@sync-in/server 1.3.0

package/server/authentication/guards/auth-token-access.strategy.js

@@ -0,0 +1,68 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "AuthTokenAccessStrategy", {
+    enumerable: true,
+    get: function() {
+        return AuthTokenAccessStrategy;
+    }
+});
+const _common = require("@nestjs/common");
+const _passport = require("@nestjs/passport");
+const _nestjspino = require("nestjs-pino");
+const _passportjwt = require("passport-jwt");
+const _usermodel = require("../../applications/users/models/user.model");
+const _tokeninterface = require("../interfaces/token.interface");
+const _authmanagerservice = require("../services/auth-manager.service");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let AuthTokenAccessStrategy = class AuthTokenAccessStrategy extends (0, _passport.PassportStrategy)(_passportjwt.Strategy, 'tokenAccess') {
+    // not declared properly:  https://github.com/nestjs/passport/issues/929
+    validate(req, jwtPayload) {
+        this.logger.assign({
+            user: jwtPayload.identity.login
+        });
+        this.authManager.csrfValidation(req, jwtPayload, _tokeninterface.TOKEN_TYPE.ACCESS);
+        return new _usermodel.UserModel(jwtPayload.identity);
+    }
+    static extractJWTFromCookie(req) {
+        if (typeof req.cookies === 'object' && req.cookies[AuthTokenAccessStrategy.accessCookieName] !== undefined) {
+            return req.cookies[AuthTokenAccessStrategy.accessCookieName];
+        }
+        return null;
+    }
+    constructor(authManager, logger){
+        super({
+            jwtFromRequest: _passportjwt.ExtractJwt.fromExtractors([
+                AuthTokenAccessStrategy.extractJWTFromCookie,
+                _passportjwt.ExtractJwt.fromAuthHeaderAsBearerToken()
+            ]),
+            secretOrKey: authManager.authConfig.token.access.secret,
+            ignoreExpiration: false,
+            passReqToCallback: true
+        }), this.authManager = authManager, this.logger = logger;
+        AuthTokenAccessStrategy.accessCookieName = authManager.authConfig.token.access.name;
+    }
+};
+AuthTokenAccessStrategy = _ts_decorate([
+    (0, _common.Injectable)(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _authmanagerservice.AuthManager === "undefined" ? Object : _authmanagerservice.AuthManager,
+        typeof _nestjspino.PinoLogger === "undefined" ? Object : _nestjspino.PinoLogger
+    ])
+], AuthTokenAccessStrategy);
+
+//# sourceMappingURL=auth-token-access.strategy.js.map

package/server/authentication/guards/auth-token-access.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-token-access.strategy.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Injectable } from '@nestjs/common'\nimport { PassportStrategy } from '@nestjs/passport'\nimport { FastifyRequest } from 'fastify'\nimport { PinoLogger } from 'nestjs-pino'\nimport { ExtractJwt, Strategy } from 'passport-jwt'\nimport { UserModel } from '../../applications/users/models/user.model'\nimport { JwtPayload } from '../interfaces/jwt-payload.interface'\nimport { TOKEN_TYPE } from '../interfaces/token.interface'\nimport { AuthManager } from '../services/auth-manager.service'\n\n@Injectable()\nexport class AuthTokenAccessStrategy extends PassportStrategy(Strategy, 'tokenAccess') {\n  private static accessCookieName: string\n\n  constructor(\n    private readonly authManager: AuthManager,\n    private readonly logger: PinoLogger\n  ) {\n    super({\n      jwtFromRequest: ExtractJwt.fromExtractors([AuthTokenAccessStrategy.extractJWTFromCookie, ExtractJwt.fromAuthHeaderAsBearerToken()]),\n      secretOrKey: authManager.authConfig.token.access.secret,\n      ignoreExpiration: false,\n      passReqToCallback: true\n    })\n    AuthTokenAccessStrategy.accessCookieName = authManager.authConfig.token.access.name\n  }\n\n  // not declared properly:  https://github.com/nestjs/passport/issues/929\n  validate(req: FastifyRequest, jwtPayload: JwtPayload): UserModel {\n    this.logger.assign({ user: jwtPayload.identity.login })\n    this.authManager.csrfValidation(req, jwtPayload, TOKEN_TYPE.ACCESS)\n    return new UserModel(jwtPayload.identity)\n  }\n\n  static extractJWTFromCookie(req: FastifyRequest): string | null {\n    if (typeof req.cookies === 'object' && req.cookies[AuthTokenAccessStrategy.accessCookieName] !== undefined) {\n      return req.cookies[AuthTokenAccessStrategy.accessCookieName]\n    }\n    return null\n  }\n}\n"],"names":["AuthTokenAccessStrategy","PassportStrategy","Strategy","validate","req","jwtPayload","logger","assign","user","identity","login","authManager","csrfValidation","TOKEN_TYPE","ACCESS","UserModel","extractJWTFromCookie","cookies","accessCookieName","undefined","jwtFromRequest","ExtractJwt","fromExtractors","fromAuthHeaderAsBearerToken","secretOrKey","authConfig","token","access","secret","ignoreExpiration","passReqToCallback","name"],"mappings":"AAAA;;;;CAIC;;;;+BAaYA;;;eAAAA;;;wBAXc;0BACM;4BAEN;6BACU;2BACX;gCAEC;oCACC;;;;;;;;;;AAGrB,IAAA,AAAMA,0BAAN,MAAMA,gCAAgCC,IAAAA,0BAAgB,EAACC,qBAAQ,EAAE;IAgBtE,wEAAwE;IACxEC,SAASC,GAAmB,EAAEC,UAAsB,EAAa;QAC/D,IAAI,CAACC,MAAM,CAACC,MAAM,CAAC;YAAEC,MAAMH,WAAWI,QAAQ,CAACC,KAAK;QAAC;QACrD,IAAI,CAACC,WAAW,CAACC,cAAc,CAACR,KAAKC,YAAYQ,0BAAU,CAACC,MAAM;QAClE,OAAO,IAAIC,oBAAS,CAACV,WAAWI,QAAQ;IAC1C;IAEA,OAAOO,qBAAqBZ,GAAmB,EAAiB;QAC9D,IAAI,OAAOA,IAAIa,OAAO,KAAK,YAAYb,IAAIa,OAAO,CAACjB,wBAAwBkB,gBAAgB,CAAC,KAAKC,WAAW;YAC1G,OAAOf,IAAIa,OAAO,CAACjB,wBAAwBkB,gBAAgB,CAAC;QAC9D;QACA,OAAO;IACT;IAzBA,YACE,AAAiBP,WAAwB,EACzC,AAAiBL,MAAkB,CACnC;QACA,KAAK,CAAC;YACJc,gBAAgBC,uBAAU,CAACC,cAAc,CAAC;gBAACtB,wBAAwBgB,oBAAoB;gBAAEK,uBAAU,CAACE,2BAA2B;aAAG;YAClIC,aAAab,YAAYc,UAAU,CAACC,KAAK,CAACC,MAAM,CAACC,MAAM;YACvDC,kBAAkB;YAClBC,mBAAmB;QACrB,SARiBnB,cAAAA,kBACAL,SAAAA;QAQjBN,wBAAwBkB,gBAAgB,GAAGP,YAAYc,UAAU,CAACC,KAAK,CAACC,MAAM,CAACI,IAAI;IACrF;AAeF"}

package/server/authentication/guards/auth-token-refresh.guard.js

@@ -0,0 +1,40 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "AuthTokenRefreshGuard", {
+    enumerable: true,
+    get: function() {
+        return AuthTokenRefreshGuard;
+    }
+});
+const _common = require("@nestjs/common");
+const _passport = require("@nestjs/passport");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+let AuthTokenRefreshGuard = class AuthTokenRefreshGuard extends (0, _passport.AuthGuard)('tokenRefresh') {
+    handleRequest(err, user, info, ctx, status) {
+        const req = this.getRequest(ctx);
+        req.raw.user = user?.login || 'unauthorized';
+        if (info) {
+            this.logger.warn(`<${req.raw.user}> <${req.ip}> ${info}`);
+        }
+        return super.handleRequest(err, user, info, ctx, status);
+    }
+    constructor(...args){
+        super(...args), this.logger = new _common.Logger(AuthTokenRefreshGuard.name);
+    }
+};
+AuthTokenRefreshGuard = _ts_decorate([
+    (0, _common.Injectable)()
+], AuthTokenRefreshGuard);
+
+//# sourceMappingURL=auth-token-refresh.guard.js.map

package/server/authentication/guards/auth-token-refresh.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-token-refresh.guard.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { ExecutionContext, Injectable, Logger } from '@nestjs/common'\nimport { AuthGuard, IAuthGuard } from '@nestjs/passport'\n\n@Injectable()\nexport class AuthTokenRefreshGuard extends AuthGuard('tokenRefresh') implements IAuthGuard {\n  private readonly logger = new Logger(AuthTokenRefreshGuard.name)\n\n  handleRequest(err: any, user: any, info: Error, ctx: ExecutionContext, status?: any) {\n    const req = this.getRequest(ctx)\n    req.raw.user = user?.login || 'unauthorized'\n    if (info) {\n      this.logger.warn(`<${req.raw.user}> <${req.ip}> ${info}`)\n    }\n    return super.handleRequest(err, user, info, ctx, status)\n  }\n}\n"],"names":["AuthTokenRefreshGuard","AuthGuard","handleRequest","err","user","info","ctx","status","req","getRequest","raw","login","logger","warn","ip","Logger","name"],"mappings":"AAAA;;;;CAIC;;;;+BAMYA;;;eAAAA;;;wBAJwC;0BACf;;;;;;;AAG/B,IAAA,AAAMA,wBAAN,MAAMA,8BAA8BC,IAAAA,mBAAS,EAAC;IAGnDC,cAAcC,GAAQ,EAAEC,IAAS,EAAEC,IAAW,EAAEC,GAAqB,EAAEC,MAAY,EAAE;QACnF,MAAMC,MAAM,IAAI,CAACC,UAAU,CAACH;QAC5BE,IAAIE,GAAG,CAACN,IAAI,GAAGA,MAAMO,SAAS;QAC9B,IAAIN,MAAM;YACR,IAAI,CAACO,MAAM,CAACC,IAAI,CAAC,CAAC,CAAC,EAAEL,IAAIE,GAAG,CAACN,IAAI,CAAC,GAAG,EAAEI,IAAIM,EAAE,CAAC,EAAE,EAAET,MAAM;QAC1D;QACA,OAAO,KAAK,CAACH,cAAcC,KAAKC,MAAMC,MAAMC,KAAKC;IACnD;;QAVK,qBACYK,SAAS,IAAIG,cAAM,CAACf,sBAAsBgB,IAAI;;AAUjE"}

package/server/authentication/guards/auth-token-refresh.guard.spec.js

@@ -0,0 +1,189 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+const _cookie = require("@fastify/cookie");
+const _tsjest = require("@golevelup/ts-jest");
+const _config = require("@nestjs/config");
+const _jwt = require("@nestjs/jwt");
+const _passport = require("@nestjs/passport");
+const _testing = require("@nestjs/testing");
+const _nestjspino = require("nestjs-pino");
+const _nodecrypto = /*#__PURE__*/ _interop_require_default(require("node:crypto"));
+const _usersmanagerservice = require("../../applications/users/services/users-manager.service");
+const _configenvironment = require("../../configuration/config.environment");
+const _auth = require("../constants/auth");
+const _tokeninterface = require("../interfaces/token.interface");
+const _authmanagerservice = require("../services/auth-manager.service");
+const _authtokenrefreshguard = require("./auth-token-refresh.guard");
+const _authtokenrefreshstrategy = require("./auth-token-refresh.strategy");
+function _interop_require_default(obj) {
+    return obj && obj.__esModule ? obj : {
+        default: obj
+    };
+}
+describe(_authtokenrefreshguard.AuthTokenRefreshGuard.name, ()=>{
+    const csrfToken = _nodecrypto.default.randomUUID();
+    let authConfig;
+    let jwtService;
+    let authRefreshGuard;
+    let refreshToken;
+    let refreshTokenWithoutCSRF;
+    let context;
+    beforeAll(async ()=>{
+        const module = await _testing.Test.createTestingModule({
+            imports: [
+                await _config.ConfigModule.forRoot({
+                    load: [
+                        _configenvironment.exportConfiguration
+                    ],
+                    isGlobal: true
+                }),
+                _jwt.JwtModule.register({
+                    global: true
+                }),
+                _passport.PassportModule
+            ],
+            providers: [
+                _authtokenrefreshguard.AuthTokenRefreshGuard,
+                _authtokenrefreshstrategy.AuthTokenRefreshStrategy,
+                _authmanagerservice.AuthManager,
+                {
+                    provide: _usersmanagerservice.UsersManager,
+                    useValue: {}
+                },
+                {
+                    provide: _nestjspino.PinoLogger,
+                    useValue: {
+                        assign: ()=>undefined
+                    }
+                }
+            ]
+        }).compile();
+        authConfig = module.get(_config.ConfigService).get('auth');
+        jwtService = module.get(_jwt.JwtService);
+        authRefreshGuard = module.get(_authtokenrefreshguard.AuthTokenRefreshGuard);
+        refreshToken = await jwtService.signAsync({
+            identity: {
+                id: 1,
+                login: 'foo'
+            },
+            [_tokeninterface.TOKEN_TYPE.CSRF]: csrfToken
+        }, {
+            secret: authConfig.token.refresh.secret,
+            expiresIn: 30
+        });
+        refreshTokenWithoutCSRF = await jwtService.signAsync({
+            identity: {
+                id: 1,
+                login: 'foo'
+            }
+        }, {
+            secret: authConfig.token.refresh.secret,
+            expiresIn: 30
+        });
+        context = (0, _tsjest.createMock)();
+    });
+    it('should be defined', ()=>{
+        expect(authConfig).toBeDefined();
+        expect(jwtService).toBeDefined();
+        expect(authRefreshGuard).toBeDefined();
+        expect(refreshToken).toBeDefined();
+        expect(refreshTokenWithoutCSRF).toBeDefined();
+        expect(csrfToken).toBeDefined();
+    });
+    it('should pass with a valid refresh token in cookies with CSRF', async ()=>{
+        context.switchToHttp().getRequest.mockReturnValue({
+            raw: {
+                user: ''
+            },
+            headers: {
+                [authConfig.token.csrf.name]: (0, _cookie.sign)(csrfToken, authConfig.token.csrf.secret)
+            },
+            cookies: {
+                [authConfig.token.refresh.name]: refreshToken
+            }
+        });
+        expect(await authRefreshGuard.canActivate(context)).toBe(true);
+    });
+    it('should pass with a valid refresh token in request header with no CSRF', async ()=>{
+        context.switchToHttp().getRequest.mockReturnValue({
+            raw: {
+                user: ''
+            },
+            headers: {
+                authorization: `Bearer ${refreshToken}`
+            }
+        });
+        expect(await authRefreshGuard.canActivate(context)).toBe(true);
+    });
+    it('should throw an error with an invalid refresh token in cookies', async ()=>{
+        context.switchToHttp().getRequest.mockReturnValue({
+            raw: {
+                user: ''
+            },
+            headers: {},
+            cookies: {
+                [authConfig.token.refresh.name]: 'bar'
+            }
+        });
+        await expect(authRefreshGuard.canActivate(context)).rejects.toThrow('Unauthorized');
+    });
+    it('should throw an error with an invalid refresh token in request header', async ()=>{
+        context.switchToHttp().getRequest.mockReturnValue({
+            raw: {
+                user: ''
+            },
+            headers: {
+                authorization: `Bearer bar`
+            }
+        });
+        await expect(authRefreshGuard.canActivate(context)).rejects.toThrow('Unauthorized');
+    });
+    it('should throw an error with a valid refresh token in cookies and a missing CSRF in request header', async ()=>{
+        context.switchToHttp().getRequest.mockReturnValue({
+            raw: {
+                user: ''
+            },
+            headers: {},
+            cookies: {
+                [authConfig.token.refresh.name]: refreshToken
+            }
+        });
+        await expect(authRefreshGuard.canActivate(context)).rejects.toThrow(new RegExp(_auth.CSRF_ERROR.MISSING_HEADERS));
+    });
+    it('should throw an error with a valid refresh token in cookies and a missing CSRF claim in the refresh token', async ()=>{
+        context.switchToHttp().getRequest.mockReturnValue({
+            raw: {
+                user: ''
+            },
+            headers: {
+                [authConfig.token.csrf.name]: csrfToken
+            },
+            cookies: {
+                [authConfig.token.refresh.name]: refreshTokenWithoutCSRF
+            }
+        });
+        await expect(authRefreshGuard.canActivate(context)).rejects.toThrow(new RegExp(_auth.CSRF_ERROR.MISSING_JWT));
+    });
+    it('should throw an error with a valid refresh token in cookies and a mismatch CSRF', async ()=>{
+        context.switchToHttp().getRequest.mockReturnValue({
+            raw: {
+                user: ''
+            },
+            headers: {
+                [authConfig.token.csrf.name]: csrfToken + '*'
+            },
+            cookies: {
+                [authConfig.token.refresh.name]: refreshToken
+            }
+        });
+        await expect(authRefreshGuard.canActivate(context)).rejects.toThrow(new RegExp(_auth.CSRF_ERROR.MISMATCH));
+    });
+});
+
+//# sourceMappingURL=auth-token-refresh.guard.spec.js.map

package/server/authentication/guards/auth-token-refresh.guard.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-token-refresh.guard.spec.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { sign } from '@fastify/cookie'\nimport { createMock, DeepMocked } from '@golevelup/ts-jest'\nimport { ExecutionContext } from '@nestjs/common'\nimport { ConfigModule, ConfigService } from '@nestjs/config'\nimport { JwtModule, JwtService } from '@nestjs/jwt'\nimport { PassportModule } from '@nestjs/passport'\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { PinoLogger } from 'nestjs-pino'\nimport crypto from 'node:crypto'\nimport { UsersManager } from '../../applications/users/services/users-manager.service'\nimport { exportConfiguration } from '../../configuration/config.environment'\nimport { AuthConfig } from '../auth.config'\nimport { CSRF_ERROR } from '../constants/auth'\nimport { JwtPayload } from '../interfaces/jwt-payload.interface'\nimport { TOKEN_TYPE } from '../interfaces/token.interface'\nimport { AuthManager } from '../services/auth-manager.service'\nimport { AuthTokenRefreshGuard } from './auth-token-refresh.guard'\nimport { AuthTokenRefreshStrategy } from './auth-token-refresh.strategy'\n\ndescribe(AuthTokenRefreshGuard.name, () => {\n  const csrfToken: string = crypto.randomUUID()\n  let authConfig: AuthConfig\n  let jwtService: JwtService\n  let authRefreshGuard: AuthTokenRefreshGuard\n  let refreshToken: string\n  let refreshTokenWithoutCSRF: string\n  let context: DeepMocked<ExecutionContext>\n\n  beforeAll(async () => {\n    const module: TestingModule = await Test.createTestingModule({\n      imports: [await ConfigModule.forRoot({ load: [exportConfiguration], isGlobal: true }), JwtModule.register({ global: true }), PassportModule],\n      providers: [\n        AuthTokenRefreshGuard,\n        AuthTokenRefreshStrategy,\n        AuthManager,\n        { provide: UsersManager, useValue: {} },\n        {\n          provide: PinoLogger,\n          useValue: {\n            assign: () => undefined\n          }\n        }\n      ]\n    }).compile()\n\n    authConfig = module.get<ConfigService>(ConfigService).get<AuthConfig>('auth')\n    jwtService = module.get<JwtService>(JwtService)\n    authRefreshGuard = module.get<AuthTokenRefreshGuard>(AuthTokenRefreshGuard)\n    refreshToken = await jwtService.signAsync({ identity: { id: 1, login: 'foo' }, [TOKEN_TYPE.CSRF]: csrfToken } as JwtPayload, {\n      secret: authConfig.token.refresh.secret,\n      expiresIn: 30\n    })\n    refreshTokenWithoutCSRF = await jwtService.signAsync({ identity: { id: 1, login: 'foo' } } as JwtPayload, {\n      secret: authConfig.token.refresh.secret,\n      expiresIn: 30\n    })\n    context = createMock<ExecutionContext>()\n  })\n\n  it('should be defined', () => {\n    expect(authConfig).toBeDefined()\n    expect(jwtService).toBeDefined()\n    expect(authRefreshGuard).toBeDefined()\n    expect(refreshToken).toBeDefined()\n    expect(refreshTokenWithoutCSRF).toBeDefined()\n    expect(csrfToken).toBeDefined()\n  })\n\n  it('should pass with a valid refresh token in cookies with CSRF', async () => {\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { [authConfig.token.csrf.name]: sign(csrfToken, authConfig.token.csrf.secret) },\n      cookies: {\n        [authConfig.token.refresh.name]: refreshToken\n      }\n    })\n    expect(await authRefreshGuard.canActivate(context)).toBe(true)\n  })\n\n  it('should pass with a valid refresh token in request header with no CSRF', async () => {\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: {\n        authorization: `Bearer ${refreshToken}`\n      }\n    })\n    expect(await authRefreshGuard.canActivate(context)).toBe(true)\n  })\n\n  it('should throw an error with an invalid refresh token in cookies', async () => {\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: {},\n      cookies: {\n        [authConfig.token.refresh.name]: 'bar'\n      }\n    })\n    await expect(authRefreshGuard.canActivate(context)).rejects.toThrow('Unauthorized')\n  })\n\n  it('should throw an error with an invalid refresh token in request header', async () => {\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: {\n        authorization: `Bearer bar`\n      }\n    })\n    await expect(authRefreshGuard.canActivate(context)).rejects.toThrow('Unauthorized')\n  })\n\n  it('should throw an error with a valid refresh token in cookies and a missing CSRF in request header', async () => {\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: {},\n      cookies: {\n        [authConfig.token.refresh.name]: refreshToken\n      }\n    })\n    await expect(authRefreshGuard.canActivate(context)).rejects.toThrow(new RegExp(CSRF_ERROR.MISSING_HEADERS))\n  })\n\n  it('should throw an error with a valid refresh token in cookies and a missing CSRF claim in the refresh token', async () => {\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { [authConfig.token.csrf.name]: csrfToken },\n      cookies: {\n        [authConfig.token.refresh.name]: refreshTokenWithoutCSRF\n      }\n    })\n    await expect(authRefreshGuard.canActivate(context)).rejects.toThrow(new RegExp(CSRF_ERROR.MISSING_JWT))\n  })\n\n  it('should throw an error with a valid refresh token in cookies and a mismatch CSRF', async () => {\n    context.switchToHttp().getRequest.mockReturnValue({\n      raw: { user: '' },\n      headers: { [authConfig.token.csrf.name]: csrfToken + '*' },\n      cookies: {\n        [authConfig.token.refresh.name]: refreshToken\n      }\n    })\n    await expect(authRefreshGuard.canActivate(context)).rejects.toThrow(new RegExp(CSRF_ERROR.MISMATCH))\n  })\n})\n"],"names":["describe","AuthTokenRefreshGuard","name","csrfToken","crypto","randomUUID","authConfig","jwtService","authRefreshGuard","refreshToken","refreshTokenWithoutCSRF","context","beforeAll","module","Test","createTestingModule","imports","ConfigModule","forRoot","load","exportConfiguration","isGlobal","JwtModule","register","global","PassportModule","providers","AuthTokenRefreshStrategy","AuthManager","provide","UsersManager","useValue","PinoLogger","assign","undefined","compile","get","ConfigService","JwtService","signAsync","identity","id","login","TOKEN_TYPE","CSRF","secret","token","refresh","expiresIn","createMock","it","expect","toBeDefined","switchToHttp","getRequest","mockReturnValue","raw","user","headers","csrf","sign","cookies","canActivate","toBe","authorization","rejects","toThrow","RegExp","CSRF_ERROR","MISSING_HEADERS","MISSING_JWT","MISMATCH"],"mappings":"AAAA;;;;CAIC;;;;wBAEoB;wBACkB;wBAEK;qBACN;0BACP;yBACK;4BACT;mEACR;qCACU;mCACO;sBAET;gCAEA;oCACC;uCACU;0CACG;;;;;;AAEzCA,SAASC,4CAAqB,CAACC,IAAI,EAAE;IACnC,MAAMC,YAAoBC,mBAAM,CAACC,UAAU;IAC3C,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJC,UAAU;QACR,MAAMC,SAAwB,MAAMC,aAAI,CAACC,mBAAmB,CAAC;YAC3DC,SAAS;gBAAC,MAAMC,oBAAY,CAACC,OAAO,CAAC;oBAAEC,MAAM;wBAACC,sCAAmB;qBAAC;oBAAEC,UAAU;gBAAK;gBAAIC,cAAS,CAACC,QAAQ,CAAC;oBAAEC,QAAQ;gBAAK;gBAAIC,wBAAc;aAAC;YAC5IC,WAAW;gBACTzB,4CAAqB;gBACrB0B,kDAAwB;gBACxBC,+BAAW;gBACX;oBAAEC,SAASC,iCAAY;oBAAEC,UAAU,CAAC;gBAAE;gBACtC;oBACEF,SAASG,sBAAU;oBACnBD,UAAU;wBACRE,QAAQ,IAAMC;oBAChB;gBACF;aACD;QACH,GAAGC,OAAO;QAEV7B,aAAaO,OAAOuB,GAAG,CAAgBC,qBAAa,EAAED,GAAG,CAAa;QACtE7B,aAAaM,OAAOuB,GAAG,CAAaE,eAAU;QAC9C9B,mBAAmBK,OAAOuB,GAAG,CAAwBnC,4CAAqB;QAC1EQ,eAAe,MAAMF,WAAWgC,SAAS,CAAC;YAAEC,UAAU;gBAAEC,IAAI;gBAAGC,OAAO;YAAM;YAAG,CAACC,0BAAU,CAACC,IAAI,CAAC,EAAEzC;QAAU,GAAiB;YAC3H0C,QAAQvC,WAAWwC,KAAK,CAACC,OAAO,CAACF,MAAM;YACvCG,WAAW;QACb;QACAtC,0BAA0B,MAAMH,WAAWgC,SAAS,CAAC;YAAEC,UAAU;gBAAEC,IAAI;gBAAGC,OAAO;YAAM;QAAE,GAAiB;YACxGG,QAAQvC,WAAWwC,KAAK,CAACC,OAAO,CAACF,MAAM;YACvCG,WAAW;QACb;QACArC,UAAUsC,IAAAA,kBAAU;IACtB;IAEAC,GAAG,qBAAqB;QACtBC,OAAO7C,YAAY8C,WAAW;QAC9BD,OAAO5C,YAAY6C,WAAW;QAC9BD,OAAO3C,kBAAkB4C,WAAW;QACpCD,OAAO1C,cAAc2C,WAAW;QAChCD,OAAOzC,yBAAyB0C,WAAW;QAC3CD,OAAOhD,WAAWiD,WAAW;IAC/B;IAEAF,GAAG,+DAA+D;QAChEvC,QAAQ0C,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAE,CAACpD,WAAWwC,KAAK,CAACa,IAAI,CAACzD,IAAI,CAAC,EAAE0D,IAAAA,YAAI,EAACzD,WAAWG,WAAWwC,KAAK,CAACa,IAAI,CAACd,MAAM;YAAE;YACvFgB,SAAS;gBACP,CAACvD,WAAWwC,KAAK,CAACC,OAAO,CAAC7C,IAAI,CAAC,EAAEO;YACnC;QACF;QACA0C,OAAO,MAAM3C,iBAAiBsD,WAAW,CAACnD,UAAUoD,IAAI,CAAC;IAC3D;IAEAb,GAAG,yEAAyE;QAC1EvC,QAAQ0C,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBACPM,eAAe,CAAC,OAAO,EAAEvD,cAAc;YACzC;QACF;QACA0C,OAAO,MAAM3C,iBAAiBsD,WAAW,CAACnD,UAAUoD,IAAI,CAAC;IAC3D;IAEAb,GAAG,kEAAkE;QACnEvC,QAAQ0C,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS,CAAC;YACVG,SAAS;gBACP,CAACvD,WAAWwC,KAAK,CAACC,OAAO,CAAC7C,IAAI,CAAC,EAAE;YACnC;QACF;QACA,MAAMiD,OAAO3C,iBAAiBsD,WAAW,CAACnD,UAAUsD,OAAO,CAACC,OAAO,CAAC;IACtE;IAEAhB,GAAG,yEAAyE;QAC1EvC,QAAQ0C,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBACPM,eAAe,CAAC,UAAU,CAAC;YAC7B;QACF;QACA,MAAMb,OAAO3C,iBAAiBsD,WAAW,CAACnD,UAAUsD,OAAO,CAACC,OAAO,CAAC;IACtE;IAEAhB,GAAG,oGAAoG;QACrGvC,QAAQ0C,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS,CAAC;YACVG,SAAS;gBACP,CAACvD,WAAWwC,KAAK,CAACC,OAAO,CAAC7C,IAAI,CAAC,EAAEO;YACnC;QACF;QACA,MAAM0C,OAAO3C,iBAAiBsD,WAAW,CAACnD,UAAUsD,OAAO,CAACC,OAAO,CAAC,IAAIC,OAAOC,gBAAU,CAACC,eAAe;IAC3G;IAEAnB,GAAG,6GAA6G;QAC9GvC,QAAQ0C,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAE,CAACpD,WAAWwC,KAAK,CAACa,IAAI,CAACzD,IAAI,CAAC,EAAEC;YAAU;YACnD0D,SAAS;gBACP,CAACvD,WAAWwC,KAAK,CAACC,OAAO,CAAC7C,IAAI,CAAC,EAAEQ;YACnC;QACF;QACA,MAAMyC,OAAO3C,iBAAiBsD,WAAW,CAACnD,UAAUsD,OAAO,CAACC,OAAO,CAAC,IAAIC,OAAOC,gBAAU,CAACE,WAAW;IACvG;IAEApB,GAAG,mFAAmF;QACpFvC,QAAQ0C,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,KAAK;gBAAEC,MAAM;YAAG;YAChBC,SAAS;gBAAE,CAACpD,WAAWwC,KAAK,CAACa,IAAI,CAACzD,IAAI,CAAC,EAAEC,YAAY;YAAI;YACzD0D,SAAS;gBACP,CAACvD,WAAWwC,KAAK,CAACC,OAAO,CAAC7C,IAAI,CAAC,EAAEO;YACnC;QACF;QACA,MAAM0C,OAAO3C,iBAAiBsD,WAAW,CAACnD,UAAUsD,OAAO,CAACC,OAAO,CAAC,IAAIC,OAAOC,gBAAU,CAACG,QAAQ;IACpG;AACF"}

package/server/authentication/guards/auth-token-refresh.strategy.js

@@ -0,0 +1,72 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "AuthTokenRefreshStrategy", {
+    enumerable: true,
+    get: function() {
+        return AuthTokenRefreshStrategy;
+    }
+});
+const _common = require("@nestjs/common");
+const _passport = require("@nestjs/passport");
+const _nestjspino = require("nestjs-pino");
+const _passportjwt = require("passport-jwt");
+const _usermodel = require("../../applications/users/models/user.model");
+const _tokeninterface = require("../interfaces/token.interface");
+const _authmanagerservice = require("../services/auth-manager.service");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let AuthTokenRefreshStrategy = class AuthTokenRefreshStrategy extends (0, _passport.PassportStrategy)(_passportjwt.Strategy, 'tokenRefresh') {
+    // not declared properly:  https://github.com/nestjs/passport/issues/929
+    validate(req, jwtPayload) {
+        this.logger.assign({
+            user: jwtPayload.identity.login
+        });
+        this.authManager.csrfValidation(req, jwtPayload, _tokeninterface.TOKEN_TYPE.REFRESH);
+        // jwt expiration is used later to refresh cookies
+        return new _usermodel.UserModel({
+            ...jwtPayload.identity,
+            exp: jwtPayload.exp
+        });
+    }
+    static extractJWTFromCookie(req) {
+        if (typeof req.cookies === 'object' && req.cookies[AuthTokenRefreshStrategy.refreshCookieName] !== undefined) {
+            return req.cookies[AuthTokenRefreshStrategy.refreshCookieName];
+        }
+        return null;
+    }
+    constructor(authManager, logger){
+        super({
+            jwtFromRequest: _passportjwt.ExtractJwt.fromExtractors([
+                AuthTokenRefreshStrategy.extractJWTFromCookie,
+                _passportjwt.ExtractJwt.fromAuthHeaderAsBearerToken()
+            ]),
+            secretOrKey: authManager.authConfig.token.refresh.secret,
+            ignoreExpiration: false,
+            passReqToCallback: true
+        }), this.authManager = authManager, this.logger = logger;
+        AuthTokenRefreshStrategy.refreshCookieName = authManager.authConfig.token.refresh.name;
+    }
+};
+AuthTokenRefreshStrategy = _ts_decorate([
+    (0, _common.Injectable)(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _authmanagerservice.AuthManager === "undefined" ? Object : _authmanagerservice.AuthManager,
+        typeof _nestjspino.PinoLogger === "undefined" ? Object : _nestjspino.PinoLogger
+    ])
+], AuthTokenRefreshStrategy);
+
+//# sourceMappingURL=auth-token-refresh.strategy.js.map

package/server/authentication/guards/auth-token-refresh.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../backend/src/authentication/guards/auth-token-refresh.strategy.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Injectable } from '@nestjs/common'\nimport { PassportStrategy } from '@nestjs/passport'\nimport { FastifyRequest } from 'fastify'\nimport { PinoLogger } from 'nestjs-pino'\nimport { ExtractJwt, Strategy } from 'passport-jwt'\nimport { UserModel } from '../../applications/users/models/user.model'\nimport { JwtPayload } from '../interfaces/jwt-payload.interface'\nimport { TOKEN_TYPE } from '../interfaces/token.interface'\nimport { AuthManager } from '../services/auth-manager.service'\n\n@Injectable()\nexport class AuthTokenRefreshStrategy extends PassportStrategy(Strategy, 'tokenRefresh') {\n  private static refreshCookieName: string\n\n  constructor(\n    private readonly authManager: AuthManager,\n    private readonly logger: PinoLogger\n  ) {\n    super({\n      jwtFromRequest: ExtractJwt.fromExtractors([AuthTokenRefreshStrategy.extractJWTFromCookie, ExtractJwt.fromAuthHeaderAsBearerToken()]),\n      secretOrKey: authManager.authConfig.token.refresh.secret,\n      ignoreExpiration: false,\n      passReqToCallback: true\n    })\n    AuthTokenRefreshStrategy.refreshCookieName = authManager.authConfig.token.refresh.name\n  }\n\n  // not declared properly:  https://github.com/nestjs/passport/issues/929\n  validate(req: FastifyRequest, jwtPayload: JwtPayload): UserModel {\n    this.logger.assign({ user: jwtPayload.identity.login })\n    this.authManager.csrfValidation(req, jwtPayload, TOKEN_TYPE.REFRESH)\n    // jwt expiration is used later to refresh cookies\n    return new UserModel({ ...jwtPayload.identity, exp: jwtPayload.exp })\n  }\n\n  private static extractJWTFromCookie(req: FastifyRequest): string | null {\n    if (typeof req.cookies === 'object' && req.cookies[AuthTokenRefreshStrategy.refreshCookieName] !== undefined) {\n      return req.cookies[AuthTokenRefreshStrategy.refreshCookieName]\n    }\n    return null\n  }\n}\n"],"names":["AuthTokenRefreshStrategy","PassportStrategy","Strategy","validate","req","jwtPayload","logger","assign","user","identity","login","authManager","csrfValidation","TOKEN_TYPE","REFRESH","UserModel","exp","extractJWTFromCookie","cookies","refreshCookieName","undefined","jwtFromRequest","ExtractJwt","fromExtractors","fromAuthHeaderAsBearerToken","secretOrKey","authConfig","token","refresh","secret","ignoreExpiration","passReqToCallback","name"],"mappings":"AAAA;;;;CAIC;;;;+BAaYA;;;eAAAA;;;wBAXc;0BACM;4BAEN;6BACU;2BACX;gCAEC;oCACC;;;;;;;;;;AAGrB,IAAA,AAAMA,2BAAN,MAAMA,iCAAiCC,IAAAA,0BAAgB,EAACC,qBAAQ,EAAE;IAgBvE,wEAAwE;IACxEC,SAASC,GAAmB,EAAEC,UAAsB,EAAa;QAC/D,IAAI,CAACC,MAAM,CAACC,MAAM,CAAC;YAAEC,MAAMH,WAAWI,QAAQ,CAACC,KAAK;QAAC;QACrD,IAAI,CAACC,WAAW,CAACC,cAAc,CAACR,KAAKC,YAAYQ,0BAAU,CAACC,OAAO;QACnE,kDAAkD;QAClD,OAAO,IAAIC,oBAAS,CAAC;YAAE,GAAGV,WAAWI,QAAQ;YAAEO,KAAKX,WAAWW,GAAG;QAAC;IACrE;IAEA,OAAeC,qBAAqBb,GAAmB,EAAiB;QACtE,IAAI,OAAOA,IAAIc,OAAO,KAAK,YAAYd,IAAIc,OAAO,CAAClB,yBAAyBmB,iBAAiB,CAAC,KAAKC,WAAW;YAC5G,OAAOhB,IAAIc,OAAO,CAAClB,yBAAyBmB,iBAAiB,CAAC;QAChE;QACA,OAAO;IACT;IA1BA,YACE,AAAiBR,WAAwB,EACzC,AAAiBL,MAAkB,CACnC;QACA,KAAK,CAAC;YACJe,gBAAgBC,uBAAU,CAACC,cAAc,CAAC;gBAACvB,yBAAyBiB,oBAAoB;gBAAEK,uBAAU,CAACE,2BAA2B;aAAG;YACnIC,aAAad,YAAYe,UAAU,CAACC,KAAK,CAACC,OAAO,CAACC,MAAM;YACxDC,kBAAkB;YAClBC,mBAAmB;QACrB,SARiBpB,cAAAA,kBACAL,SAAAA;QAQjBN,yBAAyBmB,iBAAiB,GAAGR,YAAYe,UAAU,CAACC,KAAK,CAACC,OAAO,CAACI,IAAI;IACxF;AAgBF"}

package/server/authentication/interfaces/auth-request.interface.js

@@ -0,0 +1,10 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+
+//# sourceMappingURL=auth-request.interface.js.map

package/server/authentication/interfaces/auth-request.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../backend/src/authentication/interfaces/auth-request.interface.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { FastifyRequest } from 'fastify'\nimport { UserModel } from '../../applications/users/models/user.model'\n\nexport interface FastifyAuthenticatedRequest extends FastifyRequest {\n  user: UserModel\n}\n"],"names":[],"mappings":"AAAA;;;;CAIC"}

package/server/authentication/interfaces/jwt-payload.interface.js

@@ -0,0 +1,28 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get JwtIdentityPayload () {
+        return JwtIdentityPayload;
+    },
+    get JwtPayload () {
+        return JwtPayload;
+    }
+});
+let JwtIdentityPayload = class JwtIdentityPayload {
+};
+let JwtPayload = class JwtPayload {
+};
+
+//# sourceMappingURL=jwt-payload.interface.js.map

package/server/authentication/interfaces/jwt-payload.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../backend/src/authentication/interfaces/jwt-payload.interface.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport class JwtIdentityPayload {\n  id: number\n  login: string\n  email: string\n  fullName: string\n  role: number\n  applications: string[]\n  impersonatedFromId?: number\n  impersonatedClientId?: string\n  clientId?: string\n}\n\nexport class JwtPayload {\n  identity: JwtIdentityPayload\n  csrf?: string\n  iat?: number\n  exp: number\n}\n"],"names":["JwtIdentityPayload","JwtPayload"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAEYA;eAAAA;;QAYAC;eAAAA;;;AAZN,IAAA,AAAMD,qBAAN,MAAMA;AAUb;AAEO,IAAA,AAAMC,aAAN,MAAMA;AAKb"}

package/server/authentication/interfaces/token.interface.js

@@ -0,0 +1,23 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "TOKEN_TYPE", {
+    enumerable: true,
+    get: function() {
+        return TOKEN_TYPE;
+    }
+});
+var TOKEN_TYPE = /*#__PURE__*/ function(TOKEN_TYPE) {
+    TOKEN_TYPE["ACCESS"] = "access";
+    TOKEN_TYPE["REFRESH"] = "refresh";
+    TOKEN_TYPE["WS"] = "ws";
+    TOKEN_TYPE["CSRF"] = "csrf";
+    return TOKEN_TYPE;
+}({});
+
+//# sourceMappingURL=token.interface.js.map

package/server/authentication/interfaces/token.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../backend/src/authentication/interfaces/token.interface.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport enum TOKEN_TYPE {\n  ACCESS = 'access',\n  REFRESH = 'refresh',\n  WS = 'ws',\n  CSRF = 'csrf'\n}\n"],"names":["TOKEN_TYPE"],"mappings":"AAAA;;;;CAIC;;;;+BAEWA;;;eAAAA;;;AAAL,IAAA,AAAKA,oCAAAA;;;;;WAAAA"}

package/server/authentication/models/auth-method.js

@@ -0,0 +1,18 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "AuthMethod", {
+    enumerable: true,
+    get: function() {
+        return AuthMethod;
+    }
+});
+let AuthMethod = class AuthMethod {
+};
+
+//# sourceMappingURL=auth-method.js.map

package/server/authentication/models/auth-method.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../backend/src/authentication/models/auth-method.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { UserModel } from '../../applications/users/models/user.model'\n\nexport abstract class AuthMethod {\n  abstract validateUser(loginOrEmail: string, password: string, ip?: string): Promise<UserModel>\n}\n"],"names":["AuthMethod"],"mappings":"AAAA;;;;CAIC;;;;+BAIqBA;;;eAAAA;;;AAAf,IAAA,AAAeA,aAAf,MAAeA;AAEtB"}