@sync-in/server 1.5.2 → 1.6.0

package/server/authentication/auth.config.js

@@ -16,9 +16,18 @@ _export(exports, {
     get AuthConfig () {
         return AuthConfig;
     },
+    get AuthMethodLdapAttributesConfig () {
+        return AuthMethodLdapAttributesConfig;
+    },
     get AuthMethodLdapConfig () {
         return AuthMethodLdapConfig;
     },
+    get AuthMfaConfig () {
+        return AuthMfaConfig;
+    },
+    get AuthMfaTotpConfig () {
+        return AuthMfaTotpConfig;
+    },
     get AuthTokenAccessConfig () {
         return AuthTokenAccessConfig;
     },
@@ -37,6 +46,7 @@ _export(exports, {
 });
 const _classtransformer = require("class-transformer");
 const _classvalidator = require("class-validator");
+const _appconstants = require("../app.constants");
 const _auth = require("./constants/auth");
 function _ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -47,16 +57,42 @@ function _ts_decorate(decorators, target, key, desc) {
 function _ts_metadata(k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
+let AuthMfaTotpConfig = class AuthMfaTotpConfig {
+    constructor(){
+        this.enabled = true;
+        this.issuer = _appconstants.SERVER_NAME;
+    }
+};
+_ts_decorate([
+    (0, _classvalidator.IsBoolean)()
+], AuthMfaTotpConfig.prototype, "enabled", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsString)()
+], AuthMfaTotpConfig.prototype, "issuer", void 0);
+let AuthMfaConfig = class AuthMfaConfig {
+    constructor(){
+        this.totp = new AuthMfaTotpConfig();
+    }
+};
+_ts_decorate([
+    (0, _classvalidator.IsDefined)(),
+    (0, _classvalidator.IsNotEmptyObject)(),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>AuthMfaTotpConfig),
+    _ts_metadata("design:type", typeof AuthMfaTotpConfig === "undefined" ? Object : AuthMfaTotpConfig)
+], AuthMfaConfig.prototype, "totp", void 0);
 let AuthTokenAccessConfig = class AuthTokenAccessConfig {
     constructor(){
-        this.name = 'sync-in-access';
+        this.// force default name
+        name = _auth.ACCESS_KEY;
         this.expiration = '30m';
-        this.cookieMaxAge = '30m';
     }
 };
 _ts_decorate([
-    (0, _classvalidator.IsString)(),
-    (0, _classvalidator.IsNotEmpty)()
+    (0, _classtransformer.Exclude)({
+        toClassOnly: true
+    })
 ], AuthTokenAccessConfig.prototype, "name", void 0);
 _ts_decorate([
     (0, _classvalidator.IsString)(),
@@ -67,20 +103,17 @@ _ts_decorate([
     (0, _classvalidator.IsString)(),
     (0, _classvalidator.IsNotEmpty)()
 ], AuthTokenAccessConfig.prototype, "expiration", void 0);
-_ts_decorate([
-    (0, _classvalidator.IsNotEmpty)(),
-    (0, _classvalidator.IsString)()
-], AuthTokenAccessConfig.prototype, "cookieMaxAge", void 0);
 let AuthTokenRefreshConfig = class AuthTokenRefreshConfig {
     constructor(){
-        this.name = 'sync-in-refresh';
+        this.// force default name
+        name = _auth.REFRESH_KEY;
         this.expiration = '4h';
-        this.cookieMaxAge = '4h';
     }
 };
 _ts_decorate([
-    (0, _classvalidator.IsString)(),
-    (0, _classvalidator.IsNotEmpty)()
+    (0, _classtransformer.Exclude)({
+        toClassOnly: true
+    })
 ], AuthTokenRefreshConfig.prototype, "name", void 0);
 _ts_decorate([
     (0, _classvalidator.IsString)(),
@@ -91,10 +124,6 @@ _ts_decorate([
     (0, _classvalidator.IsString)(),
     (0, _classvalidator.IsNotEmpty)()
 ], AuthTokenRefreshConfig.prototype, "expiration", void 0);
-_ts_decorate([
-    (0, _classvalidator.IsNotEmpty)(),
-    (0, _classvalidator.IsString)()
-], AuthTokenRefreshConfig.prototype, "cookieMaxAge", void 0);
 let AuthTokenCsrfConfig = class AuthTokenCsrfConfig extends AuthTokenRefreshConfig {
     constructor(...args){
         super(...args), this.name = _auth.CSRF_KEY;
@@ -149,9 +178,25 @@ _ts_decorate([
     (0, _classtransformer.Type)(()=>AuthTokenWSConfig),
     _ts_metadata("design:type", typeof AuthTokenWSConfig === "undefined" ? Object : AuthTokenWSConfig)
 ], AuthTokenConfig.prototype, "ws", void 0);
+let AuthMethodLdapAttributesConfig = class AuthMethodLdapAttributesConfig {
+    constructor(){
+        this.login = 'uid';
+        this.email = 'mail';
+    }
+};
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsString)(),
+    (0, _classtransformer.Transform)(({ value })=>value || 'uid')
+], AuthMethodLdapAttributesConfig.prototype, "login", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsString)(),
+    (0, _classtransformer.Transform)(({ value })=>value || 'mail')
+], AuthMethodLdapAttributesConfig.prototype, "email", void 0);
 let AuthMethodLdapConfig = class AuthMethodLdapConfig {
     constructor(){
-        this.loginAttribute = 'uid';
+        this.attributes = new AuthMethodLdapAttributesConfig();
     }
 };
 _ts_decorate([
@@ -174,17 +219,18 @@ _ts_decorate([
     _ts_metadata("design:type", String)
 ], AuthMethodLdapConfig.prototype, "filter", void 0);
 _ts_decorate([
-    (0, _classvalidator.IsString)(),
-    (0, _classvalidator.IsNotEmpty)(),
-    (0, _classvalidator.IsIn)([
-        'uid',
-        'mail'
-    ])
-], AuthMethodLdapConfig.prototype, "loginAttribute", void 0);
+    (0, _classvalidator.IsDefined)(),
+    (0, _classvalidator.IsNotEmptyObject)(),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>AuthMethodLdapAttributesConfig),
+    _ts_metadata("design:type", typeof AuthMethodLdapAttributesConfig === "undefined" ? Object : AuthMethodLdapAttributesConfig)
+], AuthMethodLdapConfig.prototype, "attributes", void 0);
 let AuthConfig = class AuthConfig {
     constructor(){
         this.method = 'mysql';
-        this.sameSite = 'strict';
+        this.mfa = new AuthMfaConfig();
+        this.cookieSameSite = 'strict';
     }
 };
 _ts_decorate([
@@ -195,6 +241,19 @@ _ts_decorate([
     ]),
     _ts_metadata("design:type", String)
 ], AuthConfig.prototype, "method", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], AuthConfig.prototype, "encryptionKey", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsDefined)(),
+    (0, _classvalidator.IsNotEmptyObject)(),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>AuthMfaConfig),
+    _ts_metadata("design:type", typeof AuthMfaConfig === "undefined" ? Object : AuthMfaConfig)
+], AuthConfig.prototype, "mfa", void 0);
 _ts_decorate([
     (0, _classvalidator.IsString)(),
     (0, _classvalidator.IsIn)([
@@ -202,7 +261,7 @@ _ts_decorate([
         'strict'
     ]),
     _ts_metadata("design:type", String)
-], AuthConfig.prototype, "sameSite", void 0);
+], AuthConfig.prototype, "cookieSameSite", void 0);
 _ts_decorate([
     (0, _classvalidator.IsDefined)(),
     (0, _classvalidator.IsNotEmptyObject)(),

package/server/authentication/auth.config.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../backend/src/authentication/auth.config.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Transform, Type } from 'class-transformer'\nimport {\n  ArrayNotEmpty,\n  IsArray,\n  IsDefined,\n  IsIn,\n  IsNotEmpty,\n  IsNotEmptyObject,\n  IsObject,\n  IsOptional,\n  IsString,\n  ValidateIf,\n  ValidateNested\n} from 'class-validator'\nimport { CSRF_KEY, WS_KEY } from './constants/auth'\n\nexport class AuthTokenAccessConfig {\n  @IsString()\n  @IsNotEmpty()\n  name = 'sync-in-access'\n\n  @IsString()\n  @IsNotEmpty()\n  secret: string\n\n  @IsString()\n  @IsNotEmpty()\n  expiration = '30m'\n\n  @IsNotEmpty()\n  @IsString()\n  cookieMaxAge = '30m'\n}\n\nexport class AuthTokenRefreshConfig {\n  @IsString()\n  @IsNotEmpty()\n  name = 'sync-in-refresh'\n\n  @IsString()\n  @IsNotEmpty()\n  secret: string\n\n  @IsString()\n  @IsNotEmpty()\n  expiration = '4h'\n\n  @IsNotEmpty()\n  @IsString()\n  cookieMaxAge = '4h'\n}\n\nexport class AuthTokenCsrfConfig extends AuthTokenRefreshConfig {\n  @IsString()\n  @IsNotEmpty()\n  override name: string = CSRF_KEY\n}\n\nexport class AuthTokenWSConfig extends AuthTokenRefreshConfig {\n  @IsString()\n  @IsNotEmpty()\n  override name: string = WS_KEY\n}\n\nexport class AuthTokenConfig {\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenAccessConfig)\n  access: AuthTokenAccessConfig\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenRefreshConfig)\n  refresh: AuthTokenRefreshConfig\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenCsrfConfig)\n  csrf: AuthTokenCsrfConfig\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenWSConfig)\n  ws: AuthTokenWSConfig\n}\n\nexport class AuthMethodLdapConfig {\n  @Transform(({ value }) => (Array.isArray(value) ? value.filter((v: string) => Boolean(v)) : value))\n  @ArrayNotEmpty()\n  @IsArray()\n  @IsString({ each: true })\n  servers: string[]\n\n  @IsString()\n  @IsNotEmpty()\n  baseDN: string\n\n  @IsOptional()\n  @IsString()\n  filter?: string\n\n  @IsString()\n  @IsNotEmpty()\n  @IsIn(['uid', 'mail'])\n  loginAttribute = 'uid'\n}\n\nexport class AuthConfig {\n  @IsString()\n  @IsIn(['mysql', 'ldap'])\n  method: 'mysql' | 'ldap' = 'mysql'\n\n  @IsString()\n  @IsIn(['lax', 'strict'])\n  sameSite: 'lax' | 'strict' = 'strict'\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenConfig)\n  token: AuthTokenConfig\n\n  @ValidateIf((o: AuthConfig) => o.method === 'ldap')\n  @IsDefined()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthMethodLdapConfig)\n  ldap: AuthMethodLdapConfig\n}\n"],"names":["AuthConfig","AuthMethodLdapConfig","AuthTokenAccessConfig","AuthTokenConfig","AuthTokenCsrfConfig","AuthTokenRefreshConfig","AuthTokenWSConfig","name","expiration","cookieMaxAge","CSRF_KEY","WS_KEY","loginAttribute","value","Array","isArray","filter","v","Boolean","each","method","sameSite","o"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAqHYA;eAAAA;;QArBAC;eAAAA;;QA9EAC;eAAAA;;QAgDAC;eAAAA;;QAZAC;eAAAA;;QAlBAC;eAAAA;;QAwBAC;eAAAA;;;kCA1DmB;gCAazB;sBAC0B;;;;;;;;;;AAE1B,IAAA,AAAMJ,wBAAN,MAAMA;;aAGXK,OAAO;aAQPC,aAAa;aAIbC,eAAe;;AACjB;;;;;;;;;;;;;;;;;;AAEO,IAAA,AAAMJ,yBAAN,MAAMA;;aAGXE,OAAO;aAQPC,aAAa;aAIbC,eAAe;;AACjB;;;;;;;;;;;;;;;;;;AAEO,IAAA,AAAML,sBAAN,MAAMA,4BAA4BC;;QAAlC,qBAGIE,OAAeG,cAAQ;;AAClC;;;;;;AAEO,IAAA,AAAMJ,oBAAN,MAAMA,0BAA0BD;;QAAhC,qBAGIE,OAAeI,YAAM;;AAChC;;;;;;AAEO,IAAA,AAAMR,kBAAN,MAAMA;AA4Bb;;;;;;oCAvBcD;;;;;;;;oCAOAG;;;;;;;;oCAOAD;;;;;;;;oCAOAE;;;AAIP,IAAA,AAAML,uBAAN,MAAMA;;aAkBXW,iBAAiB;;AACnB;;sCAlBc,EAAEC,KAAK,EAAE,GAAMC,MAAMC,OAAO,CAACF,SAASA,MAAMG,MAAM,CAAC,CAACC,IAAcC,QAAQD,MAAMJ;;;;QAGhFM,MAAM;;;;;;;;;;;;;;;;;;QAaX;QAAO;;;AAIT,IAAA,AAAMnB,aAAN,MAAMA;;aAGXoB,SAA2B;aAI3BC,WAA6B;;AAe/B;;;;QApBS;QAAS;;;;;;;QAIT;QAAO;;;;;;;;;oCAOFlB;;;;qCAGCmB,IAAkBA,EAAEF,MAAM,KAAK;;;;oCAIhCnB"}
+{"version":3,"sources":["../../../backend/src/authentication/auth.config.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Exclude, Transform, Type } from 'class-transformer'\nimport {\n  ArrayNotEmpty,\n  IsArray,\n  IsBoolean,\n  IsDefined,\n  IsIn,\n  IsNotEmpty,\n  IsNotEmptyObject,\n  IsObject,\n  IsOptional,\n  IsString,\n  ValidateIf,\n  ValidateNested\n} from 'class-validator'\nimport { SERVER_NAME } from '../app.constants'\nimport { ACCESS_KEY, CSRF_KEY, REFRESH_KEY, WS_KEY } from './constants/auth'\n\nexport class AuthMfaTotpConfig {\n  @IsBoolean()\n  enabled = true\n\n  @IsString()\n  issuer = SERVER_NAME\n}\n\nexport class AuthMfaConfig {\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthMfaTotpConfig)\n  totp: AuthMfaTotpConfig = new AuthMfaTotpConfig()\n}\n\nexport class AuthTokenAccessConfig {\n  @Exclude({ toClassOnly: true })\n  // force default name\n  name = ACCESS_KEY\n\n  @IsString()\n  @IsNotEmpty()\n  secret: string\n\n  @IsString()\n  @IsNotEmpty()\n  expiration = '30m'\n}\n\nexport class AuthTokenRefreshConfig {\n  @Exclude({ toClassOnly: true })\n  // force default name\n  name = REFRESH_KEY\n\n  @IsString()\n  @IsNotEmpty()\n  secret: string\n\n  @IsString()\n  @IsNotEmpty()\n  expiration = '4h'\n}\n\nexport class AuthTokenCsrfConfig extends AuthTokenRefreshConfig {\n  @IsString()\n  @IsNotEmpty()\n  override name: string = CSRF_KEY\n}\n\nexport class AuthTokenWSConfig extends AuthTokenRefreshConfig {\n  @IsString()\n  @IsNotEmpty()\n  override name: string = WS_KEY\n}\n\nexport class AuthTokenConfig {\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenAccessConfig)\n  access: AuthTokenAccessConfig\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenRefreshConfig)\n  refresh: AuthTokenRefreshConfig\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenCsrfConfig)\n  csrf: AuthTokenCsrfConfig\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenWSConfig)\n  ws: AuthTokenWSConfig\n}\n\nexport class AuthMethodLdapAttributesConfig {\n  @IsOptional()\n  @IsString()\n  @Transform(({ value }) => value || 'uid')\n  login? = 'uid'\n\n  @IsOptional()\n  @IsString()\n  @Transform(({ value }) => value || 'mail')\n  email? = 'mail'\n}\n\nexport class AuthMethodLdapConfig {\n  @Transform(({ value }) => (Array.isArray(value) ? value.filter((v: string) => Boolean(v)) : value))\n  @ArrayNotEmpty()\n  @IsArray()\n  @IsString({ each: true })\n  servers: string[]\n\n  @IsString()\n  @IsNotEmpty()\n  baseDN: string\n\n  @IsOptional()\n  @IsString()\n  filter?: string\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthMethodLdapAttributesConfig)\n  attributes: AuthMethodLdapAttributesConfig = new AuthMethodLdapAttributesConfig()\n}\n\nexport class AuthConfig {\n  @IsString()\n  @IsIn(['mysql', 'ldap'])\n  method: 'mysql' | 'ldap' = 'mysql'\n\n  @IsOptional()\n  @IsString()\n  encryptionKey: string\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthMfaConfig)\n  mfa: AuthMfaConfig = new AuthMfaConfig()\n\n  @IsString()\n  @IsIn(['lax', 'strict'])\n  cookieSameSite: 'lax' | 'strict' = 'strict'\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthTokenConfig)\n  token: AuthTokenConfig\n\n  @ValidateIf((o: AuthConfig) => o.method === 'ldap')\n  @IsDefined()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthMethodLdapConfig)\n  ldap: AuthMethodLdapConfig\n}\n"],"names":["AuthConfig","AuthMethodLdapAttributesConfig","AuthMethodLdapConfig","AuthMfaConfig","AuthMfaTotpConfig","AuthTokenAccessConfig","AuthTokenConfig","AuthTokenCsrfConfig","AuthTokenRefreshConfig","AuthTokenWSConfig","enabled","issuer","SERVER_NAME","totp","name","ACCESS_KEY","expiration","toClassOnly","REFRESH_KEY","CSRF_KEY","WS_KEY","login","email","value","attributes","Array","isArray","filter","v","Boolean","each","method","mfa","cookieSameSite","o"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QA8IYA;eAAAA;;QAnCAC;eAAAA;;QAYAC;eAAAA;;QA3FAC;eAAAA;;QARAC;eAAAA;;QAiBAC;eAAAA;;QAwCAC;eAAAA;;QAZAC;eAAAA;;QAdAC;eAAAA;;QAoBAC;eAAAA;;;kCArE4B;gCAclC;8BACqB;sBAC8B;;;;;;;;;;AAEnD,IAAA,AAAML,oBAAN,MAAMA;;aAEXM,UAAU;aAGVC,SAASC,yBAAW;;AACtB;;;;;;;AAEO,IAAA,AAAMT,gBAAN,MAAMA;;aAMXU,OAA0B,IAAIT;;AAChC;;;;;;oCAFcA;;;AAIP,IAAA,AAAMC,wBAAN,MAAMA;;aAEX,qBAAqB;QACrBS,OAAOC,gBAAU;aAQjBC,aAAa;;AACf;;;QAXaC,aAAa;;;;;;;;;;;;AAanB,IAAA,AAAMT,yBAAN,MAAMA;;aAEX,qBAAqB;QACrBM,OAAOI,iBAAW;aAQlBF,aAAa;;AACf;;;QAXaC,aAAa;;;;;;;;;;;;AAanB,IAAA,AAAMV,sBAAN,MAAMA,4BAA4BC;;QAAlC,qBAGIM,OAAeK,cAAQ;;AAClC;;;;;;AAEO,IAAA,AAAMV,oBAAN,MAAMA,0BAA0BD;;QAAhC,qBAGIM,OAAeM,YAAM;;AAChC;;;;;;AAEO,IAAA,AAAMd,kBAAN,MAAMA;AA4Bb;;;;;;oCAvBcD;;;;;;;;oCAOAG;;;;;;;;oCAOAD;;;;;;;;oCAOAE;;;AAIP,IAAA,AAAMR,iCAAN,MAAMA;;aAIXoB,QAAS;aAKTC,QAAS;;AACX;;;;sCAPc,EAAEC,KAAK,EAAE,GAAKA,SAAS;;;;;sCAKvB,EAAEA,KAAK,EAAE,GAAKA,SAAS;;AAI9B,IAAA,AAAMrB,uBAAN,MAAMA;;aAoBXsB,aAA6C,IAAIvB;;AACnD;;sCApBc,EAAEsB,KAAK,EAAE,GAAME,MAAMC,OAAO,CAACH,SAASA,MAAMI,MAAM,CAAC,CAACC,IAAcC,QAAQD,MAAML;;;;QAGhFO,MAAM;;;;;;;;;;;;;;;;;;;oCAeN7B;;;AAIP,IAAA,AAAMD,aAAN,MAAMA;;aAGX+B,SAA2B;aAW3BC,MAAqB,IAAI7B;aAIzB8B,iBAAmC;;AAerC;;;;QA/BS;QAAS;;;;;;;;;;;;;;oCAWJ9B;;;;;;QAIL;QAAO;;;;;;;;;oCAOFG;;;;qCAGC4B,IAAkBA,EAAEH,MAAM,KAAK;;;;oCAIhC7B"}

package/server/authentication/auth.controller.js

@@ -14,13 +14,22 @@ Object.defineProperty(exports, "AuthController", {
 });
 const _common = require("@nestjs/common");
 const _fastify = require("fastify");
+const _user = require("../applications/users/constants/user");
+const _rolesdecorator = require("../applications/users/decorators/roles.decorator");
 const _userdecorator = require("../applications/users/decorators/user.decorator");
+const _rolesguard = require("../applications/users/guards/roles.guard");
 const _usermodel = require("../applications/users/models/user.model");
+const _auth = require("./constants/auth");
 const _routes = require("./constants/routes");
 const _authtokenskipdecorator = require("./decorators/auth-token-skip.decorator");
+const _twofaverifydto = require("./dto/two-fa-verify.dto");
 const _authlocalguard = require("./guards/auth-local.guard");
 const _authtokenrefreshguard = require("./guards/auth-token-refresh.guard");
+const _authtwofaguard = require("./guards/auth-two-fa-guard");
+const _authrequestinterface = require("./interfaces/auth-request.interface");
+const _tokeninterface = require("./interfaces/token.interface");
 const _authmanagerservice = require("./services/auth-manager.service");
+const _authmethodtwofaservice = require("./services/auth-methods/auth-method-two-fa.service");
 function _ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -37,26 +46,56 @@ function _ts_param(paramIndex, decorator) {
 }
 let AuthController = class AuthController {
     login(user, res) {
-        return this.auth.setCookies(user, res);
+        return this.authManager.setCookies(user, res, true);
     }
     logout(res) {
-        return this.auth.clearCookies(res);
+        return this.authManager.clearCookies(res);
     }
     refreshCookies(user, res) {
-        return this.auth.refreshCookies(user, res);
+        return this.authManager.refreshCookies(user, res);
     }
     token(user) {
-        return this.auth.getTokens(user);
+        return this.authManager.getTokens(user);
     }
     refreshToken(user) {
-        return this.auth.getTokens(user, true);
+        return this.authManager.getTokens(user, true);
     }
-    constructor(auth){
-        this.auth = auth;
+    /* TWO-FA Part */ twoFaInit(user) {
+        return this.authMethod2FA.initTwoFactor(user);
+    }
+    twoFaEnable(body, req) {
+        return this.authMethod2FA.enableTwoFactor(body, req);
+    }
+    twoFaDisable(body, req) {
+        return this.authMethod2FA.disableTwoFactor(body, req);
+    }
+    async twoFaLogin(body, req, res) {
+        const [authStatus, user] = await this.authMethod2FA.verify(body, req, true);
+        if (authStatus.success) {
+            const loginResponseDto = await this.authManager.setCookies(user, res);
+            // clear the temporary 2FA cookie
+            res.clearCookie(_auth.ACCESS_KEY, {
+                path: _auth.TOKEN_PATHS[_tokeninterface.TOKEN_TYPE.ACCESS_2FA],
+                httpOnly: true
+            });
+            return {
+                ...loginResponseDto,
+                ...authStatus
+            };
+        }
+        return authStatus;
+    }
+    twoFaReset(userId) {
+        return this.authMethod2FA.adminResetUserTwoFa(userId);
+    }
+    constructor(authManager, authMethod2FA){
+        this.authManager = authManager;
+        this.authMethod2FA = authMethod2FA;
     }
 };
 _ts_decorate([
     (0, _common.Post)(_routes.AUTH_ROUTE.LOGIN),
+    (0, _authtokenskipdecorator.AuthTokenSkip)(),
     (0, _common.UseGuards)(_authlocalguard.AuthLocalGuard),
     _ts_param(0, (0, _userdecorator.GetUser)()),
     _ts_param(1, (0, _common.Res)({
@@ -71,6 +110,7 @@ _ts_decorate([
 ], AuthController.prototype, "login", null);
 _ts_decorate([
     (0, _common.Post)(_routes.AUTH_ROUTE.LOGOUT),
+    (0, _authtokenskipdecorator.AuthTokenSkip)(),
     _ts_param(0, (0, _common.Res)({
         passthrough: true
     })),
@@ -82,6 +122,7 @@ _ts_decorate([
 ], AuthController.prototype, "logout", null);
 _ts_decorate([
     (0, _common.Post)(_routes.AUTH_ROUTE.REFRESH),
+    (0, _authtokenskipdecorator.AuthTokenSkip)(),
     (0, _common.UseGuards)(_authtokenrefreshguard.AuthTokenRefreshGuard),
     _ts_param(0, (0, _userdecorator.GetUser)()),
     _ts_param(1, (0, _common.Res)({
@@ -96,6 +137,7 @@ _ts_decorate([
 ], AuthController.prototype, "refreshCookies", null);
 _ts_decorate([
     (0, _common.Post)(_routes.AUTH_ROUTE.TOKEN),
+    (0, _authtokenskipdecorator.AuthTokenSkip)(),
     (0, _common.UseGuards)(_authlocalguard.AuthLocalGuard),
     _ts_param(0, (0, _userdecorator.GetUser)()),
     _ts_metadata("design:type", Function),
@@ -106,6 +148,7 @@ _ts_decorate([
 ], AuthController.prototype, "token", null);
 _ts_decorate([
     (0, _common.Post)(_routes.AUTH_ROUTE.TOKEN_REFRESH),
+    (0, _authtokenskipdecorator.AuthTokenSkip)(),
     (0, _common.UseGuards)(_authtokenrefreshguard.AuthTokenRefreshGuard),
     _ts_param(0, (0, _userdecorator.GetUser)()),
     _ts_metadata("design:type", Function),
@@ -114,12 +157,77 @@ _ts_decorate([
     ]),
     _ts_metadata("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AuthController.prototype, "refreshToken", null);
+_ts_decorate([
+    (0, _common.Get)(`${_routes.AUTH_ROUTE.TWO_FA_BASE}/${_routes.AUTH_ROUTE.TWO_FA_ENABLE}`),
+    (0, _common.UseGuards)(_rolesguard.UserRolesGuard),
+    (0, _rolesdecorator.UserHaveRole)(_user.USER_ROLE.USER),
+    _ts_param(0, (0, _userdecorator.GetUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _usermodel.UserModel === "undefined" ? Object : _usermodel.UserModel
+    ]),
+    _ts_metadata("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AuthController.prototype, "twoFaInit", null);
+_ts_decorate([
+    (0, _common.Post)(`${_routes.AUTH_ROUTE.TWO_FA_BASE}/${_routes.AUTH_ROUTE.TWO_FA_ENABLE}`),
+    (0, _common.UseGuards)(_rolesguard.UserRolesGuard),
+    (0, _rolesdecorator.UserHaveRole)(_user.USER_ROLE.USER),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_param(1, (0, _common.Req)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _twofaverifydto.TwoFaVerifyWithPasswordDto === "undefined" ? Object : _twofaverifydto.TwoFaVerifyWithPasswordDto,
+        typeof _authrequestinterface.FastifyAuthenticatedRequest === "undefined" ? Object : _authrequestinterface.FastifyAuthenticatedRequest
+    ]),
+    _ts_metadata("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AuthController.prototype, "twoFaEnable", null);
+_ts_decorate([
+    (0, _common.Post)(`${_routes.AUTH_ROUTE.TWO_FA_BASE}/${_routes.AUTH_ROUTE.TWO_FA_DISABLE}`),
+    (0, _common.UseGuards)(_rolesguard.UserRolesGuard),
+    (0, _rolesdecorator.UserHaveRole)(_user.USER_ROLE.USER),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_param(1, (0, _common.Req)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _twofaverifydto.TwoFaVerifyWithPasswordDto === "undefined" ? Object : _twofaverifydto.TwoFaVerifyWithPasswordDto,
+        typeof _authrequestinterface.FastifyAuthenticatedRequest === "undefined" ? Object : _authrequestinterface.FastifyAuthenticatedRequest
+    ]),
+    _ts_metadata("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AuthController.prototype, "twoFaDisable", null);
+_ts_decorate([
+    (0, _common.Post)(`${_routes.AUTH_ROUTE.TWO_FA_BASE}/${_routes.AUTH_ROUTE.TWO_FA_LOGIN_VERIFY}`),
+    (0, _common.UseGuards)(_rolesguard.UserRolesGuard),
+    (0, _rolesdecorator.UserHaveRole)(_user.USER_ROLE.USER),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_param(1, (0, _common.Req)()),
+    _ts_param(2, (0, _common.Res)({
+        passthrough: true
+    })),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _twofaverifydto.TwoFaVerifyDto === "undefined" ? Object : _twofaverifydto.TwoFaVerifyDto,
+        typeof _authrequestinterface.FastifyAuthenticatedRequest === "undefined" ? Object : _authrequestinterface.FastifyAuthenticatedRequest,
+        typeof _fastify.FastifyReply === "undefined" ? Object : _fastify.FastifyReply
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], AuthController.prototype, "twoFaLogin", null);
+_ts_decorate([
+    (0, _common.Post)(`${_routes.AUTH_ROUTE.TWO_FA_BASE}/${_routes.AUTH_ROUTE.TWO_FA_ADMIN_RESET_USER}/:id`),
+    (0, _common.UseGuards)(_rolesguard.UserRolesGuard, _authtwofaguard.AuthTwoFaGuard),
+    (0, _rolesdecorator.UserHaveRole)(_user.USER_ROLE.ADMINISTRATOR),
+    _ts_param(0, (0, _common.Param)('id', _common.ParseIntPipe)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        Number
+    ]),
+    _ts_metadata("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AuthController.prototype, "twoFaReset", null);
 AuthController = _ts_decorate([
     (0, _common.Controller)(_routes.AUTH_ROUTE.BASE),
-    (0, _authtokenskipdecorator.AuthTokenSkip)(),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
-        typeof _authmanagerservice.AuthManager === "undefined" ? Object : _authmanagerservice.AuthManager
+        typeof _authmanagerservice.AuthManager === "undefined" ? Object : _authmanagerservice.AuthManager,
+        typeof _authmethodtwofaservice.AuthMethod2FA === "undefined" ? Object : _authmethodtwofaservice.AuthMethod2FA
     ])
 ], AuthController);
 

package/server/authentication/auth.controller.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../backend/src/authentication/auth.controller.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Controller, Post, Res, UseGuards } from '@nestjs/common'\nimport { FastifyReply } from 'fastify'\nimport { GetUser } from '../applications/users/decorators/user.decorator'\nimport { UserModel } from '../applications/users/models/user.model'\nimport { AUTH_ROUTE } from './constants/routes'\nimport { AuthTokenSkip } from './decorators/auth-token-skip.decorator'\nimport { LoginResponseDto } from './dto/login-response.dto'\nimport { TokenResponseDto } from './dto/token-response.dto'\nimport { AuthLocalGuard } from './guards/auth-local.guard'\nimport { AuthTokenRefreshGuard } from './guards/auth-token-refresh.guard'\nimport { AuthManager } from './services/auth-manager.service'\n\n@Controller(AUTH_ROUTE.BASE)\n@AuthTokenSkip()\nexport class AuthController {\n  constructor(private readonly auth: AuthManager) {}\n\n  @Post(AUTH_ROUTE.LOGIN)\n  @UseGuards(AuthLocalGuard)\n  login(@GetUser() user: UserModel, @Res({ passthrough: true }) res: FastifyReply): Promise<LoginResponseDto> {\n    return this.auth.setCookies(user, res)\n  }\n\n  @Post(AUTH_ROUTE.LOGOUT)\n  logout(@Res({ passthrough: true }) res: FastifyReply) {\n    return this.auth.clearCookies(res)\n  }\n\n  @Post(AUTH_ROUTE.REFRESH)\n  @UseGuards(AuthTokenRefreshGuard)\n  refreshCookies(@GetUser() user: UserModel, @Res({ passthrough: true }) res: FastifyReply): Promise<TokenResponseDto> {\n    return this.auth.refreshCookies(user, res)\n  }\n\n  @Post(AUTH_ROUTE.TOKEN)\n  @UseGuards(AuthLocalGuard)\n  token(@GetUser() user: UserModel): Promise<TokenResponseDto> {\n    return this.auth.getTokens(user)\n  }\n\n  @Post(AUTH_ROUTE.TOKEN_REFRESH)\n  @UseGuards(AuthTokenRefreshGuard)\n  refreshToken(@GetUser() user: UserModel): Promise<TokenResponseDto> {\n    return this.auth.getTokens(user, true)\n  }\n}\n"],"names":["AuthController","login","user","res","auth","setCookies","logout","clearCookies","refreshCookies","token","getTokens","refreshToken","LOGIN","passthrough","LOGOUT","REFRESH","TOKEN","TOKEN_REFRESH","BASE"],"mappings":"AAAA;;;;CAIC;;;;+BAgBYA;;;eAAAA;;;wBAdoC;yBACpB;+BACL;2BACE;wBACC;wCACG;gCAGC;uCACO;oCACV;;;;;;;;;;;;;;;AAIrB,IAAA,AAAMA,iBAAN,MAAMA;IAKXC,MAAM,AAAWC,IAAe,EAAE,AAA4BC,GAAiB,EAA6B;QAC1G,OAAO,IAAI,CAACC,IAAI,CAACC,UAAU,CAACH,MAAMC;IACpC;IAGAG,OAAO,AAA4BH,GAAiB,EAAE;QACpD,OAAO,IAAI,CAACC,IAAI,CAACG,YAAY,CAACJ;IAChC;IAIAK,eAAe,AAAWN,IAAe,EAAE,AAA4BC,GAAiB,EAA6B;QACnH,OAAO,IAAI,CAACC,IAAI,CAACI,cAAc,CAACN,MAAMC;IACxC;IAIAM,MAAM,AAAWP,IAAe,EAA6B;QAC3D,OAAO,IAAI,CAACE,IAAI,CAACM,SAAS,CAACR;IAC7B;IAIAS,aAAa,AAAWT,IAAe,EAA6B;QAClE,OAAO,IAAI,CAACE,IAAI,CAACM,SAAS,CAACR,MAAM;IACnC;IA7BA,YAAY,AAAiBE,IAAiB,CAAE;aAAnBA,OAAAA;IAAoB;AA8BnD;;yCA5BmBQ;;;;QAEwBC,aAAa;;;;;;;;;;yCAIrCC;;QACHD,aAAa;;;;;;;;;yCAIVE;;;;QAEiCF,aAAa;;;;;;;;;;yCAI9CG;;;;;;;;;;yCAMAC;;;;;;;;;;+CA5BIC"}
+{"version":3,"sources":["../../../backend/src/authentication/auth.controller.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Body, Controller, Get, Param, ParseIntPipe, Post, Req, Res, UseGuards } from '@nestjs/common'\nimport { FastifyReply } from 'fastify'\nimport { USER_ROLE } from '../applications/users/constants/user'\nimport { UserHaveRole } from '../applications/users/decorators/roles.decorator'\nimport { GetUser } from '../applications/users/decorators/user.decorator'\nimport { UserRolesGuard } from '../applications/users/guards/roles.guard'\nimport { UserModel } from '../applications/users/models/user.model'\nimport { ACCESS_KEY, TOKEN_PATHS } from './constants/auth'\nimport { AUTH_ROUTE } from './constants/routes'\nimport { AuthTokenSkip } from './decorators/auth-token-skip.decorator'\nimport { LoginResponseDto, LoginVerify2FaDto, TwoFaResponseDto } from './dto/login-response.dto'\nimport { TokenResponseDto } from './dto/token-response.dto'\nimport { TwoFaVerifyDto, TwoFaVerifyWithPasswordDto } from './dto/two-fa-verify.dto'\nimport { AuthLocalGuard } from './guards/auth-local.guard'\nimport { AuthTokenRefreshGuard } from './guards/auth-token-refresh.guard'\nimport { AuthTwoFaGuard } from './guards/auth-two-fa-guard'\nimport { FastifyAuthenticatedRequest } from './interfaces/auth-request.interface'\nimport { TOKEN_TYPE } from './interfaces/token.interface'\nimport { TwoFaSetup, TwoFaVerifyResult } from './interfaces/two-fa-setup.interface'\nimport { AuthManager } from './services/auth-manager.service'\nimport { AuthMethod2FA } from './services/auth-methods/auth-method-two-fa.service'\n\n@Controller(AUTH_ROUTE.BASE)\nexport class AuthController {\n  constructor(\n    private readonly authManager: AuthManager,\n    private readonly authMethod2FA: AuthMethod2FA\n  ) {}\n\n  @Post(AUTH_ROUTE.LOGIN)\n  @AuthTokenSkip()\n  @UseGuards(AuthLocalGuard)\n  login(@GetUser() user: UserModel, @Res({ passthrough: true }) res: FastifyReply): Promise<LoginResponseDto | LoginVerify2FaDto> {\n    return this.authManager.setCookies(user, res, true)\n  }\n\n  @Post(AUTH_ROUTE.LOGOUT)\n  @AuthTokenSkip()\n  logout(@Res({ passthrough: true }) res: FastifyReply) {\n    return this.authManager.clearCookies(res)\n  }\n\n  @Post(AUTH_ROUTE.REFRESH)\n  @AuthTokenSkip()\n  @UseGuards(AuthTokenRefreshGuard)\n  refreshCookies(@GetUser() user: UserModel, @Res({ passthrough: true }) res: FastifyReply): Promise<TokenResponseDto> {\n    return this.authManager.refreshCookies(user, res)\n  }\n\n  @Post(AUTH_ROUTE.TOKEN)\n  @AuthTokenSkip()\n  @UseGuards(AuthLocalGuard)\n  token(@GetUser() user: UserModel): Promise<TokenResponseDto> {\n    return this.authManager.getTokens(user)\n  }\n\n  @Post(AUTH_ROUTE.TOKEN_REFRESH)\n  @AuthTokenSkip()\n  @UseGuards(AuthTokenRefreshGuard)\n  refreshToken(@GetUser() user: UserModel): Promise<TokenResponseDto> {\n    return this.authManager.getTokens(user, true)\n  }\n\n  /* TWO-FA Part */\n\n  @Get(`${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_ENABLE}`)\n  @UseGuards(UserRolesGuard)\n  @UserHaveRole(USER_ROLE.USER)\n  twoFaInit(@GetUser() user: UserModel): Promise<TwoFaSetup> {\n    return this.authMethod2FA.initTwoFactor(user)\n  }\n\n  @Post(`${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_ENABLE}`)\n  @UseGuards(UserRolesGuard)\n  @UserHaveRole(USER_ROLE.USER)\n  twoFaEnable(@Body() body: TwoFaVerifyWithPasswordDto, @Req() req: FastifyAuthenticatedRequest): Promise<TwoFaVerifyResult> {\n    return this.authMethod2FA.enableTwoFactor(body, req)\n  }\n\n  @Post(`${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_DISABLE}`)\n  @UseGuards(UserRolesGuard)\n  @UserHaveRole(USER_ROLE.USER)\n  twoFaDisable(@Body() body: TwoFaVerifyWithPasswordDto, @Req() req: FastifyAuthenticatedRequest): Promise<TwoFaVerifyResult> {\n    return this.authMethod2FA.disableTwoFactor(body, req)\n  }\n\n  @Post(`${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_LOGIN_VERIFY}`)\n  @UseGuards(UserRolesGuard)\n  @UserHaveRole(USER_ROLE.USER)\n  async twoFaLogin(\n    @Body() body: TwoFaVerifyDto,\n    @Req() req: FastifyAuthenticatedRequest,\n    @Res({ passthrough: true }) res: FastifyReply\n  ): Promise<TwoFaResponseDto | TwoFaVerifyResult> {\n    const [authStatus, user] = await this.authMethod2FA.verify(body, req, true)\n    if (authStatus.success) {\n      const loginResponseDto = await this.authManager.setCookies(user, res)\n      // clear the temporary 2FA cookie\n      res.clearCookie(ACCESS_KEY, { path: TOKEN_PATHS[TOKEN_TYPE.ACCESS_2FA], httpOnly: true })\n      return { ...loginResponseDto, ...authStatus } satisfies TwoFaResponseDto\n    }\n    return authStatus\n  }\n\n  @Post(`${AUTH_ROUTE.TWO_FA_BASE}/${AUTH_ROUTE.TWO_FA_ADMIN_RESET_USER}/:id`)\n  @UseGuards(UserRolesGuard, AuthTwoFaGuard)\n  @UserHaveRole(USER_ROLE.ADMINISTRATOR)\n  twoFaReset(@Param('id', ParseIntPipe) userId: number): Promise<TwoFaVerifyResult> {\n    return this.authMethod2FA.adminResetUserTwoFa(userId)\n  }\n}\n"],"names":["AuthController","login","user","res","authManager","setCookies","logout","clearCookies","refreshCookies","token","getTokens","refreshToken","twoFaInit","authMethod2FA","initTwoFactor","twoFaEnable","body","req","enableTwoFactor","twoFaDisable","disableTwoFactor","twoFaLogin","authStatus","verify","success","loginResponseDto","clearCookie","ACCESS_KEY","path","TOKEN_PATHS","TOKEN_TYPE","ACCESS_2FA","httpOnly","twoFaReset","userId","adminResetUserTwoFa","LOGIN","passthrough","LOGOUT","REFRESH","TOKEN","TOKEN_REFRESH","AUTH_ROUTE","TWO_FA_BASE","TWO_FA_ENABLE","USER","TWO_FA_DISABLE","TWO_FA_LOGIN_VERIFY","TWO_FA_ADMIN_RESET_USER","ADMINISTRATOR","BASE"],"mappings":"AAAA;;;;CAIC;;;;+BAyBYA;;;eAAAA;;;wBAvByE;yBACzD;sBACH;gCACG;+BACL;4BACO;2BACL;sBACc;wBACb;wCACG;gCAG6B;gCAC5B;uCACO;gCACP;sCACa;gCACjB;oCAEC;wCACE;;;;;;;;;;;;;;;AAGvB,IAAA,AAAMA,iBAAN,MAAMA;IASXC,MAAM,AAAWC,IAAe,EAAE,AAA4BC,GAAiB,EAAiD;QAC9H,OAAO,IAAI,CAACC,WAAW,CAACC,UAAU,CAACH,MAAMC,KAAK;IAChD;IAIAG,OAAO,AAA4BH,GAAiB,EAAE;QACpD,OAAO,IAAI,CAACC,WAAW,CAACG,YAAY,CAACJ;IACvC;IAKAK,eAAe,AAAWN,IAAe,EAAE,AAA4BC,GAAiB,EAA6B;QACnH,OAAO,IAAI,CAACC,WAAW,CAACI,cAAc,CAACN,MAAMC;IAC/C;IAKAM,MAAM,AAAWP,IAAe,EAA6B;QAC3D,OAAO,IAAI,CAACE,WAAW,CAACM,SAAS,CAACR;IACpC;IAKAS,aAAa,AAAWT,IAAe,EAA6B;QAClE,OAAO,IAAI,CAACE,WAAW,CAACM,SAAS,CAACR,MAAM;IAC1C;IAEA,eAAe,GAEf,AAGAU,UAAU,AAAWV,IAAe,EAAuB;QACzD,OAAO,IAAI,CAACW,aAAa,CAACC,aAAa,CAACZ;IAC1C;IAKAa,YAAY,AAAQC,IAAgC,EAAE,AAAOC,GAAgC,EAA8B;QACzH,OAAO,IAAI,CAACJ,aAAa,CAACK,eAAe,CAACF,MAAMC;IAClD;IAKAE,aAAa,AAAQH,IAAgC,EAAE,AAAOC,GAAgC,EAA8B;QAC1H,OAAO,IAAI,CAACJ,aAAa,CAACO,gBAAgB,CAACJ,MAAMC;IACnD;IAEA,MAGMI,WACJ,AAAQL,IAAoB,EAC5B,AAAOC,GAAgC,EACvC,AAA4Bd,GAAiB,EACE;QAC/C,MAAM,CAACmB,YAAYpB,KAAK,GAAG,MAAM,IAAI,CAACW,aAAa,CAACU,MAAM,CAACP,MAAMC,KAAK;QACtE,IAAIK,WAAWE,OAAO,EAAE;YACtB,MAAMC,mBAAmB,MAAM,IAAI,CAACrB,WAAW,CAACC,UAAU,CAACH,MAAMC;YACjE,iCAAiC;YACjCA,IAAIuB,WAAW,CAACC,gBAAU,EAAE;gBAAEC,MAAMC,iBAAW,CAACC,0BAAU,CAACC,UAAU,CAAC;gBAAEC,UAAU;YAAK;YACvF,OAAO;gBAAE,GAAGP,gBAAgB;gBAAE,GAAGH,UAAU;YAAC;QAC9C;QACA,OAAOA;IACT;IAKAW,WAAW,AAA2BC,MAAc,EAA8B;QAChF,OAAO,IAAI,CAACrB,aAAa,CAACsB,mBAAmB,CAACD;IAChD;IArFA,YACE,AAAiB9B,WAAwB,EACzC,AAAiBS,aAA4B,CAC7C;aAFiBT,cAAAA;aACAS,gBAAAA;IAChB;AAmFL;;yCAjFmBuB;;;;;QAGwBC,aAAa;;;;;;;;;;yCAIrCC;;;QAEHD,aAAa;;;;;;;;;yCAIVE;;;;;QAGiCF,aAAa;;;;;;;;;;yCAI9CG;;;;;;;;;;;yCAOAC;;;;;;;;;;;wBASTC,kBAAU,CAACC,WAAW,CAAC,CAAC,EAAED,kBAAU,CAACE,aAAa;;sDAElCC;;;;;;;;;yBAKfH,kBAAU,CAACC,WAAW,CAAC,CAAC,EAAED,kBAAU,CAACE,aAAa;;sDAEnCC;;;;;;;;;;;yBAKfH,kBAAU,CAACC,WAAW,CAAC,CAAC,EAAED,kBAAU,CAACI,cAAc;;sDAEpCD;;;;;;;;;;;yBAKfH,kBAAU,CAACC,WAAW,CAAC,CAAC,EAAED,kBAAU,CAACK,mBAAmB;;sDAEzCF;;;;QAIfR,aAAa;;;;;;;;;;;yBAYbK,kBAAU,CAACC,WAAW,CAAC,CAAC,EAAED,kBAAU,CAACM,uBAAuB,CAAC,IAAI;;sDAElDC;;;;;;;;;+CApFHC"}

package/server/authentication/auth.controller.spec.js

@@ -10,7 +10,9 @@ const _config = require("@nestjs/config");
 const _jwt = require("@nestjs/jwt");
 const _passport = require("@nestjs/passport");
 const _testing = require("@nestjs/testing");
+const _notificationsmanagerservice = require("../applications/notifications/services/notifications-manager.service");
 const _usermodel = require("../applications/users/models/user.model");
+const _usersmanagerservice = require("../applications/users/services/users-manager.service");
 const _test = require("../applications/users/utils/test");
 const _functions = require("../common/functions");
 const _shared = require("../common/shared");
@@ -18,9 +20,12 @@ const _configenvironment = require("../configuration/config.environment");
 const _cacheservice = require("../infrastructure/cache/services/cache.service");
 const _constants = require("../infrastructure/database/constants");
 const _authcontroller = require("./auth.controller");
+const _auth = require("./constants/auth");
 const _loginresponsedto = require("./dto/login-response.dto");
+const _authtwofaguard = require("./guards/auth-two-fa-guard");
 const _tokeninterface = require("./interfaces/token.interface");
 const _authmanagerservice = require("./services/auth-manager.service");
+const _authmethodtwofaservice = require("./services/auth-methods/auth-method-two-fa.service");
 describe(_authcontroller.AuthController.name, ()=>{
     let module;
     let authController;
@@ -44,6 +49,8 @@ describe(_authcontroller.AuthController.name, ()=>{
                 _config.ConfigService,
                 _authmanagerservice.AuthManager,
                 _jwt.JwtService,
+                _authmethodtwofaservice.AuthMethod2FA,
+                _authtwofaguard.AuthTwoFaGuard,
                 {
                     provide: _constants.DB_TOKEN_PROVIDER,
                     useValue: {}
@@ -51,6 +58,14 @@ describe(_authcontroller.AuthController.name, ()=>{
                 {
                     provide: _cacheservice.Cache,
                     useValue: {}
+                },
+                {
+                    provide: _usersmanagerservice.UsersManager,
+                    useValue: {}
+                },
+                {
+                    provide: _notificationsmanagerservice.NotificationsManager,
+                    useValue: {}
                 }
             ]
         }).compile();
@@ -88,7 +103,7 @@ describe(_authcontroller.AuthController.name, ()=>{
             clearCookie: jest.fn()
         };
         await expect(authController.logout(res)).resolves.not.toThrow();
-        expect(res.clearCookie).toHaveBeenCalledTimes(4);
+        expect(res.clearCookie).toHaveBeenCalledTimes(Object.keys(_auth.TOKEN_PATHS).length);
     });
     it('should refresh JWT in cookies', async ()=>{
         userTest.exp = (0, _shared.currentTimeStamp)() + (0, _functions.convertHumanTimeToSeconds)('30s');

package/server/authentication/auth.controller.spec.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../backend/src/authentication/auth.controller.spec.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { ConfigModule, ConfigService } from '@nestjs/config'\nimport { JwtService } from '@nestjs/jwt'\nimport { PassportModule } from '@nestjs/passport'\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { UserModel } from '../applications/users/models/user.model'\nimport { generateUserTest } from '../applications/users/utils/test'\nimport { convertHumanTimeToSeconds } from '../common/functions'\nimport { currentTimeStamp } from '../common/shared'\nimport { exportConfiguration } from '../configuration/config.environment'\nimport { Cache } from '../infrastructure/cache/services/cache.service'\nimport { DB_TOKEN_PROVIDER } from '../infrastructure/database/constants'\nimport { AuthConfig } from './auth.config'\nimport { AuthController } from './auth.controller'\nimport { LoginResponseDto } from './dto/login-response.dto'\nimport { TOKEN_TYPE } from './interfaces/token.interface'\nimport { AuthManager } from './services/auth-manager.service'\n\ndescribe(AuthController.name, () => {\n  let module: TestingModule\n  let authController: AuthController\n  let authConfig: AuthConfig\n  let userTest: UserModel\n\n  beforeAll(async () => {\n    module = await Test.createTestingModule({\n      imports: [await ConfigModule.forRoot({ load: [exportConfiguration], isGlobal: true }), PassportModule],\n      controllers: [AuthController],\n      providers: [ConfigService, AuthManager, JwtService, { provide: DB_TOKEN_PROVIDER, useValue: {} }, { provide: Cache, useValue: {} }]\n    }).compile()\n\n    module.useLogger(['fatal'])\n    authConfig = module.get<ConfigService>(ConfigService).get<AuthConfig>('auth')\n    authController = module.get<AuthController>(AuthController)\n    userTest = new UserModel({ ...generateUserTest(), id: 888 }, false)\n  })\n\n  afterAll(async () => {\n    await module.close()\n  })\n\n  it('should be defined', () => {\n    expect(authConfig).toBeDefined()\n    expect(authController).toBeDefined()\n    expect(userTest).toBeDefined()\n  })\n\n  it('should set JWT in cookies', async () => {\n    const res: any = { setCookie: jest.fn() }\n    const result = await authController.login(userTest, res)\n    expect(result).toBeDefined()\n    expect(result).toBeInstanceOf(LoginResponseDto)\n    expect(res.setCookie).toHaveBeenCalledTimes(4)\n    expect(result.token.access_expiration).toBeCloseTo(convertHumanTimeToSeconds(authConfig.token.access.expiration) + currentTimeStamp(), -1)\n    expect(result.token.refresh_expiration).toBeCloseTo(convertHumanTimeToSeconds(authConfig.token.refresh.expiration) + currentTimeStamp(), -1)\n  })\n\n  it('should clear JWT in cookies', async () => {\n    const res: any = { clearCookie: jest.fn() }\n    await expect(authController.logout(res)).resolves.not.toThrow()\n    expect(res.clearCookie).toHaveBeenCalledTimes(4)\n  })\n\n  it('should refresh JWT in cookies', async () => {\n    userTest.exp = currentTimeStamp() + convertHumanTimeToSeconds('30s')\n    const res: any = { setCookie: jest.fn() }\n    const result = await authController.refreshCookies(userTest, res)\n    expect(result).toBeDefined()\n    expect(res.setCookie).toHaveBeenCalledTimes(4)\n    expect(result.access_expiration).toBeCloseTo(convertHumanTimeToSeconds(authConfig.token.access.expiration) + currentTimeStamp(), -1)\n    expect(result.refresh_expiration).toBe(userTest.exp)\n  })\n\n  it('should not refresh JWT in cookies', async () => {\n    userTest.exp = currentTimeStamp() - 1\n    const res: any = { setCookie: jest.fn() }\n    await expect(authController.refreshCookies(userTest, res)).rejects.toThrow()\n  })\n\n  it('should get JWT in response body', async () => {\n    const result = await authController.token(userTest)\n    expect(result[TOKEN_TYPE.ACCESS]).toBeDefined()\n    expect(result[TOKEN_TYPE.REFRESH]).toBeDefined()\n    expect(result[`${TOKEN_TYPE.ACCESS}_expiration`]).toBeCloseTo(\n      convertHumanTimeToSeconds(authConfig.token.access.expiration) + currentTimeStamp(),\n      -1\n    )\n    expect(result[`${TOKEN_TYPE.REFRESH}_expiration`]).toBeCloseTo(\n      convertHumanTimeToSeconds(authConfig.token.refresh.expiration) + currentTimeStamp(),\n      -1\n    )\n  })\n\n  it('should refresh JWT in response body', async () => {\n    userTest.exp = currentTimeStamp() + convertHumanTimeToSeconds('30s')\n    const result = await authController.refreshToken(userTest)\n    expect(result[TOKEN_TYPE.ACCESS]).toBeDefined()\n    expect(result[TOKEN_TYPE.REFRESH]).toBeDefined()\n    expect(result[`${TOKEN_TYPE.ACCESS}_expiration`]).toBeCloseTo(\n      convertHumanTimeToSeconds(authConfig.token.access.expiration) + currentTimeStamp(),\n      -1\n    )\n    expect(result[`${TOKEN_TYPE.REFRESH}_expiration`]).toBe(userTest.exp)\n  })\n\n  it('should not refresh JWT in response body', async () => {\n    userTest.exp = currentTimeStamp() - 1\n    await expect(authController.refreshToken(userTest)).rejects.toThrow()\n  })\n})\n"],"names":["describe","AuthController","name","module","authController","authConfig","userTest","beforeAll","Test","createTestingModule","imports","ConfigModule","forRoot","load","exportConfiguration","isGlobal","PassportModule","controllers","providers","ConfigService","AuthManager","JwtService","provide","DB_TOKEN_PROVIDER","useValue","Cache","compile","useLogger","get","UserModel","generateUserTest","id","afterAll","close","it","expect","toBeDefined","res","setCookie","jest","fn","result","login","toBeInstanceOf","LoginResponseDto","toHaveBeenCalledTimes","token","access_expiration","toBeCloseTo","convertHumanTimeToSeconds","access","expiration","currentTimeStamp","refresh_expiration","refresh","clearCookie","logout","resolves","not","toThrow","exp","refreshCookies","toBe","rejects","TOKEN_TYPE","ACCESS","REFRESH","refreshToken"],"mappings":"AAAA;;;;CAIC;;;;wBAE2C;qBACjB;0BACI;yBACK;2BACV;sBACO;2BACS;wBACT;mCACG;8BACd;2BACY;gCAEH;kCACE;gCACN;oCACC;AAE5BA,SAASC,8BAAc,CAACC,IAAI,EAAE;IAC5B,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJC,UAAU;QACRJ,SAAS,MAAMK,aAAI,CAACC,mBAAmB,CAAC;YACtCC,SAAS;gBAAC,MAAMC,oBAAY,CAACC,OAAO,CAAC;oBAAEC,MAAM;wBAACC,sCAAmB;qBAAC;oBAAEC,UAAU;gBAAK;gBAAIC,wBAAc;aAAC;YACtGC,aAAa;gBAAChB,8BAAc;aAAC;YAC7BiB,WAAW;gBAACC,qBAAa;gBAAEC,+BAAW;gBAAEC,eAAU;gBAAE;oBAAEC,SAASC,4BAAiB;oBAAEC,UAAU,CAAC;gBAAE;gBAAG;oBAAEF,SAASG,mBAAK;oBAAED,UAAU,CAAC;gBAAE;aAAE;QACrI,GAAGE,OAAO;QAEVvB,OAAOwB,SAAS,CAAC;YAAC;SAAQ;QAC1BtB,aAAaF,OAAOyB,GAAG,CAAgBT,qBAAa,EAAES,GAAG,CAAa;QACtExB,iBAAiBD,OAAOyB,GAAG,CAAiB3B,8BAAc;QAC1DK,WAAW,IAAIuB,oBAAS,CAAC;YAAE,GAAGC,IAAAA,sBAAgB,GAAE;YAAEC,IAAI;QAAI,GAAG;IAC/D;IAEAC,SAAS;QACP,MAAM7B,OAAO8B,KAAK;IACpB;IAEAC,GAAG,qBAAqB;QACtBC,OAAO9B,YAAY+B,WAAW;QAC9BD,OAAO/B,gBAAgBgC,WAAW;QAClCD,OAAO7B,UAAU8B,WAAW;IAC9B;IAEAF,GAAG,6BAA6B;QAC9B,MAAMG,MAAW;YAAEC,WAAWC,KAAKC,EAAE;QAAG;QACxC,MAAMC,SAAS,MAAMrC,eAAesC,KAAK,CAACpC,UAAU+B;QACpDF,OAAOM,QAAQL,WAAW;QAC1BD,OAAOM,QAAQE,cAAc,CAACC,kCAAgB;QAC9CT,OAAOE,IAAIC,SAAS,EAAEO,qBAAqB,CAAC;QAC5CV,OAAOM,OAAOK,KAAK,CAACC,iBAAiB,EAAEC,WAAW,CAACC,IAAAA,oCAAyB,EAAC5C,WAAWyC,KAAK,CAACI,MAAM,CAACC,UAAU,IAAIC,IAAAA,wBAAgB,KAAI,CAAC;QACxIjB,OAAOM,OAAOK,KAAK,CAACO,kBAAkB,EAAEL,WAAW,CAACC,IAAAA,oCAAyB,EAAC5C,WAAWyC,KAAK,CAACQ,OAAO,CAACH,UAAU,IAAIC,IAAAA,wBAAgB,KAAI,CAAC;IAC5I;IAEAlB,GAAG,+BAA+B;QAChC,MAAMG,MAAW;YAAEkB,aAAahB,KAAKC,EAAE;QAAG;QAC1C,MAAML,OAAO/B,eAAeoD,MAAM,CAACnB,MAAMoB,QAAQ,CAACC,GAAG,CAACC,OAAO;QAC7DxB,OAAOE,IAAIkB,WAAW,EAAEV,qBAAqB,CAAC;IAChD;IAEAX,GAAG,iCAAiC;QAClC5B,SAASsD,GAAG,GAAGR,IAAAA,wBAAgB,MAAKH,IAAAA,oCAAyB,EAAC;QAC9D,MAAMZ,MAAW;YAAEC,WAAWC,KAAKC,EAAE;QAAG;QACxC,MAAMC,SAAS,MAAMrC,eAAeyD,cAAc,CAACvD,UAAU+B;QAC7DF,OAAOM,QAAQL,WAAW;QAC1BD,OAAOE,IAAIC,SAAS,EAAEO,qBAAqB,CAAC;QAC5CV,OAAOM,OAAOM,iBAAiB,EAAEC,WAAW,CAACC,IAAAA,oCAAyB,EAAC5C,WAAWyC,KAAK,CAACI,MAAM,CAACC,UAAU,IAAIC,IAAAA,wBAAgB,KAAI,CAAC;QAClIjB,OAAOM,OAAOY,kBAAkB,EAAES,IAAI,CAACxD,SAASsD,GAAG;IACrD;IAEA1B,GAAG,qCAAqC;QACtC5B,SAASsD,GAAG,GAAGR,IAAAA,wBAAgB,MAAK;QACpC,MAAMf,MAAW;YAAEC,WAAWC,KAAKC,EAAE;QAAG;QACxC,MAAML,OAAO/B,eAAeyD,cAAc,CAACvD,UAAU+B,MAAM0B,OAAO,CAACJ,OAAO;IAC5E;IAEAzB,GAAG,mCAAmC;QACpC,MAAMO,SAAS,MAAMrC,eAAe0C,KAAK,CAACxC;QAC1C6B,OAAOM,MAAM,CAACuB,0BAAU,CAACC,MAAM,CAAC,EAAE7B,WAAW;QAC7CD,OAAOM,MAAM,CAACuB,0BAAU,CAACE,OAAO,CAAC,EAAE9B,WAAW;QAC9CD,OAAOM,MAAM,CAAC,GAAGuB,0BAAU,CAACC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAEjB,WAAW,CAC3DC,IAAAA,oCAAyB,EAAC5C,WAAWyC,KAAK,CAACI,MAAM,CAACC,UAAU,IAAIC,IAAAA,wBAAgB,KAChF,CAAC;QAEHjB,OAAOM,MAAM,CAAC,GAAGuB,0BAAU,CAACE,OAAO,CAAC,WAAW,CAAC,CAAC,EAAElB,WAAW,CAC5DC,IAAAA,oCAAyB,EAAC5C,WAAWyC,KAAK,CAACQ,OAAO,CAACH,UAAU,IAAIC,IAAAA,wBAAgB,KACjF,CAAC;IAEL;IAEAlB,GAAG,uCAAuC;QACxC5B,SAASsD,GAAG,GAAGR,IAAAA,wBAAgB,MAAKH,IAAAA,oCAAyB,EAAC;QAC9D,MAAMR,SAAS,MAAMrC,eAAe+D,YAAY,CAAC7D;QACjD6B,OAAOM,MAAM,CAACuB,0BAAU,CAACC,MAAM,CAAC,EAAE7B,WAAW;QAC7CD,OAAOM,MAAM,CAACuB,0BAAU,CAACE,OAAO,CAAC,EAAE9B,WAAW;QAC9CD,OAAOM,MAAM,CAAC,GAAGuB,0BAAU,CAACC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAEjB,WAAW,CAC3DC,IAAAA,oCAAyB,EAAC5C,WAAWyC,KAAK,CAACI,MAAM,CAACC,UAAU,IAAIC,IAAAA,wBAAgB,KAChF,CAAC;QAEHjB,OAAOM,MAAM,CAAC,GAAGuB,0BAAU,CAACE,OAAO,CAAC,WAAW,CAAC,CAAC,EAAEJ,IAAI,CAACxD,SAASsD,GAAG;IACtE;IAEA1B,GAAG,2CAA2C;QAC5C5B,SAASsD,GAAG,GAAGR,IAAAA,wBAAgB,MAAK;QACpC,MAAMjB,OAAO/B,eAAe+D,YAAY,CAAC7D,WAAWyD,OAAO,CAACJ,OAAO;IACrE;AACF"}
+{"version":3,"sources":["../../../backend/src/authentication/auth.controller.spec.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { ConfigModule, ConfigService } from '@nestjs/config'\nimport { JwtService } from '@nestjs/jwt'\nimport { PassportModule } from '@nestjs/passport'\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { NotificationsManager } from '../applications/notifications/services/notifications-manager.service'\nimport { UserModel } from '../applications/users/models/user.model'\nimport { UsersManager } from '../applications/users/services/users-manager.service'\nimport { generateUserTest } from '../applications/users/utils/test'\nimport { convertHumanTimeToSeconds } from '../common/functions'\nimport { currentTimeStamp } from '../common/shared'\nimport { exportConfiguration } from '../configuration/config.environment'\nimport { Cache } from '../infrastructure/cache/services/cache.service'\nimport { DB_TOKEN_PROVIDER } from '../infrastructure/database/constants'\nimport { AuthConfig } from './auth.config'\nimport { AuthController } from './auth.controller'\nimport { TOKEN_PATHS } from './constants/auth'\nimport { LoginResponseDto } from './dto/login-response.dto'\nimport { AuthTwoFaGuard } from './guards/auth-two-fa-guard'\nimport { TOKEN_TYPE } from './interfaces/token.interface'\nimport { AuthManager } from './services/auth-manager.service'\nimport { AuthMethod2FA } from './services/auth-methods/auth-method-two-fa.service'\n\ndescribe(AuthController.name, () => {\n  let module: TestingModule\n  let authController: AuthController\n  let authConfig: AuthConfig\n  let userTest: UserModel\n\n  beforeAll(async () => {\n    module = await Test.createTestingModule({\n      imports: [await ConfigModule.forRoot({ load: [exportConfiguration], isGlobal: true }), PassportModule],\n      controllers: [AuthController],\n      providers: [\n        ConfigService,\n        AuthManager,\n        JwtService,\n        AuthMethod2FA,\n        AuthTwoFaGuard,\n        { provide: DB_TOKEN_PROVIDER, useValue: {} },\n        { provide: Cache, useValue: {} },\n        { provide: UsersManager, useValue: {} },\n        { provide: NotificationsManager, useValue: {} }\n      ]\n    }).compile()\n\n    module.useLogger(['fatal'])\n    authConfig = module.get<ConfigService>(ConfigService).get<AuthConfig>('auth')\n    authController = module.get<AuthController>(AuthController)\n    userTest = new UserModel({ ...generateUserTest(), id: 888 }, false)\n  })\n\n  afterAll(async () => {\n    await module.close()\n  })\n\n  it('should be defined', () => {\n    expect(authConfig).toBeDefined()\n    expect(authController).toBeDefined()\n    expect(userTest).toBeDefined()\n  })\n\n  it('should set JWT in cookies', async () => {\n    const res: any = { setCookie: jest.fn() }\n    const result = await authController.login(userTest, res)\n    expect(result).toBeDefined()\n    expect(result).toBeInstanceOf(LoginResponseDto)\n    expect(res.setCookie).toHaveBeenCalledTimes(4)\n    expect(result.token.access_expiration).toBeCloseTo(convertHumanTimeToSeconds(authConfig.token.access.expiration) + currentTimeStamp(), -1)\n    expect(result.token.refresh_expiration).toBeCloseTo(convertHumanTimeToSeconds(authConfig.token.refresh.expiration) + currentTimeStamp(), -1)\n  })\n\n  it('should clear JWT in cookies', async () => {\n    const res: any = { clearCookie: jest.fn() }\n    await expect(authController.logout(res)).resolves.not.toThrow()\n    expect(res.clearCookie).toHaveBeenCalledTimes(Object.keys(TOKEN_PATHS).length)\n  })\n\n  it('should refresh JWT in cookies', async () => {\n    userTest.exp = currentTimeStamp() + convertHumanTimeToSeconds('30s')\n    const res: any = { setCookie: jest.fn() }\n    const result = await authController.refreshCookies(userTest, res)\n    expect(result).toBeDefined()\n    expect(res.setCookie).toHaveBeenCalledTimes(4)\n    expect(result.access_expiration).toBeCloseTo(convertHumanTimeToSeconds(authConfig.token.access.expiration) + currentTimeStamp(), -1)\n    expect(result.refresh_expiration).toBe(userTest.exp)\n  })\n\n  it('should not refresh JWT in cookies', async () => {\n    userTest.exp = currentTimeStamp() - 1\n    const res: any = { setCookie: jest.fn() }\n    await expect(authController.refreshCookies(userTest, res)).rejects.toThrow()\n  })\n\n  it('should get JWT in response body', async () => {\n    const result = await authController.token(userTest)\n    expect(result[TOKEN_TYPE.ACCESS]).toBeDefined()\n    expect(result[TOKEN_TYPE.REFRESH]).toBeDefined()\n    expect(result[`${TOKEN_TYPE.ACCESS}_expiration`]).toBeCloseTo(\n      convertHumanTimeToSeconds(authConfig.token.access.expiration) + currentTimeStamp(),\n      -1\n    )\n    expect(result[`${TOKEN_TYPE.REFRESH}_expiration`]).toBeCloseTo(\n      convertHumanTimeToSeconds(authConfig.token.refresh.expiration) + currentTimeStamp(),\n      -1\n    )\n  })\n\n  it('should refresh JWT in response body', async () => {\n    userTest.exp = currentTimeStamp() + convertHumanTimeToSeconds('30s')\n    const result = await authController.refreshToken(userTest)\n    expect(result[TOKEN_TYPE.ACCESS]).toBeDefined()\n    expect(result[TOKEN_TYPE.REFRESH]).toBeDefined()\n    expect(result[`${TOKEN_TYPE.ACCESS}_expiration`]).toBeCloseTo(\n      convertHumanTimeToSeconds(authConfig.token.access.expiration) + currentTimeStamp(),\n      -1\n    )\n    expect(result[`${TOKEN_TYPE.REFRESH}_expiration`]).toBe(userTest.exp)\n  })\n\n  it('should not refresh JWT in response body', async () => {\n    userTest.exp = currentTimeStamp() - 1\n    await expect(authController.refreshToken(userTest)).rejects.toThrow()\n  })\n})\n"],"names":["describe","AuthController","name","module","authController","authConfig","userTest","beforeAll","Test","createTestingModule","imports","ConfigModule","forRoot","load","exportConfiguration","isGlobal","PassportModule","controllers","providers","ConfigService","AuthManager","JwtService","AuthMethod2FA","AuthTwoFaGuard","provide","DB_TOKEN_PROVIDER","useValue","Cache","UsersManager","NotificationsManager","compile","useLogger","get","UserModel","generateUserTest","id","afterAll","close","it","expect","toBeDefined","res","setCookie","jest","fn","result","login","toBeInstanceOf","LoginResponseDto","toHaveBeenCalledTimes","token","access_expiration","toBeCloseTo","convertHumanTimeToSeconds","access","expiration","currentTimeStamp","refresh_expiration","refresh","clearCookie","logout","resolves","not","toThrow","Object","keys","TOKEN_PATHS","length","exp","refreshCookies","toBe","rejects","TOKEN_TYPE","ACCESS","REFRESH","refreshToken"],"mappings":"AAAA;;;;CAIC;;;;wBAE2C;qBACjB;0BACI;yBACK;6CACC;2BACX;qCACG;sBACI;2BACS;wBACT;mCACG;8BACd;2BACY;gCAEH;sBACH;kCACK;gCACF;gCACJ;oCACC;wCACE;AAE9BA,SAASC,8BAAc,CAACC,IAAI,EAAE;IAC5B,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJC,UAAU;QACRJ,SAAS,MAAMK,aAAI,CAACC,mBAAmB,CAAC;YACtCC,SAAS;gBAAC,MAAMC,oBAAY,CAACC,OAAO,CAAC;oBAAEC,MAAM;wBAACC,sCAAmB;qBAAC;oBAAEC,UAAU;gBAAK;gBAAIC,wBAAc;aAAC;YACtGC,aAAa;gBAAChB,8BAAc;aAAC;YAC7BiB,WAAW;gBACTC,qBAAa;gBACbC,+BAAW;gBACXC,eAAU;gBACVC,qCAAa;gBACbC,8BAAc;gBACd;oBAAEC,SAASC,4BAAiB;oBAAEC,UAAU,CAAC;gBAAE;gBAC3C;oBAAEF,SAASG,mBAAK;oBAAED,UAAU,CAAC;gBAAE;gBAC/B;oBAAEF,SAASI,iCAAY;oBAAEF,UAAU,CAAC;gBAAE;gBACtC;oBAAEF,SAASK,iDAAoB;oBAAEH,UAAU,CAAC;gBAAE;aAC/C;QACH,GAAGI,OAAO;QAEV3B,OAAO4B,SAAS,CAAC;YAAC;SAAQ;QAC1B1B,aAAaF,OAAO6B,GAAG,CAAgBb,qBAAa,EAAEa,GAAG,CAAa;QACtE5B,iBAAiBD,OAAO6B,GAAG,CAAiB/B,8BAAc;QAC1DK,WAAW,IAAI2B,oBAAS,CAAC;YAAE,GAAGC,IAAAA,sBAAgB,GAAE;YAAEC,IAAI;QAAI,GAAG;IAC/D;IAEAC,SAAS;QACP,MAAMjC,OAAOkC,KAAK;IACpB;IAEAC,GAAG,qBAAqB;QACtBC,OAAOlC,YAAYmC,WAAW;QAC9BD,OAAOnC,gBAAgBoC,WAAW;QAClCD,OAAOjC,UAAUkC,WAAW;IAC9B;IAEAF,GAAG,6BAA6B;QAC9B,MAAMG,MAAW;YAAEC,WAAWC,KAAKC,EAAE;QAAG;QACxC,MAAMC,SAAS,MAAMzC,eAAe0C,KAAK,CAACxC,UAAUmC;QACpDF,OAAOM,QAAQL,WAAW;QAC1BD,OAAOM,QAAQE,cAAc,CAACC,kCAAgB;QAC9CT,OAAOE,IAAIC,SAAS,EAAEO,qBAAqB,CAAC;QAC5CV,OAAOM,OAAOK,KAAK,CAACC,iBAAiB,EAAEC,WAAW,CAACC,IAAAA,oCAAyB,EAAChD,WAAW6C,KAAK,CAACI,MAAM,CAACC,UAAU,IAAIC,IAAAA,wBAAgB,KAAI,CAAC;QACxIjB,OAAOM,OAAOK,KAAK,CAACO,kBAAkB,EAAEL,WAAW,CAACC,IAAAA,oCAAyB,EAAChD,WAAW6C,KAAK,CAACQ,OAAO,CAACH,UAAU,IAAIC,IAAAA,wBAAgB,KAAI,CAAC;IAC5I;IAEAlB,GAAG,+BAA+B;QAChC,MAAMG,MAAW;YAAEkB,aAAahB,KAAKC,EAAE;QAAG;QAC1C,MAAML,OAAOnC,eAAewD,MAAM,CAACnB,MAAMoB,QAAQ,CAACC,GAAG,CAACC,OAAO;QAC7DxB,OAAOE,IAAIkB,WAAW,EAAEV,qBAAqB,CAACe,OAAOC,IAAI,CAACC,iBAAW,EAAEC,MAAM;IAC/E;IAEA7B,GAAG,iCAAiC;QAClChC,SAAS8D,GAAG,GAAGZ,IAAAA,wBAAgB,MAAKH,IAAAA,oCAAyB,EAAC;QAC9D,MAAMZ,MAAW;YAAEC,WAAWC,KAAKC,EAAE;QAAG;QACxC,MAAMC,SAAS,MAAMzC,eAAeiE,cAAc,CAAC/D,UAAUmC;QAC7DF,OAAOM,QAAQL,WAAW;QAC1BD,OAAOE,IAAIC,SAAS,EAAEO,qBAAqB,CAAC;QAC5CV,OAAOM,OAAOM,iBAAiB,EAAEC,WAAW,CAACC,IAAAA,oCAAyB,EAAChD,WAAW6C,KAAK,CAACI,MAAM,CAACC,UAAU,IAAIC,IAAAA,wBAAgB,KAAI,CAAC;QAClIjB,OAAOM,OAAOY,kBAAkB,EAAEa,IAAI,CAAChE,SAAS8D,GAAG;IACrD;IAEA9B,GAAG,qCAAqC;QACtChC,SAAS8D,GAAG,GAAGZ,IAAAA,wBAAgB,MAAK;QACpC,MAAMf,MAAW;YAAEC,WAAWC,KAAKC,EAAE;QAAG;QACxC,MAAML,OAAOnC,eAAeiE,cAAc,CAAC/D,UAAUmC,MAAM8B,OAAO,CAACR,OAAO;IAC5E;IAEAzB,GAAG,mCAAmC;QACpC,MAAMO,SAAS,MAAMzC,eAAe8C,KAAK,CAAC5C;QAC1CiC,OAAOM,MAAM,CAAC2B,0BAAU,CAACC,MAAM,CAAC,EAAEjC,WAAW;QAC7CD,OAAOM,MAAM,CAAC2B,0BAAU,CAACE,OAAO,CAAC,EAAElC,WAAW;QAC9CD,OAAOM,MAAM,CAAC,GAAG2B,0BAAU,CAACC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAErB,WAAW,CAC3DC,IAAAA,oCAAyB,EAAChD,WAAW6C,KAAK,CAACI,MAAM,CAACC,UAAU,IAAIC,IAAAA,wBAAgB,KAChF,CAAC;QAEHjB,OAAOM,MAAM,CAAC,GAAG2B,0BAAU,CAACE,OAAO,CAAC,WAAW,CAAC,CAAC,EAAEtB,WAAW,CAC5DC,IAAAA,oCAAyB,EAAChD,WAAW6C,KAAK,CAACQ,OAAO,CAACH,UAAU,IAAIC,IAAAA,wBAAgB,KACjF,CAAC;IAEL;IAEAlB,GAAG,uCAAuC;QACxChC,SAAS8D,GAAG,GAAGZ,IAAAA,wBAAgB,MAAKH,IAAAA,oCAAyB,EAAC;QAC9D,MAAMR,SAAS,MAAMzC,eAAeuE,YAAY,CAACrE;QACjDiC,OAAOM,MAAM,CAAC2B,0BAAU,CAACC,MAAM,CAAC,EAAEjC,WAAW;QAC7CD,OAAOM,MAAM,CAAC2B,0BAAU,CAACE,OAAO,CAAC,EAAElC,WAAW;QAC9CD,OAAOM,MAAM,CAAC,GAAG2B,0BAAU,CAACC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAErB,WAAW,CAC3DC,IAAAA,oCAAyB,EAAChD,WAAW6C,KAAK,CAACI,MAAM,CAACC,UAAU,IAAIC,IAAAA,wBAAgB,KAChF,CAAC;QAEHjB,OAAOM,MAAM,CAAC,GAAG2B,0BAAU,CAACE,OAAO,CAAC,WAAW,CAAC,CAAC,EAAEJ,IAAI,CAAChE,SAAS8D,GAAG;IACtE;IAEA9B,GAAG,2CAA2C;QAC5ChC,SAAS8D,GAAG,GAAGZ,IAAAA,wBAAgB,MAAK;QACpC,MAAMjB,OAAOnC,eAAeuE,YAAY,CAACrE,WAAWiE,OAAO,CAACR,OAAO;IACrE;AACF"}

package/server/authentication/auth.e2e-spec.js

@@ -39,7 +39,8 @@ describe('Auth (e2e)', ()=>{
     });
     afterAll(async ()=>{
         await expect(adminUsersManager.deleteUserOrGuest(userTest.id, userTest.login, {
-            deleteSpace: true
+            deleteSpace: true,
+            isGuest: false
         })).resolves.not.toThrow();
         await (0, _utils.dbCloseConnection)(app);
         await app.close();
@@ -324,13 +325,13 @@ describe('Auth (e2e)', ()=>{
                 expect(cookie.content).toContain('HttpOnly');
             }
             expect(cookie.content).not.toContain('Secure');
-            expect(cookie.content[cookie.content.length - 1].split('=')[1].toLowerCase()).toBe(authConfig.sameSite);
+            expect(cookie.content[cookie.content.length - 1].split('=')[1].toLowerCase()).toBe(authConfig.cookieSameSite);
             if (clear) {
                 expect(cookie.content[0].split('=')[1]).toBe('');
                 expect(cookie.content[1].split('=')[1]).toBe('0');
                 expect(cookie.content[3].split('=')[1]).toBe('Thu, 01 Jan 1970 00:00:00 GMT');
             } else {
-                expect(parseInt(cookie.content[1].split('=')[1])).toBeCloseTo((0, _functions.convertHumanTimeToSeconds)(authConfig.token[cookie.type].cookieMaxAge), -1);
+                expect(parseInt(cookie.content[1].split('=')[1])).toBeCloseTo((0, _functions.convertHumanTimeToSeconds)(authConfig.token[cookie.type].expiration), -1);
                 expect(cookie.content[0].split('=')[1]).not.toBe('');
             }
         }