@udhuong/admin-core 0.1.0 → 0.1.2

package/dist/server/auth/infrastructure/services/root-account.service.js

@@ -0,0 +1,91 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var RootAccountService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RootAccountService = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const auth_user_service_1 = require("../../application/services/auth-user.service");
+const entities_1 = require("../persistence/entities");
+const entities_2 = require("../persistence/entities");
+const entities_3 = require("../persistence/entities");
+const admin_core_options_interface_1 = require("../../../admin-core-options.interface");
+const ROOT_ROLE = 'super-admin';
+let RootAccountService = RootAccountService_1 = class RootAccountService {
+    authUserService;
+    coreOptions;
+    authUserRepo;
+    roleRepo;
+    userRoleRepo;
+    logger = new common_1.Logger(RootAccountService_1.name);
+    constructor(authUserService, coreOptions, authUserRepo, roleRepo, userRoleRepo) {
+        this.authUserService = authUserService;
+        this.coreOptions = coreOptions;
+        this.authUserRepo = authUserRepo;
+        this.roleRepo = roleRepo;
+        this.userRoleRepo = userRoleRepo;
+    }
+    async onModuleInit() {
+        await this.seedRootAccount();
+    }
+    async seedRootAccount() {
+        const rootEmail = this.coreOptions.rootEmail;
+        const existing = await this.authUserRepo.findOne({
+            where: { email: rootEmail },
+        });
+        if (existing) {
+            this.logger.log(`Root account already exists: ${rootEmail}`);
+            return;
+        }
+        const rootPassword = this.coreOptions.rootPassword ?? process.env.ROOT_PASSWORD;
+        if (!rootPassword || rootPassword.length < 12) {
+            throw new Error(`[RootAccountService] Thiếu hoặc quá ngắn (<12 ký tự) rootPassword. ` +
+                `Cung cấp qua AdminCoreOptions.rootPassword hoặc env var ROOT_PASSWORD. ` +
+                `Gợi ý: dùng mật khẩu strong (ví dụ \`openssl rand -base64 24\`).`);
+        }
+        const rootUser = await this.authUserService.create({
+            email: rootEmail,
+            password: rootPassword,
+            displayName: 'Root',
+            username: 'root',
+        });
+        await this.authUserService.verifyEmail(rootUser.id);
+        const superAdminRole = await this.roleRepo.findOne({
+            where: { name: ROOT_ROLE },
+        });
+        if (superAdminRole) {
+            await this.userRoleRepo.save({
+                userId: rootUser.id,
+                roleId: superAdminRole.id,
+            });
+            this.logger.log(`Root account created and assigned role "${ROOT_ROLE}": ${rootEmail}`);
+        }
+        else {
+            this.logger.warn(`Role "${ROOT_ROLE}" not found. Root account created without role.`);
+        }
+    }
+};
+exports.RootAccountService = RootAccountService;
+exports.RootAccountService = RootAccountService = RootAccountService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)(admin_core_options_interface_1.ADMIN_CORE_OPTIONS)),
+    __param(2, (0, typeorm_1.InjectRepository)(entities_1.AuthUserEntity)),
+    __param(3, (0, typeorm_1.InjectRepository)(entities_2.RoleEntity)),
+    __param(4, (0, typeorm_1.InjectRepository)(entities_3.UserRoleEntity)),
+    __metadata("design:paramtypes", [auth_user_service_1.AuthUserService, Object, typeorm_2.Repository,
+        typeorm_2.Repository,
+        typeorm_2.Repository])
+], RootAccountService);
+//# sourceMappingURL=root-account.service.js.map

package/dist/server/auth/infrastructure/services/root-account.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-account.service.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/root-account.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA0E;AAC1E,6CAAmD;AACnD,qCAAqC;AACrC,oFAA+E;AAC/E,sDAAyD;AACzD,sDAAqD;AACrD,sDAAyD;AACzD,wFAA6F;AAE7F,MAAM,SAAS,GAAG,aAAa,CAAC;AAOzB,IAAM,kBAAkB,0BAAxB,MAAM,kBAAkB;IAIV;IAEA;IAEA;IAEA;IAEA;IAXF,MAAM,GAAG,IAAI,eAAM,CAAC,oBAAkB,CAAC,IAAI,CAAC,CAAC;IAE9D,YACmB,eAAgC,EAEhC,WAA6B,EAE7B,YAAwC,EAExC,QAAgC,EAEhC,YAAwC;QARxC,oBAAe,GAAf,eAAe,CAAiB;QAEhC,gBAAW,GAAX,WAAW,CAAkB;QAE7B,iBAAY,GAAZ,YAAY,CAA4B;QAExC,aAAQ,GAAR,QAAQ,CAAwB;QAEhC,iBAAY,GAAZ,YAAY,CAA4B;IACxD,CAAC;IAEJ,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;QAG7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YAC/C,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;SAC5B,CAAC,CAAC;QAEH,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAChF,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,qEAAqE;gBACnE,yEAAyE;gBACzE,kEAAkE,CACrE,CAAC;QACJ,CAAC;QAGD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;YACjD,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,YAAY;YACtB,WAAW,EAAE,MAAM;YACnB,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QAGH,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAGpD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC3B,CAAC,CAAC;QAEH,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;gBAC3B,MAAM,EAAE,QAAQ,CAAC,EAAE;gBACnB,MAAM,EAAE,cAAc,CAAC,EAAE;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,2CAA2C,SAAS,MAAM,SAAS,EAAE,CAAC,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,SAAS,iDAAiD,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;CACF,CAAA;AAnEY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,eAAM,EAAC,iDAAkB,CAAC,CAAA;IAE1B,WAAA,IAAA,0BAAgB,EAAC,yBAAc,CAAC,CAAA;IAEhC,WAAA,IAAA,0BAAgB,EAAC,qBAAU,CAAC,CAAA;IAE5B,WAAA,IAAA,0BAAgB,EAAC,yBAAc,CAAC,CAAA;qCAPC,mCAAe,UAIlB,oBAAU;QAEd,oBAAU;QAEN,oBAAU;GAZhC,kBAAkB,CAmE9B"}

package/dist/server/auth/infrastructure/services/session.service.d.ts

@@ -0,0 +1,11 @@
+import { Repository } from 'typeorm';
+import { UserSessionEntity } from '../persistence/entities/user-session.entity';
+export declare class SessionService {
+    private readonly sessionRepository;
+    private readonly logger;
+    constructor(sessionRepository: Repository<UserSessionEntity>);
+    cleanupExpiredSessions(): Promise<void>;
+    revokeAllUserSessions(userId: number): Promise<void>;
+    countActiveSessions(userId: number): Promise<number>;
+}
+//# sourceMappingURL=session.service.d.ts.map

package/dist/server/auth/infrastructure/services/session.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.service.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/session.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAY,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAEhF,qBACa,cAAc;IAKvB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAJpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;gBAIvC,iBAAiB,EAAE,UAAU,CAAC,iBAAiB,CAAC;IAM7D,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IAYvC,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUpD,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAK3D"}

package/dist/server/auth/infrastructure/services/session.service.js

@@ -0,0 +1,49 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var SessionService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionService = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const user_session_entity_1 = require("../persistence/entities/user-session.entity");
+let SessionService = SessionService_1 = class SessionService {
+    sessionRepository;
+    logger = new common_1.Logger(SessionService_1.name);
+    constructor(sessionRepository) {
+        this.sessionRepository = sessionRepository;
+    }
+    async cleanupExpiredSessions() {
+        const now = new Date();
+        const result = await this.sessionRepository.delete({
+            expiresAt: (0, typeorm_2.LessThan)(now),
+        });
+        this.logger.log(`Cleaned up ${result.affected || 0} expired sessions`);
+    }
+    async revokeAllUserSessions(userId) {
+        await this.sessionRepository.update({ userId, revokedAt: null }, { revokedAt: new Date() });
+    }
+    async countActiveSessions(userId) {
+        return this.sessionRepository.count({
+            where: { userId, revokedAt: null },
+        });
+    }
+};
+exports.SessionService = SessionService;
+exports.SessionService = SessionService = SessionService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_1.InjectRepository)(user_session_entity_1.UserSessionEntity)),
+    __metadata("design:paramtypes", [typeorm_2.Repository])
+], SessionService);
+//# sourceMappingURL=session.service.js.map

package/dist/server/auth/infrastructure/services/session.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.service.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/session.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,6CAAmD;AACnD,qCAA+C;AAC/C,qFAAgF;AAGzE,IAAM,cAAc,sBAApB,MAAM,cAAc;IAKN;IAJF,MAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAE1D,YAEmB,iBAAgD;QAAhD,sBAAiB,GAAjB,iBAAiB,CAA+B;IAChE,CAAC;IAKJ,KAAK,CAAC,sBAAsB;QAC1B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YACjD,SAAS,EAAE,IAAA,kBAAQ,EAAC,GAAG,CAAC;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,QAAQ,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACzE,CAAC;IAKD,KAAK,CAAC,qBAAqB,CAAC,MAAc;QACxC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CACjC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAW,EAAE,EAClC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAC1B,CAAC;IACJ,CAAC;IAKD,KAAK,CAAC,mBAAmB,CAAC,MAAc;QACtC,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YAClC,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAW,EAAE;SAC1C,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAtCY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,0BAAgB,EAAC,uCAAiB,CAAC,CAAA;qCACA,oBAAU;GALrC,cAAc,CAsC1B"}

package/dist/server/auth/infrastructure/strategies/facebook.strategy.d.ts

@@ -0,0 +1,16 @@
+import { Strategy, Profile } from 'passport-facebook';
+import { Repository } from 'typeorm';
+import { AuthUserEntity, SocialAccountEntity } from '../persistence/entities';
+import { AdminCoreOptions } from '../../../admin-core-options.interface';
+declare const FacebookStrategy_base: new (...args: [options: import("passport-facebook").StrategyOptionsWithRequest] | [options: import("passport-facebook").StrategyOptions]) => Strategy & {
+    validate(...args: any[]): unknown;
+};
+export declare class FacebookStrategy extends FacebookStrategy_base {
+    private readonly coreOptions;
+    private readonly userRepository;
+    private readonly socialAccountRepository;
+    constructor(coreOptions: AdminCoreOptions, userRepository: Repository<AuthUserEntity>, socialAccountRepository: Repository<SocialAccountEntity>);
+    validate(_accessToken: string, _refreshToken: string, profile: Profile): Promise<AuthUserEntity>;
+}
+export {};
+//# sourceMappingURL=facebook.strategy.d.ts.map

package/dist/server/auth/infrastructure/strategies/facebook.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.strategy.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/strategies/facebook.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,EAAsB,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;;;;AAE7F,qBACa,gBAAiB,SAAQ,qBAAsC;IAGxE,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBAJvB,WAAW,EAAE,gBAAgB,EAE7B,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC,EAE1C,uBAAuB,EAAE,UAAU,CAAC,mBAAmB,CAAC;IAiBrE,QAAQ,CACZ,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,cAAc,CAAC;CA0D3B"}

package/dist/server/auth/infrastructure/strategies/facebook.strategy.js

@@ -0,0 +1,100 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FacebookStrategy = void 0;
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_facebook_1 = require("passport-facebook");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const entities_1 = require("../persistence/entities");
+const enums_1 = require("../../domain/enums");
+const admin_core_options_interface_1 = require("../../../admin-core-options.interface");
+let FacebookStrategy = class FacebookStrategy extends (0, passport_1.PassportStrategy)(passport_facebook_1.Strategy, 'facebook') {
+    coreOptions;
+    userRepository;
+    socialAccountRepository;
+    constructor(coreOptions, userRepository, socialAccountRepository) {
+        const fbConfig = coreOptions.oauth?.facebook;
+        super({
+            clientID: fbConfig?.appId || 'not-configured',
+            clientSecret: fbConfig?.appSecret || 'not-configured',
+            callbackURL: fbConfig?.callbackURL || 'http://localhost:3000/api/auth/facebook/callback',
+            profileFields: ['id', 'emails', 'name', 'photos'],
+            scope: ['email'],
+        });
+        this.coreOptions = coreOptions;
+        this.userRepository = userRepository;
+        this.socialAccountRepository = socialAccountRepository;
+        if (!fbConfig?.appId) {
+            console.warn('Facebook OAuth credentials not configured. Facebook login will not work.');
+        }
+    }
+    async validate(_accessToken, _refreshToken, profile) {
+        const { id, emails, displayName, photos } = profile;
+        if (!emails || emails.length === 0) {
+            throw new common_1.UnauthorizedException('No email found in Facebook profile');
+        }
+        const email = emails[0].value;
+        let socialAccount = await this.socialAccountRepository.findOne({
+            where: {
+                provider: enums_1.SocialProvider.FACEBOOK,
+                providerUserId: id,
+            },
+        });
+        if (socialAccount) {
+            const user = await this.userRepository.findOne({
+                where: { id: socialAccount.userId },
+            });
+            if (user)
+                return user;
+        }
+        let user = await this.userRepository.findOne({
+            where: { email },
+        });
+        if (!user) {
+            user = this.userRepository.create({
+                email,
+                username: email.split('@')[0],
+                displayName: displayName,
+                emailVerifiedAt: new Date(),
+                avatar: photos && photos.length > 0 ? photos[0].value : null,
+                status: 1,
+            });
+            await this.userRepository.save(user);
+        }
+        socialAccount = this.socialAccountRepository.create({
+            userId: user.id,
+            provider: enums_1.SocialProvider.FACEBOOK,
+            providerUserId: id,
+            email: email,
+            displayName: displayName,
+            avatar: photos && photos.length > 0 ? photos[0].value : null,
+            accessToken: _accessToken,
+            refreshToken: _refreshToken,
+        });
+        await this.socialAccountRepository.save(socialAccount);
+        return user;
+    }
+};
+exports.FacebookStrategy = FacebookStrategy;
+exports.FacebookStrategy = FacebookStrategy = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(admin_core_options_interface_1.ADMIN_CORE_OPTIONS)),
+    __param(1, (0, typeorm_1.InjectRepository)(entities_1.AuthUserEntity)),
+    __param(2, (0, typeorm_1.InjectRepository)(entities_1.SocialAccountEntity)),
+    __metadata("design:paramtypes", [Object, typeorm_2.Repository,
+        typeorm_2.Repository])
+], FacebookStrategy);
+//# sourceMappingURL=facebook.strategy.js.map

package/dist/server/auth/infrastructure/strategies/facebook.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.strategy.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/strategies/facebook.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA2E;AAC3E,+CAAoD;AACpD,yDAAsD;AACtD,6CAAmD;AACnD,qCAAqC;AACrC,sDAA8E;AAC9E,8CAAoD;AACpD,wFAA6F;AAGtF,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,IAAA,2BAAgB,EAAC,4BAAQ,EAAE,UAAU,CAAC;IAGvD;IAEA;IAEA;IANnB,YAEmB,WAA6B,EAE7B,cAA0C,EAE1C,uBAAwD;QAEzE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;QAE7C,KAAK,CAAC;YACJ,QAAQ,EAAE,QAAQ,EAAE,KAAK,IAAI,gBAAgB;YAC7C,YAAY,EAAE,QAAQ,EAAE,SAAS,IAAI,gBAAgB;YACrD,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,kDAAkD;YACxF,aAAa,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACjD,KAAK,EAAE,CAAC,OAAO,CAAC;SACjB,CAAC,CAAC;QAdc,gBAAW,GAAX,WAAW,CAAkB;QAE7B,mBAAc,GAAd,cAAc,CAA4B;QAE1C,4BAAuB,GAAvB,uBAAuB,CAAiC;QAYzE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,YAAoB,EACpB,aAAqB,EACrB,OAAgB;QAEhB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAEpD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,8BAAqB,CAAC,oCAAoC,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAG9B,IAAI,aAAa,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC;YAC7D,KAAK,EAAE;gBACL,QAAQ,EAAE,sBAAc,CAAC,QAAQ;gBACjC,cAAc,EAAE,EAAE;aACnB;SACF,CAAC,CAAC;QAEH,IAAI,aAAa,EAAE,CAAC;YAElB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,aAAa,CAAC,MAAM,EAAE;aACpC,CAAC,CAAC;YACH,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;QAGD,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC3C,KAAK,EAAE,EAAE,KAAK,EAAE;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YAEV,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;gBAChC,KAAK;gBACL,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC7B,WAAW,EAAE,WAAW;gBACxB,eAAe,EAAE,IAAI,IAAI,EAAE;gBAC3B,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBAC5D,MAAM,EAAE,CAAC;aACV,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAGD,aAAa,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC;YAClD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,sBAAc,CAAC,QAAQ;YACjC,cAAc,EAAE,EAAE;YAClB,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YAC5D,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,aAAa;SAC5B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAEvD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAtFY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,iDAAkB,CAAC,CAAA;IAE1B,WAAA,IAAA,0BAAgB,EAAC,yBAAc,CAAC,CAAA;IAEhC,WAAA,IAAA,0BAAgB,EAAC,8BAAmB,CAAC,CAAA;6CADL,oBAAU;QAED,oBAAU;GAP3C,gBAAgB,CAsF5B"}

package/dist/server/auth/infrastructure/strategies/github.strategy.d.ts

@@ -0,0 +1,16 @@
+import { Strategy, Profile } from 'passport-github2';
+import { Repository } from 'typeorm';
+import { AuthUserEntity, SocialAccountEntity } from '../persistence/entities';
+import { AdminCoreOptions } from '../../../admin-core-options.interface';
+declare const GitHubStrategy_base: new (...args: [options: import("passport-github2").StrategyOptionsWithRequest] | [options: import("passport-github2").StrategyOptions]) => Strategy & {
+    validate(...args: any[]): unknown;
+};
+export declare class GitHubStrategy extends GitHubStrategy_base {
+    private readonly coreOptions;
+    private readonly userRepository;
+    private readonly socialAccountRepository;
+    constructor(coreOptions: AdminCoreOptions, userRepository: Repository<AuthUserEntity>, socialAccountRepository: Repository<SocialAccountEntity>);
+    validate(_accessToken: string, _refreshToken: string, profile: Profile): Promise<AuthUserEntity>;
+}
+export {};
+//# sourceMappingURL=github.strategy.d.ts.map

package/dist/server/auth/infrastructure/strategies/github.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.strategy.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/strategies/github.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,EAAsB,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;;;;AAE7F,qBACa,cAAe,SAAQ,mBAAoC;IAGpE,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBAJvB,WAAW,EAAE,gBAAgB,EAE7B,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC,EAE1C,uBAAuB,EAAE,UAAU,CAAC,mBAAmB,CAAC;IAgBrE,QAAQ,CACZ,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,cAAc,CAAC;CA0D3B"}

package/dist/server/auth/infrastructure/strategies/github.strategy.js

@@ -0,0 +1,99 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GitHubStrategy = void 0;
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_github2_1 = require("passport-github2");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const entities_1 = require("../persistence/entities");
+const enums_1 = require("../../domain/enums");
+const admin_core_options_interface_1 = require("../../../admin-core-options.interface");
+let GitHubStrategy = class GitHubStrategy extends (0, passport_1.PassportStrategy)(passport_github2_1.Strategy, 'github') {
+    coreOptions;
+    userRepository;
+    socialAccountRepository;
+    constructor(coreOptions, userRepository, socialAccountRepository) {
+        const githubConfig = coreOptions.oauth?.github;
+        super({
+            clientID: githubConfig?.clientId || 'not-configured',
+            clientSecret: githubConfig?.clientSecret || 'not-configured',
+            callbackURL: githubConfig?.callbackURL || 'http://localhost:3000/api/auth/github/callback',
+            scope: ['user:email'],
+        });
+        this.coreOptions = coreOptions;
+        this.userRepository = userRepository;
+        this.socialAccountRepository = socialAccountRepository;
+        if (!githubConfig?.clientId) {
+            console.warn('GitHub OAuth credentials not configured. GitHub login will not work.');
+        }
+    }
+    async validate(_accessToken, _refreshToken, profile) {
+        const { id, emails, username, displayName, photos } = profile;
+        if (!emails || emails.length === 0) {
+            throw new common_1.UnauthorizedException('No email found in GitHub profile');
+        }
+        const email = emails[0].value;
+        let socialAccount = await this.socialAccountRepository.findOne({
+            where: {
+                provider: enums_1.SocialProvider.GITHUB,
+                providerUserId: id,
+            },
+        });
+        if (socialAccount) {
+            const user = await this.userRepository.findOne({
+                where: { id: socialAccount.userId },
+            });
+            if (user)
+                return user;
+        }
+        let user = await this.userRepository.findOne({
+            where: { email },
+        });
+        if (!user) {
+            user = this.userRepository.create({
+                email,
+                username: username || email.split('@')[0],
+                displayName: displayName || username,
+                emailVerifiedAt: new Date(),
+                avatar: photos && photos.length > 0 ? photos[0].value : null,
+                status: 1,
+            });
+            await this.userRepository.save(user);
+        }
+        socialAccount = this.socialAccountRepository.create({
+            userId: user.id,
+            provider: enums_1.SocialProvider.GITHUB,
+            providerUserId: id,
+            email: email,
+            displayName: username || displayName,
+            avatar: photos && photos.length > 0 ? photos[0].value : null,
+            accessToken: _accessToken,
+            refreshToken: _refreshToken,
+        });
+        await this.socialAccountRepository.save(socialAccount);
+        return user;
+    }
+};
+exports.GitHubStrategy = GitHubStrategy;
+exports.GitHubStrategy = GitHubStrategy = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(admin_core_options_interface_1.ADMIN_CORE_OPTIONS)),
+    __param(1, (0, typeorm_1.InjectRepository)(entities_1.AuthUserEntity)),
+    __param(2, (0, typeorm_1.InjectRepository)(entities_1.SocialAccountEntity)),
+    __metadata("design:paramtypes", [Object, typeorm_2.Repository,
+        typeorm_2.Repository])
+], GitHubStrategy);
+//# sourceMappingURL=github.strategy.js.map

package/dist/server/auth/infrastructure/strategies/github.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.strategy.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/strategies/github.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA2E;AAC3E,+CAAoD;AACpD,uDAAqD;AACrD,6CAAmD;AACnD,qCAAqC;AACrC,sDAA8E;AAC9E,8CAAoD;AACpD,wFAA6F;AAGtF,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,IAAA,2BAAgB,EAAC,2BAAQ,EAAE,QAAQ,CAAC;IAGnD;IAEA;IAEA;IANnB,YAEmB,WAA6B,EAE7B,cAA0C,EAE1C,uBAAwD;QAEzE,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;QAE/C,KAAK,CAAC;YACJ,QAAQ,EAAE,YAAY,EAAE,QAAQ,IAAI,gBAAgB;YACpD,YAAY,EAAE,YAAY,EAAE,YAAY,IAAI,gBAAgB;YAC5D,WAAW,EAAE,YAAY,EAAE,WAAW,IAAI,gDAAgD;YAC1F,KAAK,EAAE,CAAC,YAAY,CAAC;SACtB,CAAC,CAAC;QAbc,gBAAW,GAAX,WAAW,CAAkB;QAE7B,mBAAc,GAAd,cAAc,CAA4B;QAE1C,4BAAuB,GAAvB,uBAAuB,CAAiC;QAWzE,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,YAAoB,EACpB,aAAqB,EACrB,OAAgB;QAEhB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAE9D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAG9B,IAAI,aAAa,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC;YAC7D,KAAK,EAAE;gBACL,QAAQ,EAAE,sBAAc,CAAC,MAAM;gBAC/B,cAAc,EAAE,EAAE;aACnB;SACF,CAAC,CAAC;QAEH,IAAI,aAAa,EAAE,CAAC;YAElB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,aAAa,CAAC,MAAM,EAAE;aACpC,CAAC,CAAC;YACH,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;QAGD,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC3C,KAAK,EAAE,EAAE,KAAK,EAAE;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YAEV,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;gBAChC,KAAK;gBACL,QAAQ,EAAE,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzC,WAAW,EAAE,WAAW,IAAI,QAAQ;gBACpC,eAAe,EAAE,IAAI,IAAI,EAAE;gBAC3B,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBAC5D,MAAM,EAAE,CAAC;aACV,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAGD,aAAa,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC;YAClD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,sBAAc,CAAC,MAAM;YAC/B,cAAc,EAAE,EAAE;YAClB,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,QAAQ,IAAI,WAAW;YACpC,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YAC5D,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,aAAa;SAC5B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAEvD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AArFY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,iDAAkB,CAAC,CAAA;IAE1B,WAAA,IAAA,0BAAgB,EAAC,yBAAc,CAAC,CAAA;IAEhC,WAAA,IAAA,0BAAgB,EAAC,8BAAmB,CAAC,CAAA;6CADL,oBAAU;QAED,oBAAU;GAP3C,cAAc,CAqF1B"}

package/dist/server/auth/infrastructure/strategies/google.strategy.d.ts

@@ -0,0 +1,16 @@
+import { Strategy, Profile } from 'passport-google-oauth20';
+import { Repository } from 'typeorm';
+import { AuthUserEntity, SocialAccountEntity } from '../persistence/entities';
+import { AdminCoreOptions } from '../../../admin-core-options.interface';
+declare const GoogleStrategy_base: new (...args: [options: import("passport-google-oauth20").StrategyOptionsWithRequest] | [options: import("passport-google-oauth20").StrategyOptions] | [options: import("passport-google-oauth20").StrategyOptions] | [options: import("passport-google-oauth20").StrategyOptionsWithRequest]) => Strategy & {
+    validate(...args: any[]): unknown;
+};
+export declare class GoogleStrategy extends GoogleStrategy_base {
+    private readonly coreOptions;
+    private readonly userRepository;
+    private readonly socialAccountRepository;
+    constructor(coreOptions: AdminCoreOptions, userRepository: Repository<AuthUserEntity>, socialAccountRepository: Repository<SocialAccountEntity>);
+    validate(_accessToken: string, _refreshToken: string, profile: Profile): Promise<AuthUserEntity>;
+}
+export {};
+//# sourceMappingURL=google.strategy.d.ts.map

package/dist/server/auth/infrastructure/strategies/google.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.strategy.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/strategies/google.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,EAAsB,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;;;;AAE7F,qBACa,cAAe,SAAQ,mBAAoC;IAGpE,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBAJvB,WAAW,EAAE,gBAAgB,EAE7B,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC,EAE1C,uBAAuB,EAAE,UAAU,CAAC,mBAAmB,CAAC;IAgBrE,QAAQ,CACZ,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,cAAc,CAAC;CA0D3B"}

package/dist/server/auth/infrastructure/strategies/google.strategy.js

@@ -0,0 +1,99 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GoogleStrategy = void 0;
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_google_oauth20_1 = require("passport-google-oauth20");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const entities_1 = require("../persistence/entities");
+const enums_1 = require("../../domain/enums");
+const admin_core_options_interface_1 = require("../../../admin-core-options.interface");
+let GoogleStrategy = class GoogleStrategy extends (0, passport_1.PassportStrategy)(passport_google_oauth20_1.Strategy, 'google') {
+    coreOptions;
+    userRepository;
+    socialAccountRepository;
+    constructor(coreOptions, userRepository, socialAccountRepository) {
+        const googleConfig = coreOptions.oauth?.google;
+        super({
+            clientID: googleConfig?.clientId || 'not-configured',
+            clientSecret: googleConfig?.clientSecret || 'not-configured',
+            callbackURL: googleConfig?.callbackURL || 'http://localhost:3000/api/auth/google/callback',
+            scope: ['email', 'profile'],
+        });
+        this.coreOptions = coreOptions;
+        this.userRepository = userRepository;
+        this.socialAccountRepository = socialAccountRepository;
+        if (!googleConfig?.clientId) {
+            console.warn('Google OAuth credentials not configured. Google login will not work.');
+        }
+    }
+    async validate(_accessToken, _refreshToken, profile) {
+        const { id, emails, displayName, photos } = profile;
+        if (!emails || emails.length === 0) {
+            throw new common_1.UnauthorizedException('No email found in Google profile');
+        }
+        const email = emails[0].value;
+        let socialAccount = await this.socialAccountRepository.findOne({
+            where: {
+                provider: enums_1.SocialProvider.GOOGLE,
+                providerUserId: id,
+            },
+        });
+        if (socialAccount) {
+            const user = await this.userRepository.findOne({
+                where: { id: socialAccount.userId },
+            });
+            if (user)
+                return user;
+        }
+        let user = await this.userRepository.findOne({
+            where: { email },
+        });
+        if (!user) {
+            user = this.userRepository.create({
+                email,
+                username: email.split('@')[0],
+                displayName: displayName,
+                emailVerifiedAt: new Date(),
+                avatar: photos && photos.length > 0 ? photos[0].value : null,
+                status: 1,
+            });
+            await this.userRepository.save(user);
+        }
+        socialAccount = this.socialAccountRepository.create({
+            userId: user.id,
+            provider: enums_1.SocialProvider.GOOGLE,
+            providerUserId: id,
+            email: email,
+            displayName: displayName,
+            avatar: photos && photos.length > 0 ? photos[0].value : null,
+            accessToken: _accessToken,
+            refreshToken: _refreshToken,
+        });
+        await this.socialAccountRepository.save(socialAccount);
+        return user;
+    }
+};
+exports.GoogleStrategy = GoogleStrategy;
+exports.GoogleStrategy = GoogleStrategy = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(admin_core_options_interface_1.ADMIN_CORE_OPTIONS)),
+    __param(1, (0, typeorm_1.InjectRepository)(entities_1.AuthUserEntity)),
+    __param(2, (0, typeorm_1.InjectRepository)(entities_1.SocialAccountEntity)),
+    __metadata("design:paramtypes", [Object, typeorm_2.Repository,
+        typeorm_2.Repository])
+], GoogleStrategy);
+//# sourceMappingURL=google.strategy.js.map

package/dist/server/auth/infrastructure/strategies/google.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.strategy.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/strategies/google.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA2E;AAC3E,+CAAoD;AACpD,qEAA4D;AAC5D,6CAAmD;AACnD,qCAAqC;AACrC,sDAA8E;AAC9E,8CAAoD;AACpD,wFAA6F;AAGtF,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,IAAA,2BAAgB,EAAC,kCAAQ,EAAE,QAAQ,CAAC;IAGnD;IAEA;IAEA;IANnB,YAEmB,WAA6B,EAE7B,cAA0C,EAE1C,uBAAwD;QAEzE,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;QAE/C,KAAK,CAAC;YACJ,QAAQ,EAAE,YAAY,EAAE,QAAQ,IAAI,gBAAgB;YACpD,YAAY,EAAE,YAAY,EAAE,YAAY,IAAI,gBAAgB;YAC5D,WAAW,EAAE,YAAY,EAAE,WAAW,IAAI,gDAAgD;YAC1F,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;SAC5B,CAAC,CAAC;QAbc,gBAAW,GAAX,WAAW,CAAkB;QAE7B,mBAAc,GAAd,cAAc,CAA4B;QAE1C,4BAAuB,GAAvB,uBAAuB,CAAiC;QAWzE,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,YAAoB,EACpB,aAAqB,EACrB,OAAgB;QAEhB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAEpD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAG9B,IAAI,aAAa,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC;YAC7D,KAAK,EAAE;gBACL,QAAQ,EAAE,sBAAc,CAAC,MAAM;gBAC/B,cAAc,EAAE,EAAE;aACnB;SACF,CAAC,CAAC;QAEH,IAAI,aAAa,EAAE,CAAC;YAElB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,aAAa,CAAC,MAAM,EAAE;aACpC,CAAC,CAAC;YACH,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;QAGD,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC3C,KAAK,EAAE,EAAE,KAAK,EAAE;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YAEV,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;gBAChC,KAAK;gBACL,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC7B,WAAW,EAAE,WAAW;gBACxB,eAAe,EAAE,IAAI,IAAI,EAAE;gBAC3B,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBAC5D,MAAM,EAAE,CAAC;aACV,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAGD,aAAa,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC;YAClD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,sBAAc,CAAC,MAAM;YAC/B,cAAc,EAAE,EAAE;YAClB,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YAC5D,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,aAAa;SAC5B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAEvD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AArFY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,iDAAkB,CAAC,CAAA;IAE1B,WAAA,IAAA,0BAAgB,EAAC,yBAAc,CAAC,CAAA;IAEhC,WAAA,IAAA,0BAAgB,EAAC,8BAAmB,CAAC,CAAA;6CADL,oBAAU;QAED,oBAAU;GAP3C,cAAc,CAqF1B"}

package/dist/server/auth/infrastructure/strategies/index.d.ts

@@ -0,0 +1,2 @@
+export * from './jwt.strategy';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/auth/infrastructure/strategies/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/strategies/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

package/dist/server/auth/infrastructure/strategies/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./jwt.strategy"), exports);
+//# sourceMappingURL=index.js.map

package/dist/server/auth/infrastructure/strategies/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/strategies/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B"}

package/dist/server/auth/infrastructure/strategies/jwt.strategy.d.ts

@@ -0,0 +1,20 @@
+import { ConfigService } from '@nestjs/config';
+import { Strategy } from 'passport-jwt';
+import { OAuthTokenRepository } from '../../domain/repositories/oauth-token.repository';
+declare const JwtStrategy_base: new (...args: [opt: import("passport-jwt").StrategyOptionsWithRequest] | [opt: import("passport-jwt").StrategyOptionsWithoutRequest]) => Strategy & {
+    validate(...args: any[]): unknown;
+};
+export declare class JwtStrategy extends JwtStrategy_base {
+    private readonly configService;
+    private readonly oauthTokenRepository;
+    constructor(configService: ConfigService, oauthTokenRepository: OAuthTokenRepository);
+    validate(request: any, payload: any): Promise<{
+        id: any;
+        email: any;
+        sessionId: number;
+        roles: any;
+        permissions: any;
+    }>;
+}
+export {};
+//# sourceMappingURL=jwt.strategy.d.ts.map

package/dist/server/auth/infrastructure/strategies/jwt.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.strategy.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/strategies/jwt.strategy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAc,QAAQ,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAEL,oBAAoB,EACrB,MAAM,kDAAkD,CAAC;;;;AAM1D,qBACa,WAAY,SAAQ,gBAA0B;IAEvD,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;gBAFpB,aAAa,EAAE,aAAa,EAE5B,oBAAoB,EAAE,oBAAoB;IAsBvD,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG;;;;;;;CAwC1C"}