@sync-in/server 1.10.1 → 2.0.0

package/server/authentication/guards/auth-anonymous.strategy.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });

package/server/authentication/guards/auth-anonymous.strategy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-anonymous.strategy.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Injectable } from '@nestjs/common'\nimport { PassportStrategy } from '@nestjs/passport'\nimport { Strategy } from 'passport-strategy'\n\n@Injectable()\nexport class AuthAnonymousStrategy extends PassportStrategy(Strategy, 'anonymous') {\n  validate: undefined\n\n  constructor() {\n    super()\n  }\n\n  authenticate() {\n    return this.success({ id: 0, login: 'anonymous' })\n  }\n}\n"],"names":["AuthAnonymousStrategy","PassportStrategy","Strategy","authenticate","success","id","login"],"mappings":"AAAA;;;;CAIC;;;;+BAOYA;;;eAAAA;;;wBALc;0BACM;kCACR;;;;;;;;;;AAGlB,IAAA,AAAMA,wBAAN,MAAMA,8BAA8BC,IAAAA,0BAAgB,EAACC,0BAAQ,EAAE;IAOpEC,eAAe;QACb,OAAO,IAAI,CAACC,OAAO,CAAC;YAAEC,IAAI;YAAGC,OAAO;QAAY;IAClD;IANA,aAAc;QACZ,KAAK;IACP;AAKF"}
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-anonymous.strategy.ts"],"sourcesContent":["import { Injectable } from '@nestjs/common'\nimport { PassportStrategy } from '@nestjs/passport'\nimport { Strategy } from 'passport-strategy'\n\n@Injectable()\nexport class AuthAnonymousStrategy extends PassportStrategy(Strategy, 'anonymous') {\n  validate: undefined\n\n  constructor() {\n    super()\n  }\n\n  authenticate() {\n    return this.success({ id: 0, login: 'anonymous' })\n  }\n}\n"],"names":["AuthAnonymousStrategy","PassportStrategy","Strategy","authenticate","success","id","login"],"mappings":";;;;+BAKaA;;;eAAAA;;;wBALc;0BACM;kCACR;;;;;;;;;;AAGlB,IAAA,AAAMA,wBAAN,MAAMA,8BAA8BC,IAAAA,0BAAgB,EAACC,0BAAQ,EAAE;IAOpEC,eAAe;QACb,OAAO,IAAI,CAACC,OAAO,CAAC;YAAEC,IAAI;YAAGC,OAAO;QAAY;IAClD;IANA,aAAc;QACZ,KAAK;IACP;AAKF"}

package/server/authentication/guards/auth-basic.guard.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });

package/server/authentication/guards/auth-basic.guard.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-basic.guard.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { ExecutionContext, Injectable, Logger } from '@nestjs/common'\nimport { AuthGuard, IAuthGuard } from '@nestjs/passport'\nimport { FastifyRequest } from 'fastify'\nimport { HTTP_METHOD } from '../../applications/applications.constants'\nimport { WEBDAV_BASE_PATH } from '../../applications/webdav/constants/routes'\n\n@Injectable()\nexport class AuthBasicGuard extends AuthGuard('basic') implements IAuthGuard {\n  private readonly logger = new Logger(AuthBasicGuard.name)\n\n  canActivate(ctx: ExecutionContext) {\n    // allow options method on server (webdav)\n    const req: FastifyRequest = this.getRequest(ctx)\n    if (req.method === HTTP_METHOD.OPTIONS) {\n      // only allow options method to skip auth check on the server and webdav paths (including child uris)\n      const segments = req.originalUrl.split('/').filter(Boolean)\n      if (!segments.length || segments[0] === WEBDAV_BASE_PATH) {\n        return true\n      }\n    }\n    return super.canActivate(ctx)\n  }\n\n  handleRequest<TUser = any>(err: any, user: any, info: Error, ctx: ExecutionContext, status?: any): TUser {\n    const req = this.getRequest(ctx)\n    req.raw.user = user?.login || 'unauthorized'\n    if (info) {\n      this.logger.warn(`<${req.raw.user}> <${req.ip}> ${info}`)\n    }\n    return super.handleRequest(err, user, info, ctx, status)\n  }\n}\n"],"names":["AuthBasicGuard","AuthGuard","canActivate","ctx","req","getRequest","method","HTTP_METHOD","OPTIONS","segments","originalUrl","split","filter","Boolean","length","WEBDAV_BASE_PATH","handleRequest","err","user","info","status","raw","login","logger","warn","ip","Logger","name"],"mappings":"AAAA;;;;CAIC;;;;+BASYA;;;eAAAA;;;wBAPwC;0BACf;uCAEV;wBACK;;;;;;;AAG1B,IAAA,AAAMA,iBAAN,MAAMA,uBAAuBC,IAAAA,mBAAS,EAAC;IAG5CC,YAAYC,GAAqB,EAAE;QACjC,0CAA0C;QAC1C,MAAMC,MAAsB,IAAI,CAACC,UAAU,CAACF;QAC5C,IAAIC,IAAIE,MAAM,KAAKC,kCAAW,CAACC,OAAO,EAAE;YACtC,qGAAqG;YACrG,MAAMC,WAAWL,IAAIM,WAAW,CAACC,KAAK,CAAC,KAAKC,MAAM,CAACC;YACnD,IAAI,CAACJ,SAASK,MAAM,IAAIL,QAAQ,CAAC,EAAE,KAAKM,wBAAgB,EAAE;gBACxD,OAAO;YACT;QACF;QACA,OAAO,KAAK,CAACb,YAAYC;IAC3B;IAEAa,cAA2BC,GAAQ,EAAEC,IAAS,EAAEC,IAAW,EAAEhB,GAAqB,EAAEiB,MAAY,EAAS;QACvG,MAAMhB,MAAM,IAAI,CAACC,UAAU,CAACF;QAC5BC,IAAIiB,GAAG,CAACH,IAAI,GAAGA,MAAMI,SAAS;QAC9B,IAAIH,MAAM;YACR,IAAI,CAACI,MAAM,CAACC,IAAI,CAAC,CAAC,CAAC,EAAEpB,IAAIiB,GAAG,CAACH,IAAI,CAAC,GAAG,EAAEd,IAAIqB,EAAE,CAAC,EAAE,EAAEN,MAAM;QAC1D;QACA,OAAO,KAAK,CAACH,cAAcC,KAAKC,MAAMC,MAAMhB,KAAKiB;IACnD;;QAvBK,qBACYG,SAAS,IAAIG,cAAM,CAAC1B,eAAe2B,IAAI;;AAuB1D"}
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-basic.guard.ts"],"sourcesContent":["import { ExecutionContext, Injectable, Logger } from '@nestjs/common'\nimport { AuthGuard, IAuthGuard } from '@nestjs/passport'\nimport { FastifyRequest } from 'fastify'\nimport { HTTP_METHOD } from '../../applications/applications.constants'\nimport { WEBDAV_BASE_PATH } from '../../applications/webdav/constants/routes'\n\n@Injectable()\nexport class AuthBasicGuard extends AuthGuard('basic') implements IAuthGuard {\n  private readonly logger = new Logger(AuthBasicGuard.name)\n\n  canActivate(ctx: ExecutionContext) {\n    // allow options method on server (webdav)\n    const req: FastifyRequest = this.getRequest(ctx)\n    if (req.method === HTTP_METHOD.OPTIONS) {\n      // only allow options method to skip auth check on the server and webdav paths (including child uris)\n      const segments = req.originalUrl.split('/').filter(Boolean)\n      if (!segments.length || segments[0] === WEBDAV_BASE_PATH) {\n        return true\n      }\n    }\n    return super.canActivate(ctx)\n  }\n\n  handleRequest<TUser = any>(err: any, user: any, info: Error, ctx: ExecutionContext, status?: any): TUser {\n    const req = this.getRequest(ctx)\n    req.raw.user = user?.login || 'unauthorized'\n    if (info) {\n      this.logger.warn(`<${req.raw.user}> <${req.ip}> ${info}`)\n    }\n    return super.handleRequest(err, user, info, ctx, status)\n  }\n}\n"],"names":["AuthBasicGuard","AuthGuard","canActivate","ctx","req","getRequest","method","HTTP_METHOD","OPTIONS","segments","originalUrl","split","filter","Boolean","length","WEBDAV_BASE_PATH","handleRequest","err","user","info","status","raw","login","logger","warn","ip","Logger","name"],"mappings":";;;;+BAOaA;;;eAAAA;;;wBAPwC;0BACf;uCAEV;wBACK;;;;;;;AAG1B,IAAA,AAAMA,iBAAN,MAAMA,uBAAuBC,IAAAA,mBAAS,EAAC;IAG5CC,YAAYC,GAAqB,EAAE;QACjC,0CAA0C;QAC1C,MAAMC,MAAsB,IAAI,CAACC,UAAU,CAACF;QAC5C,IAAIC,IAAIE,MAAM,KAAKC,kCAAW,CAACC,OAAO,EAAE;YACtC,qGAAqG;YACrG,MAAMC,WAAWL,IAAIM,WAAW,CAACC,KAAK,CAAC,KAAKC,MAAM,CAACC;YACnD,IAAI,CAACJ,SAASK,MAAM,IAAIL,QAAQ,CAAC,EAAE,KAAKM,wBAAgB,EAAE;gBACxD,OAAO;YACT;QACF;QACA,OAAO,KAAK,CAACb,YAAYC;IAC3B;IAEAa,cAA2BC,GAAQ,EAAEC,IAAS,EAAEC,IAAW,EAAEhB,GAAqB,EAAEiB,MAAY,EAAS;QACvG,MAAMhB,MAAM,IAAI,CAACC,UAAU,CAACF;QAC5BC,IAAIiB,GAAG,CAACH,IAAI,GAAGA,MAAMI,SAAS;QAC9B,IAAIH,MAAM;YACR,IAAI,CAACI,MAAM,CAACC,IAAI,CAAC,CAAC,CAAC,EAAEpB,IAAIiB,GAAG,CAACH,IAAI,CAAC,GAAG,EAAEd,IAAIqB,EAAE,CAAC,EAAE,EAAEN,MAAM;QAC1D;QACA,OAAO,KAAK,CAACH,cAAcC,KAAKC,MAAMC,MAAMhB,KAAKiB;IACnD;;QAvBK,qBACYG,SAAS,IAAIG,cAAM,CAAC1B,eAAe2B,IAAI;;AAuB1D"}

package/server/authentication/guards/auth-basic.guard.spec.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
@@ -13,13 +9,13 @@ const _usermodel = require("../../applications/users/models/user.model");
 const _test = require("../../applications/users/utils/test");
 const _routes = require("../../applications/webdav/constants/routes");
 const _cacheservice = require("../../infrastructure/cache/services/cache.service");
-const _authmethod = require("../models/auth-method");
+const _authprovidersmodels = require("../providers/auth-providers.models");
 const _authbasicguard = require("./auth-basic.guard");
 const _authbasicstrategy = require("./auth-basic.strategy");
 describe(_authbasicguard.AuthBasicGuard.name, ()=>{
     let authBasicGuard;
     let authBasicStrategy;
-    let authMethod;
+    let authProvider;
     let cache;
     let userTest;
     let encodedAuth;
@@ -30,7 +26,7 @@ describe(_authbasicguard.AuthBasicGuard.name, ()=>{
                 _authbasicguard.AuthBasicGuard,
                 _authbasicstrategy.AuthBasicStrategy,
                 {
-                    provide: _authmethod.AuthMethod,
+                    provide: _authprovidersmodels.AuthProvider,
                     useValue: {
                         validateUser: async ()=>null
                     }
@@ -54,7 +50,7 @@ describe(_authbasicguard.AuthBasicGuard.name, ()=>{
         }).compile();
         authBasicGuard = module.get(_authbasicguard.AuthBasicGuard);
         authBasicStrategy = module.get(_authbasicstrategy.AuthBasicStrategy);
-        authMethod = module.get(_authmethod.AuthMethod);
+        authProvider = module.get(_authprovidersmodels.AuthProvider);
         cache = module.get(_cacheservice.Cache);
         userTest = new _usermodel.UserModel((0, _test.generateUserTest)(), false);
         encodedAuth = Buffer.from(`${userTest.login}:${userTest.password}`).toString('base64');
@@ -63,14 +59,14 @@ describe(_authbasicguard.AuthBasicGuard.name, ()=>{
     it('should be defined', ()=>{
         expect(authBasicGuard).toBeDefined();
         expect(authBasicStrategy).toBeDefined();
-        expect(authMethod).toBeDefined();
+        expect(authProvider).toBeDefined();
         expect(cache).toBeDefined();
         expect(encodedAuth).toBeDefined();
         expect(userTest).toBeDefined();
         expect(userTest.password).toBeDefined();
     });
     it('should validate the user authentication', async ()=>{
-        authMethod.validateUser = jest.fn().mockReturnValueOnce(userTest);
+        authProvider.validateUser = jest.fn().mockReturnValueOnce(userTest);
         context.switchToHttp().getRequest.mockReturnValue({
             raw: {
                 user: ''
@@ -89,7 +85,7 @@ describe(_authbasicguard.AuthBasicGuard.name, ()=>{
             password: passwordWithColon
         }, false);
         const encodedAuthWithColon = Buffer.from(`${userWithColonPassword.login}:${passwordWithColon}`).toString('base64');
-        authMethod.validateUser = jest.fn().mockImplementation((login, password)=>{
+        authProvider.validateUser = jest.fn().mockImplementation((login, password)=>{
             expect(login).toBe(userWithColonPassword.login);
             expect(password).toBe(passwordWithColon);
             return userWithColonPassword;
@@ -131,7 +127,7 @@ describe(_authbasicguard.AuthBasicGuard.name, ()=>{
     });
     it('should not validate the user authentication when cache returns undefined and database return null', async ()=>{
         cache.get = jest.fn().mockReturnValueOnce(undefined);
-        authMethod.validateUser = jest.fn().mockReturnValueOnce(null);
+        authProvider.validateUser = jest.fn().mockReturnValueOnce(null);
         jest.spyOn(cache, 'set').mockRejectedValueOnce(new Error('cache failed'));
         context.switchToHttp().getRequest.mockReturnValue({
             raw: {
@@ -145,7 +141,10 @@ describe(_authbasicguard.AuthBasicGuard.name, ()=>{
         .mockImplementation(()=>undefined);
         await expect(authBasicGuard.canActivate(context)).rejects.toThrow();
         expect(loggerSpy).toHaveBeenCalled();
-        expect(loggerSpy.mock.calls[0][0]).toEqual(expect.stringContaining('cache failed'));
+        expect(loggerSpy.mock.calls[0][0]).toEqual(expect.objectContaining({
+            tag: 'validate',
+            msg: expect.stringContaining('cache failed')
+        }));
     });
     it('should not validate the user authentication', async ()=>{
         context.switchToHttp().getRequest.mockReturnValue({

package/server/authentication/guards/auth-basic.guard.spec.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-basic.guard.spec.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { createMock, DeepMocked } from '@golevelup/ts-jest'\nimport { ExecutionContext } from '@nestjs/common'\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { PinoLogger } from 'nestjs-pino'\nimport { UserModel } from '../../applications/users/models/user.model'\nimport { generateUserTest } from '../../applications/users/utils/test'\nimport { WEBDAV_BASE_PATH } from '../../applications/webdav/constants/routes'\nimport { Cache } from '../../infrastructure/cache/services/cache.service'\nimport { AuthMethod } from '../models/auth-method'\nimport { AuthBasicGuard } from './auth-basic.guard'\nimport { AuthBasicStrategy } from './auth-basic.strategy'\n\ndescribe(AuthBasicGuard.name, () => {\n  let authBasicGuard: AuthBasicGuard\n  let authBasicStrategy: AuthBasicStrategy\n  let authMethod: AuthMethod\n  let cache: Cache\n  let userTest: UserModel\n  let encodedAuth: string\n  let context: DeepMocked<ExecutionContext>\n\n  beforeAll(async () => {\n    const module: TestingModule = await Test.createTestingModule({\n      providers: [\n        AuthBasicGuard,\n        AuthBasicStrategy,\n        {\n          provide: AuthMethod,\n          useValue: {\n            validateUser: async () => null\n          }\n        },\n        {\n          provide: PinoLogger,\n          useValue: {\n            assign: () => undefined,\n            error: jest.fn()\n          }\n        },\n        {\n          provide: Cache,\n          useValue: {\n            get: (_key: string) => undefined,\n            set: async (_key: string, _value: string, _ttl: number) => undefined,\n            genSlugKey: () => 'test'\n          }\n        }\n      ]\n    }).compile()\n\n    authBasicGuard = module.get<AuthBasicGuard>(AuthBasicGuard)\n    authBasicStrategy = module.get<AuthBasicStrategy>(AuthBasicStrategy)\n    authMethod = module.get<AuthMethod>(AuthMethod)\n    cache = module.get<Cache>(Cache)\n    userTest = new UserModel(generateUserTest(), false)\n    encodedAuth = Buffer.from(`${userTest.login}:${userTest.password}`).toString('base64')\n    context = createMock<ExecutionContext>()\n  })\n\n  it('should be defined', () => {\n    expect(authBasicGuard).toBeDefined()\n    expect(authBasicStrategy).toBeDefined()\n    expect(authMethod).toBeDefined()\n    expect(cache).toBeDefined()\n    expect(encodedAuth).toBeDefined()\n    expect(userTest).toBeDefined()\n    expect(userTest.password).toBeDefined()\n  })\n\n  it('should validate the user authentication', async () => {\n    authMethod.validateUser = jest.fn().mockReturnValueOnce(userTest)\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { authorization: `Basic ${encodedAuth}` }\n    })\n    expect(await authBasicGuard.canActivate(context)).toBe(true)\n    expect(userTest.password).toBeUndefined()\n  })\n\n  it('should validate the user authentication with password containing colon', async () => {\n    const passwordWithColon = 'pass:word:123'\n    const userWithColonPassword = new UserModel({ ...generateUserTest(), password: passwordWithColon }, false)\n    const encodedAuthWithColon = Buffer.from(`${userWithColonPassword.login}:${passwordWithColon}`).toString('base64')\n\n    authMethod.validateUser = jest.fn().mockImplementation((login: string, password: string) => {\n      expect(login).toBe(userWithColonPassword.login)\n      expect(password).toBe(passwordWithColon)\n      return userWithColonPassword\n    })\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { authorization: `Basic ${encodedAuthWithColon}` }\n    })\n    expect(await authBasicGuard.canActivate(context)).toBe(true)\n    expect(userWithColonPassword.password).toBeUndefined()\n  })\n\n  it('should validate the user authentication with cache', async () => {\n    cache.get = jest.fn().mockReturnValueOnce(userTest)\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { authorization: `Basic ${encodedAuth}` }\n    })\n    expect(await authBasicGuard.canActivate(context)).toBe(true)\n  })\n\n  it('should not validate the user authentication when cache returns null (explicitly unauthorized)', async () => {\n    cache.get = jest.fn().mockReturnValueOnce(null)\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { authorization: `Basic ${encodedAuth}` }\n    })\n    await expect(authBasicGuard.canActivate(context)).rejects.toThrow()\n  })\n\n  it('should not validate the user authentication when cache returns undefined and database return null', async () => {\n    cache.get = jest.fn().mockReturnValueOnce(undefined)\n    authMethod.validateUser = jest.fn().mockReturnValueOnce(null)\n    jest.spyOn(cache, 'set').mockRejectedValueOnce(new Error('cache failed'))\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { authorization: `Basic ${encodedAuth}` }\n    })\n    const loggerSpy = jest\n      .spyOn(authBasicStrategy['logger'], 'error') // <-- spy the SAME instance used in the class\n      .mockImplementation(() => undefined)\n    await expect(authBasicGuard.canActivate(context)).rejects.toThrow()\n    expect(loggerSpy).toHaveBeenCalled()\n    expect(loggerSpy.mock.calls[0][0]).toEqual(expect.stringContaining('cache failed'))\n  })\n\n  it('should not validate the user authentication', async () => {\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { authorization: `Basic ${encodedAuth}` }\n    })\n    await expect(authBasicGuard.canActivate(context)).rejects.toThrow()\n  })\n\n  it('should throw error due to malformed authorization header', async () => {\n    // headers with capitals not working\n    context.switchToHttp().getRequest.mockReturnValueOnce({\n      raw: { user: '' },\n      headers: { AUTHORIZATION: 'Basic foo' }\n    })\n    await expect(authBasicGuard.canActivate(context)).rejects.toThrow()\n    context.switchToHttp().getRequest.mockReturnValueOnce({\n      raw: { user: '' }\n    })\n    await expect(authBasicGuard.canActivate(context)).rejects.toThrow()\n  })\n\n  it(`should valid OPTIONS method without authentication header on \"/\" and \"/${WEBDAV_BASE_PATH}/*\" paths `, async () => {\n    for (const url of ['', `/${WEBDAV_BASE_PATH}`, `/${WEBDAV_BASE_PATH}/foo/bar`]) {\n      context.switchToHttp().getRequest.mockReturnValueOnce({\n        method: 'OPTIONS',\n        originalUrl: url,\n        raw: { user: '' }\n      })\n      expect(await authBasicGuard.canActivate(context)).toBe(true)\n    }\n  })\n\n  it('should not valid OPTIONS method with other paths', async () => {\n    context.switchToHttp().getRequest.mockReturnValueOnce({\n      method: 'OPTIONS',\n      originalUrl: '/foo',\n      raw: { user: '' }\n    })\n    await expect(authBasicGuard.canActivate(context)).rejects.toThrow()\n  })\n})\n"],"names":["describe","AuthBasicGuard","name","authBasicGuard","authBasicStrategy","authMethod","cache","userTest","encodedAuth","context","beforeAll","module","Test","createTestingModule","providers","AuthBasicStrategy","provide","AuthMethod","useValue","validateUser","PinoLogger","assign","undefined","error","jest","fn","Cache","get","_key","set","_value","_ttl","genSlugKey","compile","UserModel","generateUserTest","Buffer","from","login","password","toString","createMock","it","expect","toBeDefined","mockReturnValueOnce","switchToHttp","getRequest","mockReturnValue","raw","user","headers","authorization","canActivate","toBe","toBeUndefined","passwordWithColon","userWithColonPassword","encodedAuthWithColon","mockImplementation","rejects","toThrow","spyOn","mockRejectedValueOnce","Error","loggerSpy","toHaveBeenCalled","mock","calls","toEqual","stringContaining","AUTHORIZATION","WEBDAV_BASE_PATH","url","method","originalUrl"],"mappings":"AAAA;;;;CAIC;;;;wBAEsC;yBAEH;4BACT;2BACD;sBACO;wBACA;8BACX;4BACK;gCACI;mCACG;AAElCA,SAASC,8BAAc,CAACC,IAAI,EAAE;IAC5B,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJC,UAAU;QACR,MAAMC,SAAwB,MAAMC,aAAI,CAACC,mBAAmB,CAAC;YAC3DC,WAAW;gBACTb,8BAAc;gBACdc,oCAAiB;gBACjB;oBACEC,SAASC,sBAAU;oBACnBC,UAAU;wBACRC,cAAc,UAAY;oBAC5B;gBACF;gBACA;oBACEH,SAASI,sBAAU;oBACnBF,UAAU;wBACRG,QAAQ,IAAMC;wBACdC,OAAOC,KAAKC,EAAE;oBAChB;gBACF;gBACA;oBACET,SAASU,mBAAK;oBACdR,UAAU;wBACRS,KAAK,CAACC,OAAiBN;wBACvBO,KAAK,OAAOD,MAAcE,QAAgBC,OAAiBT;wBAC3DU,YAAY,IAAM;oBACpB;gBACF;aACD;QACH,GAAGC,OAAO;QAEV9B,iBAAiBQ,OAAOgB,GAAG,CAAiB1B,8BAAc;QAC1DG,oBAAoBO,OAAOgB,GAAG,CAAoBZ,oCAAiB;QACnEV,aAAaM,OAAOgB,GAAG,CAAaV,sBAAU;QAC9CX,QAAQK,OAAOgB,GAAG,CAAQD,mBAAK;QAC/BnB,WAAW,IAAI2B,oBAAS,CAACC,IAAAA,sBAAgB,KAAI;QAC7C3B,cAAc4B,OAAOC,IAAI,CAAC,GAAG9B,SAAS+B,KAAK,CAAC,CAAC,EAAE/B,SAASgC,QAAQ,EAAE,EAAEC,QAAQ,CAAC;QAC7E/B,UAAUgC,IAAAA,kBAAU;IACtB;IAEAC,GAAG,qBAAqB;QACtBC,OAAOxC,gBAAgByC,WAAW;QAClCD,OAAOvC,mBAAmBwC,WAAW;QACrCD,OAAOtC,YAAYuC,WAAW;QAC9BD,OAAOrC,OAAOsC,WAAW;QACzBD,OAAOnC,aAAaoC,WAAW;QAC/BD,OAAOpC,UAAUqC,WAAW;QAC5BD,OAAOpC,SAASgC,QAAQ,EAAEK,WAAW;IACvC;IAEAF,GAAG,2CAA2C;QAC5CrC,WAAWc,YAAY,GAAGK,KAAKC,EAAE,GAAGoB,mBAAmB,CAACtC;QACxDE,QAAQqC,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEC,eAAe,CAAC,MAAM,EAAE5C,aAAa;YAAC;QACnD;QACAmC,OAAO,MAAMxC,eAAekD,WAAW,CAAC5C,UAAU6C,IAAI,CAAC;QACvDX,OAAOpC,SAASgC,QAAQ,EAAEgB,aAAa;IACzC;IAEAb,GAAG,0EAA0E;QAC3E,MAAMc,oBAAoB;QAC1B,MAAMC,wBAAwB,IAAIvB,oBAAS,CAAC;YAAE,GAAGC,IAAAA,sBAAgB,GAAE;YAAEI,UAAUiB;QAAkB,GAAG;QACpG,MAAME,uBAAuBtB,OAAOC,IAAI,CAAC,GAAGoB,sBAAsBnB,KAAK,CAAC,CAAC,EAAEkB,mBAAmB,EAAEhB,QAAQ,CAAC;QAEzGnC,WAAWc,YAAY,GAAGK,KAAKC,EAAE,GAAGkC,kBAAkB,CAAC,CAACrB,OAAeC;YACrEI,OAAOL,OAAOgB,IAAI,CAACG,sBAAsBnB,KAAK;YAC9CK,OAAOJ,UAAUe,IAAI,CAACE;YACtB,OAAOC;QACT;QACAhD,QAAQqC,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEC,eAAe,CAAC,MAAM,EAAEM,sBAAsB;YAAC;QAC5D;QACAf,OAAO,MAAMxC,eAAekD,WAAW,CAAC5C,UAAU6C,IAAI,CAAC;QACvDX,OAAOc,sBAAsBlB,QAAQ,EAAEgB,aAAa;IACtD;IAEAb,GAAG,sDAAsD;QACvDpC,MAAMqB,GAAG,GAAGH,KAAKC,EAAE,GAAGoB,mBAAmB,CAACtC;QAC1CE,QAAQqC,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEC,eAAe,CAAC,MAAM,EAAE5C,aAAa;YAAC;QACnD;QACAmC,OAAO,MAAMxC,eAAekD,WAAW,CAAC5C,UAAU6C,IAAI,CAAC;IACzD;IAEAZ,GAAG,iGAAiG;QAClGpC,MAAMqB,GAAG,GAAGH,KAAKC,EAAE,GAAGoB,mBAAmB,CAAC;QAC1CpC,QAAQqC,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEC,eAAe,CAAC,MAAM,EAAE5C,aAAa;YAAC;QACnD;QACA,MAAMmC,OAAOxC,eAAekD,WAAW,CAAC5C,UAAUmD,OAAO,CAACC,OAAO;IACnE;IAEAnB,GAAG,qGAAqG;QACtGpC,MAAMqB,GAAG,GAAGH,KAAKC,EAAE,GAAGoB,mBAAmB,CAACvB;QAC1CjB,WAAWc,YAAY,GAAGK,KAAKC,EAAE,GAAGoB,mBAAmB,CAAC;QACxDrB,KAAKsC,KAAK,CAACxD,OAAO,OAAOyD,qBAAqB,CAAC,IAAIC,MAAM;QACzDvD,QAAQqC,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEC,eAAe,CAAC,MAAM,EAAE5C,aAAa;YAAC;QACnD;QACA,MAAMyD,YAAYzC,KACfsC,KAAK,CAAC1D,iBAAiB,CAAC,SAAS,EAAE,SAAS,8CAA8C;SAC1FuD,kBAAkB,CAAC,IAAMrC;QAC5B,MAAMqB,OAAOxC,eAAekD,WAAW,CAAC5C,UAAUmD,OAAO,CAACC,OAAO;QACjElB,OAAOsB,WAAWC,gBAAgB;QAClCvB,OAAOsB,UAAUE,IAAI,CAACC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAEC,OAAO,CAAC1B,OAAO2B,gBAAgB,CAAC;IACrE;IAEA5B,GAAG,+CAA+C;QAChDjC,QAAQqC,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEC,eAAe,CAAC,MAAM,EAAE5C,aAAa;YAAC;QACnD;QACA,MAAMmC,OAAOxC,eAAekD,WAAW,CAAC5C,UAAUmD,OAAO,CAACC,OAAO;IACnE;IAEAnB,GAAG,4DAA4D;QAC7D,oCAAoC;QACpCjC,QAAQqC,YAAY,GAAGC,UAAU,CAACF,mBAAmB,CAAC;YACpDI,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEoB,eAAe;YAAY;QACxC;QACA,MAAM5B,OAAOxC,eAAekD,WAAW,CAAC5C,UAAUmD,OAAO,CAACC,OAAO;QACjEpD,QAAQqC,YAAY,GAAGC,UAAU,CAACF,mBAAmB,CAAC;YACpDI,KAAK;gBAAEC,MAAM;YAAG;QAClB;QACA,MAAMP,OAAOxC,eAAekD,WAAW,CAAC5C,UAAUmD,OAAO,CAACC,OAAO;IACnE;IAEAnB,GAAG,CAAC,uEAAuE,EAAE8B,wBAAgB,CAAC,UAAU,CAAC,EAAE;QACzG,KAAK,MAAMC,OAAO;YAAC;YAAI,CAAC,CAAC,EAAED,wBAAgB,EAAE;YAAE,CAAC,CAAC,EAAEA,wBAAgB,CAAC,QAAQ,CAAC;SAAC,CAAE;YAC9E/D,QAAQqC,YAAY,GAAGC,UAAU,CAACF,mBAAmB,CAAC;gBACpD6B,QAAQ;gBACRC,aAAaF;gBACbxB,KAAK;oBAAEC,MAAM;gBAAG;YAClB;YACAP,OAAO,MAAMxC,eAAekD,WAAW,CAAC5C,UAAU6C,IAAI,CAAC;QACzD;IACF;IAEAZ,GAAG,oDAAoD;QACrDjC,QAAQqC,YAAY,GAAGC,UAAU,CAACF,mBAAmB,CAAC;YACpD6B,QAAQ;YACRC,aAAa;YACb1B,KAAK;gBAAEC,MAAM;YAAG;QAClB;QACA,MAAMP,OAAOxC,eAAekD,WAAW,CAAC5C,UAAUmD,OAAO,CAACC,OAAO;IACnE;AACF"}
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-basic.guard.spec.ts"],"sourcesContent":["import { createMock, DeepMocked } from '@golevelup/ts-jest'\nimport { ExecutionContext } from '@nestjs/common'\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { PinoLogger } from 'nestjs-pino'\nimport { UserModel } from '../../applications/users/models/user.model'\nimport { generateUserTest } from '../../applications/users/utils/test'\nimport { WEBDAV_BASE_PATH } from '../../applications/webdav/constants/routes'\nimport { Cache } from '../../infrastructure/cache/services/cache.service'\nimport { AuthProvider } from '../providers/auth-providers.models'\nimport { AuthBasicGuard } from './auth-basic.guard'\nimport { AuthBasicStrategy } from './auth-basic.strategy'\n\ndescribe(AuthBasicGuard.name, () => {\n  let authBasicGuard: AuthBasicGuard\n  let authBasicStrategy: AuthBasicStrategy\n  let authProvider: AuthProvider\n  let cache: Cache\n  let userTest: UserModel\n  let encodedAuth: string\n  let context: DeepMocked<ExecutionContext>\n\n  beforeAll(async () => {\n    const module: TestingModule = await Test.createTestingModule({\n      providers: [\n        AuthBasicGuard,\n        AuthBasicStrategy,\n        {\n          provide: AuthProvider,\n          useValue: {\n            validateUser: async () => null\n          }\n        },\n        {\n          provide: PinoLogger,\n          useValue: {\n            assign: () => undefined,\n            error: jest.fn()\n          }\n        },\n        {\n          provide: Cache,\n          useValue: {\n            get: (_key: string) => undefined,\n            set: async (_key: string, _value: string, _ttl: number) => undefined,\n            genSlugKey: () => 'test'\n          }\n        }\n      ]\n    }).compile()\n\n    authBasicGuard = module.get<AuthBasicGuard>(AuthBasicGuard)\n    authBasicStrategy = module.get<AuthBasicStrategy>(AuthBasicStrategy)\n    authProvider = module.get<AuthProvider>(AuthProvider)\n    cache = module.get<Cache>(Cache)\n    userTest = new UserModel(generateUserTest(), false)\n    encodedAuth = Buffer.from(`${userTest.login}:${userTest.password}`).toString('base64')\n    context = createMock<ExecutionContext>()\n  })\n\n  it('should be defined', () => {\n    expect(authBasicGuard).toBeDefined()\n    expect(authBasicStrategy).toBeDefined()\n    expect(authProvider).toBeDefined()\n    expect(cache).toBeDefined()\n    expect(encodedAuth).toBeDefined()\n    expect(userTest).toBeDefined()\n    expect(userTest.password).toBeDefined()\n  })\n\n  it('should validate the user authentication', async () => {\n    authProvider.validateUser = jest.fn().mockReturnValueOnce(userTest)\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { authorization: `Basic ${encodedAuth}` }\n    })\n    expect(await authBasicGuard.canActivate(context)).toBe(true)\n    expect(userTest.password).toBeUndefined()\n  })\n\n  it('should validate the user authentication with password containing colon', async () => {\n    const passwordWithColon = 'pass:word:123'\n    const userWithColonPassword = new UserModel({ ...generateUserTest(), password: passwordWithColon }, false)\n    const encodedAuthWithColon = Buffer.from(`${userWithColonPassword.login}:${passwordWithColon}`).toString('base64')\n\n    authProvider.validateUser = jest.fn().mockImplementation((login: string, password: string) => {\n      expect(login).toBe(userWithColonPassword.login)\n      expect(password).toBe(passwordWithColon)\n      return userWithColonPassword\n    })\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { authorization: `Basic ${encodedAuthWithColon}` }\n    })\n    expect(await authBasicGuard.canActivate(context)).toBe(true)\n    expect(userWithColonPassword.password).toBeUndefined()\n  })\n\n  it('should validate the user authentication with cache', async () => {\n    cache.get = jest.fn().mockReturnValueOnce(userTest)\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { authorization: `Basic ${encodedAuth}` }\n    })\n    expect(await authBasicGuard.canActivate(context)).toBe(true)\n  })\n\n  it('should not validate the user authentication when cache returns null (explicitly unauthorized)', async () => {\n    cache.get = jest.fn().mockReturnValueOnce(null)\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { authorization: `Basic ${encodedAuth}` }\n    })\n    await expect(authBasicGuard.canActivate(context)).rejects.toThrow()\n  })\n\n  it('should not validate the user authentication when cache returns undefined and database return null', async () => {\n    cache.get = jest.fn().mockReturnValueOnce(undefined)\n    authProvider.validateUser = jest.fn().mockReturnValueOnce(null)\n    jest.spyOn(cache, 'set').mockRejectedValueOnce(new Error('cache failed'))\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { authorization: `Basic ${encodedAuth}` }\n    })\n    const loggerSpy = jest\n      .spyOn(authBasicStrategy['logger'], 'error') // <-- spy the SAME instance used in the class\n      .mockImplementation(() => undefined)\n    await expect(authBasicGuard.canActivate(context)).rejects.toThrow()\n    expect(loggerSpy).toHaveBeenCalled()\n    expect(loggerSpy.mock.calls[0][0]).toEqual(expect.objectContaining({ tag: 'validate', msg: expect.stringContaining('cache failed') }))\n  })\n\n  it('should not validate the user authentication', async () => {\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { authorization: `Basic ${encodedAuth}` }\n    })\n    await expect(authBasicGuard.canActivate(context)).rejects.toThrow()\n  })\n\n  it('should throw error due to malformed authorization header', async () => {\n    // headers with capitals not working\n    context.switchToHttp().getRequest.mockReturnValueOnce({\n      raw: { user: '' },\n      headers: { AUTHORIZATION: 'Basic foo' }\n    })\n    await expect(authBasicGuard.canActivate(context)).rejects.toThrow()\n    context.switchToHttp().getRequest.mockReturnValueOnce({\n      raw: { user: '' }\n    })\n    await expect(authBasicGuard.canActivate(context)).rejects.toThrow()\n  })\n\n  it(`should valid OPTIONS method without authentication header on \"/\" and \"/${WEBDAV_BASE_PATH}/*\" paths `, async () => {\n    for (const url of ['', `/${WEBDAV_BASE_PATH}`, `/${WEBDAV_BASE_PATH}/foo/bar`]) {\n      context.switchToHttp().getRequest.mockReturnValueOnce({\n        method: 'OPTIONS',\n        originalUrl: url,\n        raw: { user: '' }\n      })\n      expect(await authBasicGuard.canActivate(context)).toBe(true)\n    }\n  })\n\n  it('should not valid OPTIONS method with other paths', async () => {\n    context.switchToHttp().getRequest.mockReturnValueOnce({\n      method: 'OPTIONS',\n      originalUrl: '/foo',\n      raw: { user: '' }\n    })\n    await expect(authBasicGuard.canActivate(context)).rejects.toThrow()\n  })\n})\n"],"names":["describe","AuthBasicGuard","name","authBasicGuard","authBasicStrategy","authProvider","cache","userTest","encodedAuth","context","beforeAll","module","Test","createTestingModule","providers","AuthBasicStrategy","provide","AuthProvider","useValue","validateUser","PinoLogger","assign","undefined","error","jest","fn","Cache","get","_key","set","_value","_ttl","genSlugKey","compile","UserModel","generateUserTest","Buffer","from","login","password","toString","createMock","it","expect","toBeDefined","mockReturnValueOnce","switchToHttp","getRequest","mockReturnValue","raw","user","headers","authorization","canActivate","toBe","toBeUndefined","passwordWithColon","userWithColonPassword","encodedAuthWithColon","mockImplementation","rejects","toThrow","spyOn","mockRejectedValueOnce","Error","loggerSpy","toHaveBeenCalled","mock","calls","toEqual","objectContaining","tag","msg","stringContaining","AUTHORIZATION","WEBDAV_BASE_PATH","url","method","originalUrl"],"mappings":";;;;wBAAuC;yBAEH;4BACT;2BACD;sBACO;wBACA;8BACX;qCACO;gCACE;mCACG;AAElCA,SAASC,8BAAc,CAACC,IAAI,EAAE;IAC5B,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJC,UAAU;QACR,MAAMC,SAAwB,MAAMC,aAAI,CAACC,mBAAmB,CAAC;YAC3DC,WAAW;gBACTb,8BAAc;gBACdc,oCAAiB;gBACjB;oBACEC,SAASC,iCAAY;oBACrBC,UAAU;wBACRC,cAAc,UAAY;oBAC5B;gBACF;gBACA;oBACEH,SAASI,sBAAU;oBACnBF,UAAU;wBACRG,QAAQ,IAAMC;wBACdC,OAAOC,KAAKC,EAAE;oBAChB;gBACF;gBACA;oBACET,SAASU,mBAAK;oBACdR,UAAU;wBACRS,KAAK,CAACC,OAAiBN;wBACvBO,KAAK,OAAOD,MAAcE,QAAgBC,OAAiBT;wBAC3DU,YAAY,IAAM;oBACpB;gBACF;aACD;QACH,GAAGC,OAAO;QAEV9B,iBAAiBQ,OAAOgB,GAAG,CAAiB1B,8BAAc;QAC1DG,oBAAoBO,OAAOgB,GAAG,CAAoBZ,oCAAiB;QACnEV,eAAeM,OAAOgB,GAAG,CAAeV,iCAAY;QACpDX,QAAQK,OAAOgB,GAAG,CAAQD,mBAAK;QAC/BnB,WAAW,IAAI2B,oBAAS,CAACC,IAAAA,sBAAgB,KAAI;QAC7C3B,cAAc4B,OAAOC,IAAI,CAAC,GAAG9B,SAAS+B,KAAK,CAAC,CAAC,EAAE/B,SAASgC,QAAQ,EAAE,EAAEC,QAAQ,CAAC;QAC7E/B,UAAUgC,IAAAA,kBAAU;IACtB;IAEAC,GAAG,qBAAqB;QACtBC,OAAOxC,gBAAgByC,WAAW;QAClCD,OAAOvC,mBAAmBwC,WAAW;QACrCD,OAAOtC,cAAcuC,WAAW;QAChCD,OAAOrC,OAAOsC,WAAW;QACzBD,OAAOnC,aAAaoC,WAAW;QAC/BD,OAAOpC,UAAUqC,WAAW;QAC5BD,OAAOpC,SAASgC,QAAQ,EAAEK,WAAW;IACvC;IAEAF,GAAG,2CAA2C;QAC5CrC,aAAac,YAAY,GAAGK,KAAKC,EAAE,GAAGoB,mBAAmB,CAACtC;QAC1DE,QAAQqC,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEC,eAAe,CAAC,MAAM,EAAE5C,aAAa;YAAC;QACnD;QACAmC,OAAO,MAAMxC,eAAekD,WAAW,CAAC5C,UAAU6C,IAAI,CAAC;QACvDX,OAAOpC,SAASgC,QAAQ,EAAEgB,aAAa;IACzC;IAEAb,GAAG,0EAA0E;QAC3E,MAAMc,oBAAoB;QAC1B,MAAMC,wBAAwB,IAAIvB,oBAAS,CAAC;YAAE,GAAGC,IAAAA,sBAAgB,GAAE;YAAEI,UAAUiB;QAAkB,GAAG;QACpG,MAAME,uBAAuBtB,OAAOC,IAAI,CAAC,GAAGoB,sBAAsBnB,KAAK,CAAC,CAAC,EAAEkB,mBAAmB,EAAEhB,QAAQ,CAAC;QAEzGnC,aAAac,YAAY,GAAGK,KAAKC,EAAE,GAAGkC,kBAAkB,CAAC,CAACrB,OAAeC;YACvEI,OAAOL,OAAOgB,IAAI,CAACG,sBAAsBnB,KAAK;YAC9CK,OAAOJ,UAAUe,IAAI,CAACE;YACtB,OAAOC;QACT;QACAhD,QAAQqC,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEC,eAAe,CAAC,MAAM,EAAEM,sBAAsB;YAAC;QAC5D;QACAf,OAAO,MAAMxC,eAAekD,WAAW,CAAC5C,UAAU6C,IAAI,CAAC;QACvDX,OAAOc,sBAAsBlB,QAAQ,EAAEgB,aAAa;IACtD;IAEAb,GAAG,sDAAsD;QACvDpC,MAAMqB,GAAG,GAAGH,KAAKC,EAAE,GAAGoB,mBAAmB,CAACtC;QAC1CE,QAAQqC,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEC,eAAe,CAAC,MAAM,EAAE5C,aAAa;YAAC;QACnD;QACAmC,OAAO,MAAMxC,eAAekD,WAAW,CAAC5C,UAAU6C,IAAI,CAAC;IACzD;IAEAZ,GAAG,iGAAiG;QAClGpC,MAAMqB,GAAG,GAAGH,KAAKC,EAAE,GAAGoB,mBAAmB,CAAC;QAC1CpC,QAAQqC,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEC,eAAe,CAAC,MAAM,EAAE5C,aAAa;YAAC;QACnD;QACA,MAAMmC,OAAOxC,eAAekD,WAAW,CAAC5C,UAAUmD,OAAO,CAACC,OAAO;IACnE;IAEAnB,GAAG,qGAAqG;QACtGpC,MAAMqB,GAAG,GAAGH,KAAKC,EAAE,GAAGoB,mBAAmB,CAACvB;QAC1CjB,aAAac,YAAY,GAAGK,KAAKC,EAAE,GAAGoB,mBAAmB,CAAC;QAC1DrB,KAAKsC,KAAK,CAACxD,OAAO,OAAOyD,qBAAqB,CAAC,IAAIC,MAAM;QACzDvD,QAAQqC,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEC,eAAe,CAAC,MAAM,EAAE5C,aAAa;YAAC;QACnD;QACA,MAAMyD,YAAYzC,KACfsC,KAAK,CAAC1D,iBAAiB,CAAC,SAAS,EAAE,SAAS,8CAA8C;SAC1FuD,kBAAkB,CAAC,IAAMrC;QAC5B,MAAMqB,OAAOxC,eAAekD,WAAW,CAAC5C,UAAUmD,OAAO,CAACC,OAAO;QACjElB,OAAOsB,WAAWC,gBAAgB;QAClCvB,OAAOsB,UAAUE,IAAI,CAACC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAEC,OAAO,CAAC1B,OAAO2B,gBAAgB,CAAC;YAAEC,KAAK;YAAYC,KAAK7B,OAAO8B,gBAAgB,CAAC;QAAgB;IACrI;IAEA/B,GAAG,+CAA+C;QAChDjC,QAAQqC,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEC,eAAe,CAAC,MAAM,EAAE5C,aAAa;YAAC;QACnD;QACA,MAAMmC,OAAOxC,eAAekD,WAAW,CAAC5C,UAAUmD,OAAO,CAACC,OAAO;IACnE;IAEAnB,GAAG,4DAA4D;QAC7D,oCAAoC;QACpCjC,QAAQqC,YAAY,GAAGC,UAAU,CAACF,mBAAmB,CAAC;YACpDI,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAEuB,eAAe;YAAY;QACxC;QACA,MAAM/B,OAAOxC,eAAekD,WAAW,CAAC5C,UAAUmD,OAAO,CAACC,OAAO;QACjEpD,QAAQqC,YAAY,GAAGC,UAAU,CAACF,mBAAmB,CAAC;YACpDI,KAAK;gBAAEC,MAAM;YAAG;QAClB;QACA,MAAMP,OAAOxC,eAAekD,WAAW,CAAC5C,UAAUmD,OAAO,CAACC,OAAO;IACnE;IAEAnB,GAAG,CAAC,uEAAuE,EAAEiC,wBAAgB,CAAC,UAAU,CAAC,EAAE;QACzG,KAAK,MAAMC,OAAO;YAAC;YAAI,CAAC,CAAC,EAAED,wBAAgB,EAAE;YAAE,CAAC,CAAC,EAAEA,wBAAgB,CAAC,QAAQ,CAAC;SAAC,CAAE;YAC9ElE,QAAQqC,YAAY,GAAGC,UAAU,CAACF,mBAAmB,CAAC;gBACpDgC,QAAQ;gBACRC,aAAaF;gBACb3B,KAAK;oBAAEC,MAAM;gBAAG;YAClB;YACAP,OAAO,MAAMxC,eAAekD,WAAW,CAAC5C,UAAU6C,IAAI,CAAC;QACzD;IACF;IAEAZ,GAAG,oDAAoD;QACrDjC,QAAQqC,YAAY,GAAGC,UAAU,CAACF,mBAAmB,CAAC;YACpDgC,QAAQ;YACRC,aAAa;YACb7B,KAAK;gBAAEC,MAAM;YAAG;QAClB;QACA,MAAMP,OAAOxC,eAAekD,WAAW,CAAC5C,UAAUmD,OAAO,CAACC,OAAO;IACnE;AACF"}

package/server/authentication/guards/auth-basic.strategy.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
@@ -20,7 +16,7 @@ const _usermodel = require("../../applications/users/models/user.model");
 const _shared = require("../../common/shared");
 const _cacheservice = require("../../infrastructure/cache/services/cache.service");
 const _scope = require("../constants/scope");
-const _authmethod = require("../models/auth-method");
+const _authprovidersmodels = require("../providers/auth-providers.models");
 const _httpbasicstrategy = require("./implementations/http-basic.strategy");
 function _ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -49,7 +45,7 @@ let AuthBasicStrategy = class AuthBasicStrategy extends (0, _passport.PassportSt
             // warning: plainToInstance do not use constructor to instantiate the class
             return (0, _classtransformer.plainToInstance)(_usermodel.UserModel, userFromCache);
         }
-        const userFromDB = await this.authMethod.validateUser(loginOrEmail, password, req.ip, _scope.AUTH_SCOPE.WEBDAV);
+        const userFromDB = await this.authProvider.validateUser(loginOrEmail, password, req.ip, _scope.AUTH_SCOPE.WEBDAV);
         if (userFromDB !== null) {
             userFromDB.removePassword();
         }
@@ -58,21 +54,24 @@ let AuthBasicStrategy = class AuthBasicStrategy extends (0, _passport.PassportSt
                 '_'
             ]
         }) : null;
-        this.cache.set(authBasicUser, userToCache, this.CACHE_TTL).catch((e)=>this.logger.error(`${this.validate.name} - ${e}`));
+        this.cache.set(authBasicUser, userToCache, this.CACHE_TTL).catch((e)=>this.logger.error({
+                tag: this.validate.name,
+                msg: `${e}`
+            }));
         return userFromDB;
     }
-    constructor(authMethod, cache, logger){
+    constructor(authProvider, cache, logger){
         super({
             passReqToCallback: true,
             realm: _shared.SERVER_NAME
-        }), this.authMethod = authMethod, this.cache = cache, this.logger = logger, this.CACHE_TTL = 900, this.CACHE_KEY_PREFIX = 'auth-webdav';
+        }), this.authProvider = authProvider, this.cache = cache, this.logger = logger, this.CACHE_TTL = 900, this.CACHE_KEY_PREFIX = 'auth-webdav';
     }
 };
 AuthBasicStrategy = _ts_decorate([
     (0, _common.Injectable)(),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
-        typeof _authmethod.AuthMethod === "undefined" ? Object : _authmethod.AuthMethod,
+        typeof _authprovidersmodels.AuthProvider === "undefined" ? Object : _authprovidersmodels.AuthProvider,
         typeof _cacheservice.Cache === "undefined" ? Object : _cacheservice.Cache,
         typeof _nestjspino.PinoLogger === "undefined" ? Object : _nestjspino.PinoLogger
     ])

package/server/authentication/guards/auth-basic.strategy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-basic.strategy.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Injectable } from '@nestjs/common'\nimport { AbstractStrategy, PassportStrategy } from '@nestjs/passport'\nimport { instanceToPlain, plainToInstance } from 'class-transformer'\nimport { FastifyRequest } from 'fastify'\nimport { PinoLogger } from 'nestjs-pino'\nimport { UserModel } from '../../applications/users/models/user.model'\nimport { SERVER_NAME } from '../../common/shared'\nimport { Cache } from '../../infrastructure/cache/services/cache.service'\nimport { AUTH_SCOPE } from '../constants/scope'\nimport { AuthMethod } from '../models/auth-method'\nimport { HttpBasicStrategy } from './implementations/http-basic.strategy'\n\n@Injectable()\nexport class AuthBasicStrategy extends PassportStrategy(HttpBasicStrategy, 'basic') implements AbstractStrategy {\n  private readonly CACHE_TTL = 900\n  private readonly CACHE_KEY_PREFIX = 'auth-webdav'\n\n  constructor(\n    private readonly authMethod: AuthMethod,\n    private readonly cache: Cache,\n    private readonly logger: PinoLogger\n  ) {\n    super({ passReqToCallback: true, realm: SERVER_NAME })\n  }\n\n  async validate(req: FastifyRequest, loginOrEmail: string, password: string): Promise<Omit<UserModel, 'password'> | null> {\n    loginOrEmail = loginOrEmail.trim()\n    password = password.trim()\n    this.logger.assign({ user: loginOrEmail })\n    const authBasicUser = `${this.CACHE_KEY_PREFIX}-${req.headers['authorization'].split(' ').at(-1).toLowerCase()}`\n    const userFromCache: any = await this.cache.get(authBasicUser)\n    if (userFromCache === null) {\n      // not authorized\n      return null\n    }\n    if (userFromCache !== undefined) {\n      // cached\n      // warning: plainToInstance do not use constructor to instantiate the class\n      return plainToInstance(UserModel, userFromCache)\n    }\n    const userFromDB: UserModel = await this.authMethod.validateUser(loginOrEmail, password, req.ip, AUTH_SCOPE.WEBDAV)\n    if (userFromDB !== null) {\n      userFromDB.removePassword()\n    }\n    const userToCache: Record<string, any> | null = userFromDB ? instanceToPlain(userFromDB, { excludePrefixes: ['_'] }) : null\n    this.cache.set(authBasicUser, userToCache, this.CACHE_TTL).catch((e: Error) => this.logger.error(`${this.validate.name} - ${e}`))\n    return userFromDB\n  }\n}\n"],"names":["AuthBasicStrategy","PassportStrategy","HttpBasicStrategy","validate","req","loginOrEmail","password","trim","logger","assign","user","authBasicUser","CACHE_KEY_PREFIX","headers","split","at","toLowerCase","userFromCache","cache","get","undefined","plainToInstance","UserModel","userFromDB","authMethod","validateUser","ip","AUTH_SCOPE","WEBDAV","removePassword","userToCache","instanceToPlain","excludePrefixes","set","CACHE_TTL","catch","e","error","name","passReqToCallback","realm","SERVER_NAME"],"mappings":"AAAA;;;;CAIC;;;;+BAeYA;;;eAAAA;;;wBAbc;0BACwB;kCACF;4BAEtB;2BACD;wBACE;8BACN;uBACK;4BACA;mCACO;;;;;;;;;;AAG3B,IAAA,AAAMA,oBAAN,MAAMA,0BAA0BC,IAAAA,0BAAgB,EAACC,oCAAiB,EAAE;IAYzE,MAAMC,SAASC,GAAmB,EAAEC,YAAoB,EAAEC,QAAgB,EAA+C;QACvHD,eAAeA,aAAaE,IAAI;QAChCD,WAAWA,SAASC,IAAI;QACxB,IAAI,CAACC,MAAM,CAACC,MAAM,CAAC;YAAEC,MAAML;QAAa;QACxC,MAAMM,gBAAgB,GAAG,IAAI,CAACC,gBAAgB,CAAC,CAAC,EAAER,IAAIS,OAAO,CAAC,gBAAgB,CAACC,KAAK,CAAC,KAAKC,EAAE,CAAC,CAAC,GAAGC,WAAW,IAAI;QAChH,MAAMC,gBAAqB,MAAM,IAAI,CAACC,KAAK,CAACC,GAAG,CAACR;QAChD,IAAIM,kBAAkB,MAAM;YAC1B,iBAAiB;YACjB,OAAO;QACT;QACA,IAAIA,kBAAkBG,WAAW;YAC/B,SAAS;YACT,2EAA2E;YAC3E,OAAOC,IAAAA,iCAAe,EAACC,oBAAS,EAAEL;QACpC;QACA,MAAMM,aAAwB,MAAM,IAAI,CAACC,UAAU,CAACC,YAAY,CAACpB,cAAcC,UAAUF,IAAIsB,EAAE,EAAEC,iBAAU,CAACC,MAAM;QAClH,IAAIL,eAAe,MAAM;YACvBA,WAAWM,cAAc;QAC3B;QACA,MAAMC,cAA0CP,aAAaQ,IAAAA,iCAAe,EAACR,YAAY;YAAES,iBAAiB;gBAAC;aAAI;QAAC,KAAK;QACvH,IAAI,CAACd,KAAK,CAACe,GAAG,CAACtB,eAAemB,aAAa,IAAI,CAACI,SAAS,EAAEC,KAAK,CAAC,CAACC,IAAa,IAAI,CAAC5B,MAAM,CAAC6B,KAAK,CAAC,GAAG,IAAI,CAAClC,QAAQ,CAACmC,IAAI,CAAC,GAAG,EAAEF,GAAG;QAC/H,OAAOb;IACT;IA9BA,YACE,AAAiBC,UAAsB,EACvC,AAAiBN,KAAY,EAC7B,AAAiBV,MAAkB,CACnC;QACA,KAAK,CAAC;YAAE+B,mBAAmB;YAAMC,OAAOC,mBAAW;QAAC,SAJnCjB,aAAAA,iBACAN,QAAAA,YACAV,SAAAA,aANF0B,YAAY,UACZtB,mBAAmB;IAQpC;AAyBF"}
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-basic.strategy.ts"],"sourcesContent":["import { Injectable } from '@nestjs/common'\nimport { AbstractStrategy, PassportStrategy } from '@nestjs/passport'\nimport { instanceToPlain, plainToInstance } from 'class-transformer'\nimport { FastifyRequest } from 'fastify'\nimport { PinoLogger } from 'nestjs-pino'\nimport { UserModel } from '../../applications/users/models/user.model'\nimport { SERVER_NAME } from '../../common/shared'\nimport { Cache } from '../../infrastructure/cache/services/cache.service'\nimport { AUTH_SCOPE } from '../constants/scope'\nimport { AuthProvider } from '../providers/auth-providers.models'\nimport { HttpBasicStrategy } from './implementations/http-basic.strategy'\n\n@Injectable()\nexport class AuthBasicStrategy extends PassportStrategy(HttpBasicStrategy, 'basic') implements AbstractStrategy {\n  private readonly CACHE_TTL = 900\n  private readonly CACHE_KEY_PREFIX = 'auth-webdav'\n\n  constructor(\n    private readonly authProvider: AuthProvider,\n    private readonly cache: Cache,\n    private readonly logger: PinoLogger\n  ) {\n    super({ passReqToCallback: true, realm: SERVER_NAME })\n  }\n\n  async validate(req: FastifyRequest, loginOrEmail: string, password: string): Promise<Omit<UserModel, 'password'> | null> {\n    loginOrEmail = loginOrEmail.trim()\n    password = password.trim()\n    this.logger.assign({ user: loginOrEmail })\n    const authBasicUser = `${this.CACHE_KEY_PREFIX}-${req.headers['authorization'].split(' ').at(-1).toLowerCase()}`\n    const userFromCache: any = await this.cache.get(authBasicUser)\n    if (userFromCache === null) {\n      // not authorized\n      return null\n    }\n    if (userFromCache !== undefined) {\n      // cached\n      // warning: plainToInstance do not use constructor to instantiate the class\n      return plainToInstance(UserModel, userFromCache)\n    }\n    const userFromDB: UserModel = await this.authProvider.validateUser(loginOrEmail, password, req.ip, AUTH_SCOPE.WEBDAV)\n    if (userFromDB !== null) {\n      userFromDB.removePassword()\n    }\n    const userToCache: Record<string, any> | null = userFromDB ? instanceToPlain(userFromDB, { excludePrefixes: ['_'] }) : null\n    this.cache.set(authBasicUser, userToCache, this.CACHE_TTL).catch((e: Error) => this.logger.error({ tag: this.validate.name, msg: `${e}` }))\n    return userFromDB\n  }\n}\n"],"names":["AuthBasicStrategy","PassportStrategy","HttpBasicStrategy","validate","req","loginOrEmail","password","trim","logger","assign","user","authBasicUser","CACHE_KEY_PREFIX","headers","split","at","toLowerCase","userFromCache","cache","get","undefined","plainToInstance","UserModel","userFromDB","authProvider","validateUser","ip","AUTH_SCOPE","WEBDAV","removePassword","userToCache","instanceToPlain","excludePrefixes","set","CACHE_TTL","catch","e","error","tag","name","msg","passReqToCallback","realm","SERVER_NAME"],"mappings":";;;;+BAaaA;;;eAAAA;;;wBAbc;0BACwB;kCACF;4BAEtB;2BACD;wBACE;8BACN;uBACK;qCACE;mCACK;;;;;;;;;;AAG3B,IAAA,AAAMA,oBAAN,MAAMA,0BAA0BC,IAAAA,0BAAgB,EAACC,oCAAiB,EAAE;IAYzE,MAAMC,SAASC,GAAmB,EAAEC,YAAoB,EAAEC,QAAgB,EAA+C;QACvHD,eAAeA,aAAaE,IAAI;QAChCD,WAAWA,SAASC,IAAI;QACxB,IAAI,CAACC,MAAM,CAACC,MAAM,CAAC;YAAEC,MAAML;QAAa;QACxC,MAAMM,gBAAgB,GAAG,IAAI,CAACC,gBAAgB,CAAC,CAAC,EAAER,IAAIS,OAAO,CAAC,gBAAgB,CAACC,KAAK,CAAC,KAAKC,EAAE,CAAC,CAAC,GAAGC,WAAW,IAAI;QAChH,MAAMC,gBAAqB,MAAM,IAAI,CAACC,KAAK,CAACC,GAAG,CAACR;QAChD,IAAIM,kBAAkB,MAAM;YAC1B,iBAAiB;YACjB,OAAO;QACT;QACA,IAAIA,kBAAkBG,WAAW;YAC/B,SAAS;YACT,2EAA2E;YAC3E,OAAOC,IAAAA,iCAAe,EAACC,oBAAS,EAAEL;QACpC;QACA,MAAMM,aAAwB,MAAM,IAAI,CAACC,YAAY,CAACC,YAAY,CAACpB,cAAcC,UAAUF,IAAIsB,EAAE,EAAEC,iBAAU,CAACC,MAAM;QACpH,IAAIL,eAAe,MAAM;YACvBA,WAAWM,cAAc;QAC3B;QACA,MAAMC,cAA0CP,aAAaQ,IAAAA,iCAAe,EAACR,YAAY;YAAES,iBAAiB;gBAAC;aAAI;QAAC,KAAK;QACvH,IAAI,CAACd,KAAK,CAACe,GAAG,CAACtB,eAAemB,aAAa,IAAI,CAACI,SAAS,EAAEC,KAAK,CAAC,CAACC,IAAa,IAAI,CAAC5B,MAAM,CAAC6B,KAAK,CAAC;gBAAEC,KAAK,IAAI,CAACnC,QAAQ,CAACoC,IAAI;gBAAEC,KAAK,GAAGJ,GAAG;YAAC;QACxI,OAAOb;IACT;IA9BA,YACE,AAAiBC,YAA0B,EAC3C,AAAiBN,KAAY,EAC7B,AAAiBV,MAAkB,CACnC;QACA,KAAK,CAAC;YAAEiC,mBAAmB;YAAMC,OAAOC,mBAAW;QAAC,SAJnCnB,eAAAA,mBACAN,QAAAA,YACAV,SAAAA,aANF0B,YAAY,UACZtB,mBAAmB;IAQpC;AAyBF"}

package/server/authentication/guards/auth-digest.guard.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ // import { ExecutionContext, Injectable, Logger } from '@nestjs/common'
+// import { ExecutionContext, Injectable, Logger } from '@nestjs/common'
 // import { AuthGuard, IAuthGuard } from '@nestjs/passport'
 //
 // @Injectable()

package/server/authentication/guards/auth-digest.guard.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-digest.guard.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\n// import { ExecutionContext, Injectable, Logger } from '@nestjs/common'\n// import { AuthGuard, IAuthGuard } from '@nestjs/passport'\n//\n// @Injectable()\n// export class AuthDigestGuard extends AuthGuard('digest') implements IAuthGuard {\n//   private readonly logger = new Logger(AuthDigestGuard.name)\n//\n//   handleRequest<TUser = any>(err: any, user: any, info: Error, ctx: ExecutionContext, status?: any): TUser {\n//     const request = this.getRequest(ctx)\n//     request.raw.user = user ? user.login : 'unauthorized'\n//     if (info) {\n//       this.logger.warn(`<${request.raw.user}> <${request.ip}> ${info}`)\n//     }\n//     return super.handleRequest(err, user, info, ctx, status)\n//   }\n// }\n"],"names":[],"mappings":"AAAA;;;;CAIC,GAED,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,gBAAgB;AAChB,mFAAmF;AACnF,+DAA+D;AAC/D,EAAE;AACF,+GAA+G;AAC/G,2CAA2C;AAC3C,4DAA4D;AAC5D,kBAAkB;AAClB,0EAA0E;AAC1E,QAAQ;AACR,+DAA+D;AAC/D,MAAM;AACN,IAAI"}
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-digest.guard.ts"],"sourcesContent":["// import { ExecutionContext, Injectable, Logger } from '@nestjs/common'\n// import { AuthGuard, IAuthGuard } from '@nestjs/passport'\n//\n// @Injectable()\n// export class AuthDigestGuard extends AuthGuard('digest') implements IAuthGuard {\n//   private readonly logger = new Logger(AuthDigestGuard.name)\n//\n//   handleRequest<TUser = any>(err: any, user: any, info: Error, ctx: ExecutionContext, status?: any): TUser {\n//     const request = this.getRequest(ctx)\n//     request.raw.user = user ? user.login : 'unauthorized'\n//     if (info) {\n//       this.logger.warn(`<${request.raw.user}> <${request.ip}> ${info}`)\n//     }\n//     return super.handleRequest(err, user, info, ctx, status)\n//   }\n// }\n"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,gBAAgB;AAChB,mFAAmF;AACnF,+DAA+D;AAC/D,EAAE;AACF,+GAA+G;AAC/G,2CAA2C;AAC3C,4DAA4D;AAC5D,kBAAkB;AAClB,0EAA0E;AAC1E,QAAQ;AACR,+DAA+D;AAC/D,MAAM;AACN,IAAI"}

package/server/authentication/guards/auth-digest.strategy.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ // import { Injectable } from '@nestjs/common'
+// import { Injectable } from '@nestjs/common'
 // import { PassportStrategy } from '@nestjs/passport'
 // import { PinoLogger } from 'nestjs-pino'
 // import { SERVER_NAME } from '../../common/shared'

package/server/authentication/guards/auth-digest.strategy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-digest.strategy.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\n// import { Injectable } from '@nestjs/common'\n// import { PassportStrategy } from '@nestjs/passport'\n// import { PinoLogger } from 'nestjs-pino'\n// import { SERVER_NAME } from '../../common/shared'\n//\n// import { HttpDigestStrategy } from './implementations/http-digest.strategy'\n//\n// @Injectable()\n// export class AuthDigestStrategy extends PassportStrategy(HttpDigestStrategy, 'digest') {\n//   constructor(private readonly logger: PinoLogger) {\n//     super({\n//       realm: SERVER_NAME,\n//       // Recommended options for RFC-compliant Digest (required for security)\n//       qop: 'auth',\n//       algorithm: 'MD5'\n//       // Optional anti-replay validation hook\n//       // validate: (params, done) => done(null, true),\n//     })\n//   }\n//\n//   async validate(loginOrEmail: string) {\n//     loginOrEmail = loginOrEmail.trim()\n//     this.logger.assign({ user: loginOrEmail })\n//\n//     // ⚠️ TO ADAPT: Digest authentication requires a server-side secret:\n//     // - ideally a stored { ha1 } value (HA1 = MD5(username:realm:password))\n//     // - otherwise the clear-text \"password\" (less secure, but possible)\n//     //\n//     // return [loginOrEmail, { ha1: '4befe40c6af915eca11de84be07a1f21' }]\n//     // return [loginOrEmail, 'password']\n//\n//     // Method to get digest secret\n//     const { user, ha1, password } = getDigestSecret(loginOrEmail, SERVER_NAME)\n//\n//     if (!user) return null\n//\n//     if (ha1) return [user, { ha1 }]\n//     if (password) return [user, password]\n//\n//     return null\n//   }\n// }\n"],"names":[],"mappings":"AAAA;;;;CAIC,GAED,8CAA8C;AAC9C,sDAAsD;AACtD,2CAA2C;AAC3C,oDAAoD;AACpD,EAAE;AACF,8EAA8E;AAC9E,EAAE;AACF,gBAAgB;AAChB,2FAA2F;AAC3F,uDAAuD;AACvD,cAAc;AACd,4BAA4B;AAC5B,gFAAgF;AAChF,qBAAqB;AACrB,yBAAyB;AACzB,gDAAgD;AAChD,yDAAyD;AACzD,SAAS;AACT,MAAM;AACN,EAAE;AACF,2CAA2C;AAC3C,yCAAyC;AACzC,iDAAiD;AACjD,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,2EAA2E;AAC3E,SAAS;AACT,4EAA4E;AAC5E,2CAA2C;AAC3C,EAAE;AACF,qCAAqC;AACrC,iFAAiF;AACjF,EAAE;AACF,6BAA6B;AAC7B,EAAE;AACF,sCAAsC;AACtC,4CAA4C;AAC5C,EAAE;AACF,kBAAkB;AAClB,MAAM;AACN,IAAI"}
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-digest.strategy.ts"],"sourcesContent":["// import { Injectable } from '@nestjs/common'\n// import { PassportStrategy } from '@nestjs/passport'\n// import { PinoLogger } from 'nestjs-pino'\n// import { SERVER_NAME } from '../../common/shared'\n//\n// import { HttpDigestStrategy } from './implementations/http-digest.strategy'\n//\n// @Injectable()\n// export class AuthDigestStrategy extends PassportStrategy(HttpDigestStrategy, 'digest') {\n//   constructor(private readonly logger: PinoLogger) {\n//     super({\n//       realm: SERVER_NAME,\n//       // Recommended options for RFC-compliant Digest (required for security)\n//       qop: 'auth',\n//       algorithm: 'MD5'\n//       // Optional anti-replay validation hook\n//       // validate: (params, done) => done(null, true),\n//     })\n//   }\n//\n//   async validate(loginOrEmail: string) {\n//     loginOrEmail = loginOrEmail.trim()\n//     this.logger.assign({ user: loginOrEmail })\n//\n//     // ⚠️ TO ADAPT: Digest authentication requires a server-side secret:\n//     // - ideally a stored { ha1 } value (HA1 = MD5(username:realm:password))\n//     // - otherwise the clear-text \"password\" (less secure, but possible)\n//     //\n//     // return [loginOrEmail, { ha1: '4befe40c6af915eca11de84be07a1f21' }]\n//     // return [loginOrEmail, 'password']\n//\n//     // Method to get digest secret\n//     const { user, ha1, password } = getDigestSecret(loginOrEmail, SERVER_NAME)\n//\n//     if (!user) return null\n//\n//     if (ha1) return [user, { ha1 }]\n//     if (password) return [user, password]\n//\n//     return null\n//   }\n// }\n"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,sDAAsD;AACtD,2CAA2C;AAC3C,oDAAoD;AACpD,EAAE;AACF,8EAA8E;AAC9E,EAAE;AACF,gBAAgB;AAChB,2FAA2F;AAC3F,uDAAuD;AACvD,cAAc;AACd,4BAA4B;AAC5B,gFAAgF;AAChF,qBAAqB;AACrB,yBAAyB;AACzB,gDAAgD;AAChD,yDAAyD;AACzD,SAAS;AACT,MAAM;AACN,EAAE;AACF,2CAA2C;AAC3C,yCAAyC;AACzC,iDAAiD;AACjD,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,2EAA2E;AAC3E,SAAS;AACT,4EAA4E;AAC5E,2CAA2C;AAC3C,EAAE;AACF,qCAAqC;AACrC,iFAAiF;AACjF,EAAE;AACF,6BAA6B;AAC7B,EAAE;AACF,sCAAsC;AACtC,4CAA4C;AAC5C,EAAE;AACF,kBAAkB;AAClB,MAAM;AACN,IAAI"}

package/server/authentication/guards/auth-local.guard.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });

package/server/authentication/guards/auth-local.guard.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-local.guard.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { ExecutionContext, Injectable, Logger } from '@nestjs/common'\nimport { AuthGuard, IAuthGuard } from '@nestjs/passport'\n\n@Injectable()\nexport class AuthLocalGuard extends AuthGuard('local') implements IAuthGuard {\n  private readonly logger = new Logger(AuthLocalGuard.name)\n\n  handleRequest<TUser = any>(err: any, user: any, info: Error, ctx: ExecutionContext, status?: any): TUser {\n    const req = this.getRequest(ctx)\n    req.raw.user = user?.login || 'unauthorized'\n    if (info) {\n      this.logger.warn(`<${req.raw.user}> <${req.ip}> ${info}`)\n    }\n    return super.handleRequest(err, user, info, ctx, status)\n  }\n}\n"],"names":["AuthLocalGuard","AuthGuard","handleRequest","err","user","info","ctx","status","req","getRequest","raw","login","logger","warn","ip","Logger","name"],"mappings":"AAAA;;;;CAIC;;;;+BAMYA;;;eAAAA;;;wBAJwC;0BACf;;;;;;;AAG/B,IAAA,AAAMA,iBAAN,MAAMA,uBAAuBC,IAAAA,mBAAS,EAAC;IAG5CC,cAA2BC,GAAQ,EAAEC,IAAS,EAAEC,IAAW,EAAEC,GAAqB,EAAEC,MAAY,EAAS;QACvG,MAAMC,MAAM,IAAI,CAACC,UAAU,CAACH;QAC5BE,IAAIE,GAAG,CAACN,IAAI,GAAGA,MAAMO,SAAS;QAC9B,IAAIN,MAAM;YACR,IAAI,CAACO,MAAM,CAACC,IAAI,CAAC,CAAC,CAAC,EAAEL,IAAIE,GAAG,CAACN,IAAI,CAAC,GAAG,EAAEI,IAAIM,EAAE,CAAC,EAAE,EAAET,MAAM;QAC1D;QACA,OAAO,KAAK,CAACH,cAAcC,KAAKC,MAAMC,MAAMC,KAAKC;IACnD;;QAVK,qBACYK,SAAS,IAAIG,cAAM,CAACf,eAAegB,IAAI;;AAU1D"}
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-local.guard.ts"],"sourcesContent":["import { ExecutionContext, Injectable, Logger } from '@nestjs/common'\nimport { AuthGuard, IAuthGuard } from '@nestjs/passport'\n\n@Injectable()\nexport class AuthLocalGuard extends AuthGuard('local') implements IAuthGuard {\n  private readonly logger = new Logger(AuthLocalGuard.name)\n\n  handleRequest<TUser = any>(err: any, user: any, info: Error, ctx: ExecutionContext, status?: any): TUser {\n    const req = this.getRequest(ctx)\n    req.raw.user = user?.login || 'unauthorized'\n    if (info) {\n      this.logger.warn(`<${req.raw.user}> <${req.ip}> ${info}`)\n    }\n    return super.handleRequest(err, user, info, ctx, status)\n  }\n}\n"],"names":["AuthLocalGuard","AuthGuard","handleRequest","err","user","info","ctx","status","req","getRequest","raw","login","logger","warn","ip","Logger","name"],"mappings":";;;;+BAIaA;;;eAAAA;;;wBAJwC;0BACf;;;;;;;AAG/B,IAAA,AAAMA,iBAAN,MAAMA,uBAAuBC,IAAAA,mBAAS,EAAC;IAG5CC,cAA2BC,GAAQ,EAAEC,IAAS,EAAEC,IAAW,EAAEC,GAAqB,EAAEC,MAAY,EAAS;QACvG,MAAMC,MAAM,IAAI,CAACC,UAAU,CAACH;QAC5BE,IAAIE,GAAG,CAACN,IAAI,GAAGA,MAAMO,SAAS;QAC9B,IAAIN,MAAM;YACR,IAAI,CAACO,MAAM,CAACC,IAAI,CAAC,CAAC,CAAC,EAAEL,IAAIE,GAAG,CAACN,IAAI,CAAC,GAAG,EAAEI,IAAIM,EAAE,CAAC,EAAE,EAAET,MAAM;QAC1D;QACA,OAAO,KAAK,CAACH,cAAcC,KAAKC,MAAMC,MAAMC,KAAKC;IACnD;;QAVK,qBACYK,SAAS,IAAIG,cAAM,CAACf,eAAegB,IAAI;;AAU1D"}

package/server/authentication/guards/auth-local.guard.spec.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
@@ -11,12 +7,12 @@ const _testing = require("@nestjs/testing");
 const _nestjspino = require("nestjs-pino");
 const _usermodel = require("../../applications/users/models/user.model");
 const _test = require("../../applications/users/utils/test");
-const _authmethod = require("../models/auth-method");
+const _authprovidersmodels = require("../providers/auth-providers.models");
 const _authlocalguard = require("./auth-local.guard");
 const _authlocalstrategy = require("./auth-local.strategy");
 describe(_authlocalguard.AuthLocalGuard.name, ()=>{
     let authLocalGuard;
-    let authMethod;
+    let authProvider;
     let userTest;
     let context;
     beforeAll(async ()=>{
@@ -25,7 +21,7 @@ describe(_authlocalguard.AuthLocalGuard.name, ()=>{
                 _authlocalguard.AuthLocalGuard,
                 _authlocalstrategy.AuthLocalStrategy,
                 {
-                    provide: _authmethod.AuthMethod,
+                    provide: _authprovidersmodels.AuthProvider,
                     useValue: {}
                 },
                 {
@@ -37,17 +33,17 @@ describe(_authlocalguard.AuthLocalGuard.name, ()=>{
             ]
         }).compile();
         authLocalGuard = module.get(_authlocalguard.AuthLocalGuard);
-        authMethod = module.get(_authmethod.AuthMethod);
+        authProvider = module.get(_authprovidersmodels.AuthProvider);
         userTest = new _usermodel.UserModel((0, _test.generateUserTest)(), false);
         context = (0, _tsjest.createMock)();
     });
     it('should be defined', ()=>{
         expect(authLocalGuard).toBeDefined();
-        expect(authMethod).toBeDefined();
+        expect(authProvider).toBeDefined();
         expect(userTest).toBeDefined();
     });
     it('should validate the user authentication', async ()=>{
-        authMethod.validateUser = jest.fn().mockReturnValueOnce(userTest);
+        authProvider.validateUser = jest.fn().mockReturnValueOnce(userTest);
         context.switchToHttp().getRequest.mockReturnValue({
             raw: {
                 user: ''
@@ -62,7 +58,7 @@ describe(_authlocalguard.AuthLocalGuard.name, ()=>{
     });
     it('should not validate the user authentication', async ()=>{
         userTest.password = 'password';
-        authMethod.validateUser = jest.fn().mockReturnValueOnce(null);
+        authProvider.validateUser = jest.fn().mockReturnValueOnce(null);
         context.switchToHttp().getRequest.mockReturnValue({
             raw: {
                 user: ''
@@ -75,7 +71,7 @@ describe(_authlocalguard.AuthLocalGuard.name, ()=>{
         await expect(authLocalGuard.canActivate(context)).rejects.toThrow(/password/i);
     });
     it('should throw error due to malformed body', async ()=>{
-        authMethod.validateUser = jest.fn().mockReturnValueOnce(null);
+        authProvider.validateUser = jest.fn().mockReturnValueOnce(null);
         context.switchToHttp().getRequest.mockReturnValue({
             raw: {
                 user: ''

package/server/authentication/guards/auth-local.guard.spec.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-local.guard.spec.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { createMock, DeepMocked } from '@golevelup/ts-jest'\nimport { ExecutionContext } from '@nestjs/common'\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { PinoLogger } from 'nestjs-pino'\nimport { UserModel } from '../../applications/users/models/user.model'\nimport { generateUserTest } from '../../applications/users/utils/test'\nimport { AuthMethod } from '../models/auth-method'\nimport { AuthLocalGuard } from './auth-local.guard'\nimport { AuthLocalStrategy } from './auth-local.strategy'\n\ndescribe(AuthLocalGuard.name, () => {\n  let authLocalGuard: AuthLocalGuard\n  let authMethod: AuthMethod\n  let userTest: UserModel\n  let context: DeepMocked<ExecutionContext>\n\n  beforeAll(async () => {\n    const module: TestingModule = await Test.createTestingModule({\n      providers: [\n        AuthLocalGuard,\n        AuthLocalStrategy,\n        { provide: AuthMethod, useValue: {} },\n        {\n          provide: PinoLogger,\n          useValue: {\n            assign: () => undefined\n          }\n        }\n      ]\n    }).compile()\n\n    authLocalGuard = module.get<AuthLocalGuard>(AuthLocalGuard)\n    authMethod = module.get<AuthMethod>(AuthMethod)\n    userTest = new UserModel(generateUserTest(), false)\n    context = createMock<ExecutionContext>()\n  })\n\n  it('should be defined', () => {\n    expect(authLocalGuard).toBeDefined()\n    expect(authMethod).toBeDefined()\n    expect(userTest).toBeDefined()\n  })\n\n  it('should validate the user authentication', async () => {\n    authMethod.validateUser = jest.fn().mockReturnValueOnce(userTest)\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      body: {\n        login: userTest.login,\n        password: userTest.password\n      }\n    })\n    expect(await authLocalGuard.canActivate(context)).toBe(true)\n    expect(userTest.password).toBeUndefined()\n  })\n\n  it('should not validate the user authentication', async () => {\n    userTest.password = 'password'\n    authMethod.validateUser = jest.fn().mockReturnValueOnce(null)\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      body: {\n        login: userTest.login,\n        password: userTest.password\n      }\n    })\n    await expect(authLocalGuard.canActivate(context)).rejects.toThrow(/password/i)\n  })\n\n  it('should throw error due to malformed body', async () => {\n    authMethod.validateUser = jest.fn().mockReturnValueOnce(null)\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      body: null\n    })\n    await expect(authLocalGuard.canActivate(context)).rejects.toThrow()\n  })\n})\n"],"names":["describe","AuthLocalGuard","name","authLocalGuard","authMethod","userTest","context","beforeAll","module","Test","createTestingModule","providers","AuthLocalStrategy","provide","AuthMethod","useValue","PinoLogger","assign","undefined","compile","get","UserModel","generateUserTest","createMock","it","expect","toBeDefined","validateUser","jest","fn","mockReturnValueOnce","switchToHttp","getRequest","mockReturnValue","raw","user","body","login","password","canActivate","toBe","toBeUndefined","rejects","toThrow"],"mappings":"AAAA;;;;CAIC;;;;wBAEsC;yBAEH;4BACT;2BACD;sBACO;4BACN;gCACI;mCACG;AAElCA,SAASC,8BAAc,CAACC,IAAI,EAAE;IAC5B,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJC,UAAU;QACR,MAAMC,SAAwB,MAAMC,aAAI,CAACC,mBAAmB,CAAC;YAC3DC,WAAW;gBACTV,8BAAc;gBACdW,oCAAiB;gBACjB;oBAAEC,SAASC,sBAAU;oBAAEC,UAAU,CAAC;gBAAE;gBACpC;oBACEF,SAASG,sBAAU;oBACnBD,UAAU;wBACRE,QAAQ,IAAMC;oBAChB;gBACF;aACD;QACH,GAAGC,OAAO;QAEVhB,iBAAiBK,OAAOY,GAAG,CAAiBnB,8BAAc;QAC1DG,aAAaI,OAAOY,GAAG,CAAaN,sBAAU;QAC9CT,WAAW,IAAIgB,oBAAS,CAACC,IAAAA,sBAAgB,KAAI;QAC7ChB,UAAUiB,IAAAA,kBAAU;IACtB;IAEAC,GAAG,qBAAqB;QACtBC,OAAOtB,gBAAgBuB,WAAW;QAClCD,OAAOrB,YAAYsB,WAAW;QAC9BD,OAAOpB,UAAUqB,WAAW;IAC9B;IAEAF,GAAG,2CAA2C;QAC5CpB,WAAWuB,YAAY,GAAGC,KAAKC,EAAE,GAAGC,mBAAmB,CAACzB;QACxDC,QAAQyB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,MAAM;gBACJC,OAAOhC,SAASgC,KAAK;gBACrBC,UAAUjC,SAASiC,QAAQ;YAC7B;QACF;QACAb,OAAO,MAAMtB,eAAeoC,WAAW,CAACjC,UAAUkC,IAAI,CAAC;QACvDf,OAAOpB,SAASiC,QAAQ,EAAEG,aAAa;IACzC;IAEAjB,GAAG,+CAA+C;QAChDnB,SAASiC,QAAQ,GAAG;QACpBlC,WAAWuB,YAAY,GAAGC,KAAKC,EAAE,GAAGC,mBAAmB,CAAC;QACxDxB,QAAQyB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,MAAM;gBACJC,OAAOhC,SAASgC,KAAK;gBACrBC,UAAUjC,SAASiC,QAAQ;YAC7B;QACF;QACA,MAAMb,OAAOtB,eAAeoC,WAAW,CAACjC,UAAUoC,OAAO,CAACC,OAAO,CAAC;IACpE;IAEAnB,GAAG,4CAA4C;QAC7CpB,WAAWuB,YAAY,GAAGC,KAAKC,EAAE,GAAGC,mBAAmB,CAAC;QACxDxB,QAAQyB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,MAAM;QACR;QACA,MAAMX,OAAOtB,eAAeoC,WAAW,CAACjC,UAAUoC,OAAO,CAACC,OAAO;IACnE;AACF"}
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-local.guard.spec.ts"],"sourcesContent":["import { createMock, DeepMocked } from '@golevelup/ts-jest'\nimport { ExecutionContext } from '@nestjs/common'\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { PinoLogger } from 'nestjs-pino'\nimport { UserModel } from '../../applications/users/models/user.model'\nimport { generateUserTest } from '../../applications/users/utils/test'\nimport { AuthProvider } from '../providers/auth-providers.models'\nimport { AuthLocalGuard } from './auth-local.guard'\nimport { AuthLocalStrategy } from './auth-local.strategy'\n\ndescribe(AuthLocalGuard.name, () => {\n  let authLocalGuard: AuthLocalGuard\n  let authProvider: AuthProvider\n  let userTest: UserModel\n  let context: DeepMocked<ExecutionContext>\n\n  beforeAll(async () => {\n    const module: TestingModule = await Test.createTestingModule({\n      providers: [\n        AuthLocalGuard,\n        AuthLocalStrategy,\n        { provide: AuthProvider, useValue: {} },\n        {\n          provide: PinoLogger,\n          useValue: {\n            assign: () => undefined\n          }\n        }\n      ]\n    }).compile()\n\n    authLocalGuard = module.get<AuthLocalGuard>(AuthLocalGuard)\n    authProvider = module.get<AuthProvider>(AuthProvider)\n    userTest = new UserModel(generateUserTest(), false)\n    context = createMock<ExecutionContext>()\n  })\n\n  it('should be defined', () => {\n    expect(authLocalGuard).toBeDefined()\n    expect(authProvider).toBeDefined()\n    expect(userTest).toBeDefined()\n  })\n\n  it('should validate the user authentication', async () => {\n    authProvider.validateUser = jest.fn().mockReturnValueOnce(userTest)\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      body: {\n        login: userTest.login,\n        password: userTest.password\n      }\n    })\n    expect(await authLocalGuard.canActivate(context)).toBe(true)\n    expect(userTest.password).toBeUndefined()\n  })\n\n  it('should not validate the user authentication', async () => {\n    userTest.password = 'password'\n    authProvider.validateUser = jest.fn().mockReturnValueOnce(null)\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      body: {\n        login: userTest.login,\n        password: userTest.password\n      }\n    })\n    await expect(authLocalGuard.canActivate(context)).rejects.toThrow(/password/i)\n  })\n\n  it('should throw error due to malformed body', async () => {\n    authProvider.validateUser = jest.fn().mockReturnValueOnce(null)\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      body: null\n    })\n    await expect(authLocalGuard.canActivate(context)).rejects.toThrow()\n  })\n})\n"],"names":["describe","AuthLocalGuard","name","authLocalGuard","authProvider","userTest","context","beforeAll","module","Test","createTestingModule","providers","AuthLocalStrategy","provide","AuthProvider","useValue","PinoLogger","assign","undefined","compile","get","UserModel","generateUserTest","createMock","it","expect","toBeDefined","validateUser","jest","fn","mockReturnValueOnce","switchToHttp","getRequest","mockReturnValue","raw","user","body","login","password","canActivate","toBe","toBeUndefined","rejects","toThrow"],"mappings":";;;;wBAAuC;yBAEH;4BACT;2BACD;sBACO;qCACJ;gCACE;mCACG;AAElCA,SAASC,8BAAc,CAACC,IAAI,EAAE;IAC5B,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJC,UAAU;QACR,MAAMC,SAAwB,MAAMC,aAAI,CAACC,mBAAmB,CAAC;YAC3DC,WAAW;gBACTV,8BAAc;gBACdW,oCAAiB;gBACjB;oBAAEC,SAASC,iCAAY;oBAAEC,UAAU,CAAC;gBAAE;gBACtC;oBACEF,SAASG,sBAAU;oBACnBD,UAAU;wBACRE,QAAQ,IAAMC;oBAChB;gBACF;aACD;QACH,GAAGC,OAAO;QAEVhB,iBAAiBK,OAAOY,GAAG,CAAiBnB,8BAAc;QAC1DG,eAAeI,OAAOY,GAAG,CAAeN,iCAAY;QACpDT,WAAW,IAAIgB,oBAAS,CAACC,IAAAA,sBAAgB,KAAI;QAC7ChB,UAAUiB,IAAAA,kBAAU;IACtB;IAEAC,GAAG,qBAAqB;QACtBC,OAAOtB,gBAAgBuB,WAAW;QAClCD,OAAOrB,cAAcsB,WAAW;QAChCD,OAAOpB,UAAUqB,WAAW;IAC9B;IAEAF,GAAG,2CAA2C;QAC5CpB,aAAauB,YAAY,GAAGC,KAAKC,EAAE,GAAGC,mBAAmB,CAACzB;QAC1DC,QAAQyB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,MAAM;gBACJC,OAAOhC,SAASgC,KAAK;gBACrBC,UAAUjC,SAASiC,QAAQ;YAC7B;QACF;QACAb,OAAO,MAAMtB,eAAeoC,WAAW,CAACjC,UAAUkC,IAAI,CAAC;QACvDf,OAAOpB,SAASiC,QAAQ,EAAEG,aAAa;IACzC;IAEAjB,GAAG,+CAA+C;QAChDnB,SAASiC,QAAQ,GAAG;QACpBlC,aAAauB,YAAY,GAAGC,KAAKC,EAAE,GAAGC,mBAAmB,CAAC;QAC1DxB,QAAQyB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,MAAM;gBACJC,OAAOhC,SAASgC,KAAK;gBACrBC,UAAUjC,SAASiC,QAAQ;YAC7B;QACF;QACA,MAAMb,OAAOtB,eAAeoC,WAAW,CAACjC,UAAUoC,OAAO,CAACC,OAAO,CAAC;IACpE;IAEAnB,GAAG,4CAA4C;QAC7CpB,aAAauB,YAAY,GAAGC,KAAKC,EAAE,GAAGC,mBAAmB,CAAC;QAC1DxB,QAAQyB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,MAAM;QACR;QACA,MAAMX,OAAOtB,eAAeoC,WAAW,CAACjC,UAAUoC,OAAO,CAACC,OAAO;IACnE;AACF"}

package/server/authentication/guards/auth-local.strategy.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
@@ -16,7 +12,7 @@ const _common = require("@nestjs/common");
 const _passport = require("@nestjs/passport");
 const _nestjspino = require("nestjs-pino");
 const _passportlocal = require("passport-local");
-const _authmethod = require("../models/auth-method");
+const _authprovidersmodels = require("../providers/auth-providers.models");
 function _ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -33,26 +29,26 @@ let AuthLocalStrategy = class AuthLocalStrategy extends (0, _passport.PassportSt
         this.logger.assign({
             user: loginOrEmail
         });
-        const user = await this.authMethod.validateUser(loginOrEmail, password, req.ip);
+        const user = await this.authProvider.validateUser(loginOrEmail, password, req.ip);
         if (user) {
             user.removePassword();
             return user;
         }
         throw new _common.UnauthorizedException('Wrong login or password');
     }
-    constructor(authMethod, logger){
+    constructor(authProvider, logger){
         super({
             usernameField: 'login',
             passwordField: 'password',
             passReqToCallback: true
-        }), this.authMethod = authMethod, this.logger = logger;
+        }), this.authProvider = authProvider, this.logger = logger;
     }
 };
 AuthLocalStrategy = _ts_decorate([
     (0, _common.Injectable)(),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
-        typeof _authmethod.AuthMethod === "undefined" ? Object : _authmethod.AuthMethod,
+        typeof _authprovidersmodels.AuthProvider === "undefined" ? Object : _authprovidersmodels.AuthProvider,
         typeof _nestjspino.PinoLogger === "undefined" ? Object : _nestjspino.PinoLogger
     ])
 ], AuthLocalStrategy);

package/server/authentication/guards/auth-local.strategy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-local.strategy.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Injectable, UnauthorizedException } from '@nestjs/common'\nimport { AbstractStrategy, PassportStrategy } from '@nestjs/passport'\nimport type { FastifyRequest } from 'fastify'\nimport { PinoLogger } from 'nestjs-pino'\nimport { Strategy } from 'passport-local'\nimport type { UserModel } from '../../applications/users/models/user.model'\nimport { AuthMethod } from '../models/auth-method'\n\n@Injectable()\nexport class AuthLocalStrategy extends PassportStrategy(Strategy, 'local') implements AbstractStrategy {\n  constructor(\n    private readonly authMethod: AuthMethod,\n    private readonly logger: PinoLogger\n  ) {\n    super({ usernameField: 'login', passwordField: 'password', passReqToCallback: true })\n  }\n\n  async validate(req: FastifyRequest, loginOrEmail: string, password: string): Promise<UserModel> {\n    loginOrEmail = loginOrEmail.trim()\n    password = password.trim()\n    this.logger.assign({ user: loginOrEmail })\n    const user: UserModel = await this.authMethod.validateUser(loginOrEmail, password, req.ip)\n    if (user) {\n      user.removePassword()\n      return user\n    }\n    throw new UnauthorizedException('Wrong login or password')\n  }\n}\n"],"names":["AuthLocalStrategy","PassportStrategy","Strategy","validate","req","loginOrEmail","password","trim","logger","assign","user","authMethod","validateUser","ip","removePassword","UnauthorizedException","usernameField","passwordField","passReqToCallback"],"mappings":"AAAA;;;;CAIC;;;;+BAWYA;;;eAAAA;;;wBATqC;0BACC;4BAExB;+BACF;4BAEE;;;;;;;;;;AAGpB,IAAA,AAAMA,oBAAN,MAAMA,0BAA0BC,IAAAA,0BAAgB,EAACC,uBAAQ,EAAE;IAQhE,MAAMC,SAASC,GAAmB,EAAEC,YAAoB,EAAEC,QAAgB,EAAsB;QAC9FD,eAAeA,aAAaE,IAAI;QAChCD,WAAWA,SAASC,IAAI;QACxB,IAAI,CAACC,MAAM,CAACC,MAAM,CAAC;YAAEC,MAAML;QAAa;QACxC,MAAMK,OAAkB,MAAM,IAAI,CAACC,UAAU,CAACC,YAAY,CAACP,cAAcC,UAAUF,IAAIS,EAAE;QACzF,IAAIH,MAAM;YACRA,KAAKI,cAAc;YACnB,OAAOJ;QACT;QACA,MAAM,IAAIK,6BAAqB,CAAC;IAClC;IAjBA,YACE,AAAiBJ,UAAsB,EACvC,AAAiBH,MAAkB,CACnC;QACA,KAAK,CAAC;YAAEQ,eAAe;YAASC,eAAe;YAAYC,mBAAmB;QAAK,SAHlEP,aAAAA,iBACAH,SAAAA;IAGnB;AAaF"}
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-local.strategy.ts"],"sourcesContent":["import { Injectable, UnauthorizedException } from '@nestjs/common'\nimport { AbstractStrategy, PassportStrategy } from '@nestjs/passport'\nimport type { FastifyRequest } from 'fastify'\nimport { PinoLogger } from 'nestjs-pino'\nimport { Strategy } from 'passport-local'\nimport type { UserModel } from '../../applications/users/models/user.model'\nimport { AuthProvider } from '../providers/auth-providers.models'\n\n@Injectable()\nexport class AuthLocalStrategy extends PassportStrategy(Strategy, 'local') implements AbstractStrategy {\n  constructor(\n    private readonly authProvider: AuthProvider,\n    private readonly logger: PinoLogger\n  ) {\n    super({ usernameField: 'login', passwordField: 'password', passReqToCallback: true })\n  }\n\n  async validate(req: FastifyRequest, loginOrEmail: string, password: string): Promise<UserModel> {\n    loginOrEmail = loginOrEmail.trim()\n    password = password.trim()\n    this.logger.assign({ user: loginOrEmail })\n    const user: UserModel = await this.authProvider.validateUser(loginOrEmail, password, req.ip)\n    if (user) {\n      user.removePassword()\n      return user\n    }\n    throw new UnauthorizedException('Wrong login or password')\n  }\n}\n"],"names":["AuthLocalStrategy","PassportStrategy","Strategy","validate","req","loginOrEmail","password","trim","logger","assign","user","authProvider","validateUser","ip","removePassword","UnauthorizedException","usernameField","passwordField","passReqToCallback"],"mappings":";;;;+BASaA;;;eAAAA;;;wBATqC;0BACC;4BAExB;+BACF;qCAEI;;;;;;;;;;AAGtB,IAAA,AAAMA,oBAAN,MAAMA,0BAA0BC,IAAAA,0BAAgB,EAACC,uBAAQ,EAAE;IAQhE,MAAMC,SAASC,GAAmB,EAAEC,YAAoB,EAAEC,QAAgB,EAAsB;QAC9FD,eAAeA,aAAaE,IAAI;QAChCD,WAAWA,SAASC,IAAI;QACxB,IAAI,CAACC,MAAM,CAACC,MAAM,CAAC;YAAEC,MAAML;QAAa;QACxC,MAAMK,OAAkB,MAAM,IAAI,CAACC,YAAY,CAACC,YAAY,CAACP,cAAcC,UAAUF,IAAIS,EAAE;QAC3F,IAAIH,MAAM;YACRA,KAAKI,cAAc;YACnB,OAAOJ;QACT;QACA,MAAM,IAAIK,6BAAqB,CAAC;IAClC;IAjBA,YACE,AAAiBJ,YAA0B,EAC3C,AAAiBH,MAAkB,CACnC;QACA,KAAK,CAAC;YAAEQ,eAAe;YAASC,eAAe;YAAYC,mBAAmB;QAAK,SAHlEP,eAAAA,mBACAH,SAAAA;IAGnB;AAaF"}

package/server/authentication/guards/auth-token-access.guard.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });

package/server/authentication/guards/auth-token-access.guard.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-token-access.guard.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { ExecutionContext, Injectable, Logger } from '@nestjs/common'\nimport { Reflector } from '@nestjs/core'\nimport { AuthGuard, IAuthGuard } from '@nestjs/passport'\nimport { COLLABORA_CONTEXT } from '../../applications/files/modules/collabora-online/collabora-online.constants'\nimport { ONLY_OFFICE_CONTEXT } from '../../applications/files/modules/only-office/only-office.constants'\nimport { WEB_DAV_CONTEXT } from '../../applications/webdav/decorators/webdav-context.decorator'\nimport { AUTH_TOKEN_SKIP } from '../decorators/auth-token-skip.decorator'\n\n@Injectable()\nexport class AuthTokenAccessGuard extends AuthGuard('tokenAccess') implements IAuthGuard {\n  private readonly logger = new Logger(AuthTokenAccessGuard.name)\n\n  constructor(private readonly reflector: Reflector) {\n    super()\n  }\n\n  canActivate(ctx: ExecutionContext) {\n    const authTokenSkip: boolean = this.reflector.getAllAndOverride<boolean>(AUTH_TOKEN_SKIP, [ctx.getHandler(), ctx.getClass()])\n    const webDAVContext: boolean = this.reflector.getAllAndOverride<boolean>(WEB_DAV_CONTEXT, [ctx.getHandler(), ctx.getClass()])\n    const onlyOfficeContext: boolean = this.reflector.getAllAndOverride<boolean>(ONLY_OFFICE_CONTEXT, [ctx.getHandler(), ctx.getClass()])\n    const collaboraOnlineContext: boolean = this.reflector.getAllAndOverride<boolean>(COLLABORA_CONTEXT, [ctx.getHandler(), ctx.getClass()])\n    return authTokenSkip || webDAVContext || onlyOfficeContext || collaboraOnlineContext || super.canActivate(ctx)\n  }\n\n  handleRequest<TUser = any>(err: any, user: any, info: Error, ctx: ExecutionContext, status?: any): TUser {\n    const req = this.getRequest(ctx)\n    req.raw.user = user?.login || 'unauthorized'\n    if (info) {\n      this.logger.warn(`<${req.raw.user}> <${req.ip}> ${info}`)\n    }\n    return super.handleRequest(err, user, info, ctx, status)\n  }\n}\n"],"names":["AuthTokenAccessGuard","AuthGuard","canActivate","ctx","authTokenSkip","reflector","getAllAndOverride","AUTH_TOKEN_SKIP","getHandler","getClass","webDAVContext","WEB_DAV_CONTEXT","onlyOfficeContext","ONLY_OFFICE_CONTEXT","collaboraOnlineContext","COLLABORA_CONTEXT","handleRequest","err","user","info","status","req","getRequest","raw","login","logger","warn","ip","Logger","name"],"mappings":"AAAA;;;;CAIC;;;;+BAWYA;;;eAAAA;;;wBATwC;sBAC3B;0BACY;0CACJ;qCACE;wCACJ;wCACA;;;;;;;;;;AAGzB,IAAA,AAAMA,uBAAN,MAAMA,6BAA6BC,IAAAA,mBAAS,EAAC;IAOlDC,YAAYC,GAAqB,EAAE;QACjC,MAAMC,gBAAyB,IAAI,CAACC,SAAS,CAACC,iBAAiB,CAAUC,uCAAe,EAAE;YAACJ,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QAC5H,MAAMC,gBAAyB,IAAI,CAACL,SAAS,CAACC,iBAAiB,CAAUK,uCAAe,EAAE;YAACR,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QAC5H,MAAMG,oBAA6B,IAAI,CAACP,SAAS,CAACC,iBAAiB,CAAUO,wCAAmB,EAAE;YAACV,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QACpI,MAAMK,yBAAkC,IAAI,CAACT,SAAS,CAACC,iBAAiB,CAAUS,2CAAiB,EAAE;YAACZ,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QACvI,OAAOL,iBAAiBM,iBAAiBE,qBAAqBE,0BAA0B,KAAK,CAACZ,YAAYC;IAC5G;IAEAa,cAA2BC,GAAQ,EAAEC,IAAS,EAAEC,IAAW,EAAEhB,GAAqB,EAAEiB,MAAY,EAAS;QACvG,MAAMC,MAAM,IAAI,CAACC,UAAU,CAACnB;QAC5BkB,IAAIE,GAAG,CAACL,IAAI,GAAGA,MAAMM,SAAS;QAC9B,IAAIL,MAAM;YACR,IAAI,CAACM,MAAM,CAACC,IAAI,CAAC,CAAC,CAAC,EAAEL,IAAIE,GAAG,CAACL,IAAI,CAAC,GAAG,EAAEG,IAAIM,EAAE,CAAC,EAAE,EAAER,MAAM;QAC1D;QACA,OAAO,KAAK,CAACH,cAAcC,KAAKC,MAAMC,MAAMhB,KAAKiB;IACnD;IAnBA,YAAY,AAAiBf,SAAoB,CAAE;QACjD,KAAK,SADsBA,YAAAA,gBAFZoB,SAAS,IAAIG,cAAM,CAAC5B,qBAAqB6B,IAAI;IAI9D;AAkBF"}
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-token-access.guard.ts"],"sourcesContent":["import { ExecutionContext, Injectable, Logger } from '@nestjs/common'\nimport { Reflector } from '@nestjs/core'\nimport { AuthGuard, IAuthGuard } from '@nestjs/passport'\nimport { COLLABORA_CONTEXT } from '../../applications/files/modules/collabora-online/collabora-online.constants'\nimport { ONLY_OFFICE_CONTEXT } from '../../applications/files/modules/only-office/only-office.constants'\nimport { WEB_DAV_CONTEXT } from '../../applications/webdav/decorators/webdav-context.decorator'\nimport { AUTH_TOKEN_SKIP } from '../decorators/auth-token-skip.decorator'\n\n@Injectable()\nexport class AuthTokenAccessGuard extends AuthGuard('tokenAccess') implements IAuthGuard {\n  private readonly logger = new Logger(AuthTokenAccessGuard.name)\n\n  constructor(private readonly reflector: Reflector) {\n    super()\n  }\n\n  canActivate(ctx: ExecutionContext) {\n    const authTokenSkip: boolean = this.reflector.getAllAndOverride<boolean>(AUTH_TOKEN_SKIP, [ctx.getHandler(), ctx.getClass()])\n    const webDAVContext: boolean = this.reflector.getAllAndOverride<boolean>(WEB_DAV_CONTEXT, [ctx.getHandler(), ctx.getClass()])\n    const onlyOfficeContext: boolean = this.reflector.getAllAndOverride<boolean>(ONLY_OFFICE_CONTEXT, [ctx.getHandler(), ctx.getClass()])\n    const collaboraOnlineContext: boolean = this.reflector.getAllAndOverride<boolean>(COLLABORA_CONTEXT, [ctx.getHandler(), ctx.getClass()])\n    return authTokenSkip || webDAVContext || onlyOfficeContext || collaboraOnlineContext || super.canActivate(ctx)\n  }\n\n  handleRequest<TUser = any>(err: any, user: any, info: Error, ctx: ExecutionContext, status?: any): TUser {\n    const req = this.getRequest(ctx)\n    req.raw.user = user?.login || 'unauthorized'\n    if (info) {\n      this.logger.warn(`<${req.raw.user}> <${req.ip}> ${info}`)\n    }\n    return super.handleRequest(err, user, info, ctx, status)\n  }\n}\n"],"names":["AuthTokenAccessGuard","AuthGuard","canActivate","ctx","authTokenSkip","reflector","getAllAndOverride","AUTH_TOKEN_SKIP","getHandler","getClass","webDAVContext","WEB_DAV_CONTEXT","onlyOfficeContext","ONLY_OFFICE_CONTEXT","collaboraOnlineContext","COLLABORA_CONTEXT","handleRequest","err","user","info","status","req","getRequest","raw","login","logger","warn","ip","Logger","name"],"mappings":";;;;+BASaA;;;eAAAA;;;wBATwC;sBAC3B;0BACY;0CACJ;qCACE;wCACJ;wCACA;;;;;;;;;;AAGzB,IAAA,AAAMA,uBAAN,MAAMA,6BAA6BC,IAAAA,mBAAS,EAAC;IAOlDC,YAAYC,GAAqB,EAAE;QACjC,MAAMC,gBAAyB,IAAI,CAACC,SAAS,CAACC,iBAAiB,CAAUC,uCAAe,EAAE;YAACJ,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QAC5H,MAAMC,gBAAyB,IAAI,CAACL,SAAS,CAACC,iBAAiB,CAAUK,uCAAe,EAAE;YAACR,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QAC5H,MAAMG,oBAA6B,IAAI,CAACP,SAAS,CAACC,iBAAiB,CAAUO,wCAAmB,EAAE;YAACV,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QACpI,MAAMK,yBAAkC,IAAI,CAACT,SAAS,CAACC,iBAAiB,CAAUS,2CAAiB,EAAE;YAACZ,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QACvI,OAAOL,iBAAiBM,iBAAiBE,qBAAqBE,0BAA0B,KAAK,CAACZ,YAAYC;IAC5G;IAEAa,cAA2BC,GAAQ,EAAEC,IAAS,EAAEC,IAAW,EAAEhB,GAAqB,EAAEiB,MAAY,EAAS;QACvG,MAAMC,MAAM,IAAI,CAACC,UAAU,CAACnB;QAC5BkB,IAAIE,GAAG,CAACL,IAAI,GAAGA,MAAMM,SAAS;QAC9B,IAAIL,MAAM;YACR,IAAI,CAACM,MAAM,CAACC,IAAI,CAAC,CAAC,CAAC,EAAEL,IAAIE,GAAG,CAACL,IAAI,CAAC,GAAG,EAAEG,IAAIM,EAAE,CAAC,EAAE,EAAER,MAAM;QAC1D;QACA,OAAO,KAAK,CAACH,cAAcC,KAAKC,MAAMC,MAAMhB,KAAKiB;IACnD;IAnBA,YAAY,AAAiBf,SAAoB,CAAE;QACjD,KAAK,SADsBA,YAAAA,gBAFZoB,SAAS,IAAIG,cAAM,CAAC5B,qBAAqB6B,IAAI;IAI9D;AAkBF"}

package/server/authentication/guards/auth-token-access.guard.spec.js

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
@@ -18,11 +14,11 @@ const _nodecrypto = /*#__PURE__*/ _interop_require_default(require("node:crypto"
 const _usersmanagerservice = require("../../applications/users/services/users-manager.service");
 const _webdavcontextdecorator = require("../../applications/webdav/decorators/webdav-context.decorator");
 const _configenvironment = require("../../configuration/config.environment");
+const _authservice = require("../auth.service");
 const _auth = require("../constants/auth");
 const _authtokenoptionaldecorator = require("../decorators/auth-token-optional.decorator");
 const _authtokenskipdecorator = require("../decorators/auth-token-skip.decorator");
 const _tokeninterface = require("../interfaces/token.interface");
-const _authmanagerservice = require("../services/auth-manager.service");
 const _authanonymousguard = require("./auth-anonymous.guard");
 const _authanonymousstrategy = require("./auth-anonymous.strategy");
 const _authtokenaccessguard = require("./auth-token-access.guard");
@@ -61,7 +57,7 @@ describe(_authtokenaccessguard.AuthTokenAccessGuard.name, ()=>{
                 _authtokenaccessstrategy.AuthTokenAccessStrategy,
                 _authanonymousstrategy.AuthAnonymousStrategy,
                 _authanonymousguard.AuthAnonymousGuard,
-                _authmanagerservice.AuthManager,
+                _authservice.AuthManager,
                 {
                     provide: _usersmanagerservice.UsersManager,
                     useValue: {}