@sync-in/server 1.3.0

package/server/authentication/auth.config.js

@@ -0,0 +1,223 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get AuthConfig () {
+        return AuthConfig;
+    },
+    get AuthMethodLdapConfig () {
+        return AuthMethodLdapConfig;
+    },
+    get AuthTokenAccessConfig () {
+        return AuthTokenAccessConfig;
+    },
+    get AuthTokenConfig () {
+        return AuthTokenConfig;
+    },
+    get AuthTokenCsrfConfig () {
+        return AuthTokenCsrfConfig;
+    },
+    get AuthTokenRefreshConfig () {
+        return AuthTokenRefreshConfig;
+    },
+    get AuthTokenWSConfig () {
+        return AuthTokenWSConfig;
+    }
+});
+const _classtransformer = require("class-transformer");
+const _classvalidator = require("class-validator");
+const _auth = require("./constants/auth");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let AuthTokenAccessConfig = class AuthTokenAccessConfig {
+    constructor(){
+        this.name = 'sync-in-access';
+        this.expiration = '30m';
+        this.cookieMaxAge = '30m';
+    }
+};
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)()
+], AuthTokenAccessConfig.prototype, "name", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], AuthTokenAccessConfig.prototype, "secret", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)()
+], AuthTokenAccessConfig.prototype, "expiration", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsString)()
+], AuthTokenAccessConfig.prototype, "cookieMaxAge", void 0);
+let AuthTokenRefreshConfig = class AuthTokenRefreshConfig {
+    constructor(){
+        this.name = 'sync-in-refresh';
+        this.expiration = '4h';
+        this.cookieMaxAge = '4h';
+    }
+};
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)()
+], AuthTokenRefreshConfig.prototype, "name", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], AuthTokenRefreshConfig.prototype, "secret", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)()
+], AuthTokenRefreshConfig.prototype, "expiration", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsString)()
+], AuthTokenRefreshConfig.prototype, "cookieMaxAge", void 0);
+let AuthTokenCsrfConfig = class AuthTokenCsrfConfig extends AuthTokenRefreshConfig {
+    constructor(...args){
+        super(...args), this.name = _auth.CSRF_KEY;
+    }
+};
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], AuthTokenCsrfConfig.prototype, "name", void 0);
+let AuthTokenWSConfig = class AuthTokenWSConfig extends AuthTokenRefreshConfig {
+    constructor(...args){
+        super(...args), this.name = _auth.WS_KEY;
+    }
+};
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], AuthTokenWSConfig.prototype, "name", void 0);
+let AuthTokenConfig = class AuthTokenConfig {
+};
+_ts_decorate([
+    (0, _classvalidator.IsDefined)(),
+    (0, _classvalidator.IsNotEmptyObject)(),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>AuthTokenAccessConfig),
+    _ts_metadata("design:type", typeof AuthTokenAccessConfig === "undefined" ? Object : AuthTokenAccessConfig)
+], AuthTokenConfig.prototype, "access", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsDefined)(),
+    (0, _classvalidator.IsNotEmptyObject)(),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>AuthTokenRefreshConfig),
+    _ts_metadata("design:type", typeof AuthTokenRefreshConfig === "undefined" ? Object : AuthTokenRefreshConfig)
+], AuthTokenConfig.prototype, "refresh", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsDefined)(),
+    (0, _classvalidator.IsNotEmptyObject)(),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>AuthTokenCsrfConfig),
+    _ts_metadata("design:type", typeof AuthTokenCsrfConfig === "undefined" ? Object : AuthTokenCsrfConfig)
+], AuthTokenConfig.prototype, "csrf", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsDefined)(),
+    (0, _classvalidator.IsNotEmptyObject)(),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>AuthTokenWSConfig),
+    _ts_metadata("design:type", typeof AuthTokenWSConfig === "undefined" ? Object : AuthTokenWSConfig)
+], AuthTokenConfig.prototype, "ws", void 0);
+let AuthMethodLdapConfig = class AuthMethodLdapConfig {
+    constructor(){
+        this.loginAttribute = 'uid';
+    }
+};
+_ts_decorate([
+    (0, _classtransformer.Transform)(({ value })=>Array.isArray(value) ? value.filter((v)=>Boolean(v)) : value),
+    (0, _classvalidator.ArrayNotEmpty)(),
+    (0, _classvalidator.IsArray)(),
+    (0, _classvalidator.IsString)({
+        each: true
+    }),
+    _ts_metadata("design:type", Array)
+], AuthMethodLdapConfig.prototype, "servers", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], AuthMethodLdapConfig.prototype, "baseDN", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], AuthMethodLdapConfig.prototype, "filter", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsIn)([
+        'uid',
+        'mail'
+    ])
+], AuthMethodLdapConfig.prototype, "loginAttribute", void 0);
+let AuthConfig = class AuthConfig {
+    constructor(){
+        this.method = 'mysql';
+        this.sameSite = 'strict';
+    }
+};
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsIn)([
+        'mysql',
+        'ldap'
+    ]),
+    _ts_metadata("design:type", String)
+], AuthConfig.prototype, "method", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsIn)([
+        'lax',
+        'strict'
+    ]),
+    _ts_metadata("design:type", String)
+], AuthConfig.prototype, "sameSite", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsDefined)(),
+    (0, _classvalidator.IsNotEmptyObject)(),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>AuthTokenConfig),
+    _ts_metadata("design:type", typeof AuthTokenConfig === "undefined" ? Object : AuthTokenConfig)
+], AuthConfig.prototype, "token", void 0);
+_ts_decorate([
+    (0, _classvalidator.ValidateIf)((o)=>o.method === 'ldap'),
+    (0, _classvalidator.IsDefined)(),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>AuthMethodLdapConfig),
+    _ts_metadata("design:type", typeof AuthMethodLdapConfig === "undefined" ? Object : AuthMethodLdapConfig)
+], AuthConfig.prototype, "ldap", void 0);
+
+//# sourceMappingURL=auth.config.js.map

package/server/authentication/auth.config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../backend/src/authentication/auth.config.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Transform, Type } from 'class-transformer'\nimport {\n  ArrayNotEmpty,\n  IsArray,\n  IsDefined,\n  IsIn,\n  IsNotEmpty,\n  IsNotEmptyObject,\n  IsObject,\n  IsOptional,\n  IsString,\n  ValidateIf,\n  ValidateNested\n} from 'class-validator'\nimport { CSRF_KEY, WS_KEY } from './constants/auth'\n\nexport class AuthTokenAccessConfig {\n  @IsString()\n  @IsNotEmpty()\n  name = 'sync-in-access'\n\n  @IsString()\n  @IsNotEmpty()\n  secret: string\n\n  @IsString()\n  @IsNotEmpty()\n  expiration = '30m'\n\n  @IsNotEmpty()\n  @IsString()\n  cookieMaxAge = '30m'\n}\n\nexport class AuthTokenRefreshConfig {\n  @IsString()\n  @IsNotEmpty()\n  name = 'sync-in-refresh'\n\n  @IsString()\n  @IsNotEmpty()\n  secret: string\n\n  @IsString()\n  @IsNotEmpty()\n  expiration = '4h'\n\n  @IsNotEmpty()\n  @IsString()\n  cookieMaxAge = '4h'\n}\n\nexport class AuthTokenCsrfConfig extends AuthTokenRefreshConfig {\n  @IsString()\n  @IsNotEmpty()\n  override name: string = CSRF_KEY\n}\n\nexport class AuthTokenWSConfig extends AuthTokenRefreshConfig {\n  @IsString()\n  @IsNotEmpty()\n  override name: string = WS_KEY\n}\n\nexport class AuthTokenConfig {\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenAccessConfig)\n  access: AuthTokenAccessConfig\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenRefreshConfig)\n  refresh: AuthTokenRefreshConfig\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenCsrfConfig)\n  csrf: AuthTokenCsrfConfig\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenWSConfig)\n  ws: AuthTokenWSConfig\n}\n\nexport class AuthMethodLdapConfig {\n  @Transform(({ value }) => (Array.isArray(value) ? value.filter((v: string) => Boolean(v)) : value))\n  @ArrayNotEmpty()\n  @IsArray()\n  @IsString({ each: true })\n  servers: string[]\n\n  @IsString()\n  @IsNotEmpty()\n  baseDN: string\n\n  @IsOptional()\n  @IsString()\n  filter?: string\n\n  @IsString()\n  @IsNotEmpty()\n  @IsIn(['uid', 'mail'])\n  loginAttribute = 'uid'\n}\n\nexport class AuthConfig {\n  @IsString()\n  @IsIn(['mysql', 'ldap'])\n  method: 'mysql' | 'ldap' = 'mysql'\n\n  @IsString()\n  @IsIn(['lax', 'strict'])\n  sameSite: 'lax' | 'strict' = 'strict'\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenConfig)\n  token: AuthTokenConfig\n\n  @ValidateIf((o: AuthConfig) => o.method === 'ldap')\n  @IsDefined()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthMethodLdapConfig)\n  ldap: AuthMethodLdapConfig\n}\n"],"names":["AuthConfig","AuthMethodLdapConfig","AuthTokenAccessConfig","AuthTokenConfig","AuthTokenCsrfConfig","AuthTokenRefreshConfig","AuthTokenWSConfig","name","expiration","cookieMaxAge","CSRF_KEY","WS_KEY","loginAttribute","value","Array","isArray","filter","v","Boolean","each","method","sameSite","o"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAqHYA;eAAAA;;QArBAC;eAAAA;;QA9EAC;eAAAA;;QAgDAC;eAAAA;;QAZAC;eAAAA;;QAlBAC;eAAAA;;QAwBAC;eAAAA;;;kCA1DmB;gCAazB;sBAC0B;;;;;;;;;;AAE1B,IAAA,AAAMJ,wBAAN,MAAMA;;aAGXK,OAAO;aAQPC,aAAa;aAIbC,eAAe;;AACjB;;;;;;;;;;;;;;;;;;AAEO,IAAA,AAAMJ,yBAAN,MAAMA;;aAGXE,OAAO;aAQPC,aAAa;aAIbC,eAAe;;AACjB;;;;;;;;;;;;;;;;;;AAEO,IAAA,AAAML,sBAAN,MAAMA,4BAA4BC;;QAAlC,qBAGIE,OAAeG,cAAQ;;AAClC;;;;;;AAEO,IAAA,AAAMJ,oBAAN,MAAMA,0BAA0BD;;QAAhC,qBAGIE,OAAeI,YAAM;;AAChC;;;;;;AAEO,IAAA,AAAMR,kBAAN,MAAMA;AA4Bb;;;;;;oCAvBcD;;;;;;;;oCAOAG;;;;;;;;oCAOAD;;;;;;;;oCAOAE;;;AAIP,IAAA,AAAML,uBAAN,MAAMA;;aAkBXW,iBAAiB;;AACnB;;sCAlBc,EAAEC,KAAK,EAAE,GAAMC,MAAMC,OAAO,CAACF,SAASA,MAAMG,MAAM,CAAC,CAACC,IAAcC,QAAQD,MAAMJ;;;;QAGhFM,MAAM;;;;;;;;;;;;;;;;;;QAaX;QAAO;;;AAIT,IAAA,AAAMnB,aAAN,MAAMA;;aAGXoB,SAA2B;aAI3BC,WAA6B;;AAe/B;;;;QApBS;QAAS;;;;;;;QAIT;QAAO;;;;;;;;;oCAOFlB;;;;qCAGCmB,IAAkBA,EAAEF,MAAM,KAAK;;;;oCAIhCnB"}

package/server/authentication/auth.controller.js

@@ -0,0 +1,126 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "AuthController", {
+    enumerable: true,
+    get: function() {
+        return AuthController;
+    }
+});
+const _common = require("@nestjs/common");
+const _fastify = require("fastify");
+const _userdecorator = require("../applications/users/decorators/user.decorator");
+const _usermodel = require("../applications/users/models/user.model");
+const _routes = require("./constants/routes");
+const _authtokenskipdecorator = require("./decorators/auth-token-skip.decorator");
+const _authlocalguard = require("./guards/auth-local.guard");
+const _authtokenrefreshguard = require("./guards/auth-token-refresh.guard");
+const _authmanagerservice = require("./services/auth-manager.service");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+let AuthController = class AuthController {
+    login(user, res) {
+        return this.auth.setCookies(user, res);
+    }
+    logout(res) {
+        return this.auth.clearCookies(res);
+    }
+    refreshCookies(user, res) {
+        return this.auth.refreshCookies(user, res);
+    }
+    token(user) {
+        return this.auth.getTokens(user);
+    }
+    refreshToken(user) {
+        return this.auth.getTokens(user, true);
+    }
+    constructor(auth){
+        this.auth = auth;
+    }
+};
+_ts_decorate([
+    (0, _common.Post)(_routes.AUTH_ROUTE.LOGIN),
+    (0, _common.UseGuards)(_authlocalguard.AuthLocalGuard),
+    _ts_param(0, (0, _userdecorator.GetUser)()),
+    _ts_param(1, (0, _common.Res)({
+        passthrough: true
+    })),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _usermodel.UserModel === "undefined" ? Object : _usermodel.UserModel,
+        typeof _fastify.FastifyReply === "undefined" ? Object : _fastify.FastifyReply
+    ]),
+    _ts_metadata("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AuthController.prototype, "login", null);
+_ts_decorate([
+    (0, _common.Post)(_routes.AUTH_ROUTE.LOGOUT),
+    _ts_param(0, (0, _common.Res)({
+        passthrough: true
+    })),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _fastify.FastifyReply === "undefined" ? Object : _fastify.FastifyReply
+    ]),
+    _ts_metadata("design:returntype", void 0)
+], AuthController.prototype, "logout", null);
+_ts_decorate([
+    (0, _common.Post)(_routes.AUTH_ROUTE.REFRESH),
+    (0, _common.UseGuards)(_authtokenrefreshguard.AuthTokenRefreshGuard),
+    _ts_param(0, (0, _userdecorator.GetUser)()),
+    _ts_param(1, (0, _common.Res)({
+        passthrough: true
+    })),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _usermodel.UserModel === "undefined" ? Object : _usermodel.UserModel,
+        typeof _fastify.FastifyReply === "undefined" ? Object : _fastify.FastifyReply
+    ]),
+    _ts_metadata("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AuthController.prototype, "refreshCookies", null);
+_ts_decorate([
+    (0, _common.Post)(_routes.AUTH_ROUTE.TOKEN),
+    (0, _common.UseGuards)(_authlocalguard.AuthLocalGuard),
+    _ts_param(0, (0, _userdecorator.GetUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _usermodel.UserModel === "undefined" ? Object : _usermodel.UserModel
+    ]),
+    _ts_metadata("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AuthController.prototype, "token", null);
+_ts_decorate([
+    (0, _common.Post)(_routes.AUTH_ROUTE.TOKEN_REFRESH),
+    (0, _common.UseGuards)(_authtokenrefreshguard.AuthTokenRefreshGuard),
+    _ts_param(0, (0, _userdecorator.GetUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _usermodel.UserModel === "undefined" ? Object : _usermodel.UserModel
+    ]),
+    _ts_metadata("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AuthController.prototype, "refreshToken", null);
+AuthController = _ts_decorate([
+    (0, _common.Controller)(_routes.AUTH_ROUTE.BASE),
+    (0, _authtokenskipdecorator.AuthTokenSkip)(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _authmanagerservice.AuthManager === "undefined" ? Object : _authmanagerservice.AuthManager
+    ])
+], AuthController);
+
+//# sourceMappingURL=auth.controller.js.map

package/server/authentication/auth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../backend/src/authentication/auth.controller.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Controller, Post, Res, UseGuards } from '@nestjs/common'\nimport { FastifyReply } from 'fastify'\nimport { GetUser } from '../applications/users/decorators/user.decorator'\nimport { UserModel } from '../applications/users/models/user.model'\nimport { AUTH_ROUTE } from './constants/routes'\nimport { AuthTokenSkip } from './decorators/auth-token-skip.decorator'\nimport { LoginResponseDto } from './dto/login-response.dto'\nimport { TokenResponseDto } from './dto/token-response.dto'\nimport { AuthLocalGuard } from './guards/auth-local.guard'\nimport { AuthTokenRefreshGuard } from './guards/auth-token-refresh.guard'\nimport { AuthManager } from './services/auth-manager.service'\n\n@Controller(AUTH_ROUTE.BASE)\n@AuthTokenSkip()\nexport class AuthController {\n  constructor(private readonly auth: AuthManager) {}\n\n  @Post(AUTH_ROUTE.LOGIN)\n  @UseGuards(AuthLocalGuard)\n  login(@GetUser() user: UserModel, @Res({ passthrough: true }) res: FastifyReply): Promise<LoginResponseDto> {\n    return this.auth.setCookies(user, res)\n  }\n\n  @Post(AUTH_ROUTE.LOGOUT)\n  logout(@Res({ passthrough: true }) res: FastifyReply) {\n    return this.auth.clearCookies(res)\n  }\n\n  @Post(AUTH_ROUTE.REFRESH)\n  @UseGuards(AuthTokenRefreshGuard)\n  refreshCookies(@GetUser() user: UserModel, @Res({ passthrough: true }) res: FastifyReply): Promise<TokenResponseDto> {\n    return this.auth.refreshCookies(user, res)\n  }\n\n  @Post(AUTH_ROUTE.TOKEN)\n  @UseGuards(AuthLocalGuard)\n  token(@GetUser() user: UserModel): Promise<TokenResponseDto> {\n    return this.auth.getTokens(user)\n  }\n\n  @Post(AUTH_ROUTE.TOKEN_REFRESH)\n  @UseGuards(AuthTokenRefreshGuard)\n  refreshToken(@GetUser() user: UserModel): Promise<TokenResponseDto> {\n    return this.auth.getTokens(user, true)\n  }\n}\n"],"names":["AuthController","login","user","res","auth","setCookies","logout","clearCookies","refreshCookies","token","getTokens","refreshToken","LOGIN","passthrough","LOGOUT","REFRESH","TOKEN","TOKEN_REFRESH","BASE"],"mappings":"AAAA;;;;CAIC;;;;+BAgBYA;;;eAAAA;;;wBAdoC;yBACpB;+BACL;2BACE;wBACC;wCACG;gCAGC;uCACO;oCACV;;;;;;;;;;;;;;;AAIrB,IAAA,AAAMA,iBAAN,MAAMA;IAKXC,MAAM,AAAWC,IAAe,EAAE,AAA4BC,GAAiB,EAA6B;QAC1G,OAAO,IAAI,CAACC,IAAI,CAACC,UAAU,CAACH,MAAMC;IACpC;IAGAG,OAAO,AAA4BH,GAAiB,EAAE;QACpD,OAAO,IAAI,CAACC,IAAI,CAACG,YAAY,CAACJ;IAChC;IAIAK,eAAe,AAAWN,IAAe,EAAE,AAA4BC,GAAiB,EAA6B;QACnH,OAAO,IAAI,CAACC,IAAI,CAACI,cAAc,CAACN,MAAMC;IACxC;IAIAM,MAAM,AAAWP,IAAe,EAA6B;QAC3D,OAAO,IAAI,CAACE,IAAI,CAACM,SAAS,CAACR;IAC7B;IAIAS,aAAa,AAAWT,IAAe,EAA6B;QAClE,OAAO,IAAI,CAACE,IAAI,CAACM,SAAS,CAACR,MAAM;IACnC;IA7BA,YAAY,AAAiBE,IAAiB,CAAE;aAAnBA,OAAAA;IAAoB;AA8BnD;;yCA5BmBQ;;;;QAEwBC,aAAa;;;;;;;;;;yCAIrCC;;QACHD,aAAa;;;;;;;;;yCAIVE;;;;QAEiCF,aAAa;;;;;;;;;;yCAI9CG;;;;;;;;;;yCAMAC;;;;;;;;;;+CA5BIC"}

package/server/authentication/auth.controller.spec.js

@@ -0,0 +1,132 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+const _config = require("@nestjs/config");
+const _jwt = require("@nestjs/jwt");
+const _passport = require("@nestjs/passport");
+const _testing = require("@nestjs/testing");
+const _usermodel = require("../applications/users/models/user.model");
+const _test = require("../applications/users/utils/test");
+const _functions = require("../common/functions");
+const _shared = require("../common/shared");
+const _configenvironment = require("../configuration/config.environment");
+const _cacheservice = require("../infrastructure/cache/services/cache.service");
+const _constants = require("../infrastructure/database/constants");
+const _authcontroller = require("./auth.controller");
+const _loginresponsedto = require("./dto/login-response.dto");
+const _tokeninterface = require("./interfaces/token.interface");
+const _authmanagerservice = require("./services/auth-manager.service");
+describe(_authcontroller.AuthController.name, ()=>{
+    let module;
+    let authController;
+    let authConfig;
+    let userTest;
+    beforeAll(async ()=>{
+        module = await _testing.Test.createTestingModule({
+            imports: [
+                await _config.ConfigModule.forRoot({
+                    load: [
+                        _configenvironment.exportConfiguration
+                    ],
+                    isGlobal: true
+                }),
+                _passport.PassportModule
+            ],
+            controllers: [
+                _authcontroller.AuthController
+            ],
+            providers: [
+                _config.ConfigService,
+                _authmanagerservice.AuthManager,
+                _jwt.JwtService,
+                {
+                    provide: _constants.DB_TOKEN_PROVIDER,
+                    useValue: {}
+                },
+                {
+                    provide: _cacheservice.Cache,
+                    useValue: {}
+                }
+            ]
+        }).compile();
+        module.useLogger([
+            'fatal'
+        ]);
+        authConfig = module.get(_config.ConfigService).get('auth');
+        authController = module.get(_authcontroller.AuthController);
+        userTest = new _usermodel.UserModel({
+            ...(0, _test.generateUserTest)(),
+            id: 888
+        }, false);
+    });
+    afterAll(async ()=>{
+        await module.close();
+    });
+    it('should be defined', ()=>{
+        expect(authConfig).toBeDefined();
+        expect(authController).toBeDefined();
+        expect(userTest).toBeDefined();
+    });
+    it('should set JWT in cookies', async ()=>{
+        const res = {
+            setCookie: jest.fn()
+        };
+        const result = await authController.login(userTest, res);
+        expect(result).toBeDefined();
+        expect(result).toBeInstanceOf(_loginresponsedto.LoginResponseDto);
+        expect(res.setCookie).toHaveBeenCalledTimes(4);
+        expect(result.token.access_expiration).toBeCloseTo((0, _functions.convertHumanTimeToSeconds)(authConfig.token.access.expiration) + (0, _shared.currentTimeStamp)(), -1);
+        expect(result.token.refresh_expiration).toBeCloseTo((0, _functions.convertHumanTimeToSeconds)(authConfig.token.refresh.expiration) + (0, _shared.currentTimeStamp)(), -1);
+    });
+    it('should clear JWT in cookies', async ()=>{
+        const res = {
+            clearCookie: jest.fn()
+        };
+        await expect(authController.logout(res)).resolves.not.toThrow();
+        expect(res.clearCookie).toHaveBeenCalledTimes(4);
+    });
+    it('should refresh JWT in cookies', async ()=>{
+        userTest.exp = (0, _shared.currentTimeStamp)() + (0, _functions.convertHumanTimeToSeconds)('30s');
+        const res = {
+            setCookie: jest.fn()
+        };
+        const result = await authController.refreshCookies(userTest, res);
+        expect(result).toBeDefined();
+        expect(res.setCookie).toHaveBeenCalledTimes(4);
+        expect(result.access_expiration).toBeCloseTo((0, _functions.convertHumanTimeToSeconds)(authConfig.token.access.expiration) + (0, _shared.currentTimeStamp)(), -1);
+        expect(result.refresh_expiration).toBe(userTest.exp);
+    });
+    it('should not refresh JWT in cookies', async ()=>{
+        userTest.exp = (0, _shared.currentTimeStamp)() - 1;
+        const res = {
+            setCookie: jest.fn()
+        };
+        await expect(authController.refreshCookies(userTest, res)).rejects.toThrow();
+    });
+    it('should get JWT in response body', async ()=>{
+        const result = await authController.token(userTest);
+        expect(result[_tokeninterface.TOKEN_TYPE.ACCESS]).toBeDefined();
+        expect(result[_tokeninterface.TOKEN_TYPE.REFRESH]).toBeDefined();
+        expect(result[`${_tokeninterface.TOKEN_TYPE.ACCESS}_expiration`]).toBeCloseTo((0, _functions.convertHumanTimeToSeconds)(authConfig.token.access.expiration) + (0, _shared.currentTimeStamp)(), -1);
+        expect(result[`${_tokeninterface.TOKEN_TYPE.REFRESH}_expiration`]).toBeCloseTo((0, _functions.convertHumanTimeToSeconds)(authConfig.token.refresh.expiration) + (0, _shared.currentTimeStamp)(), -1);
+    });
+    it('should refresh JWT in response body', async ()=>{
+        userTest.exp = (0, _shared.currentTimeStamp)() + (0, _functions.convertHumanTimeToSeconds)('30s');
+        const result = await authController.refreshToken(userTest);
+        expect(result[_tokeninterface.TOKEN_TYPE.ACCESS]).toBeDefined();
+        expect(result[_tokeninterface.TOKEN_TYPE.REFRESH]).toBeDefined();
+        expect(result[`${_tokeninterface.TOKEN_TYPE.ACCESS}_expiration`]).toBeCloseTo((0, _functions.convertHumanTimeToSeconds)(authConfig.token.access.expiration) + (0, _shared.currentTimeStamp)(), -1);
+        expect(result[`${_tokeninterface.TOKEN_TYPE.REFRESH}_expiration`]).toBe(userTest.exp);
+    });
+    it('should not refresh JWT in response body', async ()=>{
+        userTest.exp = (0, _shared.currentTimeStamp)() - 1;
+        await expect(authController.refreshToken(userTest)).rejects.toThrow();
+    });
+});
+
+//# sourceMappingURL=auth.controller.spec.js.map

package/server/authentication/auth.controller.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../backend/src/authentication/auth.controller.spec.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { ConfigModule, ConfigService } from '@nestjs/config'\nimport { JwtService } from '@nestjs/jwt'\nimport { PassportModule } from '@nestjs/passport'\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { UserModel } from '../applications/users/models/user.model'\nimport { generateUserTest } from '../applications/users/utils/test'\nimport { convertHumanTimeToSeconds } from '../common/functions'\nimport { currentTimeStamp } from '../common/shared'\nimport { exportConfiguration } from '../configuration/config.environment'\nimport { Cache } from '../infrastructure/cache/services/cache.service'\nimport { DB_TOKEN_PROVIDER } from '../infrastructure/database/constants'\nimport { AuthConfig } from './auth.config'\nimport { AuthController } from './auth.controller'\nimport { LoginResponseDto } from './dto/login-response.dto'\nimport { TOKEN_TYPE } from './interfaces/token.interface'\nimport { AuthManager } from './services/auth-manager.service'\n\ndescribe(AuthController.name, () => {\n  let module: TestingModule\n  let authController: AuthController\n  let authConfig: AuthConfig\n  let userTest: UserModel\n\n  beforeAll(async () => {\n    module = await Test.createTestingModule({\n      imports: [await ConfigModule.forRoot({ load: [exportConfiguration], isGlobal: true }), PassportModule],\n      controllers: [AuthController],\n      providers: [ConfigService, AuthManager, JwtService, { provide: DB_TOKEN_PROVIDER, useValue: {} }, { provide: Cache, useValue: {} }]\n    }).compile()\n\n    module.useLogger(['fatal'])\n    authConfig = module.get<ConfigService>(ConfigService).get<AuthConfig>('auth')\n    authController = module.get<AuthController>(AuthController)\n    userTest = new UserModel({ ...generateUserTest(), id: 888 }, false)\n  })\n\n  afterAll(async () => {\n    await module.close()\n  })\n\n  it('should be defined', () => {\n    expect(authConfig).toBeDefined()\n    expect(authController).toBeDefined()\n    expect(userTest).toBeDefined()\n  })\n\n  it('should set JWT in cookies', async () => {\n    const res: any = { setCookie: jest.fn() }\n    const result = await authController.login(userTest, res)\n    expect(result).toBeDefined()\n    expect(result).toBeInstanceOf(LoginResponseDto)\n    expect(res.setCookie).toHaveBeenCalledTimes(4)\n    expect(result.token.access_expiration).toBeCloseTo(convertHumanTimeToSeconds(authConfig.token.access.expiration) + currentTimeStamp(), -1)\n    expect(result.token.refresh_expiration).toBeCloseTo(convertHumanTimeToSeconds(authConfig.token.refresh.expiration) + currentTimeStamp(), -1)\n  })\n\n  it('should clear JWT in cookies', async () => {\n    const res: any = { clearCookie: jest.fn() }\n    await expect(authController.logout(res)).resolves.not.toThrow()\n    expect(res.clearCookie).toHaveBeenCalledTimes(4)\n  })\n\n  it('should refresh JWT in cookies', async () => {\n    userTest.exp = currentTimeStamp() + convertHumanTimeToSeconds('30s')\n    const res: any = { setCookie: jest.fn() }\n    const result = await authController.refreshCookies(userTest, res)\n    expect(result).toBeDefined()\n    expect(res.setCookie).toHaveBeenCalledTimes(4)\n    expect(result.access_expiration).toBeCloseTo(convertHumanTimeToSeconds(authConfig.token.access.expiration) + currentTimeStamp(), -1)\n    expect(result.refresh_expiration).toBe(userTest.exp)\n  })\n\n  it('should not refresh JWT in cookies', async () => {\n    userTest.exp = currentTimeStamp() - 1\n    const res: any = { setCookie: jest.fn() }\n    await expect(authController.refreshCookies(userTest, res)).rejects.toThrow()\n  })\n\n  it('should get JWT in response body', async () => {\n    const result = await authController.token(userTest)\n    expect(result[TOKEN_TYPE.ACCESS]).toBeDefined()\n    expect(result[TOKEN_TYPE.REFRESH]).toBeDefined()\n    expect(result[`${TOKEN_TYPE.ACCESS}_expiration`]).toBeCloseTo(\n      convertHumanTimeToSeconds(authConfig.token.access.expiration) + currentTimeStamp(),\n      -1\n    )\n    expect(result[`${TOKEN_TYPE.REFRESH}_expiration`]).toBeCloseTo(\n      convertHumanTimeToSeconds(authConfig.token.refresh.expiration) + currentTimeStamp(),\n      -1\n    )\n  })\n\n  it('should refresh JWT in response body', async () => {\n    userTest.exp = currentTimeStamp() + convertHumanTimeToSeconds('30s')\n    const result = await authController.refreshToken(userTest)\n    expect(result[TOKEN_TYPE.ACCESS]).toBeDefined()\n    expect(result[TOKEN_TYPE.REFRESH]).toBeDefined()\n    expect(result[`${TOKEN_TYPE.ACCESS}_expiration`]).toBeCloseTo(\n      convertHumanTimeToSeconds(authConfig.token.access.expiration) + currentTimeStamp(),\n      -1\n    )\n    expect(result[`${TOKEN_TYPE.REFRESH}_expiration`]).toBe(userTest.exp)\n  })\n\n  it('should not refresh JWT in response body', async () => {\n    userTest.exp = currentTimeStamp() - 1\n    await expect(authController.refreshToken(userTest)).rejects.toThrow()\n  })\n})\n"],"names":["describe","AuthController","name","module","authController","authConfig","userTest","beforeAll","Test","createTestingModule","imports","ConfigModule","forRoot","load","exportConfiguration","isGlobal","PassportModule","controllers","providers","ConfigService","AuthManager","JwtService","provide","DB_TOKEN_PROVIDER","useValue","Cache","compile","useLogger","get","UserModel","generateUserTest","id","afterAll","close","it","expect","toBeDefined","res","setCookie","jest","fn","result","login","toBeInstanceOf","LoginResponseDto","toHaveBeenCalledTimes","token","access_expiration","toBeCloseTo","convertHumanTimeToSeconds","access","expiration","currentTimeStamp","refresh_expiration","refresh","clearCookie","logout","resolves","not","toThrow","exp","refreshCookies","toBe","rejects","TOKEN_TYPE","ACCESS","REFRESH","refreshToken"],"mappings":"AAAA;;;;CAIC;;;;wBAE2C;qBACjB;0BACI;yBACK;2BACV;sBACO;2BACS;wBACT;mCACG;8BACd;2BACY;gCAEH;kCACE;gCACN;oCACC;AAE5BA,SAASC,8BAAc,CAACC,IAAI,EAAE;IAC5B,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJC,UAAU;QACRJ,SAAS,MAAMK,aAAI,CAACC,mBAAmB,CAAC;YACtCC,SAAS;gBAAC,MAAMC,oBAAY,CAACC,OAAO,CAAC;oBAAEC,MAAM;wBAACC,sCAAmB;qBAAC;oBAAEC,UAAU;gBAAK;gBAAIC,wBAAc;aAAC;YACtGC,aAAa;gBAAChB,8BAAc;aAAC;YAC7BiB,WAAW;gBAACC,qBAAa;gBAAEC,+BAAW;gBAAEC,eAAU;gBAAE;oBAAEC,SAASC,4BAAiB;oBAAEC,UAAU,CAAC;gBAAE;gBAAG;oBAAEF,SAASG,mBAAK;oBAAED,UAAU,CAAC;gBAAE;aAAE;QACrI,GAAGE,OAAO;QAEVvB,OAAOwB,SAAS,CAAC;YAAC;SAAQ;QAC1BtB,aAAaF,OAAOyB,GAAG,CAAgBT,qBAAa,EAAES,GAAG,CAAa;QACtExB,iBAAiBD,OAAOyB,GAAG,CAAiB3B,8BAAc;QAC1DK,WAAW,IAAIuB,oBAAS,CAAC;YAAE,GAAGC,IAAAA,sBAAgB,GAAE;YAAEC,IAAI;QAAI,GAAG;IAC/D;IAEAC,SAAS;QACP,MAAM7B,OAAO8B,KAAK;IACpB;IAEAC,GAAG,qBAAqB;QACtBC,OAAO9B,YAAY+B,WAAW;QAC9BD,OAAO/B,gBAAgBgC,WAAW;QAClCD,OAAO7B,UAAU8B,WAAW;IAC9B;IAEAF,GAAG,6BAA6B;QAC9B,MAAMG,MAAW;YAAEC,WAAWC,KAAKC,EAAE;QAAG;QACxC,MAAMC,SAAS,MAAMrC,eAAesC,KAAK,CAACpC,UAAU+B;QACpDF,OAAOM,QAAQL,WAAW;QAC1BD,OAAOM,QAAQE,cAAc,CAACC,kCAAgB;QAC9CT,OAAOE,IAAIC,SAAS,EAAEO,qBAAqB,CAAC;QAC5CV,OAAOM,OAAOK,KAAK,CAACC,iBAAiB,EAAEC,WAAW,CAACC,IAAAA,oCAAyB,EAAC5C,WAAWyC,KAAK,CAACI,MAAM,CAACC,UAAU,IAAIC,IAAAA,wBAAgB,KAAI,CAAC;QACxIjB,OAAOM,OAAOK,KAAK,CAACO,kBAAkB,EAAEL,WAAW,CAACC,IAAAA,oCAAyB,EAAC5C,WAAWyC,KAAK,CAACQ,OAAO,CAACH,UAAU,IAAIC,IAAAA,wBAAgB,KAAI,CAAC;IAC5I;IAEAlB,GAAG,+BAA+B;QAChC,MAAMG,MAAW;YAAEkB,aAAahB,KAAKC,EAAE;QAAG;QAC1C,MAAML,OAAO/B,eAAeoD,MAAM,CAACnB,MAAMoB,QAAQ,CAACC,GAAG,CAACC,OAAO;QAC7DxB,OAAOE,IAAIkB,WAAW,EAAEV,qBAAqB,CAAC;IAChD;IAEAX,GAAG,iCAAiC;QAClC5B,SAASsD,GAAG,GAAGR,IAAAA,wBAAgB,MAAKH,IAAAA,oCAAyB,EAAC;QAC9D,MAAMZ,MAAW;YAAEC,WAAWC,KAAKC,EAAE;QAAG;QACxC,MAAMC,SAAS,MAAMrC,eAAeyD,cAAc,CAACvD,UAAU+B;QAC7DF,OAAOM,QAAQL,WAAW;QAC1BD,OAAOE,IAAIC,SAAS,EAAEO,qBAAqB,CAAC;QAC5CV,OAAOM,OAAOM,iBAAiB,EAAEC,WAAW,CAACC,IAAAA,oCAAyB,EAAC5C,WAAWyC,KAAK,CAACI,MAAM,CAACC,UAAU,IAAIC,IAAAA,wBAAgB,KAAI,CAAC;QAClIjB,OAAOM,OAAOY,kBAAkB,EAAES,IAAI,CAACxD,SAASsD,GAAG;IACrD;IAEA1B,GAAG,qCAAqC;QACtC5B,SAASsD,GAAG,GAAGR,IAAAA,wBAAgB,MAAK;QACpC,MAAMf,MAAW;YAAEC,WAAWC,KAAKC,EAAE;QAAG;QACxC,MAAML,OAAO/B,eAAeyD,cAAc,CAACvD,UAAU+B,MAAM0B,OAAO,CAACJ,OAAO;IAC5E;IAEAzB,GAAG,mCAAmC;QACpC,MAAMO,SAAS,MAAMrC,eAAe0C,KAAK,CAACxC;QAC1C6B,OAAOM,MAAM,CAACuB,0BAAU,CAACC,MAAM,CAAC,EAAE7B,WAAW;QAC7CD,OAAOM,MAAM,CAACuB,0BAAU,CAACE,OAAO,CAAC,EAAE9B,WAAW;QAC9CD,OAAOM,MAAM,CAAC,GAAGuB,0BAAU,CAACC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAEjB,WAAW,CAC3DC,IAAAA,oCAAyB,EAAC5C,WAAWyC,KAAK,CAACI,MAAM,CAACC,UAAU,IAAIC,IAAAA,wBAAgB,KAChF,CAAC;QAEHjB,OAAOM,MAAM,CAAC,GAAGuB,0BAAU,CAACE,OAAO,CAAC,WAAW,CAAC,CAAC,EAAElB,WAAW,CAC5DC,IAAAA,oCAAyB,EAAC5C,WAAWyC,KAAK,CAACQ,OAAO,CAACH,UAAU,IAAIC,IAAAA,wBAAgB,KACjF,CAAC;IAEL;IAEAlB,GAAG,uCAAuC;QACxC5B,SAASsD,GAAG,GAAGR,IAAAA,wBAAgB,MAAKH,IAAAA,oCAAyB,EAAC;QAC9D,MAAMR,SAAS,MAAMrC,eAAe+D,YAAY,CAAC7D;QACjD6B,OAAOM,MAAM,CAACuB,0BAAU,CAACC,MAAM,CAAC,EAAE7B,WAAW;QAC7CD,OAAOM,MAAM,CAACuB,0BAAU,CAACE,OAAO,CAAC,EAAE9B,WAAW;QAC9CD,OAAOM,MAAM,CAAC,GAAGuB,0BAAU,CAACC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAEjB,WAAW,CAC3DC,IAAAA,oCAAyB,EAAC5C,WAAWyC,KAAK,CAACI,MAAM,CAACC,UAAU,IAAIC,IAAAA,wBAAgB,KAChF,CAAC;QAEHjB,OAAOM,MAAM,CAAC,GAAGuB,0BAAU,CAACE,OAAO,CAAC,WAAW,CAAC,CAAC,EAAEJ,IAAI,CAACxD,SAASsD,GAAG;IACtE;IAEA1B,GAAG,2CAA2C;QAC5C5B,SAASsD,GAAG,GAAGR,IAAAA,wBAAgB,MAAK;QACpC,MAAMjB,OAAO/B,eAAe+D,YAAY,CAAC7D,WAAWyD,OAAO,CAACJ,OAAO;IACrE;AACF"}