@revisium/core 0.9.4 → 0.9.6

package/dist/src/features/auth/commands/handlers/check-organization-permission.handler.js

@@ -0,0 +1,67 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CheckOrganizationPermissionHandler = void 0;
+const ability_1 = require("@casl/ability");
+const cqrs_1 = require("@nestjs/cqrs");
+const casl_ability_factory_1 = require("../../casl-ability.factory");
+const check_organization_permission_command_1 = require("../impl/check-organization-permission.command");
+const consts_1 = require("../../consts");
+const utils_1 = require("../../utils");
+const prisma_service_1 = require("../../../../infrastructure/database/prisma.service");
+let CheckOrganizationPermissionHandler = class CheckOrganizationPermissionHandler {
+    constructor(prisma, casl) {
+        this.prisma = prisma;
+        this.casl = casl;
+    }
+    async execute({ data }) {
+        const systemRole = await this.getSystemRole(data);
+        const organizationRole = await this.getOrganizationRole(data);
+        const ability = await this.casl.createAbility(systemRole, organizationRole);
+        for (const permission of data.permissions) {
+            ability_1.ForbiddenError.from(ability)
+                .setMessage(`You are not allowed to ${permission.action} on ${permission.subject}`)
+                .throwUnlessCan(permission.action, permission.subject);
+        }
+        return true;
+    }
+    async getOrganizationRole(data) {
+        if (data.userId) {
+            const result = await this.prisma.userOrganization.findFirst({
+                where: { organizationId: data.organizationId, userId: data.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+    async getSystemRole(data) {
+        if (data.userId) {
+            const result = await this.prisma.user.findUnique({
+                where: { id: data.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+};
+exports.CheckOrganizationPermissionHandler = CheckOrganizationPermissionHandler;
+exports.CheckOrganizationPermissionHandler = CheckOrganizationPermissionHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(check_organization_permission_command_1.CheckOrganizationPermissionCommand),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        casl_ability_factory_1.CaslAbilityFactory])
+], CheckOrganizationPermissionHandler);
+//# sourceMappingURL=check-organization-permission.handler.js.map

package/dist/src/features/auth/commands/handlers/check-organization-permission.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-organization-permission.handler.js","sourceRoot":"","sources":["../../../../../../src/features/auth/commands/handlers/check-organization-permission.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+C;AAC/C,uCAA+D;AAC/D,qEAA4E;AAC5E,yGAA2H;AAC3H,yCAAoD;AACpD,uCAAsD;AACtD,uFAA2E;AAGpE,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAG7C,YACmB,MAAqB,EACrB,IAAwB;QADxB,WAAM,GAAN,MAAM,CAAe;QACrB,SAAI,GAAJ,IAAI,CAAoB;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAsC;QACxD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAE9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAE5E,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,wBAAc,CAAC,IAAI,CAAC,OAAO,CAAC;iBACzB,UAAU,CACT,0BAA0B,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,OAAO,EAAE,CACvE;iBACA,cAAc,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,IAAgD;QAEhD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;gBAC1D,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;gBACnE,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,IAAgD;QAEhD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC/C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;gBAC1B,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;CACF,CAAA;AA1DY,gFAAkC;6CAAlC,kCAAkC;IAD9C,IAAA,qBAAc,EAAC,0EAAkC,CAAC;qCAKtB,8BAAa;QACf,yCAAkB;GALhC,kCAAkC,CA0D9C"}

package/dist/src/features/auth/commands/handlers/check-project-permission.handler.d.ts

@@ -0,0 +1,17 @@
+import { ICommandHandler } from '@nestjs/cqrs';
+import { CaslAbilityFactory } from '../../../../features/auth/casl-ability.factory';
+import { CheckProjectPermissionCommand } from '../../../../features/auth/commands/impl';
+import { PrismaService } from '../../../../infrastructure/database/prisma.service';
+export declare class CheckProjectPermissionHandler implements ICommandHandler<CheckProjectPermissionCommand, true> {
+    private readonly prisma;
+    private readonly casl;
+    constructor(prisma: PrismaService, casl: CaslAbilityFactory);
+    execute({ data }: CheckProjectPermissionCommand): Promise<true>;
+    private getOrganizationRole;
+    private getProjectRole;
+    private resolveProject;
+    private getProjectByProjectName;
+    private getProjectByEndpointId;
+    private getProjectByRevisionId;
+    private getSystemRole;
+}

package/dist/src/features/auth/commands/handlers/check-project-permission.handler.js

@@ -0,0 +1,150 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CheckProjectPermissionHandler = void 0;
+const ability_1 = require("@casl/ability");
+const common_1 = require("@nestjs/common");
+const cqrs_1 = require("@nestjs/cqrs");
+const casl_ability_factory_1 = require("../../casl-ability.factory");
+const impl_1 = require("../impl");
+const consts_1 = require("../../consts");
+const utils_1 = require("../../utils");
+const prisma_service_1 = require("../../../../infrastructure/database/prisma.service");
+let CheckProjectPermissionHandler = class CheckProjectPermissionHandler {
+    constructor(prisma, casl) {
+        this.prisma = prisma;
+        this.casl = casl;
+    }
+    async execute({ data }) {
+        const project = await this.resolveProject(data);
+        const systemRole = await this.getSystemRole(data);
+        const organizationRole = await this.getOrganizationRole({
+            organizationId: project.organizationId,
+            userId: data.userId,
+        });
+        const projectRole = await this.getProjectRole({
+            organizationId: project.organizationId,
+            projectName: project.name,
+            userId: data.userId,
+        });
+        const ability = await this.casl.createAbility(systemRole, organizationRole, projectRole);
+        for (const permission of data.permissions) {
+            ability_1.ForbiddenError.from(ability)
+                .setMessage(`You are not allowed to ${permission.action} on ${permission.subject}`)
+                .throwUnlessCan(permission.action, permission.subject === consts_1.PermissionSubject.Project
+                ? (0, ability_1.subject)(consts_1.PermissionSubject.Project, project)
+                : permission.subject);
+        }
+        return true;
+    }
+    async getOrganizationRole(params) {
+        if (params.userId) {
+            const result = await this.prisma.userOrganization.findFirst({
+                where: { organizationId: params.organizationId, userId: params.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+    async getProjectRole(params) {
+        if (params.userId) {
+            const project = await this.prisma.project.findFirst({
+                where: {
+                    organizationId: params.organizationId,
+                    name: params.projectName,
+                },
+                select: {
+                    id: true,
+                },
+            });
+            if (!project) {
+                return consts_1.UserRole.guest;
+            }
+            const result = await this.prisma.userProject.findFirst({
+                where: { projectId: project.id, userId: params.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+    async resolveProject(data) {
+        if ('organizationId' in data && 'projectName' in data) {
+            return this.getProjectByProjectName(data.organizationId, data.projectName);
+        }
+        else if ('revisionId' in data) {
+            return this.getProjectByRevisionId(data.revisionId);
+        }
+        else if ('endpointId' in data) {
+            return this.getProjectByEndpointId(data.endpointId);
+        }
+        throw new common_1.InternalServerErrorException(`Invalid data=${data}`);
+    }
+    async getProjectByProjectName(organizationId, projectName) {
+        return this.prisma.project.findFirstOrThrow({
+            where: { organizationId, name: projectName },
+        });
+    }
+    async getProjectByEndpointId(endpointId) {
+        const revision = await this.prisma.endpoint.findUniqueOrThrow({
+            where: { id: endpointId },
+            select: {
+                revision: {
+                    select: {
+                        branch: {
+                            select: {
+                                project: true,
+                            },
+                        },
+                    },
+                },
+            },
+        });
+        return revision.revision.branch.project;
+    }
+    async getProjectByRevisionId(revisionId) {
+        const revision = await this.prisma.revision.findUniqueOrThrow({
+            where: { id: revisionId },
+            select: {
+                branch: {
+                    select: {
+                        project: true,
+                    },
+                },
+            },
+        });
+        return revision.branch.project;
+    }
+    async getSystemRole(data) {
+        if (data.userId) {
+            const result = await this.prisma.user.findUnique({
+                where: { id: data.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+};
+exports.CheckProjectPermissionHandler = CheckProjectPermissionHandler;
+exports.CheckProjectPermissionHandler = CheckProjectPermissionHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(impl_1.CheckProjectPermissionCommand),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        casl_ability_factory_1.CaslAbilityFactory])
+], CheckProjectPermissionHandler);
+//# sourceMappingURL=check-project-permission.handler.js.map

package/dist/src/features/auth/commands/handlers/check-project-permission.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-project-permission.handler.js","sourceRoot":"","sources":["../../../../../../src/features/auth/commands/handlers/check-project-permission.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAwD;AACxD,2CAA8D;AAC9D,uCAA+D;AAC/D,qEAA4E;AAC5E,kCAAgF;AAChF,yCAAuE;AACvE,uCAAsD;AACtD,uFAA2E;AAGpE,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IAGxC,YACmB,MAAqB,EACrB,IAAwB;QADxB,WAAM,GAAN,MAAM,CAAe;QACrB,SAAI,GAAJ,IAAI,CAAoB;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAiC;QACnD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAEhD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAElD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC;YACtD,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;YAC5C,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAC3C,UAAU,EACV,gBAAgB,EAChB,WAAW,CACZ,CAAC;QAEF,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,wBAAc,CAAC,IAAI,CAAC,OAAO,CAAC;iBACzB,UAAU,CACT,0BAA0B,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,OAAO,EAAE,CACvE;iBACA,cAAc,CACb,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,OAAO,KAAK,0BAAiB,CAAC,OAAO;gBAC9C,CAAC,CAAC,IAAA,iBAAO,EAAC,0BAAiB,CAAC,OAAO,EAAE,OAAO,CAAC;gBAC7C,CAAC,CAAC,UAAU,CAAC,OAAO,CACvB,CAAC;QACN,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,MAGjC;QACC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;gBAC1D,KAAK,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;gBACvE,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAI5B;QACC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;gBAClD,KAAK,EAAE;oBACL,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,IAAI,EAAE,MAAM,CAAC,WAAW;iBACzB;gBACD,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;iBACT;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,iBAAQ,CAAC,KAAK,CAAC;YACxB,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC;gBACrD,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;gBACvD,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAA2C;QACtE,IAAI,gBAAgB,IAAI,IAAI,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,uBAAuB,CACjC,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,WAAW,CACjB,CAAC;QACJ,CAAC;aAAM,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC;aAAM,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,IAAI,qCAA4B,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACnC,cAAsB,EACtB,WAAmB;QAEnB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC1C,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,UAAkB;QACrD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC5D,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;YACzB,MAAM,EAAE;gBACN,QAAQ,EAAE;oBACR,MAAM,EAAE;wBACN,MAAM,EAAE;4BACN,MAAM,EAAE;gCACN,OAAO,EAAE,IAAI;6BACd;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,UAAkB;QACrD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC5D,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;YACzB,MAAM,EAAE;gBACN,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,OAAO,EAAE,IAAI;qBACd;iBACF;aACF;SACF,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,IAA2C;QAE3C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC/C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;gBAC1B,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;CACF,CAAA;AA3KY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,qBAAc,EAAC,oCAA6B,CAAC;qCAKjB,8BAAa;QACf,yCAAkB;GALhC,6BAA6B,CA2KzC"}

package/dist/src/features/auth/commands/handlers/check-system-permission.handler.d.ts

@@ -0,0 +1,11 @@
+import { ICommandHandler } from '@nestjs/cqrs';
+import { CaslAbilityFactory } from '../../../../features/auth/casl-ability.factory';
+import { CheckSystemPermissionCommand, CheckSystemPermissionCommandReturnType } from '../../../../features/auth/commands/impl';
+import { PrismaService } from '../../../../infrastructure/database/prisma.service';
+export declare class CheckSystemPermissionHandler implements ICommandHandler<CheckSystemPermissionCommand, CheckSystemPermissionCommandReturnType> {
+    private readonly prisma;
+    private readonly casl;
+    constructor(prisma: PrismaService, casl: CaslAbilityFactory);
+    execute({ data }: CheckSystemPermissionCommand): Promise<boolean>;
+    private getSystemRole;
+}

package/dist/src/features/auth/commands/handlers/check-system-permission.handler.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CheckSystemPermissionHandler = void 0;
+const ability_1 = require("@casl/ability");
+const cqrs_1 = require("@nestjs/cqrs");
+const casl_ability_factory_1 = require("../../casl-ability.factory");
+const impl_1 = require("../impl");
+const consts_1 = require("../../consts");
+const utils_1 = require("../../utils");
+const prisma_service_1 = require("../../../../infrastructure/database/prisma.service");
+let CheckSystemPermissionHandler = class CheckSystemPermissionHandler {
+    constructor(prisma, casl) {
+        this.prisma = prisma;
+        this.casl = casl;
+    }
+    async execute({ data }) {
+        const systemRole = await this.getSystemRole(data);
+        const ability = await this.casl.createAbility(systemRole);
+        for (const permission of data.permissions) {
+            ability_1.ForbiddenError.from(ability)
+                .setMessage(`You are not allowed to ${permission.action} on ${permission.subject}`)
+                .throwUnlessCan(permission.action, permission.subject);
+        }
+        return true;
+    }
+    async getSystemRole(data) {
+        if (data.userId) {
+            const result = await this.prisma.user.findUnique({
+                where: { id: data.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+};
+exports.CheckSystemPermissionHandler = CheckSystemPermissionHandler;
+exports.CheckSystemPermissionHandler = CheckSystemPermissionHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(impl_1.CheckSystemPermissionCommand),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        casl_ability_factory_1.CaslAbilityFactory])
+], CheckSystemPermissionHandler);
+//# sourceMappingURL=check-system-permission.handler.js.map

package/dist/src/features/auth/commands/handlers/check-system-permission.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-system-permission.handler.js","sourceRoot":"","sources":["../../../../../../src/features/auth/commands/handlers/check-system-permission.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+C;AAC/C,uCAA+D;AAC/D,qEAA4E;AAC5E,kCAGyC;AACzC,yCAAoD;AACpD,uCAAsD;AACtD,uFAA2E;AAGpE,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IAOvC,YACmB,MAAqB,EACrB,IAAwB;QADxB,WAAM,GAAN,MAAM,CAAe;QACrB,SAAI,GAAJ,IAAI,CAAoB;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAgC;QAClD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAElD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAE1D,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,wBAAc,CAAC,IAAI,CAAC,OAAO,CAAC;iBACzB,UAAU,CACT,0BAA0B,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,OAAO,EAAE,CACvE;iBACA,cAAc,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,IAA0C;QAE1C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC/C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;gBAC1B,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;CACF,CAAA;AA5CY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,qBAAc,EAAC,mCAA4B,CAAC;qCAShB,8BAAa;QACf,yCAAkB;GAThC,4BAA4B,CA4CxC"}

package/dist/src/features/auth/commands/handlers/confirm-email-code.handler.d.ts

@@ -0,0 +1,14 @@
+import { ICommandHandler } from '@nestjs/cqrs';
+import { PrismaService } from '../../../../infrastructure/database/prisma.service';
+import { AuthService } from '../../../../features/auth/auth.service';
+import { ConfirmEmailCodeCommand, ConfirmEmailCodeCommandReturnType } from '../../../../features/auth/commands/impl';
+export declare class ConfirmEmailCodeHandler implements ICommandHandler<ConfirmEmailCodeCommand, ConfirmEmailCodeCommandReturnType> {
+    private readonly prisma;
+    private readonly authService;
+    constructor(prisma: PrismaService, authService: AuthService);
+    execute({ data }: ConfirmEmailCodeCommand): Promise<{
+        accessToken: string;
+    }>;
+    private confirmEmail;
+    private getUser;
+}

package/dist/src/features/auth/commands/handlers/confirm-email-code.handler.js

@@ -0,0 +1,63 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfirmEmailCodeHandler = void 0;
+const common_1 = require("@nestjs/common");
+const cqrs_1 = require("@nestjs/cqrs");
+const prisma_service_1 = require("../../../../infrastructure/database/prisma.service");
+const auth_service_1 = require("../../auth.service");
+const impl_1 = require("../impl");
+let ConfirmEmailCodeHandler = class ConfirmEmailCodeHandler {
+    constructor(prisma, authService) {
+        this.prisma = prisma;
+        this.authService = authService;
+    }
+    async execute({ data }) {
+        const user = await this.getUser(data.code);
+        if (!user) {
+            throw new common_1.UnauthorizedException('Not found user');
+        }
+        if (user.isEmailConfirmed) {
+            throw new common_1.UnauthorizedException('Email is already confirmed');
+        }
+        await this.confirmEmail(user.id);
+        return {
+            accessToken: this.authService.login({
+                username: user.username || '',
+                email: user.email || '',
+                sub: user.id,
+            }),
+        };
+    }
+    confirmEmail(userId) {
+        return this.prisma.user.update({
+            where: { id: userId },
+            data: {
+                isEmailConfirmed: true,
+                emailCode: '',
+            },
+        });
+    }
+    getUser(emailCode) {
+        return this.prisma.user.findFirst({
+            where: {
+                emailCode,
+            },
+        });
+    }
+};
+exports.ConfirmEmailCodeHandler = ConfirmEmailCodeHandler;
+exports.ConfirmEmailCodeHandler = ConfirmEmailCodeHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(impl_1.ConfirmEmailCodeCommand),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        auth_service_1.AuthService])
+], ConfirmEmailCodeHandler);
+//# sourceMappingURL=confirm-email-code.handler.js.map

package/dist/src/features/auth/commands/handlers/confirm-email-code.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm-email-code.handler.js","sourceRoot":"","sources":["../../../../../../src/features/auth/commands/handlers/confirm-email-code.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAuD;AACvD,uCAA+D;AAC/D,uFAA2E;AAC3E,qDAA6D;AAC7D,kCAGyC;AAGlC,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAIlC,YACmB,MAAqB,EACrB,WAAwB;QADxB,WAAM,GAAN,MAAM,CAAe;QACrB,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAEG,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAA2B;QACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE3C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,MAAM,IAAI,8BAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEjC,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;gBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;gBACvB,GAAG,EAAE,IAAI,CAAC,EAAE;aACb,CAAC;SACH,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAC7B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,IAAI,EAAE;gBACJ,gBAAgB,EAAE,IAAI;gBACtB,SAAS,EAAE,EAAE;aACd;SACF,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,SAAiB;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAChC,KAAK,EAAE;gBACL,SAAS;aACV;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAhDY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,qBAAc,EAAC,8BAAuB,CAAC;qCAMX,8BAAa;QACR,0BAAW;GANhC,uBAAuB,CAgDnC"}

package/dist/src/features/auth/commands/handlers/create-user.handler.d.ts

@@ -0,0 +1,15 @@
+import { ICommandHandler } from '@nestjs/cqrs';
+import { AuthService } from '../../../../features/auth/auth.service';
+import { CreateUserCommand, CreateUserCommandReturnType } from '../../../../features/auth/commands/impl';
+import { IdService } from '../../../../infrastructure/database/id.service';
+import { PrismaService } from '../../../../infrastructure/database/prisma.service';
+export declare class CreateUserHandler implements ICommandHandler<CreateUserCommand, CreateUserCommandReturnType> {
+    private readonly prisma;
+    private readonly idService;
+    private readonly authService;
+    constructor(prisma: PrismaService, idService: IdService, authService: AuthService);
+    execute({ data }: CreateUserCommand): Promise<string>;
+    private createUserWithOwnOrganization;
+    private existOrganization;
+    private getUser;
+}

package/dist/src/features/auth/commands/handlers/create-user.handler.js

@@ -0,0 +1,103 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateUserHandler = void 0;
+const common_1 = require("@nestjs/common");
+const cqrs_1 = require("@nestjs/cqrs");
+const auth_service_1 = require("../../auth.service");
+const impl_1 = require("../impl");
+const consts_1 = require("../../consts");
+const id_service_1 = require("../../../../infrastructure/database/id.service");
+const prisma_service_1 = require("../../../../infrastructure/database/prisma.service");
+let CreateUserHandler = class CreateUserHandler {
+    constructor(prisma, idService, authService) {
+        this.prisma = prisma;
+        this.idService = idService;
+        this.authService = authService;
+    }
+    async execute({ data }) {
+        if (!(0, consts_1.isValidSystemRole)(data.roleId)) {
+            throw new common_1.BadRequestException('Invalid SystemRole');
+        }
+        if (data.password.length < 8) {
+            throw new common_1.BadRequestException('Password must be at least 8 characters');
+        }
+        const user = await this.getUser(data);
+        if (user) {
+            throw new common_1.BadRequestException('User already exists');
+        }
+        if (data.username && (await this.existOrganization(data.username))) {
+            throw new common_1.BadRequestException(`Organization with name=${data.username} already exists`);
+        }
+        return this.createUserWithOwnOrganization(data);
+    }
+    async createUserWithOwnOrganization(data) {
+        const userId = this.idService.generate();
+        const userCreateInput = {
+            id: userId,
+            username: data.username,
+            email: data.email,
+            isEmailConfirmed: data.isEmailConfirmed,
+            emailCode: data.emailCode,
+            role: {
+                connect: {
+                    id: data.roleId,
+                },
+            },
+            password: await this.authService.hashPassword(data.password),
+        };
+        if (data.username) {
+            userCreateInput.userOrganizations = {
+                create: {
+                    id: this.idService.generate(),
+                    organization: {
+                        create: {
+                            id: data.username,
+                        },
+                    },
+                    role: {
+                        connect: {
+                            id: consts_1.UserRole.organizationOwner,
+                        },
+                    },
+                },
+            };
+        }
+        await this.prisma.user.create({
+            data: userCreateInput,
+        });
+        return userId;
+    }
+    async existOrganization(organizationId) {
+        const result = await this.prisma.organization.findUnique({
+            where: { id: organizationId },
+            select: {
+                id: true,
+            },
+        });
+        return Boolean(result);
+    }
+    getUser(data) {
+        return this.prisma.user.findFirst({
+            where: {
+                OR: [{ email: data.email }, { username: data.username }],
+            },
+        });
+    }
+};
+exports.CreateUserHandler = CreateUserHandler;
+exports.CreateUserHandler = CreateUserHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(impl_1.CreateUserCommand),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        id_service_1.IdService,
+        auth_service_1.AuthService])
+], CreateUserHandler);
+//# sourceMappingURL=create-user.handler.js.map

package/dist/src/features/auth/commands/handlers/create-user.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-user.handler.js","sourceRoot":"","sources":["../../../../../../src/features/auth/commands/handlers/create-user.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAqD;AACrD,uCAA+D;AAC/D,qDAA6D;AAC7D,kCAGyC;AACzC,yCAAuE;AACvE,+EAAmE;AACnE,uFAA2E;AAIpE,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAG5B,YACmB,MAAqB,EACrB,SAAoB,EACpB,WAAwB;QAFxB,WAAM,GAAN,MAAM,CAAe;QACrB,cAAS,GAAT,SAAS,CAAW;QACpB,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAqB;QACvC,IAAI,CAAC,IAAA,0BAAiB,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,4BAAmB,CAAC,oBAAoB,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,4BAAmB,CAAC,qBAAqB,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,4BAAmB,CAC3B,0BAA0B,IAAI,CAAC,QAAQ,iBAAiB,CACzD,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,6BAA6B,CAAC,IAA+B;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QAEzC,MAAM,eAAe,GAA2B;YAC9C,EAAE,EAAE,MAAM;YACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE;gBACJ,OAAO,EAAE;oBACP,EAAE,EAAE,IAAI,CAAC,MAAM;iBAChB;aACF;YACD,QAAQ,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;SAC7D,CAAC;QAEF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,eAAe,CAAC,iBAAiB,GAAG;gBAClC,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;oBAC7B,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,EAAE,EAAE,IAAI,CAAC,QAAQ;yBAClB;qBACF;oBACD,IAAI,EAAE;wBACJ,OAAO,EAAE;4BACP,EAAE,EAAE,iBAAQ,CAAC,iBAAiB;yBAC/B;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,eAAe;SACtB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,cAAsB;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;YACvD,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE;YAC7B,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;aACT;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAEO,OAAO,CAAC,IAA+B;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAChC,KAAK,EAAE;gBACL,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;aACzD;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA7FY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,qBAAc,EAAC,wBAAiB,CAAC;qCAKL,8BAAa;QACV,sBAAS;QACP,0BAAW;GANhC,iBAAiB,CA6F7B"}

package/dist/src/features/auth/commands/handlers/index.d.ts

@@ -0,0 +1,9 @@
+export * from '../../../../features/auth/commands/handlers/login.handler';
+export * from '../../../../features/auth/commands/handlers/create-user.handler';
+export * from '../../../../features/auth/commands/handlers/check-system-permission.handler';
+export * from '../../../../features/auth/commands/handlers/check-organization-permission.handler';
+export * from '../../../../features/auth/commands/handlers/check-project-permission.handler';
+export * from '../../../../features/auth/commands/handlers/sign-up.handler';
+export * from '../../../../features/auth/commands/handlers/login-google.handler';
+export * from '../../../../features/auth/commands/handlers/login-github.handler';
+export * from '../../../../features/auth/commands/handlers/confirm-email-code.handler';

package/dist/src/features/auth/commands/handlers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/features/auth/commands/handlers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAAkE;AAClE,wDAAwE;AACxE,oEAAoF;AACpF,0EAA0F;AAC1F,qEAAqF;AACrF,oDAAoE;AACpE,yDAAyE;AACzE,yDAAyE;AACzE,+DAA+E"}

package/dist/src/features/auth/commands/handlers/login-github.handler.d.ts

@@ -0,0 +1,17 @@
+import { CommandBus, ICommandHandler } from '@nestjs/cqrs';
+import { AuthService } from '../../../../features/auth/auth.service';
+import { LoginGithubCommand, LoginGithubCommandReturnType } from '../../../../features/auth/commands/impl';
+import { GitHubAuthService } from '../../../../features/auth/github-oauth.service';
+import { PrismaService } from '../../../../infrastructure/database/prisma.service';
+export declare class LoginGithubHandler implements ICommandHandler<LoginGithubCommand, LoginGithubCommandReturnType> {
+    private readonly commandBus;
+    private readonly prisma;
+    private readonly githubOauthService;
+    private readonly authService;
+    constructor(commandBus: CommandBus, prisma: PrismaService, githubOauthService: GitHubAuthService, authService: AuthService);
+    execute({ data }: LoginGithubCommand): Promise<{
+        accessToken: string;
+    }>;
+    private getUser;
+    private createUser;
+}

package/dist/src/features/auth/commands/handlers/login-github.handler.js

@@ -0,0 +1,68 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoginGithubHandler = void 0;
+const common_1 = require("@nestjs/common");
+const cqrs_1 = require("@nestjs/cqrs");
+const nanoid_1 = require("nanoid");
+const auth_service_1 = require("../../auth.service");
+const impl_1 = require("../impl");
+const consts_1 = require("../../consts");
+const github_oauth_service_1 = require("../../github-oauth.service");
+const prisma_service_1 = require("../../../../infrastructure/database/prisma.service");
+let LoginGithubHandler = class LoginGithubHandler {
+    constructor(commandBus, prisma, githubOauthService, authService) {
+        this.commandBus = commandBus;
+        this.prisma = prisma;
+        this.githubOauthService = githubOauthService;
+        this.authService = authService;
+    }
+    async execute({ data }) {
+        const email = await this.githubOauthService.getEmail(data.code);
+        const user = (await this.getUser(email)) || (await this.createUser(email));
+        return {
+            accessToken: this.authService.login({
+                username: user.username,
+                email,
+                sub: user.id,
+            }),
+        };
+    }
+    getUser(emailOrUserName) {
+        return this.prisma.user.findFirst({
+            where: {
+                OR: [{ email: emailOrUserName }, { username: emailOrUserName }],
+            },
+        });
+    }
+    async createUser(email) {
+        await this.commandBus.execute(new impl_1.CreateUserCommand({
+            email,
+            password: await this.authService.hashPassword((0, nanoid_1.nanoid)()),
+            isEmailConfirmed: true,
+            roleId: consts_1.UserSystemRoles.systemUser,
+        }));
+        const user = await this.getUser(email);
+        if (!user) {
+            throw new common_1.InternalServerErrorException('Invalid user');
+        }
+        return user;
+    }
+};
+exports.LoginGithubHandler = LoginGithubHandler;
+exports.LoginGithubHandler = LoginGithubHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(impl_1.LoginGithubCommand),
+    __metadata("design:paramtypes", [cqrs_1.CommandBus,
+        prisma_service_1.PrismaService,
+        github_oauth_service_1.GitHubAuthService,
+        auth_service_1.AuthService])
+], LoginGithubHandler);
+//# sourceMappingURL=login-github.handler.js.map

package/dist/src/features/auth/commands/handlers/login-github.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-github.handler.js","sourceRoot":"","sources":["../../../../../../src/features/auth/commands/handlers/login-github.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA8D;AAC9D,uCAA2E;AAC3E,mCAAgC;AAChC,qDAA6D;AAC7D,kCAKyC;AACzC,yCAA2D;AAC3D,qEAA2E;AAC3E,uFAA2E;AAGpE,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAG7B,YACmB,UAAsB,EACtB,MAAqB,EACrB,kBAAqC,EACrC,WAAwB;QAHxB,eAAU,GAAV,UAAU,CAAY;QACtB,WAAM,GAAN,MAAM,CAAe;QACrB,uBAAkB,GAAlB,kBAAkB,CAAmB;QACrC,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAsB;QACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhE,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAE3E,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK;gBACL,GAAG,EAAE,IAAI,CAAC,EAAE;aACb,CAAC;SACH,CAAC;IACJ,CAAC;IAEO,OAAO,CAAC,eAAuB;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAChC,KAAK,EAAE;gBACL,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;aAChE;SACF,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,KAAa;QACpC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAI3B,IAAI,wBAAiB,CAAC;YACpB,KAAK;YACL,QAAQ,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,IAAA,eAAM,GAAE,CAAC;YACvD,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,wBAAe,CAAC,UAAU;SACnC,CAAC,CACH,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEvC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,qCAA4B,CAAC,cAAc,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AArDY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,qBAAc,EAAC,yBAAkB,CAAC;qCAKF,iBAAU;QACd,8BAAa;QACD,wCAAiB;QACxB,0BAAW;GAPhC,kBAAkB,CAqD9B"}