@servicelabsco/slabs-access-manager 1.0.53 → 1.0.54

package/dist/access/middlewares/external.access.middleware.d.ts

@@ -1,9 +1,7 @@
 import { NestMiddleware } from '@nestjs/common';
-import { AuthService } from '@servicelabsco/nestjs-utility-services';
-import { ApiAccountService } from '../services/api.account.service';
+import { CredentialResolveService } from '../services/credential.resolve.service';
 export declare class ExternalAccessMiddleware implements NestMiddleware {
-    protected readonly apiAccountService: ApiAccountService;
-    protected readonly authService: AuthService;
-    constructor(apiAccountService: ApiAccountService, authService: AuthService);
+    private readonly credentialResolveService;
+    constructor(credentialResolveService: CredentialResolveService);
     use(req: any, res: Response, next: Function): Promise<void>;
 }

package/dist/access/middlewares/external.access.middleware.js

@@ -12,32 +12,24 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ExternalAccessMiddleware = void 0;
 const common_1 = require("@nestjs/common");
 const nestjs_utility_services_1 = require("@servicelabsco/nestjs-utility-services");
-const api_account_service_1 = require("../services/api.account.service");
+const extract_client_credentials_1 = require("../libraries/extract.client.credentials");
+const credential_resolve_service_1 = require("../services/credential.resolve.service");
 let ExternalAccessMiddleware = class ExternalAccessMiddleware {
-    constructor(apiAccountService, authService) {
-        this.apiAccountService = apiAccountService;
-        this.authService = authService;
+    constructor(credentialResolveService) {
+        this.credentialResolveService = credentialResolveService;
     }
     async use(req, res, next) {
-        const clientId = req.headers['x-client-id'];
-        const clientSecret = req.headers['x-client-secret'];
-        if (!(clientId && clientSecret))
+        const creds = extract_client_credentials_1.ExtractClientCredentials.fromHeaders(req.headers);
+        if (!creds)
             throw new nestjs_utility_services_1.AccessException('Invalid client headers');
-        const ip = req.headers['x-forwarded-for'] || req.ip || req.ips[0];
-        const payload = { client_id: clientId, client_secret: clientSecret, ip };
-        const client = await this.apiAccountService.validate(payload);
-        if (!client)
-            throw new nestjs_utility_services_1.AccessException(`Invalid credentials`);
-        const accessObject = await this.authService.getUserObject(2);
-        accessObject.auth_attributes = { client_id: client, business_id: client.business_id };
-        nestjs_utility_services_1.Auth.login(accessObject);
+        const ip = req.headers['x-forwarded-for'] || req.ip || req.ips?.[0];
+        await this.credentialResolveService.authenticate(creds.clientId, creds.clientSecret, ip);
         next();
     }
 };
 exports.ExternalAccessMiddleware = ExternalAccessMiddleware;
 exports.ExternalAccessMiddleware = ExternalAccessMiddleware = __decorate([
     (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [api_account_service_1.ApiAccountService,
-        nestjs_utility_services_1.AuthService])
+    __metadata("design:paramtypes", [credential_resolve_service_1.CredentialResolveService])
 ], ExternalAccessMiddleware);
 //# sourceMappingURL=external.access.middleware.js.map

package/dist/access/middlewares/external.access.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"external.access.middleware.js","sourceRoot":"","sources":["../../../src/access/middlewares/external.access.middleware.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4D;AAC5D,oFAAiH;AACjH,yEAAoE;AAS7D,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAKjC,YACuB,iBAAoC,EACpC,WAAwB;QADxB,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,gBAAW,GAAX,WAAW,CAAa;IAC5C,CAAC;IAaJ,KAAK,CAAC,GAAG,CAAC,GAAQ,EAAE,GAAa,EAAE,IAAc;QAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAEpD,IAAI,CAAC,CAAC,QAAQ,IAAI,YAAY,CAAC;YAAE,MAAM,IAAI,yCAAe,CAAC,wBAAwB,CAAC,CAAC;QAErF,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAElE,MAAM,OAAO,GAAwB,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAE9F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,yCAAe,CAAC,qBAAqB,CAAC,CAAC;QAE9D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAE7D,YAAY,CAAC,eAAe,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;QAGtF,8BAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAEzB,IAAI,EAAE,CAAC;IACX,CAAC;CACJ,CAAA;AA3CY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;qCAOiC,uCAAiB;QACvB,qCAAW;GAPtC,wBAAwB,CA2CpC"}
+{"version":3,"file":"external.access.middleware.js","sourceRoot":"","sources":["../../../src/access/middlewares/external.access.middleware.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4D;AAC5D,oFAAyE;AACzE,wFAAmF;AACnF,uFAAkF;AAQ3E,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACjC,YAA6B,wBAAkD;QAAlD,6BAAwB,GAAxB,wBAAwB,CAA0B;IAAG,CAAC;IAEnF,KAAK,CAAC,GAAG,CAAC,GAAQ,EAAE,GAAa,EAAE,IAAc;QAC7C,MAAM,KAAK,GAAG,qDAAwB,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,yCAAe,CAAC,wBAAwB,CAAC,CAAC;QAEhE,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAEzF,IAAI,EAAE,CAAC;IACX,CAAC;CACJ,CAAA;AAZY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;qCAE8C,qDAAwB;GADtE,wBAAwB,CAYpC"}

package/dist/access/middlewares/index.d.ts

@@ -1,3 +1,4 @@
 export * from './business.middleware';
 export * from './external.access.middleware';
+export * from './mcp.access.middleware';
 export * from './user.business.access.middleware';

package/dist/access/middlewares/index.js

@@ -16,5 +16,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./business.middleware"), exports);
 __exportStar(require("./external.access.middleware"), exports);
+__exportStar(require("./mcp.access.middleware"), exports);
 __exportStar(require("./user.business.access.middleware"), exports);
 //# sourceMappingURL=index.js.map

package/dist/access/middlewares/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/access/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AAAA,+DAA6C;AAAA,oEAAiD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/access/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AAAA,+DAA6C;AAAA,0DAAwC;AAAA,oEAAiD"}

package/dist/access/middlewares/mcp.access.middleware.d.ts

@@ -0,0 +1,7 @@
+import { NestMiddleware } from '@nestjs/common';
+import { CredentialResolveService } from '../services/credential.resolve.service';
+export declare class McpAccessMiddleware implements NestMiddleware {
+    private readonly credentialResolveService;
+    constructor(credentialResolveService: CredentialResolveService);
+    use(req: any, res: any, next: () => void): Promise<void>;
+}

package/dist/access/middlewares/mcp.access.middleware.js

@@ -0,0 +1,34 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpAccessMiddleware = void 0;
+const common_1 = require("@nestjs/common");
+const extract_client_credentials_1 = require("../libraries/extract.client.credentials");
+const credential_resolve_service_1 = require("../services/credential.resolve.service");
+let McpAccessMiddleware = class McpAccessMiddleware {
+    constructor(credentialResolveService) {
+        this.credentialResolveService = credentialResolveService;
+    }
+    async use(req, res, next) {
+        const creds = extract_client_credentials_1.ExtractClientCredentials.fromHeaders(req.headers);
+        if (!creds)
+            return next();
+        const ip = req.headers['x-forwarded-for'] || req.ip || req.ips?.[0];
+        await this.credentialResolveService.authenticate(creds.clientId, creds.clientSecret, ip);
+        next();
+    }
+};
+exports.McpAccessMiddleware = McpAccessMiddleware;
+exports.McpAccessMiddleware = McpAccessMiddleware = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [credential_resolve_service_1.CredentialResolveService])
+], McpAccessMiddleware);
+//# sourceMappingURL=mcp.access.middleware.js.map

package/dist/access/middlewares/mcp.access.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.access.middleware.js","sourceRoot":"","sources":["../../../src/access/middlewares/mcp.access.middleware.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4D;AAC5D,wFAAmF;AACnF,uFAAkF;AAS3E,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC5B,YAA6B,wBAAkD;QAAlD,6BAAwB,GAAxB,wBAAwB,CAA0B;IAAG,CAAC;IAEnF,KAAK,CAAC,GAAG,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAgB;QAC1C,MAAM,KAAK,GAAG,qDAAwB,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,EAAE,CAAC;QAE1B,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAEzF,IAAI,EAAE,CAAC;IACX,CAAC;CACJ,CAAA;AAZY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;qCAE8C,qDAAwB;GADtE,mBAAmB,CAY/B"}

package/dist/access/services/credential.resolve.service.d.ts

@@ -0,0 +1,22 @@
+import { AuthService } from '@servicelabsco/nestjs-utility-services';
+import { ApiAccountService } from './api.account.service';
+import { UserBusinessAccessService } from './user.business.access.service';
+export type ResolvedCredentialKind = 'user' | 'api';
+export interface ResolvedCredential {
+    kind: ResolvedCredentialKind;
+    clientId: string;
+    businessId: number;
+    userId: number;
+}
+export declare class CredentialResolveService {
+    private readonly apiAccountService;
+    private readonly userBusinessAccessService;
+    private readonly authService;
+    constructor(apiAccountService: ApiAccountService, userBusinessAccessService: UserBusinessAccessService, authService: AuthService);
+    authenticate(clientId: string, clientSecret: string, ip?: string | string[]): Promise<ResolvedCredential>;
+    resolve(clientId: string, clientSecret: string, ip?: string | string[]): Promise<ResolvedCredential>;
+    private login;
+    private touchUserSecretActivity;
+    private normalizeIp;
+    private firstIp;
+}

package/dist/access/services/credential.resolve.service.js

@@ -0,0 +1,106 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CredentialResolveService = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_utility_services_1 = require("@servicelabsco/nestjs-utility-services");
+const product_type_enum_1 = require("../enums/product.type.enum");
+const user_business_secret_entity_1 = require("../entities/user.business.secret.entity");
+const api_account_service_1 = require("./api.account.service");
+const user_business_access_service_1 = require("./user.business.access.service");
+let CredentialResolveService = class CredentialResolveService {
+    constructor(apiAccountService, userBusinessAccessService, authService) {
+        this.apiAccountService = apiAccountService;
+        this.userBusinessAccessService = userBusinessAccessService;
+        this.authService = authService;
+    }
+    async authenticate(clientId, clientSecret, ip) {
+        const resolved = await this.resolve(clientId, clientSecret, ip);
+        await this.login(resolved, this.firstIp(ip));
+        return resolved;
+    }
+    async resolve(clientId, clientSecret, ip) {
+        const payload = {
+            client_id: clientId,
+            client_secret: clientSecret,
+            ip: this.normalizeIp(ip),
+        };
+        const userSecret = await user_business_secret_entity_1.UserBusinessSecretEntity.findOne({ where: { client_id: clientId } });
+        if (userSecret) {
+            const data = await this.userBusinessAccessService.validate(payload);
+            await this.touchUserSecretActivity(data.user_id, data.client_id);
+            return {
+                kind: 'user',
+                clientId: data.client_id,
+                businessId: data.business_id,
+                userId: data.user_id,
+            };
+        }
+        const api = await this.apiAccountService.validate(payload);
+        if (!api)
+            throw new nestjs_utility_services_1.AccessException('Invalid credentials');
+        return {
+            kind: 'api',
+            clientId: api.client_id,
+            businessId: api.business_id,
+            userId: 2,
+        };
+    }
+    async login(resolved, ip) {
+        const accessObject = await this.authService.getUserObject(resolved.userId);
+        if (this.authService.isUserBlocked(accessObject)) {
+            throw new nestjs_utility_services_1.OperationException('This user is blocked from the platform');
+        }
+        if (resolved.kind === 'user') {
+            nestjs_utility_services_1.Auth.login({
+                ...accessObject,
+                req: { ip },
+                client_id: resolved.clientId,
+                business_id: resolved.businessId,
+                auth_attributes: {
+                    business_id: resolved.businessId,
+                    product_id: product_type_enum_1.ProductTypeEnum.EMPLOYEE,
+                    api_key_kind: 'user',
+                    client_id: resolved.clientId,
+                },
+            });
+            return;
+        }
+        accessObject.auth_attributes = {
+            client_id: resolved.clientId,
+            business_id: resolved.businessId,
+            api_key_kind: 'api',
+        };
+        nestjs_utility_services_1.Auth.login(accessObject);
+    }
+    async touchUserSecretActivity(userId, clientId) {
+        await user_business_secret_entity_1.UserBusinessSecretEntity.update({ user_id: userId, client_id: clientId }, { last_activity_at: new Date() });
+    }
+    normalizeIp(ip) {
+        return this.firstIp(ip);
+    }
+    firstIp(ip) {
+        if (!ip)
+            return undefined;
+        const raw = Array.isArray(ip) ? ip[0] : ip;
+        return (String(raw || '')
+            .split(',')[0]
+            .trim() || undefined);
+    }
+};
+exports.CredentialResolveService = CredentialResolveService;
+exports.CredentialResolveService = CredentialResolveService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [api_account_service_1.ApiAccountService,
+        user_business_access_service_1.UserBusinessAccessService,
+        nestjs_utility_services_1.AuthService])
+], CredentialResolveService);
+//# sourceMappingURL=credential.resolve.service.js.map

package/dist/access/services/credential.resolve.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.resolve.service.js","sourceRoot":"","sources":["../../../src/access/services/credential.resolve.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,oFAAqI;AACrI,kEAA6D;AAC7D,yFAAmF;AACnF,+DAA0D;AAC1D,iFAA2E;AAgBpE,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACjC,YACqB,iBAAoC,EACpC,yBAAoD,EACpD,WAAwB;QAFxB,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,8BAAyB,GAAzB,yBAAyB,CAA2B;QACpD,gBAAW,GAAX,WAAW,CAAa;IAC1C,CAAC;IAKJ,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,YAAoB,EAAE,EAAsB;QAC7E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,OAAO,QAAQ,CAAC;IACpB,CAAC;IAKD,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,YAAoB,EAAE,EAAsB;QAExE,MAAM,OAAO,GAAwB;YACjC,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,YAAY;YAC3B,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAQ;SAClC,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,sDAAwB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9F,IAAI,UAAU,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpE,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAEjE,OAAO;gBACH,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI,CAAC,SAAS;gBACxB,UAAU,EAAE,IAAI,CAAC,WAAW;gBAC5B,MAAM,EAAE,IAAI,CAAC,OAAO;aACvB,CAAC;QACN,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,yCAAe,CAAC,qBAAqB,CAAC,CAAC;QAE3D,OAAO;YACH,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,MAAM,EAAE,CAAC;SACZ,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,QAA4B,EAAE,EAAW;QACzD,MAAM,YAAY,GAAQ,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEhF,IAAI,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,4CAAkB,CAAC,wCAAwC,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,8BAAI,CAAC,KAAK,CAAC;gBACP,GAAG,YAAY;gBACf,GAAG,EAAE,EAAE,EAAE,EAAE;gBACX,SAAS,EAAE,QAAQ,CAAC,QAAQ;gBAC5B,WAAW,EAAE,QAAQ,CAAC,UAAU;gBAChC,eAAe,EAAE;oBACb,WAAW,EAAE,QAAQ,CAAC,UAAU;oBAChC,UAAU,EAAE,mCAAe,CAAC,QAAQ;oBACpC,YAAY,EAAE,MAAM;oBACpB,SAAS,EAAE,QAAQ,CAAC,QAAQ;iBAC/B;aACJ,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QAED,YAAY,CAAC,eAAe,GAAG;YAC3B,SAAS,EAAE,QAAQ,CAAC,QAAQ;YAC5B,WAAW,EAAE,QAAQ,CAAC,UAAU;YAChC,YAAY,EAAE,KAAK;SACtB,CAAC;QACF,8BAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,MAAc,EAAE,QAAgB;QAClE,MAAM,sDAAwB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IACtH,CAAC;IAEO,WAAW,CAAC,EAAsB;QACtC,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAEO,OAAO,CAAC,EAAsB;QAClC,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,CACH,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACb,IAAI,EAAE,IAAI,SAAS,CAC3B,CAAC;IACN,CAAC;CACJ,CAAA;AAnGY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;qCAG+B,uCAAiB;QACT,wDAAyB;QACvC,qCAAW;GAJpC,wBAAwB,CAmGpC"}

package/dist/access/services/device.auth.service.d.ts

@@ -0,0 +1,50 @@
+import { AccessBusinessService } from './access.business.service';
+export type DevicePollStatus = 'pending' | 'approved' | 'denied' | 'expired';
+export declare class DeviceAuthService {
+    private readonly accessBusinessService;
+    constructor(accessBusinessService: AccessBusinessService);
+    start(): Promise<{
+        device_code: string;
+        user_code: string;
+        verification_uri: string;
+        verification_uri_complete: string;
+        expires_in: number;
+        interval: number;
+    }>;
+    getForApproval(userCode: string): Promise<{
+        status: "not_found";
+        user_code?: undefined;
+        expires_at?: undefined;
+    } | {
+        status: "denied";
+        user_code: string;
+        expires_at?: undefined;
+    } | {
+        status: "decided";
+        user_code: string;
+        expires_at?: undefined;
+    } | {
+        status: "expired";
+        user_code: string;
+        expires_at?: undefined;
+    } | {
+        status: "pending";
+        user_code: string;
+        expires_at: Date;
+    }>;
+    decide(userCode: string, action: 'approve' | 'deny', businessId?: number): Promise<{
+        status: "denied" | "already_decided";
+        business_id?: undefined;
+    } | {
+        status: "approved";
+        business_id: number;
+    }>;
+    poll(deviceCode: string): Promise<Record<string, unknown>>;
+    private mintPersonalKey;
+    private resolveBusinessForApprove;
+    private findByUserCode;
+    private normalizeUserCode;
+    private generateUserCode;
+    private hash;
+    private verificationUri;
+}

package/dist/access/services/device.auth.service.js

@@ -0,0 +1,177 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeviceAuthService = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_utility_services_1 = require("@servicelabsco/nestjs-utility-services");
+const crypto_1 = require("crypto");
+const typeorm_1 = require("typeorm");
+const device_code_entity_1 = require("../entities/device.code.entity");
+const access_business_entity_1 = require("../entities/access.business.entity");
+const create_user_business_secret_1 = require("../libraries/create.user.business.secret");
+const extract_client_credentials_1 = require("../libraries/extract.client.credentials");
+const access_business_service_1 = require("./access.business.service");
+const DEVICE_TTL_MS = 15 * 60_000;
+const POLL_INTERVAL_S = 5;
+const CODE_ALPHABET = 'BCDFGHJKMNPQRSTVWXYZ23456789';
+let DeviceAuthService = class DeviceAuthService {
+    constructor(accessBusinessService) {
+        this.accessBusinessService = accessBusinessService;
+    }
+    async start() {
+        const deviceCode = (0, crypto_1.randomBytes)(32).toString('hex');
+        const userCode = this.generateUserCode();
+        const row = device_code_entity_1.DeviceCodeEntity.create({
+            device_code_hash: this.hash(deviceCode),
+            user_code: userCode,
+            expires_at: new Date(Date.now() + DEVICE_TTL_MS),
+        });
+        await row.save();
+        const verificationUri = this.verificationUri();
+        return {
+            device_code: deviceCode,
+            user_code: userCode,
+            verification_uri: verificationUri,
+            verification_uri_complete: `${verificationUri}?code=${encodeURIComponent(userCode)}`,
+            expires_in: DEVICE_TTL_MS / 1000,
+            interval: POLL_INTERVAL_S,
+        };
+    }
+    async getForApproval(userCode) {
+        const row = await this.findByUserCode(userCode);
+        if (!row)
+            return { status: 'not_found' };
+        if (row.denied_at)
+            return { status: 'denied', user_code: row.user_code };
+        if (row.consumed_at || row.approved_at)
+            return { status: 'decided', user_code: row.user_code };
+        if (row.expires_at.getTime() <= Date.now())
+            return { status: 'expired', user_code: row.user_code };
+        return {
+            status: 'pending',
+            user_code: row.user_code,
+            expires_at: row.expires_at,
+        };
+    }
+    async decide(userCode, action, businessId) {
+        const user = nestjs_utility_services_1.Auth.user();
+        if (!user?.id)
+            throw new nestjs_utility_services_1.AccessException('Login required to approve device login.');
+        const row = await this.findByUserCode(userCode);
+        if (!row)
+            throw new nestjs_utility_services_1.OperationException('Unknown device code.');
+        if (row.expires_at.getTime() <= Date.now())
+            throw new nestjs_utility_services_1.OperationException('This login expired. Start again from the CLI.');
+        if (row.denied_at || row.approved_at)
+            return { status: 'already_decided' };
+        if (action === 'deny') {
+            const denied = await device_code_entity_1.DeviceCodeEntity.update({ id: row.id, approved_at: (0, typeorm_1.IsNull)(), denied_at: (0, typeorm_1.IsNull)() }, { denied_at: new Date(), approved_by_user_id: user.id });
+            return { status: denied.affected ? 'denied' : 'already_decided' };
+        }
+        const business = await this.resolveBusinessForApprove(businessId);
+        const claimed = await device_code_entity_1.DeviceCodeEntity.update({ id: row.id, approved_at: (0, typeorm_1.IsNull)(), denied_at: (0, typeorm_1.IsNull)() }, {
+            approved_at: new Date(),
+            approved_by_user_id: user.id,
+            business_id: business.id,
+        });
+        if (!claimed.affected)
+            return { status: 'already_decided' };
+        return { status: 'approved', business_id: business.id };
+    }
+    async poll(deviceCode) {
+        const row = await device_code_entity_1.DeviceCodeEntity.findOne({ where: { device_code_hash: this.hash(deviceCode) } });
+        if (!row)
+            return { status: 'expired' };
+        if (row.denied_at)
+            return { status: 'denied' };
+        if (row.consumed_at)
+            return { status: 'expired' };
+        if (row.expires_at.getTime() <= Date.now())
+            return { status: 'expired' };
+        if (!row.approved_at)
+            return { status: 'pending' };
+        const claimed = await device_code_entity_1.DeviceCodeEntity.update({ id: row.id, consumed_at: (0, typeorm_1.IsNull)() }, { consumed_at: new Date() });
+        if (!claimed.affected)
+            return { status: 'expired' };
+        const minted = await this.mintPersonalKey(row);
+        return {
+            status: 'approved',
+            access_token: minted.access_token,
+            token_type: 'Bearer',
+            client_id: minted.client_id,
+            client_secret: minted.client_secret,
+        };
+    }
+    async mintPersonalKey(row) {
+        if (!row.approved_by_user_id || !row.business_id) {
+            throw new nestjs_utility_services_1.OperationException('Device login is missing approver or business.');
+        }
+        const business = await access_business_entity_1.AccessBusinessEntity.findOne({ where: { id: row.business_id } });
+        if (!business)
+            throw new nestjs_utility_services_1.OperationException('Business for device login no longer exists.');
+        const accessObject = { id: row.approved_by_user_id, auth_attributes: { business_id: business.id } };
+        nestjs_utility_services_1.Auth.login(accessObject);
+        const name = `CLI · device login · ${new Date().toISOString().slice(0, 16)}`;
+        const secret = await new create_user_business_secret_1.CreateUserBusinessSecret(business).process({ name });
+        row.user_secret_id = secret.id;
+        await row.save();
+        return {
+            client_id: secret.client_id,
+            client_secret: secret.client_secret,
+            access_token: extract_client_credentials_1.ExtractClientCredentials.formatPersonalAccessToken(secret.client_id, secret.client_secret),
+        };
+    }
+    async resolveBusinessForApprove(businessId) {
+        if (businessId) {
+            const business = await access_business_entity_1.AccessBusinessEntity.findOne({ where: { id: businessId } });
+            if (!business)
+                throw new nestjs_utility_services_1.OperationException('Unknown business_id.');
+            return business;
+        }
+        return this.accessBusinessService.validateAccess();
+    }
+    async findByUserCode(userCode) {
+        const formatted = this.normalizeUserCode(userCode);
+        if (!formatted)
+            return null;
+        return device_code_entity_1.DeviceCodeEntity.findOne({ where: { user_code: formatted } });
+    }
+    normalizeUserCode(userCode) {
+        const normalized = String(userCode || '')
+            .trim()
+            .toUpperCase()
+            .replace(/[^A-Z0-9]/g, '');
+        if (normalized.length !== 8)
+            return null;
+        return `${normalized.slice(0, 4)}-${normalized.slice(4)}`;
+    }
+    generateUserCode() {
+        let raw = '';
+        for (let i = 0; i < 8; i++) {
+            raw += CODE_ALPHABET[(0, crypto_1.randomBytes)(1)[0] % CODE_ALPHABET.length];
+        }
+        return `${raw.slice(0, 4)}-${raw.slice(4)}`;
+    }
+    hash(value) {
+        return (0, crypto_1.createHash)('sha256').update(value).digest('hex');
+    }
+    verificationUri() {
+        return (process.env.DEVICE_AUTH_VERIFICATION_URI ||
+            process.env.FRONTEND_DEVICE_URL ||
+            `${(process.env.SERVER_URL || 'http://localhost:4000').replace(/\/+$/, '')}/device`);
+    }
+};
+exports.DeviceAuthService = DeviceAuthService;
+exports.DeviceAuthService = DeviceAuthService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [access_business_service_1.AccessBusinessService])
+], DeviceAuthService);
+//# sourceMappingURL=device.auth.service.js.map

package/dist/access/services/device.auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.auth.service.js","sourceRoot":"","sources":["../../../src/access/services/device.auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,oFAAmG;AACnG,mCAAiD;AACjD,qCAAiC;AACjC,uEAAkE;AAClE,+EAA0E;AAC1E,0FAAoF;AACpF,wFAAmF;AACnF,uEAAkE;AAElE,MAAM,aAAa,GAAG,EAAE,GAAG,MAAM,CAAC;AAClC,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,aAAa,GAAG,8BAA8B,CAAC;AAS9C,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC1B,YAA6B,qBAA4C;QAA5C,0BAAqB,GAArB,qBAAqB,CAAuB;IAAG,CAAC;IAK7E,KAAK,CAAC,KAAK;QACP,MAAM,UAAU,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEzC,MAAM,GAAG,GAAG,qCAAgB,CAAC,MAAM,CAAC;YAChC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;YACvC,SAAS,EAAE,QAAQ;YACnB,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAEjB,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC/C,OAAO;YACH,WAAW,EAAE,UAAU;YACvB,SAAS,EAAE,QAAQ;YACnB,gBAAgB,EAAE,eAAe;YACjC,yBAAyB,EAAE,GAAG,eAAe,SAAS,kBAAkB,CAAC,QAAQ,CAAC,EAAE;YACpF,UAAU,EAAE,aAAa,GAAG,IAAI;YAChC,QAAQ,EAAE,eAAe;SAC5B,CAAC;IACN,CAAC;IAKD,KAAK,CAAC,cAAc,CAAC,QAAgB;QACjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC;QAClD,IAAI,GAAG,CAAC,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,QAAiB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAClF,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QACxG,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAE5G,OAAO;YACH,MAAM,EAAE,SAAkB;YAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,UAAU,EAAE,GAAG,CAAC,UAAU;SAC7B,CAAC;IACN,CAAC;IAKD,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,MAA0B,EAAE,UAAmB;QAC1E,MAAM,IAAI,GAAG,8BAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,EAAE;YAAE,MAAM,IAAI,yCAAe,CAAC,yCAAyC,CAAC,CAAC;QAEpF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,4CAAkB,CAAC,sBAAsB,CAAC,CAAC;QAC/D,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,MAAM,IAAI,4CAAkB,CAAC,+CAA+C,CAAC,CAAC;QAC1H,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO,EAAE,MAAM,EAAE,iBAA0B,EAAE,CAAC;QAEpF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,qCAAgB,CAAC,MAAM,CACxC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,IAAA,gBAAM,GAAE,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE,EAC1D,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,EAAE,CAC1D,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,iBAA2B,EAAE,CAAC;QAC5F,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC;QAElE,MAAM,OAAO,GAAG,MAAM,qCAAgB,CAAC,MAAM,CACzC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,IAAA,gBAAM,GAAE,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE,EAC1D;YACI,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,mBAAmB,EAAE,IAAI,CAAC,EAAE;YAC5B,WAAW,EAAE,QAAQ,CAAC,EAAE;SAC3B,CACJ,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,iBAA0B,EAAE,CAAC;QAErE,OAAO,EAAE,MAAM,EAAE,UAAmB,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IACrE,CAAC;IAKD,KAAK,CAAC,IAAI,CAAC,UAAkB;QACzB,MAAM,GAAG,GAAG,MAAM,qCAAgB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QACnG,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,SAAoC,EAAE,CAAC;QAClE,IAAI,GAAG,CAAC,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,QAAmC,EAAE,CAAC;QAC1E,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO,EAAE,MAAM,EAAE,SAAoC,EAAE,CAAC;QAC7E,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,SAAoC,EAAE,CAAC;QACpG,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,OAAO,EAAE,MAAM,EAAE,SAAoC,EAAE,CAAC;QAE9E,MAAM,OAAO,GAAG,MAAM,qCAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,IAAA,gBAAM,GAAE,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAClH,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,SAAoC,EAAE,CAAC;QAE/E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO;YACH,MAAM,EAAE,UAAqC;YAC7C,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;SACtC,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,GAAqB;QAC/C,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAC/C,MAAM,IAAI,4CAAkB,CAAC,+CAA+C,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,6CAAoB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,4CAAkB,CAAC,6CAA6C,CAAC,CAAC;QAE3F,MAAM,YAAY,GAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,mBAAmB,EAAE,eAAe,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;QACzG,8BAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAEzB,MAAM,IAAI,GAAG,wBAAwB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,sDAAwB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9E,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAEjB,OAAO;YACH,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY,EAAE,qDAAwB,CAAC,yBAAyB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC;SAC3G,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,UAAmB;QACvD,IAAI,UAAU,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,MAAM,6CAAoB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YACnF,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,4CAAkB,CAAC,sBAAsB,CAAC,CAAC;YAEpE,OAAO,QAAQ,CAAC;QACpB,CAAC;QAED,OAAO,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,CAAC;IACvD,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,QAAgB;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5B,OAAO,qCAAgB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAEO,iBAAiB,CAAC,QAAgB;QACtC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;aACpC,IAAI,EAAE;aACN,WAAW,EAAE;aACb,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC/B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,CAAC;IAEO,gBAAgB;QACpB,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACzB,GAAG,IAAI,aAAa,CAAC,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,CAAC;IAEO,IAAI,CAAC,KAAa;QACtB,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAEO,eAAe;QACnB,OAAO,CACH,OAAO,CAAC,GAAG,CAAC,4BAA4B;YACxC,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAC/B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CACtF,CAAC;IACN,CAAC;CACJ,CAAA;AA/KY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAE2C,+CAAqB;GADhE,iBAAiB,CA+K7B"}

package/dist/access/services/index.d.ts

@@ -8,8 +8,10 @@ export * from './business.preference.service';
 export * from './business.property.service';
 export * from './business.script.service';
 export * from './business.user.role.service';
+export * from './credential.resolve.service';
 export * from './currency.service';
 export * from './custom.field.service';
+export * from './device.auth.service';
 export * from './gchat.service';
 export * from './gmail.integration.service';
 export * from './gpt.service';
@@ -18,6 +20,7 @@ export * from './listing.service';
 export * from './load.entity.service';
 export * from './lock.script.service';
 export * from './notification.service';
+export * from './oauth.as.service';
 export * from './overriding.script.service';
 export * from './platform.service';
 export * from './request.log.service';

package/dist/access/services/index.js

@@ -24,8 +24,10 @@ __exportStar(require("./business.preference.service"), exports);
 __exportStar(require("./business.property.service"), exports);
 __exportStar(require("./business.script.service"), exports);
 __exportStar(require("./business.user.role.service"), exports);
+__exportStar(require("./credential.resolve.service"), exports);
 __exportStar(require("./currency.service"), exports);
 __exportStar(require("./custom.field.service"), exports);
+__exportStar(require("./device.auth.service"), exports);
 __exportStar(require("./gchat.service"), exports);
 __exportStar(require("./gmail.integration.service"), exports);
 __exportStar(require("./gpt.service"), exports);
@@ -34,6 +36,7 @@ __exportStar(require("./listing.service"), exports);
 __exportStar(require("./load.entity.service"), exports);
 __exportStar(require("./lock.script.service"), exports);
 __exportStar(require("./notification.service"), exports);
+__exportStar(require("./oauth.as.service"), exports);
 __exportStar(require("./overriding.script.service"), exports);
 __exportStar(require("./platform.service"), exports);
 __exportStar(require("./request.log.service"), exports);

package/dist/access/services/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/access/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4DAA0C;AAAA,0DAAwC;AAAA,wDAAsC;AAAA,4DAA0C;AAAA,sDAAoC;AAAA,2DAAyC;AAAA,gEAA8C;AAAA,8DAA4C;AAAA,4DAA0C;AAAA,+DAA6C;AAAA,qDAAmC;AAAA,yDAAuC;AAAA,kDAAgC;AAAA,8DAA4C;AAAA,gDAA8B;AAAA,+DAA6C;AAAA,oDAAkC;AAAA,wDAAsC;AAAA,wDAAsC;AAAA,yDAAuC;AAAA,8DAA4C;AAAA,qDAAmC;AAAA,wDAAsC;AAAA,6DAA2C;AAAA,uDAAqC;AAAA,kDAAgC;AAAA,kDAAgC;AAAA,iEAA+C;AAAA,8DAA4C;AAAA,4DAA0C;AAAA,oDAAkC;AAAA,oDAAkC;AAAA,qDAAkC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/access/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4DAA0C;AAAA,0DAAwC;AAAA,wDAAsC;AAAA,4DAA0C;AAAA,sDAAoC;AAAA,2DAAyC;AAAA,gEAA8C;AAAA,8DAA4C;AAAA,4DAA0C;AAAA,+DAA6C;AAAA,+DAA6C;AAAA,qDAAmC;AAAA,yDAAuC;AAAA,wDAAsC;AAAA,kDAAgC;AAAA,8DAA4C;AAAA,gDAA8B;AAAA,+DAA6C;AAAA,oDAAkC;AAAA,wDAAsC;AAAA,wDAAsC;AAAA,yDAAuC;AAAA,qDAAmC;AAAA,8DAA4C;AAAA,qDAAmC;AAAA,wDAAsC;AAAA,6DAA2C;AAAA,uDAAqC;AAAA,kDAAgC;AAAA,kDAAgC;AAAA,iEAA+C;AAAA,8DAA4C;AAAA,4DAA0C;AAAA,oDAAkC;AAAA,oDAAkC;AAAA,qDAAkC"}