@loopstack/auth 0.8.0 → 0.9.0

package/dist/guards/index.d.ts

@@ -1,5 +1,2 @@
 export * from './jwt-auth.guard';
-export * from './local-auth.guard';
 export * from './roles.guard';
-export * from './google-auth.guard';
-export * from './dev-auth.guard';

package/dist/guards/index.js

@@ -15,8 +15,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./jwt-auth.guard"), exports);
-__exportStar(require("./local-auth.guard"), exports);
 __exportStar(require("./roles.guard"), exports);
-__exportStar(require("./google-auth.guard"), exports);
-__exportStar(require("./dev-auth.guard"), exports);
 //# sourceMappingURL=index.js.map

package/dist/guards/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/guards/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAgC;AAChC,qDAAkC;AAClC,gDAA6B;AAC7B,sDAAmC;AACnC,mDAAgC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/guards/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAgC;AAChC,gDAA6B"}

package/dist/guards/jwt-auth.guard.d.ts

@@ -1,9 +1,11 @@
 import { ExecutionContext } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
+import { ConfigService } from '@nestjs/config';
 declare const JwtAuthGuard_base: import("@nestjs/passport").Type<import("@nestjs/passport").IAuthGuard>;
 export declare class JwtAuthGuard extends JwtAuthGuard_base {
-    private reflector;
-    constructor(reflector: Reflector);
-    canActivate(context: ExecutionContext): boolean | Promise<boolean> | import("rxjs").Observable<boolean>;
+    private readonly reflector;
+    private readonly configService;
+    constructor(reflector: Reflector, configService: ConfigService);
+    canActivate(context: ExecutionContext): Promise<boolean>;
 }
 export {};

package/dist/guards/jwt-auth.guard.js

@@ -14,13 +14,16 @@ const common_1 = require("@nestjs/common");
 const core_1 = require("@nestjs/core");
 const passport_1 = require("@nestjs/passport");
 const shared_1 = require("@loopstack/shared");
+const config_1 = require("@nestjs/config");
 let JwtAuthGuard = class JwtAuthGuard extends (0, passport_1.AuthGuard)('jwt') {
     reflector;
-    constructor(reflector) {
+    configService;
+    constructor(reflector, configService) {
         super();
         this.reflector = reflector;
+        this.configService = configService;
     }
-    canActivate(context) {
+    async canActivate(context) {
         const isPublic = this.reflector.getAllAndOverride(shared_1.IS_PUBLIC_KEY, [
             context.getHandler(),
             context.getClass(),
@@ -28,12 +31,19 @@ let JwtAuthGuard = class JwtAuthGuard extends (0, passport_1.AuthGuard)('jwt') {
         if (isPublic) {
             return true;
         }
-        return super.canActivate(context);
+        const result = await super.canActivate(context);
+        if (!result) {
+            return false;
+        }
+        const { user } = context.switchToHttp().getRequest();
+        const clientId = this.configService.get('auth.clientId');
+        return clientId === user.workerId;
     }
 };
 exports.JwtAuthGuard = JwtAuthGuard;
 exports.JwtAuthGuard = JwtAuthGuard = __decorate([
     (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [core_1.Reflector])
+    __metadata("design:paramtypes", [core_1.Reflector,
+        config_1.ConfigService])
 ], JwtAuthGuard);
 //# sourceMappingURL=jwt-auth.guard.js.map

package/dist/guards/jwt-auth.guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-auth.guard.js","sourceRoot":"","sources":["../../src/guards/jwt-auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA8D;AAC9D,uCAAyC;AACzC,+CAA6C;AAC7C,8CAAkD;AAG3C,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,IAAA,oBAAS,EAAC,KAAK,CAAC;IAC5B;IAApB,YAAoB,SAAoB;QACtC,KAAK,EAAE,CAAC;QADU,cAAS,GAAT,SAAS,CAAW;IAExC,CAAC;IAED,WAAW,CAAC,OAAyB;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,sBAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;CACF,CAAA;AAfY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAEoB,gBAAS;GAD7B,YAAY,CAexB"}
+{"version":3,"file":"jwt-auth.guard.js","sourceRoot":"","sources":["../../src/guards/jwt-auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA8D;AAC9D,uCAAyC;AACzC,+CAA6C;AAC7C,8CAAwE;AACxE,2CAA+C;AAGxC,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,IAAA,oBAAS,EAAC,KAAK,CAAC;IAE7B;IACA;IAFnB,YACmB,SAAoB,EACpB,aAA4B;QAE7C,KAAK,EAAE,CAAC;QAHS,cAAS,GAAT,SAAS,CAAW;QACpB,kBAAa,GAAb,aAAa,CAAe;IAG/C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,sBAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QAOD,MAAM,EAAE,IAAI,EAAE,GAAmC,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,CAAC;QACjE,OAAO,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC;IACpC,CAAC;CACF,CAAA;AAjCY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAGmB,gBAAS;QACL,sBAAa;GAHpC,YAAY,CAiCxB"}

package/dist/guards/worker-auth.guard.d.ts

@@ -0,0 +1,7 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+export declare class WorkerAuthGuard implements CanActivate {
+    private readonly configService;
+    constructor(configService: ConfigService);
+    canActivate(context: ExecutionContext): boolean;
+}

package/dist/{strategies/dev.strategy.js → guards/worker-auth.guard.js}

@@ -9,28 +9,23 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DevStrategy = void 0;
-const passport_1 = require("@nestjs/passport");
+exports.WorkerAuthGuard = void 0;
 const common_1 = require("@nestjs/common");
-const passport_custom_1 = require("passport-custom");
-let DevStrategy = class DevStrategy extends (0, passport_1.PassportStrategy)(passport_custom_1.Strategy, 'dev') {
-    constructor() {
-        super();
+const config_1 = require("@nestjs/config");
+let WorkerAuthGuard = class WorkerAuthGuard {
+    configService;
+    constructor(configService) {
+        this.configService = configService;
     }
-    async validate(req) {
-        return {
-            id: null,
-            email: 'dev@localhost',
-            firstName: 'Dev',
-            lastName: 'User',
-            roles: [],
-            isActive: true,
-        };
+    canActivate(context) {
+        const { user } = context.switchToHttp().getRequest();
+        const clientId = this.configService.get('auth.clientId');
+        return clientId === user.workerId;
     }
 };
-exports.DevStrategy = DevStrategy;
-exports.DevStrategy = DevStrategy = __decorate([
+exports.WorkerAuthGuard = WorkerAuthGuard;
+exports.WorkerAuthGuard = WorkerAuthGuard = __decorate([
     (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [])
-], DevStrategy);
-//# sourceMappingURL=dev.strategy.js.map
+    __metadata("design:paramtypes", [config_1.ConfigService])
+], WorkerAuthGuard);
+//# sourceMappingURL=worker-auth.guard.js.map

package/dist/guards/worker-auth.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-auth.guard.js","sourceRoot":"","sources":["../../src/guards/worker-auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA2E;AAC3E,2CAA+C;AAaxC,IAAM,eAAe,GAArB,MAAM,eAAe;IACG;IAA7B,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAE7D,WAAW,CAAC,OAAyB;QACnC,MAAM,EAAE,IAAI,EAAE,GAAmC,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,CAAC;QACjE,OAAO,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC;IACpC,CAAC;CACF,CAAA;AARY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;qCAEiC,sBAAa;GAD9C,eAAe,CAQ3B"}

package/dist/index.d.ts

@@ -6,4 +6,3 @@ export * from './guards';
 export * from './interfaces';
 export * from './repositories';
 export * from './services';
-export * from './services';

package/dist/index.js

@@ -22,5 +22,4 @@ __exportStar(require("./guards"), exports);
 __exportStar(require("./interfaces"), exports);
 __exportStar(require("./repositories"), exports);
 __exportStar(require("./services"), exports);
-__exportStar(require("./services"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gDAA6B;AAC7B,2DAAwC;AACxC,8CAA2B;AAE3B,gDAA6B;AAC7B,2CAAwB;AACxB,+CAA4B;AAC5B,iDAA8B;AAC9B,6CAA0B;AAC1B,6CAA0B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gDAA6B;AAC7B,2DAAwC;AACxC,8CAA2B;AAE3B,gDAA6B;AAC7B,2CAAwB;AACxB,+CAA4B;AAC5B,iDAA8B;AAC9B,6CAA0B"}

package/dist/interfaces/auth-config.interface.d.ts

@@ -1,12 +1,4 @@
-import { AuthStrategy } from '@loopstack/shared';
-export interface OAuthProviderConfig {
-    clientId: string;
-    clientSecret: string;
-    callbackUrl: string;
-    scope?: string[];
-}
 export interface AuthConfig {
-    strategies: AuthStrategy[];
     jwt?: {
         secret: string;
         expiresIn: string;
@@ -14,9 +6,7 @@ export interface AuthConfig {
         refreshExpiresIn?: string;
         cookieDomain?: string;
     };
-    oauth?: {
-        google?: OAuthProviderConfig;
-        github?: OAuthProviderConfig;
-        facebook?: OAuthProviderConfig;
-    };
+    clientId?: string;
+    clientSecret?: string;
+    authCallback?: string;
 }

package/dist/interfaces/hub-service.interfaces.d.ts

@@ -0,0 +1,16 @@
+export interface HubConfig {
+    authCallback: string;
+    clientId: string;
+    clientSecret: string;
+    timeout?: number;
+    retries?: number;
+    cacheEnabled?: boolean;
+    cacheTtlSeconds?: number;
+}
+export interface RequestContext {
+    correlationId: string;
+    requestId?: string;
+    userId?: string;
+    clientIp?: string;
+    userAgent?: string;
+}

package/dist/interfaces/hub-service.interfaces.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=hub-service.interfaces.js.map

package/dist/interfaces/hub-service.interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-service.interfaces.js","sourceRoot":"","sources":["../../src/interfaces/hub-service.interfaces.ts"],"names":[],"mappings":""}

package/dist/repositories/user.repository.d.ts

@@ -4,7 +4,6 @@ export declare class UserRepository {
     private repository;
     constructor(repository: Repository<User>);
     findById(id: string): Promise<User | null>;
-    findByEmail(email: string): Promise<User | null>;
     create(userData: Partial<User>): Promise<User>;
     update(id: string, userData: Partial<User>): Promise<User | null>;
 }

package/dist/repositories/user.repository.js

@@ -28,12 +28,6 @@ let UserRepository = class UserRepository {
             relations: ['roles', 'roles.permissions'],
         });
     }
-    async findByEmail(email) {
-        return this.repository.findOne({
-            where: { email },
-            relations: ['roles', 'roles.permissions'],
-        });
-    }
     async create(userData) {
         const user = this.repository.create(userData);
         return this.repository.save(user);

package/dist/repositories/user.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.repository.js","sourceRoot":"","sources":["../../src/repositories/user.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,6CAAmD;AACnD,qCAAqC;AACrC,8CAAyC;AAGlC,IAAM,cAAc,GAApB,MAAM,cAAc;IAGf;IAFV,YAEU,UAA4B;QAA5B,eAAU,GAAV,UAAU,CAAkB;IACnC,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,SAAS,EAAE,CAAC,OAAO,EAAE,mBAAmB,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,KAAK,EAAE,EAAE,KAAK,EAAE;YAChB,SAAS,EAAE,CAAC,OAAO,EAAE,mBAAmB,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAuB;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,QAAuB;QAC9C,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;CACF,CAAA;AA7BY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,0BAAgB,EAAC,aAAI,CAAC,CAAA;qCACH,oBAAU;GAHrB,cAAc,CA6B1B"}
+{"version":3,"file":"user.repository.js","sourceRoot":"","sources":["../../src/repositories/user.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,6CAAmD;AACnD,qCAAqC;AACrC,8CAAyC;AAGlC,IAAM,cAAc,GAApB,MAAM,cAAc;IAGf;IAFV,YAEU,UAA4B;QAA5B,eAAU,GAAV,UAAU,CAAkB;IACnC,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,SAAS,EAAE,CAAC,OAAO,EAAE,mBAAmB,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAuB;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,QAAuB;QAC9C,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;CACF,CAAA;AAtBY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,0BAAgB,EAAC,aAAI,CAAC,CAAA;qCACH,oBAAU;GAHrB,cAAc,CAsB1B"}

package/dist/services/auth.service.d.ts

@@ -1,20 +1,16 @@
-import { JwtService } from '@nestjs/jwt';
 import { UserRepository } from '../repositories';
-import { PasswordService } from './password.service';
 import { TokenService } from './token.service';
-import { AuthConfig } from '../interfaces';
-import { AuthResponseDto, RegisterDto, User, UserResponseDto } from '@loopstack/shared';
+import { AuthResponseDto, User, UserResponseDto } from '@loopstack/shared';
+import { WorkerInfoDto } from '../dtos/worker-info.dto';
+import { ConfigService } from '@nestjs/config';
 export declare class AuthService {
-    private config;
+    private readonly configService;
     private userRepository;
-    private passwordService;
     private tokenService;
-    private jwtService;
-    constructor(config: AuthConfig, userRepository: UserRepository, passwordService: PasswordService, tokenService: TokenService, jwtService: JwtService);
-    validateUser(email: string, password: string): Promise<any>;
-    login(user: any): Promise<AuthResponseDto>;
-    register(registerDto: RegisterDto): Promise<UserResponseDto>;
+    constructor(configService: ConfigService, userRepository: UserRepository, tokenService: TokenService);
+    login(user: User): Promise<AuthResponseDto>;
     refresh(refreshToken: string): Promise<AuthResponseDto>;
     mapUserToResponse(user: User): UserResponseDto;
     getCurrentUser(userId: string): Promise<UserResponseDto>;
+    getWorkerHealthInfo(): WorkerInfoDto;
 }

package/dist/services/auth.service.js

@@ -8,67 +8,49 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthService = void 0;
 const common_1 = require("@nestjs/common");
-const jwt_1 = require("@nestjs/jwt");
 const repositories_1 = require("../repositories");
-const password_service_1 = require("./password.service");
 const token_service_1 = require("./token.service");
-const constants_1 = require("../constants");
+const worker_info_dto_1 = require("../dtos/worker-info.dto");
+const class_transformer_1 = require("class-transformer");
+const config_1 = require("@nestjs/config");
 let AuthService = class AuthService {
-    config;
+    configService;
     userRepository;
-    passwordService;
     tokenService;
-    jwtService;
-    constructor(config, userRepository, passwordService, tokenService, jwtService) {
-        this.config = config;
+    constructor(configService, userRepository, tokenService) {
+        this.configService = configService;
         this.userRepository = userRepository;
-        this.passwordService = passwordService;
         this.tokenService = tokenService;
-        this.jwtService = jwtService;
-    }
-    async validateUser(email, password) {
-        const user = await this.userRepository.findByEmail(email);
-        if (user && await this.passwordService.compare(password, user.password)) {
-            const { password, ...result } = user;
-            return result;
-        }
-        return null;
     }
     async login(user) {
-        const tokens = await this.tokenService.generateTokens(user);
+        const workerId = this.configService.get('auth.clientId');
+        const payload = {
+            sub: user.id,
+            roles: user.roles?.map(role => role.name) || [],
+            workerId,
+        };
+        const tokens = await this.tokenService.generateTokens(payload);
         return {
             ...tokens,
             tokenType: 'Bearer',
         };
     }
-    async register(registerDto) {
-        const existingUser = await this.userRepository.findByEmail(registerDto.email);
-        if (existingUser) {
-            throw new common_1.ConflictException('User already exists');
-        }
-        const hashedPassword = await this.passwordService.hash(registerDto.password);
-        const user = await this.userRepository.create({
-            ...registerDto,
-            password: hashedPassword,
-        });
-        return this.mapUserToResponse(user);
-    }
     async refresh(refreshToken) {
         try {
-            const payload = this.jwtService.verify(refreshToken, {
-                secret: this.config.jwt?.refreshSecret || this.config.jwt?.secret,
-            });
+            const payload = this.tokenService.verifyRefreshToken(refreshToken);
             const user = await this.userRepository.findById(payload.sub);
             if (!user || !user.isActive) {
                 throw new common_1.UnauthorizedException('Invalid refresh token');
             }
-            const tokens = await this.tokenService.generateTokens(user);
+            const newPayload = {
+                sub: payload.sub,
+                workerId: payload.workerId,
+                roles: user.roles?.map(role => role.name) || [],
+            };
+            const tokens = await this.tokenService.generateTokens(newPayload);
             return {
                 ...tokens,
                 tokenType: 'Bearer',
@@ -81,9 +63,6 @@ let AuthService = class AuthService {
     mapUserToResponse(user) {
         return {
             id: user.id,
-            email: user.email,
-            firstName: user.firstName,
-            lastName: user.lastName,
             isActive: user.isActive,
             roles: user.roles?.map(role => role.name) || [],
             createdAt: user.createdAt,
@@ -97,14 +76,21 @@ let AuthService = class AuthService {
         }
         return this.mapUserToResponse(user);
     }
+    getWorkerHealthInfo() {
+        return (0, class_transformer_1.plainToInstance)(worker_info_dto_1.WorkerInfoDto, {
+            clientId: this.configService.get('auth.clientId'),
+            isConfigured: !!this.configService.get('auth.clientSecret'),
+            timestamp: new Date(),
+        }, {
+            excludeExtraneousValues: true,
+        });
+    }
 };
 exports.AuthService = AuthService;
 exports.AuthService = AuthService = __decorate([
     (0, common_1.Injectable)(),
-    __param(0, (0, common_1.Inject)(constants_1.AUTH_CONFIG)),
-    __metadata("design:paramtypes", [Object, repositories_1.UserRepository,
-        password_service_1.PasswordService,
-        token_service_1.TokenService,
-        jwt_1.JwtService])
+    __metadata("design:paramtypes", [config_1.ConfigService,
+        repositories_1.UserRepository,
+        token_service_1.TokenService])
 ], AuthService);
 //# sourceMappingURL=auth.service.js.map

package/dist/services/auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA8F;AAC9F,qCAAyC;AACzC,kDAAiD;AACjD,yDAAqD;AACrD,mDAA+C;AAE/C,4CAA2C;AAIpC,IAAM,WAAW,GAAjB,MAAM,WAAW;IAES;IACrB;IACA;IACA;IACA;IALV,YAC+B,MAAkB,EACvC,cAA8B,EAC9B,eAAgC,EAChC,YAA0B,EAC1B,UAAsB;QAJD,WAAM,GAAN,MAAM,CAAY;QACvC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,oBAAe,GAAf,eAAe,CAAiB;QAChC,iBAAY,GAAZ,YAAY,CAAc;QAC1B,eAAU,GAAV,UAAU,CAAY;IAC7B,CAAC;IAEJ,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,QAAgB;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,IAAI,IAAI,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;YACrC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAS;QACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO;YACL,GAAG,MAAM;YACT,SAAS,EAAE,QAAQ;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAwB;QACrC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC9E,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,0BAAiB,CAAC,qBAAqB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC5C,GAAG,WAAW;YACd,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE;gBACnD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM;aAClE,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC5D,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,QAAQ;aACpB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,IAAU;QAC1B,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAC/C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CAEF,CAAA;AAnFY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,uBAAW,CAAC,CAAA;6CACI,6BAAc;QACb,kCAAe;QAClB,4BAAY;QACd,gBAAU;GANrB,WAAW,CAmFvB"}
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA2E;AAC3E,kDAAiD;AACjD,mDAA+C;AAM/C,6DAAwD;AACxD,yDAAoD;AACpD,2CAA+C;AAGxC,IAAM,WAAW,GAAjB,MAAM,WAAW;IAEH;IACT;IACA;IAHV,YACmB,aAA4B,EACrC,cAA8B,EAC9B,YAA0B;QAFjB,kBAAa,GAAb,aAAa,CAAe;QACrC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,iBAAY,GAAZ,YAAY,CAAc;IACjC,CAAC;IAEJ,KAAK,CAAC,KAAK,CAAC,IAAU;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACzD,MAAM,OAAO,GAAwB;YACnC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAC/C,QAAQ;SACT,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC/D,OAAO;YACL,GAAG,MAAM;YACT,SAAS,EAAE,QAAQ;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAEnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;YAC3D,CAAC;YAGD,MAAM,UAAU,GAAG;gBACjB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;aAChD,CAAA;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAClE,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,QAAQ;aACpB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,IAAU;QAC1B,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAC/C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAA,mCAAe,EAAC,+BAAa,EAAE;YACpC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC;YACzD,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,mBAAmB,CAAC;YACnE,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,EAAE;YACD,uBAAuB,EAAE,IAAI;SAC9B,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA3EY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAGuB,sBAAa;QACrB,6BAAc;QAChB,4BAAY;GAJzB,WAAW,CA2EvB"}

package/dist/services/config-validation.service.d.ts

@@ -0,0 +1,8 @@
+import { OnModuleInit } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+export declare class ConfigValidationService implements OnModuleInit {
+    private configService;
+    constructor(configService: ConfigService);
+    onModuleInit(): void;
+    private validateAuthConfig;
+}

package/dist/services/config-validation.service.js

@@ -0,0 +1,44 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigValidationService = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+let ConfigValidationService = class ConfigValidationService {
+    configService;
+    constructor(configService) {
+        this.configService = configService;
+    }
+    onModuleInit() {
+        this.validateAuthConfig();
+    }
+    validateAuthConfig() {
+        const requiredConfigs = [
+            { key: 'auth.jwt.secret', name: 'JWT_SECRET' },
+        ];
+        const missingConfigs = [];
+        requiredConfigs.forEach(({ key, name }) => {
+            const value = this.configService.get(key);
+            if (!value) {
+                missingConfigs.push(name);
+            }
+        });
+        if (missingConfigs.length > 0) {
+            throw new Error(`Missing required configuration values: ${missingConfigs.join(', ')}`);
+        }
+    }
+};
+exports.ConfigValidationService = ConfigValidationService;
+exports.ConfigValidationService = ConfigValidationService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [config_1.ConfigService])
+], ConfigValidationService);
+//# sourceMappingURL=config-validation.service.js.map

package/dist/services/config-validation.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-validation.service.js","sourceRoot":"","sources":["../../src/services/config-validation.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA0D;AAC1D,2CAA+C;AAGxC,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACd;IAApB,YAAoB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAEpD,YAAY;QACV,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAEO,kBAAkB;QACxB,MAAM,eAAe,GAAG;YAGtB,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE;SAC/C,CAAC;QAEF,MAAM,cAAc,GAAa,EAAE,CAAC;QAEpC,eAAe,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,0CAA0C,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AA7BY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;qCAEwB,sBAAa;GADrC,uBAAuB,CA6BnC"}

package/dist/services/hub-audit.service.d.ts

@@ -0,0 +1,14 @@
+import { RequestContext } from '../interfaces/hub-service.interfaces';
+export interface HubAuditEvent {
+    action: string;
+    context: RequestContext;
+    success: boolean;
+    responseTime?: number;
+    error?: string;
+    metadata?: Record<string, any>;
+}
+export declare class HubAuditService {
+    private readonly logger;
+    logCodeExchange(context: RequestContext, success: boolean, responseTime: number, error?: string, metadata?: Record<string, any>): Promise<void>;
+    private sanitizeEvent;
+}

package/dist/services/hub-audit.service.js

@@ -0,0 +1,47 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var HubAuditService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HubAuditService = void 0;
+const common_1 = require("@nestjs/common");
+let HubAuditService = HubAuditService_1 = class HubAuditService {
+    logger = new common_1.Logger(HubAuditService_1.name);
+    async logCodeExchange(context, success, responseTime, error, metadata) {
+        const event = {
+            action: 'HUB_CODE_EXCHANGE',
+            context,
+            success,
+            responseTime,
+            error,
+            metadata: {
+                ...metadata,
+                timestamp: new Date().toISOString(),
+            },
+        };
+        if (success) {
+            this.logger.log(`HUB_AUDIT: ${JSON.stringify(this.sanitizeEvent(event))}`);
+        }
+        else {
+            this.logger.error(`HUB_AUDIT_FAILURE: ${JSON.stringify(this.sanitizeEvent(event))}`);
+        }
+    }
+    sanitizeEvent(event) {
+        return {
+            ...event,
+            context: {
+                ...event.context,
+                userId: event.context.userId ? `${event.context.userId.substring(0, 8)}...` : undefined,
+            },
+        };
+    }
+};
+exports.HubAuditService = HubAuditService;
+exports.HubAuditService = HubAuditService = HubAuditService_1 = __decorate([
+    (0, common_1.Injectable)()
+], HubAuditService);
+//# sourceMappingURL=hub-audit.service.js.map

package/dist/services/hub-audit.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-audit.service.js","sourceRoot":"","sources":["../../src/services/hub-audit.service.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAoD;AAa7C,IAAM,eAAe,uBAArB,MAAM,eAAe;IACT,MAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IAE3D,KAAK,CAAC,eAAe,CACnB,OAAuB,EACvB,OAAgB,EAChB,YAAoB,EACpB,KAAc,EACd,QAA8B;QAE9B,MAAM,KAAK,GAAkB;YAC3B,MAAM,EAAE,mBAAmB;YAC3B,OAAO;YACP,OAAO;YACP,YAAY;YACZ,KAAK;YACL,QAAQ,EAAE;gBACR,GAAG,QAAQ;gBACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC;SACF,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,KAAoB;QACxC,OAAO;YACL,GAAG,KAAK;YACR,OAAO,EAAE;gBACP,GAAG,KAAK,CAAC,OAAO;gBAChB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACxF;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAtCY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CAsC3B"}

package/dist/services/hub.service.d.ts

@@ -0,0 +1,20 @@
+import { OnModuleInit } from '@nestjs/common';
+import { IValidateCodeResponse } from '@loopstack/shared';
+import { ConfigService } from '@nestjs/config';
+import { RequestContext } from '../interfaces/hub-service.interfaces';
+import { HubAuditService } from './hub-audit.service';
+export declare class HubService implements OnModuleInit {
+    private readonly configService;
+    private readonly auditService;
+    private readonly logger;
+    private axiosInstance;
+    private config;
+    constructor(configService: ConfigService, auditService: HubAuditService);
+    onModuleInit(): Promise<void>;
+    private initialize;
+    private loadConfiguration;
+    private validateConfiguration;
+    private setupAxiosInterceptors;
+    private retryOperation;
+    exchangeCodeForUserInfo(code: string, context?: RequestContext): Promise<IValidateCodeResponse>;
+}