@tc-libs/authentication 0.9.0

package/src/guards/jwt-refresh/auth.jwt-refresh.strategy.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthJwtRefreshStrategy = void 0;
+const tslib_1 = require("tslib");
+const passport_jwt_1 = require("passport-jwt");
+const passport_1 = require("@nestjs/passport");
+const common_1 = require("@nestjs/common");
+const auth_service_1 = require("../../services/auth.service");
+const helper_1 = require("@tc-libs/helper");
+const authentication_module_options_1 = require("../../authentication.module.options");
+let AuthJwtRefreshStrategy = class AuthJwtRefreshStrategy extends (0, passport_1.PassportStrategy)(passport_jwt_1.Strategy, 'jwtRefresh') {
+    constructor(_options, _auth, _token) {
+        const prefix = _options.auth.prefixAuthorization;
+        const audience = _options.auth.audience;
+        const issuer = _options.auth.issuer;
+        const subject = _options.auth.subject;
+        const secretKey = _options.auth.refreshToken.secretKey;
+        super({
+            jwtFromRequest: passport_jwt_1.ExtractJwt.fromAuthHeaderWithScheme(prefix),
+            ignoreExpiration: false,
+            jsonWebTokenOptions: {
+                ignoreNotBefore: false,
+                audience: audience,
+                issuer: issuer,
+                subject: subject,
+            },
+            secretOrKey: secretKey,
+        });
+        this._options = _options;
+        this._auth = _auth;
+        this._token = _token;
+    }
+    async validate({ data }) {
+        const payloadEncryption = await this._auth.getPayloadEncryption();
+        return payloadEncryption ? this._token.decryptRefreshToken({ data }) : data;
+    }
+};
+exports.AuthJwtRefreshStrategy = AuthJwtRefreshStrategy;
+exports.AuthJwtRefreshStrategy = AuthJwtRefreshStrategy = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(authentication_module_options_1.AUTHENTICATION_CONFIG_OPTIONS)),
+    tslib_1.__metadata("design:paramtypes", [Object, auth_service_1.AuthService,
+        helper_1.TokenService])
+], AuthJwtRefreshStrategy);
+//# sourceMappingURL=auth.jwt-refresh.strategy.js.map

package/src/guards/jwt-refresh/auth.jwt-refresh.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.jwt-refresh.strategy.js","sourceRoot":"","sources":["../../../../../../packages/authentication/src/guards/jwt-refresh/auth.jwt-refresh.strategy.ts"],"names":[],"mappings":";;;;AAAA,+CAAoD;AACpD,+CAAoD;AACpD,2CAAoD;AACpD,8DAA0D;AAC1D,4CAA+C;AAC/C,uFAG6C;AAGtC,IAAM,sBAAsB,GAA5B,MAAM,sBAAuB,SAAQ,IAAA,2BAAgB,EAC1D,uBAAQ,EACR,YAAY,CACb;IACC,YAEW,QAAqC,EAC7B,KAAkB,EAClB,MAAoB;QAErC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC;QACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;QACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QACpC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;QACvD,KAAK,CAAC;YACJ,cAAc,EAAE,yBAAU,CAAC,wBAAwB,CAAC,MAAM,CAAC;YAC3D,gBAAgB,EAAE,KAAK;YACvB,mBAAmB,EAAE;gBACnB,eAAe,EAAE,KAAK;gBACtB,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,OAAO;aACjB;YACD,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;QAnBM,aAAQ,GAAR,QAAQ,CAA6B;QAC7B,UAAK,GAAL,KAAK,CAAa;QAClB,WAAM,GAAN,MAAM,CAAc;IAkBvC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAuB;QAC1C,MAAM,iBAAiB,GAAY,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC;QAC3E,OAAO,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,CAAC;CACF,CAAA;AAhCY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;IAMR,mBAAA,IAAA,eAAM,EAAC,6DAA6B,CAAC,CAAA;qDAEd,0BAAW;QACV,qBAAY;GAR5B,sBAAsB,CAgClC"}

package/src/guards/payload/auth.payload.access-for.guard.d.ts

@@ -0,0 +1,7 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+export declare class AuthPayloadAccessForGuard implements CanActivate {
+    private readonly reflector;
+    constructor(reflector: Reflector);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}

package/src/guards/payload/auth.payload.access-for.guard.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthPayloadAccessForGuard = void 0;
+const tslib_1 = require("tslib");
+const errors_1 = require("@tc-libs/errors");
+const constants_1 = require("../../constants");
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const lodash_1 = require("lodash");
+let AuthPayloadAccessForGuard = class AuthPayloadAccessForGuard {
+    constructor(reflector) {
+        this.reflector = reflector;
+    }
+    async canActivate(context) {
+        const requiredFor = this.reflector.getAllAndOverride(constants_1.AUTH_ACCESS_FOR_META_KEY, [context.getHandler(), context.getClass()]);
+        const { user } = context.switchToHttp().getRequest();
+        const { accessFor } = user;
+        if (!requiredFor || accessFor === constants_1.ENUM_AUTH_ACCESS_FOR.SUPER_ADMIN) {
+            return true;
+        }
+        const hasFor = (0, lodash_1.includes)(requiredFor, accessFor);
+        if (!hasFor) {
+            throw new errors_1.Api403AccessForError({ accessFor: accessFor });
+        }
+        return true;
+    }
+};
+exports.AuthPayloadAccessForGuard = AuthPayloadAccessForGuard;
+exports.AuthPayloadAccessForGuard = AuthPayloadAccessForGuard = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [core_1.Reflector])
+], AuthPayloadAccessForGuard);
+//# sourceMappingURL=auth.payload.access-for.guard.js.map

package/src/guards/payload/auth.payload.access-for.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.payload.access-for.guard.js","sourceRoot":"","sources":["../../../../../../packages/authentication/src/guards/payload/auth.payload.access-for.guard.ts"],"names":[],"mappings":";;;;AAAA,4CAAuD;AACvD,+CAGyB;AACzB,2CAA2E;AAC3E,uCAAyC;AACzC,mCAAkC;AAG3B,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IACpC,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,WAAW,GACf,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAC9B,oCAAwB,EACxB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEJ,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACrD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAE3B,IAAI,CAAC,WAAW,IAAI,SAAS,KAAK,gCAAoB,CAAC,WAAW,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAY,IAAA,iBAAQ,EAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAEzD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,6BAAoB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAxBY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;6CAE6B,gBAAS;GADtC,yBAAyB,CAwBrC"}

package/src/guards/payload/auth.payload.permission.guard.d.ts

@@ -0,0 +1,7 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+export declare class AuthPayloadPermissionGuard implements CanActivate {
+    private readonly reflector;
+    constructor(reflector: Reflector);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}

package/src/guards/payload/auth.payload.permission.guard.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthPayloadPermissionGuard = void 0;
+const tslib_1 = require("tslib");
+const errors_1 = require("@tc-libs/errors");
+const constants_1 = require("../../constants");
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const lodash_1 = require("lodash");
+let AuthPayloadPermissionGuard = class AuthPayloadPermissionGuard {
+    constructor(reflector) {
+        this.reflector = reflector;
+    }
+    async canActivate(context) {
+        const group = this.reflector.getAllAndOverride(constants_1.AUTH_PERMISSION_GROUP_META_KEY, [context.getHandler(), context.getClass()]);
+        const requiredPermission = this.reflector.getAllAndOverride(constants_1.AUTH_PERMISSION_PERMISSIONS_META_KEY, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        const { permissions, user, } = context.switchToHttp().getRequest();
+        if (!user) {
+            throw new errors_1.Api401JWTAccessTokenUnauthorizedError();
+        }
+        else if (!requiredPermission ||
+            user.accessFor === constants_1.ENUM_AUTH_ACCESS_FOR.SUPER_ADMIN) {
+            return true;
+        }
+        const hasPermission = (0, lodash_1.intersection)(permissions
+            .filter((x) => x.group === group)
+            .map((x) => x['permission']), requiredPermission).length > 0;
+        if (!hasPermission) {
+            throw new errors_1.Api403PermissionTokenInvalidError();
+        }
+        return hasPermission;
+    }
+};
+exports.AuthPayloadPermissionGuard = AuthPayloadPermissionGuard;
+exports.AuthPayloadPermissionGuard = AuthPayloadPermissionGuard = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [core_1.Reflector])
+], AuthPayloadPermissionGuard);
+//# sourceMappingURL=auth.payload.permission.guard.js.map

package/src/guards/payload/auth.payload.permission.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.payload.permission.guard.js","sourceRoot":"","sources":["../../../../../../packages/authentication/src/guards/payload/auth.payload.permission.guard.ts"],"names":[],"mappings":";;;;AAAA,4CAGyB;AACzB,+CAIyB;AACzB,2CAA2E;AAC3E,uCAAyC;AACzC,mCAAsC;AAE/B,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACrC,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,KAAK,GAAW,IAAI,CAAC,SAAS,CAAC,iBAAiB,CACpD,0CAA8B,EAC9B,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QACF,MAAM,kBAAkB,GAAa,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAEnE,gDAAoC,EAAE;YACtC,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,MAAM,EACJ,WAAW,EACX,IAAI,GACL,GAGG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8CAAqC,EAAE,CAAC;QACpD,CAAC;aAAM,IACL,CAAC,kBAAkB;YACnB,IAAI,CAAC,SAAS,KAAK,gCAAoB,CAAC,WAAW,EACnD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,aAAa,GACjB,IAAA,qBAAY,EACV,WAAW;aACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC;aAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAC9B,kBAAkB,CACnB,CAAC,MAAM,GAAG,CAAC,CAAC;QAEf,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,0CAAiC,EAAE,CAAC;QAChD,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;CACF,CAAA;AA5CY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;6CAE6B,gBAAS;GADtC,0BAA0B,CA4CtC"}

package/src/guards/permission/auth.permission.guard.d.ts

@@ -0,0 +1,12 @@
+import { TokenService } from '@tc-libs/helper';
+import { AuthService } from '../../services/auth.service';
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { AuthenticationModuleOptions } from '../../authentication.module.options';
+export declare class AuthPermissionGuard implements CanActivate {
+    readonly _options: AuthenticationModuleOptions;
+    private readonly authService;
+    private readonly _token;
+    private readonly headerName;
+    constructor(_options: AuthenticationModuleOptions, authService: AuthService, _token: TokenService);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}

package/src/guards/permission/auth.permission.guard.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthPermissionGuard = void 0;
+const tslib_1 = require("tslib");
+const helper_1 = require("@tc-libs/helper");
+const constants_1 = require("../../constants");
+const auth_service_1 = require("../../services/auth.service");
+const common_1 = require("@nestjs/common");
+const errors_1 = require("@tc-libs/errors");
+const authentication_module_options_1 = require("../../authentication.module.options");
+let AuthPermissionGuard = class AuthPermissionGuard {
+    constructor(_options, authService, _token) {
+        this._options = _options;
+        this.authService = authService;
+        this._token = _token;
+        this.headerName = _options.auth.permissionToken.headerName;
+    }
+    async canActivate(context) {
+        const request = context.switchToHttp().getRequest();
+        const { user } = request;
+        if (!user) {
+            throw new errors_1.Api401JWTAccessTokenUnauthorizedError();
+        }
+        else if (user.accessFor === constants_1.ENUM_AUTH_ACCESS_FOR.SUPER_ADMIN) {
+            return true;
+        }
+        const { [this.headerName]: token } = request.headers;
+        if (!token) {
+            throw new errors_1.Api401JWTPermissionTokenUnauthorizedError();
+        }
+        const validate = await this._token.validatePermissionToken(token);
+        if (!validate) {
+            throw new errors_1.Api403PermissionTokenInvalidError();
+        }
+        const { data } = await this._token.payloadPermissionToken(token);
+        const payloadEncryption = await this.authService.getPayloadEncryption();
+        let payloadDecryptPermissionToken = data;
+        if (payloadEncryption) {
+            payloadDecryptPermissionToken = await this._token.decryptPermissionToken(data);
+        }
+        if (payloadDecryptPermissionToken['_id'] !== user._id) {
+            throw new errors_1.Api403PermissionTokenNotYourInvalidError();
+        }
+        request.permissions = payloadDecryptPermissionToken['permissions'];
+        return true;
+    }
+};
+exports.AuthPermissionGuard = AuthPermissionGuard;
+exports.AuthPermissionGuard = AuthPermissionGuard = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(authentication_module_options_1.AUTHENTICATION_CONFIG_OPTIONS)),
+    tslib_1.__metadata("design:paramtypes", [Object, auth_service_1.AuthService,
+        helper_1.TokenService])
+], AuthPermissionGuard);
+//# sourceMappingURL=auth.permission.guard.js.map

package/src/guards/permission/auth.permission.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.permission.guard.js","sourceRoot":"","sources":["../../../../../../packages/authentication/src/guards/permission/auth.permission.guard.ts"],"names":[],"mappings":";;;;AAAA,4CAA+C;AAC/C,+CAAuD;AACvD,8DAA0D;AAC1D,2CAKwB;AACxB,4CAKyB;AACzB,uFAG6C;AAGtC,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAG9B,YAEW,QAAqC,EAE7B,WAAwB,EACxB,MAAoB;QAH5B,aAAQ,GAAR,QAAQ,CAA6B;QAE7B,gBAAW,GAAX,WAAW,CAAa;QACxB,WAAM,GAAN,MAAM,CAAc;QAErC,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QAEzB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8CAAqC,EAAE,CAAC;QACpD,CAAC;aAAM,IAAI,IAAI,CAAC,SAAS,KAAK,gCAAoB,CAAC,WAAW,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;QAErD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,kDAAyC,EAAE,CAAC;QACxD,CAAC;QAED,MAAM,QAAQ,GAAY,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,0CAAiC,EAAE,CAAC;QAChD,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAEjE,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,CAAC;QACxE,IAAI,6BAA6B,GAAwB,IAAI,CAAC;QAE9D,IAAI,iBAAiB,EAAE,CAAC;YACtB,6BAA6B,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CACtE,IAAI,CACL,CAAC;QACJ,CAAC;QAED,IAAI,6BAA6B,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YACtD,MAAM,IAAI,iDAAwC,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,CAAC,WAAW,GAAG,6BAA6B,CAAC,aAAa,CAAC,CAAC;QAEnE,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AApDY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAKR,mBAAA,IAAA,eAAM,EAAC,6DAA6B,CAAC,CAAA;qDAGR,0BAAW;QAChB,qBAAY;GAR5B,mBAAmB,CAoD/B"}

package/src/index.d.ts

@@ -0,0 +1,7 @@
+export * from './constants';
+export * from './decorators';
+export * from './guards';
+export * from './interfaces';
+export * from './services';
+export * from './authentication.module';
+export * from './serializations';

package/src/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./constants"), exports);
+tslib_1.__exportStar(require("./decorators"), exports);
+tslib_1.__exportStar(require("./guards"), exports);
+tslib_1.__exportStar(require("./interfaces"), exports);
+tslib_1.__exportStar(require("./services"), exports);
+tslib_1.__exportStar(require("./authentication.module"), exports);
+tslib_1.__exportStar(require("./serializations"), exports);
+//# sourceMappingURL=index.js.map

package/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/authentication/src/index.ts"],"names":[],"mappings":";;;AAAA,sDAA4B;AAC5B,uDAA6B;AAC7B,mDAAyB;AACzB,uDAA6B;AAC7B,qDAA2B;AAC3B,kEAAwC;AACxC,2DAAiC"}

package/src/interfaces/auth.interface.d.ts

@@ -0,0 +1,10 @@
+export interface IAuthPayloadOptions {
+    loginDate: Date;
+}
+export interface IAuthGetAuthTokenOptions {
+    forceEncryption?: boolean;
+}
+export interface IAuthRefreshTokenOptions {
+    notBeforeExpirationTime?: number | string;
+    rememberMe?: boolean;
+}

package/src/interfaces/auth.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=auth.interface.js.map

package/src/interfaces/auth.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.interface.js","sourceRoot":"","sources":["../../../../../packages/authentication/src/interfaces/auth.interface.ts"],"names":[],"mappings":""}

package/src/interfaces/auth.service.interface.d.ts

@@ -0,0 +1,11 @@
+export interface IAuthService {
+    createPassword(password: string): Promise<string>;
+    getTokenType(): Promise<string>;
+    getAccessTokenExpirationTime(): Promise<number>;
+    getRefreshTokenExpirationTime(rememberMe?: boolean): Promise<number>;
+    getIssuer(): Promise<string>;
+    getAudience(): Promise<string>;
+    getSubject(): Promise<string>;
+    getPayloadEncryption(): Promise<boolean>;
+    getPermissionTokenExpirationTime(): Promise<number>;
+}

package/src/interfaces/auth.service.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=auth.service.interface.js.map

package/src/interfaces/auth.service.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.interface.js","sourceRoot":"","sources":["../../../../../packages/authentication/src/interfaces/auth.service.interface.ts"],"names":[],"mappings":""}

package/src/interfaces/index.d.ts

@@ -0,0 +1,4 @@
+export * from './auth.interface';
+export * from './auth.service.interface';
+export * from './module-permissions.interface';
+export * from './permission.interface';

package/src/interfaces/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./auth.interface"), exports);
+tslib_1.__exportStar(require("./auth.service.interface"), exports);
+tslib_1.__exportStar(require("./module-permissions.interface"), exports);
+tslib_1.__exportStar(require("./permission.interface"), exports);
+//# sourceMappingURL=index.js.map

package/src/interfaces/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/authentication/src/interfaces/index.ts"],"names":[],"mappings":";;;AAAA,2DAAiC;AACjC,mEAAyC;AACzC,yEAA+C;AAC/C,iEAAuC"}

package/src/interfaces/module-permissions.interface.d.ts

@@ -0,0 +1,15 @@
+export declare const BASIC_PERMISSIONS: {
+    write: string;
+    delete: string;
+    read: string;
+};
+export interface IBasicPermissions {
+    write: string;
+    delete: string;
+    read: string;
+    [key: string]: string;
+}
+export interface IModulePermissions {
+    group: string;
+    permissions: IBasicPermissions;
+}

package/src/interfaces/module-permissions.interface.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BASIC_PERMISSIONS = void 0;
+exports.BASIC_PERMISSIONS = {
+    write: 'WRITE',
+    delete: 'DELETE',
+    read: 'READ',
+};
+//# sourceMappingURL=module-permissions.interface.js.map

package/src/interfaces/module-permissions.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-permissions.interface.js","sourceRoot":"","sources":["../../../../../packages/authentication/src/interfaces/module-permissions.interface.ts"],"names":[],"mappings":";;;AAAa,QAAA,iBAAiB,GAAG;IAC/B,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;CACb,CAAC"}

package/src/interfaces/permission.interface.d.ts

@@ -0,0 +1,4 @@
+export interface IPermission {
+    group: string;
+    permission: string;
+}

package/src/interfaces/permission.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=permission.interface.js.map

package/src/interfaces/permission.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.interface.js","sourceRoot":"","sources":["../../../../../packages/authentication/src/interfaces/permission.interface.ts"],"names":[],"mappings":""}

package/src/serializations/index.d.ts

@@ -0,0 +1 @@
+export * from './token.payload.serialization';

package/src/serializations/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./token.payload.serialization"), exports);
+//# sourceMappingURL=index.js.map

package/src/serializations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/authentication/src/serializations/index.ts"],"names":[],"mappings":";;;AAAA,wEAA8C"}

package/src/serializations/token.payload.serialization.d.ts

@@ -0,0 +1,3 @@
+export declare class TokenPayload {
+    userId: string;
+}

package/src/serializations/token.payload.serialization.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenPayload = void 0;
+class TokenPayload {
+}
+exports.TokenPayload = TokenPayload;
+//# sourceMappingURL=token.payload.serialization.js.map

package/src/serializations/token.payload.serialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.payload.serialization.js","sourceRoot":"","sources":["../../../../../packages/authentication/src/serializations/token.payload.serialization.ts"],"names":[],"mappings":";;;AAAA,MAAa,YAAY;CAExB;AAFD,oCAEC"}

package/src/services/auth.service.d.ts

@@ -0,0 +1,46 @@
+import { IAuthService } from '../interfaces/auth.service.interface';
+import { PasswordService, TokenService } from '@tc-libs/helper';
+import { IAuthGetAuthTokenOptions } from '../interfaces';
+import { AuthenticationModuleOptions } from '../authentication.module.options';
+export declare class AuthService implements IAuthService {
+    readonly _options: AuthenticationModuleOptions;
+    private readonly _password;
+    private readonly _token;
+    private readonly accessTokenExpirationTime;
+    private readonly refreshTokenExpirationTime;
+    private readonly refreshTokenExpirationTimeRememberMe;
+    private readonly payloadEncryption;
+    private readonly prefixAuthorization;
+    private readonly audience;
+    private readonly issuer;
+    private readonly subject;
+    private readonly permissionTokenExpirationTime;
+    constructor(_options: AuthenticationModuleOptions, _password: PasswordService, _token: TokenService);
+    getAuthToken<T extends {
+        _id: string;
+    }>(payload: T, rememberMe: boolean, options?: IAuthGetAuthTokenOptions): Promise<{
+        tokenType: string;
+        expiresIn: number;
+        accessToken: string;
+        refreshToken: string;
+    }>;
+    getRefreshToken<T extends {
+        _id: string;
+    }>(payload: T, refreshToken: string, rememberMe: boolean, loginDate: Date, options?: IAuthGetAuthTokenOptions): Promise<{
+        tokenType: string;
+        expiresIn: number;
+        accessToken: string;
+        refreshToken: string;
+    }>;
+    validateUser(passwordString: string, passwordHash: string): Promise<boolean>;
+    createPayloadPermissionToken(data: Record<string, any>): Promise<Record<string, any>>;
+    createPassword(password: string): Promise<string>;
+    getTokenType(): Promise<string>;
+    getAccessTokenExpirationTime(): Promise<number>;
+    getRefreshTokenExpirationTime(rememberMe?: boolean): Promise<number>;
+    getIssuer(): Promise<string>;
+    getAudience(): Promise<string>;
+    getSubject(): Promise<string>;
+    getPayloadEncryption(): Promise<boolean>;
+    getPermissionTokenExpirationTime(): Promise<number>;
+}

package/src/services/auth.service.js

@@ -0,0 +1,104 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const helper_1 = require("@tc-libs/helper");
+const authentication_module_options_1 = require("../authentication.module.options");
+let AuthService = class AuthService {
+    constructor(_options, _password, _token) {
+        this._options = _options;
+        this._password = _password;
+        this._token = _token;
+        this.accessTokenExpirationTime = _options.auth.accessToken.expirationTime;
+        this.refreshTokenExpirationTime = _options.auth.refreshToken.expirationTime;
+        this.refreshTokenExpirationTimeRememberMe =
+            _options.auth.refreshToken.expirationTimeRememberMe;
+        this.payloadEncryption = _options.auth.payloadEncryption;
+        this.prefixAuthorization = _options.auth.prefixAuthorization;
+        this.subject = _options.auth.subject;
+        this.audience = _options.auth.audience;
+        this.issuer = _options.auth.issuer;
+        this.permissionTokenExpirationTime =
+            _options.auth.permissionToken.expirationTime;
+    }
+    async getAuthToken(payload, rememberMe, options) {
+        const payloadAccessToken = this._token.createPayloadAccessToken(payload, rememberMe);
+        const payloadRefreshToken = this._token.createPayloadRefreshToken(payload._id, rememberMe, {
+            loginDate: payloadAccessToken['loginDate'],
+        });
+        let payloadHashedAccessToken = payloadAccessToken;
+        let payloadRefreshTokenEncrypted = payloadRefreshToken;
+        if (!!options?.forceEncryption || this.payloadEncryption) {
+            payloadHashedAccessToken = await this._token.encryptAccessToken(payloadAccessToken);
+            payloadRefreshTokenEncrypted = await this._token.encryptRefreshToken(payloadRefreshToken);
+        }
+        const accessToken = this._token.createAccessToken(payloadHashedAccessToken);
+        const refreshToken = this._token.createRefreshToken(payloadRefreshTokenEncrypted, { rememberMe });
+        return {
+            tokenType: this.prefixAuthorization,
+            expiresIn: this.accessTokenExpirationTime,
+            accessToken,
+            refreshToken,
+        };
+    }
+    async getRefreshToken(payload, refreshToken, rememberMe, loginDate, options) {
+        const payloadAccessToken = await this._token.createPayloadAccessToken(payload, rememberMe, {
+            loginDate,
+        });
+        let payloadHashedAccessToken = payloadAccessToken;
+        if (!!options?.forceEncryption || this.payloadEncryption) {
+            payloadHashedAccessToken = await this._token.encryptAccessToken(payloadAccessToken);
+        }
+        const accessToken = await this._token.createAccessToken(payloadHashedAccessToken);
+        return {
+            tokenType: this.prefixAuthorization,
+            expiresIn: this.accessTokenExpirationTime,
+            accessToken,
+            refreshToken,
+        };
+    }
+    validateUser(passwordString, passwordHash) {
+        return this._password.compare(passwordString, passwordHash);
+    }
+    async createPayloadPermissionToken(data) {
+        return data;
+    }
+    async createPassword(password) {
+        return this._password.hashPassword(password);
+    }
+    async getTokenType() {
+        return this.prefixAuthorization;
+    }
+    async getAccessTokenExpirationTime() {
+        return this.accessTokenExpirationTime;
+    }
+    async getRefreshTokenExpirationTime(rememberMe) {
+        return rememberMe
+            ? this.refreshTokenExpirationTimeRememberMe
+            : this.refreshTokenExpirationTime;
+    }
+    async getIssuer() {
+        return this.issuer;
+    }
+    async getAudience() {
+        return this.audience;
+    }
+    async getSubject() {
+        return this.subject;
+    }
+    async getPayloadEncryption() {
+        return this.payloadEncryption;
+    }
+    async getPermissionTokenExpirationTime() {
+        return this.permissionTokenExpirationTime;
+    }
+};
+exports.AuthService = AuthService;
+exports.AuthService = AuthService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(authentication_module_options_1.AUTHENTICATION_CONFIG_OPTIONS)),
+    tslib_1.__metadata("design:paramtypes", [Object, helper_1.PasswordService,
+        helper_1.TokenService])
+], AuthService);
+//# sourceMappingURL=auth.service.js.map

package/src/services/auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../../packages/authentication/src/services/auth.service.ts"],"names":[],"mappings":";;;;AAAA,2CAAoD;AAEpD,4CAAgE;AAEhE,oFAG0C;AAGnC,IAAM,WAAW,GAAjB,MAAM,WAAW;IActB,YAEW,QAAqC,EAE7B,SAA0B,EAC1B,MAAoB;QAH5B,aAAQ,GAAR,QAAQ,CAA6B;QAE7B,cAAS,GAAT,SAAS,CAAiB;QAC1B,WAAM,GAAN,MAAM,CAAc;QAErC,IAAI,CAAC,yBAAyB,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC;QAE1E,IAAI,CAAC,0BAA0B,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC;QAC5E,IAAI,CAAC,oCAAoC;YACvC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,wBAAwB,CAAC;QAEtD,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC;QACzD,IAAI,CAAC,mBAAmB,GAAG,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC;QAC7D,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAEnC,IAAI,CAAC,6BAA6B;YAChC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,OAAU,EACV,UAAmB,EACnB,OAAkC;QAElC,MAAM,kBAAkB,GACtB,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,mBAAmB,GACvB,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE;YAC7D,SAAS,EAAE,kBAAkB,CAAC,WAAW,CAAC;SAC3C,CAAC,CAAC;QAEL,IAAI,wBAAwB,GAC1B,kBAAkB,CAAC;QACrB,IAAI,4BAA4B,GAC9B,mBAAmB,CAAC;QAEtB,IAAI,CAAC,CAAC,OAAO,EAAE,eAAe,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzD,wBAAwB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAC7D,kBAAkB,CACnB,CAAC;YACF,4BAA4B,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAClE,mBAAmB,CACpB,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAW,IAAI,CAAC,MAAM,CAAC,iBAAiB,CACvD,wBAAwB,CACzB,CAAC;QAEF,MAAM,YAAY,GAAW,IAAI,CAAC,MAAM,CAAC,kBAAkB,CACzD,4BAA4B,EAC5B,EAAE,UAAU,EAAE,CACf,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,mBAAmB;YACnC,SAAS,EAAE,IAAI,CAAC,yBAAyB;YACzC,WAAW;YACX,YAAY;SACb,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,OAAU,EACV,YAAoB,EACpB,UAAmB,EACnB,SAAe,EACf,OAAkC;QAElC,MAAM,kBAAkB,GACtB,MAAM,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,UAAU,EAAE;YAC9D,SAAS;SACV,CAAC,CAAC;QAEL,IAAI,wBAAwB,GAC1B,kBAAkB,CAAC;QAErB,IAAI,CAAC,CAAC,OAAO,EAAE,eAAe,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzD,wBAAwB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAC7D,kBAAkB,CACnB,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAW,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAC7D,wBAAwB,CACzB,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,mBAAmB;YACnC,SAAS,EAAE,IAAI,CAAC,yBAAyB;YACzC,WAAW;YACX,YAAY;SACb,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,cAAsB,EAAE,YAAoB;QACvD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,IAAyB;QAEzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,4BAA4B;QAChC,OAAO,IAAI,CAAC,yBAAyB,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,6BAA6B,CAAC,UAAoB;QACtD,OAAO,UAAU;YACf,CAAC,CAAC,IAAI,CAAC,oCAAoC;YAC3C,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,gCAAgC;QACpC,OAAO,IAAI,CAAC,6BAA6B,CAAC;IAC5C,CAAC;CACF,CAAA;AAhKY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IAgBR,mBAAA,IAAA,eAAM,EAAC,6DAA6B,CAAC,CAAA;qDAGV,wBAAe;QAClB,qBAAY;GAnB5B,WAAW,CAgKvB"}

package/src/services/index.d.ts

@@ -0,0 +1 @@
+export * from './auth.service';

package/src/services/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./auth.service"), exports);
+//# sourceMappingURL=index.js.map

package/src/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/authentication/src/services/index.ts"],"names":[],"mappings":";;;AAAA,yDAA+B"}