@revisium/core 0.9.0

package/dist/src/auth/casl-ability.factory.d.ts

@@ -0,0 +1,25 @@
+import { PureAbility } from '@casl/ability';
+import { PrismaQuery, Subjects } from '@casl/prisma';
+import { Organization, Project, Branch, Revision, Table, Row, Endpoint, User } from '@prisma/client';
+import { PermissionAction, UserRole } from 'src/auth/consts';
+import { PrismaService } from 'src/database/prisma.service';
+export type AppSubjects = Subjects<{
+    Organization: Organization;
+    Project: Project;
+    Branch: Branch;
+    Revision: Revision;
+    Table: Table;
+    Row: Row;
+    Endpoint: Endpoint;
+    User: User;
+}>;
+export type AppAbility = PureAbility<[
+    PermissionAction,
+    AppSubjects
+], PrismaQuery>;
+export declare class CaslAbilityFactory {
+    private readonly prisma;
+    constructor(prisma: PrismaService);
+    createAbility(...roles: UserRole[]): Promise<AppAbility>;
+    private getPermissions;
+}

package/dist/src/auth/casl-ability.factory.js

@@ -0,0 +1,45 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CaslAbilityFactory = void 0;
+const ability_1 = require("@casl/ability");
+const prisma_1 = require("@casl/prisma");
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../database/prisma.service");
+let CaslAbilityFactory = class CaslAbilityFactory {
+    constructor(prisma) {
+        this.prisma = prisma;
+    }
+    async createAbility(...roles) {
+        const { can, build } = new ability_1.AbilityBuilder(prisma_1.createPrismaAbility);
+        for (const role of roles) {
+            for (const { action, subject, condition } of await this.getPermissions(role)) {
+                can(action, subject, condition);
+            }
+        }
+        return build();
+    }
+    getPermissions(role) {
+        return this.prisma.role
+            .findUniqueOrThrow({
+            where: {
+                id: role,
+            },
+        })
+            .permissions();
+    }
+};
+exports.CaslAbilityFactory = CaslAbilityFactory;
+exports.CaslAbilityFactory = CaslAbilityFactory = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService])
+], CaslAbilityFactory);
+//# sourceMappingURL=casl-ability.factory.js.map

package/dist/src/auth/casl-ability.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"casl-ability.factory.js","sourceRoot":"","sources":["../../../src/auth/casl-ability.factory.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4D;AAC5D,yCAA0E;AAC1E,2CAA4C;AAY5C,+DAA4D;AAmBrD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAEtD,KAAK,CAAC,aAAa,CAAC,GAAG,KAAiB;QACtC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,wBAAc,CAAa,4BAAmB,CAAC,CAAC;QAE3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,MAAM,IAAI,CAAC,cAAc,CACpE,IAAI,CACL,EAAE,CAAC;gBAGF,GAAG,CAAC,MAAM,EAAE,OAAiC,EAAE,SAAS,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,OAAO,KAAK,EAAE,CAAC;IACjB,CAAC;IAEO,cAAc,CAAC,IAAc;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;aACpB,iBAAiB,CAAC;YACjB,KAAK,EAAE;gBACL,EAAE,EAAE,IAAI;aACT;SACF,CAAC;aACD,WAAW,EAAE,CAAC;IACnB,CAAC;CACF,CAAA;AA5BY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAE0B,8BAAa;GADvC,kBAAkB,CA4B9B"}

package/dist/src/auth/commands/handlers/check-organization-permission.handler.d.ts

@@ -0,0 +1,12 @@
+import { ICommandHandler } from '@nestjs/cqrs';
+import { CaslAbilityFactory } from 'src/auth/casl-ability.factory';
+import { CheckOrganizationPermissionCommand } from 'src/auth/commands/impl/check-organization-permission.command';
+import { PrismaService } from 'src/database/prisma.service';
+export declare class CheckOrganizationPermissionHandler implements ICommandHandler<CheckOrganizationPermissionCommand, true> {
+    private readonly prisma;
+    private readonly casl;
+    constructor(prisma: PrismaService, casl: CaslAbilityFactory);
+    execute({ data }: CheckOrganizationPermissionCommand): Promise<true>;
+    private getOrganizationRole;
+    private getSystemRole;
+}

package/dist/src/auth/commands/handlers/check-organization-permission.handler.js

@@ -0,0 +1,67 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CheckOrganizationPermissionHandler = void 0;
+const ability_1 = require("@casl/ability");
+const cqrs_1 = require("@nestjs/cqrs");
+const casl_ability_factory_1 = require("../../casl-ability.factory");
+const check_organization_permission_command_1 = require("../impl/check-organization-permission.command");
+const consts_1 = require("../../consts");
+const utils_1 = require("../../utils");
+const prisma_service_1 = require("../../../database/prisma.service");
+let CheckOrganizationPermissionHandler = class CheckOrganizationPermissionHandler {
+    constructor(prisma, casl) {
+        this.prisma = prisma;
+        this.casl = casl;
+    }
+    async execute({ data }) {
+        const systemRole = await this.getSystemRole(data);
+        const organizationRole = await this.getOrganizationRole(data);
+        const ability = await this.casl.createAbility(systemRole, organizationRole);
+        for (const permission of data.permissions) {
+            ability_1.ForbiddenError.from(ability)
+                .setMessage(`You are not allowed to ${permission.action} on ${permission.subject}`)
+                .throwUnlessCan(permission.action, permission.subject);
+        }
+        return true;
+    }
+    async getOrganizationRole(data) {
+        if (data.userId) {
+            const result = await this.prisma.userOrganization.findFirst({
+                where: { organizationId: data.organizationId, userId: data.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+    async getSystemRole(data) {
+        if (data.userId) {
+            const result = await this.prisma.user.findUnique({
+                where: { id: data.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+};
+exports.CheckOrganizationPermissionHandler = CheckOrganizationPermissionHandler;
+exports.CheckOrganizationPermissionHandler = CheckOrganizationPermissionHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(check_organization_permission_command_1.CheckOrganizationPermissionCommand),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        casl_ability_factory_1.CaslAbilityFactory])
+], CheckOrganizationPermissionHandler);
+//# sourceMappingURL=check-organization-permission.handler.js.map

package/dist/src/auth/commands/handlers/check-organization-permission.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-organization-permission.handler.js","sourceRoot":"","sources":["../../../../../src/auth/commands/handlers/check-organization-permission.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+C;AAC/C,uCAA+D;AAC/D,qEAAmE;AACnE,yGAAkH;AAClH,yCAA2C;AAC3C,uCAA6C;AAC7C,qEAA4D;AAGrD,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAG7C,YACmB,MAAqB,EACrB,IAAwB;QADxB,WAAM,GAAN,MAAM,CAAe;QACrB,SAAI,GAAJ,IAAI,CAAoB;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAsC;QACxD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAE9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAE5E,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,wBAAc,CAAC,IAAI,CAAC,OAAO,CAAC;iBACzB,UAAU,CACT,0BAA0B,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,OAAO,EAAE,CACvE;iBACA,cAAc,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,IAAgD;QAEhD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;gBAC1D,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;gBACnE,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,IAAgD;QAEhD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC/C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;gBAC1B,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;CACF,CAAA;AA1DY,gFAAkC;6CAAlC,kCAAkC;IAD9C,IAAA,qBAAc,EAAC,0EAAkC,CAAC;qCAKtB,8BAAa;QACf,yCAAkB;GALhC,kCAAkC,CA0D9C"}

package/dist/src/auth/commands/handlers/check-project-permission.handler.d.ts

@@ -0,0 +1,17 @@
+import { ICommandHandler } from '@nestjs/cqrs';
+import { CaslAbilityFactory } from 'src/auth/casl-ability.factory';
+import { CheckProjectPermissionCommand } from 'src/auth/commands/impl';
+import { PrismaService } from 'src/database/prisma.service';
+export declare class CheckProjectPermissionHandler implements ICommandHandler<CheckProjectPermissionCommand, true> {
+    private readonly prisma;
+    private readonly casl;
+    constructor(prisma: PrismaService, casl: CaslAbilityFactory);
+    execute({ data }: CheckProjectPermissionCommand): Promise<true>;
+    private getOrganizationRole;
+    private getProjectRole;
+    private resolveProject;
+    private getProjectByProjectName;
+    private getProjectByEndpointId;
+    private getProjectByRevisionId;
+    private getSystemRole;
+}

package/dist/src/auth/commands/handlers/check-project-permission.handler.js

@@ -0,0 +1,149 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CheckProjectPermissionHandler = void 0;
+const ability_1 = require("@casl/ability");
+const cqrs_1 = require("@nestjs/cqrs");
+const casl_ability_factory_1 = require("../../casl-ability.factory");
+const impl_1 = require("../impl");
+const consts_1 = require("../../consts");
+const utils_1 = require("../../utils");
+const prisma_service_1 = require("../../../database/prisma.service");
+let CheckProjectPermissionHandler = class CheckProjectPermissionHandler {
+    constructor(prisma, casl) {
+        this.prisma = prisma;
+        this.casl = casl;
+    }
+    async execute({ data }) {
+        const project = await this.resolveProject(data);
+        const systemRole = await this.getSystemRole(data);
+        const organizationRole = await this.getOrganizationRole({
+            organizationId: project.organizationId,
+            userId: data.userId,
+        });
+        const projectRole = await this.getProjectRole({
+            organizationId: project.organizationId,
+            projectName: project.name,
+            userId: data.userId,
+        });
+        const ability = await this.casl.createAbility(systemRole, organizationRole, projectRole);
+        for (const permission of data.permissions) {
+            ability_1.ForbiddenError.from(ability)
+                .setMessage(`You are not allowed to ${permission.action} on ${permission.subject}`)
+                .throwUnlessCan(permission.action, permission.subject === consts_1.PermissionSubject.Project
+                ? (0, ability_1.subject)(consts_1.PermissionSubject.Project, project)
+                : permission.subject);
+        }
+        return true;
+    }
+    async getOrganizationRole(params) {
+        if (params.userId) {
+            const result = await this.prisma.userOrganization.findFirst({
+                where: { organizationId: params.organizationId, userId: params.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+    async getProjectRole(params) {
+        if (params.userId) {
+            const project = await this.prisma.project.findFirst({
+                where: {
+                    organizationId: params.organizationId,
+                    name: params.projectName,
+                },
+                select: {
+                    id: true,
+                },
+            });
+            if (!project) {
+                return consts_1.UserRole.guest;
+            }
+            const result = await this.prisma.userProject.findFirst({
+                where: { projectId: project.id, userId: params.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+    async resolveProject(data) {
+        if ('organizationId' in data && 'projectName' in data) {
+            return this.getProjectByProjectName(data.organizationId, data.projectName);
+        }
+        else if ('revisionId' in data) {
+            return this.getProjectByRevisionId(data.revisionId);
+        }
+        else if ('endpointId' in data) {
+            return this.getProjectByEndpointId(data.endpointId);
+        }
+        throw new Error(`Invalid data=${data}`);
+    }
+    async getProjectByProjectName(organizationId, projectName) {
+        return this.prisma.project.findFirstOrThrow({
+            where: { organizationId, name: projectName },
+        });
+    }
+    async getProjectByEndpointId(endpointId) {
+        const revision = await this.prisma.endpoint.findUniqueOrThrow({
+            where: { id: endpointId },
+            select: {
+                revision: {
+                    select: {
+                        branch: {
+                            select: {
+                                project: true,
+                            },
+                        },
+                    },
+                },
+            },
+        });
+        return revision.revision.branch.project;
+    }
+    async getProjectByRevisionId(revisionId) {
+        const revision = await this.prisma.revision.findUniqueOrThrow({
+            where: { id: revisionId },
+            select: {
+                branch: {
+                    select: {
+                        project: true,
+                    },
+                },
+            },
+        });
+        return revision.branch.project;
+    }
+    async getSystemRole(data) {
+        if (data.userId) {
+            const result = await this.prisma.user.findUnique({
+                where: { id: data.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+};
+exports.CheckProjectPermissionHandler = CheckProjectPermissionHandler;
+exports.CheckProjectPermissionHandler = CheckProjectPermissionHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(impl_1.CheckProjectPermissionCommand),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        casl_ability_factory_1.CaslAbilityFactory])
+], CheckProjectPermissionHandler);
+//# sourceMappingURL=check-project-permission.handler.js.map

package/dist/src/auth/commands/handlers/check-project-permission.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-project-permission.handler.js","sourceRoot":"","sources":["../../../../../src/auth/commands/handlers/check-project-permission.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAwD;AACxD,uCAA+D;AAC/D,qEAAmE;AACnE,kCAAuE;AACvE,yCAA8D;AAC9D,uCAA6C;AAC7C,qEAA4D;AAGrD,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IAGxC,YACmB,MAAqB,EACrB,IAAwB;QADxB,WAAM,GAAN,MAAM,CAAe;QACrB,SAAI,GAAJ,IAAI,CAAoB;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAiC;QACnD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAEhD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAElD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC;YACtD,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;YAC5C,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAC3C,UAAU,EACV,gBAAgB,EAChB,WAAW,CACZ,CAAC;QAEF,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,wBAAc,CAAC,IAAI,CAAC,OAAO,CAAC;iBACzB,UAAU,CACT,0BAA0B,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,OAAO,EAAE,CACvE;iBACA,cAAc,CACb,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,OAAO,KAAK,0BAAiB,CAAC,OAAO;gBAC9C,CAAC,CAAC,IAAA,iBAAO,EAAC,0BAAiB,CAAC,OAAO,EAAE,OAAO,CAAC;gBAC7C,CAAC,CAAC,UAAU,CAAC,OAAO,CACvB,CAAC;QACN,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,MAGjC;QACC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;gBAC1D,KAAK,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;gBACvE,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAI5B;QACC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;gBAClD,KAAK,EAAE;oBACL,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,IAAI,EAAE,MAAM,CAAC,WAAW;iBACzB;gBACD,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;iBACT;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,iBAAQ,CAAC,KAAK,CAAC;YACxB,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC;gBACrD,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;gBACvD,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAA2C;QACtE,IAAI,gBAAgB,IAAI,IAAI,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,uBAAuB,CACjC,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,WAAW,CACjB,CAAC;QACJ,CAAC;aAAM,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC;aAAM,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACnC,cAAsB,EACtB,WAAmB;QAEnB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC1C,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,UAAkB;QACrD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC5D,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;YACzB,MAAM,EAAE;gBACN,QAAQ,EAAE;oBACR,MAAM,EAAE;wBACN,MAAM,EAAE;4BACN,MAAM,EAAE;gCACN,OAAO,EAAE,IAAI;6BACd;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,UAAkB;QACrD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC5D,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;YACzB,MAAM,EAAE;gBACN,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,OAAO,EAAE,IAAI;qBACd;iBACF;aACF;SACF,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,IAA2C;QAE3C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC/C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;gBAC1B,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;CACF,CAAA;AA3KY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,qBAAc,EAAC,oCAA6B,CAAC;qCAKjB,8BAAa;QACf,yCAAkB;GALhC,6BAA6B,CA2KzC"}

package/dist/src/auth/commands/handlers/check-system-permission.handler.d.ts

@@ -0,0 +1,11 @@
+import { ICommandHandler } from '@nestjs/cqrs';
+import { CaslAbilityFactory } from 'src/auth/casl-ability.factory';
+import { CheckSystemPermissionCommand, CheckSystemPermissionCommandReturnType } from 'src/auth/commands/impl';
+import { PrismaService } from 'src/database/prisma.service';
+export declare class CheckSystemPermissionHandler implements ICommandHandler<CheckSystemPermissionCommand, CheckSystemPermissionCommandReturnType> {
+    private readonly prisma;
+    private readonly casl;
+    constructor(prisma: PrismaService, casl: CaslAbilityFactory);
+    execute({ data }: CheckSystemPermissionCommand): Promise<boolean>;
+    private getSystemRole;
+}

package/dist/src/auth/commands/handlers/check-system-permission.handler.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CheckSystemPermissionHandler = void 0;
+const ability_1 = require("@casl/ability");
+const cqrs_1 = require("@nestjs/cqrs");
+const casl_ability_factory_1 = require("../../casl-ability.factory");
+const impl_1 = require("../impl");
+const consts_1 = require("../../consts");
+const utils_1 = require("../../utils");
+const prisma_service_1 = require("../../../database/prisma.service");
+let CheckSystemPermissionHandler = class CheckSystemPermissionHandler {
+    constructor(prisma, casl) {
+        this.prisma = prisma;
+        this.casl = casl;
+    }
+    async execute({ data }) {
+        const systemRole = await this.getSystemRole(data);
+        const ability = await this.casl.createAbility(systemRole);
+        for (const permission of data.permissions) {
+            ability_1.ForbiddenError.from(ability)
+                .setMessage(`You are not allowed to ${permission.action} on ${permission.subject}`)
+                .throwUnlessCan(permission.action, permission.subject);
+        }
+        return true;
+    }
+    async getSystemRole(data) {
+        if (data.userId) {
+            const result = await this.prisma.user.findUnique({
+                where: { id: data.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+};
+exports.CheckSystemPermissionHandler = CheckSystemPermissionHandler;
+exports.CheckSystemPermissionHandler = CheckSystemPermissionHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(impl_1.CheckSystemPermissionCommand),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        casl_ability_factory_1.CaslAbilityFactory])
+], CheckSystemPermissionHandler);
+//# sourceMappingURL=check-system-permission.handler.js.map

package/dist/src/auth/commands/handlers/check-system-permission.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-system-permission.handler.js","sourceRoot":"","sources":["../../../../../src/auth/commands/handlers/check-system-permission.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+C;AAC/C,uCAA+D;AAC/D,qEAAmE;AACnE,kCAGgC;AAChC,yCAA2C;AAC3C,uCAA6C;AAC7C,qEAA4D;AAGrD,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IAOvC,YACmB,MAAqB,EACrB,IAAwB;QADxB,WAAM,GAAN,MAAM,CAAe;QACrB,SAAI,GAAJ,IAAI,CAAoB;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAgC;QAClD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAElD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAE1D,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,wBAAc,CAAC,IAAI,CAAC,OAAO,CAAC;iBACzB,UAAU,CACT,0BAA0B,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,OAAO,EAAE,CACvE;iBACA,cAAc,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,IAA0C;QAE1C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC/C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;gBAC1B,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;CACF,CAAA;AA5CY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,qBAAc,EAAC,mCAA4B,CAAC;qCAShB,8BAAa;QACf,yCAAkB;GAThC,4BAA4B,CA4CxC"}

package/dist/src/auth/commands/handlers/confirm-email-code.handler.d.ts

@@ -0,0 +1,14 @@
+import { ICommandHandler } from '@nestjs/cqrs';
+import { PrismaService } from 'src/database/prisma.service';
+import { AuthService } from '../../auth.service';
+import { ConfirmEmailCodeCommand, ConfirmEmailCodeCommandReturnType } from '../impl';
+export declare class ConfirmEmailCodeHandler implements ICommandHandler<ConfirmEmailCodeCommand, ConfirmEmailCodeCommandReturnType> {
+    private readonly prisma;
+    private readonly authService;
+    constructor(prisma: PrismaService, authService: AuthService);
+    execute({ data }: ConfirmEmailCodeCommand): Promise<{
+        accessToken: string;
+    }>;
+    private confirmEmail;
+    private getUser;
+}

package/dist/src/auth/commands/handlers/confirm-email-code.handler.js

@@ -0,0 +1,62 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfirmEmailCodeHandler = void 0;
+const cqrs_1 = require("@nestjs/cqrs");
+const prisma_service_1 = require("../../../database/prisma.service");
+const auth_service_1 = require("../../auth.service");
+const impl_1 = require("../impl");
+let ConfirmEmailCodeHandler = class ConfirmEmailCodeHandler {
+    constructor(prisma, authService) {
+        this.prisma = prisma;
+        this.authService = authService;
+    }
+    async execute({ data }) {
+        const user = await this.getUser(data.code);
+        if (!user) {
+            throw new Error('Not found user');
+        }
+        if (user.isEmailConfirmed) {
+            throw new Error('Email is already confirmed');
+        }
+        await this.confirmEmail(user.id);
+        return {
+            accessToken: this.authService.login({
+                username: user.username || '',
+                email: user.email || '',
+                sub: user.id,
+            }),
+        };
+    }
+    confirmEmail(userId) {
+        return this.prisma.user.update({
+            where: { id: userId },
+            data: {
+                isEmailConfirmed: true,
+                emailCode: '',
+            },
+        });
+    }
+    getUser(emailCode) {
+        return this.prisma.user.findFirst({
+            where: {
+                emailCode,
+            },
+        });
+    }
+};
+exports.ConfirmEmailCodeHandler = ConfirmEmailCodeHandler;
+exports.ConfirmEmailCodeHandler = ConfirmEmailCodeHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(impl_1.ConfirmEmailCodeCommand),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        auth_service_1.AuthService])
+], ConfirmEmailCodeHandler);
+//# sourceMappingURL=confirm-email-code.handler.js.map

package/dist/src/auth/commands/handlers/confirm-email-code.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm-email-code.handler.js","sourceRoot":"","sources":["../../../../../src/auth/commands/handlers/confirm-email-code.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,uCAA+D;AAC/D,qEAA4D;AAC5D,qDAAiD;AACjD,kCAGiB;AAGV,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAIlC,YACmB,MAAqB,EACrB,WAAwB;QADxB,WAAM,GAAN,MAAM,CAAe;QACrB,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAEG,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAA2B;QACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE3C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEjC,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;gBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;gBACvB,GAAG,EAAE,IAAI,CAAC,EAAE;aACb,CAAC;SACH,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAC7B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,IAAI,EAAE;gBACJ,gBAAgB,EAAE,IAAI;gBACtB,SAAS,EAAE,EAAE;aACd;SACF,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,SAAiB;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAChC,KAAK,EAAE;gBACL,SAAS;aACV;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAhDY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,qBAAc,EAAC,8BAAuB,CAAC;qCAMX,8BAAa;QACR,0BAAW;GANhC,uBAAuB,CAgDnC"}

package/dist/src/auth/commands/handlers/create-user.handler.d.ts

@@ -0,0 +1,15 @@
+import { ICommandHandler } from '@nestjs/cqrs';
+import { AuthService } from 'src/auth/auth.service';
+import { CreateUserCommand, CreateUserCommandReturnType } from 'src/auth/commands/impl';
+import { IdService } from 'src/database/id.service';
+import { PrismaService } from 'src/database/prisma.service';
+export declare class CreateUserHandler implements ICommandHandler<CreateUserCommand, CreateUserCommandReturnType> {
+    private readonly prisma;
+    private readonly idService;
+    private readonly authService;
+    constructor(prisma: PrismaService, idService: IdService, authService: AuthService);
+    execute({ data }: CreateUserCommand): Promise<string>;
+    private createUserWithOwnOrganization;
+    private existOrganization;
+    private getUser;
+}

package/dist/src/auth/commands/handlers/create-user.handler.js

@@ -0,0 +1,103 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateUserHandler = void 0;
+const common_1 = require("@nestjs/common");
+const cqrs_1 = require("@nestjs/cqrs");
+const auth_service_1 = require("../../auth.service");
+const impl_1 = require("../impl");
+const consts_1 = require("../../consts");
+const id_service_1 = require("../../../database/id.service");
+const prisma_service_1 = require("../../../database/prisma.service");
+let CreateUserHandler = class CreateUserHandler {
+    constructor(prisma, idService, authService) {
+        this.prisma = prisma;
+        this.idService = idService;
+        this.authService = authService;
+    }
+    async execute({ data }) {
+        if (!(0, consts_1.isValidSystemRole)(data.roleId)) {
+            throw new Error('Invalid SystemRole');
+        }
+        if (data.password.length < 8) {
+            throw new Error('Password must be at least 8 characters');
+        }
+        const user = await this.getUser(data);
+        if (user) {
+            throw new common_1.NotFoundException('User already exists');
+        }
+        if (data.username && (await this.existOrganization(data.username))) {
+            throw new Error(`Organization with name=${data.username} already exists`);
+        }
+        return this.createUserWithOwnOrganization(data);
+    }
+    async createUserWithOwnOrganization(data) {
+        const userId = this.idService.generate();
+        const userCreateInput = {
+            id: userId,
+            username: data.username,
+            email: data.email,
+            isEmailConfirmed: data.isEmailConfirmed,
+            emailCode: data.emailCode,
+            role: {
+                connect: {
+                    id: data.roleId,
+                },
+            },
+            password: await this.authService.hashPassword(data.password),
+        };
+        if (data.username) {
+            userCreateInput.userOrganizations = {
+                create: {
+                    id: this.idService.generate(),
+                    organization: {
+                        create: {
+                            id: data.username,
+                        },
+                    },
+                    role: {
+                        connect: {
+                            id: consts_1.UserRole.organizationOwner,
+                        },
+                    },
+                },
+            };
+        }
+        await this.prisma.user.create({
+            data: userCreateInput,
+        });
+        return userId;
+    }
+    async existOrganization(organizationId) {
+        const result = await this.prisma.organization.findUnique({
+            where: { id: organizationId },
+            select: {
+                id: true,
+            },
+        });
+        return Boolean(result);
+    }
+    getUser(data) {
+        return this.prisma.user.findFirst({
+            where: {
+                OR: [{ email: data.email }, { username: data.username }],
+            },
+        });
+    }
+};
+exports.CreateUserHandler = CreateUserHandler;
+exports.CreateUserHandler = CreateUserHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(impl_1.CreateUserCommand),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        id_service_1.IdService,
+        auth_service_1.AuthService])
+], CreateUserHandler);
+//# sourceMappingURL=create-user.handler.js.map

package/dist/src/auth/commands/handlers/create-user.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-user.handler.js","sourceRoot":"","sources":["../../../../../src/auth/commands/handlers/create-user.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAmD;AACnD,uCAA+D;AAC/D,qDAAoD;AACpD,kCAGgC;AAChC,yCAA8D;AAC9D,6DAAoD;AACpD,qEAA4D;AAIrD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAG5B,YACmB,MAAqB,EACrB,SAAoB,EACpB,WAAwB;QAFxB,WAAM,GAAN,MAAM,CAAe;QACrB,cAAS,GAAT,SAAS,CAAW;QACpB,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAqB;QACvC,IAAI,CAAC,IAAA,0BAAiB,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,0BAAiB,CAAC,qBAAqB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,QAAQ,iBAAiB,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,6BAA6B,CAAC,IAA+B;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QAEzC,MAAM,eAAe,GAA2B;YAC9C,EAAE,EAAE,MAAM;YACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE;gBACJ,OAAO,EAAE;oBACP,EAAE,EAAE,IAAI,CAAC,MAAM;iBAChB;aACF;YACD,QAAQ,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;SAC7D,CAAC;QAEF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,eAAe,CAAC,iBAAiB,GAAG;gBAClC,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;oBAC7B,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,EAAE,EAAE,IAAI,CAAC,QAAQ;yBAClB;qBACF;oBACD,IAAI,EAAE;wBACJ,OAAO,EAAE;4BACP,EAAE,EAAE,iBAAQ,CAAC,iBAAiB;yBAC/B;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,eAAe;SACtB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,cAAsB;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;YACvD,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE;YAC7B,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;aACT;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAEO,OAAO,CAAC,IAA+B;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAChC,KAAK,EAAE;gBACL,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;aACzD;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA3FY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,qBAAc,EAAC,wBAAiB,CAAC;qCAKL,8BAAa;QACV,sBAAS;QACP,0BAAW;GANhC,iBAAiB,CA2F7B"}

package/dist/src/auth/commands/handlers/index.d.ts

@@ -0,0 +1,9 @@
+export * from './login.handler';
+export * from './create-user.handler';
+export * from './check-system-permission.handler';
+export * from './check-organization-permission.handler';
+export * from './check-project-permission.handler';
+export * from './sign-up.handler';
+export * from './login-google.handler';
+export * from './login-github.handler';
+export * from './confirm-email-code.handler';