@jmlq/auth 0.0.1-alpha.11 → 0.0.1-alpha.13

package/dist/application/dtos/index.d.ts

@@ -1,3 +1,3 @@
 export * from "./request";
 export * from "./response";
-export * from "./type";
+export * from "./types";

package/dist/application/dtos/index.js

@@ -17,4 +17,4 @@ Object.defineProperty(exports, "__esModule", { value: true });
 //src/application/dtos/index.ts
 __exportStar(require("./request"), exports);
 __exportStar(require("./response"), exports);
-__exportStar(require("./type"), exports);
+__exportStar(require("./types"), exports);

package/dist/application/dtos/request/register-user.request.d.ts

@@ -1,4 +1,4 @@
-import { UserRole } from "../type";
+import { UserRole } from "../types";
 export interface RegisterUserRequest {
     email: string;
     password: string;

package/dist/application/dtos/{type → types}/index.js

@@ -14,5 +14,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-//src/application/dtos/type/index.ts
+//src/application/dtos/types/index.ts
 __exportStar(require("./user-role.type"), exports);

package/dist/application/use-cases/change-password.use-case.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ChangePasswordUseCase = void 0;
 const object_values_1 = require("../../domain/object-values");
 const errors_1 = require("../../domain/errors");
+const internal_1 = require("./internal");
 /**
  * Cambia contraseña con validación de password actual.
  *
@@ -22,13 +23,8 @@ class ChangePasswordUseCase {
         this.passwordPolicy = passwordPolicy;
     }
     async execute(request) {
-        if (request.newPassword !== request.confirmNewPassword) {
-            throw new errors_1.PasswordMismatchError("Passwords do not match");
-        }
-        const strength = this.passwordPolicy.validateStrength(request.newPassword);
-        if (!strength.isValid) {
-            throw new errors_1.PasswordPolicyViolationError(strength.errors);
-        }
+        (0, internal_1.assertPasswordsMatch)(request.newPassword, request.confirmNewPassword);
+        (0, internal_1.assertPasswordPolicy)(this.passwordPolicy, request.newPassword);
         const user = await this.userRepository.findById(new object_values_1.Id(request.userId));
         if (!user)
             throw new errors_1.UserNotFoundError("User not found");

package/dist/application/use-cases/internal/index.d.ts

@@ -0,0 +1 @@
+export * from "./password-assertions";

package/dist/application/use-cases/internal/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+//src/application/use-cases/internal/index.ts
+__exportStar(require("./password-assertions"), exports);

package/dist/application/use-cases/internal/password-assertions.d.ts

@@ -0,0 +1,13 @@
+import type { IPasswordPolicyPort } from "../../../domain/ports";
+/**
+ * Asserts that `newPassword` equals `confirmPassword`.
+ *
+ * Application-level validation to keep use cases small and consistent.
+ */
+export declare function assertPasswordsMatch(newPassword: string, confirmPassword: string): void;
+/**
+ * Asserts that `password` satisfies the configured password policy.
+ *
+ * This runs BEFORE hashing to fail fast and reduce CPU cost.
+ */
+export declare function assertPasswordPolicy(passwordPolicy: IPasswordPolicyPort, password: string): void;

package/dist/application/use-cases/internal/password-assertions.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertPasswordsMatch = assertPasswordsMatch;
+exports.assertPasswordPolicy = assertPasswordPolicy;
+const errors_1 = require("../../../domain/errors");
+/**
+ * Asserts that `newPassword` equals `confirmPassword`.
+ *
+ * Application-level validation to keep use cases small and consistent.
+ */
+function assertPasswordsMatch(newPassword, confirmPassword) {
+    if (newPassword !== confirmPassword) {
+        throw new errors_1.PasswordMismatchError("Passwords do not match");
+    }
+}
+/**
+ * Asserts that `password` satisfies the configured password policy.
+ *
+ * This runs BEFORE hashing to fail fast and reduce CPU cost.
+ */
+function assertPasswordPolicy(passwordPolicy, password) {
+    const strength = passwordPolicy.validateStrength(password);
+    if (!strength.isValid) {
+        throw new errors_1.PasswordPolicyViolationError(strength.errors);
+    }
+}

package/dist/application/use-cases/refresh-token.use-case.js

@@ -17,7 +17,7 @@ class RefreshTokenUseCase {
             };
         }
         catch (error) {
-            throw new errors_1.InvalidOrExpiredRefreshTokenError();
+            throw new errors_1.TokenExpiredError();
         }
     }
 }

package/dist/application/use-cases/register-user.use-case.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.RegisterUserUseCase = void 0;
 //src/application/use-cases/register-user.use-case.ts
 const domain_1 = require("../../domain");
+const internal_1 = require("./internal");
 class RegisterUserUseCase {
     constructor(userRepository, passwordHasher, passwordPolicy) {
         this.userRepository = userRepository;
@@ -33,11 +34,8 @@ class RegisterUserUseCase {
     // Use case
     // ---------------------------------------------------------------------------
     async execute(request) {
-        // Validar política de contraseñas
-        const passwordValidation = this.passwordPolicy.validateStrength(request.password);
-        if (!passwordValidation.isValid) {
-            throw new domain_1.PasswordPolicyViolationError(passwordValidation.errors);
-        }
+        // Validar policy antes de hacer trabajo costoso (hash)
+        (0, internal_1.assertPasswordPolicy)(this.passwordPolicy, request.password);
         // Verificar que el email no esté en uso
         const email = new domain_1.Email(request.email);
         const exists = await this.userRepository.findByEmail(email);

package/dist/application/use-cases/reset-password.use-case.js

@@ -4,6 +4,7 @@ exports.ResetPasswordUseCase = void 0;
 const object_values_1 = require("../../domain/object-values");
 const errors_1 = require("../../domain/errors");
 const password_reset_errors_1 = require("../../domain/errors/password-reset.errors");
+const internal_1 = require("./internal");
 /**
  * Confirma el reseteo de contraseña usando token (single-use).
  *
@@ -21,15 +22,9 @@ class ResetPasswordUseCase {
         this.passwordResetToken = passwordResetToken;
     }
     async execute(request) {
-        // Validación de request (application): confirmación
-        if (request.newPassword !== request.confirmNewPassword) {
-            throw new errors_1.PasswordMismatchError("Passwords do not match");
-        }
-        // Validar policy antes de hacer trabajo costoso (hash)
-        const strength = this.passwordPolicy.validateStrength(request.newPassword);
-        if (!strength.isValid) {
-            throw new errors_1.PasswordPolicyViolationError(strength.errors);
-        }
+        // Validación de request (application)
+        (0, internal_1.assertPasswordsMatch)(request.newPassword, request.confirmNewPassword);
+        (0, internal_1.assertPasswordPolicy)(this.passwordPolicy, request.newPassword);
         // Consumir token (single-use). La implementación debe asegurar atomicidad.
         const consumed = await this.passwordResetToken
             .consume(request.resetToken)

package/dist/domain/entities/credential.entity.d.ts

@@ -62,11 +62,6 @@ export declare class Credential {
      * @returns Verdadero si las credenciales han expirado, falso en caso contrario
      */
     isExpired(): boolean;
-    /**
-     * Evalúa si las credenciales son válidas (no expiradas)
-     * @returns Verdadero si las credenciales son válidas (no expiradas), falso en caso contrario
-     */
-    isValid(): boolean;
     /**
      * Crea una nueva instancia de Credential
      * @param userId Identificador del usuario

package/dist/domain/entities/credential.entity.js

@@ -63,13 +63,6 @@ class Credential {
     isExpired() {
         return new Date() > this._expiresAt;
     }
-    /**
-     * Evalúa si las credenciales son válidas (no expiradas)
-     * @returns Verdadero si las credenciales son válidas (no expiradas), falso en caso contrario
-     */
-    isValid() {
-        return !this.isExpired();
-    }
     /**
      * Crea una nueva instancia de Credential
      * @param userId Identificador del usuario

package/dist/domain/errors/auth.errors.d.ts

@@ -34,13 +34,6 @@ export declare class InvalidSignatureError extends AuthDomainError {
 export declare class AuthenticationError extends AuthDomainError {
     constructor(message?: string, details?: unknown);
 }
-/** Alias histórico si lo usabas antes */
-export declare class InvalidOrExpiredRefreshTokenError extends AuthDomainError {
-    constructor(details?: {
-        exp?: number;
-        now?: number;
-    });
-}
 export declare class SessionAuthError extends AuthDomainError {
     constructor(message?: string, details?: unknown);
 }

package/dist/domain/errors/auth.errors.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SessionAuthError = exports.InvalidOrExpiredRefreshTokenError = exports.AuthenticationError = exports.InvalidSignatureError = exports.InvalidTokenFormatError = exports.TokenExpiredError = exports.AuthDomainError = void 0;
+exports.SessionAuthError = exports.AuthenticationError = exports.InvalidSignatureError = exports.InvalidTokenFormatError = exports.TokenExpiredError = exports.AuthDomainError = void 0;
 class AuthDomainError extends Error {
     constructor(message, code, details) {
         super(message);
@@ -53,13 +53,6 @@ class AuthenticationError extends AuthDomainError {
     }
 }
 exports.AuthenticationError = AuthenticationError;
-/** Alias histórico si lo usabas antes */
-class InvalidOrExpiredRefreshTokenError extends AuthDomainError {
-    constructor(details) {
-        super("Invalid or expired refresh token", "TOKEN_EXPIRED", details);
-    }
-}
-exports.InvalidOrExpiredRefreshTokenError = InvalidOrExpiredRefreshTokenError;
 class SessionAuthError extends AuthDomainError {
     constructor(message = "Session Authentication failed", details) {
         super(message, "AUTHENTICATION_FAILED", details);

package/dist/domain/props/index.js

@@ -14,5 +14,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+// src/domain/props/index.ts
 __exportStar(require("./entities"), exports);
 __exportStar(require("./jwt"), exports);

package/dist/index.d.ts

@@ -1,5 +1,7 @@
 export { BcryptPasswordHasher } from "./infrastructure/security";
+export type { IAuthServiceContainer } from "./infrastructure/types";
 export * from "./application/factories";
+export { AuthServiceFactoryOptions } from "./application/types";
 export * from "./domain/ports";
 export * from "./domain/entities";
 export * from "./domain/object-values";

package/dist/infrastructure/services/token-session.service.js

@@ -95,11 +95,11 @@ class TokenSessionService {
     async refreshSession(refreshToken) {
         const existing = await this.credentialRepository.findByRefreshToken(refreshToken);
         if (!existing)
-            throw new domain_1.InvalidOrExpiredRefreshTokenError();
+            throw new domain_1.TokenExpiredError();
         const payload = await this.tokenService
             .verifyRefreshToken(refreshToken)
             .catch(() => {
-            throw new domain_1.InvalidOrExpiredRefreshTokenError();
+            throw new domain_1.TokenExpiredError();
         });
         const user = await this.userRepository.findById(new domain_1.Id(payload.sub));
         if (!user)

package/dist/infrastructure/types/index.js

@@ -14,5 +14,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-//src/infrastructure/type/index.ts
+//src/infrastructure/types/index.ts
 __exportStar(require("./auth-service-container"), exports);

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@jmlq/auth",
   "description": "JWT authentication package with clean architecture",
-  "version": "0.0.1-alpha.11",
+  "version": "0.0.1-alpha.13",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "scripts": {
     "dev": "rimraf dist && mkdir dist && tsc -p tsconfig.json",
     "build": "rimraf dist && mkdir dist && tsc -p tsconfig.build.json",
+    "package:script": "node scripts/package-script.mjs",
     "prepublishOnly": "npm run build",
     "test": "jest --passWithNoTests",
     "test:watch": "jest --watch",