@udhuong/admin-core 0.1.0 → 0.1.2

package/dist/server/auth/application/actions/auth/get-roles-permissions.action.js

@@ -0,0 +1,53 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetRolesPermissionsAction = void 0;
+const common_1 = require("@nestjs/common");
+const repositories_1 = require("../../../domain/repositories");
+let GetRolesPermissionsAction = class GetRolesPermissionsAction {
+    userRoleRepository;
+    roleRepository;
+    rolePermissionRepository;
+    permissionRepository;
+    constructor(userRoleRepository, roleRepository, rolePermissionRepository, permissionRepository) {
+        this.userRoleRepository = userRoleRepository;
+        this.roleRepository = roleRepository;
+        this.rolePermissionRepository = rolePermissionRepository;
+        this.permissionRepository = permissionRepository;
+    }
+    async handle(userId) {
+        const userRoles = await this.userRoleRepository.findByUserId(userId);
+        if (userRoles.length === 0) {
+            return { roles: [], permissions: [] };
+        }
+        const roleIds = userRoles.map((ur) => ur.roleId);
+        const roles = await this.roleRepository.findByIds(roleIds);
+        const rolePermissions = await this.rolePermissionRepository.findByRoleIds(roleIds);
+        const permissions = await this.permissionRepository.findByIds(rolePermissions.map((rp) => rp.permissionId));
+        return {
+            roles: roles.map((role) => role.name),
+            permissions: permissions.map((permission) => permission.name),
+        };
+    }
+};
+exports.GetRolesPermissionsAction = GetRolesPermissionsAction;
+exports.GetRolesPermissionsAction = GetRolesPermissionsAction = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(repositories_1.USER_ROLE_REPOSITORY_TOKEN)),
+    __param(1, (0, common_1.Inject)(repositories_1.ROLE_REPOSITORY_TOKEN)),
+    __param(2, (0, common_1.Inject)(repositories_1.ROLE_PERMISSION_REPOSITORY_TOKEN)),
+    __param(3, (0, common_1.Inject)(repositories_1.PERMISSION_REPOSITORY_TOKEN)),
+    __metadata("design:paramtypes", [Object, Object, Object, Object])
+], GetRolesPermissionsAction);
+//# sourceMappingURL=get-roles-permissions.action.js.map

package/dist/server/auth/application/actions/auth/get-roles-permissions.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-roles-permissions.action.js","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/get-roles-permissions.action.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+DASsC;AAG/B,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IAGjB;IAEA;IAEA;IAEA;IARnB,YAEmB,kBAAsC,EAEtC,cAA8B,EAE9B,wBAAkD,EAElD,oBAA0C;QAN1C,uBAAkB,GAAlB,kBAAkB,CAAoB;QAEtC,mBAAc,GAAd,cAAc,CAAgB;QAE9B,6BAAwB,GAAxB,wBAAwB,CAA0B;QAElD,yBAAoB,GAApB,oBAAoB,CAAsB;IAE7D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc;QAIzB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAErE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAE3D,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACnF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAE5G,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YACrC,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;SAC9D,CAAC;IACJ,CAAC;CACF,CAAA;AAlCY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,yCAA0B,CAAC,CAAA;IAElC,WAAA,IAAA,eAAM,EAAC,oCAAqB,CAAC,CAAA;IAE7B,WAAA,IAAA,eAAM,EAAC,+CAAgC,CAAC,CAAA;IAExC,WAAA,IAAA,eAAM,EAAC,0CAA2B,CAAC,CAAA;;GAR3B,yBAAyB,CAkCrC"}

package/dist/server/auth/application/actions/auth/get-user-profile.action.d.ts

@@ -0,0 +1,10 @@
+import { AuthUserRepository } from '../../../domain/repositories';
+import { AuthUser } from '../../../domain/entities/auth-user';
+import { GetRolesPermissionsAction } from './get-roles-permissions.action';
+export declare class GetUserProfileAction {
+    private readonly authUserRepository;
+    private readonly getRolesPermissionsAction;
+    constructor(authUserRepository: AuthUserRepository, getRolesPermissionsAction: GetRolesPermissionsAction);
+    handle(userId: number): Promise<AuthUser>;
+}
+//# sourceMappingURL=get-user-profile.action.d.ts.map

package/dist/server/auth/application/actions/auth/get-user-profile.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user-profile.action.d.ts","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/get-user-profile.action.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,qBACa,oBAAoB;IAG7B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,yBAAyB;gBADzB,kBAAkB,EAAE,kBAAkB,EACtC,yBAAyB,EAAE,yBAAyB;IAGjE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;CAahD"}

package/dist/server/auth/application/actions/auth/get-user-profile.action.js

@@ -0,0 +1,43 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetUserProfileAction = void 0;
+const common_1 = require("@nestjs/common");
+const repositories_1 = require("../../../domain/repositories");
+const get_roles_permissions_action_1 = require("./get-roles-permissions.action");
+let GetUserProfileAction = class GetUserProfileAction {
+    authUserRepository;
+    getRolesPermissionsAction;
+    constructor(authUserRepository, getRolesPermissionsAction) {
+        this.authUserRepository = authUserRepository;
+        this.getRolesPermissionsAction = getRolesPermissionsAction;
+    }
+    async handle(userId) {
+        const user = await this.authUserRepository.findById(userId);
+        if (!user) {
+            throw new common_1.NotFoundException('User không tồn tại');
+        }
+        const { roles, permissions } = await this.getRolesPermissionsAction.handle(user.id);
+        user.roles = roles;
+        user.permissions = permissions;
+        return user;
+    }
+};
+exports.GetUserProfileAction = GetUserProfileAction;
+exports.GetUserProfileAction = GetUserProfileAction = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(repositories_1.AUTH_USER_REPOSITORY_TOKEN)),
+    __metadata("design:paramtypes", [Object, get_roles_permissions_action_1.GetRolesPermissionsAction])
+], GetUserProfileAction);
+//# sourceMappingURL=get-user-profile.action.js.map

package/dist/server/auth/application/actions/auth/get-user-profile.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user-profile.action.js","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/get-user-profile.action.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAuE;AAEvE,+DAGsC;AAEtC,iFAA2E;AAGpE,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAGZ;IACA;IAHnB,YAEmB,kBAAsC,EACtC,yBAAoD;QADpD,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,8BAAyB,GAAzB,yBAAyB,CAA2B;IACpE,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,0BAAiB,CAAC,oBAAoB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEpF,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAE/B,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AApBY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,yCAA0B,CAAC,CAAA;6CAES,wDAAyB;GAJ5D,oBAAoB,CAoBhC"}

package/dist/server/auth/application/actions/auth/index.d.ts

@@ -0,0 +1,14 @@
+export * from './login.action';
+export * from './register.action';
+export * from './logout.action';
+export * from './refresh-token.action';
+export * from './verify-email.action';
+export * from './forgot-password.action';
+export * from './reset-password.action';
+export * from './resend-verification-email.action';
+export * from './change-password.action';
+export * from './update-profile.action';
+export * from './get-user-profile.action';
+export * from './client-credentials.action';
+export * from './get-roles-permissions.action';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/auth/application/actions/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oCAAoC,CAAC;AACnD,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC"}

package/dist/server/auth/application/actions/auth/index.js

@@ -0,0 +1,30 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./login.action"), exports);
+__exportStar(require("./register.action"), exports);
+__exportStar(require("./logout.action"), exports);
+__exportStar(require("./refresh-token.action"), exports);
+__exportStar(require("./verify-email.action"), exports);
+__exportStar(require("./forgot-password.action"), exports);
+__exportStar(require("./reset-password.action"), exports);
+__exportStar(require("./resend-verification-email.action"), exports);
+__exportStar(require("./change-password.action"), exports);
+__exportStar(require("./update-profile.action"), exports);
+__exportStar(require("./get-user-profile.action"), exports);
+__exportStar(require("./client-credentials.action"), exports);
+__exportStar(require("./get-roles-permissions.action"), exports);
+//# sourceMappingURL=index.js.map

package/dist/server/auth/application/actions/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,oDAAkC;AAClC,kDAAgC;AAChC,yDAAuC;AACvC,wDAAsC;AACtC,2DAAyC;AACzC,0DAAwC;AACxC,qEAAmD;AACnD,2DAAyC;AACzC,0DAAwC;AACxC,4DAA0C;AAC1C,8DAA4C;AAC5C,iEAA+C"}

package/dist/server/auth/application/actions/auth/login.action.d.ts

@@ -0,0 +1,23 @@
+import { AuthUserRepository, LoginHistoryRepository, OAuthClientRepository, OAuthTokenRepository, UserSessionRepository } from '../../../domain/repositories';
+import { LoginDto } from '../../dto/login.dto';
+import { LoginResponse } from '../../dto/login-response';
+import { HashService, TokenService } from '../../ports';
+import { GetRolesPermissionsAction } from './get-roles-permissions.action';
+export declare class LoginAction {
+    private readonly authUserRepository;
+    private readonly sessionRepository;
+    private readonly loginHistoryRepository;
+    private readonly oauthTokenRepository;
+    private readonly oauthClientRepository;
+    private readonly hashService;
+    private readonly tokenService;
+    private readonly getRolesPermissionsAction;
+    constructor(authUserRepository: AuthUserRepository, sessionRepository: UserSessionRepository, loginHistoryRepository: LoginHistoryRepository, oauthTokenRepository: OAuthTokenRepository, oauthClientRepository: OAuthClientRepository, hashService: HashService, tokenService: TokenService, getRolesPermissionsAction: GetRolesPermissionsAction);
+    handle(dto: LoginDto): Promise<LoginResponse>;
+    private createSession;
+    private createAndSaveToken;
+    private generateSessionToken;
+    private logSuccessLogin;
+    private logFailedLogin;
+}
+//# sourceMappingURL=login.action.d.ts.map

package/dist/server/auth/application/actions/auth/login.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.action.d.ts","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/login.action.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,kBAAkB,EAElB,sBAAsB,EAGtB,qBAAqB,EACrB,oBAAoB,EAEpB,qBAAqB,EACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAsB,WAAW,EAAuB,YAAY,EAAE,MAAM,aAAa,CAAC;AAIjG,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,qBACa,WAAW;IAGpB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IAEvC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAErC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IAEtC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,yBAAyB;gBAbzB,kBAAkB,EAAE,kBAAkB,EAEtC,iBAAiB,EAAE,qBAAqB,EAExC,sBAAsB,EAAE,sBAAsB,EAE9C,oBAAoB,EAAE,oBAAoB,EAE1C,qBAAqB,EAAE,qBAAqB,EAE5C,WAAW,EAAE,WAAW,EAExB,YAAY,EAAE,YAAY,EAC1B,yBAAyB,EAAE,yBAAyB;IAOjE,MAAM,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;YA0ErC,aAAa;YA0Bb,kBAAkB;IA6ChC,OAAO,CAAC,oBAAoB;YAOd,eAAe;YAgBf,cAAc;CAgB7B"}

package/dist/server/auth/application/actions/auth/login.action.js

@@ -0,0 +1,175 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoginAction = void 0;
+const common_1 = require("@nestjs/common");
+const repositories_1 = require("../../../domain/repositories");
+const login_response_1 = require("../../dto/login-response");
+const ports_1 = require("../../ports");
+const user_session_1 = require("../../../domain/entities/user-session");
+const enums_1 = require("../../../domain/enums");
+const oauth_token_1 = require("../../../domain/entities/oauth-token");
+const get_roles_permissions_action_1 = require("./get-roles-permissions.action");
+let LoginAction = class LoginAction {
+    authUserRepository;
+    sessionRepository;
+    loginHistoryRepository;
+    oauthTokenRepository;
+    oauthClientRepository;
+    hashService;
+    tokenService;
+    getRolesPermissionsAction;
+    constructor(authUserRepository, sessionRepository, loginHistoryRepository, oauthTokenRepository, oauthClientRepository, hashService, tokenService, getRolesPermissionsAction) {
+        this.authUserRepository = authUserRepository;
+        this.sessionRepository = sessionRepository;
+        this.loginHistoryRepository = loginHistoryRepository;
+        this.oauthTokenRepository = oauthTokenRepository;
+        this.oauthClientRepository = oauthClientRepository;
+        this.hashService = hashService;
+        this.tokenService = tokenService;
+        this.getRolesPermissionsAction = getRolesPermissionsAction;
+    }
+    async handle(dto) {
+        const user = await this.authUserRepository.findByEmail(dto.email);
+        if (!user) {
+            await this.logFailedLogin(dto.email, 'User không tồn tại', dto);
+            throw new common_1.UnauthorizedException('Email hoặc mật khẩu không đúng');
+        }
+        user.unlockIfExpired();
+        if (!user.canLogin()) {
+            const reason = user.isLocked()
+                ? 'Tài khoản đang bị khóa'
+                : 'Tài khoản không hoạt động';
+            await this.logFailedLogin(dto.email, reason, dto, user.id);
+            throw new common_1.UnauthorizedException(reason);
+        }
+        const isPasswordValid = await this.hashService.compare(dto.password, user.passwordHash);
+        if (!isPasswordValid) {
+            const shouldLock = user.incrementFailedAttempts(5);
+            if (shouldLock) {
+                user.lockAccount(15);
+            }
+            await this.authUserRepository.save(user);
+            await this.logFailedLogin(dto.email, 'Mật khẩu không đúng', dto, user.id);
+            throw new common_1.UnauthorizedException('Email hoặc mật khẩu không đúng');
+        }
+        user.resetFailedAttempts();
+        user.updateLastLogin(dto.ipAddress || 'unknown');
+        await this.authUserRepository.save(user);
+        const clientCode = dto.clientCode || 'web-public';
+        const client = await this.oauthClientRepository.findByClientCode(clientCode);
+        if (!client || !client.canBeUsed()) {
+            throw new common_1.UnauthorizedException('Invalid client');
+        }
+        const session = await this.createSession(user.id, dto, client.id);
+        const accessToken = await this.createAndSaveToken(enums_1.OAuthTokenType.ACCESS_TOKEN, user, session.id, client);
+        const refreshToken = await this.createAndSaveToken(enums_1.OAuthTokenType.REFRESH_TOKEN, user, session.id, client);
+        await this.logSuccessLogin(user.id, dto, session.id);
+        const { roles, permissions } = await this.getRolesPermissionsAction.handle(user.id);
+        return new login_response_1.LoginResponse({
+            accessToken,
+            refreshToken,
+            expiresIn: client.accessTokenLifetime,
+            tokenType: 'Bearer',
+            user: {
+                ...user.toPublic(),
+                roles,
+                permissions,
+            },
+        });
+    }
+    async createSession(userId, dto, clientId) {
+        const expiresAt = new Date();
+        expiresAt.setDate(expiresAt.getDate() + 30);
+        const session = new user_session_1.UserSession({
+            userId,
+            sessionToken: this.generateSessionToken(),
+            deviceName: dto.deviceName || 'Unknown Device',
+            deviceFingerprint: dto.deviceFingerprint,
+            ipAddress: dto.ipAddress || 'unknown',
+            userAgent: dto.userAgent,
+            clientId,
+            isCurrent: true,
+            expiresAt,
+        });
+        return this.sessionRepository.create(session);
+    }
+    async createAndSaveToken(tokenType, user, sessionId, client) {
+        const token = tokenType === enums_1.OAuthTokenType.ACCESS_TOKEN
+            ? this.tokenService.generateAccessToken({
+                userId: user.id,
+                email: user.email,
+            })
+            : this.tokenService.generateRefreshToken({
+                userId: user.id,
+                sessionId,
+            });
+        const expiresAt = new Date();
+        if (tokenType === enums_1.OAuthTokenType.ACCESS_TOKEN) {
+            expiresAt.setHours(expiresAt.getHours() + client.accessTokenLifetime / 3600);
+        }
+        else {
+            expiresAt.setSeconds(expiresAt.getSeconds() + client.refreshTokenLifetime);
+        }
+        await this.oauthTokenRepository.create(new oauth_token_1.OAuthToken({
+            tokenType,
+            token,
+            clientId: client.id,
+            userId: user.id,
+            sessionId,
+            scopes: [],
+            expiresAt,
+        }));
+        return token;
+    }
+    generateSessionToken() {
+        return (Math.random().toString(36).substring(2, 15) +
+            Math.random().toString(36).substring(2, 15));
+    }
+    async logSuccessLogin(userId, dto, sessionId) {
+        await this.loginHistoryRepository.create({
+            userId,
+            email: dto.email,
+            status: enums_1.LoginStatus.SUCCESS,
+            ipAddress: dto.ipAddress || 'unknown',
+            userAgent: dto.userAgent,
+            deviceFingerprint: dto.deviceFingerprint,
+            sessionId,
+        });
+    }
+    async logFailedLogin(email, reason, dto, userId) {
+        await this.loginHistoryRepository.create({
+            userId,
+            email,
+            status: enums_1.LoginStatus.FAILED,
+            failureReason: reason,
+            ipAddress: dto.ipAddress || 'unknown',
+            userAgent: dto.userAgent,
+            deviceFingerprint: dto.deviceFingerprint,
+        });
+    }
+};
+exports.LoginAction = LoginAction;
+exports.LoginAction = LoginAction = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(repositories_1.AUTH_USER_REPOSITORY_TOKEN)),
+    __param(1, (0, common_1.Inject)(repositories_1.USER_SESSION_REPOSITORY_TOKEN)),
+    __param(2, (0, common_1.Inject)(repositories_1.LOGIN_HISTORY_REPOSITORY_TOKEN)),
+    __param(3, (0, common_1.Inject)(repositories_1.OAUTH_TOKEN_REPOSITORY_TOKEN)),
+    __param(4, (0, common_1.Inject)(repositories_1.OAUTH_CLIENT_REPOSITORY_TOKEN)),
+    __param(5, (0, common_1.Inject)(ports_1.HASH_SERVICE_TOKEN)),
+    __param(6, (0, common_1.Inject)(ports_1.TOKEN_SERVICE_TOKEN)),
+    __metadata("design:paramtypes", [Object, Object, Object, Object, Object, Object, Object, get_roles_permissions_action_1.GetRolesPermissionsAction])
+], LoginAction);
+//# sourceMappingURL=login.action.js.map

package/dist/server/auth/application/actions/auth/login.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.action.js","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/login.action.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA2E;AAE3E,+DAWsC;AAEtC,6DAAyD;AACzD,uCAAiG;AACjG,wEAAoE;AACpE,iDAAoE;AACpE,sEAAkE;AAClE,iFAA2E;AAGpE,IAAM,WAAW,GAAjB,MAAM,WAAW;IAGH;IAEA;IAEA;IAEA;IAEA;IAEA;IAEA;IACA;IAfnB,YAEmB,kBAAsC,EAEtC,iBAAwC,EAExC,sBAA8C,EAE9C,oBAA0C,EAE1C,qBAA4C,EAE5C,WAAwB,EAExB,YAA0B,EAC1B,yBAAoD;QAbpD,uBAAkB,GAAlB,kBAAkB,CAAoB;QAEtC,sBAAiB,GAAjB,iBAAiB,CAAuB;QAExC,2BAAsB,GAAtB,sBAAsB,CAAwB;QAE9C,yBAAoB,GAApB,oBAAoB,CAAsB;QAE1C,0BAAqB,GAArB,qBAAqB,CAAuB;QAE5C,gBAAW,GAAX,WAAW,CAAa;QAExB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,8BAAyB,GAAzB,yBAAyB,CAA2B;IAEvE,CAAC;IAKD,KAAK,CAAC,MAAM,CAAC,GAAa;QACxB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAC;YAChE,MAAM,IAAI,8BAAqB,CAAC,gCAAgC,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE;gBAC5B,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,2BAA2B,CAAC;YAChC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3D,MAAM,IAAI,8BAAqB,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CACpD,GAAG,CAAC,QAAQ,EACZ,IAAI,CAAC,YAAY,CAClB,CAAC;QACF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;YACnD,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACvB,CAAC;YACD,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,qBAAqB,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1E,MAAM,IAAI,8BAAqB,CAAC,gCAAgC,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEzC,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,YAAY,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC/C,sBAAc,CAAC,YAAY,EAC3B,IAAI,EACJ,OAAO,CAAC,EAAE,EACV,MAAM,CACP,CAAC;QAEF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAChD,sBAAc,CAAC,aAAa,EAC5B,IAAI,EACJ,OAAO,CAAC,EAAE,EACV,MAAM,CACP,CAAC;QAEF,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,CACxE,IAAI,CAAC,EAAE,CACR,CAAC;QAEF,OAAO,IAAI,8BAAa,CAAC;YACvB,WAAW;YACX,YAAY;YACZ,SAAS,EAAE,MAAM,CAAC,mBAAmB;YACrC,SAAS,EAAE,QAAQ;YACnB,IAAI,EAAE;gBACJ,GAAG,IAAI,CAAC,QAAQ,EAAE;gBAClB,KAAK;gBACL,WAAW;aACZ;SACF,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,MAAc,EACd,GAAa,EACb,QAAiB;QAEjB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAE5C,MAAM,OAAO,GAAG,IAAI,0BAAW,CAAC;YAC9B,MAAM;YACN,YAAY,EAAE,IAAI,CAAC,oBAAoB,EAAE;YACzC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,gBAAgB;YAC9C,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ;YACR,SAAS,EAAE,IAAI;YACf,SAAS;SACV,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAKO,KAAK,CAAC,kBAAkB,CAC9B,SAAyB,EACzB,IAAmC,EACnC,SAAiB,EACjB,MAAiF;QAGjF,MAAM,KAAK,GACT,SAAS,KAAK,sBAAc,CAAC,YAAY;YACvC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC;gBACtC,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC;YACF,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC;gBACvC,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS;aACV,CAAC,CAAC;QAGP,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,SAAS,KAAK,sBAAc,CAAC,YAAY,EAAE,CAAC;YAC9C,SAAS,CAAC,QAAQ,CAChB,SAAS,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,mBAAmB,GAAG,IAAI,CACzD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,UAAU,CAClB,SAAS,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,oBAAoB,CACrD,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CACpC,IAAI,wBAAU,CAAC;YACb,SAAS;YACT,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS;YACT,MAAM,EAAE,EAAE;YACV,SAAS;SACV,CAAC,CACH,CAAC;QAEF,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,oBAAoB;QAC1B,OAAO,CACL,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAC5C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,MAAc,EACd,GAAa,EACb,SAAiB;QAEjB,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC;YACvC,MAAM;YACN,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM,EAAE,mBAAW,CAAC,OAAO;YAC3B,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,KAAa,EACb,MAAc,EACd,GAAa,EACb,MAAe;QAEf,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC;YACvC,MAAM;YACN,KAAK;YACL,MAAM,EAAE,mBAAW,CAAC,MAAM;YAC1B,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;SACzC,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA/MY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,yCAA0B,CAAC,CAAA;IAElC,WAAA,IAAA,eAAM,EAAC,4CAA6B,CAAC,CAAA;IAErC,WAAA,IAAA,eAAM,EAAC,6CAA8B,CAAC,CAAA;IAEtC,WAAA,IAAA,eAAM,EAAC,2CAA4B,CAAC,CAAA;IAEpC,WAAA,IAAA,eAAM,EAAC,4CAA6B,CAAC,CAAA;IAErC,WAAA,IAAA,eAAM,EAAC,0BAAkB,CAAC,CAAA;IAE1B,WAAA,IAAA,eAAM,EAAC,2BAAmB,CAAC,CAAA;6FAEgB,wDAAyB;GAhB5D,WAAW,CA+MvB"}

package/dist/server/auth/application/actions/auth/logout.action.d.ts

@@ -0,0 +1,8 @@
+import { UserSessionRepository, OAuthTokenRepository } from '../../../domain/repositories';
+export declare class LogoutAction {
+    private readonly sessionRepository;
+    private readonly oauthTokenRepository;
+    constructor(sessionRepository: UserSessionRepository, oauthTokenRepository: OAuthTokenRepository);
+    handle(userId: number, sessionId: number): Promise<void>;
+}
+//# sourceMappingURL=logout.action.d.ts.map

package/dist/server/auth/application/actions/auth/logout.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.action.d.ts","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/logout.action.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,qBAAqB,EAErB,oBAAoB,EACrB,MAAM,8BAA8B,CAAC;AAEtC,qBACa,YAAY;IAGrB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;gBAFpB,iBAAiB,EAAE,qBAAqB,EAExC,oBAAoB,EAAE,oBAAoB;IAGvD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAkB/D"}

package/dist/server/auth/application/actions/auth/logout.action.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LogoutAction = void 0;
+const common_1 = require("@nestjs/common");
+const repositories_1 = require("../../../domain/repositories");
+let LogoutAction = class LogoutAction {
+    sessionRepository;
+    oauthTokenRepository;
+    constructor(sessionRepository, oauthTokenRepository) {
+        this.sessionRepository = sessionRepository;
+        this.oauthTokenRepository = oauthTokenRepository;
+    }
+    async handle(userId, sessionId) {
+        const session = await this.sessionRepository.findById(sessionId);
+        if (!session || session.userId !== userId) {
+            return;
+        }
+        session.revoke();
+        await this.sessionRepository.save(session);
+        const tokens = await this.oauthTokenRepository.findActiveByUserId(userId);
+        for (const token of tokens) {
+            if (token.sessionId === sessionId) {
+                token.revoke();
+                await this.oauthTokenRepository.save(token);
+            }
+        }
+    }
+};
+exports.LogoutAction = LogoutAction;
+exports.LogoutAction = LogoutAction = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(repositories_1.USER_SESSION_REPOSITORY_TOKEN)),
+    __param(1, (0, common_1.Inject)(repositories_1.OAUTH_TOKEN_REPOSITORY_TOKEN)),
+    __metadata("design:paramtypes", [Object, Object])
+], LogoutAction);
+//# sourceMappingURL=logout.action.js.map

package/dist/server/auth/application/actions/auth/logout.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.action.js","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/logout.action.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AAEpD,+DAKsC;AAG/B,IAAM,YAAY,GAAlB,MAAM,YAAY;IAGJ;IAEA;IAJnB,YAEmB,iBAAwC,EAExC,oBAA0C;QAF1C,sBAAiB,GAAjB,iBAAiB,CAAuB;QAExC,yBAAoB,GAApB,oBAAoB,CAAsB;IAC1D,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,SAAiB;QAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,OAAO,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAG3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC1E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAClC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AA1BY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,4CAA6B,CAAC,CAAA;IAErC,WAAA,IAAA,eAAM,EAAC,2CAA4B,CAAC,CAAA;;GAJ5B,YAAY,CA0BxB"}

package/dist/server/auth/application/actions/auth/refresh-token.action.d.ts

@@ -0,0 +1,24 @@
+import { AuthUserRepository, UserSessionRepository, OAuthTokenRepository, OAuthClientRepository } from '../../../domain';
+import { RefreshTokenDto } from '../../dto/refresh-token.dto';
+import { TokenResponse } from '../../dto/token-response';
+import { TokenService } from '../../ports/token.service';
+export declare class RefreshTokenAction {
+    private readonly authUserRepository;
+    private readonly sessionRepository;
+    private readonly oauthTokenRepository;
+    private readonly oauthClientRepository;
+    private readonly tokenService;
+    constructor(authUserRepository: AuthUserRepository, sessionRepository: UserSessionRepository, oauthTokenRepository: OAuthTokenRepository, oauthClientRepository: OAuthClientRepository, tokenService: TokenService);
+    handle(dto: RefreshTokenDto): Promise<TokenResponse>;
+    private verifyAndValidateToken;
+    private getTokenRecord;
+    private checkTokenReuseAttack;
+    private revokeAllSessionTokens;
+    private validateAndUpdateSession;
+    private validateUserAndClient;
+    private revokeOldToken;
+    private createNewTokens;
+    private saveAccessToken;
+    private saveRefreshToken;
+}
+//# sourceMappingURL=refresh-token.action.d.ts.map

package/dist/server/auth/application/actions/auth/refresh-token.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.action.d.ts","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/refresh-token.action.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,kBAAkB,EAElB,qBAAqB,EAErB,oBAAoB,EAEpB,qBAAqB,EACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAEL,YAAY,EACb,MAAM,2BAA2B,CAAC;AAInC,qBACa,kBAAkB;IAG3B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAErC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IAEtC,OAAO,CAAC,QAAQ,CAAC,YAAY;gBARZ,kBAAkB,EAAE,kBAAkB,EAEtC,iBAAiB,EAAE,qBAAqB,EAExC,oBAAoB,EAAE,oBAAoB,EAE1C,qBAAqB,EAAE,qBAAqB,EAE5C,YAAY,EAAE,YAAY;IAGvC,MAAM,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;IAsC1D,OAAO,CAAC,sBAAsB;YAQhB,cAAc;YAed,qBAAqB;YAerB,sBAAsB;YAkBtB,wBAAwB;YAkBxB,qBAAqB;YAgBrB,cAAc;YAMd,eAAe;YAiCf,eAAe;YAwBf,gBAAgB;CAyB/B"}