@udhuong/admin-core 0.1.1 → 0.1.2

package/dist/server/admin-core-options.interface.d.ts

@@ -0,0 +1,53 @@
+import { ModuleMetadata, Type } from '@nestjs/common';
+import type { PermissionDef, RoleDef } from './shared';
+export interface AdminCoreOAuthProviderOptions {
+    clientId: string;
+    clientSecret: string;
+    callbackURL: string;
+}
+export interface AdminCoreFacebookOptions {
+    appId: string;
+    appSecret: string;
+    callbackURL: string;
+}
+export interface AdminCoreClientSecrets {
+    webAdmin: string;
+    webPublic: string;
+    thirdPartyDemo: string;
+    apiService: string;
+}
+export interface AdminCoreSeederOptions {
+    adminRedirectUris?: string[];
+    webRedirectUris?: string[];
+    mobileRedirectUris?: string[];
+    clientSecrets?: AdminCoreClientSecrets;
+}
+export interface AdminCoreOptions {
+    jwt: {
+        accessSecret: string;
+        accessExpiresIn?: string;
+        refreshSecret?: string;
+        refreshExpiresIn?: string;
+    };
+    rootEmail: string;
+    rootPassword?: string;
+    oauth?: {
+        google?: AdminCoreOAuthProviderOptions;
+        github?: AdminCoreOAuthProviderOptions;
+        facebook?: AdminCoreFacebookOptions;
+    };
+    seeder?: AdminCoreSeederOptions;
+    extraPermissions?: PermissionDef[];
+    extraRoles?: RoleDef[];
+}
+export interface AdminCoreOptionsFactory {
+    createAdminCoreOptions(): Promise<AdminCoreOptions> | AdminCoreOptions;
+}
+export interface AdminCoreAsyncOptions extends Pick<ModuleMetadata, 'imports'> {
+    useFactory?: (...args: any[]) => Promise<AdminCoreOptions> | AdminCoreOptions;
+    inject?: any[];
+    useClass?: Type<AdminCoreOptionsFactory>;
+    useExisting?: Type<AdminCoreOptionsFactory>;
+}
+export declare const ADMIN_CORE_OPTIONS = "ADMIN_CORE_OPTIONS";
+//# sourceMappingURL=admin-core-options.interface.d.ts.map

package/dist/server/admin-core-options.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-core-options.interface.d.ts","sourceRoot":"","sources":["../../src/server/admin-core-options.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAEvD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IAErC,QAAQ,EAAE,MAAM,CAAC;IAEjB,SAAS,EAAE,MAAM,CAAC;IAElB,cAAc,EAAE,MAAM,CAAC;IAEvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IAErC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE7B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAM9B,aAAa,CAAC,EAAE,sBAAsB,CAAC;CACxC;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE;QACH,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAMlB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE;QACN,MAAM,CAAC,EAAE,6BAA6B,CAAC;QACvC,MAAM,CAAC,EAAE,6BAA6B,CAAC;QACvC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;KACrC,CAAC;IAEF,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAMhC,gBAAgB,CAAC,EAAE,aAAa,EAAE,CAAC;IAMnC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,sBAAsB,IAAI,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAC;CACxE;AAED,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC;IAC5E,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAC;IAC9E,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,QAAQ,CAAC,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACzC,WAAW,CAAC,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;CAC7C;AAED,eAAO,MAAM,kBAAkB,uBAAuB,CAAC"}

package/dist/server/admin-core-options.interface.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ADMIN_CORE_OPTIONS = void 0;
+exports.ADMIN_CORE_OPTIONS = 'ADMIN_CORE_OPTIONS';
+//# sourceMappingURL=admin-core-options.interface.js.map

package/dist/server/admin-core-options.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-core-options.interface.js","sourceRoot":"","sources":["../../src/server/admin-core-options.interface.ts"],"names":[],"mappings":";;;AAuFa,QAAA,kBAAkB,GAAG,oBAAoB,CAAC"}

package/dist/server/admin-core.module.d.ts

@@ -0,0 +1,8 @@
+import { DynamicModule } from '@nestjs/common';
+import { AdminCoreOptions, AdminCoreAsyncOptions } from './admin-core-options.interface';
+export declare class AdminCoreModule {
+    static forRoot(options: AdminCoreOptions): DynamicModule;
+    static forRootAsync(options: AdminCoreAsyncOptions): DynamicModule;
+    private static createAsyncProviders;
+}
+//# sourceMappingURL=admin-core.module.d.ts.map

package/dist/server/admin-core.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-core.module.d.ts","sourceRoot":"","sources":["../../src/server/admin-core.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,aAAa,EAAY,MAAM,gBAAgB,CAAC;AAOzE,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EAGtB,MAAM,gCAAgC,CAAC;AAySxC,qBAEa,eAAe;IAI1B,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,aAAa;IAsDxD,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,qBAAqB,GAAG,aAAa;IAwDlE,OAAO,CAAC,MAAM,CAAC,oBAAoB;CAuCpC"}

package/dist/server/admin-core.module.js

@@ -0,0 +1,292 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var AdminCoreModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminCoreModule = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const jwt_1 = require("@nestjs/jwt");
+const passport_1 = require("@nestjs/passport");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const admin_core_options_interface_1 = require("./admin-core-options.interface");
+const entities_1 = require("./auth/infrastructure/persistence/entities");
+const mappers_1 = require("./auth/infrastructure/persistence/mappers");
+const repositories_1 = require("./auth/infrastructure/persistence/repositories");
+const services_1 = require("./auth/infrastructure/services");
+const schedulers_1 = require("./auth/infrastructure/schedulers");
+const strategies_1 = require("./auth/infrastructure/strategies");
+const repositories_2 = require("./auth/domain/repositories");
+const ports_1 = require("./auth/application/ports");
+const ports_2 = require("./auth/application/ports");
+const auth_1 = require("./auth/application/actions/auth");
+const session_1 = require("./auth/application/actions/session");
+const two_factor_1 = require("./auth/application/actions/two-factor");
+const social_1 = require("./auth/application/actions/social");
+const auth_user_service_1 = require("./auth/application/services/auth-user.service");
+const role_service_1 = require("./auth/application/services/role.service");
+const permission_service_1 = require("./auth/application/services/permission.service");
+const controllers_1 = require("./auth/presentation/controllers");
+const guards_1 = require("./auth/presentation/guards");
+const validators_1 = require("./auth/presentation/validators");
+const user_entity_1 = require("./user/infrastructure/persistence/entities/user.entity");
+const user_setting_entity_1 = require("./user/infrastructure/persistence/entities/user-setting.entity");
+const user_mapper_1 = require("./user/infrastructure/persistence/mappers/user.mapper");
+const user_repository_impl_1 = require("./user/infrastructure/persistence/repositories/user.repository.impl");
+const user_service_1 = require("./user/application/services/user.service");
+const user_preferences_service_1 = require("./user/application/services/user-preferences.service");
+const user_setting_repository_1 = require("./user/application/repositories/user-setting.repository");
+const auth_user_event_listener_1 = require("./user/application/listeners/auth-user-event.listener");
+const admin_user_controller_1 = require("./user/presentation/controllers/admin-user.controller");
+const authEntities = [
+    entities_1.AuthUserEntity,
+    entities_1.RoleEntity,
+    entities_1.PermissionEntity,
+    entities_1.UserRoleEntity,
+    entities_1.RolePermissionEntity,
+    entities_1.OAuthClientEntity,
+    entities_1.OAuthScopeEntity,
+    entities_1.OAuthAuthorizationCodeEntity,
+    entities_1.OAuthTokenEntity,
+    entities_1.OAuthClientConsentEntity,
+    entities_1.UserSessionEntity,
+    entities_1.LoginHistoryEntity,
+    entities_1.UserTwoFactorEntity,
+    entities_1.EmailVerificationTokenEntity,
+    entities_1.SocialAccountEntity,
+    entities_1.OAuthAuditLogEntity,
+];
+const userEntities = [user_entity_1.UserEntity, user_setting_entity_1.UserSettingEntity];
+const allEntities = [...authEntities, ...userEntities];
+const mappers = [
+    mappers_1.AuthUserMapper,
+    mappers_1.RoleMapper,
+    mappers_1.PermissionMapper,
+    mappers_1.UserRoleMapper,
+    mappers_1.RolePermissionMapper,
+    mappers_1.OAuthClientMapper,
+    mappers_1.OAuthScopeMapper,
+    mappers_1.OAuthAuthorizationCodeMapper,
+    mappers_1.OAuthTokenMapper,
+    mappers_1.OAuthClientConsentMapper,
+    mappers_1.UserSessionMapper,
+    mappers_1.LoginHistoryMapper,
+    mappers_1.UserTwoFactorMapper,
+    mappers_1.EmailVerificationTokenMapper,
+    mappers_1.SocialAccountMapper,
+    mappers_1.OAuthAuditLogMapper,
+    user_mapper_1.UserMapper,
+];
+const repositoryProviders = [
+    { provide: repositories_2.AUTH_USER_REPOSITORY_TOKEN, useClass: repositories_1.AuthUserRepositoryImpl },
+    { provide: repositories_2.ROLE_REPOSITORY_TOKEN, useClass: repositories_1.RoleRepositoryImpl },
+    { provide: repositories_2.PERMISSION_REPOSITORY_TOKEN, useClass: repositories_1.PermissionRepositoryImpl },
+    { provide: repositories_2.USER_ROLE_REPOSITORY_TOKEN, useClass: repositories_1.UserRoleRepositoryImpl },
+    { provide: repositories_2.ROLE_PERMISSION_REPOSITORY_TOKEN, useClass: repositories_1.RolePermissionRepositoryImpl },
+    { provide: repositories_2.OAUTH_CLIENT_REPOSITORY_TOKEN, useClass: repositories_1.OAuthClientRepositoryImpl },
+    { provide: repositories_2.OAUTH_SCOPE_REPOSITORY_TOKEN, useClass: repositories_1.OAuthScopeRepositoryImpl },
+    { provide: repositories_2.OAUTH_AUTHORIZATION_CODE_REPOSITORY_TOKEN, useClass: repositories_1.OAuthAuthorizationCodeRepositoryImpl },
+    { provide: repositories_2.OAUTH_TOKEN_REPOSITORY_TOKEN, useClass: repositories_1.OAuthTokenRepositoryImpl },
+    { provide: repositories_2.OAUTH_CLIENT_CONSENT_REPOSITORY_TOKEN, useClass: repositories_1.OAuthClientConsentRepositoryImpl },
+    { provide: repositories_2.USER_SESSION_REPOSITORY_TOKEN, useClass: repositories_1.UserSessionRepositoryImpl },
+    { provide: repositories_2.LOGIN_HISTORY_REPOSITORY_TOKEN, useClass: repositories_1.LoginHistoryRepositoryImpl },
+    { provide: repositories_2.USER_TWO_FACTOR_REPOSITORY_TOKEN, useClass: repositories_1.UserTwoFactorRepositoryImpl },
+    { provide: repositories_2.EMAIL_VERIFICATION_TOKEN_REPOSITORY_TOKEN, useClass: repositories_1.EmailVerificationTokenRepositoryImpl },
+    { provide: repositories_2.SOCIAL_ACCOUNT_REPOSITORY_TOKEN, useClass: repositories_1.SocialAccountRepositoryImpl },
+    { provide: repositories_2.OAUTH_AUDIT_LOG_REPOSITORY_TOKEN, useClass: repositories_1.OAuthAuditLogRepositoryImpl },
+    { provide: 'IUserRepository', useClass: user_repository_impl_1.UserRepositoryImpl },
+];
+const serviceProviders = [
+    { provide: ports_1.HASH_SERVICE_TOKEN, useClass: services_1.BcryptHashService },
+    { provide: ports_1.TOKEN_SERVICE_TOKEN, useClass: services_1.JwtTokenService },
+    { provide: ports_2.SocialAuthService, useClass: services_1.GoogleAuthService },
+    auth_user_service_1.AuthUserService,
+    services_1.SessionService,
+    services_1.EmailVerificationService,
+    services_1.AuthorizationCodeService,
+    services_1.ConsentService,
+    services_1.TokenService,
+    services_1.RootAccountService,
+    user_service_1.UserService,
+    user_preferences_service_1.UserPreferencesService,
+    user_setting_repository_1.UserSettingRepository,
+];
+const actions = [
+    auth_1.LoginAction,
+    auth_1.RegisterAction,
+    auth_1.RefreshTokenAction,
+    auth_1.LogoutAction,
+    auth_1.VerifyEmailAction,
+    auth_1.ForgotPasswordAction,
+    auth_1.ResetPasswordAction,
+    auth_1.ResendVerificationEmailAction,
+    auth_1.ChangePasswordAction,
+    auth_1.GetUserProfileAction,
+    auth_1.UpdateProfileAction,
+    auth_1.ClientCredentialsAction,
+    auth_1.GetRolesPermissionsAction,
+    session_1.GetActiveSessionsAction,
+    session_1.RevokeSessionAction,
+    session_1.RevokeAllSessionsAction,
+    two_factor_1.Enable2FAAction,
+    two_factor_1.Verify2FASetupAction,
+    two_factor_1.Disable2FAAction,
+    social_1.SocialLoginAction,
+];
+const controllers = [
+    controllers_1.AuthController,
+    controllers_1.SessionController,
+    controllers_1.PasswordController,
+    controllers_1.EmailController,
+    controllers_1.TwoFactorController,
+    controllers_1.SocialAuthController,
+    controllers_1.RoleController,
+    controllers_1.PermissionController,
+    admin_user_controller_1.AdminUserController,
+];
+let AdminCoreModule = AdminCoreModule_1 = class AdminCoreModule {
+    static forRoot(options) {
+        const optionsProvider = {
+            provide: admin_core_options_interface_1.ADMIN_CORE_OPTIONS,
+            useValue: options,
+        };
+        return {
+            module: AdminCoreModule_1,
+            imports: [
+                event_emitter_1.EventEmitterModule.forRoot(),
+                passport_1.PassportModule.register({ defaultStrategy: 'jwt' }),
+                typeorm_1.TypeOrmModule.forFeature(allEntities),
+                jwt_1.JwtModule.register({
+                    secret: options.jwt.accessSecret,
+                    signOptions: {
+                        expiresIn: (options.jwt.accessExpiresIn || '1h'),
+                    },
+                }),
+            ],
+            controllers,
+            providers: [
+                optionsProvider,
+                strategies_1.JwtStrategy,
+                guards_1.PermissionGuard,
+                validators_1.IsUsernameUniqueConstraint,
+                schedulers_1.CleanupScheduler,
+                role_service_1.RoleService,
+                permission_service_1.PermissionService,
+                auth_user_event_listener_1.AuthUserEventListener,
+                ...mappers,
+                ...repositoryProviders,
+                ...serviceProviders,
+                ...actions,
+            ],
+            exports: [
+                admin_core_options_interface_1.ADMIN_CORE_OPTIONS,
+                typeorm_1.TypeOrmModule,
+                guards_1.PermissionGuard,
+                auth_user_service_1.AuthUserService,
+                user_service_1.UserService,
+                user_preferences_service_1.UserPreferencesService,
+                user_setting_repository_1.UserSettingRepository,
+                role_service_1.RoleService,
+                permission_service_1.PermissionService,
+                ...repositoryProviders,
+                ...serviceProviders,
+                ...actions,
+            ],
+        };
+    }
+    static forRootAsync(options) {
+        const asyncProviders = AdminCoreModule_1.createAsyncProviders(options);
+        return {
+            module: AdminCoreModule_1,
+            imports: [
+                ...(options.imports || []),
+                event_emitter_1.EventEmitterModule.forRoot(),
+                passport_1.PassportModule.register({ defaultStrategy: 'jwt' }),
+                typeorm_1.TypeOrmModule.forFeature(allEntities),
+                jwt_1.JwtModule.registerAsync({
+                    imports: options.imports || [],
+                    inject: [admin_core_options_interface_1.ADMIN_CORE_OPTIONS],
+                    useFactory: (coreOptions) => ({
+                        secret: coreOptions.jwt.accessSecret,
+                        signOptions: {
+                            expiresIn: (coreOptions.jwt.accessExpiresIn || '1h'),
+                        },
+                    }),
+                }),
+            ],
+            controllers,
+            providers: [
+                ...asyncProviders,
+                strategies_1.JwtStrategy,
+                guards_1.PermissionGuard,
+                validators_1.IsUsernameUniqueConstraint,
+                schedulers_1.CleanupScheduler,
+                role_service_1.RoleService,
+                permission_service_1.PermissionService,
+                auth_user_event_listener_1.AuthUserEventListener,
+                ...mappers,
+                ...repositoryProviders,
+                ...serviceProviders,
+                ...actions,
+            ],
+            exports: [
+                admin_core_options_interface_1.ADMIN_CORE_OPTIONS,
+                typeorm_1.TypeOrmModule,
+                guards_1.PermissionGuard,
+                auth_user_service_1.AuthUserService,
+                user_service_1.UserService,
+                user_preferences_service_1.UserPreferencesService,
+                user_setting_repository_1.UserSettingRepository,
+                role_service_1.RoleService,
+                permission_service_1.PermissionService,
+                ...repositoryProviders,
+                ...serviceProviders,
+                ...actions,
+            ],
+        };
+    }
+    static createAsyncProviders(options) {
+        if (options.useFactory) {
+            return [
+                {
+                    provide: admin_core_options_interface_1.ADMIN_CORE_OPTIONS,
+                    useFactory: options.useFactory,
+                    inject: options.inject || [],
+                },
+            ];
+        }
+        if (options.useClass) {
+            return [
+                {
+                    provide: options.useClass,
+                    useClass: options.useClass,
+                },
+                {
+                    provide: admin_core_options_interface_1.ADMIN_CORE_OPTIONS,
+                    useFactory: async (optionsFactory) => optionsFactory.createAdminCoreOptions(),
+                    inject: [options.useClass],
+                },
+            ];
+        }
+        if (options.useExisting) {
+            return [
+                {
+                    provide: admin_core_options_interface_1.ADMIN_CORE_OPTIONS,
+                    useFactory: async (optionsFactory) => optionsFactory.createAdminCoreOptions(),
+                    inject: [options.useExisting],
+                },
+            ];
+        }
+        return [];
+    }
+};
+exports.AdminCoreModule = AdminCoreModule;
+exports.AdminCoreModule = AdminCoreModule = AdminCoreModule_1 = __decorate([
+    (0, common_1.Global)(),
+    (0, common_1.Module)({})
+], AdminCoreModule);
+//# sourceMappingURL=admin-core.module.js.map

package/dist/server/admin-core.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-core.module.js","sourceRoot":"","sources":["../../src/server/admin-core.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAyE;AACzE,6CAAgD;AAChD,qCAAwC;AACxC,+CAAkD;AAElD,yDAA2D;AAE3D,iFAKwC;AAGxC,yEAiBoD;AAGpD,uEAiBmD;AAGnD,iFAiBwD;AAGxD,6DAUwC;AAGxC,iEAAoE;AAGpE,iEAA+D;AAM/D,6DAiBoC;AAGpC,oDAAmF;AACnF,oDAA6D;AAG7D,0DAcyC;AAEzC,gEAI4C;AAE5C,sEAI+C;AAE/C,8DAAsE;AAGtE,qFAAgF;AAChF,2EAAuE;AACvE,uFAAmF;AAGnF,iEASyC;AAEzC,uDAA6D;AAC7D,+DAA4E;AAG5E,wFAAoF;AACpF,wGAAmG;AACnG,uFAAmF;AACnF,8GAAyG;AACzG,2EAAuE;AACvE,mGAA8F;AAC9F,qGAAgG;AAChG,oGAA8F;AAC9F,iGAA4F;AAM5F,MAAM,YAAY,GAAG;IACnB,yBAAc;IACd,qBAAU;IACV,2BAAgB;IAChB,yBAAc;IACd,+BAAoB;IACpB,4BAAiB;IACjB,2BAAgB;IAChB,uCAA4B;IAC5B,2BAAgB;IAChB,mCAAwB;IACxB,4BAAiB;IACjB,6BAAkB;IAClB,8BAAmB;IACnB,uCAA4B;IAC5B,8BAAmB;IACnB,8BAAmB;CACpB,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,wBAAU,EAAE,uCAAiB,CAAC,CAAC;AAErD,MAAM,WAAW,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,YAAY,CAAC,CAAC;AAEvD,MAAM,OAAO,GAAG;IACd,wBAAc;IACd,oBAAU;IACV,0BAAgB;IAChB,wBAAc;IACd,8BAAoB;IACpB,2BAAiB;IACjB,0BAAgB;IAChB,sCAA4B;IAC5B,0BAAgB;IAChB,kCAAwB;IACxB,2BAAiB;IACjB,4BAAkB;IAClB,6BAAmB;IACnB,sCAA4B;IAC5B,6BAAmB;IACnB,6BAAmB;IACnB,wBAAU;CACX,CAAC;AAEF,MAAM,mBAAmB,GAAe;IACtC,EAAE,OAAO,EAAE,yCAA0B,EAAE,QAAQ,EAAE,qCAAsB,EAAE;IACzE,EAAE,OAAO,EAAE,oCAAqB,EAAE,QAAQ,EAAE,iCAAkB,EAAE;IAChE,EAAE,OAAO,EAAE,0CAA2B,EAAE,QAAQ,EAAE,uCAAwB,EAAE;IAC5E,EAAE,OAAO,EAAE,yCAA0B,EAAE,QAAQ,EAAE,qCAAsB,EAAE;IACzE,EAAE,OAAO,EAAE,+CAAgC,EAAE,QAAQ,EAAE,2CAA4B,EAAE;IACrF,EAAE,OAAO,EAAE,4CAA6B,EAAE,QAAQ,EAAE,wCAAyB,EAAE;IAC/E,EAAE,OAAO,EAAE,2CAA4B,EAAE,QAAQ,EAAE,uCAAwB,EAAE;IAC7E,EAAE,OAAO,EAAE,wDAAyC,EAAE,QAAQ,EAAE,mDAAoC,EAAE;IACtG,EAAE,OAAO,EAAE,2CAA4B,EAAE,QAAQ,EAAE,uCAAwB,EAAE;IAC7E,EAAE,OAAO,EAAE,oDAAqC,EAAE,QAAQ,EAAE,+CAAgC,EAAE;IAC9F,EAAE,OAAO,EAAE,4CAA6B,EAAE,QAAQ,EAAE,wCAAyB,EAAE;IAC/E,EAAE,OAAO,EAAE,6CAA8B,EAAE,QAAQ,EAAE,yCAA0B,EAAE;IACjF,EAAE,OAAO,EAAE,+CAAgC,EAAE,QAAQ,EAAE,0CAA2B,EAAE;IACpF,EAAE,OAAO,EAAE,wDAAyC,EAAE,QAAQ,EAAE,mDAAoC,EAAE;IACtG,EAAE,OAAO,EAAE,8CAA+B,EAAE,QAAQ,EAAE,0CAA2B,EAAE;IACnF,EAAE,OAAO,EAAE,+CAAgC,EAAE,QAAQ,EAAE,0CAA2B,EAAE;IACpF,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,yCAAkB,EAAE;CAC7D,CAAC;AAEF,MAAM,gBAAgB,GAAe;IACnC,EAAE,OAAO,EAAE,0BAAkB,EAAE,QAAQ,EAAE,4BAAiB,EAAE;IAC5D,EAAE,OAAO,EAAE,2BAAmB,EAAE,QAAQ,EAAE,0BAAe,EAAE;IAC3D,EAAE,OAAO,EAAE,yBAAiB,EAAE,QAAQ,EAAE,4BAAiB,EAAE;IAC3D,mCAAe;IACf,yBAAc;IACd,mCAAwB;IACxB,mCAAwB;IACxB,yBAAc;IACd,uBAAiB;IACjB,6BAAkB;IAElB,0BAAW;IACX,iDAAsB;IACtB,+CAAqB;CACtB,CAAC;AAEF,MAAM,OAAO,GAAG;IAEd,kBAAW;IACX,qBAAc;IACd,yBAAkB;IAClB,mBAAY;IACZ,wBAAiB;IACjB,2BAAoB;IACpB,0BAAmB;IACnB,oCAA6B;IAC7B,2BAAoB;IACpB,2BAAoB;IACpB,0BAAmB;IACnB,8BAAuB;IACvB,gCAAyB;IAEzB,iCAAuB;IACvB,6BAAmB;IACnB,iCAAuB;IAEvB,4BAAe;IACf,iCAAoB;IACpB,6BAAgB;IAEhB,0BAAiB;CAClB,CAAC;AAEF,MAAM,WAAW,GAAG;IAClB,4BAAc;IACd,+BAAiB;IACjB,gCAAkB;IAClB,6BAAe;IACf,iCAAmB;IACnB,kCAAoB;IACpB,4BAAc;IACd,kCAAoB;IACpB,2CAAmB;CACpB,CAAC;AAQK,IAAM,eAAe,uBAArB,MAAM,eAAe;IAI1B,MAAM,CAAC,OAAO,CAAC,OAAyB;QACtC,MAAM,eAAe,GAAa;YAChC,OAAO,EAAE,iDAAkB;YAC3B,QAAQ,EAAE,OAAO;SAClB,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,iBAAe;YACvB,OAAO,EAAE;gBACP,kCAAkB,CAAC,OAAO,EAAE;gBAC5B,yBAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;gBACnD,uBAAa,CAAC,UAAU,CAAC,WAAW,CAAC;gBACrC,eAAS,CAAC,QAAQ,CAAC;oBACjB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;oBAChC,WAAW,EAAE;wBACX,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAQ;qBACxD;iBACF,CAAC;aACH;YACD,WAAW;YACX,SAAS,EAAE;gBACT,eAAe;gBACf,wBAAW;gBACX,wBAAe;gBACf,uCAA0B;gBAC1B,6BAAgB;gBAChB,0BAAW;gBACX,sCAAiB;gBACjB,gDAAqB;gBACrB,GAAG,OAAO;gBACV,GAAG,mBAAmB;gBACtB,GAAG,gBAAgB;gBACnB,GAAG,OAAO;aACX;YACD,OAAO,EAAE;gBACP,iDAAkB;gBAClB,uBAAa;gBACb,wBAAe;gBACf,mCAAe;gBACf,0BAAW;gBACX,iDAAsB;gBACtB,+CAAqB;gBACrB,0BAAW;gBACX,sCAAiB;gBACjB,GAAG,mBAAmB;gBACtB,GAAG,gBAAgB;gBACnB,GAAG,OAAO;aACX;SACF,CAAC;IACJ,CAAC;IAKD,MAAM,CAAC,YAAY,CAAC,OAA8B;QAChD,MAAM,cAAc,GAAG,iBAAe,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAErE,OAAO;YACL,MAAM,EAAE,iBAAe;YACvB,OAAO,EAAE;gBACP,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC1B,kCAAkB,CAAC,OAAO,EAAE;gBAC5B,yBAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;gBACnD,uBAAa,CAAC,UAAU,CAAC,WAAW,CAAC;gBACrC,eAAS,CAAC,aAAa,CAAC;oBACtB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;oBAC9B,MAAM,EAAE,CAAC,iDAAkB,CAAC;oBAC5B,UAAU,EAAE,CAAC,WAA6B,EAAE,EAAE,CAAC,CAAC;wBAC9C,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,YAAY;wBACpC,WAAW,EAAE;4BACX,SAAS,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAQ;yBAC5D;qBACF,CAAC;iBACH,CAAC;aACH;YACD,WAAW;YACX,SAAS,EAAE;gBACT,GAAG,cAAc;gBACjB,wBAAW;gBACX,wBAAe;gBACf,uCAA0B;gBAC1B,6BAAgB;gBAChB,0BAAW;gBACX,sCAAiB;gBACjB,gDAAqB;gBACrB,GAAG,OAAO;gBACV,GAAG,mBAAmB;gBACtB,GAAG,gBAAgB;gBACnB,GAAG,OAAO;aACX;YACD,OAAO,EAAE;gBACP,iDAAkB;gBAClB,uBAAa;gBACb,wBAAe;gBACf,mCAAe;gBACf,0BAAW;gBACX,iDAAsB;gBACtB,+CAAqB;gBACrB,0BAAW;gBACX,sCAAiB;gBACjB,GAAG,mBAAmB;gBACtB,GAAG,gBAAgB;gBACnB,GAAG,OAAO;aACX;SACF,CAAC;IACJ,CAAC;IAKO,MAAM,CAAC,oBAAoB,CAAC,OAA8B;QAChE,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,OAAO;gBACL;oBACE,OAAO,EAAE,iDAAkB;oBAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;iBAC7B;aACF,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO;gBACL;oBACE,OAAO,EAAE,OAAO,CAAC,QAAQ;oBACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B;gBACD;oBACE,OAAO,EAAE,iDAAkB;oBAC3B,UAAU,EAAE,KAAK,EAAE,cAAuC,EAAE,EAAE,CAC5D,cAAc,CAAC,sBAAsB,EAAE;oBACzC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;iBAC3B;aACF,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,OAAO;gBACL;oBACE,OAAO,EAAE,iDAAkB;oBAC3B,UAAU,EAAE,KAAK,EAAE,cAAuC,EAAE,EAAE,CAC5D,cAAc,CAAC,sBAAsB,EAAE;oBACzC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;iBAC9B;aACF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAA;AAzJY,0CAAe;0BAAf,eAAe;IAF3B,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,eAAe,CAyJ3B"}

package/dist/server/auth/application/actions/auth/change-password.action.d.ts

@@ -0,0 +1,12 @@
+import { AuthUserRepository } from '../../../domain/repositories';
+import { ChangePasswordDto } from '../../dto/change-password.dto';
+import { HashService } from '../../ports';
+import { RevokeAllSessionsAction } from '../session/revoke-all-sessions.action';
+export declare class ChangePasswordAction {
+    private readonly authUserRepository;
+    private readonly hashService;
+    private readonly revokeAllSessionsAction;
+    constructor(authUserRepository: AuthUserRepository, hashService: HashService, revokeAllSessionsAction: RevokeAllSessionsAction);
+    handle(userId: number, dto: ChangePasswordDto, currentSessionId: number): Promise<void>;
+}
+//# sourceMappingURL=change-password.action.d.ts.map

package/dist/server/auth/application/actions/auth/change-password.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-password.action.d.ts","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/change-password.action.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAEL,WAAW,EACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAGhF,qBACa,oBAAoB;IAG7B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBAHvB,kBAAkB,EAAE,kBAAkB,EAEtC,WAAW,EAAE,WAAW,EACxB,uBAAuB,EAAE,uBAAuB;IAM7D,MAAM,CAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,GAAK,OAAO,CAAC,IAAI,CAAC;CAiCjG"}

package/dist/server/auth/application/actions/auth/change-password.action.js

@@ -0,0 +1,56 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChangePasswordAction = void 0;
+const common_1 = require("@nestjs/common");
+const repositories_1 = require("../../../domain/repositories");
+const ports_1 = require("../../ports");
+const revoke_all_sessions_action_1 = require("../session/revoke-all-sessions.action");
+const enums_1 = require("../../../domain/enums");
+let ChangePasswordAction = class ChangePasswordAction {
+    authUserRepository;
+    hashService;
+    revokeAllSessionsAction;
+    constructor(authUserRepository, hashService, revokeAllSessionsAction) {
+        this.authUserRepository = authUserRepository;
+        this.hashService = hashService;
+        this.revokeAllSessionsAction = revokeAllSessionsAction;
+    }
+    async handle(userId, dto, currentSessionId) {
+        const user = await this.authUserRepository.findById(userId);
+        if (!user) {
+            throw new common_1.NotFoundException('User không tồn tại');
+        }
+        const isCurrentPasswordValid = await this.hashService.compare(dto.currentPassword, user.passwordHash);
+        if (!isCurrentPasswordValid) {
+            throw new common_1.UnauthorizedException('Mật khẩu hiện tại không đúng');
+        }
+        const isSamePassword = await this.hashService.compare(dto.newPassword, user.passwordHash);
+        if (isSamePassword) {
+            throw new Error('Mật khẩu mới không được giống mật khẩu cũ');
+        }
+        const newPasswordHash = await this.hashService.hash(dto.newPassword);
+        user.updatePassword(newPasswordHash);
+        await this.authUserRepository.save(user);
+        await this.revokeAllSessionsAction.handle(userId, enums_1.SessionRevokeReason.PASSWORD_CHANGED, currentSessionId);
+    }
+};
+exports.ChangePasswordAction = ChangePasswordAction;
+exports.ChangePasswordAction = ChangePasswordAction = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(repositories_1.AUTH_USER_REPOSITORY_TOKEN)),
+    __param(1, (0, common_1.Inject)(ports_1.HASH_SERVICE_TOKEN)),
+    __metadata("design:paramtypes", [Object, Object, revoke_all_sessions_action_1.RevokeAllSessionsAction])
+], ChangePasswordAction);
+//# sourceMappingURL=change-password.action.js.map

package/dist/server/auth/application/actions/auth/change-password.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-password.action.js","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/change-password.action.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAKwB;AAExB,+DAGsC;AAEtC,uCAGqB;AACrB,sFAAgF;AAChF,iDAA4D;AAGrD,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAGZ;IAEA;IACA;IALnB,YAEmB,kBAAsC,EAEtC,WAAwB,EACxB,uBAAgD;QAHhD,uBAAkB,GAAlB,kBAAkB,CAAoB;QAEtC,gBAAW,GAAX,WAAW,CAAa;QACxB,4BAAuB,GAAvB,uBAAuB,CAAyB;IAChE,CAAC;IAKJ,KAAK,CAAC,MAAM,CAAE,MAAc,EAAE,GAAsB,EAAE,gBAAwB;QAC5E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,0BAAiB,CAAC,oBAAoB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAC3D,GAAG,CAAC,eAAe,EACnB,IAAI,CAAC,YAAY,CAClB,CAAC;QACF,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,MAAM,IAAI,8BAAqB,CAAC,8BAA8B,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CACnD,GAAG,CAAC,WAAW,EACf,IAAI,CAAC,YAAY,CAClB,CAAC;QACF,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrE,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAGzC,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CACvC,MAAM,EACN,2BAAmB,CAAC,gBAAgB,EACpC,gBAAgB,CACjB,CAAC;IACJ,CAAC;CACF,CAAA;AA7CY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,yCAA0B,CAAC,CAAA;IAElC,WAAA,IAAA,eAAM,EAAC,0BAAkB,CAAC,CAAA;qDAEe,oDAAuB;GANxD,oBAAoB,CA6ChC"}

package/dist/server/auth/application/actions/auth/client-credentials.action.d.ts

@@ -0,0 +1,16 @@
+import { OAuthClientRepository, OAuthTokenRepository } from '../../../domain/repositories';
+import { ClientCredentialsDto } from '../../dto/client-credentials.dto';
+import { TokenResponse } from '../../dto/token-response';
+import { TokenService, HashService } from '../../ports';
+export declare class ClientCredentialsAction {
+    private readonly oauthClientRepository;
+    private readonly oauthTokenRepository;
+    private readonly tokenService;
+    private readonly hashService;
+    constructor(oauthClientRepository: OAuthClientRepository, oauthTokenRepository: OAuthTokenRepository, tokenService: TokenService, hashService: HashService);
+    handle(dto: ClientCredentialsDto): Promise<TokenResponse>;
+    private validateClient;
+    private validateScopes;
+    private saveAccessToken;
+}
+//# sourceMappingURL=client-credentials.action.d.ts.map

package/dist/server/auth/application/actions/auth/client-credentials.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-credentials.action.d.ts","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/client-credentials.action.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAEL,YAAY,EAEZ,WAAW,EACZ,MAAM,aAAa,CAAC;AAIrB,qBACa,uBAAuB;IAGhC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IAEtC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAErC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,WAAW;gBANX,qBAAqB,EAAE,qBAAqB,EAE5C,oBAAoB,EAAE,oBAAoB,EAE1C,YAAY,EAAE,YAAY,EAE1B,WAAW,EAAE,WAAW;IAOrC,MAAM,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC;YAgCjD,cAAc;IA8B5B,OAAO,CAAC,cAAc;YAsBR,eAAe;CAoB9B"}

package/dist/server/auth/application/actions/auth/client-credentials.action.js

@@ -0,0 +1,101 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClientCredentialsAction = void 0;
+const common_1 = require("@nestjs/common");
+const repositories_1 = require("../../../domain/repositories");
+const token_response_1 = require("../../dto/token-response");
+const ports_1 = require("../../ports");
+const oauth_token_1 = require("../../../domain/entities/oauth-token");
+const enums_1 = require("../../../domain/enums");
+let ClientCredentialsAction = class ClientCredentialsAction {
+    oauthClientRepository;
+    oauthTokenRepository;
+    tokenService;
+    hashService;
+    constructor(oauthClientRepository, oauthTokenRepository, tokenService, hashService) {
+        this.oauthClientRepository = oauthClientRepository;
+        this.oauthTokenRepository = oauthTokenRepository;
+        this.tokenService = tokenService;
+        this.hashService = hashService;
+    }
+    async handle(dto) {
+        const client = await this.validateClient(dto);
+        if (!client.allowedGrants.includes('client_credentials')) {
+            throw new common_1.UnauthorizedException('Client is not authorized for client_credentials grant');
+        }
+        const requestedScopes = dto.scope ? dto.scope.split(' ') : [];
+        const allowedScopes = this.validateScopes(requestedScopes, client.allowedScopes);
+        const accessToken = this.tokenService.generateClientAccessToken({
+            clientId: client.id,
+            scopes: allowedScopes,
+        });
+        await this.saveAccessToken(accessToken, client, allowedScopes);
+        return new token_response_1.TokenResponse({
+            accessToken,
+            tokenType: 'Bearer',
+            expiresIn: client.accessTokenLifetime,
+        });
+    }
+    async validateClient(dto) {
+        const client = await this.oauthClientRepository.findByClientCode(dto.client_id);
+        if (!client) {
+            throw new common_1.UnauthorizedException('Invalid client credentials');
+        }
+        if (!client.canBeUsed()) {
+            throw new common_1.UnauthorizedException('Client is not active');
+        }
+        if (!client.confidential || !client.clientSecret) {
+            throw new common_1.UnauthorizedException('Client credentials grant requires confidential client');
+        }
+        const isSecretValid = await this.hashService.compare(dto.client_secret, client.clientSecret);
+        if (!isSecretValid) {
+            throw new common_1.UnauthorizedException('Invalid client credentials');
+        }
+        return client;
+    }
+    validateScopes(requestedScopes, allowedScopes) {
+        if (requestedScopes.length === 0) {
+            return allowedScopes;
+        }
+        const invalidScopes = requestedScopes.filter((scope) => !allowedScopes.includes(scope));
+        if (invalidScopes.length > 0) {
+            throw new common_1.UnauthorizedException(`Invalid scopes: ${invalidScopes.join(', ')}`);
+        }
+        return requestedScopes;
+    }
+    async saveAccessToken(accessToken, client, scopes) {
+        const expiresAt = new Date();
+        expiresAt.setSeconds(expiresAt.getSeconds() + client.accessTokenLifetime);
+        await this.oauthTokenRepository.create(new oauth_token_1.OAuthToken({
+            tokenType: enums_1.OAuthTokenType.ACCESS_TOKEN,
+            token: accessToken,
+            clientId: client.id,
+            userId: null,
+            sessionId: null,
+            scopes,
+            expiresAt,
+        }));
+    }
+};
+exports.ClientCredentialsAction = ClientCredentialsAction;
+exports.ClientCredentialsAction = ClientCredentialsAction = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(repositories_1.OAUTH_CLIENT_REPOSITORY_TOKEN)),
+    __param(1, (0, common_1.Inject)(repositories_1.OAUTH_TOKEN_REPOSITORY_TOKEN)),
+    __param(2, (0, common_1.Inject)(ports_1.TOKEN_SERVICE_TOKEN)),
+    __param(3, (0, common_1.Inject)(ports_1.HASH_SERVICE_TOKEN)),
+    __metadata("design:paramtypes", [Object, Object, Object, Object])
+], ClientCredentialsAction);
+//# sourceMappingURL=client-credentials.action.js.map

package/dist/server/auth/application/actions/auth/client-credentials.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-credentials.action.js","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/client-credentials.action.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA2E;AAE3E,+DAKsC;AAEtC,6DAAyD;AACzD,uCAKqB;AACrB,sEAAkE;AAClE,iDAAuD;AAGhD,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAGf;IAEA;IAEA;IAEA;IARnB,YAEmB,qBAA4C,EAE5C,oBAA0C,EAE1C,YAA0B,EAE1B,WAAwB;QANxB,0BAAqB,GAArB,qBAAqB,CAAuB;QAE5C,yBAAoB,GAApB,oBAAoB,CAAsB;QAE1C,iBAAY,GAAZ,YAAY,CAAc;QAE1B,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAMJ,KAAK,CAAC,MAAM,CAAC,GAAyB;QAEpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAG9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,8BAAqB,CAC7B,uDAAuD,CACxD,CAAC;QACJ,CAAC;QAGD,MAAM,eAAe,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAGjF,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC;YAC9D,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAGH,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QAE/D,OAAO,IAAI,8BAAa,CAAC;YACvB,WAAW;YACX,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,MAAM,CAAC,mBAAmB;SAEtC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAyB;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEhF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,8BAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,8BAAqB,CAAC,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACjD,MAAM,IAAI,8BAAqB,CAC7B,uDAAuD,CACxD,CAAC;QACJ,CAAC;QAGD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAClD,GAAG,CAAC,aAAa,EACjB,MAAM,CAAC,YAAY,CACpB,CAAC;QAEF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,8BAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,cAAc,CACpB,eAAyB,EACzB,aAAuB;QAEvB,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,aAAa,CAAC;QACvB,CAAC;QAGD,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC1C,CAAC;QAEF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,8BAAqB,CAC7B,mBAAmB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9C,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,WAAmB,EACnB,MAAmD,EACnD,MAAgB;QAEhB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAE1E,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CACpC,IAAI,wBAAU,CAAC;YACb,SAAS,EAAE,sBAAc,CAAC,YAAY;YACtC,KAAK,EAAE,WAAW;YAClB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;YACf,MAAM;YACN,SAAS;SACV,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAA;AAxHY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,4CAA6B,CAAC,CAAA;IAErC,WAAA,IAAA,eAAM,EAAC,2CAA4B,CAAC,CAAA;IAEpC,WAAA,IAAA,eAAM,EAAC,2BAAmB,CAAC,CAAA;IAE3B,WAAA,IAAA,eAAM,EAAC,0BAAkB,CAAC,CAAA;;GARlB,uBAAuB,CAwHnC"}

package/dist/server/auth/application/actions/auth/forgot-password.action.d.ts

@@ -0,0 +1,12 @@
+import { EventEmitter2 } from '@nestjs/event-emitter';
+import { AuthUserRepository } from '../../../domain/repositories';
+import { ForgotPasswordDto } from '../../dto/forgot-password.dto';
+import { TokenService } from '../../ports/token.service';
+export declare class ForgotPasswordAction {
+    private readonly authUserRepository;
+    private readonly tokenService;
+    private readonly eventEmitter;
+    constructor(authUserRepository: AuthUserRepository, tokenService: TokenService, eventEmitter: EventEmitter2);
+    handle(dto: ForgotPasswordDto): Promise<string>;
+}
+//# sourceMappingURL=forgot-password.action.d.ts.map

package/dist/server/auth/application/actions/auth/forgot-password.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgot-password.action.d.ts","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/forgot-password.action.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAEL,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAEL,YAAY,EACb,MAAM,2BAA2B,CAAC;AAGnC,qBACa,oBAAoB;IAG7B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAHZ,kBAAkB,EAAE,kBAAkB,EAEtC,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,aAAa;IAMxC,MAAM,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;CAmBtD"}