@sync-in/server 1.10.1 → 2.0.0

package/server/authentication/auth.module.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
@@ -19,6 +15,7 @@ const _passport = require("@nestjs/passport");
 const _usersmodule = require("../applications/users/users.module");
 const _configenvironment = require("../configuration/config.environment");
 const _authcontroller = require("./auth.controller");
+const _authservice = require("./auth.service");
 const _authanonymousguard = require("./guards/auth-anonymous.guard");
 const _authanonymousstrategy = require("./guards/auth-anonymous.strategy");
 const _authbasicguard = require("./guards/auth-basic.guard");
@@ -29,11 +26,11 @@ const _authtokenaccessguard = require("./guards/auth-token-access.guard");
 const _authtokenaccessstrategy = require("./guards/auth-token-access.strategy");
 const _authtokenrefreshguard = require("./guards/auth-token-refresh.guard");
 const _authtokenrefreshstrategy = require("./guards/auth-token-refresh.strategy");
-const _authmethod = require("./models/auth-method");
-const _authmanagerservice = require("./services/auth-manager.service");
-const _authmethoddatabaseservice = require("./services/auth-methods/auth-method-database.service");
-const _authmethodldapservice = require("./services/auth-methods/auth-method-ldap.service");
-const _authmethodtwofaservice = require("./services/auth-methods/auth-method-two-fa.service");
+const _authprovidersconstants = require("./providers/auth-providers.constants");
+const _authprovidersmodels = require("./providers/auth-providers.models");
+const _authprovidersutils = require("./providers/auth-providers.utils");
+const _authprovideroidcmodule = require("./providers/oidc/auth-provider-oidc.module");
+const _authprovidertwofaservice = require("./providers/two-fa/auth-provider-two-fa.service");
 function _ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -50,7 +47,10 @@ AuthModule = _ts_decorate([
                 global: true
             }),
             _usersmodule.UsersModule,
-            _passport.PassportModule
+            _passport.PassportModule,
+            ..._configenvironment.configuration.auth.provider === _authprovidersconstants.AUTH_PROVIDER.OIDC ? [
+                _authprovideroidcmodule.AuthProviderOIDCModule
+            ] : []
         ],
         controllers: [
             _authcontroller.AuthController
@@ -69,17 +69,14 @@ AuthModule = _ts_decorate([
             _authtokenrefreshstrategy.AuthTokenRefreshStrategy,
             _authbasicstrategy.AuthBasicStrategy,
             _authanonymousstrategy.AuthAnonymousStrategy,
-            _authmanagerservice.AuthManager,
-            _authmethodtwofaservice.AuthMethod2FA,
-            {
-                provide: _authmethod.AuthMethod,
-                useClass: _configenvironment.configuration.auth.method === 'ldap' ? _authmethodldapservice.AuthMethodLdapService : _authmethoddatabaseservice.AuthMethodDatabase
-            }
+            _authservice.AuthManager,
+            _authprovidertwofaservice.AuthProvider2FA,
+            (0, _authprovidersutils.selectAuthProvider)(_configenvironment.configuration.auth.provider)
         ],
         exports: [
-            _authmanagerservice.AuthManager,
-            _authmethod.AuthMethod,
-            _authmethodtwofaservice.AuthMethod2FA
+            _authservice.AuthManager,
+            _authprovidersmodels.AuthProvider,
+            _authprovidertwofaservice.AuthProvider2FA
         ]
     })
 ], AuthModule);

package/server/authentication/auth.module.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../backend/src/authentication/auth.module.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Global, Module } from '@nestjs/common'\nimport { APP_GUARD } from '@nestjs/core'\nimport { JwtModule } from '@nestjs/jwt'\nimport { PassportModule } from '@nestjs/passport'\nimport { UsersModule } from '../applications/users/users.module'\nimport { configuration } from '../configuration/config.environment'\nimport { AuthController } from './auth.controller'\nimport { AuthAnonymousGuard } from './guards/auth-anonymous.guard'\nimport { AuthAnonymousStrategy } from './guards/auth-anonymous.strategy'\nimport { AuthBasicGuard } from './guards/auth-basic.guard'\nimport { AuthBasicStrategy } from './guards/auth-basic.strategy'\nimport { AuthLocalGuard } from './guards/auth-local.guard'\nimport { AuthLocalStrategy } from './guards/auth-local.strategy'\nimport { AuthTokenAccessGuard } from './guards/auth-token-access.guard'\nimport { AuthTokenAccessStrategy } from './guards/auth-token-access.strategy'\nimport { AuthTokenRefreshGuard } from './guards/auth-token-refresh.guard'\nimport { AuthTokenRefreshStrategy } from './guards/auth-token-refresh.strategy'\nimport { AuthMethod } from './models/auth-method'\nimport { AuthManager } from './services/auth-manager.service'\nimport { AuthMethodDatabase } from './services/auth-methods/auth-method-database.service'\nimport { AuthMethodLdapService } from './services/auth-methods/auth-method-ldap.service'\nimport { AuthMethod2FA } from './services/auth-methods/auth-method-two-fa.service'\n\n@Global()\n@Module({\n  imports: [JwtModule.register({ global: true }), UsersModule, PassportModule],\n  controllers: [AuthController],\n  providers: [\n    {\n      provide: APP_GUARD,\n      useClass: AuthTokenAccessGuard\n    },\n    AuthTokenRefreshGuard,\n    AuthLocalGuard,\n    AuthBasicGuard,\n    AuthAnonymousGuard,\n    AuthLocalStrategy,\n    AuthTokenAccessStrategy,\n    AuthTokenRefreshStrategy,\n    AuthBasicStrategy,\n    AuthAnonymousStrategy,\n    AuthManager,\n    AuthMethod2FA,\n    { provide: AuthMethod, useClass: configuration.auth.method === 'ldap' ? AuthMethodLdapService : AuthMethodDatabase }\n  ],\n  exports: [AuthManager, AuthMethod, AuthMethod2FA]\n})\nexport class AuthModule {}\n"],"names":["AuthModule","imports","JwtModule","register","global","UsersModule","PassportModule","controllers","AuthController","providers","provide","APP_GUARD","useClass","AuthTokenAccessGuard","AuthTokenRefreshGuard","AuthLocalGuard","AuthBasicGuard","AuthAnonymousGuard","AuthLocalStrategy","AuthTokenAccessStrategy","AuthTokenRefreshStrategy","AuthBasicStrategy","AuthAnonymousStrategy","AuthManager","AuthMethod2FA","AuthMethod","configuration","auth","method","AuthMethodLdapService","AuthMethodDatabase","exports"],"mappings":"AAAA;;;;CAIC;;;;+BAiDYA;;;eAAAA;;;wBA/CkB;sBACL;qBACA;0BACK;6BACH;mCACE;gCACC;oCACI;uCACG;gCACP;mCACG;gCACH;mCACG;sCACG;yCACG;uCACF;0CACG;4BACd;oCACC;2CACO;uCACG;wCACR;;;;;;;AA0BvB,IAAA,AAAMA,aAAN,MAAMA;AAAY;;;;QAtBvBC,SAAS;YAACC,cAAS,CAACC,QAAQ,CAAC;gBAAEC,QAAQ;YAAK;YAAIC,wBAAW;YAAEC,wBAAc;SAAC;QAC5EC,aAAa;YAACC,8BAAc;SAAC;QAC7BC,WAAW;YACT;gBACEC,SAASC,eAAS;gBAClBC,UAAUC,0CAAoB;YAChC;YACAC,4CAAqB;YACrBC,8BAAc;YACdC,8BAAc;YACdC,sCAAkB;YAClBC,oCAAiB;YACjBC,gDAAuB;YACvBC,kDAAwB;YACxBC,oCAAiB;YACjBC,4CAAqB;YACrBC,+BAAW;YACXC,qCAAa;YACb;gBAAEd,SAASe,sBAAU;gBAAEb,UAAUc,gCAAa,CAACC,IAAI,CAACC,MAAM,KAAK,SAASC,4CAAqB,GAAGC,6CAAkB;YAAC;SACpH;QACDC,SAAS;YAACR,+BAAW;YAAEE,sBAAU;YAAED,qCAAa;SAAC"}
+{"version":3,"sources":["../../../backend/src/authentication/auth.module.ts"],"sourcesContent":["import { Global, Module } from '@nestjs/common'\nimport { APP_GUARD } from '@nestjs/core'\nimport { JwtModule } from '@nestjs/jwt'\nimport { PassportModule } from '@nestjs/passport'\nimport { UsersModule } from '../applications/users/users.module'\nimport { configuration } from '../configuration/config.environment'\nimport { AuthController } from './auth.controller'\nimport { AuthManager } from './auth.service'\nimport { AuthAnonymousGuard } from './guards/auth-anonymous.guard'\nimport { AuthAnonymousStrategy } from './guards/auth-anonymous.strategy'\nimport { AuthBasicGuard } from './guards/auth-basic.guard'\nimport { AuthBasicStrategy } from './guards/auth-basic.strategy'\nimport { AuthLocalGuard } from './guards/auth-local.guard'\nimport { AuthLocalStrategy } from './guards/auth-local.strategy'\nimport { AuthTokenAccessGuard } from './guards/auth-token-access.guard'\nimport { AuthTokenAccessStrategy } from './guards/auth-token-access.strategy'\nimport { AuthTokenRefreshGuard } from './guards/auth-token-refresh.guard'\nimport { AuthTokenRefreshStrategy } from './guards/auth-token-refresh.strategy'\nimport { AUTH_PROVIDER } from './providers/auth-providers.constants'\nimport { AuthProvider } from './providers/auth-providers.models'\nimport { selectAuthProvider } from './providers/auth-providers.utils'\nimport { AuthProviderOIDCModule } from './providers/oidc/auth-provider-oidc.module'\nimport { AuthProvider2FA } from './providers/two-fa/auth-provider-two-fa.service'\n\n@Global()\n@Module({\n  imports: [\n    JwtModule.register({ global: true }),\n    UsersModule,\n    PassportModule,\n    ...(configuration.auth.provider === AUTH_PROVIDER.OIDC ? [AuthProviderOIDCModule] : [])\n  ],\n  controllers: [AuthController],\n  providers: [\n    {\n      provide: APP_GUARD,\n      useClass: AuthTokenAccessGuard\n    },\n    AuthTokenRefreshGuard,\n    AuthLocalGuard,\n    AuthBasicGuard,\n    AuthAnonymousGuard,\n    AuthLocalStrategy,\n    AuthTokenAccessStrategy,\n    AuthTokenRefreshStrategy,\n    AuthBasicStrategy,\n    AuthAnonymousStrategy,\n    AuthManager,\n    AuthProvider2FA,\n    selectAuthProvider(configuration.auth.provider)\n  ],\n  exports: [AuthManager, AuthProvider, AuthProvider2FA]\n})\nexport class AuthModule {}\n"],"names":["AuthModule","imports","JwtModule","register","global","UsersModule","PassportModule","configuration","auth","provider","AUTH_PROVIDER","OIDC","AuthProviderOIDCModule","controllers","AuthController","providers","provide","APP_GUARD","useClass","AuthTokenAccessGuard","AuthTokenRefreshGuard","AuthLocalGuard","AuthBasicGuard","AuthAnonymousGuard","AuthLocalStrategy","AuthTokenAccessStrategy","AuthTokenRefreshStrategy","AuthBasicStrategy","AuthAnonymousStrategy","AuthManager","AuthProvider2FA","selectAuthProvider","exports","AuthProvider"],"mappings":";;;;+BAqDaA;;;eAAAA;;;wBArDkB;sBACL;qBACA;0BACK;6BACH;mCACE;gCACC;6BACH;oCACO;uCACG;gCACP;mCACG;gCACH;mCACG;sCACG;yCACG;uCACF;0CACG;wCACX;qCACD;oCACM;wCACI;0CACP;;;;;;;AA+BzB,IAAA,AAAMA,aAAN,MAAMA;AAAY;;;;QA3BvBC,SAAS;YACPC,cAAS,CAACC,QAAQ,CAAC;gBAAEC,QAAQ;YAAK;YAClCC,wBAAW;YACXC,wBAAc;eACVC,gCAAa,CAACC,IAAI,CAACC,QAAQ,KAAKC,qCAAa,CAACC,IAAI,GAAG;gBAACC,8CAAsB;aAAC,GAAG,EAAE;SACvF;QACDC,aAAa;YAACC,8BAAc;SAAC;QAC7BC,WAAW;YACT;gBACEC,SAASC,eAAS;gBAClBC,UAAUC,0CAAoB;YAChC;YACAC,4CAAqB;YACrBC,8BAAc;YACdC,8BAAc;YACdC,sCAAkB;YAClBC,oCAAiB;YACjBC,gDAAuB;YACvBC,kDAAwB;YACxBC,oCAAiB;YACjBC,4CAAqB;YACrBC,wBAAW;YACXC,yCAAe;YACfC,IAAAA,sCAAkB,EAACxB,gCAAa,CAACC,IAAI,CAACC,QAAQ;SAC/C;QACDuB,SAAS;YAACH,wBAAW;YAAEI,iCAAY;YAAEH,yCAAe;SAAC"}

package/server/authentication/{services/auth-manager.service.js → auth.service.js}

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
@@ -16,13 +12,15 @@ const _cookie = require("@fastify/cookie");
 const _common = require("@nestjs/common");
 const _jwt = require("@nestjs/jwt");
 const _nodecrypto = /*#__PURE__*/ _interop_require_default(require("node:crypto"));
-const _applicationsconstants = require("../../applications/applications.constants");
-const _functions = require("../../common/functions");
-const _shared = require("../../common/shared");
-const _configenvironment = require("../../configuration/config.environment");
-const _auth = require("../constants/auth");
-const _loginresponsedto = require("../dto/login-response.dto");
-const _tokeninterface = require("../interfaces/token.interface");
+const _applicationsconstants = require("../applications/applications.constants");
+const _functions = require("../common/functions");
+const _shared = require("../common/shared");
+const _configenvironment = require("../configuration/config.environment");
+const _auth = require("./constants/auth");
+const _routes = require("./constants/routes");
+const _loginresponsedto = require("./dto/login-response.dto");
+const _tokeninterface = require("./interfaces/token.interface");
+const _authprovidersconstants = require("./providers/auth-providers.constants");
 function _interop_require_default(obj) {
     return obj && obj.__esModule ? obj : {
         default: obj
@@ -41,7 +39,10 @@ let AuthManager = class AuthManager {
     async getTokens(user, refresh = false) {
         const currentTime = (0, _shared.currentTimeStamp)();
         if (refresh && user.exp < currentTime) {
-            this.logger.error(`${this.getTokens.name} - token refresh has incorrect expiration : *${user.login}*`);
+            this.logger.error({
+                tag: this.getTokens.name,
+                msg: `token refresh has incorrect expiration : *${user.login}*`
+            });
             throw new _common.HttpException('Token has expired', _common.HttpStatus.FORBIDDEN);
         }
         const accessExpiration = (0, _functions.convertHumanTimeToSeconds)(_configenvironment.configuration.auth.token.access.expiration);
@@ -92,7 +93,10 @@ let AuthManager = class AuthManager {
         if (user.exp && user.exp > currentTime) {
             refreshTokenExpiration = user.exp - currentTime;
         } else {
-            this.logger.error(`${this.refreshCookies.name} - token ${_tokeninterface.TOKEN_TYPE.REFRESH} has incorrect expiration : *${user.login}*`);
+            this.logger.error({
+                tag: this.refreshCookies.name,
+                msg: `token ${_tokeninterface.TOKEN_TYPE.REFRESH} has incorrect expiration : *${user.login}*`
+            });
             throw new _common.HttpException('Token has expired', _common.HttpStatus.FORBIDDEN);
         }
         const csrfToken = _nodecrypto.default.randomUUID();
@@ -128,19 +132,38 @@ let AuthManager = class AuthManager {
             return;
         }
         if (!jwtPayload.csrf) {
-            this.logger.warn(`${this.csrfValidation.name} - ${_auth.CSRF_ERROR.MISSING_JWT}`);
+            this.logger.warn({
+                tag: this.csrfValidation.name,
+                msg: `${_auth.CSRF_ERROR.MISSING_JWT}`
+            });
             throw new _common.HttpException(_auth.CSRF_ERROR.MISSING_JWT, _common.HttpStatus.FORBIDDEN);
         }
         if (!req.headers[_auth.CSRF_KEY]) {
-            this.logger.warn(`${this.csrfValidation.name} - ${_auth.CSRF_ERROR.MISSING_HEADERS}`);
+            this.logger.warn({
+                tag: this.csrfValidation.name,
+                msg: `${_auth.CSRF_ERROR.MISSING_HEADERS}`
+            });
             throw new _common.HttpException(_auth.CSRF_ERROR.MISSING_HEADERS, _common.HttpStatus.FORBIDDEN);
         }
         const csrfHeader = (0, _cookie.unsign)(req.headers[_auth.CSRF_KEY], _configenvironment.configuration.auth.token.csrf.secret);
         if (jwtPayload.csrf !== csrfHeader.value) {
-            this.logger.warn(`${this.csrfValidation.name} - ${_auth.CSRF_ERROR.MISMATCH}`);
+            this.logger.warn({
+                tag: this.csrfValidation.name,
+                msg: `${_auth.CSRF_ERROR.MISMATCH}`
+            });
             throw new _common.HttpException(_auth.CSRF_ERROR.MISMATCH, _common.HttpStatus.FORBIDDEN);
         }
     }
+    authSettings() {
+        if (_configenvironment.configuration.auth.provider !== _authprovidersconstants.AUTH_PROVIDER.OIDC) {
+            return false;
+        }
+        return {
+            loginUrl: _routes.API_OIDC_LOGIN,
+            autoRedirect: _configenvironment.configuration.auth.oidc.options.autoRedirect,
+            buttonText: _configenvironment.configuration.auth.oidc.options.buttonText
+        };
+    }
     jwtSign(user, type, expiration, csrfToken) {
         return this.jwt.signAsync({
             identity: {
@@ -193,4 +216,4 @@ AuthManager = _ts_decorate([
     ])
 ], AuthManager);
 
-//# sourceMappingURL=auth-manager.service.js.map
+//# sourceMappingURL=auth.service.js.map

package/server/authentication/auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../backend/src/authentication/auth.service.ts"],"sourcesContent":["import { unsign, UnsignResult } from '@fastify/cookie'\nimport { HttpException, HttpStatus, Injectable, Logger } from '@nestjs/common'\nimport { JwtService } from '@nestjs/jwt'\nimport { FastifyReply, FastifyRequest } from 'fastify'\nimport crypto from 'node:crypto'\nimport { HTTP_CSRF_IGNORED_METHODS } from '../applications/applications.constants'\nimport { UserModel } from '../applications/users/models/user.model'\nimport { convertHumanTimeToSeconds } from '../common/functions'\nimport { currentTimeStamp } from '../common/shared'\nimport { configuration, serverConfig } from '../configuration/config.environment'\nimport { CSRF_ERROR, CSRF_KEY, TOKEN_2FA_TYPES, TOKEN_PATHS, TOKEN_TYPES } from './constants/auth'\nimport { API_OIDC_LOGIN } from './constants/routes'\nimport { LoginResponseDto, LoginVerify2FaDto } from './dto/login-response.dto'\nimport { TokenResponseDto } from './dto/token-response.dto'\nimport { JwtIdentity2FaPayload, JwtIdentityPayload, JwtPayload } from './interfaces/jwt-payload.interface'\nimport { TOKEN_TYPE } from './interfaces/token.interface'\nimport { AUTH_PROVIDER } from './providers/auth-providers.constants'\nimport type { AuthOIDCSettings } from './providers/oidc/auth-oidc.interfaces'\n\n@Injectable()\nexport class AuthManager {\n  private readonly logger = new Logger(AuthManager.name)\n\n  constructor(private readonly jwt: JwtService) {}\n\n  async getTokens(user: UserModel, refresh = false): Promise<TokenResponseDto> {\n    const currentTime = currentTimeStamp()\n    if (refresh && user.exp < currentTime) {\n      this.logger.error({ tag: this.getTokens.name, msg: `token refresh has incorrect expiration : *${user.login}*` })\n      throw new HttpException('Token has expired', HttpStatus.FORBIDDEN)\n    }\n    const accessExpiration = convertHumanTimeToSeconds(configuration.auth.token.access.expiration)\n    const refreshExpiration = refresh ? user.exp - currentTime : convertHumanTimeToSeconds(configuration.auth.token.refresh.expiration)\n    return {\n      [TOKEN_TYPE.ACCESS]: await this.jwtSign(user, TOKEN_TYPE.ACCESS, accessExpiration),\n      [TOKEN_TYPE.REFRESH]: await this.jwtSign(user, TOKEN_TYPE.REFRESH, refreshExpiration),\n      [`${TOKEN_TYPE.ACCESS}_expiration`]: accessExpiration + currentTime,\n      [`${TOKEN_TYPE.REFRESH}_expiration`]: refreshExpiration + currentTime\n    }\n  }\n\n  async setCookies(user: UserModel, res: FastifyReply, init2FaVerify: true): Promise<LoginVerify2FaDto>\n  async setCookies(user: UserModel, res: FastifyReply, init2FaVerify?: false): Promise<LoginResponseDto>\n  async setCookies(user: UserModel, res: FastifyReply, init2FaVerify = false): Promise<LoginResponseDto | LoginVerify2FaDto> {\n    // If `verify2Fa` is true, it sets the cookies and response required for valid 2FA authentication.\n    const verify2Fa = init2FaVerify && configuration.auth.mfa.totp.enabled && user.twoFaEnabled\n    const response = verify2Fa ? new LoginVerify2FaDto(serverConfig) : new LoginResponseDto(user, serverConfig)\n    const currentTime = currentTimeStamp()\n    const csrfToken: string = crypto.randomUUID()\n    const tokenTypes: TOKEN_TYPE[] = verify2Fa ? TOKEN_2FA_TYPES : TOKEN_TYPES\n    for (const type of tokenTypes) {\n      const isCSRFToken = type === TOKEN_TYPE.CSRF || type === TOKEN_TYPE.CSRF_2FA\n      const tokenExpiration = convertHumanTimeToSeconds(configuration.auth.token[type].expiration)\n      let cookieValue: string\n      if (isCSRFToken) {\n        cookieValue = csrfToken\n      } else if (verify2Fa) {\n        cookieValue = await this.jwtSign2Fa(user, type, tokenExpiration, csrfToken)\n      } else {\n        cookieValue = await this.jwtSign(user, type, tokenExpiration, csrfToken)\n      }\n      res.setCookie(configuration.auth.token[type].name, cookieValue, {\n        signed: isCSRFToken,\n        path: TOKEN_PATHS[type],\n        maxAge: tokenExpiration,\n        httpOnly: !isCSRFToken\n      })\n      if (type === TOKEN_TYPE.ACCESS || type === TOKEN_TYPE.REFRESH || type === TOKEN_TYPE.ACCESS_2FA) {\n        response.token[`${type}_expiration`] = tokenExpiration + currentTime\n      }\n    }\n    return response\n  }\n\n  async refreshCookies(user: UserModel, res: FastifyReply): Promise<TokenResponseDto> {\n    const response = {} as TokenResponseDto\n    const currentTime = currentTimeStamp()\n    let refreshTokenExpiration: number\n    // refresh cookie must have the `exp` attribute\n    // reuse token expiration to make it final\n    if (user.exp && user.exp > currentTime) {\n      refreshTokenExpiration = user.exp - currentTime\n    } else {\n      this.logger.error({ tag: this.refreshCookies.name, msg: `token ${TOKEN_TYPE.REFRESH} has incorrect expiration : *${user.login}*` })\n      throw new HttpException('Token has expired', HttpStatus.FORBIDDEN)\n    }\n    const csrfToken: string = crypto.randomUUID()\n    for (const type of TOKEN_TYPES) {\n      const tokenExpiration =\n        type === TOKEN_TYPE.ACCESS ? convertHumanTimeToSeconds(configuration.auth.token[TOKEN_TYPE.ACCESS].expiration) : refreshTokenExpiration\n      const cookieValue: string = type === TOKEN_TYPE.CSRF ? csrfToken : await this.jwtSign(user, type, tokenExpiration, csrfToken)\n      res.setCookie(configuration.auth.token[type].name, cookieValue, {\n        signed: type === TOKEN_TYPE.CSRF,\n        path: TOKEN_PATHS[type],\n        maxAge: tokenExpiration,\n        httpOnly: type !== TOKEN_TYPE.CSRF\n      })\n      if (type === TOKEN_TYPE.ACCESS || type === TOKEN_TYPE.REFRESH) {\n        response[`${type}_expiration`] = tokenExpiration + currentTime\n      }\n    }\n    return response\n  }\n\n  async clearCookies(res: FastifyReply) {\n    for (const [type, path] of Object.entries(TOKEN_PATHS)) {\n      res.clearCookie(configuration.auth.token[type].name, { path: path })\n    }\n  }\n\n  csrfValidation(req: FastifyRequest, jwtPayload: JwtPayload, type: TOKEN_TYPE.ACCESS | TOKEN_TYPE.REFRESH): void {\n    // ignore safe methods\n    if (HTTP_CSRF_IGNORED_METHODS.has(req.method)) {\n      return\n    }\n\n    // check csrf only for access and refresh cookies\n    if (typeof req.cookies !== 'object' || req.cookies[configuration.auth.token[type].name] === undefined) {\n      return\n    }\n\n    if (!jwtPayload.csrf) {\n      this.logger.warn({ tag: this.csrfValidation.name, msg: `${CSRF_ERROR.MISSING_JWT}` })\n      throw new HttpException(CSRF_ERROR.MISSING_JWT, HttpStatus.FORBIDDEN)\n    }\n\n    if (!req.headers[CSRF_KEY]) {\n      this.logger.warn({ tag: this.csrfValidation.name, msg: `${CSRF_ERROR.MISSING_HEADERS}` })\n      throw new HttpException(CSRF_ERROR.MISSING_HEADERS, HttpStatus.FORBIDDEN)\n    }\n\n    const csrfHeader: UnsignResult = unsign(req.headers[CSRF_KEY] as string, configuration.auth.token.csrf.secret)\n    if (jwtPayload.csrf !== csrfHeader.value) {\n      this.logger.warn({ tag: this.csrfValidation.name, msg: `${CSRF_ERROR.MISMATCH}` })\n      throw new HttpException(CSRF_ERROR.MISMATCH, HttpStatus.FORBIDDEN)\n    }\n  }\n\n  authSettings(): AuthOIDCSettings | false {\n    if (configuration.auth.provider !== AUTH_PROVIDER.OIDC) {\n      return false\n    }\n    return {\n      loginUrl: API_OIDC_LOGIN,\n      autoRedirect: configuration.auth.oidc.options.autoRedirect,\n      buttonText: configuration.auth.oidc.options.buttonText\n    }\n  }\n\n  private jwtSign(user: UserModel, type: TOKEN_TYPE, expiration: number, csrfToken?: string): Promise<string> {\n    return this.jwt.signAsync(\n      {\n        identity: {\n          id: user.id,\n          login: user.login,\n          email: user.email,\n          fullName: user.fullName,\n          language: user.language,\n          role: user.role,\n          applications: user.applications,\n          impersonatedFromId: user.impersonatedFromId || undefined,\n          impersonatedClientId: user.impersonatedClientId || undefined,\n          clientId: user.clientId || undefined,\n          twoFaEnabled: user.twoFaEnabled || undefined\n        } satisfies JwtIdentityPayload,\n        ...((type === TOKEN_TYPE.ACCESS || type === TOKEN_TYPE.REFRESH) && { csrf: csrfToken })\n      },\n      {\n        secret: configuration.auth.token[type].secret,\n        expiresIn: expiration\n      }\n    )\n  }\n\n  private jwtSign2Fa(user: UserModel, type: TOKEN_TYPE, expiration: number, csrfToken: string): Promise<string> {\n    // Restrict the temporary token to the minimum required information\n    return this.jwt.signAsync(\n      {\n        identity: {\n          id: user.id,\n          login: user.login,\n          language: user.language,\n          role: user.role,\n          twoFaEnabled: true\n        } satisfies JwtIdentity2FaPayload,\n        csrf: csrfToken\n      },\n      {\n        secret: configuration.auth.token[type].secret,\n        expiresIn: expiration\n      }\n    )\n  }\n}\n"],"names":["AuthManager","getTokens","user","refresh","currentTime","currentTimeStamp","exp","logger","error","tag","name","msg","login","HttpException","HttpStatus","FORBIDDEN","accessExpiration","convertHumanTimeToSeconds","configuration","auth","token","access","expiration","refreshExpiration","TOKEN_TYPE","ACCESS","jwtSign","REFRESH","setCookies","res","init2FaVerify","verify2Fa","mfa","totp","enabled","twoFaEnabled","response","LoginVerify2FaDto","serverConfig","LoginResponseDto","csrfToken","crypto","randomUUID","tokenTypes","TOKEN_2FA_TYPES","TOKEN_TYPES","type","isCSRFToken","CSRF","CSRF_2FA","tokenExpiration","cookieValue","jwtSign2Fa","setCookie","signed","path","TOKEN_PATHS","maxAge","httpOnly","ACCESS_2FA","refreshCookies","refreshTokenExpiration","clearCookies","Object","entries","clearCookie","csrfValidation","req","jwtPayload","HTTP_CSRF_IGNORED_METHODS","has","method","cookies","undefined","csrf","warn","CSRF_ERROR","MISSING_JWT","headers","CSRF_KEY","MISSING_HEADERS","csrfHeader","unsign","secret","value","MISMATCH","authSettings","provider","AUTH_PROVIDER","OIDC","loginUrl","API_OIDC_LOGIN","autoRedirect","oidc","options","buttonText","jwt","signAsync","identity","id","email","fullName","language","role","applications","impersonatedFromId","impersonatedClientId","clientId","expiresIn","Logger"],"mappings":";;;;+BAoBaA;;;eAAAA;;;wBApBwB;wBACyB;qBACnC;mEAER;uCACuB;2BAEA;wBACT;mCACW;sBACoC;wBACjD;kCACqB;gCAGzB;wCACG;;;;;;;;;;;;;;;AAIvB,IAAA,AAAMA,cAAN,MAAMA;IAKX,MAAMC,UAAUC,IAAe,EAAEC,UAAU,KAAK,EAA6B;QAC3E,MAAMC,cAAcC,IAAAA,wBAAgB;QACpC,IAAIF,WAAWD,KAAKI,GAAG,GAAGF,aAAa;YACrC,IAAI,CAACG,MAAM,CAACC,KAAK,CAAC;gBAAEC,KAAK,IAAI,CAACR,SAAS,CAACS,IAAI;gBAAEC,KAAK,CAAC,0CAA0C,EAAET,KAAKU,KAAK,CAAC,CAAC,CAAC;YAAC;YAC9G,MAAM,IAAIC,qBAAa,CAAC,qBAAqBC,kBAAU,CAACC,SAAS;QACnE;QACA,MAAMC,mBAAmBC,IAAAA,oCAAyB,EAACC,gCAAa,CAACC,IAAI,CAACC,KAAK,CAACC,MAAM,CAACC,UAAU;QAC7F,MAAMC,oBAAoBpB,UAAUD,KAAKI,GAAG,GAAGF,cAAca,IAAAA,oCAAyB,EAACC,gCAAa,CAACC,IAAI,CAACC,KAAK,CAACjB,OAAO,CAACmB,UAAU;QAClI,OAAO;YACL,CAACE,0BAAU,CAACC,MAAM,CAAC,EAAE,MAAM,IAAI,CAACC,OAAO,CAACxB,MAAMsB,0BAAU,CAACC,MAAM,EAAET;YACjE,CAACQ,0BAAU,CAACG,OAAO,CAAC,EAAE,MAAM,IAAI,CAACD,OAAO,CAACxB,MAAMsB,0BAAU,CAACG,OAAO,EAAEJ;YACnE,CAAC,GAAGC,0BAAU,CAACC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAET,mBAAmBZ;YACxD,CAAC,GAAGoB,0BAAU,CAACG,OAAO,CAAC,WAAW,CAAC,CAAC,EAAEJ,oBAAoBnB;QAC5D;IACF;IAIA,MAAMwB,WAAW1B,IAAe,EAAE2B,GAAiB,EAAEC,gBAAgB,KAAK,EAAiD;QACzH,kGAAkG;QAClG,MAAMC,YAAYD,iBAAiBZ,gCAAa,CAACC,IAAI,CAACa,GAAG,CAACC,IAAI,CAACC,OAAO,IAAIhC,KAAKiC,YAAY;QAC3F,MAAMC,WAAWL,YAAY,IAAIM,mCAAiB,CAACC,+BAAY,IAAI,IAAIC,kCAAgB,CAACrC,MAAMoC,+BAAY;QAC1G,MAAMlC,cAAcC,IAAAA,wBAAgB;QACpC,MAAMmC,YAAoBC,mBAAM,CAACC,UAAU;QAC3C,MAAMC,aAA2BZ,YAAYa,qBAAe,GAAGC,iBAAW;QAC1E,KAAK,MAAMC,QAAQH,WAAY;YAC7B,MAAMI,cAAcD,SAAStB,0BAAU,CAACwB,IAAI,IAAIF,SAAStB,0BAAU,CAACyB,QAAQ;YAC5E,MAAMC,kBAAkBjC,IAAAA,oCAAyB,EAACC,gCAAa,CAACC,IAAI,CAACC,KAAK,CAAC0B,KAAK,CAACxB,UAAU;YAC3F,IAAI6B;YACJ,IAAIJ,aAAa;gBACfI,cAAcX;YAChB,OAAO,IAAIT,WAAW;gBACpBoB,cAAc,MAAM,IAAI,CAACC,UAAU,CAAClD,MAAM4C,MAAMI,iBAAiBV;YACnE,OAAO;gBACLW,cAAc,MAAM,IAAI,CAACzB,OAAO,CAACxB,MAAM4C,MAAMI,iBAAiBV;YAChE;YACAX,IAAIwB,SAAS,CAACnC,gCAAa,CAACC,IAAI,CAACC,KAAK,CAAC0B,KAAK,CAACpC,IAAI,EAAEyC,aAAa;gBAC9DG,QAAQP;gBACRQ,MAAMC,iBAAW,CAACV,KAAK;gBACvBW,QAAQP;gBACRQ,UAAU,CAACX;YACb;YACA,IAAID,SAAStB,0BAAU,CAACC,MAAM,IAAIqB,SAAStB,0BAAU,CAACG,OAAO,IAAImB,SAAStB,0BAAU,CAACmC,UAAU,EAAE;gBAC/FvB,SAAShB,KAAK,CAAC,GAAG0B,KAAK,WAAW,CAAC,CAAC,GAAGI,kBAAkB9C;YAC3D;QACF;QACA,OAAOgC;IACT;IAEA,MAAMwB,eAAe1D,IAAe,EAAE2B,GAAiB,EAA6B;QAClF,MAAMO,WAAW,CAAC;QAClB,MAAMhC,cAAcC,IAAAA,wBAAgB;QACpC,IAAIwD;QACJ,+CAA+C;QAC/C,0CAA0C;QAC1C,IAAI3D,KAAKI,GAAG,IAAIJ,KAAKI,GAAG,GAAGF,aAAa;YACtCyD,yBAAyB3D,KAAKI,GAAG,GAAGF;QACtC,OAAO;YACL,IAAI,CAACG,MAAM,CAACC,KAAK,CAAC;gBAAEC,KAAK,IAAI,CAACmD,cAAc,CAAClD,IAAI;gBAAEC,KAAK,CAAC,MAAM,EAAEa,0BAAU,CAACG,OAAO,CAAC,6BAA6B,EAAEzB,KAAKU,KAAK,CAAC,CAAC,CAAC;YAAC;YACjI,MAAM,IAAIC,qBAAa,CAAC,qBAAqBC,kBAAU,CAACC,SAAS;QACnE;QACA,MAAMyB,YAAoBC,mBAAM,CAACC,UAAU;QAC3C,KAAK,MAAMI,QAAQD,iBAAW,CAAE;YAC9B,MAAMK,kBACJJ,SAAStB,0BAAU,CAACC,MAAM,GAAGR,IAAAA,oCAAyB,EAACC,gCAAa,CAACC,IAAI,CAACC,KAAK,CAACI,0BAAU,CAACC,MAAM,CAAC,CAACH,UAAU,IAAIuC;YACnH,MAAMV,cAAsBL,SAAStB,0BAAU,CAACwB,IAAI,GAAGR,YAAY,MAAM,IAAI,CAACd,OAAO,CAACxB,MAAM4C,MAAMI,iBAAiBV;YACnHX,IAAIwB,SAAS,CAACnC,gCAAa,CAACC,IAAI,CAACC,KAAK,CAAC0B,KAAK,CAACpC,IAAI,EAAEyC,aAAa;gBAC9DG,QAAQR,SAAStB,0BAAU,CAACwB,IAAI;gBAChCO,MAAMC,iBAAW,CAACV,KAAK;gBACvBW,QAAQP;gBACRQ,UAAUZ,SAAStB,0BAAU,CAACwB,IAAI;YACpC;YACA,IAAIF,SAAStB,0BAAU,CAACC,MAAM,IAAIqB,SAAStB,0BAAU,CAACG,OAAO,EAAE;gBAC7DS,QAAQ,CAAC,GAAGU,KAAK,WAAW,CAAC,CAAC,GAAGI,kBAAkB9C;YACrD;QACF;QACA,OAAOgC;IACT;IAEA,MAAM0B,aAAajC,GAAiB,EAAE;QACpC,KAAK,MAAM,CAACiB,MAAMS,KAAK,IAAIQ,OAAOC,OAAO,CAACR,iBAAW,EAAG;YACtD3B,IAAIoC,WAAW,CAAC/C,gCAAa,CAACC,IAAI,CAACC,KAAK,CAAC0B,KAAK,CAACpC,IAAI,EAAE;gBAAE6C,MAAMA;YAAK;QACpE;IACF;IAEAW,eAAeC,GAAmB,EAAEC,UAAsB,EAAEtB,IAA4C,EAAQ;QAC9G,sBAAsB;QACtB,IAAIuB,gDAAyB,CAACC,GAAG,CAACH,IAAII,MAAM,GAAG;YAC7C;QACF;QAEA,iDAAiD;QACjD,IAAI,OAAOJ,IAAIK,OAAO,KAAK,YAAYL,IAAIK,OAAO,CAACtD,gCAAa,CAACC,IAAI,CAACC,KAAK,CAAC0B,KAAK,CAACpC,IAAI,CAAC,KAAK+D,WAAW;YACrG;QACF;QAEA,IAAI,CAACL,WAAWM,IAAI,EAAE;YACpB,IAAI,CAACnE,MAAM,CAACoE,IAAI,CAAC;gBAAElE,KAAK,IAAI,CAACyD,cAAc,CAACxD,IAAI;gBAAEC,KAAK,GAAGiE,gBAAU,CAACC,WAAW,EAAE;YAAC;YACnF,MAAM,IAAIhE,qBAAa,CAAC+D,gBAAU,CAACC,WAAW,EAAE/D,kBAAU,CAACC,SAAS;QACtE;QAEA,IAAI,CAACoD,IAAIW,OAAO,CAACC,cAAQ,CAAC,EAAE;YAC1B,IAAI,CAACxE,MAAM,CAACoE,IAAI,CAAC;gBAAElE,KAAK,IAAI,CAACyD,cAAc,CAACxD,IAAI;gBAAEC,KAAK,GAAGiE,gBAAU,CAACI,eAAe,EAAE;YAAC;YACvF,MAAM,IAAInE,qBAAa,CAAC+D,gBAAU,CAACI,eAAe,EAAElE,kBAAU,CAACC,SAAS;QAC1E;QAEA,MAAMkE,aAA2BC,IAAAA,cAAM,EAACf,IAAIW,OAAO,CAACC,cAAQ,CAAC,EAAY7D,gCAAa,CAACC,IAAI,CAACC,KAAK,CAACsD,IAAI,CAACS,MAAM;QAC7G,IAAIf,WAAWM,IAAI,KAAKO,WAAWG,KAAK,EAAE;YACxC,IAAI,CAAC7E,MAAM,CAACoE,IAAI,CAAC;gBAAElE,KAAK,IAAI,CAACyD,cAAc,CAACxD,IAAI;gBAAEC,KAAK,GAAGiE,gBAAU,CAACS,QAAQ,EAAE;YAAC;YAChF,MAAM,IAAIxE,qBAAa,CAAC+D,gBAAU,CAACS,QAAQ,EAAEvE,kBAAU,CAACC,SAAS;QACnE;IACF;IAEAuE,eAAyC;QACvC,IAAIpE,gCAAa,CAACC,IAAI,CAACoE,QAAQ,KAAKC,qCAAa,CAACC,IAAI,EAAE;YACtD,OAAO;QACT;QACA,OAAO;YACLC,UAAUC,sBAAc;YACxBC,cAAc1E,gCAAa,CAACC,IAAI,CAAC0E,IAAI,CAACC,OAAO,CAACF,YAAY;YAC1DG,YAAY7E,gCAAa,CAACC,IAAI,CAAC0E,IAAI,CAACC,OAAO,CAACC,UAAU;QACxD;IACF;IAEQrE,QAAQxB,IAAe,EAAE4C,IAAgB,EAAExB,UAAkB,EAAEkB,SAAkB,EAAmB;QAC1G,OAAO,IAAI,CAACwD,GAAG,CAACC,SAAS,CACvB;YACEC,UAAU;gBACRC,IAAIjG,KAAKiG,EAAE;gBACXvF,OAAOV,KAAKU,KAAK;gBACjBwF,OAAOlG,KAAKkG,KAAK;gBACjBC,UAAUnG,KAAKmG,QAAQ;gBACvBC,UAAUpG,KAAKoG,QAAQ;gBACvBC,MAAMrG,KAAKqG,IAAI;gBACfC,cAActG,KAAKsG,YAAY;gBAC/BC,oBAAoBvG,KAAKuG,kBAAkB,IAAIhC;gBAC/CiC,sBAAsBxG,KAAKwG,oBAAoB,IAAIjC;gBACnDkC,UAAUzG,KAAKyG,QAAQ,IAAIlC;gBAC3BtC,cAAcjC,KAAKiC,YAAY,IAAIsC;YACrC;YACA,GAAI,AAAC3B,CAAAA,SAAStB,0BAAU,CAACC,MAAM,IAAIqB,SAAStB,0BAAU,CAACG,OAAO,AAAD,KAAM;gBAAE+C,MAAMlC;YAAU,CAAC;QACxF,GACA;YACE2C,QAAQjE,gCAAa,CAACC,IAAI,CAACC,KAAK,CAAC0B,KAAK,CAACqC,MAAM;YAC7CyB,WAAWtF;QACb;IAEJ;IAEQ8B,WAAWlD,IAAe,EAAE4C,IAAgB,EAAExB,UAAkB,EAAEkB,SAAiB,EAAmB;QAC5G,mEAAmE;QACnE,OAAO,IAAI,CAACwD,GAAG,CAACC,SAAS,CACvB;YACEC,UAAU;gBACRC,IAAIjG,KAAKiG,EAAE;gBACXvF,OAAOV,KAAKU,KAAK;gBACjB0F,UAAUpG,KAAKoG,QAAQ;gBACvBC,MAAMrG,KAAKqG,IAAI;gBACfpE,cAAc;YAChB;YACAuC,MAAMlC;QACR,GACA;YACE2C,QAAQjE,gCAAa,CAACC,IAAI,CAACC,KAAK,CAAC0B,KAAK,CAACqC,MAAM;YAC7CyB,WAAWtF;QACb;IAEJ;IAzKA,YAAY,AAAiB0E,GAAe,CAAE;aAAjBA,MAAAA;aAFZzF,SAAS,IAAIsG,cAAM,CAAC7G,YAAYU,IAAI;IAEN;AA0KjD"}

package/server/authentication/{services/auth-manager.service.spec.js → auth.service.spec.js}

@@ -1,21 +1,17 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
 const _config = require("@nestjs/config");
 const _jwt = require("@nestjs/jwt");
 const _testing = require("@nestjs/testing");
-const _authmanagerservice = require("./auth-manager.service");
-describe(_authmanagerservice.AuthManager.name, ()=>{
+const _authservice = require("./auth.service");
+describe(_authservice.AuthManager.name, ()=>{
     let authManager;
     beforeAll(async ()=>{
         const module = await _testing.Test.createTestingModule({
             providers: [
-                _authmanagerservice.AuthManager,
+                _authservice.AuthManager,
                 {
                     provide: _jwt.JwtService,
                     useValue: {}
@@ -31,11 +27,11 @@ describe(_authmanagerservice.AuthManager.name, ()=>{
         module.useLogger([
             'fatal'
         ]);
-        authManager = module.get(_authmanagerservice.AuthManager);
+        authManager = module.get(_authservice.AuthManager);
     });
     it('should be defined', ()=>{
         expect(authManager).toBeDefined();
     });
 });
 
-//# sourceMappingURL=auth-manager.service.spec.js.map
+//# sourceMappingURL=auth.service.spec.js.map

package/server/authentication/auth.service.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../backend/src/authentication/auth.service.spec.ts"],"sourcesContent":["import { ConfigService } from '@nestjs/config'\nimport { JwtService } from '@nestjs/jwt'\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { AuthManager } from './auth.service'\n\ndescribe(AuthManager.name, () => {\n  let authManager: AuthManager\n\n  beforeAll(async () => {\n    const module: TestingModule = await Test.createTestingModule({\n      providers: [AuthManager, { provide: JwtService, useValue: {} }, { provide: ConfigService, useValue: { get: () => null } }]\n    }).compile()\n\n    module.useLogger(['fatal'])\n    authManager = module.get<AuthManager>(AuthManager)\n  })\n\n  it('should be defined', () => {\n    expect(authManager).toBeDefined()\n  })\n})\n"],"names":["describe","AuthManager","name","authManager","beforeAll","module","Test","createTestingModule","providers","provide","JwtService","useValue","ConfigService","get","compile","useLogger","it","expect","toBeDefined"],"mappings":";;;;wBAA8B;qBACH;yBACS;6BACR;AAE5BA,SAASC,wBAAW,CAACC,IAAI,EAAE;IACzB,IAAIC;IAEJC,UAAU;QACR,MAAMC,SAAwB,MAAMC,aAAI,CAACC,mBAAmB,CAAC;YAC3DC,WAAW;gBAACP,wBAAW;gBAAE;oBAAEQ,SAASC,eAAU;oBAAEC,UAAU,CAAC;gBAAE;gBAAG;oBAAEF,SAASG,qBAAa;oBAAED,UAAU;wBAAEE,KAAK,IAAM;oBAAK;gBAAE;aAAE;QAC5H,GAAGC,OAAO;QAEVT,OAAOU,SAAS,CAAC;YAAC;SAAQ;QAC1BZ,cAAcE,OAAOQ,GAAG,CAAcZ,wBAAW;IACnD;IAEAe,GAAG,qBAAqB;QACtBC,OAAOd,aAAae,WAAW;IACjC;AACF"}

package/server/authentication/constants/auth.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });

package/server/authentication/constants/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/constants/auth.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { TOKEN_TYPE } from '../interfaces/token.interface'\nimport { API_AUTH_REFRESH, API_AUTH_WS, API_TWO_FA_LOGIN_VERIFY } from './routes'\n\nexport const ACCESS_KEY = 'sync-in-access'\nexport const REFRESH_KEY = 'sync-in-refresh'\nexport const CSRF_KEY = 'sync-in-csrf'\nexport const WS_KEY = 'sync-in-ws'\n\nexport const TWO_FA_CODE_LENGTH = 6\nexport const TWO_FA_VERIFY_EXPIRATION = '5m'\nexport const TWO_FA_HEADER_CODE = 'sync-in-two-fa-code'\nexport const TWO_FA_HEADER_PASSWORD = 'sync-in-two-fa-password'\n\nexport const TOKEN_PATHS = {\n  [TOKEN_TYPE.ACCESS]: '/',\n  [TOKEN_TYPE.REFRESH]: API_AUTH_REFRESH,\n  [TOKEN_TYPE.WS]: API_AUTH_WS,\n  [TOKEN_TYPE.CSRF]: '/',\n  [TOKEN_TYPE.ACCESS_2FA]: API_TWO_FA_LOGIN_VERIFY,\n  [TOKEN_TYPE.CSRF_2FA]: '/'\n} as const\n\nexport const TOKEN_TYPES: TOKEN_TYPE[] = [TOKEN_TYPE.REFRESH, TOKEN_TYPE.ACCESS, TOKEN_TYPE.WS, TOKEN_TYPE.CSRF] as const\nexport const TOKEN_2FA_TYPES: TOKEN_TYPE[] = [TOKEN_TYPE.ACCESS_2FA, TOKEN_TYPE.CSRF_2FA] as const\n\nexport const CSRF_ERROR = {\n  MISSING_JWT: 'Missing CSRF in JWT',\n  MISSING_HEADERS: 'Missing CSRF in headers',\n  MISMATCH: 'CSRF mismatch'\n} as const\n"],"names":["ACCESS_KEY","CSRF_ERROR","CSRF_KEY","REFRESH_KEY","TOKEN_2FA_TYPES","TOKEN_PATHS","TOKEN_TYPES","TWO_FA_CODE_LENGTH","TWO_FA_HEADER_CODE","TWO_FA_HEADER_PASSWORD","TWO_FA_VERIFY_EXPIRATION","WS_KEY","TOKEN_TYPE","ACCESS","REFRESH","API_AUTH_REFRESH","WS","API_AUTH_WS","CSRF","ACCESS_2FA","API_TWO_FA_LOGIN_VERIFY","CSRF_2FA","MISSING_JWT","MISSING_HEADERS","MISMATCH"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAKYA;eAAAA;;QAsBAC;eAAAA;;QApBAC;eAAAA;;QADAC;eAAAA;;QAmBAC;eAAAA;;QAVAC;eAAAA;;QASAC;eAAAA;;QAdAC;eAAAA;;QAEAC;eAAAA;;QACAC;eAAAA;;QAFAC;eAAAA;;QAHAC;eAAAA;;;gCANc;wBAC4C;AAEhE,MAAMX,aAAa;AACnB,MAAMG,cAAc;AACpB,MAAMD,WAAW;AACjB,MAAMS,SAAS;AAEf,MAAMJ,qBAAqB;AAC3B,MAAMG,2BAA2B;AACjC,MAAMF,qBAAqB;AAC3B,MAAMC,yBAAyB;AAE/B,MAAMJ,cAAc;IACzB,CAACO,0BAAU,CAACC,MAAM,CAAC,EAAE;IACrB,CAACD,0BAAU,CAACE,OAAO,CAAC,EAAEC,wBAAgB;IACtC,CAACH,0BAAU,CAACI,EAAE,CAAC,EAAEC,mBAAW;IAC5B,CAACL,0BAAU,CAACM,IAAI,CAAC,EAAE;IACnB,CAACN,0BAAU,CAACO,UAAU,CAAC,EAAEC,+BAAuB;IAChD,CAACR,0BAAU,CAACS,QAAQ,CAAC,EAAE;AACzB;AAEO,MAAMf,cAA4B;IAACM,0BAAU,CAACE,OAAO;IAAEF,0BAAU,CAACC,MAAM;IAAED,0BAAU,CAACI,EAAE;IAAEJ,0BAAU,CAACM,IAAI;CAAC;AACzG,MAAMd,kBAAgC;IAACQ,0BAAU,CAACO,UAAU;IAAEP,0BAAU,CAACS,QAAQ;CAAC;AAElF,MAAMpB,aAAa;IACxBqB,aAAa;IACbC,iBAAiB;IACjBC,UAAU;AACZ"}
+{"version":3,"sources":["../../../../backend/src/authentication/constants/auth.ts"],"sourcesContent":["import { TOKEN_TYPE } from '../interfaces/token.interface'\nimport { API_AUTH_REFRESH, API_AUTH_WS, API_TWO_FA_LOGIN_VERIFY } from './routes'\n\nexport const ACCESS_KEY = 'sync-in-access'\nexport const REFRESH_KEY = 'sync-in-refresh'\nexport const CSRF_KEY = 'sync-in-csrf'\nexport const WS_KEY = 'sync-in-ws'\n\nexport const TWO_FA_CODE_LENGTH = 6\nexport const TWO_FA_VERIFY_EXPIRATION = '5m'\nexport const TWO_FA_HEADER_CODE = 'sync-in-two-fa-code'\nexport const TWO_FA_HEADER_PASSWORD = 'sync-in-two-fa-password'\n\nexport const TOKEN_PATHS = {\n  [TOKEN_TYPE.ACCESS]: '/',\n  [TOKEN_TYPE.REFRESH]: API_AUTH_REFRESH,\n  [TOKEN_TYPE.WS]: API_AUTH_WS,\n  [TOKEN_TYPE.CSRF]: '/',\n  [TOKEN_TYPE.ACCESS_2FA]: API_TWO_FA_LOGIN_VERIFY,\n  [TOKEN_TYPE.CSRF_2FA]: '/'\n} as const\n\nexport const TOKEN_TYPES: TOKEN_TYPE[] = [TOKEN_TYPE.REFRESH, TOKEN_TYPE.ACCESS, TOKEN_TYPE.WS, TOKEN_TYPE.CSRF] as const\nexport const TOKEN_2FA_TYPES: TOKEN_TYPE[] = [TOKEN_TYPE.ACCESS_2FA, TOKEN_TYPE.CSRF_2FA] as const\n\nexport const CSRF_ERROR = {\n  MISSING_JWT: 'Missing CSRF in JWT',\n  MISSING_HEADERS: 'Missing CSRF in headers',\n  MISMATCH: 'CSRF mismatch'\n} as const\n"],"names":["ACCESS_KEY","CSRF_ERROR","CSRF_KEY","REFRESH_KEY","TOKEN_2FA_TYPES","TOKEN_PATHS","TOKEN_TYPES","TWO_FA_CODE_LENGTH","TWO_FA_HEADER_CODE","TWO_FA_HEADER_PASSWORD","TWO_FA_VERIFY_EXPIRATION","WS_KEY","TOKEN_TYPE","ACCESS","REFRESH","API_AUTH_REFRESH","WS","API_AUTH_WS","CSRF","ACCESS_2FA","API_TWO_FA_LOGIN_VERIFY","CSRF_2FA","MISSING_JWT","MISSING_HEADERS","MISMATCH"],"mappings":";;;;;;;;;;;QAGaA;eAAAA;;QAsBAC;eAAAA;;QApBAC;eAAAA;;QADAC;eAAAA;;QAmBAC;eAAAA;;QAVAC;eAAAA;;QASAC;eAAAA;;QAdAC;eAAAA;;QAEAC;eAAAA;;QACAC;eAAAA;;QAFAC;eAAAA;;QAHAC;eAAAA;;;gCANc;wBAC4C;AAEhE,MAAMX,aAAa;AACnB,MAAMG,cAAc;AACpB,MAAMD,WAAW;AACjB,MAAMS,SAAS;AAEf,MAAMJ,qBAAqB;AAC3B,MAAMG,2BAA2B;AACjC,MAAMF,qBAAqB;AAC3B,MAAMC,yBAAyB;AAE/B,MAAMJ,cAAc;IACzB,CAACO,0BAAU,CAACC,MAAM,CAAC,EAAE;IACrB,CAACD,0BAAU,CAACE,OAAO,CAAC,EAAEC,wBAAgB;IACtC,CAACH,0BAAU,CAACI,EAAE,CAAC,EAAEC,mBAAW;IAC5B,CAACL,0BAAU,CAACM,IAAI,CAAC,EAAE;IACnB,CAACN,0BAAU,CAACO,UAAU,CAAC,EAAEC,+BAAuB;IAChD,CAACR,0BAAU,CAACS,QAAQ,CAAC,EAAE;AACzB;AAEO,MAAMf,cAA4B;IAACM,0BAAU,CAACE,OAAO;IAAEF,0BAAU,CAACC,MAAM;IAAED,0BAAU,CAACI,EAAE;IAAEJ,0BAAU,CAACM,IAAI;CAAC;AACzG,MAAMd,kBAAgC;IAACQ,0BAAU,CAACO,UAAU;IAAEP,0BAAU,CAACS,QAAQ;CAAC;AAElF,MAAMpB,aAAa;IACxBqB,aAAa;IACbC,iBAAiB;IACjBC,UAAU;AACZ"}

package/server/authentication/constants/routes.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
@@ -22,6 +18,9 @@ _export(exports, {
     get API_AUTH_REFRESH () {
         return API_AUTH_REFRESH;
     },
+    get API_AUTH_SETTINGS () {
+        return API_AUTH_SETTINGS;
+    },
     get API_AUTH_TOKEN () {
         return API_AUTH_TOKEN;
     },
@@ -31,6 +30,12 @@ _export(exports, {
     get API_AUTH_WS () {
         return API_AUTH_WS;
     },
+    get API_OIDC_CALLBACK () {
+        return API_OIDC_CALLBACK;
+    },
+    get API_OIDC_LOGIN () {
+        return API_OIDC_LOGIN;
+    },
     get API_TWO_FA_ADMIN_RESET_USER () {
         return API_TWO_FA_ADMIN_RESET_USER;
     },
@@ -47,30 +52,36 @@ _export(exports, {
         return AUTH_ROUTE;
     }
 });
-var AUTH_ROUTE = /*#__PURE__*/ function(AUTH_ROUTE) {
-    AUTH_ROUTE["BASE"] = "/api/auth";
-    AUTH_ROUTE["LOGIN"] = "login";
-    AUTH_ROUTE["LOGOUT"] = "logout";
-    AUTH_ROUTE["REFRESH"] = "refresh";
-    AUTH_ROUTE["TOKEN"] = "token";
-    AUTH_ROUTE["TOKEN_REFRESH"] = "token/refresh";
-    AUTH_ROUTE["WS"] = "socket.io";
-    AUTH_ROUTE["TWO_FA_BASE"] = "2fa";
-    AUTH_ROUTE["TWO_FA_ENABLE"] = "enable";
-    AUTH_ROUTE["TWO_FA_DISABLE"] = "disable";
-    AUTH_ROUTE["TWO_FA_LOGIN_VERIFY"] = "login/verify";
-    AUTH_ROUTE["TWO_FA_ADMIN_RESET_USER"] = "reset/user";
-    return AUTH_ROUTE;
-}({});
-const API_AUTH_LOGIN = `${"/api/auth"}/${"login"}`;
-const API_AUTH_LOGOUT = `${"/api/auth"}/${"logout"}`;
-const API_AUTH_REFRESH = `${"/api/auth"}/${"refresh"}`;
-const API_AUTH_TOKEN = `${"/api/auth"}/${"token"}`;
-const API_AUTH_TOKEN_REFRESH = `${"/api/auth"}/${"token/refresh"}`;
-const API_AUTH_WS = `/${"socket.io"}`;
-const API_TWO_FA_ENABLE = `${"/api/auth"}/${"2fa"}/${"enable"}`;
-const API_TWO_FA_DISABLE = `${"/api/auth"}/${"2fa"}/${"disable"}`;
-const API_TWO_FA_LOGIN_VERIFY = `${"/api/auth"}/${"2fa"}/${"login/verify"}`;
-const API_TWO_FA_ADMIN_RESET_USER = `${"/api/auth"}/${"2fa"}/${"reset/user"}`;
+const AUTH_ROUTE = {
+    BASE: '/api/auth',
+    LOGIN: 'login',
+    LOGOUT: 'logout',
+    REFRESH: 'refresh',
+    TOKEN: 'token',
+    TOKEN_REFRESH: 'token/refresh',
+    SETTINGS: 'settings',
+    WS: 'socket.io',
+    TWO_FA_BASE: '2fa',
+    TWO_FA_ENABLE: 'enable',
+    TWO_FA_DISABLE: 'disable',
+    TWO_FA_LOGIN_VERIFY: 'login/verify',
+    TWO_FA_ADMIN_RESET_USER: 'reset/user',
+    OIDC_LOGIN: 'oidc/login',
+    OIDC_CALLBACK: 'oidc/callback',
+    OIDC_SETTINGS: 'oidc/settings'
+};
+const API_AUTH_LOGIN = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.LOGIN}`;
+const API_AUTH_LOGOUT = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.LOGOUT}`;
+const API_AUTH_REFRESH = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.REFRESH}`;
+const API_AUTH_TOKEN = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TOKEN}`;
+const API_AUTH_TOKEN_REFRESH = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TOKEN_REFRESH}`;
+const API_AUTH_SETTINGS = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.SETTINGS}`;
+const API_AUTH_WS = `/${AUTH_ROUTE.WS}`;
+const API_TWO_FA_ENABLE = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_ENABLE}`;
+const API_TWO_FA_DISABLE = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_DISABLE}`;
+const API_TWO_FA_LOGIN_VERIFY = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_LOGIN_VERIFY}`;
+const API_TWO_FA_ADMIN_RESET_USER = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_ADMIN_RESET_USER}`;
+const API_OIDC_LOGIN = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.OIDC_LOGIN}`;
+const API_OIDC_CALLBACK = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.OIDC_CALLBACK}`;
 
 //# sourceMappingURL=routes.js.map

package/server/authentication/constants/routes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/constants/routes.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport enum AUTH_ROUTE {\n  BASE = '/api/auth',\n  LOGIN = 'login',\n  LOGOUT = 'logout',\n  REFRESH = 'refresh',\n  TOKEN = 'token',\n  TOKEN_REFRESH = `${AUTH_ROUTE.TOKEN}/refresh`,\n  WS = 'socket.io',\n  TWO_FA_BASE = '2fa',\n  TWO_FA_ENABLE = 'enable',\n  TWO_FA_DISABLE = 'disable',\n  TWO_FA_LOGIN_VERIFY = 'login/verify',\n  TWO_FA_ADMIN_RESET_USER = 'reset/user'\n}\n\nexport const API_AUTH_LOGIN = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.LOGIN}`\nexport const API_AUTH_LOGOUT = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.LOGOUT}`\nexport const API_AUTH_REFRESH = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.REFRESH}`\nexport const API_AUTH_TOKEN = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TOKEN}`\nexport const API_AUTH_TOKEN_REFRESH = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TOKEN_REFRESH}`\nexport const API_AUTH_WS = `/${AUTH_ROUTE.WS}`\nexport const API_TWO_FA_ENABLE = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_ENABLE}`\nexport const API_TWO_FA_DISABLE = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_DISABLE}`\nexport const API_TWO_FA_LOGIN_VERIFY = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_LOGIN_VERIFY}`\nexport const API_TWO_FA_ADMIN_RESET_USER = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_ADMIN_RESET_USER}`\n"],"names":["API_AUTH_LOGIN","API_AUTH_LOGOUT","API_AUTH_REFRESH","API_AUTH_TOKEN","API_AUTH_TOKEN_REFRESH","API_AUTH_WS","API_TWO_FA_ADMIN_RESET_USER","API_TWO_FA_DISABLE","API_TWO_FA_ENABLE","API_TWO_FA_LOGIN_VERIFY","AUTH_ROUTE"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAiBYA;eAAAA;;QACAC;eAAAA;;QACAC;eAAAA;;QACAC;eAAAA;;QACAC;eAAAA;;QACAC;eAAAA;;QAIAC;eAAAA;;QAFAC;eAAAA;;QADAC;eAAAA;;QAEAC;eAAAA;;QAvBDC;eAAAA;;;AAAL,IAAA,AAAKA,oCAAAA;;;;;;;;;;;;;WAAAA;;AAeL,MAAMV,iBAAiB,eAAmB,CAAC,WAAoB;AAC/D,MAAMC,kBAAkB,eAAmB,CAAC,YAAqB;AACjE,MAAMC,mBAAmB,eAAmB,CAAC,aAAsB;AACnE,MAAMC,iBAAiB,eAAmB,CAAC,WAAoB;AAC/D,MAAMC,yBAAyB,eAAmB,CAAC,mBAA4B;AAC/E,MAAMC,cAAc,CAAC,CAAC,eAAiB;AACvC,MAAMG,oBAAoB,eAAmB,CAAC,QAAyB,CAAC,YAA4B;AACpG,MAAMD,qBAAqB,eAAmB,CAAC,QAAyB,CAAC,aAA6B;AACtG,MAAME,0BAA0B,eAAmB,CAAC,QAAyB,CAAC,kBAAkC;AAChH,MAAMH,8BAA8B,eAAmB,CAAC,QAAyB,CAAC,gBAAsC"}
+{"version":3,"sources":["../../../../backend/src/authentication/constants/routes.ts"],"sourcesContent":["export const AUTH_ROUTE = {\n  BASE: '/api/auth',\n  LOGIN: 'login',\n  LOGOUT: 'logout',\n  REFRESH: 'refresh',\n  TOKEN: 'token',\n  TOKEN_REFRESH: 'token/refresh',\n  SETTINGS: 'settings',\n  WS: 'socket.io',\n  TWO_FA_BASE: '2fa',\n  TWO_FA_ENABLE: 'enable',\n  TWO_FA_DISABLE: 'disable',\n  TWO_FA_LOGIN_VERIFY: 'login/verify',\n  TWO_FA_ADMIN_RESET_USER: 'reset/user',\n  OIDC_LOGIN: 'oidc/login',\n  OIDC_CALLBACK: 'oidc/callback',\n  OIDC_SETTINGS: 'oidc/settings'\n}\n\nexport const API_AUTH_LOGIN = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.LOGIN}`\nexport const API_AUTH_LOGOUT = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.LOGOUT}`\nexport const API_AUTH_REFRESH = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.REFRESH}`\nexport const API_AUTH_TOKEN = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TOKEN}`\nexport const API_AUTH_TOKEN_REFRESH = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TOKEN_REFRESH}`\nexport const API_AUTH_SETTINGS = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.SETTINGS}`\nexport const API_AUTH_WS = `/${AUTH_ROUTE.WS}`\nexport const API_TWO_FA_ENABLE = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_ENABLE}`\nexport const API_TWO_FA_DISABLE = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_DISABLE}`\nexport const API_TWO_FA_LOGIN_VERIFY = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_LOGIN_VERIFY}`\nexport const API_TWO_FA_ADMIN_RESET_USER = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_ADMIN_RESET_USER}`\nexport const API_OIDC_LOGIN = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.OIDC_LOGIN}`\nexport const API_OIDC_CALLBACK = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.OIDC_CALLBACK}`\n"],"names":["API_AUTH_LOGIN","API_AUTH_LOGOUT","API_AUTH_REFRESH","API_AUTH_SETTINGS","API_AUTH_TOKEN","API_AUTH_TOKEN_REFRESH","API_AUTH_WS","API_OIDC_CALLBACK","API_OIDC_LOGIN","API_TWO_FA_ADMIN_RESET_USER","API_TWO_FA_DISABLE","API_TWO_FA_ENABLE","API_TWO_FA_LOGIN_VERIFY","AUTH_ROUTE","BASE","LOGIN","LOGOUT","REFRESH","TOKEN","TOKEN_REFRESH","SETTINGS","WS","TWO_FA_BASE","TWO_FA_ENABLE","TWO_FA_DISABLE","TWO_FA_LOGIN_VERIFY","TWO_FA_ADMIN_RESET_USER","OIDC_LOGIN","OIDC_CALLBACK","OIDC_SETTINGS"],"mappings":";;;;;;;;;;;QAmBaA;eAAAA;;QACAC;eAAAA;;QACAC;eAAAA;;QAGAC;eAAAA;;QAFAC;eAAAA;;QACAC;eAAAA;;QAEAC;eAAAA;;QAMAC;eAAAA;;QADAC;eAAAA;;QADAC;eAAAA;;QAFAC;eAAAA;;QADAC;eAAAA;;QAEAC;eAAAA;;QA5BAC;eAAAA;;;AAAN,MAAMA,aAAa;IACxBC,MAAM;IACNC,OAAO;IACPC,QAAQ;IACRC,SAAS;IACTC,OAAO;IACPC,eAAe;IACfC,UAAU;IACVC,IAAI;IACJC,aAAa;IACbC,eAAe;IACfC,gBAAgB;IAChBC,qBAAqB;IACrBC,yBAAyB;IACzBC,YAAY;IACZC,eAAe;IACfC,eAAe;AACjB;AAEO,MAAM7B,iBAAiB,GAAGa,WAAWC,IAAI,CAAC,CAAC,EAAED,WAAWE,KAAK,EAAE;AAC/D,MAAMd,kBAAkB,GAAGY,WAAWC,IAAI,CAAC,CAAC,EAAED,WAAWG,MAAM,EAAE;AACjE,MAAMd,mBAAmB,GAAGW,WAAWC,IAAI,CAAC,CAAC,EAAED,WAAWI,OAAO,EAAE;AACnE,MAAMb,iBAAiB,GAAGS,WAAWC,IAAI,CAAC,CAAC,EAAED,WAAWK,KAAK,EAAE;AAC/D,MAAMb,yBAAyB,GAAGQ,WAAWC,IAAI,CAAC,CAAC,EAAED,WAAWM,aAAa,EAAE;AAC/E,MAAMhB,oBAAoB,GAAGU,WAAWC,IAAI,CAAC,CAAC,EAAED,WAAWO,QAAQ,EAAE;AACrE,MAAMd,cAAc,CAAC,CAAC,EAAEO,WAAWQ,EAAE,EAAE;AACvC,MAAMV,oBAAoB,GAAGE,WAAWC,IAAI,CAAC,CAAC,EAAED,WAAWS,WAAW,CAAC,CAAC,EAAET,WAAWU,aAAa,EAAE;AACpG,MAAMb,qBAAqB,GAAGG,WAAWC,IAAI,CAAC,CAAC,EAAED,WAAWS,WAAW,CAAC,CAAC,EAAET,WAAWW,cAAc,EAAE;AACtG,MAAMZ,0BAA0B,GAAGC,WAAWC,IAAI,CAAC,CAAC,EAAED,WAAWS,WAAW,CAAC,CAAC,EAAET,WAAWY,mBAAmB,EAAE;AAChH,MAAMhB,8BAA8B,GAAGI,WAAWC,IAAI,CAAC,CAAC,EAAED,WAAWS,WAAW,CAAC,CAAC,EAAET,WAAWa,uBAAuB,EAAE;AACxH,MAAMlB,iBAAiB,GAAGK,WAAWC,IAAI,CAAC,CAAC,EAAED,WAAWc,UAAU,EAAE;AACpE,MAAMpB,oBAAoB,GAAGM,WAAWC,IAAI,CAAC,CAAC,EAAED,WAAWe,aAAa,EAAE"}

package/server/authentication/constants/scope.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
@@ -14,6 +10,7 @@ Object.defineProperty(exports, "AUTH_SCOPE", {
 });
 var AUTH_SCOPE = /*#__PURE__*/ function(AUTH_SCOPE) {
     AUTH_SCOPE["WEBDAV"] = "webdav";
+    AUTH_SCOPE["CLIENT"] = "client";
     return AUTH_SCOPE;
 }({});
 

package/server/authentication/constants/scope.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/constants/scope.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport enum AUTH_SCOPE {\n  WEBDAV = 'webdav'\n}\n"],"names":["AUTH_SCOPE"],"mappings":"AAAA;;;;CAIC;;;;+BAEWA;;;eAAAA;;;AAAL,IAAA,AAAKA,oCAAAA;;WAAAA"}
+{"version":3,"sources":["../../../../backend/src/authentication/constants/scope.ts"],"sourcesContent":["export enum AUTH_SCOPE {\n  WEBDAV = 'webdav',\n  CLIENT = 'client'\n}\n"],"names":["AUTH_SCOPE"],"mappings":";;;;+BAAYA;;;eAAAA;;;AAAL,IAAA,AAAKA,oCAAAA;;;WAAAA"}

package/server/authentication/decorators/auth-token-optional.decorator.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });

package/server/authentication/decorators/auth-token-optional.decorator.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/decorators/auth-token-optional.decorator.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { applyDecorators, UseGuards } from '@nestjs/common'\nimport { AuthGuard } from '@nestjs/passport'\nimport { AuthTokenSkip } from './auth-token-skip.decorator'\n\nexport const AuthTokenOptional = () => {\n  // skip global auth access guard and apply guards successively to context\n  return applyDecorators(AuthTokenSkip(), UseGuards(AuthGuard(['tokenAccess', 'anonymous'])))\n}\n"],"names":["AuthTokenOptional","applyDecorators","AuthTokenSkip","UseGuards","AuthGuard"],"mappings":"AAAA;;;;CAIC;;;;+BAMYA;;;eAAAA;;;wBAJ8B;0BACjB;wCACI;AAEvB,MAAMA,oBAAoB;IAC/B,yEAAyE;IACzE,OAAOC,IAAAA,uBAAe,EAACC,IAAAA,qCAAa,KAAIC,IAAAA,iBAAS,EAACC,IAAAA,mBAAS,EAAC;QAAC;QAAe;KAAY;AAC1F"}
+{"version":3,"sources":["../../../../backend/src/authentication/decorators/auth-token-optional.decorator.ts"],"sourcesContent":["import { applyDecorators, UseGuards } from '@nestjs/common'\nimport { AuthGuard } from '@nestjs/passport'\nimport { AuthTokenSkip } from './auth-token-skip.decorator'\n\nexport const AuthTokenOptional = () => {\n  // skip global auth access guard and apply guards successively to context\n  return applyDecorators(AuthTokenSkip(), UseGuards(AuthGuard(['tokenAccess', 'anonymous'])))\n}\n"],"names":["AuthTokenOptional","applyDecorators","AuthTokenSkip","UseGuards","AuthGuard"],"mappings":";;;;+BAIaA;;;eAAAA;;;wBAJ8B;0BACjB;wCACI;AAEvB,MAAMA,oBAAoB;IAC/B,yEAAyE;IACzE,OAAOC,IAAAA,uBAAe,EAACC,IAAAA,qCAAa,KAAIC,IAAAA,iBAAS,EAACC,IAAAA,mBAAS,EAAC;QAAC;QAAe;KAAY;AAC1F"}

package/server/authentication/decorators/auth-token-skip.decorator.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });

package/server/authentication/decorators/auth-token-skip.decorator.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/decorators/auth-token-skip.decorator.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { SetMetadata } from '@nestjs/common'\n\nexport const AUTH_TOKEN_SKIP = 'authTokenSkip'\nexport const AuthTokenSkip = () => SetMetadata(AUTH_TOKEN_SKIP, true)\n"],"names":["AUTH_TOKEN_SKIP","AuthTokenSkip","SetMetadata"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAIYA;eAAAA;;QACAC;eAAAA;;;wBAHe;AAErB,MAAMD,kBAAkB;AACxB,MAAMC,gBAAgB,IAAMC,IAAAA,mBAAW,EAACF,iBAAiB"}
+{"version":3,"sources":["../../../../backend/src/authentication/decorators/auth-token-skip.decorator.ts"],"sourcesContent":["import { SetMetadata } from '@nestjs/common'\n\nexport const AUTH_TOKEN_SKIP = 'authTokenSkip'\nexport const AuthTokenSkip = () => SetMetadata(AUTH_TOKEN_SKIP, true)\n"],"names":["AUTH_TOKEN_SKIP","AuthTokenSkip","SetMetadata"],"mappings":";;;;;;;;;;;QAEaA;eAAAA;;QACAC;eAAAA;;;wBAHe;AAErB,MAAMD,kBAAkB;AACxB,MAAMC,gBAAgB,IAAMC,IAAAA,mBAAW,EAACF,iBAAiB"}

package/server/authentication/dto/login-response.dto.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
@@ -18,9 +14,6 @@ _export(exports, {
     },
     get LoginVerify2FaDto () {
         return LoginVerify2FaDto;
-    },
-    get TwoFaResponseDto () {
-        return TwoFaResponseDto;
     }
 });
 const _tokenresponsedto = require("./token-response.dto");
@@ -40,7 +33,5 @@ let LoginVerify2FaDto = class LoginVerify2FaDto {
         this.token = new _tokenresponsedto.TokenResponseDto();
     }
 };
-let TwoFaResponseDto = class TwoFaResponseDto extends LoginResponseDto {
-};
 
 //# sourceMappingURL=login-response.dto.js.map

package/server/authentication/dto/login-response.dto.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/dto/login-response.dto.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { UserModel } from '../../applications/users/models/user.model'\nimport { ServerConfig } from '../../configuration/config.interfaces'\nimport { TokenResponseDto } from './token-response.dto'\n\nexport class LoginResponseDto {\n  server: ServerConfig\n  user: UserModel\n  token: TokenResponseDto\n\n  constructor(user: UserModel, serverConfig: ServerConfig) {\n    this.server = serverConfig\n    this.user = user\n    this.token = new TokenResponseDto()\n  }\n}\n\nexport class LoginVerify2FaDto {\n  server: ServerConfig\n  user = { twoFaEnabled: true }\n  token: TokenResponseDto\n\n  constructor(serverConfig: ServerConfig) {\n    this.server = serverConfig\n    this.token = new TokenResponseDto()\n  }\n}\n\nexport class TwoFaResponseDto extends LoginResponseDto {\n  success: boolean\n  message: string\n}\n"],"names":["LoginResponseDto","LoginVerify2FaDto","TwoFaResponseDto","user","serverConfig","server","token","TokenResponseDto","twoFaEnabled"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAMYA;eAAAA;;QAYAC;eAAAA;;QAWAC;eAAAA;;;kCAzBoB;AAE1B,IAAA,AAAMF,mBAAN,MAAMA;IAKX,YAAYG,IAAe,EAAEC,YAA0B,CAAE;QACvD,IAAI,CAACC,MAAM,GAAGD;QACd,IAAI,CAACD,IAAI,GAAGA;QACZ,IAAI,CAACG,KAAK,GAAG,IAAIC,kCAAgB;IACnC;AACF;AAEO,IAAA,AAAMN,oBAAN,MAAMA;IAKX,YAAYG,YAA0B,CAAE;aAHxCD,OAAO;YAAEK,cAAc;QAAK;QAI1B,IAAI,CAACH,MAAM,GAAGD;QACd,IAAI,CAACE,KAAK,GAAG,IAAIC,kCAAgB;IACnC;AACF;AAEO,IAAA,AAAML,mBAAN,MAAMA,yBAAyBF;AAGtC"}
+{"version":3,"sources":["../../../../backend/src/authentication/dto/login-response.dto.ts"],"sourcesContent":["import { UserModel } from '../../applications/users/models/user.model'\nimport { ServerConfig } from '../../configuration/config.interfaces'\nimport { TokenResponseDto } from './token-response.dto'\n\nexport class LoginResponseDto {\n  server: ServerConfig\n  user: UserModel\n  token: TokenResponseDto\n\n  constructor(user: UserModel, serverConfig: ServerConfig) {\n    this.server = serverConfig\n    this.user = user\n    this.token = new TokenResponseDto()\n  }\n}\n\nexport class LoginVerify2FaDto {\n  server: ServerConfig\n  user: { twoFaEnabled: boolean } = { twoFaEnabled: true }\n  token: TokenResponseDto\n\n  constructor(serverConfig: ServerConfig) {\n    this.server = serverConfig\n    this.token = new TokenResponseDto()\n  }\n}\n"],"names":["LoginResponseDto","LoginVerify2FaDto","user","serverConfig","server","token","TokenResponseDto","twoFaEnabled"],"mappings":";;;;;;;;;;;QAIaA;eAAAA;;QAYAC;eAAAA;;;kCAdoB;AAE1B,IAAA,AAAMD,mBAAN,MAAMA;IAKX,YAAYE,IAAe,EAAEC,YAA0B,CAAE;QACvD,IAAI,CAACC,MAAM,GAAGD;QACd,IAAI,CAACD,IAAI,GAAGA;QACZ,IAAI,CAACG,KAAK,GAAG,IAAIC,kCAAgB;IACnC;AACF;AAEO,IAAA,AAAML,oBAAN,MAAMA;IAKX,YAAYE,YAA0B,CAAE;aAHxCD,OAAkC;YAAEK,cAAc;QAAK;QAIrD,IAAI,CAACH,MAAM,GAAGD;QACd,IAAI,CAACE,KAAK,GAAG,IAAIC,kCAAgB;IACnC;AACF"}

package/server/authentication/dto/token-response.dto.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });

package/server/authentication/dto/token-response.dto.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/dto/token-response.dto.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { IsInt, IsOptional, IsString } from 'class-validator'\n\nexport class TokenResponseDto {\n  @IsString()\n  access: string\n\n  @IsString()\n  refresh: string\n\n  @IsInt()\n  access_expiration: number\n\n  @IsInt()\n  refresh_expiration: number\n\n  @IsOptional()\n  @IsInt()\n  access_2fa_expiration?: number\n}\n"],"names":["TokenResponseDto"],"mappings":"AAAA;;;;CAIC;;;;+BAIYA;;;eAAAA;;;gCAF+B;;;;;;;;;;AAErC,IAAA,AAAMA,mBAAN,MAAMA;AAgBb"}
+{"version":3,"sources":["../../../../backend/src/authentication/dto/token-response.dto.ts"],"sourcesContent":["import { IsInt, IsOptional, IsString } from 'class-validator'\n\nexport class TokenResponseDto {\n  @IsString()\n  access: string\n\n  @IsString()\n  refresh: string\n\n  @IsInt()\n  access_expiration: number\n\n  @IsInt()\n  refresh_expiration: number\n\n  @IsOptional()\n  @IsInt()\n  access_2fa_expiration?: number\n}\n"],"names":["TokenResponseDto"],"mappings":";;;;+BAEaA;;;eAAAA;;;gCAF+B;;;;;;;;;;AAErC,IAAA,AAAMA,mBAAN,MAAMA;AAgBb"}

package/server/authentication/guards/auth-anonymous.guard.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });

package/server/authentication/guards/auth-anonymous.guard.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-anonymous.guard.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Injectable } from '@nestjs/common'\nimport { AuthGuard, IAuthGuard } from '@nestjs/passport'\n\n@Injectable()\nexport class AuthAnonymousGuard extends AuthGuard('anonymous') implements IAuthGuard {\n  constructor() {\n    super()\n  }\n}\n"],"names":["AuthAnonymousGuard","AuthGuard"],"mappings":"AAAA;;;;CAIC;;;;+BAMYA;;;eAAAA;;;wBAJc;0BACW;;;;;;;;;;AAG/B,IAAA,AAAMA,qBAAN,MAAMA,2BAA2BC,IAAAA,mBAAS,EAAC;IAChD,aAAc;QACZ,KAAK;IACP;AACF"}
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-anonymous.guard.ts"],"sourcesContent":["import { Injectable } from '@nestjs/common'\nimport { AuthGuard, IAuthGuard } from '@nestjs/passport'\n\n@Injectable()\nexport class AuthAnonymousGuard extends AuthGuard('anonymous') implements IAuthGuard {\n  constructor() {\n    super()\n  }\n}\n"],"names":["AuthAnonymousGuard","AuthGuard"],"mappings":";;;;+BAIaA;;;eAAAA;;;wBAJc;0BACW;;;;;;;;;;AAG/B,IAAA,AAAMA,qBAAN,MAAMA,2BAA2BC,IAAAA,mBAAS,EAAC;IAChD,aAAc;QACZ,KAAK;IACP;AACF"}

package/server/authentication/guards/auth-anonymous.guard.spec.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });

package/server/authentication/guards/auth-anonymous.guard.spec.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-anonymous.guard.spec.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { createMock, DeepMocked } from '@golevelup/ts-jest'\nimport { ExecutionContext } from '@nestjs/common'\nimport { ConfigModule } from '@nestjs/config'\nimport { PassportModule } from '@nestjs/passport'\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { PinoLogger } from 'nestjs-pino'\nimport { UsersManager } from '../../applications/users/services/users-manager.service'\nimport { exportConfiguration } from '../../configuration/config.environment'\nimport { AuthAnonymousGuard } from './auth-anonymous.guard'\nimport { AuthAnonymousStrategy } from './auth-anonymous.strategy'\n\ndescribe(AuthAnonymousGuard.name, () => {\n  let authAnonymousGuard: AuthAnonymousGuard\n  let authAnonymousStrategy: AuthAnonymousStrategy\n  let context: DeepMocked<ExecutionContext>\n\n  beforeAll(async () => {\n    const module: TestingModule = await Test.createTestingModule({\n      imports: [\n        await ConfigModule.forRoot({\n          load: [exportConfiguration],\n          isGlobal: true\n        }),\n        PassportModule\n      ],\n      providers: [\n        AuthAnonymousGuard,\n        AuthAnonymousStrategy,\n        { provide: UsersManager, useValue: {} },\n        {\n          provide: PinoLogger,\n          useValue: {\n            assign: () => undefined\n          }\n        }\n      ]\n    }).compile()\n    authAnonymousStrategy = module.get<AuthAnonymousStrategy>(AuthAnonymousStrategy)\n    authAnonymousGuard = module.get<AuthAnonymousGuard>(AuthAnonymousGuard)\n  })\n\n  it('should be defined', () => {\n    expect(authAnonymousGuard).toBeDefined()\n    expect(authAnonymousStrategy).toBeDefined()\n  })\n\n  it('should pass without a valid auth', async () => {\n    context = createMock<ExecutionContext>()\n    const spyAuthenticate = jest.spyOn(authAnonymousStrategy, 'authenticate')\n    context.switchToHttp().getRequest.mockReturnValue({})\n    expect(await authAnonymousGuard.canActivate(context)).toBe(true)\n    expect(spyAuthenticate).toHaveBeenCalledTimes(1)\n    spyAuthenticate.mockClear()\n  })\n})\n"],"names":["describe","AuthAnonymousGuard","name","authAnonymousGuard","authAnonymousStrategy","context","beforeAll","module","Test","createTestingModule","imports","ConfigModule","forRoot","load","exportConfiguration","isGlobal","PassportModule","providers","AuthAnonymousStrategy","provide","UsersManager","useValue","PinoLogger","assign","undefined","compile","get","it","expect","toBeDefined","createMock","spyAuthenticate","jest","spyOn","switchToHttp","getRequest","mockReturnValue","canActivate","toBe","toHaveBeenCalledTimes","mockClear"],"mappings":"AAAA;;;;CAIC;;;;wBAEsC;wBAEV;0BACE;yBACK;4BACT;qCACE;mCACO;oCACD;uCACG;AAEtCA,SAASC,sCAAkB,CAACC,IAAI,EAAE;IAChC,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJC,UAAU;QACR,MAAMC,SAAwB,MAAMC,aAAI,CAACC,mBAAmB,CAAC;YAC3DC,SAAS;gBACP,MAAMC,oBAAY,CAACC,OAAO,CAAC;oBACzBC,MAAM;wBAACC,sCAAmB;qBAAC;oBAC3BC,UAAU;gBACZ;gBACAC,wBAAc;aACf;YACDC,WAAW;gBACThB,sCAAkB;gBAClBiB,4CAAqB;gBACrB;oBAAEC,SAASC,iCAAY;oBAAEC,UAAU,CAAC;gBAAE;gBACtC;oBACEF,SAASG,sBAAU;oBACnBD,UAAU;wBACRE,QAAQ,IAAMC;oBAChB;gBACF;aACD;QACH,GAAGC,OAAO;QACVrB,wBAAwBG,OAAOmB,GAAG,CAAwBR,4CAAqB;QAC/Ef,qBAAqBI,OAAOmB,GAAG,CAAqBzB,sCAAkB;IACxE;IAEA0B,GAAG,qBAAqB;QACtBC,OAAOzB,oBAAoB0B,WAAW;QACtCD,OAAOxB,uBAAuByB,WAAW;IAC3C;IAEAF,GAAG,oCAAoC;QACrCtB,UAAUyB,IAAAA,kBAAU;QACpB,MAAMC,kBAAkBC,KAAKC,KAAK,CAAC7B,uBAAuB;QAC1DC,QAAQ6B,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC,CAAC;QACnDR,OAAO,MAAMzB,mBAAmBkC,WAAW,CAAChC,UAAUiC,IAAI,CAAC;QAC3DV,OAAOG,iBAAiBQ,qBAAqB,CAAC;QAC9CR,gBAAgBS,SAAS;IAC3B;AACF"}
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-anonymous.guard.spec.ts"],"sourcesContent":["import { createMock, DeepMocked } from '@golevelup/ts-jest'\nimport { ExecutionContext } from '@nestjs/common'\nimport { ConfigModule } from '@nestjs/config'\nimport { PassportModule } from '@nestjs/passport'\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { PinoLogger } from 'nestjs-pino'\nimport { UsersManager } from '../../applications/users/services/users-manager.service'\nimport { exportConfiguration } from '../../configuration/config.environment'\nimport { AuthAnonymousGuard } from './auth-anonymous.guard'\nimport { AuthAnonymousStrategy } from './auth-anonymous.strategy'\n\ndescribe(AuthAnonymousGuard.name, () => {\n  let authAnonymousGuard: AuthAnonymousGuard\n  let authAnonymousStrategy: AuthAnonymousStrategy\n  let context: DeepMocked<ExecutionContext>\n\n  beforeAll(async () => {\n    const module: TestingModule = await Test.createTestingModule({\n      imports: [\n        await ConfigModule.forRoot({\n          load: [exportConfiguration],\n          isGlobal: true\n        }),\n        PassportModule\n      ],\n      providers: [\n        AuthAnonymousGuard,\n        AuthAnonymousStrategy,\n        { provide: UsersManager, useValue: {} },\n        {\n          provide: PinoLogger,\n          useValue: {\n            assign: () => undefined\n          }\n        }\n      ]\n    }).compile()\n    authAnonymousStrategy = module.get<AuthAnonymousStrategy>(AuthAnonymousStrategy)\n    authAnonymousGuard = module.get<AuthAnonymousGuard>(AuthAnonymousGuard)\n  })\n\n  it('should be defined', () => {\n    expect(authAnonymousGuard).toBeDefined()\n    expect(authAnonymousStrategy).toBeDefined()\n  })\n\n  it('should pass without a valid auth', async () => {\n    context = createMock<ExecutionContext>()\n    const spyAuthenticate = jest.spyOn(authAnonymousStrategy, 'authenticate')\n    context.switchToHttp().getRequest.mockReturnValue({})\n    expect(await authAnonymousGuard.canActivate(context)).toBe(true)\n    expect(spyAuthenticate).toHaveBeenCalledTimes(1)\n    spyAuthenticate.mockClear()\n  })\n})\n"],"names":["describe","AuthAnonymousGuard","name","authAnonymousGuard","authAnonymousStrategy","context","beforeAll","module","Test","createTestingModule","imports","ConfigModule","forRoot","load","exportConfiguration","isGlobal","PassportModule","providers","AuthAnonymousStrategy","provide","UsersManager","useValue","PinoLogger","assign","undefined","compile","get","it","expect","toBeDefined","createMock","spyAuthenticate","jest","spyOn","switchToHttp","getRequest","mockReturnValue","canActivate","toBe","toHaveBeenCalledTimes","mockClear"],"mappings":";;;;wBAAuC;wBAEV;0BACE;yBACK;4BACT;qCACE;mCACO;oCACD;uCACG;AAEtCA,SAASC,sCAAkB,CAACC,IAAI,EAAE;IAChC,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJC,UAAU;QACR,MAAMC,SAAwB,MAAMC,aAAI,CAACC,mBAAmB,CAAC;YAC3DC,SAAS;gBACP,MAAMC,oBAAY,CAACC,OAAO,CAAC;oBACzBC,MAAM;wBAACC,sCAAmB;qBAAC;oBAC3BC,UAAU;gBACZ;gBACAC,wBAAc;aACf;YACDC,WAAW;gBACThB,sCAAkB;gBAClBiB,4CAAqB;gBACrB;oBAAEC,SAASC,iCAAY;oBAAEC,UAAU,CAAC;gBAAE;gBACtC;oBACEF,SAASG,sBAAU;oBACnBD,UAAU;wBACRE,QAAQ,IAAMC;oBAChB;gBACF;aACD;QACH,GAAGC,OAAO;QACVrB,wBAAwBG,OAAOmB,GAAG,CAAwBR,4CAAqB;QAC/Ef,qBAAqBI,OAAOmB,GAAG,CAAqBzB,sCAAkB;IACxE;IAEA0B,GAAG,qBAAqB;QACtBC,OAAOzB,oBAAoB0B,WAAW;QACtCD,OAAOxB,uBAAuByB,WAAW;IAC3C;IAEAF,GAAG,oCAAoC;QACrCtB,UAAUyB,IAAAA,kBAAU;QACpB,MAAMC,kBAAkBC,KAAKC,KAAK,CAAC7B,uBAAuB;QAC1DC,QAAQ6B,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC,CAAC;QACnDR,OAAO,MAAMzB,mBAAmBkC,WAAW,CAAChC,UAAUiC,IAAI,CAAC;QAC3DV,OAAOG,iBAAiBQ,qBAAqB,CAAC;QAC9CR,gBAAgBS,SAAS;IAC3B;AACF"}