MAAM;EAAU,CAAC;AAChE,KAAI,CAAC,IAAI,IAAI;EACX,MAAM,YAAY,MAAM,IAAI,MAAM;AAClC,QAAM,IAAI,MAAM,iBAAiB,IAAI,OAAO,KAAK,YAAY;;AAG/D,QAAO,KACL,8CAA8C,KAAK,MAAM,GAAG,KAAK,aAClE;;AAIH,MAAM,mBAAmB,OAAO,MAAW,UAAkB;CAC3D,MAAM,YAAY,KAAK,aAAa,KAAK;CACzC,MAAM,SAAS,KAAK,UAAU;CAC9B,MAAM,MAAM,8CAA8C,UAAU,GAAG,KAAK,WAAW;CAEvF,MAAM,OAAO;EACX,QAAQ;GACN,UAAU;GACV,MAAM;GACN,UAAU;GAGX;EACD,WAAW,CAAC;GAAE,KAAK;GAAmB,OAAO;GAAQ,SAAS;GAAO,CAAC;EACvE;CAED,MAAM,MAAM,MAAM,MAAM,KAAK;EAC3B,QAAQ;EACR,SAAS;GACP,eAAe,UAAU;GACzB,gBAAgB;GACjB;EACD,MAAM,KAAK,UAAU,KAAK;EAC3B,CAAC;AAEF,KAAI,CAAC,IAAI,IAAI;EACX,MAAM,YAAY,MAAM,IAAI,MAAM;AAClC,QAAM,IAAI,MAAM,oBAAoB,IAAI,OAAO,KAAK,YAAY;;AAGlE,QAAO,KACL,iDAAiD,UAAU,GAAG,KAAK,aACpE;;AAIH,MAAM,wBAAwB,OAAO,SAAc;CACjD,MAAMC,UAAkC,EACtC,gBAAgB,oBACjB;AAGD,KAAI,KAAK,QAAQ;EAEf,MAAM,UAAU,KAAK,UAAU,EAAE,OAAO,uBAAuB,CAAC;AAIhE,UAAQ,0BAHU,WAAW,UAAU,KAAK,OAAO,CAChD,OAAO,QAAQ,CACf,OAAO,MAAM;;CAIlB,MAAM,MAAM,MAAM,MAAM,KAAK,KAAK;EAChC,QAAQ;EACR;EACA,MAAM,KAAK,UAAU;GACnB,OAAO;GACP,4BAAW,IAAI,MAAM,EAAC,aAAa;GACpC,CAAC;EACH,CAAC;AAEF,KAAI,CAAC,IAAI,IAAI;EACX,MAAM,YAAY,MAAM,IAAI,MAAM;AAClC,QAAM,IAAI,MACR,WAAW,KAAK,KAAK,WAAW,IAAI,OAAO,KAAK,YACjD;;AAGH,QAAO,KAAK,mCAAmC,KAAK,OAAO"}

package/dist/esm/utils/auth/getAuth.mjs

@@ -34,7 +34,7 @@ const formatSession = (session) => {
 };
 const getAuth = (dbClient) => {
 	if (!dbClient) throw new Error("MongoDB connection not established");
-	const auth = betterAuth({
+	return betterAuth({
 		appName: "Intlayer",
 		database: mongodbAdapter(dbClient.db()),
 		user: { modelName: "users" },
@@ -44,7 +44,7 @@ const getAuth = (dbClient) => {
 				type: "welcome",
 				to: user.email,
 				username: user.name ?? user.email.split("@")[0],
-				loginLink: `${process.env.CLIENT_URL}/auth/login`,
+				loginLink: `${process.env.APP_URL}/auth/login`,
 				locale: user.lang
 			});
 			logger.info("Welcome e‑mail delivered", { email: user.email });
@@ -65,7 +65,7 @@ const getAuth = (dbClient) => {
 					type: "welcome",
 					to: user.email,
 					username: user.name ?? user.email.split("@")[0],
-					loginLink: `${process.env.CLIENT_URL}/auth/login`,
+					loginLink: `${process.env.APP_URL}/auth/login`,
 					locale: user.lang
 				});
 				logger.info("Welcome e‑mail delivered", { email: user.email });
@@ -95,7 +95,6 @@ const getAuth = (dbClient) => {
 		plugins: [
 			customSession(async ({ session }) => {
 				const typedSession = session;
-				await auth.api.callbackSSOSAML;
 				let userAPI = null;
 				let organizationAPI = null;
 				let projectAPI = null;
@@ -159,19 +158,11 @@ const getAuth = (dbClient) => {
 					type: "resetPassword",
 					to: user.email,
 					username: user.name ?? user.email.split("@")[0],
-					resetLink: `${process.env.CLIENT_URL}/auth/password/reset?token=${token}`
+					resetLink: `${process.env.APP_URL}/auth/password/reset?token=${token}`
 				});
 			},
 			resetPasswordTokenExpiresIn: 3600
 		},
-		accountLinking: {
-			enabled: true,
-			trustedProviders: [
-				"google",
-				"github",
-				"linkedin"
-			]
-		},
 		emailVerification: {
 			autoSignInAfterVerification: true,
 			sendOnSignIn: true,
@@ -188,7 +179,7 @@ const getAuth = (dbClient) => {
 		crossSubDomainCookies: {
 			enabled: true,
 			additionalCookies: ["session_token"],
-			domain: process.env.CLIENT_URL
+			domain: process.env.DOMAIN
 		},
 		cookiePrefix: "intlayer",
 		cookies: { session_token: {
@@ -198,7 +189,21 @@ const getAuth = (dbClient) => {
 				secure: true
 			}
 		} },
-		trustedOrigins: [process.env.CLIENT_URL],
+		trustedOrigins: [process.env.WEBSITE_URL, process.env.APP_URL],
+		accountLinking: {
+			enabled: true,
+			trustedProviders: [
+				"google",
+				"github",
+				"linkedin",
+				"gitlab",
+				"atlassian",
+				"microsoft",
+				"email-password",
+				"magic-link",
+				"passkey"
+			]
+		},
 		socialProviders: {
 			google: {
 				clientId: process.env.GOOGLE_CLIENT_ID,
@@ -208,6 +213,14 @@ const getAuth = (dbClient) => {
 				clientId: process.env.GITHUB_CLIENT_ID,
 				clientSecret: process.env.GITHUB_CLIENT_SECRET
 			},
+			atlassian: {
+				clientId: process.env.ATLASSIAN_CLIENT_ID,
+				clientSecret: process.env.ATLASSIAN_CLIENT_SECRET
+			},
+			gitlab: {
+				clientId: process.env.GITLAB_CLIENT_ID,
+				clientSecret: process.env.GITLAB_CLIENT_SECRET
+			},
 			linkedin: {
 				clientId: process.env.LINKEDIN_CLIENT_ID,
 				clientSecret: process.env.LINKEDIN_CLIENT_SECRET
@@ -219,7 +232,6 @@ const getAuth = (dbClient) => {
 		},
 		logger: { log: (level, message, ...args) => logger[level](message, ...args) }
 	});
-	return auth;
 };
 
 //#endregion

package/dist/esm/utils/auth/getAuth.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"getAuth.mjs","names":["userAPI: UserAPI | null","organizationAPI: OrganizationAPI | null","projectAPI: ProjectAPI | null"],"sources":["../../../../src/utils/auth/getAuth.ts"],"sourcesContent":["import { passkey } from '@better-auth/passkey';\nimport { sso } from '@better-auth/sso';\nimport { sendVerificationUpdate } from '@controllers/user.controller';\nimport { logger } from '@logger';\nimport { OrganizationModel } from '@models/organization.model';\nimport { sendEmail } from '@services/email.service';\nimport { getOrganizationById } from '@services/organization.service';\nimport { getProjectById } from '@services/project.service';\nimport { getUserById } from '@services/user.service';\nimport { mapOrganizationToAPI } from '@utils/mapper/organization';\nimport { mapProjectToAPI } from '@utils/mapper/project';\nimport { mapSessionToAPI } from '@utils/mapper/session';\nimport { mapUserToAPI } from '@utils/mapper/user';\nimport {\n  computeEffectivePermission,\n  getSessionRoles,\n  intersectPermissions,\n} from '@utils/permissions';\nimport { betterAuth, type OmitId } from 'better-auth';\nimport { mongodbAdapter } from 'better-auth/adapters/mongodb';\nimport { createAuthMiddleware } from 'better-auth/api';\nimport { customSession, lastLoginMethod, twoFactor } from 'better-auth/plugins';\nimport { magicLink } from 'better-auth/plugins/magic-link';\nimport type { MongoClient } from 'mongodb';\nimport type { OrganizationAPI } from '@/types/organization.types';\nimport type { ProjectAPI } from '@/types/project.types';\nimport type {\n  Session,\n  SessionContext,\n  SessionDataApi,\n} from '@/types/session.types';\nimport type { User, UserAPI } from '@/types/user.types';\n\nexport type Auth = ReturnType<typeof betterAuth>;\n\nexport const formatSession = (session: SessionContext): OmitId<Session> => {\n  const roles = getSessionRoles(session);\n  let permissions = computeEffectivePermission(roles);\n\n  // Intersect in the case a Access Token try to override the permissions\n  if (session.permissions) {\n    permissions = intersectPermissions(permissions, session.permissions);\n  }\n\n  const resultSession = {\n    session: session.session,\n    user: session.user,\n    organization: session.organization,\n    project: session.project,\n    authType: 'session',\n    permissions,\n    roles,\n  } as OmitId<Session>;\n\n  return resultSession;\n};\n\nexport const getAuth = (dbClient: MongoClient): Auth => {\n  if (!dbClient) {\n    throw new Error('MongoDB connection not established');\n  }\n\n  const auth = betterAuth({\n    appName: 'Intlayer',\n\n    database: mongodbAdapter(dbClient.db()),\n\n    /**\n     * User model\n     */\n    user: {\n      modelName: 'users',\n    },\n\n    databaseHooks: {\n      user: {\n        create: {\n          // Runs once, immediately after the INSERT\n          after: async (user) => {\n            if (!user?.emailVerified) return;\n\n            await sendEmail({\n              type: 'welcome',\n              to: user.email,\n              username: user.name ?? user.email.split('@')[0],\n              loginLink: `${process.env.CLIENT_URL}/auth/login`,\n              locale: (user as any).lang,\n            });\n            logger.info('Welcome e‑mail delivered', {\n              email: user.email,\n            });\n          },\n        },\n      },\n    },\n\n    hooks: {\n      after: createAuthMiddleware(async (ctx) => {\n        const { path, context } = ctx;\n\n        const newUser = context.newSession?.user;\n        const existingUser = context.session?.user;\n        const user = newUser ?? existingUser;\n\n        if (!user) return;\n\n        if (path.includes('/verify-email')) {\n          sendVerificationUpdate(user as unknown as User);\n          logger.info('SSE verification update sent', {\n            email: user.email,\n            userId: user.id,\n          });\n\n          await sendEmail({\n            type: 'welcome',\n            to: user.email,\n            username: user.name ?? user.email.split('@')[0],\n            loginLink: `${process.env.CLIENT_URL}/auth/login`,\n            locale: (user as any).lang,\n          });\n          logger.info('Welcome e‑mail delivered', {\n            email: user.email,\n          });\n        }\n      }),\n    },\n\n    advanced: {\n      // 1️⃣  Change or drop the global prefix\n      // cookiePrefix: \"intlayer\",          // =>  intlayer.session_token\n      cookiePrefix: 'intlayer', // =>  session_token  (no prefix)\n\n      // 2️⃣  Override just the session‑token cookie\n      cookies: {\n        session_token: {\n          // name: 'intlayer_session_token', // final name depends on the prefix above\n          // attributes: { sameSite: \"lax\", maxAge: 60 * 60 * 24 } // optional\n        },\n      },\n\n      // 3️⃣  (optional) turn off the automatic __Secure‑ prefix in non‑prod\n      // useSecureCookies: false,\n    },\n\n    secret: process.env.BETTER_AUTH_SECRET as string,\n    session: {\n      modelName: 'sessions',\n      id: 'id',\n\n      additionalFields: {\n        activeOrganizationId: { type: 'string', nullable: true, input: false },\n        activeProjectId: { type: 'string', nullable: true, input: false },\n      },\n    },\n\n    plugins: [\n      customSession(async ({ session }) => {\n        const typedSession = session as unknown as SessionDataApi;\n\n        await auth.api.callbackSSOSAML;\n\n        let userAPI: UserAPI | null = null;\n        let organizationAPI: OrganizationAPI | null = null;\n        let projectAPI: ProjectAPI | null = null;\n\n        if (typedSession.userId) {\n          const userData = await getUserById(typedSession.userId);\n\n          if (userData) {\n            userAPI = mapUserToAPI(userData);\n          }\n        }\n\n        if (typedSession.activeOrganizationId) {\n          const orgData = await getOrganizationById(\n            typedSession.activeOrganizationId\n          );\n\n          if (orgData) {\n            organizationAPI = mapOrganizationToAPI(orgData);\n          }\n        }\n        if (typedSession.activeProjectId) {\n          const projectData = await getProjectById(\n            typedSession.activeProjectId\n          );\n\n          if (projectData) {\n            projectAPI = mapProjectToAPI(projectData);\n          }\n        }\n\n        const sessionWithNoPermission: SessionContext = {\n          session: typedSession,\n          user: userAPI!,\n          organization: organizationAPI ?? null,\n          project: projectAPI ?? null,\n          authType: 'session',\n        };\n\n        const formattedSession = formatSession(sessionWithNoPermission);\n\n        return mapSessionToAPI(formattedSession);\n      }),\n      lastLoginMethod({\n        storeInDatabase: true, // adds user.lastLoginMethod in DB and session\n        schema: {\n          user: {\n            lastLoginMethod: 'lastLoginMethod', // Custom field name\n          },\n        },\n        customResolveMethod: (context) => {\n          // When user clicks the magic link\n          if (context.path === '/magic-link/verify') {\n            return 'magic-link';\n          }\n\n          // Fallback to default behavior for everything else\n          return null;\n        },\n      }),\n      passkey({\n        rpID: process.env.DOMAIN,\n        rpName: 'Intlayer',\n      }),\n      twoFactor(),\n      magicLink({\n        sendMagicLink: async ({ email, url }) => {\n          logger.info('sending magic link', { email, url });\n          await sendEmail({\n            type: 'magicLink',\n            to: email,\n            username: email.split('@')[0],\n            magicLink: url,\n          });\n        },\n      }),\n      sso({\n        organizationProvisioning: {},\n      }),\n    ],\n\n    emailAndPassword: {\n      enabled: true,\n      disableSignUp: false,\n      requireEmailVerification: true,\n      minPasswordLength: 8,\n      maxPasswordLength: 128,\n      autoSignIn: true,\n      sendResetPassword: async ({ user, token }) => {\n        logger.info('sending reset password email', { email: user.email });\n        await sendEmail({\n          type: 'resetPassword',\n          to: user.email,\n          username: user.name ?? user.email.split('@')[0],\n          resetLink: `${process.env.CLIENT_URL}/auth/password/reset?token=${token}`,\n        });\n      },\n      resetPasswordTokenExpiresIn: 3600,\n    },\n    accountLinking: {\n      enabled: true, // allow linking in general\n      trustedProviders: ['google', 'github', 'linkedin'], // optional: auto‑link when Google verifies the e‑mail\n    },\n    emailVerification: {\n      autoSignInAfterVerification: true,\n      sendOnSignIn: true,\n      sendVerificationEmail: async ({ user, url }) => {\n        logger.info('sending verification email', { email: user.email });\n        await sendEmail({\n          type: 'validate',\n          to: user.email,\n          username: user.name ?? user.email.split('@')[0],\n          validationLink: url,\n        });\n      },\n    },\n\n    crossSubDomainCookies: {\n      enabled: true,\n      additionalCookies: ['session_token'],\n      domain: process.env.CLIENT_URL as string,\n    },\n    cookiePrefix: 'intlayer',\n    cookies: {\n      session_token: {\n        name: 'session_token',\n        attributes: {\n          httpOnly: true,\n          secure: true,\n        },\n      },\n    },\n\n    trustedOrigins: [process.env.CLIENT_URL as string],\n\n    socialProviders: {\n      google: {\n        clientId: process.env.GOOGLE_CLIENT_ID as string,\n        clientSecret: process.env.GOOGLE_CLIENT_SECRET as string,\n      },\n      github: {\n        clientId: process.env.GITHUB_CLIENT_ID as string,\n        clientSecret: process.env.GITHUB_CLIENT_SECRET as string,\n      },\n      linkedin: {\n        clientId: process.env.LINKEDIN_CLIENT_ID as string,\n        clientSecret: process.env.LINKEDIN_CLIENT_SECRET as string,\n      },\n      microsoft: {\n        clientId: process.env.MICROSOFT_CLIENT_ID as string,\n        clientSecret: process.env.MICROSOFT_CLIENT_SECRET as string,\n      },\n      // socialProviders: {\n      //   apple: {\n      //     clientId: process.env.APPLE_CLIENT_ID as string,\n      //     clientSecret: process.env.APPLE_CLIENT_SECRET as string,\n      //     // Optional\n      //     appBundleIdentifier: process.env\n      //       .APPLE_APP_BUNDLE_IDENTIFIER as string,\n      //   },\n      // },\n      // // Add appleid.apple.com to trustedOrigins for Sign In with Apple flows\n      // trustedOrigins: ['https://appleid.apple.com'],\n    },\n\n    logger: {\n      log: (level, message, ...args) => logger[level](message, ...args),\n    },\n  });\n\n  return auth;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAmCA,MAAa,iBAAiB,YAA6C;CACzE,MAAM,QAAQ,gBAAgB,QAAQ;CACtC,IAAI,cAAc,2BAA2B,MAAM;AAGnD,KAAI,QAAQ,YACV,eAAc,qBAAqB,aAAa,QAAQ,YAAY;AAatE,QAVsB;EACpB,SAAS,QAAQ;EACjB,MAAM,QAAQ;EACd,cAAc,QAAQ;EACtB,SAAS,QAAQ;EACjB,UAAU;EACV;EACA;EACD;;AAKH,MAAa,WAAW,aAAgC;AACtD,KAAI,CAAC,SACH,OAAM,IAAI,MAAM,qCAAqC;CAGvD,MAAM,OAAO,WAAW;EACtB,SAAS;EAET,UAAU,eAAe,SAAS,IAAI,CAAC;EAKvC,MAAM,EACJ,WAAW,SACZ;EAED,eAAe,EACb,MAAM,EACJ,QAAQ,EAEN,OAAO,OAAO,SAAS;AACrB,OAAI,CAAC,MAAM,cAAe;AAE1B,SAAM,UAAU;IACd,MAAM;IACN,IAAI,KAAK;IACT,UAAU,KAAK,QAAQ,KAAK,MAAM,MAAM,IAAI,CAAC;IAC7C,WAAW,GAAG,QAAQ,IAAI,WAAW;IACrC,QAAS,KAAa;IACvB,CAAC;AACF,UAAO,KAAK,4BAA4B,EACtC,OAAO,KAAK,OACb,CAAC;KAEL,EACF,EACF;EAED,OAAO,EACL,OAAO,qBAAqB,OAAO,QAAQ;GACzC,MAAM,EAAE,MAAM,YAAY;GAE1B,MAAM,UAAU,QAAQ,YAAY;GACpC,MAAM,eAAe,QAAQ,SAAS;GACtC,MAAM,OAAO,WAAW;AAExB,OAAI,CAAC,KAAM;AAEX,OAAI,KAAK,SAAS,gBAAgB,EAAE;AAClC,2BAAuB,KAAwB;AAC/C,WAAO,KAAK,gCAAgC;KAC1C,OAAO,KAAK;KACZ,QAAQ,KAAK;KACd,CAAC;AAEF,UAAM,UAAU;KACd,MAAM;KACN,IAAI,KAAK;KACT,UAAU,KAAK,QAAQ,KAAK,MAAM,MAAM,IAAI,CAAC;KAC7C,WAAW,GAAG,QAAQ,IAAI,WAAW;KACrC,QAAS,KAAa;KACvB,CAAC;AACF,WAAO,KAAK,4BAA4B,EACtC,OAAO,KAAK,OACb,CAAC;;IAEJ,EACH;EAED,UAAU;GAGR,cAAc;GAGd,SAAS,EACP,eAAe,EAGd,EACF;GAIF;EAED,QAAQ,QAAQ,IAAI;EACpB,SAAS;GACP,WAAW;GACX,IAAI;GAEJ,kBAAkB;IAChB,sBAAsB;KAAE,MAAM;KAAU,UAAU;KAAM,OAAO;KAAO;IACtE,iBAAiB;KAAE,MAAM;KAAU,UAAU;KAAM,OAAO;KAAO;IAClE;GACF;EAED,SAAS;GACP,cAAc,OAAO,EAAE,cAAc;IACnC,MAAM,eAAe;AAErB,UAAM,KAAK,IAAI;IAEf,IAAIA,UAA0B;IAC9B,IAAIC,kBAA0C;IAC9C,IAAIC,aAAgC;AAEpC,QAAI,aAAa,QAAQ;KACvB,MAAM,WAAW,MAAM,YAAY,aAAa,OAAO;AAEvD,SAAI,SACF,WAAU,aAAa,SAAS;;AAIpC,QAAI,aAAa,sBAAsB;KACrC,MAAM,UAAU,MAAM,oBACpB,aAAa,qBACd;AAED,SAAI,QACF,mBAAkB,qBAAqB,QAAQ;;AAGnD,QAAI,aAAa,iBAAiB;KAChC,MAAM,cAAc,MAAM,eACxB,aAAa,gBACd;AAED,SAAI,YACF,cAAa,gBAAgB,YAAY;;AAc7C,WAAO,gBAFkB,cARuB;KAC9C,SAAS;KACT,MAAM;KACN,cAAc,mBAAmB;KACjC,SAAS,cAAc;KACvB,UAAU;KACX,CAE8D,CAEvB;KACxC;GACF,gBAAgB;IACd,iBAAiB;IACjB,QAAQ,EACN,MAAM,EACJ,iBAAiB,mBAClB,EACF;IACD,sBAAsB,YAAY;AAEhC,SAAI,QAAQ,SAAS,qBACnB,QAAO;AAIT,YAAO;;IAEV,CAAC;GACF,QAAQ;IACN,MAAM,QAAQ,IAAI;IAClB,QAAQ;IACT,CAAC;GACF,WAAW;GACX,UAAU,EACR,eAAe,OAAO,EAAE,OAAO,UAAU;AACvC,WAAO,KAAK,sBAAsB;KAAE;KAAO;KAAK,CAAC;AACjD,UAAM,UAAU;KACd,MAAM;KACN,IAAI;KACJ,UAAU,MAAM,MAAM,IAAI,CAAC;KAC3B,WAAW;KACZ,CAAC;MAEL,CAAC;GACF,IAAI,EACF,0BAA0B,EAAE,EAC7B,CAAC;GACH;EAED,kBAAkB;GAChB,SAAS;GACT,eAAe;GACf,0BAA0B;GAC1B,mBAAmB;GACnB,mBAAmB;GACnB,YAAY;GACZ,mBAAmB,OAAO,EAAE,MAAM,YAAY;AAC5C,WAAO,KAAK,gCAAgC,EAAE,OAAO,KAAK,OAAO,CAAC;AAClE,UAAM,UAAU;KACd,MAAM;KACN,IAAI,KAAK;KACT,UAAU,KAAK,QAAQ,KAAK,MAAM,MAAM,IAAI,CAAC;KAC7C,WAAW,GAAG,QAAQ,IAAI,WAAW,6BAA6B;KACnE,CAAC;;GAEJ,6BAA6B;GAC9B;EACD,gBAAgB;GACd,SAAS;GACT,kBAAkB;IAAC;IAAU;IAAU;IAAW;GACnD;EACD,mBAAmB;GACjB,6BAA6B;GAC7B,cAAc;GACd,uBAAuB,OAAO,EAAE,MAAM,UAAU;AAC9C,WAAO,KAAK,8BAA8B,EAAE,OAAO,KAAK,OAAO,CAAC;AAChE,UAAM,UAAU;KACd,MAAM;KACN,IAAI,KAAK;KACT,UAAU,KAAK,QAAQ,KAAK,MAAM,MAAM,IAAI,CAAC;KAC7C,gBAAgB;KACjB,CAAC;;GAEL;EAED,uBAAuB;GACrB,SAAS;GACT,mBAAmB,CAAC,gBAAgB;GACpC,QAAQ,QAAQ,IAAI;GACrB;EACD,cAAc;EACd,SAAS,EACP,eAAe;GACb,MAAM;GACN,YAAY;IACV,UAAU;IACV,QAAQ;IACT;GACF,EACF;EAED,gBAAgB,CAAC,QAAQ,IAAI,WAAqB;EAElD,iBAAiB;GACf,QAAQ;IACN,UAAU,QAAQ,IAAI;IACtB,cAAc,QAAQ,IAAI;IAC3B;GACD,QAAQ;IACN,UAAU,QAAQ,IAAI;IACtB,cAAc,QAAQ,IAAI;IAC3B;GACD,UAAU;IACR,UAAU,QAAQ,IAAI;IACtB,cAAc,QAAQ,IAAI;IAC3B;GACD,WAAW;IACT,UAAU,QAAQ,IAAI;IACtB,cAAc,QAAQ,IAAI;IAC3B;GAYF;EAED,QAAQ,EACN,MAAM,OAAO,SAAS,GAAG,SAAS,OAAO,OAAO,SAAS,GAAG,KAAK,EAClE;EACF,CAAC;AAEF,QAAO"}
+{"version":3,"file":"getAuth.mjs","names":["userAPI: UserAPI | null","organizationAPI: OrganizationAPI | null","projectAPI: ProjectAPI | null"],"sources":["../../../../src/utils/auth/getAuth.ts"],"sourcesContent":["import { passkey } from '@better-auth/passkey';\nimport { sso } from '@better-auth/sso';\nimport { sendVerificationUpdate } from '@controllers/user.controller';\nimport { logger } from '@logger';\nimport { sendEmail } from '@services/email.service';\nimport { getOrganizationById } from '@services/organization.service';\nimport { getProjectById } from '@services/project.service';\nimport { getUserById } from '@services/user.service';\nimport { mapOrganizationToAPI } from '@utils/mapper/organization';\nimport { mapProjectToAPI } from '@utils/mapper/project';\nimport { mapSessionToAPI } from '@utils/mapper/session';\nimport { mapUserToAPI } from '@utils/mapper/user';\nimport {\n  computeEffectivePermission,\n  getSessionRoles,\n  intersectPermissions,\n} from '@utils/permissions';\nimport { betterAuth, type OmitId } from 'better-auth';\nimport { mongodbAdapter } from 'better-auth/adapters/mongodb';\nimport { createAuthMiddleware } from 'better-auth/api';\nimport { customSession, lastLoginMethod, twoFactor } from 'better-auth/plugins';\nimport { magicLink } from 'better-auth/plugins/magic-link';\nimport type { MongoClient } from 'mongodb';\nimport type { OrganizationAPI } from '@/types/organization.types';\nimport type { ProjectAPI } from '@/types/project.types';\nimport type {\n  Session,\n  SessionContext,\n  SessionDataApi,\n} from '@/types/session.types';\nimport type { User, UserAPI } from '@/types/user.types';\n\nexport type Auth = ReturnType<typeof betterAuth>;\n\nexport const formatSession = (session: SessionContext): OmitId<Session> => {\n  const roles = getSessionRoles(session);\n  let permissions = computeEffectivePermission(roles);\n\n  // Intersect in the case a Access Token try to override the permissions\n  if (session.permissions) {\n    permissions = intersectPermissions(permissions, session.permissions);\n  }\n\n  const resultSession = {\n    session: session.session,\n    user: session.user,\n    organization: session.organization,\n    project: session.project,\n    authType: 'session',\n    permissions,\n    roles,\n  } as OmitId<Session>;\n\n  return resultSession;\n};\n\nexport const getAuth = (dbClient: MongoClient): Auth => {\n  if (!dbClient) {\n    throw new Error('MongoDB connection not established');\n  }\n\n  const auth = betterAuth({\n    appName: 'Intlayer',\n\n    database: mongodbAdapter(dbClient.db()),\n\n    /**\n     * User model\n     */\n    user: {\n      modelName: 'users',\n    },\n\n    databaseHooks: {\n      user: {\n        create: {\n          // Runs once, immediately after the INSERT\n          after: async (user) => {\n            if (!user?.emailVerified) return;\n\n            await sendEmail({\n              type: 'welcome',\n              to: user.email,\n              username: user.name ?? user.email.split('@')[0],\n              loginLink: `${process.env.APP_URL}/auth/login`,\n              locale: (user as any).lang,\n            });\n            logger.info('Welcome e‑mail delivered', {\n              email: user.email,\n            });\n          },\n        },\n      },\n    },\n\n    hooks: {\n      after: createAuthMiddleware(async (ctx) => {\n        const { path, context } = ctx;\n\n        const newUser = context.newSession?.user;\n        const existingUser = context.session?.user;\n        const user = newUser ?? existingUser;\n\n        if (!user) return;\n\n        if (path.includes('/verify-email')) {\n          sendVerificationUpdate(user as unknown as User);\n          logger.info('SSE verification update sent', {\n            email: user.email,\n            userId: user.id,\n          });\n\n          await sendEmail({\n            type: 'welcome',\n            to: user.email,\n            username: user.name ?? user.email.split('@')[0],\n            loginLink: `${process.env.APP_URL}/auth/login`,\n            locale: (user as any).lang,\n          });\n          logger.info('Welcome e‑mail delivered', {\n            email: user.email,\n          });\n        }\n      }),\n    },\n\n    advanced: {\n      cookiePrefix: 'intlayer', // =>  session_token  (no prefix)\n\n      // Override just the session‑token cookie\n      cookies: {\n        session_token: {\n          // name: 'intlayer_session_token', // final name depends on the prefix above\n          // attributes: { sameSite: \"lax\", maxAge: 60 * 60 * 24 } // optional\n        },\n      },\n    },\n\n    secret: process.env.BETTER_AUTH_SECRET as string,\n    session: {\n      modelName: 'sessions',\n      id: 'id',\n\n      additionalFields: {\n        activeOrganizationId: { type: 'string', nullable: true, input: false },\n        activeProjectId: { type: 'string', nullable: true, input: false },\n      },\n    },\n\n    plugins: [\n      customSession(async ({ session }) => {\n        const typedSession = session as unknown as SessionDataApi;\n\n        let userAPI: UserAPI | null = null;\n        let organizationAPI: OrganizationAPI | null = null;\n        let projectAPI: ProjectAPI | null = null;\n\n        if (typedSession.userId) {\n          const userData = await getUserById(typedSession.userId);\n\n          if (userData) {\n            userAPI = mapUserToAPI(userData);\n          }\n        }\n\n        if (typedSession.activeOrganizationId) {\n          const orgData = await getOrganizationById(\n            typedSession.activeOrganizationId\n          );\n\n          if (orgData) {\n            organizationAPI = mapOrganizationToAPI(orgData);\n          }\n        }\n        if (typedSession.activeProjectId) {\n          const projectData = await getProjectById(\n            typedSession.activeProjectId\n          );\n\n          if (projectData) {\n            projectAPI = mapProjectToAPI(projectData);\n          }\n        }\n\n        const sessionWithNoPermission: SessionContext = {\n          session: typedSession,\n          user: userAPI!,\n          organization: organizationAPI ?? null,\n          project: projectAPI ?? null,\n          authType: 'session',\n        };\n\n        const formattedSession = formatSession(sessionWithNoPermission);\n\n        return mapSessionToAPI(formattedSession);\n      }),\n      lastLoginMethod({\n        storeInDatabase: true, // adds user.lastLoginMethod in DB and session\n        schema: {\n          user: {\n            lastLoginMethod: 'lastLoginMethod', // Custom field name\n          },\n        },\n        customResolveMethod: (context) => {\n          // When user clicks the magic link\n          if (context.path === '/magic-link/verify') {\n            return 'magic-link';\n          }\n\n          // Fallback to default behavior for everything else\n          return null;\n        },\n      }),\n      passkey({\n        rpID: process.env.DOMAIN,\n        rpName: 'Intlayer',\n      }),\n      twoFactor(),\n      magicLink({\n        sendMagicLink: async ({ email, url }) => {\n          logger.info('sending magic link', { email, url });\n          await sendEmail({\n            type: 'magicLink',\n            to: email,\n            username: email.split('@')[0],\n            magicLink: url,\n          });\n        },\n      }),\n      sso({\n        organizationProvisioning: {},\n      }),\n    ],\n\n    emailAndPassword: {\n      enabled: true,\n      disableSignUp: false,\n      requireEmailVerification: true,\n      minPasswordLength: 8,\n      maxPasswordLength: 128,\n      autoSignIn: true,\n      sendResetPassword: async ({ user, token }) => {\n        logger.info('sending reset password email', { email: user.email });\n        await sendEmail({\n          type: 'resetPassword',\n          to: user.email,\n          username: user.name ?? user.email.split('@')[0],\n          resetLink: `${process.env.APP_URL}/auth/password/reset?token=${token}`,\n        });\n      },\n      resetPasswordTokenExpiresIn: 3600,\n    },\n\n    emailVerification: {\n      autoSignInAfterVerification: true,\n      sendOnSignIn: true,\n      sendVerificationEmail: async ({ user, url }) => {\n        logger.info('sending verification email', { email: user.email });\n        await sendEmail({\n          type: 'validate',\n          to: user.email,\n          username: user.name ?? user.email.split('@')[0],\n          validationLink: url,\n        });\n      },\n    },\n\n    crossSubDomainCookies: {\n      enabled: true,\n      additionalCookies: ['session_token'],\n      domain: process.env.DOMAIN as string,\n    },\n    cookiePrefix: 'intlayer',\n    cookies: {\n      session_token: {\n        name: 'session_token',\n        attributes: {\n          httpOnly: true,\n          secure: true,\n        },\n      },\n    },\n\n    trustedOrigins: [\n      process.env.WEBSITE_URL as string,\n      process.env.APP_URL as string,\n    ],\n\n    accountLinking: {\n      enabled: true, // allow linking in general\n      trustedProviders: [\n        'google',\n        'github',\n        'linkedin',\n        'gitlab',\n        'atlassian',\n        'microsoft',\n        'email-password',\n        'magic-link',\n        'passkey',\n      ],\n    },\n    socialProviders: {\n      google: {\n        clientId: process.env.GOOGLE_CLIENT_ID as string,\n        clientSecret: process.env.GOOGLE_CLIENT_SECRET as string,\n      },\n      github: {\n        clientId: process.env.GITHUB_CLIENT_ID as string,\n        clientSecret: process.env.GITHUB_CLIENT_SECRET as string,\n      },\n      atlassian: {\n        clientId: process.env.ATLASSIAN_CLIENT_ID as string,\n        clientSecret: process.env.ATLASSIAN_CLIENT_SECRET as string,\n      },\n      gitlab: {\n        clientId: process.env.GITLAB_CLIENT_ID as string,\n        clientSecret: process.env.GITLAB_CLIENT_SECRET as string,\n      },\n      linkedin: {\n        clientId: process.env.LINKEDIN_CLIENT_ID as string,\n        clientSecret: process.env.LINKEDIN_CLIENT_SECRET as string,\n      },\n      microsoft: {\n        clientId: process.env.MICROSOFT_CLIENT_ID as string,\n        clientSecret: process.env.MICROSOFT_CLIENT_SECRET as string,\n      },\n      // socialProviders: {\n      //   apple: {\n      //     clientId: process.env.APPLE_CLIENT_ID as string,\n      //     clientSecret: process.env.APPLE_CLIENT_SECRET as string,\n      //     // Optional\n      //     appBundleIdentifier: process.env\n      //       .APPLE_APP_BUNDLE_IDENTIFIER as string,\n      //   },\n      // },\n      // // Add appleid.apple.com to trustedOrigins for Sign In with Apple flows\n      // trustedOrigins: ['https://appleid.apple.com'],\n    },\n\n    logger: {\n      log: (level, message, ...args) => logger[level](message, ...args),\n    },\n  });\n\n  return auth;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAkCA,MAAa,iBAAiB,YAA6C;CACzE,MAAM,QAAQ,gBAAgB,QAAQ;CACtC,IAAI,cAAc,2BAA2B,MAAM;AAGnD,KAAI,QAAQ,YACV,eAAc,qBAAqB,aAAa,QAAQ,YAAY;AAatE,QAVsB;EACpB,SAAS,QAAQ;EACjB,MAAM,QAAQ;EACd,cAAc,QAAQ;EACtB,SAAS,QAAQ;EACjB,UAAU;EACV;EACA;EACD;;AAKH,MAAa,WAAW,aAAgC;AACtD,KAAI,CAAC,SACH,OAAM,IAAI,MAAM,qCAAqC;AA+RvD,QA5Ra,WAAW;EACtB,SAAS;EAET,UAAU,eAAe,SAAS,IAAI,CAAC;EAKvC,MAAM,EACJ,WAAW,SACZ;EAED,eAAe,EACb,MAAM,EACJ,QAAQ,EAEN,OAAO,OAAO,SAAS;AACrB,OAAI,CAAC,MAAM,cAAe;AAE1B,SAAM,UAAU;IACd,MAAM;IACN,IAAI,KAAK;IACT,UAAU,KAAK,QAAQ,KAAK,MAAM,MAAM,IAAI,CAAC;IAC7C,WAAW,GAAG,QAAQ,IAAI,QAAQ;IAClC,QAAS,KAAa;IACvB,CAAC;AACF,UAAO,KAAK,4BAA4B,EACtC,OAAO,KAAK,OACb,CAAC;KAEL,EACF,EACF;EAED,OAAO,EACL,OAAO,qBAAqB,OAAO,QAAQ;GACzC,MAAM,EAAE,MAAM,YAAY;GAE1B,MAAM,UAAU,QAAQ,YAAY;GACpC,MAAM,eAAe,QAAQ,SAAS;GACtC,MAAM,OAAO,WAAW;AAExB,OAAI,CAAC,KAAM;AAEX,OAAI,KAAK,SAAS,gBAAgB,EAAE;AAClC,2BAAuB,KAAwB;AAC/C,WAAO,KAAK,gCAAgC;KAC1C,OAAO,KAAK;KACZ,QAAQ,KAAK;KACd,CAAC;AAEF,UAAM,UAAU;KACd,MAAM;KACN,IAAI,KAAK;KACT,UAAU,KAAK,QAAQ,KAAK,MAAM,MAAM,IAAI,CAAC;KAC7C,WAAW,GAAG,QAAQ,IAAI,QAAQ;KAClC,QAAS,KAAa;KACvB,CAAC;AACF,WAAO,KAAK,4BAA4B,EACtC,OAAO,KAAK,OACb,CAAC;;IAEJ,EACH;EAED,UAAU;GACR,cAAc;GAGd,SAAS,EACP,eAAe,EAGd,EACF;GACF;EAED,QAAQ,QAAQ,IAAI;EACpB,SAAS;GACP,WAAW;GACX,IAAI;GAEJ,kBAAkB;IAChB,sBAAsB;KAAE,MAAM;KAAU,UAAU;KAAM,OAAO;KAAO;IACtE,iBAAiB;KAAE,MAAM;KAAU,UAAU;KAAM,OAAO;KAAO;IAClE;GACF;EAED,SAAS;GACP,cAAc,OAAO,EAAE,cAAc;IACnC,MAAM,eAAe;IAErB,IAAIA,UAA0B;IAC9B,IAAIC,kBAA0C;IAC9C,IAAIC,aAAgC;AAEpC,QAAI,aAAa,QAAQ;KACvB,MAAM,WAAW,MAAM,YAAY,aAAa,OAAO;AAEvD,SAAI,SACF,WAAU,aAAa,SAAS;;AAIpC,QAAI,aAAa,sBAAsB;KACrC,MAAM,UAAU,MAAM,oBACpB,aAAa,qBACd;AAED,SAAI,QACF,mBAAkB,qBAAqB,QAAQ;;AAGnD,QAAI,aAAa,iBAAiB;KAChC,MAAM,cAAc,MAAM,eACxB,aAAa,gBACd;AAED,SAAI,YACF,cAAa,gBAAgB,YAAY;;AAc7C,WAAO,gBAFkB,cARuB;KAC9C,SAAS;KACT,MAAM;KACN,cAAc,mBAAmB;KACjC,SAAS,cAAc;KACvB,UAAU;KACX,CAE8D,CAEvB;KACxC;GACF,gBAAgB;IACd,iBAAiB;IACjB,QAAQ,EACN,MAAM,EACJ,iBAAiB,mBAClB,EACF;IACD,sBAAsB,YAAY;AAEhC,SAAI,QAAQ,SAAS,qBACnB,QAAO;AAIT,YAAO;;IAEV,CAAC;GACF,QAAQ;IACN,MAAM,QAAQ,IAAI;IAClB,QAAQ;IACT,CAAC;GACF,WAAW;GACX,UAAU,EACR,eAAe,OAAO,EAAE,OAAO,UAAU;AACvC,WAAO,KAAK,sBAAsB;KAAE;KAAO;KAAK,CAAC;AACjD,UAAM,UAAU;KACd,MAAM;KACN,IAAI;KACJ,UAAU,MAAM,MAAM,IAAI,CAAC;KAC3B,WAAW;KACZ,CAAC;MAEL,CAAC;GACF,IAAI,EACF,0BAA0B,EAAE,EAC7B,CAAC;GACH;EAED,kBAAkB;GAChB,SAAS;GACT,eAAe;GACf,0BAA0B;GAC1B,mBAAmB;GACnB,mBAAmB;GACnB,YAAY;GACZ,mBAAmB,OAAO,EAAE,MAAM,YAAY;AAC5C,WAAO,KAAK,gCAAgC,EAAE,OAAO,KAAK,OAAO,CAAC;AAClE,UAAM,UAAU;KACd,MAAM;KACN,IAAI,KAAK;KACT,UAAU,KAAK,QAAQ,KAAK,MAAM,MAAM,IAAI,CAAC;KAC7C,WAAW,GAAG,QAAQ,IAAI,QAAQ,6BAA6B;KAChE,CAAC;;GAEJ,6BAA6B;GAC9B;EAED,mBAAmB;GACjB,6BAA6B;GAC7B,cAAc;GACd,uBAAuB,OAAO,EAAE,MAAM,UAAU;AAC9C,WAAO,KAAK,8BAA8B,EAAE,OAAO,KAAK,OAAO,CAAC;AAChE,UAAM,UAAU;KACd,MAAM;KACN,IAAI,KAAK;KACT,UAAU,KAAK,QAAQ,KAAK,MAAM,MAAM,IAAI,CAAC;KAC7C,gBAAgB;KACjB,CAAC;;GAEL;EAED,uBAAuB;GACrB,SAAS;GACT,mBAAmB,CAAC,gBAAgB;GACpC,QAAQ,QAAQ,IAAI;GACrB;EACD,cAAc;EACd,SAAS,EACP,eAAe;GACb,MAAM;GACN,YAAY;IACV,UAAU;IACV,QAAQ;IACT;GACF,EACF;EAED,gBAAgB,CACd,QAAQ,IAAI,aACZ,QAAQ,IAAI,QACb;EAED,gBAAgB;GACd,SAAS;GACT,kBAAkB;IAChB;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD;GACF;EACD,iBAAiB;GACf,QAAQ;IACN,UAAU,QAAQ,IAAI;IACtB,cAAc,QAAQ,IAAI;IAC3B;GACD,QAAQ;IACN,UAAU,QAAQ,IAAI;IACtB,cAAc,QAAQ,IAAI;IAC3B;GACD,WAAW;IACT,UAAU,QAAQ,IAAI;IACtB,cAAc,QAAQ,IAAI;IAC3B;GACD,QAAQ;IACN,UAAU,QAAQ,IAAI;IACtB,cAAc,QAAQ,IAAI;IAC3B;GACD,UAAU;IACR,UAAU,QAAQ,IAAI;IACtB,cAAc,QAAQ,IAAI;IAC3B;GACD,WAAW;IACT,UAAU,QAAQ,IAAI;IACtB,cAAc,QAAQ,IAAI;IAC3B;GAYF;EAED,QAAQ,EACN,MAAM,OAAO,SAAS,GAAG,SAAS,OAAO,OAAO,SAAS,GAAG,KAAK,EAClE;EACF,CAAC"}

package/dist/esm/utils/cors.mjs

@@ -1,13 +1,17 @@
 import { logger } from "../logger/index.mjs";
 
 //#region src/utils/cors.ts
-const whitelist = [process.env.CLIENT_URL];
+const whitelist = [process.env.APP_URL];
 const corsOptions = {
 	origin: (origin, callback) => {
-		if (!origin) return callback(null, true);
+		if (!origin) {
+			callback(null, true);
+			return;
+		}
 		if (whitelist.includes(origin)) {
 			logger.info("whitelisted origin", origin);
-			return callback(null, true);
+			callback(null, true);
+			return;
 		}
 		logger.info("non whitelisted origin", origin);
 		callback(null, origin);
@@ -23,8 +27,14 @@ const corsOptions = {
 		"browsing-topics"
 	],
 	exposedHeaders: [""],
-	preflightContinue: false,
-	methods: "GET,HEAD,PUT,PATCH,POST,DELETE",
+	methods: [
+		"GET",
+		"HEAD",
+		"PUT",
+		"PATCH",
+		"POST",
+		"DELETE"
+	],
 	credentials: true
 };
 

package/dist/esm/utils/cors.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cors.mjs","names":["corsOptions: CorsOptions"],"sources":["../../../src/utils/cors.ts"],"sourcesContent":["import { logger } from '@logger';\nimport type { CorsOptions } from 'cors';\n\nconst whitelist = [process.env.CLIENT_URL!];\n\nexport const corsOptions: CorsOptions = {\n  origin: (origin, callback) => {\n    // Allow requests with no origin (like mobile apps or curl requests)\n    if (!origin) return callback(null, true);\n\n    if (whitelist.includes(origin)) {\n      logger.info('whitelisted origin', origin);\n      return callback(null, true);\n    }\n\n    logger.info('non whitelisted origin', origin);\n    // Reflect the request's origin (echo back the origin header)\n    callback(null, origin);\n  },\n  allowedHeaders: [\n    'authorization',\n    'Content-Type',\n    'credentials',\n    'cache-control',\n    'Access-Control-Allow-Origin',\n    'private-state-token-redemption',\n    'private-state-token-issuance',\n    'browsing-topics',\n  ],\n  exposedHeaders: [''],\n  preflightContinue: false,\n  methods: 'GET,HEAD,PUT,PATCH,POST,DELETE',\n  credentials: true,\n};\n"],"mappings":";;;AAGA,MAAM,YAAY,CAAC,QAAQ,IAAI,WAAY;AAE3C,MAAaA,cAA2B;CACtC,SAAS,QAAQ,aAAa;AAE5B,MAAI,CAAC,OAAQ,QAAO,SAAS,MAAM,KAAK;AAExC,MAAI,UAAU,SAAS,OAAO,EAAE;AAC9B,UAAO,KAAK,sBAAsB,OAAO;AACzC,UAAO,SAAS,MAAM,KAAK;;AAG7B,SAAO,KAAK,0BAA0B,OAAO;AAE7C,WAAS,MAAM,OAAO;;CAExB,gBAAgB;EACd;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD;CACD,gBAAgB,CAAC,GAAG;CACpB,mBAAmB;CACnB,SAAS;CACT,aAAa;CACd"}
+{"version":3,"file":"cors.mjs","names":["corsOptions: FastifyCorsOptions"],"sources":["../../../src/utils/cors.ts"],"sourcesContent":["import type { FastifyCorsOptions } from '@fastify/cors';\nimport { logger } from '@logger';\n\nconst whitelist = [process.env.APP_URL!];\n\nexport const corsOptions: FastifyCorsOptions = {\n  origin: (origin, callback) => {\n    // Allow requests with no origin (like mobile apps or curl requests)\n    if (!origin) {\n      callback(null, true);\n      return;\n    }\n\n    if (whitelist.includes(origin)) {\n      logger.info('whitelisted origin', origin);\n      callback(null, true);\n      return;\n    }\n\n    logger.info('non whitelisted origin', origin);\n    // Reflect the request's origin (echo back the origin header)\n    callback(null, origin);\n  },\n  allowedHeaders: [\n    'authorization',\n    'Content-Type',\n    'credentials',\n    'cache-control',\n    'Access-Control-Allow-Origin',\n    'private-state-token-redemption',\n    'private-state-token-issuance',\n    'browsing-topics',\n  ],\n  exposedHeaders: [''],\n  methods: ['GET', 'HEAD', 'PUT', 'PATCH', 'POST', 'DELETE'],\n  credentials: true,\n};\n"],"mappings":";;;AAGA,MAAM,YAAY,CAAC,QAAQ,IAAI,QAAS;AAExC,MAAaA,cAAkC;CAC7C,SAAS,QAAQ,aAAa;AAE5B,MAAI,CAAC,QAAQ;AACX,YAAS,MAAM,KAAK;AACpB;;AAGF,MAAI,UAAU,SAAS,OAAO,EAAE;AAC9B,UAAO,KAAK,sBAAsB,OAAO;AACzC,YAAS,MAAM,KAAK;AACpB;;AAGF,SAAO,KAAK,0BAA0B,OAAO;AAE7C,WAAS,MAAM,OAAO;;CAExB,gBAAgB;EACd;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD;CACD,gBAAgB,CAAC,GAAG;CACpB,SAAS;EAAC;EAAO;EAAQ;EAAO;EAAS;EAAQ;EAAS;CAC1D,aAAa;CACd"}

package/dist/esm/utils/errors/ErrorHandler.mjs

@@ -3,7 +3,7 @@ import { HttpStatusCodes } from "../httpStatusCodes.mjs";
 import { formatPaginatedResponse, formatResponse } from "../responseData.mjs";
 import { errorData } from "./errorCodes.mjs";
 import { Locales } from "@intlayer/types";
-import { t } from "express-intlayer";
+import { t } from "fastify-intlayer";
 
 //#region src/utils/errors/ErrorHandler.ts
 var ErrorHandler = class ErrorHandler {
@@ -27,7 +27,10 @@ var ErrorHandler = class ErrorHandler {
 	* @param isPaginatedResponse - (Optional) Flag to determine if the response should be paginated.
 	*/
 	static handleAppErrorResponse(res, error, messageDetails, isPaginatedResponse = false) {
-		if (!error.isAppError) ErrorHandler.handleCustomErrorResponse(res, error.errorKey ?? "UNKNOWN_ERROR", "Error", error.message ?? JSON.stringify(error), void 0, error.httpStatusCode ?? HttpStatusCodes.INTERNAL_SERVER_ERROR_500, isPaginatedResponse);
+		if (!error.isAppError) {
+			ErrorHandler.handleCustomErrorResponse(res, error.errorKey ?? "UNKNOWN_ERROR", "Error", error.message ?? JSON.stringify(error), void 0, error.httpStatusCode ?? HttpStatusCodes.INTERNAL_SERVER_ERROR_500, isPaginatedResponse);
+			return;
+		}
 		const isMultilingual = error.isMultilingual ?? false;
 		ErrorHandler.handleCustomErrorResponse(res, error.errorKey, isMultilingual ? error.multilingualTitle : error.title, isMultilingual ? error.multilingualMessage : error.message, error.messageDetails ?? messageDetails, error.httpStatusCode, isPaginatedResponse);
 	}
@@ -54,7 +57,8 @@ var ErrorHandler = class ErrorHandler {
 				},
 				status
 			});
-			res.status(status).json(responseData$1);
+			if ("status" in res && "json" in res) res.status(status).json(responseData$1);
+			else res.code(status).send(responseData$1);
 			return;
 		}
 		const responseData = formatResponse({
@@ -66,7 +70,31 @@ var ErrorHandler = class ErrorHandler {
 			},
 			status
 		});
-		res.status(status).json(responseData);
+		if ("status" in res && "json" in res) res.status(status).json(responseData);
+		else res.code(status).send(responseData);
+	}
+	/**
+	* Formats a generic error response without sending it (useful for Fastify plugins).
+	* @param errorKey - A key representing the specific error.
+	* @param errorDetails - Optional error details to include.
+	* @param statusCode - Optional HTTP status code.
+	* @returns Formatted error response object.
+	*/
+	static formatGenericErrorResponse(errorKey, errorDetails, statusCode) {
+		const error = errorData[errorKey];
+		const status = statusCode ?? error.statusCode;
+		const errorTitle = t(error.title, Locales.ENGLISH);
+		const errorMessage = t(error.message, Locales.ENGLISH);
+		logger.error(errorMessage, errorDetails);
+		return formatResponse({
+			error: {
+				code: errorKey,
+				title: errorTitle,
+				message: errorMessage,
+				...errorDetails
+			},
+			status
+		});
 	}
 };
 

package/dist/esm/utils/errors/ErrorHandler.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ErrorHandler.mjs","names":["responseData"],"sources":["../../../../src/utils/errors/ErrorHandler.ts"],"sourcesContent":["// Import required modules and types from their respective locations.\n\nimport { Locales, type StrictModeLocaleMap } from '@intlayer/types';\nimport { logger } from '@logger';\nimport { formatPaginatedResponse, formatResponse } from '@utils/responseData';\nimport type { Response } from 'express';\nimport { t } from 'express-intlayer';\nimport type { UserAPI } from '@/types/user.types';\nimport { HttpStatusCodes } from '@/utils/httpStatusCodes';\nimport type { AppError } from './ErrorsClass';\nimport { type ErrorCodes, errorData } from './errorCodes';\n\n// Define a class named 'ErrorHandler' to encapsulate error handling logic.\nexport class ErrorHandler {\n  /**\n   * Handles generic error responses by formatting and sending a JSON response.\n   * @param res - The response object provided by Express.js.\n   * @param errorKey - A key representing the specific error.\n   * @param statusCode - (Optional) A specific HTTP status code to use for the response.\n   * @param isPaginatedResponse - Flag to determine if the response should be paginated.\n   */\n  static handleGenericErrorResponse(\n    res: Response,\n    errorKey: ErrorCodes,\n    errorDetails?: object,\n    statusCode?: HttpStatusCodes,\n    isPaginatedResponse: boolean = false\n  ) {\n    const error = errorData[errorKey];\n    const status = statusCode ?? error.statusCode; // Use the provided status code or default to the one in errorData.\n\n    // Delegate to a more customizable error response handler.\n    ErrorHandler.handleCustomErrorResponse(\n      res,\n      errorKey,\n      error.title,\n      error.message,\n      errorDetails,\n      status,\n      isPaginatedResponse\n    );\n  }\n\n  /**\n   * Handles application-specific error responses by formatting and sending a JSON response.\n   * @param res - The response object provided by Express.js.\n   * @param error - The error object.\n   * @param messageDetails - (Optional) Additional message details to include in the response.\n   * @param isPaginatedResponse - (Optional) Flag to determine if the response should be paginated.\n   */\n  static handleAppErrorResponse(\n    res: Response,\n    error: AppError,\n    messageDetails?: object,\n    isPaginatedResponse: boolean = false\n  ) {\n    if (!error.isAppError) {\n      ErrorHandler.handleCustomErrorResponse(\n        res,\n        error.errorKey ?? 'UNKNOWN_ERROR',\n        'Error',\n        error.message ?? JSON.stringify(error),\n        undefined,\n        error.httpStatusCode ?? HttpStatusCodes.INTERNAL_SERVER_ERROR_500,\n        isPaginatedResponse\n      );\n    }\n\n    const isMultilingual = error.isMultilingual ?? false;\n    // Delegate to a more customizable error response handler.\n    ErrorHandler.handleCustomErrorResponse(\n      res,\n      error.errorKey,\n      isMultilingual ? error.multilingualTitle : error.title,\n      isMultilingual ? error.multilingualMessage : error.message,\n      error.messageDetails ?? messageDetails,\n      error.httpStatusCode,\n      isPaginatedResponse\n    );\n  }\n\n  /**\n   * Handles more customizable error responses with detailed error messages and codes.\n   * @param res - The response object.\n   * @param errorKey - Error code key used to fetch the corresponding message and default status.\n   * @param message - The localized error message object.\n   * @param messageDetails - (Optional) Additional message details to include in the response.\n   * @param statusCode - (Optional) HTTP status code, defaults to 500 if not specified.\n   * @param isPaginatedResponse - Determines if the error should be part of a paginated response.\n   */\n  static handleCustomErrorResponse<T>(\n    res: Response,\n    errorKey: ErrorCodes | string,\n    title: StrictModeLocaleMap<string> | string,\n    message: StrictModeLocaleMap<string> | string,\n    messageDetails?: object,\n    statusCode?: HttpStatusCodes,\n    isPaginatedResponse: boolean = false\n  ) {\n    const errorTitle = t(title as StrictModeLocaleMap<string>, Locales.ENGLISH);\n    const errorMessage = t(\n      message as StrictModeLocaleMap<string>,\n      Locales.ENGLISH\n    );\n    logger.error(errorMessage, messageDetails); // Log the English version of the error message.\n    const status = statusCode ?? HttpStatusCodes.INTERNAL_SERVER_ERROR_500; // Default to 500 if no status code is provided.\n\n    if (isPaginatedResponse) {\n      // Format the response as a paginated error response if requested.\n      const responseData = formatPaginatedResponse<T>({\n        error: {\n          code: errorKey,\n          title: errorTitle,\n          message: errorMessage,\n        },\n        status,\n      });\n      res.status(status).json(responseData);\n      return;\n    }\n\n    // Format the response as a standard non-paginated error response.\n    const responseData = formatResponse<UserAPI>({\n      error: {\n        code: errorKey,\n        title: errorTitle,\n        message: errorMessage,\n        ...messageDetails,\n      },\n      status,\n    });\n\n    res.status(status).json(responseData);\n  }\n}\n"],"mappings":";;;;;;;;AAaA,IAAa,eAAb,MAAa,aAAa;;;;;;;;CAQxB,OAAO,2BACL,KACA,UACA,cACA,YACA,sBAA+B,OAC/B;EACA,MAAM,QAAQ,UAAU;EACxB,MAAM,SAAS,cAAc,MAAM;AAGnC,eAAa,0BACX,KACA,UACA,MAAM,OACN,MAAM,SACN,cACA,QACA,oBACD;;;;;;;;;CAUH,OAAO,uBACL,KACA,OACA,gBACA,sBAA+B,OAC/B;AACA,MAAI,CAAC,MAAM,WACT,cAAa,0BACX,KACA,MAAM,YAAY,iBAClB,SACA,MAAM,WAAW,KAAK,UAAU,MAAM,EACtC,QACA,MAAM,kBAAkB,gBAAgB,2BACxC,oBACD;EAGH,MAAM,iBAAiB,MAAM,kBAAkB;AAE/C,eAAa,0BACX,KACA,MAAM,UACN,iBAAiB,MAAM,oBAAoB,MAAM,OACjD,iBAAiB,MAAM,sBAAsB,MAAM,SACnD,MAAM,kBAAkB,gBACxB,MAAM,gBACN,oBACD;;;;;;;;;;;CAYH,OAAO,0BACL,KACA,UACA,OACA,SACA,gBACA,YACA,sBAA+B,OAC/B;EACA,MAAM,aAAa,EAAE,OAAsC,QAAQ,QAAQ;EAC3E,MAAM,eAAe,EACnB,SACA,QAAQ,QACT;AACD,SAAO,MAAM,cAAc,eAAe;EAC1C,MAAM,SAAS,cAAc,gBAAgB;AAE7C,MAAI,qBAAqB;GAEvB,MAAMA,iBAAe,wBAA2B;IAC9C,OAAO;KACL,MAAM;KACN,OAAO;KACP,SAAS;KACV;IACD;IACD,CAAC;AACF,OAAI,OAAO,OAAO,CAAC,KAAKA,eAAa;AACrC;;EAIF,MAAM,eAAe,eAAwB;GAC3C,OAAO;IACL,MAAM;IACN,OAAO;IACP,SAAS;IACT,GAAG;IACJ;GACD;GACD,CAAC;AAEF,MAAI,OAAO,OAAO,CAAC,KAAK,aAAa"}
+{"version":3,"file":"ErrorHandler.mjs","names":["responseData"],"sources":["../../../../src/utils/errors/ErrorHandler.ts"],"sourcesContent":["// Import required modules and types from their respective locations.\n\nimport { Locales, type StrictModeLocaleMap } from '@intlayer/types';\nimport { logger } from '@logger';\nimport { formatPaginatedResponse, formatResponse } from '@utils/responseData';\nimport type { Response } from 'express';\nimport type { FastifyReply } from 'fastify';\nimport { t } from 'fastify-intlayer';\nimport type { UserAPI } from '@/types/user.types';\nimport { HttpStatusCodes } from '@/utils/httpStatusCodes';\nimport type { AppError } from './ErrorsClass';\nimport { type ErrorCodes, errorData } from './errorCodes';\n\ntype ResponseLike = Response | FastifyReply;\n\n// Define a class named 'ErrorHandler' to encapsulate error handling logic.\nexport class ErrorHandler {\n  /**\n   * Handles generic error responses by formatting and sending a JSON response.\n   * @param res - The response object provided by Express.js.\n   * @param errorKey - A key representing the specific error.\n   * @param statusCode - (Optional) A specific HTTP status code to use for the response.\n   * @param isPaginatedResponse - Flag to determine if the response should be paginated.\n   */\n  static handleGenericErrorResponse(\n    res: ResponseLike,\n    errorKey: ErrorCodes,\n    errorDetails?: object,\n    statusCode?: HttpStatusCodes,\n    isPaginatedResponse: boolean = false\n  ) {\n    const error = errorData[errorKey];\n    const status = statusCode ?? error.statusCode; // Use the provided status code or default to the one in errorData.\n\n    // Delegate to a more customizable error response handler.\n    ErrorHandler.handleCustomErrorResponse(\n      res,\n      errorKey,\n      error.title,\n      error.message,\n      errorDetails,\n      status,\n      isPaginatedResponse\n    );\n  }\n\n  /**\n   * Handles application-specific error responses by formatting and sending a JSON response.\n   * @param res - The response object provided by Express.js.\n   * @param error - The error object.\n   * @param messageDetails - (Optional) Additional message details to include in the response.\n   * @param isPaginatedResponse - (Optional) Flag to determine if the response should be paginated.\n   */\n  static handleAppErrorResponse(\n    res: ResponseLike,\n    error: AppError,\n    messageDetails?: object,\n    isPaginatedResponse: boolean = false\n  ) {\n    if (!error.isAppError) {\n      ErrorHandler.handleCustomErrorResponse(\n        res,\n        error.errorKey ?? 'UNKNOWN_ERROR',\n        'Error',\n        error.message ?? JSON.stringify(error),\n        undefined,\n        error.httpStatusCode ?? HttpStatusCodes.INTERNAL_SERVER_ERROR_500,\n        isPaginatedResponse\n      );\n      return;\n    }\n\n    const isMultilingual = error.isMultilingual ?? false;\n    // Delegate to a more customizable error response handler.\n    ErrorHandler.handleCustomErrorResponse(\n      res,\n      error.errorKey,\n      isMultilingual ? error.multilingualTitle : error.title,\n      isMultilingual ? error.multilingualMessage : error.message,\n      error.messageDetails ?? messageDetails,\n      error.httpStatusCode,\n      isPaginatedResponse\n    );\n  }\n\n  /**\n   * Handles more customizable error responses with detailed error messages and codes.\n   * @param res - The response object.\n   * @param errorKey - Error code key used to fetch the corresponding message and default status.\n   * @param message - The localized error message object.\n   * @param messageDetails - (Optional) Additional message details to include in the response.\n   * @param statusCode - (Optional) HTTP status code, defaults to 500 if not specified.\n   * @param isPaginatedResponse - Determines if the error should be part of a paginated response.\n   */\n  static handleCustomErrorResponse<T>(\n    res: ResponseLike,\n    errorKey: ErrorCodes | string,\n    title: StrictModeLocaleMap<string> | string,\n    message: StrictModeLocaleMap<string> | string,\n    messageDetails?: object,\n    statusCode?: HttpStatusCodes,\n    isPaginatedResponse: boolean = false\n  ) {\n    const errorTitle = t(title as StrictModeLocaleMap<string>, Locales.ENGLISH);\n    const errorMessage = t(\n      message as StrictModeLocaleMap<string>,\n      Locales.ENGLISH\n    );\n    logger.error(errorMessage, messageDetails); // Log the English version of the error message.\n    const status = statusCode ?? HttpStatusCodes.INTERNAL_SERVER_ERROR_500; // Default to 500 if no status code is provided.\n\n    if (isPaginatedResponse) {\n      // Format the response as a paginated error response if requested.\n      const responseData = formatPaginatedResponse<T>({\n        error: {\n          code: errorKey,\n          title: errorTitle,\n          message: errorMessage,\n        },\n        status,\n      });\n      // Support both Express and Fastify\n      if ('status' in res && 'json' in res) {\n        (res as Response).status(status).json(responseData);\n      } else {\n        (res as FastifyReply).code(status).send(responseData);\n      }\n      return;\n    }\n\n    // Format the response as a standard non-paginated error response.\n    const responseData = formatResponse<UserAPI>({\n      error: {\n        code: errorKey,\n        title: errorTitle,\n        message: errorMessage,\n        ...messageDetails,\n      },\n      status,\n    });\n\n    // Support both Express and Fastify\n    if ('status' in res && 'json' in res) {\n      (res as Response).status(status).json(responseData);\n    } else {\n      (res as FastifyReply).code(status).send(responseData);\n    }\n  }\n\n  /**\n   * Formats a generic error response without sending it (useful for Fastify plugins).\n   * @param errorKey - A key representing the specific error.\n   * @param errorDetails - Optional error details to include.\n   * @param statusCode - Optional HTTP status code.\n   * @returns Formatted error response object.\n   */\n  static formatGenericErrorResponse(\n    errorKey: ErrorCodes,\n    errorDetails?: object,\n    statusCode?: HttpStatusCodes\n  ) {\n    const error = errorData[errorKey];\n    const status = statusCode ?? error.statusCode;\n    const errorTitle = t(error.title, Locales.ENGLISH);\n    const errorMessage = t(error.message, Locales.ENGLISH);\n    logger.error(errorMessage, errorDetails);\n\n    return formatResponse<UserAPI>({\n      error: {\n        code: errorKey,\n        title: errorTitle,\n        message: errorMessage,\n        ...errorDetails,\n      },\n      status,\n    });\n  }\n}\n"],"mappings":";;;;;;;;AAgBA,IAAa,eAAb,MAAa,aAAa;;;;;;;;CAQxB,OAAO,2BACL,KACA,UACA,cACA,YACA,sBAA+B,OAC/B;EACA,MAAM,QAAQ,UAAU;EACxB,MAAM,SAAS,cAAc,MAAM;AAGnC,eAAa,0BACX,KACA,UACA,MAAM,OACN,MAAM,SACN,cACA,QACA,oBACD;;;;;;;;;CAUH,OAAO,uBACL,KACA,OACA,gBACA,sBAA+B,OAC/B;AACA,MAAI,CAAC,MAAM,YAAY;AACrB,gBAAa,0BACX,KACA,MAAM,YAAY,iBAClB,SACA,MAAM,WAAW,KAAK,UAAU,MAAM,EACtC,QACA,MAAM,kBAAkB,gBAAgB,2BACxC,oBACD;AACD;;EAGF,MAAM,iBAAiB,MAAM,kBAAkB;AAE/C,eAAa,0BACX,KACA,MAAM,UACN,iBAAiB,MAAM,oBAAoB,MAAM,OACjD,iBAAiB,MAAM,sBAAsB,MAAM,SACnD,MAAM,kBAAkB,gBACxB,MAAM,gBACN,oBACD;;;;;;;;;;;CAYH,OAAO,0BACL,KACA,UACA,OACA,SACA,gBACA,YACA,sBAA+B,OAC/B;EACA,MAAM,aAAa,EAAE,OAAsC,QAAQ,QAAQ;EAC3E,MAAM,eAAe,EACnB,SACA,QAAQ,QACT;AACD,SAAO,MAAM,cAAc,eAAe;EAC1C,MAAM,SAAS,cAAc,gBAAgB;AAE7C,MAAI,qBAAqB;GAEvB,MAAMA,iBAAe,wBAA2B;IAC9C,OAAO;KACL,MAAM;KACN,OAAO;KACP,SAAS;KACV;IACD;IACD,CAAC;AAEF,OAAI,YAAY,OAAO,UAAU,IAC/B,CAAC,IAAiB,OAAO,OAAO,CAAC,KAAKA,eAAa;OAEnD,CAAC,IAAqB,KAAK,OAAO,CAAC,KAAKA,eAAa;AAEvD;;EAIF,MAAM,eAAe,eAAwB;GAC3C,OAAO;IACL,MAAM;IACN,OAAO;IACP,SAAS;IACT,GAAG;IACJ;GACD;GACD,CAAC;AAGF,MAAI,YAAY,OAAO,UAAU,IAC/B,CAAC,IAAiB,OAAO,OAAO,CAAC,KAAK,aAAa;MAEnD,CAAC,IAAqB,KAAK,OAAO,CAAC,KAAK,aAAa;;;;;;;;;CAWzD,OAAO,2BACL,UACA,cACA,YACA;EACA,MAAM,QAAQ,UAAU;EACxB,MAAM,SAAS,cAAc,MAAM;EACnC,MAAM,aAAa,EAAE,MAAM,OAAO,QAAQ,QAAQ;EAClD,MAAM,eAAe,EAAE,MAAM,SAAS,QAAQ,QAAQ;AACtD,SAAO,MAAM,cAAc,aAAa;AAExC,SAAO,eAAwB;GAC7B,OAAO;IACL,MAAM;IACN,OAAO;IACP,SAAS;IACT,GAAG;IACJ;GACD;GACD,CAAC"}

package/dist/esm/utils/errors/ErrorsClass.mjs

@@ -1,6 +1,6 @@
 import { HttpStatusCodes } from "../httpStatusCodes.mjs";
 import { errorData } from "./errorCodes.mjs";
-import { t } from "express-intlayer";
+import { t } from "fastify-intlayer";
 
 //#region src/utils/errors/ErrorsClass.ts
 /**

package/dist/esm/utils/errors/ErrorsClass.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ErrorsClass.mjs","names":[],"sources":["../../../../src/utils/errors/ErrorsClass.ts"],"sourcesContent":["import { HttpStatusCodes } from '@utils/httpStatusCodes';\n// @ts-ignore express-intlayer not build yet\nimport { type StrictModeLocaleMap, t } from 'express-intlayer';\nimport { type ErrorCodes, errorData } from './errorCodes';\n\n/**\n * Custom error class that extends the native JavaScript Error class.\n * This class supports multilingual error messages and HTTP status codes.\n */\nexport class AppError extends Error {\n  public isAppError: boolean = true; // Flag to identify AppError instances.\n  public name: string;\n  public isMultilingual: boolean = true;\n  public errorKey: string;\n  public title: string;\n  public multilingualTitle: StrictModeLocaleMap<string>;\n  public message: string;\n  public multilingualMessage: StrictModeLocaleMap<string>;\n  public httpStatusCode: HttpStatusCodes;\n  public messageDetails?: object;\n\n  /**\n   * Constructor for the custom error class.\n   * @param multilingualMessage - The error message which can be a simple string or a multilingual object.\n   * @param httpStatusCode - Optional HTTP status code, defaults to 500 Internal Server Error.\n   */\n  constructor(\n    multilingualTitle: StrictModeLocaleMap<string>,\n    multilingualMessage: StrictModeLocaleMap<string>,\n    errorKey: string,\n    httpStatusCode: HttpStatusCodes = HttpStatusCodes.INTERNAL_SERVER_ERROR_500,\n    messageDetails?: object\n  ) {\n    const title = t(multilingualTitle); // Translate title based on current locale\n    const message = t(multilingualMessage); // Translate message based on current locale.\n\n    super(message); // Use translated message for the superclass constructor.\n    this.title = title;\n    this.multilingualTitle = multilingualTitle;\n    this.message = message;\n    this.multilingualMessage = multilingualMessage; // Store original message format for potential use.\n    this.name = 'AppError';\n    this.errorKey = errorKey;\n    this.httpStatusCode = httpStatusCode; // Set the HTTP status code.\n    this.messageDetails = messageDetails; // Store any additional message details.\n\n    // Capture the stack trace to exclude the constructor call.\n    Error.captureStackTrace(this, this.constructor);\n  }\n}\n\nexport class GenericError extends AppError {\n  constructor(errorKey: ErrorCodes, messageDetails?: object) {\n    const multilingualTitle = errorData[errorKey].title;\n    const multilingualMessage = errorData[errorKey].message;\n    const httpStatusCode = errorData[errorKey].statusCode;\n\n    super(\n      multilingualTitle,\n      multilingualMessage,\n      errorKey,\n      httpStatusCode,\n      messageDetails\n    );\n  }\n}\n"],"mappings":";;;;;;;;;AASA,IAAa,WAAb,cAA8B,MAAM;CAClC,AAAO,aAAsB;CAC7B,AAAO;CACP,AAAO,iBAA0B;CACjC,AAAO;CACP,AAAO;CACP,AAAO;CACP,AAAO;CACP,AAAO;CACP,AAAO;CACP,AAAO;;;;;;CAOP,YACE,mBACA,qBACA,UACA,iBAAkC,gBAAgB,2BAClD,gBACA;EACA,MAAM,QAAQ,EAAE,kBAAkB;EAClC,MAAM,UAAU,EAAE,oBAAoB;AAEtC,QAAM,QAAQ;AACd,OAAK,QAAQ;AACb,OAAK,oBAAoB;AACzB,OAAK,UAAU;AACf,OAAK,sBAAsB;AAC3B,OAAK,OAAO;AACZ,OAAK,WAAW;AAChB,OAAK,iBAAiB;AACtB,OAAK,iBAAiB;AAGtB,QAAM,kBAAkB,MAAM,KAAK,YAAY;;;AAInD,IAAa,eAAb,cAAkC,SAAS;CACzC,YAAY,UAAsB,gBAAyB;EACzD,MAAM,oBAAoB,UAAU,UAAU;EAC9C,MAAM,sBAAsB,UAAU,UAAU;EAChD,MAAM,iBAAiB,UAAU,UAAU;AAE3C,QACE,mBACA,qBACA,UACA,gBACA,eACD"}
+{"version":3,"file":"ErrorsClass.mjs","names":[],"sources":["../../../../src/utils/errors/ErrorsClass.ts"],"sourcesContent":["import { HttpStatusCodes } from '@utils/httpStatusCodes';\n// @ts-ignore fastify-intlayer not build yet\nimport { type StrictModeLocaleMap, t } from 'fastify-intlayer';\nimport { type ErrorCodes, errorData } from './errorCodes';\n\n/**\n * Custom error class that extends the native JavaScript Error class.\n * This class supports multilingual error messages and HTTP status codes.\n */\nexport class AppError extends Error {\n  public isAppError: boolean = true; // Flag to identify AppError instances.\n  public name: string;\n  public isMultilingual: boolean = true;\n  public errorKey: string;\n  public title: string;\n  public multilingualTitle: StrictModeLocaleMap<string>;\n  public message: string;\n  public multilingualMessage: StrictModeLocaleMap<string>;\n  public httpStatusCode: HttpStatusCodes;\n  public messageDetails?: object;\n\n  /**\n   * Constructor for the custom error class.\n   * @param multilingualMessage - The error message which can be a simple string or a multilingual object.\n   * @param httpStatusCode - Optional HTTP status code, defaults to 500 Internal Server Error.\n   */\n  constructor(\n    multilingualTitle: StrictModeLocaleMap<string>,\n    multilingualMessage: StrictModeLocaleMap<string>,\n    errorKey: string,\n    httpStatusCode: HttpStatusCodes = HttpStatusCodes.INTERNAL_SERVER_ERROR_500,\n    messageDetails?: object\n  ) {\n    const title = t(multilingualTitle); // Translate title based on current locale\n    const message = t(multilingualMessage); // Translate message based on current locale.\n\n    super(message); // Use translated message for the superclass constructor.\n    this.title = title;\n    this.multilingualTitle = multilingualTitle;\n    this.message = message;\n    this.multilingualMessage = multilingualMessage; // Store original message format for potential use.\n    this.name = 'AppError';\n    this.errorKey = errorKey;\n    this.httpStatusCode = httpStatusCode; // Set the HTTP status code.\n    this.messageDetails = messageDetails; // Store any additional message details.\n\n    // Capture the stack trace to exclude the constructor call.\n    Error.captureStackTrace(this, this.constructor);\n  }\n}\n\nexport class GenericError extends AppError {\n  constructor(errorKey: ErrorCodes, messageDetails?: object) {\n    const multilingualTitle = errorData[errorKey].title;\n    const multilingualMessage = errorData[errorKey].message;\n    const httpStatusCode = errorData[errorKey].statusCode;\n\n    super(\n      multilingualTitle,\n      multilingualMessage,\n      errorKey,\n      httpStatusCode,\n      messageDetails\n    );\n  }\n}\n"],"mappings":";;;;;;;;;AASA,IAAa,WAAb,cAA8B,MAAM;CAClC,AAAO,aAAsB;CAC7B,AAAO;CACP,AAAO,iBAA0B;CACjC,AAAO;CACP,AAAO;CACP,AAAO;CACP,AAAO;CACP,AAAO;CACP,AAAO;CACP,AAAO;;;;;;CAOP,YACE,mBACA,qBACA,UACA,iBAAkC,gBAAgB,2BAClD,gBACA;EACA,MAAM,QAAQ,EAAE,kBAAkB;EAClC,MAAM,UAAU,EAAE,oBAAoB;AAEtC,QAAM,QAAQ;AACd,OAAK,QAAQ;AACb,OAAK,oBAAoB;AACzB,OAAK,UAAU;AACf,OAAK,sBAAsB;AAC3B,OAAK,OAAO;AACZ,OAAK,WAAW;AAChB,OAAK,iBAAiB;AACtB,OAAK,iBAAiB;AAGtB,QAAM,kBAAkB,MAAM,KAAK,YAAY;;;AAInD,IAAa,eAAb,cAAkC,SAAS;CACzC,YAAY,UAAsB,gBAAyB;EACzD,MAAM,oBAAoB,UAAU,UAAU;EAC9C,MAAM,sBAAsB,UAAU,UAAU;EAChD,MAAM,iBAAiB,UAAU,UAAU;AAE3C,QACE,mBACA,qBACA,UACA,gBACA,eACD"}