@sync-in/server 1.3.0

package/server/authentication/auth.e2e-spec.js

@@ -0,0 +1,340 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+const _config = require("@nestjs/config");
+const _jwt = require("@nestjs/jwt");
+const _appbootstrap = require("../app.bootstrap");
+const _user = require("../applications/users/constants/user");
+const _usermodel = require("../applications/users/models/user.model");
+const _adminusersmanagerservice = require("../applications/users/services/admin-users-manager.service");
+const _test = require("../applications/users/utils/test");
+const _functions = require("../common/functions");
+const _shared = require("../common/shared");
+const _utils = require("../infrastructure/database/utils");
+const _auth = require("./constants/auth");
+const _routes = require("./constants/routes");
+const _tokenresponsedto = require("./dto/token-response.dto");
+const _tokeninterface = require("./interfaces/token.interface");
+describe('Auth (e2e)', ()=>{
+    let app;
+    let authConfig;
+    let jwtService;
+    let adminUsersManager;
+    let userTest;
+    let refreshToken;
+    let csrfToken;
+    beforeAll(async ()=>{
+        app = await (0, _appbootstrap.appBootstrap)();
+        await app.init();
+        await app.getHttpAdapter().getInstance().ready();
+        authConfig = app.get(_config.ConfigService).get('auth');
+        jwtService = app.get(_jwt.JwtService);
+        adminUsersManager = app.get(_adminusersmanagerservice.AdminUsersManager);
+        userTest = new _usermodel.UserModel((0, _test.generateUserTest)(false), false);
+    });
+    afterAll(async ()=>{
+        await expect(adminUsersManager.deleteUserOrGuest(userTest.id, userTest.login, {
+            deleteSpace: true
+        })).resolves.not.toThrow();
+        await (0, _utils.dbCloseConnection)(app);
+        await app.close();
+    });
+    it('should be defined', ()=>{
+        expect(authConfig).toBeDefined();
+        expect(jwtService).toBeDefined();
+        expect(adminUsersManager).toBeDefined();
+        expect(userTest).toBeDefined();
+    });
+    it('should get the database connection', async ()=>{
+        expect(await (0, _utils.dbCheckConnection)(app)).toBe(true);
+    });
+    it(`POST ${_routes.API_AUTH_LOGIN} => 401`, async ()=>{
+        const res = await app.inject({
+            method: 'POST',
+            url: _routes.API_AUTH_LOGIN,
+            body: {
+                login: userTest.login,
+                password: userTest.password
+            }
+        });
+        expect(res.statusCode).toEqual(401);
+    });
+    it(`POST ${_routes.API_AUTH_LOGIN} => 201`, async ()=>{
+        const userId = (await adminUsersManager.createUserOrGuest({
+            ...userTest
+        }, _user.USER_ROLE.USER)).id;
+        expect(userId).toBeDefined();
+        userTest.id = userId;
+        const res = await app.inject({
+            method: 'POST',
+            url: _routes.API_AUTH_LOGIN,
+            body: {
+                login: userTest.login,
+                password: userTest.password
+            }
+        });
+        expect(res.statusCode).toEqual(201);
+        expect(Object.keys(res.json())).toEqual(expect.arrayContaining([
+            'user',
+            'token'
+        ]));
+        expect(res.headers['set-cookie']).toHaveLength(4);
+        const cookies = getCookies(res.headers['set-cookie']);
+        /* Access cookie
+        [
+        'sync-in-access=value,
+        'Max-Age=3600',
+        'Path=/',
+        'HttpOnly',
+        'Secure',
+        'SameSite=Strict'
+        ]
+     */ /* Refresh cookie
+        [
+        'sync-in-refresh=value,
+        'Max-Age=14400',
+        'Path=/api/auth/refresh',
+        'HttpOnly',
+        'Secure',
+        'SameSite=Strict'
+        ]
+     */ /* WS cookie
+        [
+        'sync-in-ws=value,
+        'Max-Age=14400',
+        'Path=/socket.io',
+        'HttpOnly',
+        'Secure',
+        'SameSite=Strict'
+        ]
+     */ /* CSRF cookie
+        [
+        'sync-in-csrf=value,
+        'Max-Age=14400',
+        'Path=/',
+        'Secure',
+        'SameSite=Strict'
+        ]
+     */ cookiesChecks(cookies);
+        // Verify token
+        for (const cookie of cookies){
+            const token = cookie.content[0].substring(cookie.content[0].indexOf('=') + 1);
+            if (cookie.type === _tokeninterface.TOKEN_TYPE.CSRF) {
+                // needed for the following tests
+                csrfToken = (0, _shared.decodeUrl)(token);
+                continue;
+            }
+            const decodedToken = await jwtService.verifyAsync(token, {
+                secret: authConfig.token[cookie.type].secret
+            });
+            expect(decodedToken.iat).toBeCloseTo((0, _shared.currentTimeStamp)(), -1);
+            expect(decodedToken.exp).toBeCloseTo((0, _shared.currentTimeStamp)() + (0, _functions.convertHumanTimeToSeconds)(authConfig.token[cookie.type].expiration), -1);
+            expect(decodedToken.identity.id).toBe(userTest.id);
+            if (cookie.type === _tokeninterface.TOKEN_TYPE.REFRESH) {
+                // needed for the following tests
+                refreshToken = token;
+            }
+        }
+    });
+    it(`POST ${_routes.API_AUTH_LOGOUT} => 201`, async ()=>{
+        const res = await app.inject({
+            method: 'POST',
+            url: _routes.API_AUTH_LOGOUT,
+            body: null
+        });
+        expect(res.statusCode).toEqual(201);
+        expect(res.headers['set-cookie']).toHaveLength(4);
+        const cookies = getCookies(res.headers['set-cookie']);
+        /* Access cookie
+     [
+       'sync-in-access=',
+       'Max-Age=0',
+       'Path=/',
+       'Expires=Thu, 01 Jan 1970 00:00:00 GMT',
+       'HttpOnly',
+       'Secure',
+       'SameSite=Strict'
+     ]
+    */ /* Refresh cookie
+      [
+        'sync-in-refresh=',
+        'Max-Age=0',
+        'Path=/api/auth/refresh',
+        'Expires=Thu, 01 Jan 1970 00:00:00 GMT',
+        'HttpOnly',
+        'Secure',
+        'SameSite=Strict'
+      ]
+    */ /* WS cookie
+      [
+        'sync-in-ws=',
+        'Max-Age=0',
+        'Path=/socket.io',
+        'Expires=Thu, 01 Jan 1970 00:00:00 GMT',
+        'HttpOnly',
+        'Secure',
+        'SameSite=Strict'
+      ]
+    */ /* CSRF cookie
+      [
+        'sync-in-csrf=',
+        'Max-Age=0',
+        'Path=/api/auth/refresh',
+        'Expires=Thu, 01 Jan 1970 00:00:00 GMT',
+        'HttpOnly',
+        'Secure',
+        'SameSite=Strict'
+      ]
+    */ cookiesChecks(cookies, true);
+    });
+    it(`POST ${_routes.API_AUTH_REFRESH} => 201`, async ()=>{
+        const res = await app.inject({
+            method: 'POST',
+            headers: {
+                [authConfig.token.csrf.name]: csrfToken
+            },
+            url: _routes.API_AUTH_REFRESH,
+            cookies: {
+                [authConfig.token.refresh.name]: refreshToken
+            }
+        });
+        expect(res.statusCode).toEqual(201);
+        const cookies = getCookies(res.headers['set-cookie']);
+        cookiesChecks(cookies);
+    });
+    it(`POST ${_routes.API_AUTH_REFRESH} => 401 (with CSRF)`, async ()=>{
+        const res = await app.inject({
+            method: 'POST',
+            url: _routes.API_AUTH_REFRESH,
+            headers: {
+                [authConfig.token.csrf.name]: csrfToken
+            },
+            cookies: {
+                [authConfig.token.refresh.name]: 'bar'
+            }
+        });
+        expect(res.statusCode).toEqual(401);
+    });
+    it(`POST ${_routes.API_AUTH_REFRESH} => 403 (without CSRF)`, async ()=>{
+        const res = await app.inject({
+            method: 'POST',
+            url: _routes.API_AUTH_REFRESH,
+            cookies: {
+                [authConfig.token.refresh.name]: refreshToken
+            }
+        });
+        expect(res.statusCode).toEqual(403);
+        expect(res.json().message).toEqual(_auth.CSRF_ERROR.MISSING_HEADERS);
+    });
+    it(`POST ${_routes.API_AUTH_TOKEN} => 401`, async ()=>{
+        const res = await app.inject({
+            method: 'POST',
+            url: _routes.API_AUTH_TOKEN,
+            body: {
+                login: userTest.login,
+                password: 'bar'
+            }
+        });
+        expect(res.statusCode).toEqual(401);
+    });
+    it(`POST ${_routes.API_AUTH_TOKEN} => 201`, async ()=>{
+        const res = await app.inject({
+            method: 'POST',
+            url: _routes.API_AUTH_TOKEN,
+            body: {
+                login: userTest.login,
+                password: userTest.password
+            }
+        });
+        expect(res.statusCode).toEqual(201);
+        const content = res.json();
+        expect(()=>(0, _functions.transformAndValidate)(_tokenresponsedto.TokenResponseDto, content)).not.toThrow();
+        for (const type of _auth.TOKEN_TYPES.filter((p)=>p === _tokeninterface.TOKEN_TYPE.ACCESS || p === _tokeninterface.TOKEN_TYPE.REFRESH)){
+            expect(content[type]).toBeDefined();
+            expect(content[`${type}_expiration`]).toBeCloseTo((0, _shared.currentTimeStamp)() + (0, _functions.convertHumanTimeToSeconds)(authConfig.token[type].expiration), -1);
+        }
+    });
+    it(`POST ${_routes.API_AUTH_TOKEN_REFRESH} => 401`, async ()=>{
+        const res = await app.inject({
+            method: 'POST',
+            url: _routes.API_AUTH_TOKEN_REFRESH,
+            headers: {
+                authorization: 'Bearer bar'
+            }
+        });
+        expect(res.statusCode).toEqual(401);
+    });
+    it(`POST ${_routes.API_AUTH_TOKEN_REFRESH} => 201`, async ()=>{
+        const res = await app.inject({
+            method: 'POST',
+            url: _routes.API_AUTH_TOKEN_REFRESH,
+            headers: {
+                authorization: `Bearer ${refreshToken}`
+            }
+        });
+        expect(res.statusCode).toEqual(201);
+        expect(()=>(0, _functions.transformAndValidate)(_tokenresponsedto.TokenResponseDto, res.json())).not.toThrow();
+    });
+    function getCookies(setCookie) {
+        const cookies = [];
+        for (const c of setCookie){
+            const cookieName = c.split('=')[0];
+            const cookieValues = c.split('; ');
+            switch(cookieName){
+                case authConfig.token.access.name:
+                    cookies.push({
+                        type: _tokeninterface.TOKEN_TYPE.ACCESS,
+                        content: cookieValues
+                    });
+                    break;
+                case authConfig.token.refresh.name:
+                    cookies.push({
+                        type: _tokeninterface.TOKEN_TYPE.REFRESH,
+                        content: cookieValues
+                    });
+                    break;
+                case authConfig.token.ws.name:
+                    cookies.push({
+                        type: _tokeninterface.TOKEN_TYPE.WS,
+                        content: cookieValues
+                    });
+                    break;
+                case authConfig.token.csrf.name:
+                    cookies.push({
+                        type: _tokeninterface.TOKEN_TYPE.CSRF,
+                        content: cookieValues
+                    });
+                    break;
+            }
+        }
+        return cookies;
+    }
+    function cookiesChecks(cookies, clear = false) {
+        for (const cookie of cookies){
+            expect(cookie.content[0].split('=')[0]).toBe(authConfig.token[cookie.type].name);
+            expect(cookie.content[2].split('=')[1]).toBe(_auth.TOKEN_PATHS[cookie.type]);
+            if (cookie.type === _tokeninterface.TOKEN_TYPE.CSRF) {
+                expect(cookie.content).not.toContain('HttpOnly');
+            } else {
+                expect(cookie.content).toContain('HttpOnly');
+            }
+            expect(cookie.content).not.toContain('Secure');
+            expect(cookie.content[cookie.content.length - 1].split('=')[1].toLowerCase()).toBe(authConfig.sameSite);
+            if (clear) {
+                expect(cookie.content[0].split('=')[1]).toBe('');
+                expect(cookie.content[1].split('=')[1]).toBe('0');
+                expect(cookie.content[3].split('=')[1]).toBe('Thu, 01 Jan 1970 00:00:00 GMT');
+            } else {
+                expect(parseInt(cookie.content[1].split('=')[1])).toBeCloseTo((0, _functions.convertHumanTimeToSeconds)(authConfig.token[cookie.type].cookieMaxAge), -1);
+                expect(cookie.content[0].split('=')[1]).not.toBe('');
+            }
+        }
+    }
+});
+
+//# sourceMappingURL=auth.e2e-spec.js.map

package/server/authentication/auth.e2e-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../backend/src/authentication/auth.e2e-spec.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { ConfigService } from '@nestjs/config'\nimport { JwtService } from '@nestjs/jwt'\nimport { NestFastifyApplication } from '@nestjs/platform-fastify'\nimport { appBootstrap } from '../app.bootstrap'\nimport { USER_ROLE } from '../applications/users/constants/user'\nimport { DeleteUserDto } from '../applications/users/dto/delete-user.dto'\nimport { UserModel } from '../applications/users/models/user.model'\nimport { AdminUsersManager } from '../applications/users/services/admin-users-manager.service'\nimport { generateUserTest } from '../applications/users/utils/test'\nimport { convertHumanTimeToSeconds, transformAndValidate } from '../common/functions'\nimport { currentTimeStamp, decodeUrl } from '../common/shared'\nimport { dbCheckConnection, dbCloseConnection } from '../infrastructure/database/utils'\nimport { AuthConfig } from './auth.config'\nimport { CSRF_ERROR, TOKEN_PATHS, TOKEN_TYPES } from './constants/auth'\nimport { API_AUTH_LOGIN, API_AUTH_LOGOUT, API_AUTH_REFRESH, API_AUTH_TOKEN, API_AUTH_TOKEN_REFRESH } from './constants/routes'\nimport { TokenResponseDto } from './dto/token-response.dto'\nimport { JwtPayload } from './interfaces/jwt-payload.interface'\nimport { TOKEN_TYPE } from './interfaces/token.interface'\n\ndescribe('Auth (e2e)', () => {\n  let app: NestFastifyApplication\n  let authConfig: AuthConfig\n  let jwtService: JwtService\n  let adminUsersManager: AdminUsersManager\n  let userTest: UserModel\n  let refreshToken: string\n  let csrfToken: string\n\n  beforeAll(async () => {\n    app = await appBootstrap()\n    await app.init()\n    await app.getHttpAdapter().getInstance().ready()\n    authConfig = app.get<ConfigService>(ConfigService).get<AuthConfig>('auth')\n    jwtService = app.get<JwtService>(JwtService)\n    adminUsersManager = app.get<AdminUsersManager>(AdminUsersManager)\n    userTest = new UserModel(generateUserTest(false), false)\n  })\n\n  afterAll(async () => {\n    await expect(\n      adminUsersManager.deleteUserOrGuest(userTest.id, userTest.login, { deleteSpace: true } satisfies DeleteUserDto)\n    ).resolves.not.toThrow()\n    await dbCloseConnection(app)\n    await app.close()\n  })\n\n  it('should be defined', () => {\n    expect(authConfig).toBeDefined()\n    expect(jwtService).toBeDefined()\n    expect(adminUsersManager).toBeDefined()\n    expect(userTest).toBeDefined()\n  })\n\n  it('should get the database connection', async () => {\n    expect(await dbCheckConnection(app)).toBe(true)\n  })\n\n  it(`POST ${API_AUTH_LOGIN} => 401`, async () => {\n    const res = await app.inject({\n      method: 'POST',\n      url: API_AUTH_LOGIN,\n      body: { login: userTest.login, password: userTest.password }\n    })\n    expect(res.statusCode).toEqual(401)\n  })\n\n  it(`POST ${API_AUTH_LOGIN} => 201`, async () => {\n    const userId = (await adminUsersManager.createUserOrGuest({ ...userTest }, USER_ROLE.USER)).id\n    expect(userId).toBeDefined()\n    userTest.id = userId\n    const res = await app.inject({\n      method: 'POST',\n      url: API_AUTH_LOGIN,\n      body: { login: userTest.login, password: userTest.password }\n    })\n    expect(res.statusCode).toEqual(201)\n    expect(Object.keys(res.json())).toEqual(expect.arrayContaining(['user', 'token']))\n    expect(res.headers['set-cookie']).toHaveLength(4)\n    const cookies: { type: TOKEN_TYPE; content: string[] }[] = getCookies(res.headers['set-cookie'] as string[])\n    /* Access cookie\n        [\n        'sync-in-access=value,\n        'Max-Age=3600',\n        'Path=/',\n        'HttpOnly',\n        'Secure',\n        'SameSite=Strict'\n        ]\n     */\n    /* Refresh cookie\n        [\n        'sync-in-refresh=value,\n        'Max-Age=14400',\n        'Path=/api/auth/refresh',\n        'HttpOnly',\n        'Secure',\n        'SameSite=Strict'\n        ]\n     */\n    /* WS cookie\n        [\n        'sync-in-ws=value,\n        'Max-Age=14400',\n        'Path=/socket.io',\n        'HttpOnly',\n        'Secure',\n        'SameSite=Strict'\n        ]\n     */\n    /* CSRF cookie\n        [\n        'sync-in-csrf=value,\n        'Max-Age=14400',\n        'Path=/',\n        'Secure',\n        'SameSite=Strict'\n        ]\n     */\n    cookiesChecks(cookies)\n    // Verify token\n    for (const cookie of cookies) {\n      const token = cookie.content[0].substring(cookie.content[0].indexOf('=') + 1)\n      if (cookie.type === TOKEN_TYPE.CSRF) {\n        // needed for the following tests\n        csrfToken = decodeUrl(token)\n        continue\n      }\n      const decodedToken: JwtPayload = await jwtService.verifyAsync(token, {\n        secret: authConfig.token[cookie.type].secret\n      })\n      expect(decodedToken.iat).toBeCloseTo(currentTimeStamp(), -1)\n      expect(decodedToken.exp).toBeCloseTo(currentTimeStamp() + convertHumanTimeToSeconds(authConfig.token[cookie.type].expiration), -1)\n      expect(decodedToken.identity.id).toBe(userTest.id)\n      if (cookie.type === TOKEN_TYPE.REFRESH) {\n        // needed for the following tests\n        refreshToken = token\n      }\n    }\n  })\n\n  it(`POST ${API_AUTH_LOGOUT} => 201`, async () => {\n    const res = await app.inject({\n      method: 'POST',\n      url: API_AUTH_LOGOUT,\n      body: null\n    })\n    expect(res.statusCode).toEqual(201)\n    expect(res.headers['set-cookie']).toHaveLength(4)\n    const cookies: { type: TOKEN_TYPE; content: string[] }[] = getCookies(res.headers['set-cookie'] as string[])\n    /* Access cookie\n     [\n       'sync-in-access=',\n       'Max-Age=0',\n       'Path=/',\n       'Expires=Thu, 01 Jan 1970 00:00:00 GMT',\n       'HttpOnly',\n       'Secure',\n       'SameSite=Strict'\n     ]\n    */\n    /* Refresh cookie\n      [\n        'sync-in-refresh=',\n        'Max-Age=0',\n        'Path=/api/auth/refresh',\n        'Expires=Thu, 01 Jan 1970 00:00:00 GMT',\n        'HttpOnly',\n        'Secure',\n        'SameSite=Strict'\n      ]\n    */\n    /* WS cookie\n      [\n        'sync-in-ws=',\n        'Max-Age=0',\n        'Path=/socket.io',\n        'Expires=Thu, 01 Jan 1970 00:00:00 GMT',\n        'HttpOnly',\n        'Secure',\n        'SameSite=Strict'\n      ]\n    */\n    /* CSRF cookie\n      [\n        'sync-in-csrf=',\n        'Max-Age=0',\n        'Path=/api/auth/refresh',\n        'Expires=Thu, 01 Jan 1970 00:00:00 GMT',\n        'HttpOnly',\n        'Secure',\n        'SameSite=Strict'\n      ]\n    */\n    cookiesChecks(cookies, true)\n  })\n\n  it(`POST ${API_AUTH_REFRESH} => 201`, async () => {\n    const res = await app.inject({\n      method: 'POST',\n      headers: { [authConfig.token.csrf.name]: csrfToken },\n      url: API_AUTH_REFRESH,\n      cookies: { [authConfig.token.refresh.name]: refreshToken }\n    })\n    expect(res.statusCode).toEqual(201)\n    const cookies: { type: TOKEN_TYPE; content: string[] }[] = getCookies(res.headers['set-cookie'] as string[])\n    cookiesChecks(cookies)\n  })\n\n  it(`POST ${API_AUTH_REFRESH} => 401 (with CSRF)`, async () => {\n    const res = await app.inject({\n      method: 'POST',\n      url: API_AUTH_REFRESH,\n      headers: { [authConfig.token.csrf.name]: csrfToken },\n      cookies: { [authConfig.token.refresh.name]: 'bar' }\n    })\n    expect(res.statusCode).toEqual(401)\n  })\n\n  it(`POST ${API_AUTH_REFRESH} => 403 (without CSRF)`, async () => {\n    const res = await app.inject({\n      method: 'POST',\n      url: API_AUTH_REFRESH,\n      cookies: { [authConfig.token.refresh.name]: refreshToken }\n    })\n    expect(res.statusCode).toEqual(403)\n    expect(res.json().message).toEqual(CSRF_ERROR.MISSING_HEADERS)\n  })\n\n  it(`POST ${API_AUTH_TOKEN} => 401`, async () => {\n    const res = await app.inject({\n      method: 'POST',\n      url: API_AUTH_TOKEN,\n      body: { login: userTest.login, password: 'bar' }\n    })\n    expect(res.statusCode).toEqual(401)\n  })\n\n  it(`POST ${API_AUTH_TOKEN} => 201`, async () => {\n    const res = await app.inject({\n      method: 'POST',\n      url: API_AUTH_TOKEN,\n      body: { login: userTest.login, password: userTest.password }\n    })\n    expect(res.statusCode).toEqual(201)\n    const content = res.json()\n    expect(() => transformAndValidate(TokenResponseDto, content)).not.toThrow()\n    for (const type of TOKEN_TYPES.filter((p) => p === TOKEN_TYPE.ACCESS || p === TOKEN_TYPE.REFRESH)) {\n      expect(content[type]).toBeDefined()\n      expect(content[`${type}_expiration`]).toBeCloseTo(currentTimeStamp() + convertHumanTimeToSeconds(authConfig.token[type].expiration), -1)\n    }\n  })\n\n  it(`POST ${API_AUTH_TOKEN_REFRESH} => 401`, async () => {\n    const res = await app.inject({\n      method: 'POST',\n      url: API_AUTH_TOKEN_REFRESH,\n      headers: { authorization: 'Bearer bar' }\n    })\n    expect(res.statusCode).toEqual(401)\n  })\n\n  it(`POST ${API_AUTH_TOKEN_REFRESH} => 201`, async () => {\n    const res = await app.inject({\n      method: 'POST',\n      url: API_AUTH_TOKEN_REFRESH,\n      headers: { authorization: `Bearer ${refreshToken}` }\n    })\n    expect(res.statusCode).toEqual(201)\n    expect(() => transformAndValidate(TokenResponseDto, res.json())).not.toThrow()\n  })\n\n  function getCookies(setCookie: string[]): { type: TOKEN_TYPE; content: string[] }[] {\n    const cookies: { type: TOKEN_TYPE; content: string[] }[] = []\n    for (const c of setCookie) {\n      const cookieName = c.split('=')[0]\n      const cookieValues = c.split('; ')\n      switch (cookieName) {\n        case authConfig.token.access.name:\n          cookies.push({ type: TOKEN_TYPE.ACCESS, content: cookieValues })\n          break\n        case authConfig.token.refresh.name:\n          cookies.push({ type: TOKEN_TYPE.REFRESH, content: cookieValues })\n          break\n        case authConfig.token.ws.name:\n          cookies.push({ type: TOKEN_TYPE.WS, content: cookieValues })\n          break\n        case authConfig.token.csrf.name:\n          cookies.push({ type: TOKEN_TYPE.CSRF, content: cookieValues })\n          break\n      }\n    }\n    return cookies\n  }\n\n  function cookiesChecks(cookies: { type: TOKEN_TYPE; content: string[] }[], clear = false) {\n    for (const cookie of cookies) {\n      expect(cookie.content[0].split('=')[0]).toBe(authConfig.token[cookie.type].name)\n      expect(cookie.content[2].split('=')[1]).toBe(TOKEN_PATHS[cookie.type])\n      if (cookie.type === TOKEN_TYPE.CSRF) {\n        expect(cookie.content).not.toContain('HttpOnly')\n      } else {\n        expect(cookie.content).toContain('HttpOnly')\n      }\n      expect(cookie.content).not.toContain('Secure')\n      expect(cookie.content[cookie.content.length - 1].split('=')[1].toLowerCase()).toBe(authConfig.sameSite)\n      if (clear) {\n        expect(cookie.content[0].split('=')[1]).toBe('')\n        expect(cookie.content[1].split('=')[1]).toBe('0')\n        expect(cookie.content[3].split('=')[1]).toBe('Thu, 01 Jan 1970 00:00:00 GMT')\n      } else {\n        expect(parseInt(cookie.content[1].split('=')[1])).toBeCloseTo(convertHumanTimeToSeconds(authConfig.token[cookie.type].cookieMaxAge), -1)\n        expect(cookie.content[0].split('=')[1]).not.toBe('')\n      }\n    }\n  }\n})\n"],"names":["describe","app","authConfig","jwtService","adminUsersManager","userTest","refreshToken","csrfToken","beforeAll","appBootstrap","init","getHttpAdapter","getInstance","ready","get","ConfigService","JwtService","AdminUsersManager","UserModel","generateUserTest","afterAll","expect","deleteUserOrGuest","id","login","deleteSpace","resolves","not","toThrow","dbCloseConnection","close","it","toBeDefined","dbCheckConnection","toBe","API_AUTH_LOGIN","res","inject","method","url","body","password","statusCode","toEqual","userId","createUserOrGuest","USER_ROLE","USER","Object","keys","json","arrayContaining","headers","toHaveLength","cookies","getCookies","cookiesChecks","cookie","token","content","substring","indexOf","type","TOKEN_TYPE","CSRF","decodeUrl","decodedToken","verifyAsync","secret","iat","toBeCloseTo","currentTimeStamp","exp","convertHumanTimeToSeconds","expiration","identity","REFRESH","API_AUTH_LOGOUT","API_AUTH_REFRESH","csrf","name","refresh","message","CSRF_ERROR","MISSING_HEADERS","API_AUTH_TOKEN","transformAndValidate","TokenResponseDto","TOKEN_TYPES","filter","p","ACCESS","API_AUTH_TOKEN_REFRESH","authorization","setCookie","c","cookieName","split","cookieValues","access","push","ws","WS","clear","TOKEN_PATHS","toContain","length","toLowerCase","sameSite","parseInt","cookieMaxAge"],"mappings":"AAAA;;;;CAIC;;;;wBAE6B;qBACH;8BAEE;sBACH;2BAEA;0CACQ;sBACD;2BAC+B;wBACpB;uBACS;sBAEA;wBACqD;kCACzE;gCAEN;AAE3BA,SAAS,cAAc;IACrB,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJC,UAAU;QACRP,MAAM,MAAMQ,IAAAA,0BAAY;QACxB,MAAMR,IAAIS,IAAI;QACd,MAAMT,IAAIU,cAAc,GAAGC,WAAW,GAAGC,KAAK;QAC9CX,aAAaD,IAAIa,GAAG,CAAgBC,qBAAa,EAAED,GAAG,CAAa;QACnEX,aAAaF,IAAIa,GAAG,CAAaE,eAAU;QAC3CZ,oBAAoBH,IAAIa,GAAG,CAAoBG,2CAAiB;QAChEZ,WAAW,IAAIa,oBAAS,CAACC,IAAAA,sBAAgB,EAAC,QAAQ;IACpD;IAEAC,SAAS;QACP,MAAMC,OACJjB,kBAAkBkB,iBAAiB,CAACjB,SAASkB,EAAE,EAAElB,SAASmB,KAAK,EAAE;YAAEC,aAAa;QAAK,IACrFC,QAAQ,CAACC,GAAG,CAACC,OAAO;QACtB,MAAMC,IAAAA,wBAAiB,EAAC5B;QACxB,MAAMA,IAAI6B,KAAK;IACjB;IAEAC,GAAG,qBAAqB;QACtBV,OAAOnB,YAAY8B,WAAW;QAC9BX,OAAOlB,YAAY6B,WAAW;QAC9BX,OAAOjB,mBAAmB4B,WAAW;QACrCX,OAAOhB,UAAU2B,WAAW;IAC9B;IAEAD,GAAG,sCAAsC;QACvCV,OAAO,MAAMY,IAAAA,wBAAiB,EAAChC,MAAMiC,IAAI,CAAC;IAC5C;IAEAH,GAAG,CAAC,KAAK,EAAEI,sBAAc,CAAC,OAAO,CAAC,EAAE;QAClC,MAAMC,MAAM,MAAMnC,IAAIoC,MAAM,CAAC;YAC3BC,QAAQ;YACRC,KAAKJ,sBAAc;YACnBK,MAAM;gBAAEhB,OAAOnB,SAASmB,KAAK;gBAAEiB,UAAUpC,SAASoC,QAAQ;YAAC;QAC7D;QACApB,OAAOe,IAAIM,UAAU,EAAEC,OAAO,CAAC;IACjC;IAEAZ,GAAG,CAAC,KAAK,EAAEI,sBAAc,CAAC,OAAO,CAAC,EAAE;QAClC,MAAMS,SAAS,AAAC,CAAA,MAAMxC,kBAAkByC,iBAAiB,CAAC;YAAE,GAAGxC,QAAQ;QAAC,GAAGyC,eAAS,CAACC,IAAI,CAAA,EAAGxB,EAAE;QAC9FF,OAAOuB,QAAQZ,WAAW;QAC1B3B,SAASkB,EAAE,GAAGqB;QACd,MAAMR,MAAM,MAAMnC,IAAIoC,MAAM,CAAC;YAC3BC,QAAQ;YACRC,KAAKJ,sBAAc;YACnBK,MAAM;gBAAEhB,OAAOnB,SAASmB,KAAK;gBAAEiB,UAAUpC,SAASoC,QAAQ;YAAC;QAC7D;QACApB,OAAOe,IAAIM,UAAU,EAAEC,OAAO,CAAC;QAC/BtB,OAAO2B,OAAOC,IAAI,CAACb,IAAIc,IAAI,KAAKP,OAAO,CAACtB,OAAO8B,eAAe,CAAC;YAAC;YAAQ;SAAQ;QAChF9B,OAAOe,IAAIgB,OAAO,CAAC,aAAa,EAAEC,YAAY,CAAC;QAC/C,MAAMC,UAAqDC,WAAWnB,IAAIgB,OAAO,CAAC,aAAa;QAC/F;;;;;;;;;KASC,GACD;;;;;;;;;KASC,GACD;;;;;;;;;KASC,GACD;;;;;;;;KAQC,GACDI,cAAcF;QACd,eAAe;QACf,KAAK,MAAMG,UAAUH,QAAS;YAC5B,MAAMI,QAAQD,OAAOE,OAAO,CAAC,EAAE,CAACC,SAAS,CAACH,OAAOE,OAAO,CAAC,EAAE,CAACE,OAAO,CAAC,OAAO;YAC3E,IAAIJ,OAAOK,IAAI,KAAKC,0BAAU,CAACC,IAAI,EAAE;gBACnC,iCAAiC;gBACjCzD,YAAY0D,IAAAA,iBAAS,EAACP;gBACtB;YACF;YACA,MAAMQ,eAA2B,MAAM/D,WAAWgE,WAAW,CAACT,OAAO;gBACnEU,QAAQlE,WAAWwD,KAAK,CAACD,OAAOK,IAAI,CAAC,CAACM,MAAM;YAC9C;YACA/C,OAAO6C,aAAaG,GAAG,EAAEC,WAAW,CAACC,IAAAA,wBAAgB,KAAI,CAAC;YAC1DlD,OAAO6C,aAAaM,GAAG,EAAEF,WAAW,CAACC,IAAAA,wBAAgB,MAAKE,IAAAA,oCAAyB,EAACvE,WAAWwD,KAAK,CAACD,OAAOK,IAAI,CAAC,CAACY,UAAU,GAAG,CAAC;YAChIrD,OAAO6C,aAAaS,QAAQ,CAACpD,EAAE,EAAEW,IAAI,CAAC7B,SAASkB,EAAE;YACjD,IAAIkC,OAAOK,IAAI,KAAKC,0BAAU,CAACa,OAAO,EAAE;gBACtC,iCAAiC;gBACjCtE,eAAeoD;YACjB;QACF;IACF;IAEA3B,GAAG,CAAC,KAAK,EAAE8C,uBAAe,CAAC,OAAO,CAAC,EAAE;QACnC,MAAMzC,MAAM,MAAMnC,IAAIoC,MAAM,CAAC;YAC3BC,QAAQ;YACRC,KAAKsC,uBAAe;YACpBrC,MAAM;QACR;QACAnB,OAAOe,IAAIM,UAAU,EAAEC,OAAO,CAAC;QAC/BtB,OAAOe,IAAIgB,OAAO,CAAC,aAAa,EAAEC,YAAY,CAAC;QAC/C,MAAMC,UAAqDC,WAAWnB,IAAIgB,OAAO,CAAC,aAAa;QAC/F;;;;;;;;;;IAUA,GACA;;;;;;;;;;IAUA,GACA;;;;;;;;;;IAUA,GACA;;;;;;;;;;IAUA,GACAI,cAAcF,SAAS;IACzB;IAEAvB,GAAG,CAAC,KAAK,EAAE+C,wBAAgB,CAAC,OAAO,CAAC,EAAE;QACpC,MAAM1C,MAAM,MAAMnC,IAAIoC,MAAM,CAAC;YAC3BC,QAAQ;YACRc,SAAS;gBAAE,CAAClD,WAAWwD,KAAK,CAACqB,IAAI,CAACC,IAAI,CAAC,EAAEzE;YAAU;YACnDgC,KAAKuC,wBAAgB;YACrBxB,SAAS;gBAAE,CAACpD,WAAWwD,KAAK,CAACuB,OAAO,CAACD,IAAI,CAAC,EAAE1E;YAAa;QAC3D;QACAe,OAAOe,IAAIM,UAAU,EAAEC,OAAO,CAAC;QAC/B,MAAMW,UAAqDC,WAAWnB,IAAIgB,OAAO,CAAC,aAAa;QAC/FI,cAAcF;IAChB;IAEAvB,GAAG,CAAC,KAAK,EAAE+C,wBAAgB,CAAC,mBAAmB,CAAC,EAAE;QAChD,MAAM1C,MAAM,MAAMnC,IAAIoC,MAAM,CAAC;YAC3BC,QAAQ;YACRC,KAAKuC,wBAAgB;YACrB1B,SAAS;gBAAE,CAAClD,WAAWwD,KAAK,CAACqB,IAAI,CAACC,IAAI,CAAC,EAAEzE;YAAU;YACnD+C,SAAS;gBAAE,CAACpD,WAAWwD,KAAK,CAACuB,OAAO,CAACD,IAAI,CAAC,EAAE;YAAM;QACpD;QACA3D,OAAOe,IAAIM,UAAU,EAAEC,OAAO,CAAC;IACjC;IAEAZ,GAAG,CAAC,KAAK,EAAE+C,wBAAgB,CAAC,sBAAsB,CAAC,EAAE;QACnD,MAAM1C,MAAM,MAAMnC,IAAIoC,MAAM,CAAC;YAC3BC,QAAQ;YACRC,KAAKuC,wBAAgB;YACrBxB,SAAS;gBAAE,CAACpD,WAAWwD,KAAK,CAACuB,OAAO,CAACD,IAAI,CAAC,EAAE1E;YAAa;QAC3D;QACAe,OAAOe,IAAIM,UAAU,EAAEC,OAAO,CAAC;QAC/BtB,OAAOe,IAAIc,IAAI,GAAGgC,OAAO,EAAEvC,OAAO,CAACwC,gBAAU,CAACC,eAAe;IAC/D;IAEArD,GAAG,CAAC,KAAK,EAAEsD,sBAAc,CAAC,OAAO,CAAC,EAAE;QAClC,MAAMjD,MAAM,MAAMnC,IAAIoC,MAAM,CAAC;YAC3BC,QAAQ;YACRC,KAAK8C,sBAAc;YACnB7C,MAAM;gBAAEhB,OAAOnB,SAASmB,KAAK;gBAAEiB,UAAU;YAAM;QACjD;QACApB,OAAOe,IAAIM,UAAU,EAAEC,OAAO,CAAC;IACjC;IAEAZ,GAAG,CAAC,KAAK,EAAEsD,sBAAc,CAAC,OAAO,CAAC,EAAE;QAClC,MAAMjD,MAAM,MAAMnC,IAAIoC,MAAM,CAAC;YAC3BC,QAAQ;YACRC,KAAK8C,sBAAc;YACnB7C,MAAM;gBAAEhB,OAAOnB,SAASmB,KAAK;gBAAEiB,UAAUpC,SAASoC,QAAQ;YAAC;QAC7D;QACApB,OAAOe,IAAIM,UAAU,EAAEC,OAAO,CAAC;QAC/B,MAAMgB,UAAUvB,IAAIc,IAAI;QACxB7B,OAAO,IAAMiE,IAAAA,+BAAoB,EAACC,kCAAgB,EAAE5B,UAAUhC,GAAG,CAACC,OAAO;QACzE,KAAK,MAAMkC,QAAQ0B,iBAAW,CAACC,MAAM,CAAC,CAACC,IAAMA,MAAM3B,0BAAU,CAAC4B,MAAM,IAAID,MAAM3B,0BAAU,CAACa,OAAO,EAAG;YACjGvD,OAAOsC,OAAO,CAACG,KAAK,EAAE9B,WAAW;YACjCX,OAAOsC,OAAO,CAAC,GAAGG,KAAK,WAAW,CAAC,CAAC,EAAEQ,WAAW,CAACC,IAAAA,wBAAgB,MAAKE,IAAAA,oCAAyB,EAACvE,WAAWwD,KAAK,CAACI,KAAK,CAACY,UAAU,GAAG,CAAC;QACxI;IACF;IAEA3C,GAAG,CAAC,KAAK,EAAE6D,8BAAsB,CAAC,OAAO,CAAC,EAAE;QAC1C,MAAMxD,MAAM,MAAMnC,IAAIoC,MAAM,CAAC;YAC3BC,QAAQ;YACRC,KAAKqD,8BAAsB;YAC3BxC,SAAS;gBAAEyC,eAAe;YAAa;QACzC;QACAxE,OAAOe,IAAIM,UAAU,EAAEC,OAAO,CAAC;IACjC;IAEAZ,GAAG,CAAC,KAAK,EAAE6D,8BAAsB,CAAC,OAAO,CAAC,EAAE;QAC1C,MAAMxD,MAAM,MAAMnC,IAAIoC,MAAM,CAAC;YAC3BC,QAAQ;YACRC,KAAKqD,8BAAsB;YAC3BxC,SAAS;gBAAEyC,eAAe,CAAC,OAAO,EAAEvF,cAAc;YAAC;QACrD;QACAe,OAAOe,IAAIM,UAAU,EAAEC,OAAO,CAAC;QAC/BtB,OAAO,IAAMiE,IAAAA,+BAAoB,EAACC,kCAAgB,EAAEnD,IAAIc,IAAI,KAAKvB,GAAG,CAACC,OAAO;IAC9E;IAEA,SAAS2B,WAAWuC,SAAmB;QACrC,MAAMxC,UAAqD,EAAE;QAC7D,KAAK,MAAMyC,KAAKD,UAAW;YACzB,MAAME,aAAaD,EAAEE,KAAK,CAAC,IAAI,CAAC,EAAE;YAClC,MAAMC,eAAeH,EAAEE,KAAK,CAAC;YAC7B,OAAQD;gBACN,KAAK9F,WAAWwD,KAAK,CAACyC,MAAM,CAACnB,IAAI;oBAC/B1B,QAAQ8C,IAAI,CAAC;wBAAEtC,MAAMC,0BAAU,CAAC4B,MAAM;wBAAEhC,SAASuC;oBAAa;oBAC9D;gBACF,KAAKhG,WAAWwD,KAAK,CAACuB,OAAO,CAACD,IAAI;oBAChC1B,QAAQ8C,IAAI,CAAC;wBAAEtC,MAAMC,0BAAU,CAACa,OAAO;wBAAEjB,SAASuC;oBAAa;oBAC/D;gBACF,KAAKhG,WAAWwD,KAAK,CAAC2C,EAAE,CAACrB,IAAI;oBAC3B1B,QAAQ8C,IAAI,CAAC;wBAAEtC,MAAMC,0BAAU,CAACuC,EAAE;wBAAE3C,SAASuC;oBAAa;oBAC1D;gBACF,KAAKhG,WAAWwD,KAAK,CAACqB,IAAI,CAACC,IAAI;oBAC7B1B,QAAQ8C,IAAI,CAAC;wBAAEtC,MAAMC,0BAAU,CAACC,IAAI;wBAAEL,SAASuC;oBAAa;oBAC5D;YACJ;QACF;QACA,OAAO5C;IACT;IAEA,SAASE,cAAcF,OAAkD,EAAEiD,QAAQ,KAAK;QACtF,KAAK,MAAM9C,UAAUH,QAAS;YAC5BjC,OAAOoC,OAAOE,OAAO,CAAC,EAAE,CAACsC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE/D,IAAI,CAAChC,WAAWwD,KAAK,CAACD,OAAOK,IAAI,CAAC,CAACkB,IAAI;YAC/E3D,OAAOoC,OAAOE,OAAO,CAAC,EAAE,CAACsC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE/D,IAAI,CAACsE,iBAAW,CAAC/C,OAAOK,IAAI,CAAC;YACrE,IAAIL,OAAOK,IAAI,KAAKC,0BAAU,CAACC,IAAI,EAAE;gBACnC3C,OAAOoC,OAAOE,OAAO,EAAEhC,GAAG,CAAC8E,SAAS,CAAC;YACvC,OAAO;gBACLpF,OAAOoC,OAAOE,OAAO,EAAE8C,SAAS,CAAC;YACnC;YACApF,OAAOoC,OAAOE,OAAO,EAAEhC,GAAG,CAAC8E,SAAS,CAAC;YACrCpF,OAAOoC,OAAOE,OAAO,CAACF,OAAOE,OAAO,CAAC+C,MAAM,GAAG,EAAE,CAACT,KAAK,CAAC,IAAI,CAAC,EAAE,CAACU,WAAW,IAAIzE,IAAI,CAAChC,WAAW0G,QAAQ;YACtG,IAAIL,OAAO;gBACTlF,OAAOoC,OAAOE,OAAO,CAAC,EAAE,CAACsC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE/D,IAAI,CAAC;gBAC7Cb,OAAOoC,OAAOE,OAAO,CAAC,EAAE,CAACsC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE/D,IAAI,CAAC;gBAC7Cb,OAAOoC,OAAOE,OAAO,CAAC,EAAE,CAACsC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE/D,IAAI,CAAC;YAC/C,OAAO;gBACLb,OAAOwF,SAASpD,OAAOE,OAAO,CAAC,EAAE,CAACsC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG3B,WAAW,CAACG,IAAAA,oCAAyB,EAACvE,WAAWwD,KAAK,CAACD,OAAOK,IAAI,CAAC,CAACgD,YAAY,GAAG,CAAC;gBACtIzF,OAAOoC,OAAOE,OAAO,CAAC,EAAE,CAACsC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAEtE,GAAG,CAACO,IAAI,CAAC;YACnD;QACF;IACF;AACF"}

package/server/authentication/auth.module.js

@@ -0,0 +1,84 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "AuthModule", {
+    enumerable: true,
+    get: function() {
+        return AuthModule;
+    }
+});
+const _common = require("@nestjs/common");
+const _core = require("@nestjs/core");
+const _jwt = require("@nestjs/jwt");
+const _passport = require("@nestjs/passport");
+const _usersmodule = require("../applications/users/users.module");
+const _configenvironment = require("../configuration/config.environment");
+const _authcontroller = require("./auth.controller");
+const _authanonymousguard = require("./guards/auth-anonymous.guard");
+const _authanonymousstrategy = require("./guards/auth-anonymous.strategy");
+const _authbasicguard = require("./guards/auth-basic.guard");
+const _authbasicstrategy = require("./guards/auth-basic.strategy");
+const _authlocalguard = require("./guards/auth-local.guard");
+const _authlocalstrategy = require("./guards/auth-local.strategy");
+const _authtokenaccessguard = require("./guards/auth-token-access.guard");
+const _authtokenaccessstrategy = require("./guards/auth-token-access.strategy");
+const _authtokenrefreshguard = require("./guards/auth-token-refresh.guard");
+const _authtokenrefreshstrategy = require("./guards/auth-token-refresh.strategy");
+const _authmethod = require("./models/auth-method");
+const _authmanagerservice = require("./services/auth-manager.service");
+const _authmethoddatabaseservice = require("./services/auth-methods/auth-method-database.service");
+const _authmethodldapservice = require("./services/auth-methods/auth-method-ldap.service");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+let AuthModule = class AuthModule {
+};
+AuthModule = _ts_decorate([
+    (0, _common.Global)(),
+    (0, _common.Module)({
+        imports: [
+            _jwt.JwtModule.register({
+                global: true
+            }),
+            _usersmodule.UsersModule,
+            _passport.PassportModule
+        ],
+        controllers: [
+            _authcontroller.AuthController
+        ],
+        providers: [
+            {
+                provide: _core.APP_GUARD,
+                useClass: _authtokenaccessguard.AuthTokenAccessGuard
+            },
+            _authtokenrefreshguard.AuthTokenRefreshGuard,
+            _authlocalguard.AuthLocalGuard,
+            _authbasicguard.AuthBasicGuard,
+            _authanonymousguard.AuthAnonymousGuard,
+            _authlocalstrategy.AuthLocalStrategy,
+            _authtokenaccessstrategy.AuthTokenAccessStrategy,
+            _authtokenrefreshstrategy.AuthTokenRefreshStrategy,
+            _authbasicstrategy.AuthBasicStrategy,
+            _authanonymousstrategy.AuthAnonymousStrategy,
+            _authmanagerservice.AuthManager,
+            {
+                provide: _authmethod.AuthMethod,
+                useClass: _configenvironment.configuration.auth.method === 'ldap' ? _authmethodldapservice.AuthMethodLdapService : _authmethoddatabaseservice.AuthMethodDatabase
+            }
+        ],
+        exports: [
+            _authmanagerservice.AuthManager,
+            _authmethod.AuthMethod
+        ]
+    })
+], AuthModule);
+
+//# sourceMappingURL=auth.module.js.map

package/server/authentication/auth.module.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../backend/src/authentication/auth.module.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Global, Module } from '@nestjs/common'\nimport { APP_GUARD } from '@nestjs/core'\nimport { JwtModule } from '@nestjs/jwt'\nimport { PassportModule } from '@nestjs/passport'\nimport { UsersModule } from '../applications/users/users.module'\nimport { configuration } from '../configuration/config.environment'\nimport { AuthController } from './auth.controller'\nimport { AuthAnonymousGuard } from './guards/auth-anonymous.guard'\nimport { AuthAnonymousStrategy } from './guards/auth-anonymous.strategy'\nimport { AuthBasicGuard } from './guards/auth-basic.guard'\nimport { AuthBasicStrategy } from './guards/auth-basic.strategy'\nimport { AuthLocalGuard } from './guards/auth-local.guard'\nimport { AuthLocalStrategy } from './guards/auth-local.strategy'\nimport { AuthTokenAccessGuard } from './guards/auth-token-access.guard'\nimport { AuthTokenAccessStrategy } from './guards/auth-token-access.strategy'\nimport { AuthTokenRefreshGuard } from './guards/auth-token-refresh.guard'\nimport { AuthTokenRefreshStrategy } from './guards/auth-token-refresh.strategy'\nimport { AuthMethod } from './models/auth-method'\nimport { AuthManager } from './services/auth-manager.service'\nimport { AuthMethodDatabase } from './services/auth-methods/auth-method-database.service'\nimport { AuthMethodLdapService } from './services/auth-methods/auth-method-ldap.service'\n\n@Global()\n@Module({\n  imports: [JwtModule.register({ global: true }), UsersModule, PassportModule],\n  controllers: [AuthController],\n  providers: [\n    {\n      provide: APP_GUARD,\n      useClass: AuthTokenAccessGuard\n    },\n    AuthTokenRefreshGuard,\n    AuthLocalGuard,\n    AuthBasicGuard,\n    AuthAnonymousGuard,\n    AuthLocalStrategy,\n    AuthTokenAccessStrategy,\n    AuthTokenRefreshStrategy,\n    AuthBasicStrategy,\n    AuthAnonymousStrategy,\n    AuthManager,\n    { provide: AuthMethod, useClass: configuration.auth.method === 'ldap' ? AuthMethodLdapService : AuthMethodDatabase }\n  ],\n  exports: [AuthManager, AuthMethod]\n})\nexport class AuthModule {}\n"],"names":["AuthModule","imports","JwtModule","register","global","UsersModule","PassportModule","controllers","AuthController","providers","provide","APP_GUARD","useClass","AuthTokenAccessGuard","AuthTokenRefreshGuard","AuthLocalGuard","AuthBasicGuard","AuthAnonymousGuard","AuthLocalStrategy","AuthTokenAccessStrategy","AuthTokenRefreshStrategy","AuthBasicStrategy","AuthAnonymousStrategy","AuthManager","AuthMethod","configuration","auth","method","AuthMethodLdapService","AuthMethodDatabase","exports"],"mappings":"AAAA;;;;CAIC;;;;+BA+CYA;;;eAAAA;;;wBA7CkB;sBACL;qBACA;0BACK;6BACH;mCACE;gCACC;oCACI;uCACG;gCACP;mCACG;gCACH;mCACG;sCACG;yCACG;uCACF;0CACG;4BACd;oCACC;2CACO;uCACG;;;;;;;AAyB/B,IAAA,AAAMA,aAAN,MAAMA;AAAY;;;;QArBvBC,SAAS;YAACC,cAAS,CAACC,QAAQ,CAAC;gBAAEC,QAAQ;YAAK;YAAIC,wBAAW;YAAEC,wBAAc;SAAC;QAC5EC,aAAa;YAACC,8BAAc;SAAC;QAC7BC,WAAW;YACT;gBACEC,SAASC,eAAS;gBAClBC,UAAUC,0CAAoB;YAChC;YACAC,4CAAqB;YACrBC,8BAAc;YACdC,8BAAc;YACdC,sCAAkB;YAClBC,oCAAiB;YACjBC,gDAAuB;YACvBC,kDAAwB;YACxBC,oCAAiB;YACjBC,4CAAqB;YACrBC,+BAAW;YACX;gBAAEb,SAASc,sBAAU;gBAAEZ,UAAUa,gCAAa,CAACC,IAAI,CAACC,MAAM,KAAK,SAASC,4CAAqB,GAAGC,6CAAkB;YAAC;SACpH;QACDC,SAAS;YAACP,+BAAW;YAAEC,sBAAU;SAAC"}

package/server/authentication/constants/auth.js

@@ -0,0 +1,54 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get CSRF_ERROR () {
+        return CSRF_ERROR;
+    },
+    get CSRF_KEY () {
+        return CSRF_KEY;
+    },
+    get TOKEN_PATHS () {
+        return TOKEN_PATHS;
+    },
+    get TOKEN_TYPES () {
+        return TOKEN_TYPES;
+    },
+    get WS_KEY () {
+        return WS_KEY;
+    }
+});
+const _tokeninterface = require("../interfaces/token.interface");
+const _routes = require("./routes");
+const CSRF_KEY = 'sync-in-csrf';
+const WS_KEY = 'sync-in-ws';
+const TOKEN_PATHS = {
+    access: '/',
+    refresh: _routes.API_AUTH_REFRESH,
+    ws: _routes.API_AUTH_WS,
+    csrf: '/'
+};
+const TOKEN_TYPES = [
+    _tokeninterface.TOKEN_TYPE.REFRESH,
+    _tokeninterface.TOKEN_TYPE.ACCESS,
+    _tokeninterface.TOKEN_TYPE.WS,
+    _tokeninterface.TOKEN_TYPE.CSRF
+];
+const CSRF_ERROR = {
+    MISSING_JWT: 'Missing CSRF in JWT',
+    MISSING_HEADERS: 'Missing CSRF in headers',
+    MISMATCH: 'CSRF mismatch'
+};
+
+//# sourceMappingURL=auth.js.map

package/server/authentication/constants/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../backend/src/authentication/constants/auth.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { TOKEN_TYPE } from '../interfaces/token.interface'\nimport { API_AUTH_REFRESH, API_AUTH_WS } from './routes'\n\nexport const CSRF_KEY = 'sync-in-csrf'\nexport const WS_KEY = 'sync-in-ws'\n\nexport const TOKEN_PATHS = { access: '/', refresh: API_AUTH_REFRESH, ws: API_AUTH_WS, csrf: '/' } as const\nexport const TOKEN_TYPES: TOKEN_TYPE[] = [TOKEN_TYPE.REFRESH, TOKEN_TYPE.ACCESS, TOKEN_TYPE.WS, TOKEN_TYPE.CSRF] as const\n\nexport const CSRF_ERROR = {\n  MISSING_JWT: 'Missing CSRF in JWT',\n  MISSING_HEADERS: 'Missing CSRF in headers',\n  MISMATCH: 'CSRF mismatch'\n} as const\n"],"names":["CSRF_ERROR","CSRF_KEY","TOKEN_PATHS","TOKEN_TYPES","WS_KEY","access","refresh","API_AUTH_REFRESH","ws","API_AUTH_WS","csrf","TOKEN_TYPE","REFRESH","ACCESS","WS","CSRF","MISSING_JWT","MISSING_HEADERS","MISMATCH"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAWYA;eAAAA;;QANAC;eAAAA;;QAGAC;eAAAA;;QACAC;eAAAA;;QAHAC;eAAAA;;;gCAJc;wBACmB;AAEvC,MAAMH,WAAW;AACjB,MAAMG,SAAS;AAEf,MAAMF,cAAc;IAAEG,QAAQ;IAAKC,SAASC,wBAAgB;IAAEC,IAAIC,mBAAW;IAAEC,MAAM;AAAI;AACzF,MAAMP,cAA4B;IAACQ,0BAAU,CAACC,OAAO;IAAED,0BAAU,CAACE,MAAM;IAAEF,0BAAU,CAACG,EAAE;IAAEH,0BAAU,CAACI,IAAI;CAAC;AAEzG,MAAMf,aAAa;IACxBgB,aAAa;IACbC,iBAAiB;IACjBC,UAAU;AACZ"}

package/server/authentication/constants/routes.js

@@ -0,0 +1,55 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get API_AUTH_LOGIN () {
+        return API_AUTH_LOGIN;
+    },
+    get API_AUTH_LOGOUT () {
+        return API_AUTH_LOGOUT;
+    },
+    get API_AUTH_REFRESH () {
+        return API_AUTH_REFRESH;
+    },
+    get API_AUTH_TOKEN () {
+        return API_AUTH_TOKEN;
+    },
+    get API_AUTH_TOKEN_REFRESH () {
+        return API_AUTH_TOKEN_REFRESH;
+    },
+    get API_AUTH_WS () {
+        return API_AUTH_WS;
+    },
+    get AUTH_ROUTE () {
+        return AUTH_ROUTE;
+    }
+});
+var AUTH_ROUTE = /*#__PURE__*/ function(AUTH_ROUTE) {
+    AUTH_ROUTE["BASE"] = "/api/auth";
+    AUTH_ROUTE["LOGIN"] = "login";
+    AUTH_ROUTE["LOGOUT"] = "logout";
+    AUTH_ROUTE["REFRESH"] = "refresh";
+    AUTH_ROUTE["TOKEN"] = "token";
+    AUTH_ROUTE["TOKEN_REFRESH"] = "token/refresh";
+    AUTH_ROUTE["WS"] = "socket.io";
+    return AUTH_ROUTE;
+}({});
+const API_AUTH_LOGIN = `${"/api/auth"}/${"login"}`;
+const API_AUTH_LOGOUT = `${"/api/auth"}/${"logout"}`;
+const API_AUTH_REFRESH = `${"/api/auth"}/${"refresh"}`;
+const API_AUTH_TOKEN = `${"/api/auth"}/${"token"}`;
+const API_AUTH_TOKEN_REFRESH = `${"/api/auth"}/${"token/refresh"}`;
+const API_AUTH_WS = `/${"socket.io"}`;
+
+//# sourceMappingURL=routes.js.map

package/server/authentication/constants/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../backend/src/authentication/constants/routes.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport enum AUTH_ROUTE {\n  BASE = '/api/auth',\n  LOGIN = 'login',\n  LOGOUT = 'logout',\n  REFRESH = 'refresh',\n  TOKEN = 'token',\n  TOKEN_REFRESH = `${AUTH_ROUTE.TOKEN}/refresh`,\n  WS = 'socket.io'\n}\n\nexport const API_AUTH_LOGIN = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.LOGIN}`\nexport const API_AUTH_LOGOUT = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.LOGOUT}`\nexport const API_AUTH_REFRESH = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.REFRESH}`\nexport const API_AUTH_TOKEN = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TOKEN}`\nexport const API_AUTH_TOKEN_REFRESH = `${AUTH_ROUTE.BASE}/${AUTH_ROUTE.TOKEN_REFRESH}`\nexport const API_AUTH_WS = `/${AUTH_ROUTE.WS}`\n"],"names":["API_AUTH_LOGIN","API_AUTH_LOGOUT","API_AUTH_REFRESH","API_AUTH_TOKEN","API_AUTH_TOKEN_REFRESH","API_AUTH_WS","AUTH_ROUTE"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAYYA;eAAAA;;QACAC;eAAAA;;QACAC;eAAAA;;QACAC;eAAAA;;QACAC;eAAAA;;QACAC;eAAAA;;QAfDC;eAAAA;;;AAAL,IAAA,AAAKA,oCAAAA;;;;;;;;WAAAA;;AAUL,MAAMN,iBAAiB,eAAmB,CAAC,WAAoB;AAC/D,MAAMC,kBAAkB,eAAmB,CAAC,YAAqB;AACjE,MAAMC,mBAAmB,eAAmB,CAAC,aAAsB;AACnE,MAAMC,iBAAiB,eAAmB,CAAC,WAAoB;AAC/D,MAAMC,yBAAyB,eAAmB,CAAC,mBAA4B;AAC/E,MAAMC,cAAc,CAAC,CAAC,eAAiB"}

package/server/authentication/decorators/auth-token-optional.decorator.js

@@ -0,0 +1,26 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "AuthTokenOptional", {
+    enumerable: true,
+    get: function() {
+        return AuthTokenOptional;
+    }
+});
+const _common = require("@nestjs/common");
+const _passport = require("@nestjs/passport");
+const _authtokenskipdecorator = require("./auth-token-skip.decorator");
+const AuthTokenOptional = ()=>{
+    // skip global auth access guard and apply guards successively to context
+    return (0, _common.applyDecorators)((0, _authtokenskipdecorator.AuthTokenSkip)(), (0, _common.UseGuards)((0, _passport.AuthGuard)([
+        'tokenAccess',
+        'anonymous'
+    ])));
+};
+
+//# sourceMappingURL=auth-token-optional.decorator.js.map

package/server/authentication/decorators/auth-token-optional.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../backend/src/authentication/decorators/auth-token-optional.decorator.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { applyDecorators, UseGuards } from '@nestjs/common'\nimport { AuthGuard } from '@nestjs/passport'\nimport { AuthTokenSkip } from './auth-token-skip.decorator'\n\nexport const AuthTokenOptional = () => {\n  // skip global auth access guard and apply guards successively to context\n  return applyDecorators(AuthTokenSkip(), UseGuards(AuthGuard(['tokenAccess', 'anonymous'])))\n}\n"],"names":["AuthTokenOptional","applyDecorators","AuthTokenSkip","UseGuards","AuthGuard"],"mappings":"AAAA;;;;CAIC;;;;+BAMYA;;;eAAAA;;;wBAJ8B;0BACjB;wCACI;AAEvB,MAAMA,oBAAoB;IAC/B,yEAAyE;IACzE,OAAOC,IAAAA,uBAAe,EAACC,IAAAA,qCAAa,KAAIC,IAAAA,iBAAS,EAACC,IAAAA,mBAAS,EAAC;QAAC;QAAe;KAAY;AAC1F"}