@loopstack/auth 0.8.0 → 0.9.0

package/dist/services/hub.service.js

@@ -0,0 +1,179 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var HubService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HubService = void 0;
+const common_1 = require("@nestjs/common");
+const axios_1 = require("axios");
+const config_1 = require("@nestjs/config");
+const hub_audit_service_1 = require("./hub-audit.service");
+const hub_exceptions_1 = require("../exceptions/hub.exceptions");
+let HubService = HubService_1 = class HubService {
+    configService;
+    auditService;
+    logger = new common_1.Logger(HubService_1.name);
+    axiosInstance;
+    config;
+    constructor(configService, auditService) {
+        this.configService = configService;
+        this.auditService = auditService;
+    }
+    async onModuleInit() {
+        await this.initialize();
+    }
+    async initialize() {
+        try {
+            this.config = this.loadConfiguration();
+            this.validateConfiguration();
+            this.axiosInstance = axios_1.default.create({
+                timeout: this.config.timeout || 10000,
+                headers: {
+                    'Content-Type': 'application/json',
+                    'User-Agent': 'HubService/1.0',
+                },
+            });
+            this.setupAxiosInterceptors();
+            this.logger.log('Hub service initialized successfully');
+        }
+        catch (error) {
+            this.logger.error('Failed to initialize Hub service:', error);
+            throw new hub_exceptions_1.HubConfigurationException('Service initialization failed');
+        }
+    }
+    loadConfiguration() {
+        const authConfig = this.configService.get('auth');
+        return {
+            authCallback: authConfig?.authCallback,
+            clientId: authConfig?.clientId,
+            clientSecret: authConfig?.clientSecret,
+            timeout: 10000,
+            retries: 3,
+        };
+    }
+    validateConfiguration() {
+        const required = ['authCallback'];
+        const missing = required.filter(field => !this.config[field]);
+        if (missing.length > 0) {
+            throw new hub_exceptions_1.HubConfigurationException(`Missing required fields: ${missing.join(', ')}`);
+        }
+        try {
+            new URL(this.config.authCallback);
+        }
+        catch {
+            throw new hub_exceptions_1.HubConfigurationException('Invalid authCallback URL format');
+        }
+        this.logger.log('Configuration validated successfully');
+    }
+    setupAxiosInterceptors() {
+        this.axiosInstance.interceptors.request.use((config) => {
+            this.logger.debug(`Making request to: ${config.url}`);
+            return config;
+        }, (error) => {
+            this.logger.error('Request interceptor error:', error);
+            return Promise.reject(error);
+        });
+        this.axiosInstance.interceptors.response.use((response) => {
+            this.logger.debug(`Response received: ${response.status}`);
+            return response;
+        }, (error) => {
+            this.logger.error(`Response error: ${error.response?.status} - ${error.message}`);
+            return Promise.reject(error);
+        });
+    }
+    async retryOperation(operation, maxRetries = 3, delay = 1000) {
+        let lastError = undefined;
+        for (let attempt = 1; attempt <= maxRetries; attempt++) {
+            try {
+                return await operation();
+            }
+            catch (error) {
+                lastError = error;
+                if (error instanceof axios_1.AxiosError && error.response?.status && error.response?.status >= 400 && error.response?.status < 500) {
+                    throw error;
+                }
+                if (attempt < maxRetries) {
+                    this.logger.warn(`Attempt ${attempt} failed, retrying in ${delay}ms: ${error.message}`);
+                    await new Promise(resolve => setTimeout(resolve, delay * attempt));
+                }
+            }
+        }
+        throw lastError;
+    }
+    async exchangeCodeForUserInfo(code, context) {
+        const requestContext = {
+            correlationId: context?.correlationId || 'no-correlation-id',
+            requestId: context?.requestId,
+            userId: context?.userId,
+            clientIp: context?.clientIp,
+            userAgent: context?.userAgent,
+        };
+        const startTime = Date.now();
+        this.logger.log(`[${requestContext.correlationId}] Exchanging authorization code for user info`);
+        try {
+            const result = await this.retryOperation(async () => {
+                const response = await this.axiosInstance.post(this.config.authCallback, {
+                    code,
+                    clientId: this.config.clientId,
+                }, {
+                    headers: {
+                        'Authorization': `Bearer ${this.config.clientSecret}`,
+                        'X-Correlation-ID': requestContext.correlationId,
+                        'X-Request-ID': requestContext.requestId || requestContext.correlationId,
+                    },
+                });
+                return response.data;
+            }, this.config.retries);
+            const responseTime = Date.now() - startTime;
+            await this.auditService.logCodeExchange(requestContext, true, responseTime);
+            this.logger.log(`[${requestContext.correlationId}] Code exchange successful in ${responseTime}ms`);
+            return result;
+        }
+        catch (error) {
+            const responseTime = Date.now() - startTime;
+            let thrownError;
+            if (error instanceof axios_1.AxiosError) {
+                const status = error.response?.status;
+                if (status === 400) {
+                    thrownError = new hub_exceptions_1.InvalidAuthCodeException();
+                }
+                else if (status === 401) {
+                    thrownError = new hub_exceptions_1.HubAuthenticationException();
+                }
+                else if (error.code === 'ECONNABORTED') {
+                    thrownError = new hub_exceptions_1.HubTimeoutException();
+                }
+                else if (status && status >= 500) {
+                    thrownError = new hub_exceptions_1.HubServiceUnavailableException();
+                }
+                else {
+                    thrownError = new common_1.BadRequestException('Failed to validate authorization code');
+                }
+            }
+            else {
+                this.logger.error(`[${requestContext.correlationId}] Unexpected error during code exchange:`, error);
+                thrownError = new common_1.BadGatewayException('Hub service communication error');
+            }
+            await this.auditService.logCodeExchange(requestContext, false, responseTime, thrownError.message, {
+                errorType: error.constructor.name,
+                statusCode: error instanceof axios_1.AxiosError ? error.response?.status : undefined
+            });
+            this.logger.error(`[${requestContext.correlationId}] Code exchange failed in ${responseTime}ms: ${thrownError.message}`);
+            throw thrownError;
+        }
+    }
+};
+exports.HubService = HubService;
+exports.HubService = HubService = HubService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [config_1.ConfigService,
+        hub_audit_service_1.HubAuditService])
+], HubService);
+//# sourceMappingURL=hub.service.js.map

package/dist/services/hub.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub.service.js","sourceRoot":"","sources":["../../src/services/hub.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA4G;AAC5G,iCAAwE;AAExE,2CAA+C;AAE/C,2DAAsD;AACtD,iEAIsC;AAG/B,IAAM,UAAU,kBAAhB,MAAM,UAAU;IAMF;IACA;IANF,MAAM,GAAG,IAAI,eAAM,CAAC,YAAU,CAAC,IAAI,CAAC,CAAC;IAC9C,aAAa,CAAgB;IAC7B,MAAM,CAAY;IAE1B,YACmB,aAA4B,EAC5B,YAA6B;QAD7B,kBAAa,GAAb,aAAa,CAAe;QAC5B,iBAAY,GAAZ,YAAY,CAAiB;IAC7C,CAAC;IAEJ,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAE7B,IAAI,CAAC,aAAa,GAAG,eAAK,CAAC,MAAM,CAAC;gBAChC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK;gBACrC,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,gBAAgB;iBAC/B;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAE9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC9D,MAAM,IAAI,0CAAyB,CAAC,+BAA+B,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,iBAAiB;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAElD,OAAO;YACL,YAAY,EAAE,UAAU,EAAE,YAAY;YACtC,QAAQ,EAAE,UAAU,EAAE,QAAQ;YAC9B,YAAY,EAAE,UAAU,EAAE,YAAY;YACtC,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,CAAC;SACX,CAAC;IACJ,CAAC;IAEO,qBAAqB;QAC3B,MAAM,QAAQ,GAAG,CAAC,cAAc,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAE9D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,0CAAyB,CAAC,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,0CAAyB,CAAC,iCAAiC,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAEO,sBAAsB;QAC5B,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CACzC,CAAC,MAAM,EAAE,EAAE;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACtD,OAAO,MAAM,CAAC;QAChB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAC1C,CAAC,QAAQ,EAAE,EAAE;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3D,OAAO,QAAQ,CAAC;QAClB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,QAAQ,EAAE,MAAM,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAClF,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,SAA2B,EAC3B,aAAqB,CAAC,EACtB,QAAgB,IAAI;QAEpB,IAAI,SAAS,GAAsB,SAAS,CAAC;QAE7C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,OAAO,MAAM,SAAS,EAAE,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAGlB,IAAI,KAAK,YAAY,kBAAU,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,EAAE,CAAC;oBAC3H,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,OAAO,wBAAwB,KAAK,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;oBACxF,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,SAAS,CAAE;IACnB,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,IAAY,EACZ,OAAwB;QAExB,MAAM,cAAc,GAAmB;YACrC,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,mBAAmB;YAC5D,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,SAAS,EAAE,OAAO,EAAE,SAAS;SAC9B,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,IAAI,cAAc,CAAC,aAAa,+CAA+C,CAChF,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE;gBAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAK5C,IAAI,CAAC,MAAM,CAAC,YAAY,EACxB;oBACE,IAAI;oBACJ,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;iBAC/B,EACD;oBACE,OAAO,EAAE;wBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE;wBACrD,kBAAkB,EAAE,cAAc,CAAC,aAAa;wBAChD,cAAc,EAAE,cAAc,CAAC,SAAS,IAAI,cAAc,CAAC,aAAa;qBACzE;iBACF,CACF,CAAC;gBAEF,OAAO,QAAQ,CAAC,IAAI,CAAC;YACvB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAExB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE5C,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CACrC,cAAc,EACd,IAAI,EACJ,YAAY,CACb,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,IAAI,cAAc,CAAC,aAAa,iCAAiC,YAAY,IAAI,CAClF,CAAC;YAEF,OAAO,MAAM,CAAC;QAEhB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE5C,IAAI,WAAkB,CAAC;YAEvB,IAAI,KAAK,YAAY,kBAAU,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEtC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnB,WAAW,GAAG,IAAI,yCAAwB,EAAE,CAAC;gBAC/C,CAAC;qBAAM,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC1B,WAAW,GAAG,IAAI,2CAA0B,EAAE,CAAC;gBACjD,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBACzC,WAAW,GAAG,IAAI,oCAAmB,EAAE,CAAC;gBAC1C,CAAC;qBAAM,IAAI,MAAM,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;oBACnC,WAAW,GAAG,IAAI,+CAA8B,EAAE,CAAC;gBACrD,CAAC;qBAAM,CAAC;oBACN,WAAW,GAAG,IAAI,4BAAmB,CAAC,uCAAuC,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,IAAI,cAAc,CAAC,aAAa,0CAA0C,EAC1E,KAAK,CACN,CAAC;gBACF,WAAW,GAAG,IAAI,4BAAmB,CAAC,iCAAiC,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CACrC,cAAc,EACd,KAAK,EACL,YAAY,EACZ,WAAW,CAAC,OAAO,EACnB;gBACE,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI;gBACjC,UAAU,EAAE,KAAK,YAAY,kBAAU,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS;aAC7E,CACF,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,IAAI,cAAc,CAAC,aAAa,6BAA6B,YAAY,OAAO,WAAW,CAAC,OAAO,EAAE,CACtG,CAAC;YAEF,MAAM,WAAW,CAAC;QACpB,CAAC;IACH,CAAC;CACF,CAAA;AA1NY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;qCAOuB,sBAAa;QACd,mCAAe;GAPrC,UAAU,CA0NtB"}

package/dist/services/index.d.ts

@@ -1,4 +1,3 @@
 export * from './auth.service';
-export * from './password.service';
 export * from './token.service';
-export * from './oauth.service';
+export * from './hub.service';

package/dist/services/index.js

@@ -15,7 +15,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./auth.service"), exports);
-__exportStar(require("./password.service"), exports);
 __exportStar(require("./token.service"), exports);
-__exportStar(require("./oauth.service"), exports);
+__exportStar(require("./hub.service"), exports);
 //# sourceMappingURL=index.js.map

package/dist/services/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA8B;AAC9B,qDAAkC;AAClC,kDAA+B;AAC/B,kDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA8B;AAC9B,kDAA+B;AAC/B,gDAA6B"}

package/dist/services/token.service.d.ts

@@ -1,29 +1,33 @@
 import { JwtService } from '@nestjs/jwt';
-import { AuthConfig } from '../interfaces';
+import { JwtPayloadInterface } from '@loopstack/shared';
+import { ConfigService } from '@nestjs/config';
 export declare class TokenService {
-    private config;
+    private readonly configService;
     private jwtService;
-    constructor(config: AuthConfig, jwtService: JwtService);
+    constructor(configService: ConfigService, jwtService: JwtService);
     private getExpiresIn;
     private getRefreshExpiresIn;
+    getCookieName(suffix: string): string;
     createAccessTokenCookieOptions(): {
-        domain: string | undefined;
+        domain: any;
         httpOnly: boolean;
         secure: boolean;
         sameSite: string;
         maxAge: number;
     };
     createRefreshTokenCookieOptions(): {
-        domain: string | undefined;
+        domain: any;
         httpOnly: boolean;
         secure: boolean;
         sameSite: string;
         maxAge: number;
     };
-    generateTokens(user: any): Promise<{
+    private getRefreshSecret;
+    generateTokens(payload: JwtPayloadInterface): Promise<{
         accessToken: string;
         refreshToken: string;
         expiresIn: number;
     }>;
     private getExpiresInSeconds;
+    verifyRefreshToken(refreshToken: string): any;
 }

package/dist/services/token.service.js

@@ -8,30 +8,30 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TokenService = void 0;
 const common_1 = require("@nestjs/common");
 const jwt_1 = require("@nestjs/jwt");
-const constants_1 = require("../constants");
+const config_1 = require("@nestjs/config");
 let TokenService = class TokenService {
-    config;
+    configService;
     jwtService;
-    constructor(config, jwtService) {
-        this.config = config;
+    constructor(configService, jwtService) {
+        this.configService = configService;
         this.jwtService = jwtService;
     }
     getExpiresIn() {
-        return this.getExpiresInSeconds(this.config.jwt?.expiresIn || '1h');
+        return this.getExpiresInSeconds(this.configService.get('auth.jwt.expiresIn') || '1h');
     }
     getRefreshExpiresIn() {
-        return this.getExpiresInSeconds(this.config.jwt?.refreshExpiresIn || '7h');
+        return this.getExpiresInSeconds(this.configService.get('auth.jwt.refreshExpiresIn') || '7h');
+    }
+    getCookieName(suffix) {
+        return `${this.configService.get('auth.clientId')}-${suffix}`;
     }
     createAccessTokenCookieOptions() {
         return {
-            domain: this.config.jwt?.cookieDomain ?? undefined,
+            domain: this.configService.get('auth.jwt.cookieDomain') ?? undefined,
             httpOnly: true,
             secure: process.env.NODE_ENV === 'production',
             sameSite: 'lax',
@@ -40,24 +40,22 @@ let TokenService = class TokenService {
     }
     createRefreshTokenCookieOptions() {
         return {
-            domain: this.config.jwt?.cookieDomain ?? undefined,
+            domain: this.configService.get('auth.jwt.cookieDomain') ?? undefined,
             httpOnly: true,
             secure: process.env.NODE_ENV === 'production',
             sameSite: 'lax',
             maxAge: this.getRefreshExpiresIn() * 1000,
         };
     }
-    async generateTokens(user) {
-        const payload = {
-            sub: user.id || null,
-            email: user.email,
-            roles: user.roles?.map(role => typeof role === 'string' ? role : role.name) || [],
-        };
+    getRefreshSecret() {
+        return this.configService.get('auth.jwt.refreshSecret') ?? this.configService.get('auth.jwt.secret');
+    }
+    async generateTokens(payload) {
         const [accessToken, refreshToken] = await Promise.all([
             this.jwtService.signAsync(payload),
             this.jwtService.signAsync(payload, {
-                secret: this.config.jwt?.refreshSecret || this.config.jwt?.secret,
-                expiresIn: this.config.jwt?.refreshExpiresIn || '7d',
+                secret: this.getRefreshSecret(),
+                expiresIn: this.getRefreshExpiresIn(),
             }),
         ]);
         return {
@@ -77,11 +75,16 @@ let TokenService = class TokenService {
             default: return 3600;
         }
     }
+    verifyRefreshToken(refreshToken) {
+        return this.jwtService.verify(refreshToken, {
+            secret: this.getRefreshSecret(),
+        });
+    }
 };
 exports.TokenService = TokenService;
 exports.TokenService = TokenService = __decorate([
     (0, common_1.Injectable)(),
-    __param(0, (0, common_1.Inject)(constants_1.AUTH_CONFIG)),
-    __metadata("design:paramtypes", [Object, jwt_1.JwtService])
+    __metadata("design:paramtypes", [config_1.ConfigService,
+        jwt_1.JwtService])
 ], TokenService);
 //# sourceMappingURL=token.service.js.map

package/dist/services/token.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"token.service.js","sourceRoot":"","sources":["../../src/services/token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,qCAAyC;AAEzC,4CAA2C;AAIpC,IAAM,YAAY,GAAlB,MAAM,YAAY;IAEQ;IACrB;IAFV,YAC+B,MAAkB,EACvC,UAAsB;QADD,WAAM,GAAN,MAAM,CAAY;QACvC,eAAU,GAAV,UAAU,CAAY;IAC7B,CAAC;IAEI,YAAY;QAClB,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;IACtE,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,IAAI,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,8BAA8B;QAC5B,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,IAAI,SAAS;YAClD,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YAC7C,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI;SACnC,CAAA;IACH,CAAC;IAED,+BAA+B;QAC7B,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,IAAI,SAAS;YAClD,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YAC7C,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,GAAG,IAAI;SAC1C,CAAA;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAS;QAC5B,MAAM,OAAO,GAAwB;YACnC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;YACpB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;SAClF,CAAC;QAEF,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC;YAClC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE;gBACjC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM;gBACjE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,IAAI,IAAI;aACrD,CAAC;SACH,CAAC,CAAC;QAEH,OAAO;YACL,WAAW;YACX,YAAY;YACZ,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE;SAC/B,CAAC;IACJ,CAAC;IAEO,mBAAmB,CAAC,SAAiB;QAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/C,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,IAAI,CAAC;YAC9B,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,KAAK,CAAC;YAC/B,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;YAC5B,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC;YACvB,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;CACF,CAAA;AApEY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,uBAAW,CAAC,CAAA;6CACA,gBAAU;GAHrB,YAAY,CAoExB"}
+{"version":3,"file":"token.service.js","sourceRoot":"","sources":["../../src/services/token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,qCAAyC;AAEzC,2CAA+C;AAGxC,IAAM,YAAY,GAAlB,MAAM,YAAY;IAEJ;IACT;IAFV,YACmB,aAA4B,EACrC,UAAsB;QADb,kBAAa,GAAb,aAAa,CAAe;QACrC,eAAU,GAAV,UAAU,CAAY;IAC7B,CAAC;IAEI,YAAY;QAClB,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,IAAI,CAAC,CAAC;IACxF,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/F,CAAC;IAED,aAAa,CAAC,MAAc;QAC1B,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,MAAM,EAAE,CAAC;IAChE,CAAC;IAED,8BAA8B;QAC5B,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,SAAS;YACpE,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YAC7C,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI;SACnC,CAAA;IACH,CAAC;IAED,+BAA+B;QAC7B,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,SAAS;YACpE,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YAC7C,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,GAAG,IAAI;SAC1C,CAAA;IACH,CAAC;IAEO,gBAAgB;QACtB,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,wBAAwB,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,iBAAiB,CAAC,CAAC;IACvH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAA4B;QAC/C,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC;YAClC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE;gBACjC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE;gBAC/B,SAAS,EAAE,IAAI,CAAC,mBAAmB,EAAE;aACtC,CAAC;SACH,CAAC,CAAC;QAEH,OAAO;YACL,WAAW;YACX,YAAY;YACZ,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE;SAC/B,CAAC;IACJ,CAAC;IAEO,mBAAmB,CAAC,SAAiB;QAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/C,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,IAAI,CAAC;YAC9B,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,KAAK,CAAC;YAC/B,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;YAC5B,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC;YACvB,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,YAAoB;QACrC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE;YAC1C,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE;SAChC,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA5EY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAGuB,sBAAa;QACzB,gBAAU;GAHrB,YAAY,CA4ExB"}

package/dist/strategies/hub.strategy.d.ts

@@ -0,0 +1,17 @@
+import { Strategy } from 'passport-custom';
+import { HubService } from '../services';
+import { Request } from 'express';
+import { UserRepository } from '../repositories';
+import { ConfigService } from '@nestjs/config';
+declare const HubStrategy_base: new () => Strategy & {
+    validate(...args: any[]): unknown;
+};
+export declare class HubStrategy extends HubStrategy_base {
+    private readonly configService;
+    private readonly hubService;
+    private readonly userRepository;
+    private readonly logger;
+    constructor(configService: ConfigService, hubService: HubService, userRepository: UserRepository);
+    validate(req: Request): Promise<any>;
+}
+export {};

package/dist/strategies/hub.strategy.js

@@ -0,0 +1,67 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var HubStrategy_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HubStrategy = void 0;
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_custom_1 = require("passport-custom");
+const services_1 = require("../services");
+const repositories_1 = require("../repositories");
+const config_1 = require("@nestjs/config");
+let HubStrategy = HubStrategy_1 = class HubStrategy extends (0, passport_1.PassportStrategy)(passport_custom_1.Strategy, 'hub') {
+    configService;
+    hubService;
+    userRepository;
+    logger = new common_1.Logger(HubStrategy_1.name);
+    constructor(configService, hubService, userRepository) {
+        super();
+        this.configService = configService;
+        this.hubService = hubService;
+        this.userRepository = userRepository;
+    }
+    async validate(req) {
+        try {
+            const { code, grantType } = req.body;
+            this.logger.log('Validating SSO token exchange request');
+            if (!code || grantType !== 'authorization_code') {
+                throw new common_1.UnauthorizedException('Invalid grant type or missing code');
+            }
+            const validateCodeResponse = await this.hubService.exchangeCodeForUserInfo(code);
+            if (!validateCodeResponse.data?.id) {
+                throw new common_1.UnauthorizedException('Code exchange failed');
+            }
+            const existingUser = await this.userRepository.findById(validateCodeResponse.data?.id);
+            if (existingUser) {
+                return existingUser;
+            }
+            const user = await this.userRepository.create({
+                id: validateCodeResponse.data?.id,
+                isActive: true,
+                roles: [],
+            });
+            this.logger.log(`SSO validation successful for user ${user.id}`);
+            return user;
+        }
+        catch (error) {
+            this.logger.error('SSO validation failed:', error);
+            throw new common_1.UnauthorizedException('SSO authentication failed');
+        }
+    }
+};
+exports.HubStrategy = HubStrategy;
+exports.HubStrategy = HubStrategy = HubStrategy_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [config_1.ConfigService,
+        services_1.HubService,
+        repositories_1.UserRepository])
+], HubStrategy);
+//# sourceMappingURL=hub.strategy.js.map

package/dist/strategies/hub.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub.strategy.js","sourceRoot":"","sources":["../../src/strategies/hub.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA2E;AAC3E,+CAAoD;AACpD,qDAA2C;AAC3C,0CAAyC;AAEzC,kDAAiD;AACjD,2CAA+C;AAGxC,IAAM,WAAW,mBAAjB,MAAM,WAAY,SAAQ,IAAA,2BAAgB,EAAC,0BAAQ,EAAE,KAAK,CAAC;IAI7C;IACA;IACA;IALF,MAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAEvD,YACmB,aAA4B,EAC5B,UAAsB,EACtB,cAA8B;QAE/C,KAAK,EAAE,CAAC;QAJS,kBAAa,GAAb,aAAa,CAAe;QAC5B,eAAU,GAAV,UAAU,CAAY;QACtB,mBAAc,GAAd,cAAc,CAAgB;IAGjD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAY;QACzB,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAErC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YAEzD,IAAI,CAAC,IAAI,IAAI,SAAS,KAAK,oBAAoB,EAAE,CAAC;gBAChD,MAAM,IAAI,8BAAqB,CAAC,oCAAoC,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;YACjF,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAAqB,CAAC,sBAAsB,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvF,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;gBAC5C,EAAE,EAAE,oBAAoB,CAAC,IAAI,EAAE,EAAE;gBACjC,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,EAAE;aACV,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sCAAsC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAEjE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;YACnD,MAAM,IAAI,8BAAqB,CAAC,2BAA2B,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;CACF,CAAA;AA7CY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAKuB,sBAAa;QAChB,qBAAU;QACN,6BAAc;GANtC,WAAW,CA6CvB"}

package/dist/strategies/index.d.ts

@@ -1,4 +1,2 @@
 export * from './jwt.strategy';
-export * from './local.strategy';
-export * from './google.strategy';
-export * from './dev.strategy';
+export * from './hub.strategy';

package/dist/strategies/index.js

@@ -15,7 +15,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./jwt.strategy"), exports);
-__exportStar(require("./local.strategy"), exports);
-__exportStar(require("./google.strategy"), exports);
-__exportStar(require("./dev.strategy"), exports);
+__exportStar(require("./hub.strategy"), exports);
 //# sourceMappingURL=index.js.map

package/dist/strategies/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/strategies/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA8B;AAC9B,mDAAgC;AAChC,oDAAiC;AACjC,iDAA8B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/strategies/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA8B;AAC9B,iDAA8B"}

package/dist/strategies/jwt.strategy.d.ts

@@ -6,7 +6,7 @@ export declare class JwtStrategy extends JwtStrategy_base {
     private static extractJWTFromCookie;
     validate(payload: JwtPayloadInterface): Promise<{
         userId: string;
-        email: string;
+        workerId: string;
         roles: string[];
     }>;
 }

package/dist/strategies/jwt.strategy.js

@@ -20,25 +20,28 @@ const common_1 = require("@nestjs/common");
 const constants_1 = require("../constants");
 let JwtStrategy = JwtStrategy_1 = class JwtStrategy extends (0, passport_1.PassportStrategy)(passport_jwt_1.Strategy) {
     constructor(config) {
+        const cookieName = `${config.clientId}-access`;
         super({
             jwtFromRequest: passport_jwt_1.ExtractJwt.fromExtractors([
-                JwtStrategy_1.extractJWTFromCookie,
+                JwtStrategy_1.extractJWTFromCookie(cookieName),
                 passport_jwt_1.ExtractJwt.fromAuthHeaderAsBearerToken(),
             ]),
             ignoreExpiration: false,
             secretOrKey: config.jwt?.secret,
         });
     }
-    static extractJWTFromCookie(req) {
-        if (req.cookies && req.cookies.accessToken) {
-            return req.cookies.accessToken;
-        }
-        return null;
+    static extractJWTFromCookie(cookieName) {
+        return (req) => {
+            if (req.cookies && req.cookies[cookieName]) {
+                return req.cookies[cookieName];
+            }
+            return null;
+        };
     }
     async validate(payload) {
         return {
             userId: payload.sub,
-            email: payload.email,
+            workerId: payload.workerId,
             roles: payload.roles,
         };
     }

package/dist/strategies/jwt.strategy.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.strategy.js","sourceRoot":"","sources":["../../src/strategies/jwt.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAAoD;AACpD,+CAAoD;AACpD,2CAAoD;AAGpD,4CAA2C;AAIpC,IAAM,WAAW,mBAAjB,MAAM,WAAY,SAAQ,IAAA,2BAAgB,EAAC,uBAAQ,CAAC;IACzD,YAAiC,MAAkB;QACjD,KAAK,CAAC;YACJ,cAAc,EAAE,yBAAU,CAAC,cAAc,CAAC;gBACxC,aAAW,CAAC,oBAAoB;gBAChC,yBAAU,CAAC,2BAA2B,EAAE;aACzC,CAAC;YACF,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM;SAChC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,oBAAoB,CAAC,GAAY;QAC9C,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC3C,OAAO,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAA4B;QACzC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;IACJ,CAAC;CACF,CAAA;AA1BY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IAEE,WAAA,IAAA,eAAM,EAAC,uBAAW,CAAC,CAAA;;GADrB,WAAW,CA0BvB"}
+{"version":3,"file":"jwt.strategy.js","sourceRoot":"","sources":["../../src/strategies/jwt.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAAoD;AACpD,+CAAoD;AACpD,2CAAoD;AAGpD,4CAA2C;AAIpC,IAAM,WAAW,mBAAjB,MAAM,WAAY,SAAQ,IAAA,2BAAgB,EAAC,uBAAQ,CAAC;IACzD,YACuB,MAAkB;QAEvC,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,QAAQ,SAAS,CAAC;QAC/C,KAAK,CAAC;YACJ,cAAc,EAAE,yBAAU,CAAC,cAAc,CAAC;gBACxC,aAAW,CAAC,oBAAoB,CAAC,UAAU,CAAC;gBAC5C,yBAAU,CAAC,2BAA2B,EAAE;aACzC,CAAC;YACF,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM;SAChC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,oBAAoB,CAAC,UAAkB;QACpD,OAAO,CAAC,GAAY,EAAiB,EAAE;YACrC,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3C,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACjC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAA4B;QACzC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;IACJ,CAAC;CACF,CAAA;AA/BY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,uBAAW,CAAC,CAAA;;GAFX,WAAW,CA+BvB"}