@levrbet/shared 0.0.1

package/dist/server/middleware/auth/privy.handler.d.ts

@@ -0,0 +1,7 @@
+import type { Request } from "express";
+import { LevrAuth, PrivyRole } from "../../../core";
+import type { AuthResult } from "../../types/auth.types";
+/**
+ * Handles Privy authentication (User or Admin)
+ */
+export declare function handlePrivyAuth(req: Request, role: PrivyRole, authType: LevrAuth): Promise<AuthResult>;

package/dist/server/middleware/auth/privy.handler.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handlePrivyAuth = handlePrivyAuth;
+const viem_1 = require("viem");
+const core_1 = require("../../../core");
+const services_1 = require("../../services");
+/**
+ * Handles Privy authentication (User or Admin)
+ */
+async function handlePrivyAuth(req, role, authType) {
+    const privyToken = req.headers[core_1.PRIVY_ACCESS_TOKEN_HEADER]?.toString();
+    const privyIdToken = req.headers[core_1.PRIVY_ID_TOKEN_HEADER]?.toString();
+    const ethAddress = req.headers[core_1.ETH_ADDRESS_HEADER]?.toString();
+    if (!privyToken || !privyIdToken) {
+        return {
+            success: false,
+            error: `Missing ${core_1.PRIVY_ACCESS_TOKEN_HEADER} or ${core_1.PRIVY_ID_TOKEN_HEADER} header`,
+            statusCode: 401,
+        };
+    }
+    const privyUser = await services_1.privyService.authenticate({ privyToken, privyIdToken, ethAddress, role });
+    if (!privyUser) {
+        return { success: false, error: "Privy authentication failed", statusCode: 401 };
+    }
+    // Set auth context
+    req.privyUser = privyUser;
+    req.ethAddress = ethAddress && (0, viem_1.isAddress)(ethAddress) ? (0, viem_1.getAddress)(ethAddress) : services_1.privyService.getUserEthAddress(privyUser);
+    req.authMethod = authType;
+    return { success: true };
+}
+//# sourceMappingURL=privy.handler.js.map

package/dist/server/middleware/auth/privy.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privy.handler.js","sourceRoot":"","sources":["../../../../src/server/middleware/auth/privy.handler.ts"],"names":[],"mappings":";;AASA,0CAyBC;AAjCD,+BAA4C;AAC5C,wCAAyH;AACzH,6CAA6C;AAG7C;;GAEG;AACI,KAAK,UAAU,eAAe,CAAC,GAAY,EAAE,IAAe,EAAE,QAAkB;IACnF,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,gCAAyB,CAAC,EAAE,QAAQ,EAAE,CAAA;IACrE,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,4BAAqB,CAAC,EAAE,QAAQ,EAAE,CAAA;IACnE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,yBAAkB,CAAC,EAAE,QAAQ,EAAE,CAAA;IAE9D,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,OAAO;YACH,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,WAAW,gCAAyB,OAAO,4BAAqB,SAAS;YAChF,UAAU,EAAE,GAAG;SAClB,CAAA;IACL,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,uBAAY,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;IAEjG,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IACpF,CAAC;IAED,mBAAmB;IACnB,GAAG,CAAC,SAAS,GAAG,SAAS,CAAA;IACzB,GAAG,CAAC,UAAU,GAAG,UAAU,IAAI,IAAA,gBAAS,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAU,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,uBAAY,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;IACzH,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAA;IAEzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC5B,CAAC"}

package/dist/server/middleware/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./multiAuth.middleware";
+export * from "./rateLimit.middleware";

package/dist/server/middleware/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./multiAuth.middleware"), exports);
+__exportStar(require("./rateLimit.middleware"), exports);
+//# sourceMappingURL=index.js.map

package/dist/server/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/middleware/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAsC;AACtC,yDAAsC"}

package/dist/server/middleware/multiAuth.examples.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Multi-Auth Middleware Usage Examples
+ *
+ * This file demonstrates how to use the new multiAuth middleware
+ * to support multiple authentication methods in your routes.
+ */
+declare const router: import("express-serve-static-core").Router;
+/**
+ * Client-side usage:
+ *
+ * Clients MUST include the x-levr-auth-type header to indicate which auth method they're using:
+ *
+ * For Privy User:
+ * ```
+ * headers: {
+ *   'x-levr-auth-type': 'privyUser',
+ *   'privy-access-token': 'token...',
+ *   'privy-id-token': 'token...',
+ *   'eth-address': '0x...' // optional
+ * }
+ * ```
+ *
+ * For HMAC API Key (user API keys):
+ * ```
+ * headers: {
+ *   'x-levr-auth-type': 'hmac',
+ *   'Authorization': 'HMAC <api-key-id>:<signature>',
+ *   'x-request-timestamp': '1234567890',
+ *   'x-request-nonce': 'random-string'
+ * }
+ * ```
+ *
+ * For Service HMAC (backend service API keys):
+ * ```
+ * headers: {
+ *   'x-levr-auth-type': 'serviceHmac',
+ *   'Authorization': 'HMAC <api-key-id>:<signature>',
+ *   'x-request-timestamp': '1234567890',
+ *   'x-request-nonce': 'random-string'
+ * }
+ * ```
+ *
+ * Note: Service API keys are distinguished by having a 'service' field set.
+ * User API keys have service=null. The auth handler validates this automatically.
+ */
+export default router;

package/dist/server/middleware/multiAuth.examples.js

@@ -0,0 +1,123 @@
+"use strict";
+/**
+ * Multi-Auth Middleware Usage Examples
+ *
+ * This file demonstrates how to use the new multiAuth middleware
+ * to support multiple authentication methods in your routes.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = require("express");
+const core_1 = require("../../core");
+const multiAuth_middleware_1 = require("./multiAuth.middleware");
+const winston_1 = __importDefault(require("../config/winston"));
+const router = (0, express_1.Router)();
+// Example 1: Simple route supporting both Privy user auth and HMAC API keys
+// Auto-enforces Write scope for POST requests
+router.post("/orders", (0, multiAuth_middleware_1.multiAuth)({
+    methods: [core_1.LevrAuth.PRIVY_USER, core_1.LevrAuth.HMAC],
+}), (req, res) => {
+    // Access authenticated user data
+    if (req.privyUser) {
+        winston_1.default.info("Authenticated via Privy:", req.privyUser.id);
+    }
+    else if (req.apiUser) {
+        winston_1.default.info("Authenticated via API key:", req.apiUser.id);
+    }
+    winston_1.default.info("Auth method used:", req.authMethod);
+    winston_1.default.info("ETH address:", req.ethAddress);
+    res.json({ success: true });
+});
+// Example 2: Admin-only route
+router.delete("/admin/users/:id", (0, multiAuth_middleware_1.multiAuth)({
+    methods: [core_1.LevrAuth.PRIVY_ADMIN],
+}), (req, res) => {
+    // Only Privy admins can access this
+    winston_1.default.info("Admin user:", req.privyUser?.id);
+    res.json({ success: true });
+});
+// Example 3: Read-only route supporting multiple auth methods
+// Disable auto-enforcement of Write scope for POST
+router.post("/search", (0, multiAuth_middleware_1.multiAuth)({
+    methods: [core_1.LevrAuth.PRIVY_USER, core_1.LevrAuth.HMAC],
+    requiredScopes: [core_1.ApiKeyScope.Read],
+    autoEnforceWriteScope: false, // POST doesn't require Write scope
+}), (_req, res) => {
+    // This POST route only needs Read scope
+    res.json({ results: [] });
+});
+// Example 4: Service-to-service authentication
+// Only Orderbook and OracleCore services can access
+router.post("/internal/sync-markets", (0, multiAuth_middleware_1.multiAuth)({
+    methods: [core_1.LevrAuth.SERVICE_HMAC],
+    allowedServices: [core_1.LevrService.Orderbook, core_1.LevrService.OracleCore],
+}), (req, res) => {
+    // Only specific services can access
+    winston_1.default.info("Service:", req.apiUser?.service);
+    res.json({ synced: true });
+});
+// Example 5: Mixed service and user auth with explicit scopes
+router.put("/markets/:id", (0, multiAuth_middleware_1.multiAuth)({
+    methods: [core_1.LevrAuth.PRIVY_ADMIN, core_1.LevrAuth.SERVICE_HMAC],
+    requiredScopes: [core_1.ApiKeyScope.Write], // Explicitly require Write
+    allowedServices: [core_1.LevrService.Orderbook, core_1.LevrService.Lab],
+}), (req, res) => {
+    // Either admin users or specific services can update
+    if (req.privyUser) {
+        winston_1.default.info("Admin updating market:", req.privyUser.id);
+    }
+    else {
+        winston_1.default.info("Service updating market:", req.apiUser?.service);
+    }
+    res.json({ updated: true });
+});
+// Example 6: GET route with optional auth
+// Even GET requests can require specific scopes if needed
+router.get("/private-data", (0, multiAuth_middleware_1.multiAuth)({
+    methods: [core_1.LevrAuth.PRIVY_USER, core_1.LevrAuth.HMAC],
+    requiredScopes: [core_1.ApiKeyScope.Read],
+}), (_req, res) => {
+    res.json({ data: "sensitive information" });
+});
+/**
+ * Client-side usage:
+ *
+ * Clients MUST include the x-levr-auth-type header to indicate which auth method they're using:
+ *
+ * For Privy User:
+ * ```
+ * headers: {
+ *   'x-levr-auth-type': 'privyUser',
+ *   'privy-access-token': 'token...',
+ *   'privy-id-token': 'token...',
+ *   'eth-address': '0x...' // optional
+ * }
+ * ```
+ *
+ * For HMAC API Key (user API keys):
+ * ```
+ * headers: {
+ *   'x-levr-auth-type': 'hmac',
+ *   'Authorization': 'HMAC <api-key-id>:<signature>',
+ *   'x-request-timestamp': '1234567890',
+ *   'x-request-nonce': 'random-string'
+ * }
+ * ```
+ *
+ * For Service HMAC (backend service API keys):
+ * ```
+ * headers: {
+ *   'x-levr-auth-type': 'serviceHmac',
+ *   'Authorization': 'HMAC <api-key-id>:<signature>',
+ *   'x-request-timestamp': '1234567890',
+ *   'x-request-nonce': 'random-string'
+ * }
+ * ```
+ *
+ * Note: Service API keys are distinguished by having a 'service' field set.
+ * User API keys have service=null. The auth handler validates this automatically.
+ */
+exports.default = router;
+//# sourceMappingURL=multiAuth.examples.js.map

package/dist/server/middleware/multiAuth.examples.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multiAuth.examples.js","sourceRoot":"","sources":["../../../src/server/middleware/multiAuth.examples.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;AAEH,qCAAgC;AAChC,qCAA+D;AAC/D,iEAAkD;AAClD,gEAAsC;AAEtC,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAA;AAEvB,4EAA4E;AAC5E,8CAA8C;AAC9C,MAAM,CAAC,IAAI,CACP,SAAS,EACT,IAAA,gCAAS,EAAC;IACN,OAAO,EAAE,CAAC,eAAQ,CAAC,UAAU,EAAE,eAAQ,CAAC,IAAI,CAAC;CAChD,CAAC,EACF,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACT,iCAAiC;IACjC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAChB,iBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAC7D,CAAC;SAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QACrB,iBAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,iBAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,UAAU,CAAC,CAAA;IAChD,iBAAM,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,UAAU,CAAC,CAAA;IAE3C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;AAC/B,CAAC,CACJ,CAAA;AAED,8BAA8B;AAC9B,MAAM,CAAC,MAAM,CACT,kBAAkB,EAClB,IAAA,gCAAS,EAAC;IACN,OAAO,EAAE,CAAC,eAAQ,CAAC,WAAW,CAAC;CAClC,CAAC,EACF,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACT,oCAAoC;IACpC,iBAAM,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;AAC/B,CAAC,CACJ,CAAA;AAED,8DAA8D;AAC9D,mDAAmD;AACnD,MAAM,CAAC,IAAI,CACP,SAAS,EACT,IAAA,gCAAS,EAAC;IACN,OAAO,EAAE,CAAC,eAAQ,CAAC,UAAU,EAAE,eAAQ,CAAC,IAAI,CAAC;IAC7C,cAAc,EAAE,CAAC,kBAAW,CAAC,IAAI,CAAC;IAClC,qBAAqB,EAAE,KAAK,EAAE,mCAAmC;CACpE,CAAC,EACF,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACV,wCAAwC;IACxC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;AAC7B,CAAC,CACJ,CAAA;AAED,+CAA+C;AAC/C,oDAAoD;AACpD,MAAM,CAAC,IAAI,CACP,wBAAwB,EACxB,IAAA,gCAAS,EAAC;IACN,OAAO,EAAE,CAAC,eAAQ,CAAC,YAAY,CAAC;IAChC,eAAe,EAAE,CAAC,kBAAW,CAAC,SAAS,EAAE,kBAAW,CAAC,UAAU,CAAC;CACnE,CAAC,EACF,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACT,oCAAoC;IACpC,iBAAM,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;AAC9B,CAAC,CACJ,CAAA;AAED,8DAA8D;AAC9D,MAAM,CAAC,GAAG,CACN,cAAc,EACd,IAAA,gCAAS,EAAC;IACN,OAAO,EAAE,CAAC,eAAQ,CAAC,WAAW,EAAE,eAAQ,CAAC,YAAY,CAAC;IACtD,cAAc,EAAE,CAAC,kBAAW,CAAC,KAAK,CAAC,EAAE,2BAA2B;IAChE,eAAe,EAAE,CAAC,kBAAW,CAAC,SAAS,EAAE,kBAAW,CAAC,GAAG,CAAC;CAC5D,CAAC,EACF,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACT,qDAAqD;IACrD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAChB,iBAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAC3D,CAAC;SAAM,CAAC;QACJ,iBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACjE,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;AAC/B,CAAC,CACJ,CAAA;AAED,0CAA0C;AAC1C,0DAA0D;AAC1D,MAAM,CAAC,GAAG,CACN,eAAe,EACf,IAAA,gCAAS,EAAC;IACN,OAAO,EAAE,CAAC,eAAQ,CAAC,UAAU,EAAE,eAAQ,CAAC,IAAI,CAAC;IAC7C,cAAc,EAAE,CAAC,kBAAW,CAAC,IAAI,CAAC;CACrC,CAAC,EACF,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACV,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAA;AAC/C,CAAC,CACJ,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,kBAAe,MAAM,CAAA"}

package/dist/server/middleware/multiAuth.middleware.d.ts

@@ -0,0 +1,30 @@
+import type { NextFunction, Request, Response } from "express";
+import { MultiAuthOptions } from "../../core";
+/**
+ * Multi-auth middleware factory
+ *
+ * Creates Express middleware that supports multiple authentication methods.
+ * The client specifies which method to use via the x-levr-auth-type header.
+ *
+ * @example
+ * ```typescript
+ * // Support both user and API key auth, require Write scope
+ * app.post('/orders',
+ *   multiAuth({
+ *     methods: [LevrAuth.PRIVY_USER, LevrAuth.HMAC],
+ *     requiredScopes: [ApiKeyScope.Write]
+ *   }),
+ *   orderController.create
+ * )
+ *
+ * // Service-to-service only, must be from Orderbook or OracleCore service
+ * app.post('/internal/sync',
+ *   multiAuth({
+ *     methods: [LevrAuth.SERVICE_HMAC],
+ *     requiredServices: [LevrService.Orderbook, LevrService.OracleCore]
+ *   }),
+ *   internalController.sync
+ * )
+ * ```
+ */
+export declare function multiAuth(options: MultiAuthOptions): (req: Request, res: Response, next: NextFunction) => Promise<void>;

package/dist/server/middleware/multiAuth.middleware.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.multiAuth = multiAuth;
+const core_1 = require("../../core");
+const auth_1 = require("./auth");
+/**
+ * Multi-auth middleware factory
+ *
+ * Creates Express middleware that supports multiple authentication methods.
+ * The client specifies which method to use via the x-levr-auth-type header.
+ *
+ * @example
+ * ```typescript
+ * // Support both user and API key auth, require Write scope
+ * app.post('/orders',
+ *   multiAuth({
+ *     methods: [LevrAuth.PRIVY_USER, LevrAuth.HMAC],
+ *     requiredScopes: [ApiKeyScope.Write]
+ *   }),
+ *   orderController.create
+ * )
+ *
+ * // Service-to-service only, must be from Orderbook or OracleCore service
+ * app.post('/internal/sync',
+ *   multiAuth({
+ *     methods: [LevrAuth.SERVICE_HMAC],
+ *     requiredServices: [LevrService.Orderbook, LevrService.OracleCore]
+ *   }),
+ *   internalController.sync
+ * )
+ * ```
+ */
+function multiAuth(options) {
+    // Validate configuration at middleware creation time
+    if (options.methods.includes(core_1.LevrAuth.SERVICE_HMAC)) {
+        if (!options.allowedServices || options.allowedServices.length === 0) {
+            throw new Error("SERVICE_HMAC authentication requires 'allowedServices' to be specified in MultiAuthOptions");
+        }
+    }
+    return async (req, res, next) => {
+        const requestedAuthType = req.header(core_1.LEVR_AUTH_HEADER);
+        // If no auth type specified, reject
+        if (!requestedAuthType) {
+            res.status(400).json({
+                error: `Missing ${core_1.LEVR_AUTH_HEADER} header`,
+                supportedMethods: options.methods,
+            });
+            return;
+        }
+        // Check if requested auth method is supported by this route
+        if (!options.methods.includes(requestedAuthType)) {
+            res.status(400).json({
+                error: `Unsupported auth method: ${requestedAuthType}`,
+                supportedMethods: options.methods,
+            });
+            return;
+        }
+        let result;
+        // Route to appropriate auth handler
+        switch (requestedAuthType) {
+            case core_1.LevrAuth.HMAC:
+                result = await (0, auth_1.handleHmacAuth)(req, options);
+                break;
+            case core_1.LevrAuth.SERVICE_HMAC:
+                result = await (0, auth_1.handleServiceHmacAuth)(req, options);
+                break;
+            case core_1.LevrAuth.PRIVY_USER:
+                result = await (0, auth_1.handlePrivyAuth)(req, core_1.PrivyRole.User, core_1.LevrAuth.PRIVY_USER);
+                break;
+            case core_1.LevrAuth.PRIVY_ADMIN:
+                result = await (0, auth_1.handlePrivyAuth)(req, core_1.PrivyRole.Admin, core_1.LevrAuth.PRIVY_ADMIN);
+                break;
+            case core_1.LevrAuth.CLOUDFLARE:
+                result = await (0, auth_1.handleCloudflareAuth)(req);
+                break;
+            default:
+                result = {
+                    success: false,
+                    error: `Unknown auth method: ${requestedAuthType}`,
+                    statusCode: 400,
+                };
+        }
+        if (!result.success) {
+            res.status(result.statusCode || 401).json({ error: result.error });
+            return;
+        }
+        next();
+    };
+}
+//# sourceMappingURL=multiAuth.middleware.js.map

package/dist/server/middleware/multiAuth.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multiAuth.middleware.js","sourceRoot":"","sources":["../../../src/server/middleware/multiAuth.middleware.ts"],"names":[],"mappings":";;AAgCA,8BAoEC;AAnGD,qCAAoF;AAEpF,iCAAqG;AAErG;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,SAAgB,SAAS,CAAC,OAAyB;IAC/C,qDAAqD;IACrD,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAA;QACjH,CAAC;IACL,CAAC;IAED,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAiB,EAAE;QAC5E,MAAM,iBAAiB,GAAG,GAAG,CAAC,MAAM,CAAC,uBAAgB,CAAC,CAAA;QAEtD,oCAAoC;QACpC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,WAAW,uBAAgB,SAAS;gBAC3C,gBAAgB,EAAE,OAAO,CAAC,OAAO;aACpC,CAAC,CAAA;YACF,OAAM;QACV,CAAC;QAED,4DAA4D;QAC5D,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAA6B,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,4BAA4B,iBAAiB,EAAE;gBACtD,gBAAgB,EAAE,OAAO,CAAC,OAAO;aACpC,CAAC,CAAA;YACF,OAAM;QACV,CAAC;QAED,IAAI,MAAkB,CAAA;QAEtB,oCAAoC;QACpC,QAAQ,iBAAiB,EAAE,CAAC;YACxB,KAAK,eAAQ,CAAC,IAAI;gBACd,MAAM,GAAG,MAAM,IAAA,qBAAc,EAAC,GAAG,EAAE,OAAO,CAAC,CAAA;gBAC3C,MAAK;YAET,KAAK,eAAQ,CAAC,YAAY;gBACtB,MAAM,GAAG,MAAM,IAAA,4BAAqB,EAAC,GAAG,EAAE,OAAO,CAAC,CAAA;gBAClD,MAAK;YAET,KAAK,eAAQ,CAAC,UAAU;gBACpB,MAAM,GAAG,MAAM,IAAA,sBAAe,EAAC,GAAG,EAAE,gBAAS,CAAC,IAAI,EAAE,eAAQ,CAAC,UAAU,CAAC,CAAA;gBACxE,MAAK;YAET,KAAK,eAAQ,CAAC,WAAW;gBACrB,MAAM,GAAG,MAAM,IAAA,sBAAe,EAAC,GAAG,EAAE,gBAAS,CAAC,KAAK,EAAE,eAAQ,CAAC,WAAW,CAAC,CAAA;gBAC1E,MAAK;YAET,KAAK,eAAQ,CAAC,UAAU;gBACpB,MAAM,GAAG,MAAM,IAAA,2BAAoB,EAAC,GAAG,CAAC,CAAA;gBACxC,MAAK;YAET;gBACI,MAAM,GAAG;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,wBAAwB,iBAAiB,EAAE;oBAClD,UAAU,EAAE,GAAG;iBAClB,CAAA;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;YAClE,OAAM;QACV,CAAC;QAED,IAAI,EAAE,CAAA;IACV,CAAC,CAAA;AACL,CAAC"}

package/dist/server/middleware/rateLimit.middleware.d.ts

@@ -0,0 +1 @@
+export declare const rateLimiter: (requestsWindow: number, maxRequests: number) => import("express-rate-limit").RateLimitRequestHandler;

package/dist/server/middleware/rateLimit.middleware.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rateLimiter = void 0;
+const express_rate_limit_1 = require("express-rate-limit");
+const rate_limit_redis_1 = require("rate-limit-redis");
+const config_1 = require("../config");
+const rateLimiter = (requestsWindow, maxRequests) => {
+    return (0, express_rate_limit_1.rateLimit)({
+        windowMs: requestsWindow,
+        max: maxRequests,
+        standardHeaders: true,
+        legacyHeaders: false,
+        store: new rate_limit_redis_1.RedisStore({
+            sendCommand: (command, ...args) => config_1.redisClientManager.primaryClient.call(command, ...args),
+        }),
+    });
+};
+exports.rateLimiter = rateLimiter;
+//# sourceMappingURL=rateLimit.middleware.js.map

package/dist/server/middleware/rateLimit.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.middleware.js","sourceRoot":"","sources":["../../../src/server/middleware/rateLimit.middleware.ts"],"names":[],"mappings":";;;AAAA,2DAA8C;AAC9C,uDAAyD;AACzD,sCAA8C;AAEvC,MAAM,WAAW,GAAG,CAAC,cAAsB,EAAE,WAAmB,EAAE,EAAE;IACvE,OAAO,IAAA,8BAAS,EAAC;QACb,QAAQ,EAAE,cAAc;QACxB,GAAG,EAAE,WAAW;QAChB,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,KAAK;QACpB,KAAK,EAAE,IAAI,6BAAU,CAAC;YAClB,WAAW,EAAE,CAAC,OAAe,EAAE,GAAG,IAAc,EAAE,EAAE,CAChD,2BAAkB,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAwB;SACrF,CAAC;KACL,CAAC,CAAA;AACN,CAAC,CAAA;AAXY,QAAA,WAAW,eAWvB"}

package/dist/server/oracle/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./redis-cache-manager";
+export * from "./rmq-manager";
+export * from "./types";

package/dist/server/oracle/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./redis-cache-manager"), exports);
+__exportStar(require("./rmq-manager"), exports);
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/server/oracle/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/oracle/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAqC;AACrC,gDAA6B;AAC7B,0CAAuB"}

package/dist/server/oracle/redis-cache-manager/cache.keys.utils.d.ts

@@ -0,0 +1,90 @@
+/**
+ * @memberof RedisCacheKeysUtils
+ * @description Key for storing the mapping of fixture ids to levr ids in redis
+ *
+ */
+import { MarketType } from "../../prisma";
+export declare const providerFixtureIdToLevrId = "provider_fixture_id_to_levrId";
+export declare const levrIdToProviderIds = "levr_id_to_provider_ids";
+export declare const queueBlockHashKey = "queue_block_key";
+export declare enum GameCollectionKeys {
+    activeGamesHash = "active_games_hash",
+    postGamesHash = "post_games_hash"
+}
+export declare enum RedisNumStates {
+    success = 1,
+    failure = 0
+}
+export declare const schedulesHash = "schedules_hash";
+export declare const gameIdsToLevrFixtureIdsMap = "game_ids_to_levr_ids";
+/**
+ * @memberof RedisCacheKeysUtils
+ * @description Key for storing the mapping of levr ids to fixture ids in redis
+ */
+export declare const gameIdsToFixtureIds = "game_ids_to_fixture_ids";
+/**
+ * @memberof RedisCacheKeysUtils
+ * @description stores the list of scores for the given gameId appended to it
+ */
+export declare const getGameScoreByFixtureIdHash = "game_scores_by_fixture_id_hash";
+/**
+ * @memberof RedisCacheKeysUtils
+ * @description stores the list of all levr games in cache
+ */
+export declare const levrGames = "levr_games";
+export declare const gameToMarketOfOddsInCache = "game_to_market_ids_of_odds_in_cache_";
+/**
+ * @memberof RedisCacheKeysUtils
+ * @description stores the game period info for the given gameId appended to it
+ * @example {
+ *  gameId: 1,
+ *  period: 1,
+ *  timeUpdated: 1714857600
+ * }
+ */
+export declare const baseBallGamePeriodInfo = "baseball_game_period_info";
+/**
+ * @memberof RedisCacheKeysUtils
+ * @description stores the full time odds for the given gameId appended to it
+ * @example {
+ *  gameId: 1,
+ *  odds:
+ * }
+ */
+export declare const marketOddsKey = "market_odds";
+export declare const marketByMarketIdKey = "market_by_market_id_";
+export declare const marketByGameUniqueIdKeyAndMarketType = "market_by_game_unique_id_";
+/**
+ * @memberof RedisCacheKeysUtils
+ * @description stores the time invalidation for the cache
+ */
+export declare const cacheTimeInvalidation = 60;
+/** @audit levr fixture ids must be the same for games across all chains */
+/**
+ * @memberof RedisCacheKeysUtils
+ * @param gameId
+ * @returns
+ */
+export declare const getMoneylineByGameIdKey: (gameId: number) => string;
+/**
+ * @memberof RedisCacheKeysUtils
+ * @param gameId
+ * @returns
+ */
+export declare const getCacheLevrGameIdKey: (gameId: number) => string;
+/**
+ * @memberof RedisCacheKeysUtils
+ * @param fixtureId
+ * @returns
+ */
+export declare const getCachedLevrByFixtureIdKey: (fixtureId: string, chainId: number) => string;
+export declare const getMarketOddsField: (gameUniqueId: string, marketType: MarketType) => string;
+export declare const getProviderIdsToLevrFixtureIdKey: (providerId: string) => string;
+export declare const getLevrFixtureIdToProviderIdsKey: (levrFixtureId: string) => string;
+export declare const getMarketOddsByMarketIdKey: (marketId: string) => string;
+export declare const getMarketOddsByGameUniqueIdKeyAndMarketType: (gameUniqueId: string) => string;
+export declare const getGameToMarketsOfOddsInCacheKey: (gameUniqueId: string) => string;
+export declare const getCompletedMarketsKey: (marketType: MarketType) => string;
+export declare const getCompletedMarketsField: (gameUniqueId: string, marketType: MarketType) => string;
+export declare const getGamesKeyByChainId: (gameCollectionKey: GameCollectionKeys, chainId: number) => string;
+export declare const getRevokedApiKey: (keyId: string) => string;