@nest-boot/auth 3.2.1 → 4.0.0-beta.1

package/dist/auth.guard.d.ts

@@ -0,0 +1,13 @@
+import { EntityManager } from "@mikro-orm/core";
+import { Context } from "@nest-boot/common";
+import { CanActivate, ExecutionContext } from "@nestjs/common";
+import { Reflector } from "@nestjs/core";
+import { AuthModuleOptions } from "./interfaces";
+export declare class AuthGuard implements CanActivate {
+    private readonly options;
+    private readonly reflector;
+    private readonly entityManager;
+    constructor(options: AuthModuleOptions, reflector: Reflector, entityManager: EntityManager);
+    canActivate(executionContext: ExecutionContext): Promise<boolean>;
+    getPermissions(ctx: Context): Promise<string[]>;
+}

package/dist/auth.guard.js

@@ -0,0 +1,75 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthGuard = void 0;
+const core_1 = require("@mikro-orm/core");
+const common_1 = require("@nest-boot/common");
+const common_2 = require("@nestjs/common");
+const core_2 = require("@nestjs/core");
+const lodash_1 = __importDefault(require("lodash"));
+const auth_module_definition_1 = require("./auth.module-definition");
+let AuthGuard = class AuthGuard {
+    constructor(options, reflector, entityManager) {
+        this.options = options;
+        this.reflector = reflector;
+        this.entityManager = entityManager;
+        this.reflector = reflector;
+    }
+    async canActivate(executionContext) {
+        var _a;
+        const ctx = common_1.Context.get();
+        const requireAuth = this.reflector.get(auth_module_definition_1.REQUIRE_AUTH_METADATA_KEY, executionContext.getHandler());
+        if (!((_a = requireAuth !== null && requireAuth !== void 0 ? requireAuth : this.options.defaultRequireAuth) !== null && _a !== void 0 ? _a : false)) {
+            return true;
+        }
+        const authPayload = ctx.get("auth");
+        if (typeof authPayload === "undefined") {
+            return false;
+        }
+        const permissions = this.reflector.get(auth_module_definition_1.PERMISSIONS_METADATA_KEY, executionContext.getHandler());
+        if (typeof permissions === "undefined" ||
+            lodash_1.default.intersection(await this.getPermissions(ctx), permissions).length > 0) {
+            authPayload.personalAccessToken.lastUsedAt = new Date();
+            await this.entityManager.flush();
+            return true;
+        }
+        return false;
+    }
+    async getPermissions(ctx) {
+        let permissions = [];
+        const payload = ctx.get("auth");
+        if (typeof payload !== "undefined") {
+            if (typeof payload.entity.permissions !== "undefined") {
+                permissions = permissions.concat(payload.entity.permissions);
+            }
+            else {
+                const newPermissions = await core_1.Reference.create(payload.entity).load("permissions");
+                if (typeof newPermissions !== "undefined") {
+                    permissions = permissions.concat(newPermissions);
+                }
+            }
+        }
+        return permissions;
+    }
+};
+AuthGuard = __decorate([
+    __param(0, (0, common_2.Inject)(auth_module_definition_1.MODULE_OPTIONS_TOKEN)),
+    __metadata("design:paramtypes", [Object, core_2.Reflector,
+        core_1.EntityManager])
+], AuthGuard);
+exports.AuthGuard = AuthGuard;
+//# sourceMappingURL=auth.guard.js.map

package/dist/auth.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.guard.js","sourceRoot":"","sources":["../src/auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,0CAA2D;AAC3D,8CAA4C;AAC5C,2CAAuE;AACvE,uCAAyC;AACzC,oDAAuB;AAEvB,qEAIkC;AAG3B,IAAM,SAAS,GAAf,MAAM,SAAS;IACpB,YAEmB,OAA0B,EAC1B,SAAoB,EACpB,aAA4B;QAF5B,YAAO,GAAP,OAAO,CAAmB;QAC1B,cAAS,GAAT,SAAS,CAAW;QACpB,kBAAa,GAAb,aAAa,CAAe;QAE7C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,WAAW,CACtB,gBAAkC;;QAGlC,MAAM,GAAG,GAAG,gBAAO,CAAC,GAAG,EAAE,CAAC;QAG1B,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACpC,kDAAyB,EACzB,gBAAgB,CAAC,UAAU,EAAE,CAC9B,CAAC;QAGF,IAAI,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,IAAI,CAAC,OAAO,CAAC,kBAAkB,mCAAI,KAAK,CAAC,EAAE;YAC9D,OAAO,IAAI,CAAC;SACb;QAED,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAc,MAAM,CAAC,CAAC;QAGjD,IAAI,OAAO,WAAW,KAAK,WAAW,EAAE;YACtC,OAAO,KAAK,CAAC;SACd;QAGD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACpC,iDAAwB,EACxB,gBAAgB,CAAC,UAAU,EAAE,CAC9B,CAAC;QAIF,IACE,OAAO,WAAW,KAAK,WAAW;YAClC,gBAAC,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EACtE;YACA,WAAW,CAAC,mBAAmB,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;YACxD,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YAEjC,OAAO,IAAI,CAAC;SACb;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAY;QAC/B,IAAI,WAAW,GAAa,EAAE,CAAC;QAE/B,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAuC,MAAM,CAAC,CAAC;QAEtE,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE;YAClC,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE;gBACrD,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;aAC9D;iBAAM;gBACL,MAAM,cAAc,GAAG,MAAM,gBAAS,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAChE,aAAa,CACd,CAAC;gBAEF,IAAI,OAAO,cAAc,KAAK,WAAW,EAAE;oBACzC,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;iBAClD;aACF;SACF;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAA;AA5EY,SAAS;IAEjB,WAAA,IAAA,eAAM,EAAC,6CAAoB,CAAC,CAAA;6CAED,gBAAS;QACL,oBAAa;GALpC,SAAS,CA4ErB;AA5EY,8BAAS"}

package/dist/{middlewares/auth.middleware.d.ts → auth.middleware.d.ts}

@@ -1,9 +1,13 @@
 import { EntityManager } from "@mikro-orm/core";
 import { NestMiddleware } from "@nestjs/common";
 import { Request, Response } from "express";
+import { AuthService } from "./auth.service";
+import { AuthModuleOptions } from "./interfaces";
 export declare class AuthMiddleware implements NestMiddleware {
+    private readonly options;
     private readonly entityManager;
-    constructor(entityManager: EntityManager);
+    private readonly authService;
+    constructor(options: AuthModuleOptions, entityManager: EntityManager, authService: AuthService);
     use(req: Request, res: Response, next: () => void): Promise<void>;
     private extractAccessToken;
 }

package/dist/auth.middleware.js

@@ -0,0 +1,60 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthMiddleware = void 0;
+const core_1 = require("@mikro-orm/core");
+const common_1 = require("@nest-boot/common");
+const common_2 = require("@nestjs/common");
+const auth_module_definition_1 = require("./auth.module-definition");
+const auth_service_1 = require("./auth.service");
+let AuthMiddleware = class AuthMiddleware {
+    constructor(options, entityManager, authService) {
+        this.options = options;
+        this.entityManager = entityManager;
+        this.authService = authService;
+    }
+    async use(req, res, next) {
+        const accessToken = this.extractAccessToken(req);
+        if (accessToken !== null) {
+            const personalAccessToken = await this.authService.getToken(accessToken);
+            if (personalAccessToken !== null) {
+                const entity = await this.entityManager
+                    .getRepository(personalAccessToken.entityName)
+                    .findOne(personalAccessToken.entityId);
+                if (entity !== null) {
+                    common_1.Context.set("auth", { entity, personalAccessToken });
+                }
+            }
+        }
+        return next();
+    }
+    extractAccessToken(req) {
+        const authorizationHeader = req.get("authorization");
+        if (typeof authorizationHeader === "string") {
+            const matched = authorizationHeader.match(/(\S+)\s+(\S+)/);
+            if (matched !== null && matched[1].toLowerCase() === "bearer") {
+                return matched[2];
+            }
+        }
+        return null;
+    }
+};
+AuthMiddleware = __decorate([
+    (0, common_2.Injectable)({ scope: common_2.Scope.REQUEST }),
+    __param(0, (0, common_2.Inject)(auth_module_definition_1.MODULE_OPTIONS_TOKEN)),
+    __metadata("design:paramtypes", [Object, core_1.EntityManager,
+        auth_service_1.AuthService])
+], AuthMiddleware);
+exports.AuthMiddleware = AuthMiddleware;
+//# sourceMappingURL=auth.middleware.js.map

package/dist/auth.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.middleware.js","sourceRoot":"","sources":["../src/auth.middleware.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,0CAAgD;AAChD,8CAA4C;AAC5C,2CAA2E;AAG3E,qEAAgE;AAChE,iDAA6C;AAItC,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,YAEmB,OAA0B,EAC1B,aAA4B,EAC5B,WAAwB;QAFxB,YAAO,GAAP,OAAO,CAAmB;QAC1B,kBAAa,GAAb,aAAa,CAAe;QAC5B,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,GAAY,EAAE,GAAa,EAAE,IAAgB;QACrD,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAEjD,IAAI,WAAW,KAAK,IAAI,EAAE;YACxB,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAEzE,IAAI,mBAAmB,KAAK,IAAI,EAAE;gBAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa;qBACpC,aAAa,CAAC,mBAAmB,CAAC,UAAU,CAAC;qBAC7C,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;gBAGzC,IAAI,MAAM,KAAK,IAAI,EAAE;oBACnB,gBAAO,CAAC,GAAG,CAAc,MAAM,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;iBACnE;aACF;SACF;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAEO,kBAAkB,CAAC,GAAY;QACrC,MAAM,mBAAmB,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACrD,IAAI,OAAO,mBAAmB,KAAK,QAAQ,EAAE;YAC3C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAE3D,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE;gBAC7D,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;aACnB;SACF;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAzCY,cAAc;IAD1B,IAAA,mBAAU,EAAC,EAAE,KAAK,EAAE,cAAK,CAAC,OAAO,EAAE,CAAC;IAGhC,WAAA,IAAA,eAAM,EAAC,6CAAoB,CAAC,CAAA;6CAEG,oBAAa;QACf,0BAAW;GALhC,cAAc,CAyC1B;AAzCY,wCAAc"}

package/dist/auth.module-definition.d.ts

@@ -0,0 +1,4 @@
+import { AuthModuleOptions } from "./interfaces";
+export declare const PERMISSIONS_METADATA_KEY: string;
+export declare const REQUIRE_AUTH_METADATA_KEY: string;
+export declare const ConfigurableModuleClass: import("@nestjs/common").ConfigurableModuleCls<AuthModuleOptions, "register", "create", {}>, MODULE_OPTIONS_TOKEN: string | symbol;

package/dist/auth.module-definition.js

@@ -0,0 +1,10 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MODULE_OPTIONS_TOKEN = exports.ConfigurableModuleClass = exports.REQUIRE_AUTH_METADATA_KEY = exports.PERMISSIONS_METADATA_KEY = void 0;
+const common_1 = require("@nestjs/common");
+const crypto_1 = require("crypto");
+exports.PERMISSIONS_METADATA_KEY = (0, crypto_1.randomUUID)();
+exports.REQUIRE_AUTH_METADATA_KEY = (0, crypto_1.randomUUID)();
+_a = new common_1.ConfigurableModuleBuilder().build(), exports.ConfigurableModuleClass = _a.ConfigurableModuleClass, exports.MODULE_OPTIONS_TOKEN = _a.MODULE_OPTIONS_TOKEN;
+//# sourceMappingURL=auth.module-definition.js.map

package/dist/auth.module-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.module-definition.js","sourceRoot":"","sources":["../src/auth.module-definition.ts"],"names":[],"mappings":";;;;AAAA,2CAA2D;AAC3D,mCAAoC;AAIvB,QAAA,wBAAwB,GAAG,IAAA,mBAAU,GAAE,CAAC;AAExC,QAAA,yBAAyB,GAAG,IAAA,mBAAU,GAAE,CAAC;AAEzC,KACX,IAAI,kCAAyB,EAAqB,CAAC,KAAK,EAAE,EAD7C,+BAAuB,+BAAE,4BAAoB,2BACC"}

package/dist/auth.module.d.ts

@@ -0,0 +1,8 @@
+import { MiddlewareConsumer, NestModule } from "@nestjs/common";
+import { ConfigurableModuleClass } from "./auth.module-definition";
+import { AuthModuleOptions } from "./interfaces";
+export declare class AuthModule extends ConfigurableModuleClass implements NestModule {
+    private readonly options;
+    constructor(options: AuthModuleOptions);
+    configure(consumer: MiddlewareConsumer): void;
+}

package/dist/auth.module.js

@@ -0,0 +1,56 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthModule = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const auth_guard_1 = require("./auth.guard");
+const auth_middleware_1 = require("./auth.middleware");
+const auth_module_definition_1 = require("./auth.module-definition");
+const auth_service_1 = require("./auth.service");
+let AuthModule = class AuthModule extends auth_module_definition_1.ConfigurableModuleClass {
+    constructor(options) {
+        super();
+        this.options = options;
+    }
+    configure(consumer) {
+        const middlewareConfigProxy = consumer.apply(auth_middleware_1.AuthMiddleware);
+        if (typeof this.options.excludeRoutes !== "undefined") {
+            middlewareConfigProxy.exclude(...this.options.excludeRoutes);
+        }
+        if (typeof this.options.includeRoutes !== "undefined") {
+            middlewareConfigProxy.forRoutes(...this.options.includeRoutes);
+        }
+        else {
+            middlewareConfigProxy.forRoutes("*");
+        }
+    }
+};
+AuthModule = __decorate([
+    (0, common_1.Global)(),
+    (0, common_1.Module)({
+        providers: [
+            {
+                provide: core_1.APP_GUARD,
+                useClass: auth_guard_1.AuthGuard,
+            },
+            auth_service_1.AuthService,
+        ],
+        exports: [auth_service_1.AuthService],
+    }),
+    __param(0, (0, common_1.Inject)(auth_module_definition_1.MODULE_OPTIONS_TOKEN)),
+    __metadata("design:paramtypes", [Object])
+], AuthModule);
+exports.AuthModule = AuthModule;
+//# sourceMappingURL=auth.module.js.map

package/dist/auth.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAMwB;AACxB,uCAAyC;AAEzC,6CAAyC;AACzC,uDAAmD;AACnD,qEAGkC;AAClC,iDAA6C;AActC,IAAM,UAAU,GAAhB,MAAM,UAAW,SAAQ,gDAAuB;IACrD,YAEmB,OAA0B;QAE3C,KAAK,EAAE,CAAC;QAFS,YAAO,GAAP,OAAO,CAAmB;IAG7C,CAAC;IAED,SAAS,CAAC,QAA4B;QACpC,MAAM,qBAAqB,GAAG,QAAQ,CAAC,KAAK,CAAC,gCAAc,CAAC,CAAC;QAE7D,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,WAAW,EAAE;YACrD,qBAAqB,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;SAC9D;QAED,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,WAAW,EAAE;YACrD,qBAAqB,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;SAChE;aAAM;YACL,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;SACtC;IACH,CAAC;CACF,CAAA;AArBY,UAAU;IAXtB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,SAAS,EAAE;YACT;gBACE,OAAO,EAAE,gBAAS;gBAClB,QAAQ,EAAE,sBAAS;aACpB;YACD,0BAAW;SACZ;QACD,OAAO,EAAE,CAAC,0BAAW,CAAC;KACvB,CAAC;IAGG,WAAA,IAAA,eAAM,EAAC,6CAAoB,CAAC,CAAA;;GAFpB,UAAU,CAqBtB;AArBY,gCAAU"}

package/dist/auth.service.d.ts

@@ -0,0 +1,12 @@
+import { AnyEntity, EntityManager, Loaded } from "@mikro-orm/core";
+import { AuthModuleOptions, PersonalAccessTokenInterface } from "./interfaces";
+export declare class AuthService {
+    private readonly options;
+    private readonly entityManager;
+    private readonly personalAccessTokenEntity;
+    constructor(options: AuthModuleOptions, entityManager: EntityManager);
+    createToken(entity: AnyEntity, name: string, expiresIn?: string | number): Promise<PersonalAccessTokenInterface>;
+    getToken(token?: string): Promise<Loaded<PersonalAccessTokenInterface> | null>;
+    verifyToken(token?: string): Promise<boolean>;
+    revokeToken(token?: string): Promise<void>;
+}

package/dist/auth.service.js

@@ -0,0 +1,65 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthService = void 0;
+const core_1 = require("@mikro-orm/core");
+const common_1 = require("@nestjs/common");
+const crypto_1 = require("crypto");
+const auth_module_definition_1 = require("./auth.module-definition");
+const ms = require("ms");
+const common_2 = require("@nest-boot/common");
+let AuthService = class AuthService {
+    constructor(options, entityManager) {
+        this.options = options;
+        this.entityManager = entityManager;
+        this.personalAccessTokenEntity = this.entityManager.getRepository(this.options.personalAccessTokenEntity);
+    }
+    async createToken(entity, name, expiresIn) {
+        const token = (0, crypto_1.randomBytes)(32).toString("hex");
+        const _expiresIn = expiresIn !== null && expiresIn !== void 0 ? expiresIn : this.options.expiresIn;
+        const _expiresInMs = typeof _expiresIn === "string" ? ms(_expiresIn) : _expiresIn;
+        const personalAccessToken = this.personalAccessTokenEntity.create({
+            name,
+            token,
+            entityId: entity.id,
+            entityName: entity.constructor.name,
+            expiresAt: _expiresInMs != null ? new Date(Date.now() + _expiresInMs) : undefined,
+        });
+        await this.personalAccessTokenEntity.persistAndFlush(personalAccessToken);
+        return personalAccessToken;
+    }
+    async getToken(token) {
+        var _a, _b;
+        if (typeof token === "undefined") {
+            return (_b = (_a = common_2.Context.get("auth")) === null || _a === void 0 ? void 0 : _a.personalAccessToken) !== null && _b !== void 0 ? _b : null;
+        }
+        return await this.personalAccessTokenEntity.findOne({ token });
+    }
+    async verifyToken(token) {
+        return (await this.getToken(token)) !== null;
+    }
+    async revokeToken(token) {
+        const personalAccessToken = await this.getToken(token);
+        if (personalAccessToken !== null) {
+            await this.personalAccessTokenEntity.remove(personalAccessToken).flush();
+        }
+    }
+};
+AuthService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(auth_module_definition_1.MODULE_OPTIONS_TOKEN)),
+    __metadata("design:paramtypes", [Object, core_1.EntityManager])
+], AuthService);
+exports.AuthService = AuthService;
+//# sourceMappingURL=auth.service.js.map

package/dist/auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../src/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,0CAKyB;AACzB,2CAAoD;AACpD,mCAAqC;AAErC,qEAAgE;AAMhE,yBAA0B;AAC1B,8CAA4C;AAGrC,IAAM,WAAW,GAAjB,MAAM,WAAW;IAGtB,YAEmB,OAA0B,EAC1B,aAA4B;QAD5B,YAAO,GAAP,OAAO,CAAmB;QAC1B,kBAAa,GAAb,aAAa,CAAe;QAE7C,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa,CAC/D,IAAI,CAAC,OAAO,CAAC,yBAAyB,CACvC,CAAC;IACJ,CAAC;IAQD,KAAK,CAAC,WAAW,CACf,MAAiB,EACjB,IAAY,EACZ,SAA2B;QAE3B,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE9C,MAAM,UAAU,GAAG,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACvD,MAAM,YAAY,GAChB,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAE/D,MAAM,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC;YAChE,IAAI;YACJ,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI;YACnC,SAAS,EACP,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,yBAAyB,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;QAE1E,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAMD,KAAK,CAAC,QAAQ,CACZ,KAAc;;QAEd,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE;YAChC,OAAO,MAAA,MAAA,gBAAO,CAAC,GAAG,CAAc,MAAM,CAAC,0CAAE,mBAAmB,mCAAI,IAAI,CAAC;SACtE;QAED,OAAO,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IAMD,KAAK,CAAC,WAAW,CAAC,KAAc;QAC9B,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC;IAC/C,CAAC;IAMD,KAAK,CAAC,WAAW,CAAC,KAAc;QAC9B,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEvD,IAAI,mBAAmB,KAAK,IAAI,EAAE;YAChC,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC;SAC1E;IACH,CAAC;CACF,CAAA;AA7EY,WAAW;IADvB,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,6CAAoB,CAAC,CAAA;6CAEG,oBAAa;GANpC,WAAW,CA6EvB;AA7EY,kCAAW"}

package/dist/decorators/can.decorator.d.ts

@@ -0,0 +1 @@
+export declare const Can: (...roles: string[]) => ClassDecorator & MethodDecorator;

package/dist/decorators/can.decorator.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Can = void 0;
+const common_1 = require("@nestjs/common");
+const auth_module_definition_1 = require("../auth.module-definition");
+const Can = (...roles) => (0, common_1.SetMetadata)(auth_module_definition_1.PERMISSIONS_METADATA_KEY, roles);
+exports.Can = Can;
+//# sourceMappingURL=can.decorator.js.map

package/dist/decorators/can.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can.decorator.js","sourceRoot":"","sources":["../../src/decorators/can.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAE7C,sEAAqE;AAE9D,MAAM,GAAG,GAAG,CAAC,GAAG,KAAe,EAAoC,EAAE,CAC1E,IAAA,oBAAW,EAAC,iDAAwB,EAAE,KAAK,CAAC,CAAC;AADlC,QAAA,GAAG,OAC+B"}

package/dist/decorators/current-entity.decorator.d.ts

@@ -0,0 +1,2 @@
+export declare const CurrentEntity: (...dataOrPipes: any[]) => ParameterDecorator;
+export declare const CurrentUser: (...dataOrPipes: any[]) => ParameterDecorator;

package/dist/decorators/current-entity.decorator.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CurrentUser = exports.CurrentEntity = void 0;
+const common_1 = require("@nest-boot/common");
+const common_2 = require("@nestjs/common");
+exports.CurrentEntity = (0, common_2.createParamDecorator)(() => {
+    var _a;
+    return (_a = common_1.Context.get("auth")) === null || _a === void 0 ? void 0 : _a.entity;
+});
+exports.CurrentUser = exports.CurrentEntity;
+//# sourceMappingURL=current-entity.decorator.js.map

package/dist/decorators/current-entity.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-entity.decorator.js","sourceRoot":"","sources":["../../src/decorators/current-entity.decorator.ts"],"names":[],"mappings":";;;AAAA,8CAA4C;AAC5C,2CAAsD;AAIzC,QAAA,aAAa,GAAG,IAAA,6BAAoB,EAAC,GAAG,EAAE;;IACrD,OAAO,MAAA,gBAAO,CAAC,GAAG,CAAc,MAAM,CAAC,0CAAE,MAAM,CAAC;AAClD,CAAC,CAAC,CAAC;AAEU,QAAA,WAAW,GAAG,qBAAa,CAAC"}

package/dist/decorators/current-personal-access-token.decorator.d.ts

@@ -0,0 +1 @@
+export declare const CurrentPersonalAccessToken: (...dataOrPipes: any[]) => ParameterDecorator;

package/dist/decorators/current-personal-access-token.decorator.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CurrentPersonalAccessToken = void 0;
+const common_1 = require("@nest-boot/common");
+const common_2 = require("@nestjs/common");
+exports.CurrentPersonalAccessToken = (0, common_2.createParamDecorator)(() => {
+    var _a;
+    return (_a = common_1.Context.get("auth")) === null || _a === void 0 ? void 0 : _a.personalAccessToken;
+});
+//# sourceMappingURL=current-personal-access-token.decorator.js.map

package/dist/decorators/current-personal-access-token.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-personal-access-token.decorator.js","sourceRoot":"","sources":["../../src/decorators/current-personal-access-token.decorator.ts"],"names":[],"mappings":";;;AAAA,8CAA4C;AAC5C,2CAAsD;AAIzC,QAAA,0BAA0B,GAAG,IAAA,6BAAoB,EAAC,GAAG,EAAE;;IAClE,OAAO,MAAA,gBAAO,CAAC,GAAG,CAAc,MAAM,CAAC,0CAAE,mBAAmB,CAAC;AAC/D,CAAC,CAAC,CAAC"}

package/dist/decorators/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./can.decorator";
+export * from "./current-entity.decorator";
+export * from "./current-personal-access-token.decorator";
+export * from "./require-auth.decorator";

package/dist/{middlewares → decorators}/index.js

@@ -14,5 +14,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./auth.middleware"), exports);
+__exportStar(require("./can.decorator"), exports);
+__exportStar(require("./current-entity.decorator"), exports);
+__exportStar(require("./current-personal-access-token.decorator"), exports);
+__exportStar(require("./require-auth.decorator"), exports);
 //# sourceMappingURL=index.js.map

package/dist/decorators/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/decorators/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAAgC;AAChC,6DAA2C;AAC3C,4EAA0D;AAC1D,2DAAyC"}

package/dist/decorators/require-auth.decorator.d.ts

@@ -0,0 +1 @@
+export declare const RequireAuth: (requireAuth?: boolean) => ClassDecorator & MethodDecorator;

package/dist/decorators/require-auth.decorator.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RequireAuth = void 0;
+const common_1 = require("@nestjs/common");
+const auth_module_definition_1 = require("../auth.module-definition");
+const RequireAuth = (requireAuth = true) => (0, common_1.SetMetadata)(auth_module_definition_1.REQUIRE_AUTH_METADATA_KEY, requireAuth);
+exports.RequireAuth = RequireAuth;
+//# sourceMappingURL=require-auth.decorator.js.map

package/dist/decorators/require-auth.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-auth.decorator.js","sourceRoot":"","sources":["../../src/decorators/require-auth.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAE7C,sEAAsE;AAE/D,MAAM,WAAW,GAAG,CACzB,WAAW,GAAG,IAAI,EACgB,EAAE,CACpC,IAAA,oBAAW,EAAC,kDAAyB,EAAE,WAAW,CAAC,CAAC;AAHzC,QAAA,WAAW,eAG8B"}

package/dist/index.d.ts

@@ -1,17 +1,7 @@
-declare global {
-    namespace NestBootCommon {
-        interface Context {
-            accessToken?: string;
-            user?: NestBootAuth.User;
-        }
-    }
-    namespace NestBootAuth {
-        interface User {
-        }
-    }
-}
-export * from "./entities";
-export * from "./guards";
+export * from "./auth.guard";
+export * from "./auth.middleware";
+export * from "./auth.module";
+export * from "./auth.service";
+export * from "./decorators";
 export * from "./interfaces";
-export * from "./middlewares";
 export * from "./utils";

package/dist/index.js

@@ -14,9 +14,11 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./entities"), exports);
-__exportStar(require("./guards"), exports);
+__exportStar(require("./auth.guard"), exports);
+__exportStar(require("./auth.middleware"), exports);
+__exportStar(require("./auth.module"), exports);
+__exportStar(require("./auth.service"), exports);
+__exportStar(require("./decorators"), exports);
 __exportStar(require("./interfaces"), exports);
-__exportStar(require("./middlewares"), exports);
 __exportStar(require("./utils"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAgBA,6CAA2B;AAC3B,2CAAyB;AACzB,+CAA6B;AAC7B,gDAA8B;AAC9B,0CAAwB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,oDAAkC;AAClC,gDAA8B;AAC9B,iDAA+B;AAC/B,+CAA6B;AAC7B,+CAA6B;AAC7B,0CAAwB"}

package/dist/interfaces/auth-module-options.interface.d.ts

@@ -0,0 +1,12 @@
+/// <reference types="node" />
+import { EntityClass } from "@mikro-orm/core";
+import { RouteInfo, Type } from "@nestjs/common/interfaces";
+import { PersonalAccessTokenInterface } from "./personal-access-token.interface";
+export interface AuthModuleOptions {
+    personalAccessTokenEntity: EntityClass<PersonalAccessTokenInterface>;
+    secret: string | Buffer;
+    expiresIn?: string | number;
+    defaultRequireAuth?: boolean;
+    includeRoutes?: Array<string | Type<any> | RouteInfo>;
+    excludeRoutes?: Array<string | RouteInfo>;
+}

package/dist/interfaces/auth-module-options.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=auth-module-options.interface.js.map

package/dist/interfaces/auth-module-options.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-module-options.interface.js","sourceRoot":"","sources":["../../src/interfaces/auth-module-options.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/auth-payload.interface.d.ts

@@ -0,0 +1,6 @@
+import { AnyEntity } from "@mikro-orm/core";
+import { PersonalAccessTokenInterface } from "./personal-access-token.interface";
+export interface AuthPayload<T extends AnyEntity = AnyEntity> {
+    entity: T;
+    personalAccessToken: PersonalAccessTokenInterface;
+}

package/dist/interfaces/auth-payload.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=auth-payload.interface.js.map

package/dist/interfaces/auth-payload.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-payload.interface.js","sourceRoot":"","sources":["../../src/interfaces/auth-payload.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/index.d.ts

@@ -1 +1,4 @@
+export * from "./auth-module-options.interface";
+export * from "./auth-payload.interface";
 export * from "./has-permission.interface";
+export * from "./personal-access-token.interface";

package/dist/interfaces/index.js

@@ -14,5 +14,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./auth-module-options.interface"), exports);
+__exportStar(require("./auth-payload.interface"), exports);
 __exportStar(require("./has-permission.interface"), exports);
+__exportStar(require("./personal-access-token.interface"), exports);
 //# sourceMappingURL=index.js.map

package/dist/interfaces/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6DAA2C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kEAAgD;AAChD,2DAAyC;AACzC,6DAA2C;AAC3C,oEAAkD"}

package/dist/interfaces/personal-access-token.interface.d.ts

@@ -0,0 +1,9 @@
+export interface PersonalAccessTokenInterface {
+    id: string;
+    name: string;
+    token: string;
+    entityId: string;
+    entityName: string;
+    lastUsedAt?: Date;
+    expiresAt?: Date;
+}

package/dist/interfaces/personal-access-token.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=personal-access-token.interface.js.map

package/dist/interfaces/personal-access-token.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personal-access-token.interface.js","sourceRoot":"","sources":["../../src/interfaces/personal-access-token.interface.ts"],"names":[],"mappings":""}