@skalfa/skalfa-api-core 1.0.3 → 1.0.8

package/CONTRIBUTING.md

@@ -0,0 +1,45 @@
+# Contributing to @skalfa/skalfa-api-core
+
+Thank you for your interest in contributing to Skalfa! We welcome contributions from the community to help make Skalfa the premier development framework.
+
+## How to Contribute
+
+To contribute to this package, please follow these standard open-source steps:
+
+### 1. Fork the Repository
+Fork the official Skalfa repository on GitHub to your personal account.
+
+### 2. Clone Your Fork
+Clone your personal fork to your local machine:
+```bash
+git clone https://github.com/your-username/skalfa.git
+cd skalfa
+```
+
+### 3. Create a Feature Branch
+Create a new branch for your feature or bugfix:
+```bash
+git checkout -b feature/amazing-new-feature
+```
+*(Use `bugfix/issue-description` for bugfixes).*
+
+### 4. Implement and Commit Your Changes
+Make your changes in the codebase. Write clean, formatted code and ensure all tests and typechecks pass. Commit your changes using semantic commit messages:
+```bash
+git commit -m "feat: add amazing new feature"
+```
+*(Use `fix: description` for bugfixes, and `docs: description` for documentation updates).*
+
+### 5. Push to GitHub
+Push your branch to your personal fork on GitHub:
+```bash
+git push origin feature/amazing-new-feature
+```
+
+### 6. Submit a Pull Request (PR)
+Go to the official Skalfa repository on GitHub. You will see a prompt to submit a pull request. Click "New Pull Request", describe your changes in detail, link any related issues, and submit it for review by the maintainers.
+
+## Guidelines
+* **Code Style**: Ensure your code conforms to the project's ESLint rules and formatting guidelines.
+* **Type Safety**: Write strict, type-safe TypeScript. Do not bypass the compiler.
+* **Testing**: Run local tests and verify that the build compiles with 0 errors before submitting a PR.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Skalfa
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,60 @@
+<p align="center">
+  <img src="https://skalfa.sejedigital.com/images/logo-skalfa.png" alt="Skalfa Logo" width="300" />
+</p>
+
+# @skalfa/skalfa-api-core
+
+> Core framework engine and foundational utilities for the Skalfa API backend.
+
+---
+
+## About this Package
+
+This package is part of the **Skalfa Framework**, a premium development ecosystem designed to build high-performance, modular web applications and APIs.
+
+### Usage Scope & Standalone Status
+> 🔒 **Skalfa Ecosystem Integration:** This package is designed to run **integrated within the Skalfa ecosystem** (such as Skalfa API or Skalfa App). It relies on the global service registry and core framework abstractions to operate.
+
+---
+
+## Documentation
+
+See the usage documentation at [Documentation](https://skalfa.sejedigital.com).
+
+---
+
+## Installation
+
+You can install this package using your preferred package manager:
+
+```bash
+# Using npm
+npm install @skalfa/skalfa-api-core
+
+# Using bun
+bun add @skalfa/skalfa-api-core
+```
+
+---
+
+## Pre-installed Dependencies
+
+The following key dependencies are packaged and managed within this project:
+
+| Dependency | Scope | Version |
+| :--- | :--- | :--- |
+| `@skalfa/skalfa-orm` | runtime | `file:../skalfa-orm` |
+| `bcrypt` | runtime | `^6.0.0` |
+| `commander` | runtime | `^12.1.0` |
+| `dotenv` | runtime | `^17.2.2` |
+| `elysia` | runtime | `^1.2.0` |
+| `nodemailer` | runtime | `^7.0.9` |
+| `validator` | runtime | `^13.15.15` |
+| `@types/node` | development | `^26.0.0` |
+| `typescript` | development | `^6.0.3` |
+
+---
+
+## License
+
+This package is licensed under the **MIT License**. For full license text, see the [LICENSE](LICENSE) file.

package/dist/auth/auth.d.ts

@@ -1,19 +1,22 @@
+import { createAccessToken } from './create-access-token';
+import { revokeAccessToken } from './revoke-access-token';
+import { verifyAccessToken } from './verify-access-token';
+import { createUserMailToken } from './create-user-mail-token';
+import { verifyUserMailToken } from './verify-user-mail-token';
+import { listUserSessions } from './list-user-sessions';
+import { revalidateUserPermissions } from './revalidate-user-permissions';
+import { revalidateUserPermissionsByRole } from './revalidate-user-permissions-by-role';
+export declare const TOKEN_PLAIN_LENGTH = 20;
+export declare const AUTH_PERMISSION: boolean;
+export declare const AUTH_CACHE: boolean;
+export declare const AUTH_CACHE_TTL: number;
 export declare const auth: {
-    createAccessToken(userId: number, req: Request, permission?: boolean): Promise<{
-        token: string;
-        tokenId: any;
-    }>;
-    revokeAccessToken(id: number): Promise<number | undefined>;
-    verifyAccessToken(token: string, req?: Request): Promise<any>;
-    createUserMailToken(userId: number): Promise<{
-        token: string;
-        tokenId: any;
-    }>;
-    verifyUserMailToken(userId: number, token: string): Promise<boolean>;
-    listUserSessions(userId: number, currentTokenId?: number): Promise<any[]>;
+    createAccessToken: typeof createAccessToken;
+    revokeAccessToken: typeof revokeAccessToken;
+    verifyAccessToken: typeof verifyAccessToken;
+    createUserMailToken: typeof createUserMailToken;
+    verifyUserMailToken: typeof verifyUserMailToken;
+    listUserSessions: typeof listUserSessions;
     revalidateUserPermissions: typeof revalidateUserPermissions;
     revalidateUserPermissionsByRole: typeof revalidateUserPermissionsByRole;
 };
-declare function revalidateUserPermissions(userId: number): Promise<void>;
-declare function revalidateUserPermissionsByRole(roleId: number): Promise<void>;
-export {};

package/dist/auth/auth.js

@@ -1,227 +1,44 @@
-import crypto from 'crypto';
-import bcrypt from "bcrypt";
-import { db } from '@skalfa/skalfa-orm';
-import { registry } from '@utils/registry';
-// =====================================>
-// ## Auth: User Access Token
-// =====================================>
-const TOKEN_PLAIN_LENGTH = 20;
-const AUTH_PERMISSION = process.env.AUTH_CACHE === "true";
-const AUTH_CACHE = process.env.AUTH_CACHE === "true";
-const AUTH_CACHE_TTL = Number(process.env.AUTH_CACHE_TTL || 600);
+import { createAccessToken } from './create-access-token';
+import { revokeAccessToken } from './revoke-access-token';
+import { verifyAccessToken } from './verify-access-token';
+import { createUserMailToken } from './create-user-mail-token';
+import { verifyUserMailToken } from './verify-user-mail-token';
+import { listUserSessions } from './list-user-sessions';
+import { revalidateUserPermissions } from './revalidate-user-permissions';
+import { revalidateUserPermissionsByRole } from './revalidate-user-permissions-by-role';
+export const TOKEN_PLAIN_LENGTH = 20;
+export const AUTH_PERMISSION = process.env.AUTH_CACHE === "true";
+export const AUTH_CACHE = process.env.AUTH_CACHE === "true";
+export const AUTH_CACHE_TTL = Number(process.env.AUTH_CACHE_TTL || 600);
 export const auth = {
     // =====================================>
     // ## Auth: create access token with user id
     // =====================================>
-    async createAccessToken(userId, req, permission = true) {
-        const plain = crypto.randomBytes(TOKEN_PLAIN_LENGTH).toString("hex");
-        const hash = await bcrypt.hash(plain, 10);
-        const agent = generateAgentId(req);
-        if (!db) {
-            // get user from db (fallback / stub for no ORM)
-            return {
-                token: `1|${plain}`,
-                tokenId: 1,
-            };
-        }
-        let permissions = [];
-        if (AUTH_PERMISSION && permission) {
-            permissions = await getUserPermissions(userId);
-        }
-        const [row] = await db("user_access_tokens").insert({
-            user_id: userId,
-            token: hash,
-            agent: agent,
-            permissions: JSON.stringify(permissions),
-            created_at: new Date(),
-        }).returning(["id"]);
-        return {
-            token: `${row.id}|${plain}`,
-            tokenId: row.id,
-        };
-    },
+    createAccessToken,
     // =====================================>
     // ## Auth: delete access token with user id
     // =====================================>
-    async revokeAccessToken(id) {
-        if (!db) {
-            // delete user access token from db (stub for no ORM)
-            return;
-        }
-        return db.table('user_access_tokens').where("id", id).delete();
-    },
+    revokeAccessToken,
     // =====================================>
     // ## Auth: verify access token
     // =====================================>
-    async verifyAccessToken(token, req) {
-        if (!token.includes("|"))
-            return null;
-        const [tokenId, plain] = token.split("|", 2);
-        const agent = req ? generateAgentId(req) : "";
-        const ip = req ? getRequestIp(req) : "";
-        const cacheKey = `auth:token:${tokenId}`;
-        if (AUTH_CACHE) {
-            const redis = registry.get('redis');
-            if (redis) {
-                const cached = await redis.get(cacheKey);
-                if (cached) {
-                    const session = JSON.parse(cached);
-                    if (session.agent !== agent)
-                        return null;
-                    return session;
-                }
-            }
-        }
-        if (!db) {
-            // get user and token from db (stub for no ORM)
-            const user = { id: 1, name: "Admin", email: "admin@example.com" };
-            const tokenRecord = { id: Number(tokenId), agent, permission: [] };
-            return { user, token: tokenRecord, permissions: [] };
-        }
-        const tokenRecord = await db("user_access_tokens").where("id", tokenId).first();
-        if (!tokenRecord)
-            return null;
-        if (tokenRecord.agent !== agent)
-            return null;
-        const valid = await bcrypt.compare(plain, tokenRecord.token);
-        if (!valid)
-            return null;
-        await db("user_access_tokens").where("id", tokenRecord.id).update({ last_used_at: new Date(), last_used_ip: ip });
-        const user = await db("users").where("id", tokenRecord.user_id).first();
-        if (AUTH_CACHE) {
-            const redis = registry.get('redis');
-            if (redis) {
-                await redis.setex(cacheKey, AUTH_CACHE_TTL, JSON.stringify({
-                    user: user,
-                    agent: tokenRecord.agent,
-                    permissions: tokenRecord.permission,
-                }));
-            }
-        }
-        return { user, token: tokenRecord, permissions: tokenRecord.permission };
-    },
+    verifyAccessToken,
     // =====================================>
     // ## Auth: create user mail token
     // =====================================>
-    async createUserMailToken(userId) {
-        const token = Math.floor(100000 + Math.random() * 900000).toString();
-        if (!db) {
-            // create user mail token in db (stub for no ORM)
-            return {
-                token: token,
-                tokenId: 1
-            };
-        }
-        const hash = crypto.createHash('sha256').update(token).digest('hex');
-        const trx = await db.transaction();
-        await trx.table('user_mail_tokens').insert({
-            user_id: userId,
-            token: hash,
-            created_at: new Date(),
-        });
-        const record = await trx.table('user_mail_tokens').orderBy('id', 'desc').first();
-        await trx.commit();
-        return {
-            token: token,
-            tokenId: record.id
-        };
-    },
+    createUserMailToken,
     // =====================================>
     // ## Auth: Verify user mail token
     // =====================================>
-    async verifyUserMailToken(userId, token) {
-        if (!db) {
-            // verify user mail token in db (stub for no ORM)
-            return true;
-        }
-        const hashedToken = crypto.createHash("sha256").update(token).digest("hex");
-        const record = await db.table("user_mail_tokens")
-            .where("user_id", userId)
-            .whereNull("used_at")
-            .orderBy("id", "desc")
-            .first();
-        if (!record)
-            return false;
-        if (record.token !== hashedToken)
-            return false;
-        const createdAt = new Date(record.created_at);
-        const now = new Date();
-        const diffMinutes = (now.getTime() - createdAt.getTime()) / (1000 * 60);
-        if (diffMinutes > 10)
-            return false;
-        return true;
-    },
+    verifyUserMailToken,
     // =====================================>
     // ## Auth: list user sessions
     // =====================================>
-    async listUserSessions(userId, currentTokenId) {
-        if (!db) {
-            // list user sessions from db (stub for no ORM)
-            return [];
-        }
-        const rows = await db("user_access_tokens").select(["id", "agent", "created_at", "last_used_at", "last_used_ip", "expired_at"]).where("user_id", userId).orderBy("last_used_at", "desc");
-        return rows.map((r) => ({
-            ...r,
-            is_active: r.revoked_at === null,
-            is_current: r.id === currentTokenId,
-        }));
-    },
+    listUserSessions,
     // =====================================>
     // ## Auth: revalidate user permission
     // =====================================>
-    revalidateUserPermissions: revalidateUserPermissions,
-    revalidateUserPermissionsByRole: revalidateUserPermissionsByRole,
+    revalidateUserPermissions,
+    revalidateUserPermissionsByRole,
 };
-function generateAgentId(req) {
-    const ua = req.headers.get("user-agent") ?? "";
-    const acc = req.headers.get("accept") ?? "";
-    return crypto.createHash("sha256").update(ua + acc).digest("hex");
-}
-function getRequestIp(req) {
-    return (req.headers.get("x-forwarded-for")?.split(",")[0]?.trim() || req.headers.get("x-real-ip") || "unknown");
-}
-async function getUserPermissions(userId) {
-    if (!db) {
-        // get user permissions from db (stub for no ORM)
-        return [];
-    }
-    const roleIds = await db("user_roles").where("user_id", userId).pluck("role_id");
-    if (roleIds.length === 0)
-        return [];
-    const rows = await db("permissions").whereIn("role_id", roleIds).pluck("permissions");
-    return Array.from(new Set(rows.flatMap((p) => p ?? [])));
-}
-async function revalidateUserPermissions(userId) {
-    if (!db) {
-        // revalidate user permissions in db (stub for no ORM)
-        return;
-    }
-    const permissions = await getUserPermissions(userId);
-    const tokenIds = await db("user_access_tokens").where("user_id", userId).pluck("id");
-    if (tokenIds.length === 0)
-        return;
-    await db("user_access_tokens").whereIn("id", tokenIds).update({
-        permissions: JSON.stringify(permissions),
-        updated_at: new Date(),
-    });
-    if (AUTH_CACHE) {
-        const redis = registry.get('redis');
-        if (redis) {
-            await Promise.all(tokenIds.map((id) => redis.del(`auth:token:${id}`)));
-        }
-    }
-}
-async function revalidateUserPermissionsByRole(roleId) {
-    if (!db) {
-        // revalidate user permissions by role in db (stub for no ORM)
-        return;
-    }
-    const userIds = await db("user_roles").where("role_id", roleId).pluck("user_id");
-    const queue = registry.get('queue');
-    if (queue) {
-        for (const userId of userIds) {
-            await queue.add("auth:revalidate-permission", { userId });
-        }
-    }
-}
 //# sourceMappingURL=auth.js.map

package/dist/auth/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/auth/auth.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAC3B,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE1C,yCAAyC;AACzC,6BAA6B;AAC7B,yCAAyC;AACzC,MAAM,kBAAkB,GAAK,EAAE,CAAA;AAC/B,MAAM,eAAe,GAAQ,OAAO,CAAC,GAAG,CAAC,UAAU,KAAO,MAAM,CAAA;AAChE,MAAM,UAAU,GAAa,OAAO,CAAC,GAAG,CAAC,UAAU,KAAO,MAAM,CAAA;AAChE,MAAM,cAAc,GAAS,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,CAAA;AAEtE,MAAM,CAAC,MAAM,IAAI,GAAG;IAElB,yCAAyC;IACzC,4CAA4C;IAC5C,yCAAyC;IACzC,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,GAAY,EAAE,aAAsB,IAAI;QAC9E,MAAM,KAAK,GAAK,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACtE,MAAM,IAAI,GAAM,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAK,eAAe,CAAC,GAAG,CAAC,CAAA;QAEpC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,gDAAgD;YAChD,OAAO;gBACL,KAAK,EAAE,KAAK,KAAK,EAAE;gBACnB,OAAO,EAAE,CAAC;aACX,CAAA;QACH,CAAC;QAED,IAAI,WAAW,GAAa,EAAE,CAAA;QAC9B,IAAI,eAAe,IAAI,UAAU,EAAE,CAAC;YAClC,WAAW,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAChD,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;YAClD,OAAO,EAAS,MAAM;YACtB,KAAK,EAAW,IAAI;YACpB,KAAK,EAAW,KAAK;YACrB,WAAW,EAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YAC3C,UAAU,EAAM,IAAI,IAAI,EAAE;SAC3B,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QAEpB,OAAO;YACL,KAAK,EAAO,GAAG,GAAG,CAAC,EAAE,IAAI,KAAK,EAAE;YAChC,OAAO,EAAK,GAAG,CAAC,EAAE;SACnB,CAAA;IACH,CAAC;IAED,yCAAyC;IACzC,4CAA4C;IAC5C,yCAAyC;IACzC,KAAK,CAAC,iBAAiB,CAAC,EAAU;QAChC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,qDAAqD;YACrD,OAAO;QACT,CAAC;QACD,OAAO,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;IAChE,CAAC;IAED,yCAAyC;IACzC,+BAA+B;IAC/B,yCAAyC;IACzC,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,GAAa;QAClD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QAErC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAK,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QAC9C,MAAM,KAAK,GAAgB,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1D,MAAM,EAAE,GAAmB,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAEvD,MAAM,QAAQ,GAAG,cAAc,OAAO,EAAE,CAAA;QAExC,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACnC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACxC,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;oBAClC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;wBAAE,OAAO,IAAI,CAAA;oBACxC,OAAO,OAAO,CAAA;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,+CAA+C;YAC/C,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAA;YACjE,MAAM,WAAW,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;YAClE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,CAAA;QACtD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,CAAA;QAE/E,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAA;QAC7B,IAAI,WAAW,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,IAAI,CAAA;QAE5C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;QAC5D,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QAEvB,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;QAEjH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAA;QAEvE,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACnC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,KAAK,CAAC,KAAK,CACf,QAAQ,EACR,cAAc,EACd,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAY,IAAI;oBACpB,KAAK,EAAW,WAAW,CAAC,KAAK;oBACjC,WAAW,EAAK,WAAW,CAAC,UAAU;iBACvC,CAAC,CACH,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,UAAU,EAAE,CAAA;IAC1E,CAAC;IAED,yCAAyC;IACzC,kCAAkC;IAClC,yCAAyC;IACzC,KAAK,CAAC,mBAAmB,CAAC,MAAc;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAEpE,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iDAAiD;YACjD,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,CAAC;aACX,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACpE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,WAAW,EAAE,CAAA;QAElC,MAAM,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;YACzC,OAAO,EAAO,MAAM;YACpB,KAAK,EAAS,IAAI;YAClB,UAAU,EAAI,IAAI,IAAI,EAAE;SACzB,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAA;QAEhF,MAAM,GAAG,CAAC,MAAM,EAAE,CAAA;QAElB,OAAO;YACL,KAAK,EAAM,KAAK;YAChB,OAAO,EAAI,MAAM,CAAC,EAAE;SACrB,CAAA;IACH,CAAC;IAED,yCAAyC;IACzC,kCAAkC;IAClC,yCAAyC;IACzC,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,KAAa;QACrD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iDAAiD;YACjD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;aAC9C,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC;aACxB,SAAS,CAAC,SAAS,CAAC;aACpB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,KAAK,EAAE,CAAC;QAEX,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAEzB,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QAE/C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAExE,IAAI,WAAW,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;QAEnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yCAAyC;IACzC,8BAA8B;IAC9B,yCAAyC;IACzC,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,cAAuB;QAC5D,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,+CAA+C;YAC/C,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;QAEvL,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YAC3B,GAAG,CAAC;YACJ,SAAS,EAAI,CAAC,CAAC,UAAU,KAAO,IAAI;YACpC,UAAU,EAAG,CAAC,CAAC,EAAE,KAAe,cAAc;SAC/C,CAAC,CAAC,CAAA;IACL,CAAC;IAED,yCAAyC;IACzC,sCAAsC;IACtC,yCAAyC;IACzC,yBAAyB,EAAE,yBAAyB;IACpD,+BAA+B,EAAE,+BAA+B;CACjE,CAAA;AAED,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,EAAE,GAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAM,EAAE,CAAA;IACnD,MAAM,GAAG,GAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAU,EAAE,CAAA;IAEnD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnE,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,CAAA;AACjH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAc;IAC9C,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,iDAAiD;QACjD,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAEhF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEnC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAErF,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CACL,IAAI,CAAC,OAAO,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAClC,CACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,MAAc;IACrD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,sDAAsD;QACtD,OAAM;IACR,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEpD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAEpF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAEjC,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC5D,WAAW,EAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QAC3C,UAAU,EAAM,IAAI,IAAI,EAAE;KAC3B,CAAC,CAAA;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CACzD,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,MAAc;IAC3D,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,8DAA8D;QAC9D,OAAM;IACR,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAEhF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACnC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,GAAG,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/auth/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAA;AACzE,OAAO,EAAE,+BAA+B,EAAE,MAAM,uCAAuC,CAAA;AAEvF,MAAM,CAAC,MAAM,kBAAkB,GAAK,EAAE,CAAA;AACtC,MAAM,CAAC,MAAM,eAAe,GAAQ,OAAO,CAAC,GAAG,CAAC,UAAU,KAAO,MAAM,CAAA;AACvE,MAAM,CAAC,MAAM,UAAU,GAAa,OAAO,CAAC,GAAG,CAAC,UAAU,KAAO,MAAM,CAAA;AACvE,MAAM,CAAC,MAAM,cAAc,GAAS,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,CAAA;AAE7E,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,yCAAyC;IACzC,4CAA4C;IAC5C,yCAAyC;IACzC,iBAAiB;IAEjB,yCAAyC;IACzC,4CAA4C;IAC5C,yCAAyC;IACzC,iBAAiB;IAEjB,yCAAyC;IACzC,+BAA+B;IAC/B,yCAAyC;IACzC,iBAAiB;IAEjB,yCAAyC;IACzC,kCAAkC;IAClC,yCAAyC;IACzC,mBAAmB;IAEnB,yCAAyC;IACzC,kCAAkC;IAClC,yCAAyC;IACzC,mBAAmB;IAEnB,yCAAyC;IACzC,8BAA8B;IAC9B,yCAAyC;IACzC,gBAAgB;IAEhB,yCAAyC;IACzC,sCAAsC;IACtC,yCAAyC;IACzC,yBAAyB;IACzB,+BAA+B;CAChC,CAAA"}

package/dist/auth/create-access-token.d.ts

@@ -0,0 +1,4 @@
+export declare function createAccessToken(userId: number, req: Request, permission?: boolean): Promise<{
+    token: string;
+    tokenId: any;
+}>;

package/dist/auth/create-access-token.js

@@ -0,0 +1,26 @@
+import crypto from 'crypto';
+import bcrypt from "bcrypt";
+import { db } from '@skalfa/skalfa-orm';
+import { TOKEN_PLAIN_LENGTH, AUTH_PERMISSION } from './auth';
+import { getUserPermissions, generateAgentId } from './helpers';
+export async function createAccessToken(userId, req, permission = true) {
+    const plain = crypto.randomBytes(TOKEN_PLAIN_LENGTH).toString("hex");
+    const hash = await bcrypt.hash(plain, 10);
+    const agent = generateAgentId(req);
+    let permissions = [];
+    if (AUTH_PERMISSION && permission) {
+        permissions = await getUserPermissions(userId);
+    }
+    const [row] = await db("user_access_tokens").insert({
+        user_id: userId,
+        token: hash,
+        agent: agent,
+        permissions: JSON.stringify(permissions),
+        created_at: new Date(),
+    }).returning(["id"]);
+    return {
+        token: `${row.id}|${plain}`,
+        tokenId: row.id,
+    };
+}
+//# sourceMappingURL=create-access-token.js.map

package/dist/auth/create-access-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-access-token.js","sourceRoot":"","sources":["../../src/auth/create-access-token.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAC3B,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE/D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,GAAY,EAAE,aAAsB,IAAI;IAC9F,MAAM,KAAK,GAAK,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACtE,MAAM,IAAI,GAAM,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC5C,MAAM,KAAK,GAAK,eAAe,CAAC,GAAG,CAAC,CAAA;IAEpC,IAAI,WAAW,GAAa,EAAE,CAAA;IAC9B,IAAI,eAAe,IAAI,UAAU,EAAE,CAAC;QAClC,WAAW,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAChD,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;QAClD,OAAO,EAAS,MAAM;QACtB,KAAK,EAAW,IAAI;QACpB,KAAK,EAAW,KAAK;QACrB,WAAW,EAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QAC3C,UAAU,EAAM,IAAI,IAAI,EAAE;KAC3B,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IAEpB,OAAO;QACL,KAAK,EAAO,GAAG,GAAG,CAAC,EAAE,IAAI,KAAK,EAAE;QAChC,OAAO,EAAK,GAAG,CAAC,EAAE;KACnB,CAAA;AACH,CAAC"}

package/dist/auth/create-user-mail-token.d.ts

@@ -0,0 +1,4 @@
+export declare function createUserMailToken(userId: number): Promise<{
+    token: string;
+    tokenId: any;
+}>;

package/dist/auth/create-user-mail-token.js

@@ -0,0 +1,19 @@
+import crypto from 'crypto';
+import { db } from '@skalfa/skalfa-orm';
+export async function createUserMailToken(userId) {
+    const token = Math.floor(100000 + Math.random() * 900000).toString();
+    const hash = crypto.createHash('sha256').update(token).digest('hex');
+    const trx = await db.transaction();
+    await trx.table('user_mail_tokens').insert({
+        user_id: userId,
+        token: hash,
+        created_at: new Date(),
+    });
+    const record = await trx.table('user_mail_tokens').orderBy('id', 'desc').first();
+    await trx.commit();
+    return {
+        token: token,
+        tokenId: record.id
+    };
+}
+//# sourceMappingURL=create-user-mail-token.js.map

package/dist/auth/create-user-mail-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-user-mail-token.js","sourceRoot":"","sources":["../../src/auth/create-user-mail-token.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAC3B,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAEvC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAc;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;IAEpE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACpE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,WAAW,EAAE,CAAA;IAElC,MAAM,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;QACzC,OAAO,EAAO,MAAM;QACpB,KAAK,EAAS,IAAI;QAClB,UAAU,EAAI,IAAI,IAAI,EAAE;KACzB,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAA;IAEhF,MAAM,GAAG,CAAC,MAAM,EAAE,CAAA;IAElB,OAAO;QACL,KAAK,EAAM,KAAK;QAChB,OAAO,EAAI,MAAM,CAAC,EAAE;KACrB,CAAA;AACH,CAAC"}

package/dist/auth/helpers/generate-agent-id.d.ts

@@ -0,0 +1 @@
+export declare function generateAgentId(req: Request): string;

package/dist/auth/helpers/generate-agent-id.js

@@ -0,0 +1,7 @@
+import crypto from 'crypto';
+export function generateAgentId(req) {
+    const ua = req.headers.get("user-agent") ?? "";
+    const acc = req.headers.get("accept") ?? "";
+    return crypto.createHash("sha256").update(ua + acc).digest("hex");
+}
+//# sourceMappingURL=generate-agent-id.js.map

package/dist/auth/helpers/generate-agent-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-agent-id.js","sourceRoot":"","sources":["../../../src/auth/helpers/generate-agent-id.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAE3B,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,EAAE,GAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAM,EAAE,CAAA;IACnD,MAAM,GAAG,GAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAU,EAAE,CAAA;IAEnD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnE,CAAC"}

package/dist/auth/helpers/get-request-ip.d.ts

@@ -0,0 +1 @@
+export declare function getRequestIp(req: Request): string;

package/dist/auth/helpers/get-request-ip.js

@@ -0,0 +1,4 @@
+export function getRequestIp(req) {
+    return (req.headers.get("x-forwarded-for")?.split(",")[0]?.trim() || req.headers.get("x-real-ip") || "unknown");
+}
+//# sourceMappingURL=get-request-ip.js.map

package/dist/auth/helpers/get-request-ip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-request-ip.js","sourceRoot":"","sources":["../../../src/auth/helpers/get-request-ip.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,CAAA;AACjH,CAAC"}

package/dist/auth/helpers/get-user-permissions.d.ts

@@ -0,0 +1 @@
+export declare function getUserPermissions(userId: number): Promise<string[]>;

package/dist/auth/helpers/get-user-permissions.js

@@ -0,0 +1,9 @@
+import { db } from '@skalfa/skalfa-orm';
+export async function getUserPermissions(userId) {
+    const roleIds = await db("user_roles").where("user_id", userId).pluck("role_id");
+    if (roleIds.length === 0)
+        return [];
+    const rows = await db("permissions").whereIn("role_id", roleIds).pluck("permissions");
+    return Array.from(new Set(rows.flatMap((p) => p ?? [])));
+}
+//# sourceMappingURL=get-user-permissions.js.map

package/dist/auth/helpers/get-user-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user-permissions.js","sourceRoot":"","sources":["../../../src/auth/helpers/get-user-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAEvC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc;IACrD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAEhF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEnC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAErF,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CACL,IAAI,CAAC,OAAO,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAClC,CACF,CAAA;AACH,CAAC"}

package/dist/auth/helpers/index.d.ts

@@ -0,0 +1,3 @@
+export * from './generate-agent-id';
+export * from './get-request-ip';
+export * from './get-user-permissions';

package/dist/auth/helpers/index.js

@@ -0,0 +1,4 @@
+export * from './generate-agent-id';
+export * from './get-request-ip';
+export * from './get-user-permissions';
+//# sourceMappingURL=index.js.map

package/dist/auth/helpers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/helpers/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA;AAChC,cAAc,wBAAwB,CAAA"}

package/dist/auth/list-user-sessions.d.ts

@@ -0,0 +1 @@
+export declare function listUserSessions(userId: number, currentTokenId?: number): Promise<any[]>;

package/dist/auth/list-user-sessions.js

@@ -0,0 +1,10 @@
+import { db } from '@skalfa/skalfa-orm';
+export async function listUserSessions(userId, currentTokenId) {
+    const rows = await db("user_access_tokens").select(["id", "agent", "created_at", "last_used_at", "last_used_ip", "expired_at"]).where("user_id", userId).orderBy("last_used_at", "desc");
+    return rows.map((r) => ({
+        ...r,
+        is_active: r.revoked_at === null,
+        is_current: r.id === currentTokenId,
+    }));
+}
+//# sourceMappingURL=list-user-sessions.js.map

package/dist/auth/list-user-sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-user-sessions.js","sourceRoot":"","sources":["../../src/auth/list-user-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAEvC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,cAAuB;IAC5E,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;IAEvL,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;QAC3B,GAAG,CAAC;QACJ,SAAS,EAAI,CAAC,CAAC,UAAU,KAAO,IAAI;QACpC,UAAU,EAAG,CAAC,CAAC,EAAE,KAAe,cAAc;KAC/C,CAAC,CAAC,CAAA;AACL,CAAC"}

package/dist/auth/revalidate-user-permissions-by-role.d.ts

@@ -0,0 +1 @@
+export declare function revalidateUserPermissionsByRole(roleId: number): Promise<void>;

package/dist/auth/revalidate-user-permissions-by-role.js

@@ -0,0 +1,12 @@
+import { db } from '@skalfa/skalfa-orm';
+import { registry } from '@utils/registry';
+export async function revalidateUserPermissionsByRole(roleId) {
+    const userIds = await db("user_roles").where("role_id", roleId).pluck("user_id");
+    const queue = registry.get('queue');
+    if (queue) {
+        for (const userId of userIds) {
+            await queue.add("auth:revalidate-permission", { userId });
+        }
+    }
+}
+//# sourceMappingURL=revalidate-user-permissions-by-role.js.map

package/dist/auth/revalidate-user-permissions-by-role.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revalidate-user-permissions-by-role.js","sourceRoot":"","sources":["../../src/auth/revalidate-user-permissions-by-role.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE1C,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,MAAc;IAClE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAEhF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACnC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,GAAG,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/auth/revalidate-user-permissions.d.ts

@@ -0,0 +1 @@
+export declare function revalidateUserPermissions(userId: number): Promise<void>;

package/dist/auth/revalidate-user-permissions.js

@@ -0,0 +1,21 @@
+import { db } from '@skalfa/skalfa-orm';
+import { registry } from '@utils/registry';
+import { AUTH_CACHE } from './auth';
+import { getUserPermissions } from './helpers';
+export async function revalidateUserPermissions(userId) {
+    const permissions = await getUserPermissions(userId);
+    const tokenIds = await db("user_access_tokens").where("user_id", userId).pluck("id");
+    if (tokenIds.length === 0)
+        return;
+    await db("user_access_tokens").whereIn("id", tokenIds).update({
+        permissions: JSON.stringify(permissions),
+        updated_at: new Date(),
+    });
+    if (AUTH_CACHE) {
+        const redis = registry.get('redis');
+        if (redis) {
+            await Promise.all(tokenIds.map((id) => redis.del(`auth:token:${id}`)));
+        }
+    }
+}
+//# sourceMappingURL=revalidate-user-permissions.js.map