@udhuong/admin-core 0.1.1 → 0.1.2

package/dist/server/auth/application/actions/auth/refresh-token.action.js

@@ -0,0 +1,165 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RefreshTokenAction = void 0;
+const common_1 = require("@nestjs/common");
+const domain_1 = require("../../../domain");
+const token_response_1 = require("../../dto/token-response");
+const token_service_1 = require("../../ports/token.service");
+const enums_1 = require("../../../domain/enums");
+const oauth_token_1 = require("../../../domain/entities/oauth-token");
+let RefreshTokenAction = class RefreshTokenAction {
+    authUserRepository;
+    sessionRepository;
+    oauthTokenRepository;
+    oauthClientRepository;
+    tokenService;
+    constructor(authUserRepository, sessionRepository, oauthTokenRepository, oauthClientRepository, tokenService) {
+        this.authUserRepository = authUserRepository;
+        this.sessionRepository = sessionRepository;
+        this.oauthTokenRepository = oauthTokenRepository;
+        this.oauthClientRepository = oauthClientRepository;
+        this.tokenService = tokenService;
+    }
+    async handle(dto) {
+        const payload = this.verifyAndValidateToken(dto.refreshToken);
+        const tokenRecord = await this.getTokenRecord(dto.refreshToken);
+        await this.checkTokenReuseAttack(tokenRecord, payload);
+        const session = await this.validateAndUpdateSession(payload.sessionId);
+        const { user, client } = await this.validateUserAndClient(payload.userId, tokenRecord.clientId);
+        await this.revokeOldToken(tokenRecord);
+        const { accessToken, refreshToken } = await this.createNewTokens(user, session, client, tokenRecord.id);
+        return new token_response_1.TokenResponse({
+            accessToken,
+            refreshToken,
+            expiresIn: client.accessTokenLifetime,
+            tokenType: 'Bearer',
+        });
+    }
+    verifyAndValidateToken(refreshToken) {
+        const payload = this.tokenService.verifyRefreshToken(refreshToken);
+        if (!payload || !payload.userId || !payload.sessionId) {
+            throw new common_1.UnauthorizedException('Refresh token không hợp lệ');
+        }
+        return payload;
+    }
+    async getTokenRecord(refreshToken) {
+        const tokenRecord = await this.oauthTokenRepository.findByRefreshToken(refreshToken);
+        if (!tokenRecord) {
+            throw new common_1.UnauthorizedException('Refresh token không tồn tại');
+        }
+        if (tokenRecord.isExpired()) {
+            throw new common_1.UnauthorizedException('Refresh token đã hết hạn');
+        }
+        return tokenRecord;
+    }
+    async checkTokenReuseAttack(tokenRecord, payload) {
+        if (tokenRecord.revokedAt) {
+            await this.revokeAllSessionTokens(payload.userId, payload.sessionId);
+            throw new common_1.UnauthorizedException('Token reuse detected! All tokens have been revoked for security.');
+        }
+    }
+    async revokeAllSessionTokens(userId, sessionId) {
+        const session = await this.sessionRepository.findById(sessionId);
+        if (session) {
+            session.revoke();
+            await this.sessionRepository.save(session);
+        }
+        const allTokens = await this.oauthTokenRepository.findActiveByUserId(userId);
+        for (const token of allTokens) {
+            if (token.sessionId === sessionId) {
+                token.revoke();
+                await this.oauthTokenRepository.save(token);
+            }
+        }
+    }
+    async validateAndUpdateSession(sessionId) {
+        const session = await this.sessionRepository.findById(sessionId);
+        if (!session) {
+            throw new common_1.UnauthorizedException('Session không tồn tại');
+        }
+        if (!session.isActive()) {
+            throw new common_1.UnauthorizedException('Session đã hết hạn hoặc bị thu hồi');
+        }
+        session.updateLastActiveAt();
+        await this.sessionRepository.save(session);
+        return session;
+    }
+    async validateUserAndClient(userId, clientId) {
+        const user = await this.authUserRepository.findById(userId);
+        if (!user) {
+            throw new common_1.UnauthorizedException('User không tồn tại');
+        }
+        const client = await this.oauthClientRepository.findById(clientId);
+        if (!client || !client.canBeUsed()) {
+            throw new common_1.UnauthorizedException('Invalid client');
+        }
+        return { user, client };
+    }
+    async revokeOldToken(tokenRecord) {
+        tokenRecord.revoke();
+        await this.oauthTokenRepository.save(tokenRecord);
+    }
+    async createNewTokens(user, session, client, parentRefreshTokenId) {
+        const accessToken = this.tokenService.generateAccessToken({
+            userId: user.id,
+            email: user.email,
+        });
+        const refreshToken = this.tokenService.generateRefreshToken({
+            userId: user.id,
+            sessionId: session.id,
+        });
+        await this.saveAccessToken(accessToken, user, session, client);
+        await this.saveRefreshToken(refreshToken, user, session, client, parentRefreshTokenId);
+        return { accessToken, refreshToken };
+    }
+    async saveAccessToken(accessToken, user, session, client) {
+        const accessTokenExpiresAt = new Date();
+        accessTokenExpiresAt.setSeconds(accessTokenExpiresAt.getSeconds() + client.accessTokenLifetime);
+        await this.oauthTokenRepository.create(new oauth_token_1.OAuthToken({
+            tokenType: enums_1.OAuthTokenType.ACCESS_TOKEN,
+            token: accessToken,
+            clientId: client.id,
+            userId: user.id,
+            sessionId: session.id,
+            scopes: [],
+            expiresAt: accessTokenExpiresAt,
+        }));
+    }
+    async saveRefreshToken(refreshToken, user, session, client, parentRefreshTokenId) {
+        const refreshTokenExpiresAt = new Date();
+        refreshTokenExpiresAt.setSeconds(refreshTokenExpiresAt.getSeconds() + client.refreshTokenLifetime);
+        await this.oauthTokenRepository.create(new oauth_token_1.OAuthToken({
+            tokenType: enums_1.OAuthTokenType.REFRESH_TOKEN,
+            token: refreshToken,
+            clientId: client.id,
+            userId: user.id,
+            sessionId: session.id,
+            scopes: [],
+            expiresAt: refreshTokenExpiresAt,
+            parentRefreshTokenId,
+        }));
+    }
+};
+exports.RefreshTokenAction = RefreshTokenAction;
+exports.RefreshTokenAction = RefreshTokenAction = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(domain_1.AUTH_USER_REPOSITORY_TOKEN)),
+    __param(1, (0, common_1.Inject)(domain_1.USER_SESSION_REPOSITORY_TOKEN)),
+    __param(2, (0, common_1.Inject)(domain_1.OAUTH_TOKEN_REPOSITORY_TOKEN)),
+    __param(3, (0, common_1.Inject)(domain_1.OAUTH_CLIENT_REPOSITORY_TOKEN)),
+    __param(4, (0, common_1.Inject)(token_service_1.TOKEN_SERVICE_TOKEN)),
+    __metadata("design:paramtypes", [Object, Object, Object, Object, Object])
+], RefreshTokenAction);
+//# sourceMappingURL=refresh-token.action.js.map

package/dist/server/auth/application/actions/auth/refresh-token.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.action.js","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/refresh-token.action.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA2E;AAE3E,4CASyB;AAEzB,6DAAyD;AACzD,6DAGmC;AACnC,iDAAuD;AACvD,sEAAkE;AAG3D,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAGV;IAEA;IAEA;IAEA;IAEA;IAVnB,YAEmB,kBAAsC,EAEtC,iBAAwC,EAExC,oBAA0C,EAE1C,qBAA4C,EAE5C,YAA0B;QAR1B,uBAAkB,GAAlB,kBAAkB,CAAoB;QAEtC,sBAAiB,GAAjB,iBAAiB,CAAuB;QAExC,yBAAoB,GAApB,oBAAoB,CAAsB;QAE1C,0BAAqB,GAArB,qBAAqB,CAAuB;QAE5C,iBAAY,GAAZ,YAAY,CAAc;IAC1C,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,GAAoB;QAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAG9D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAGhE,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAGvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAGvE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,qBAAqB,CACvD,OAAO,CAAC,MAAM,EACd,WAAW,CAAC,QAAQ,CACrB,CAAC;QAGF,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAGvC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAC9D,IAAI,EACJ,OAAO,EACP,MAAM,EACN,WAAW,CAAC,EAAE,CACf,CAAC;QAEF,OAAO,IAAI,8BAAa,CAAC;YACvB,WAAW;YACX,YAAY;YACZ,SAAS,EAAE,MAAM,CAAC,mBAAmB;YACrC,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;IACL,CAAC;IAEO,sBAAsB,CAAC,YAAoB;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACtD,MAAM,IAAI,8BAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,YAAoB;QAC/C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CACpE,YAAY,CACb,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,8BAAqB,CAAC,6BAA6B,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,8BAAqB,CAAC,0BAA0B,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,WAAuB,EACvB,OAA8C;QAI9C,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAErE,MAAM,IAAI,8BAAqB,CAC7B,kEAAkE,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,MAAc,EAAE,SAAiB;QAEpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjE,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QAGD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC7E,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAClC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,SAAiB;QACtD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAEjE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,8BAAqB,CAAC,oCAAoC,CAAC,CAAC;QACxE,CAAC;QAGD,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE3C,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,MAAc,EAAE,QAAgB;QAElE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,oBAAoB,CAAC,CAAC;QACxD,CAAC;QAGD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,WAAuB;QAElD,WAAW,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,IAAS,EACT,OAAY,EACZ,MAAW,EACX,oBAA4B;QAG5B,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC;YACxD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QAGH,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC;YAC1D,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,OAAO,CAAC,EAAE;SACtB,CAAC,CAAC;QAGH,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAG/D,MAAM,IAAI,CAAC,gBAAgB,CACzB,YAAY,EACZ,IAAI,EACJ,OAAO,EACP,MAAM,EACN,oBAAoB,CACrB,CAAC;QAEF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,WAAmB,EACnB,IAAS,EACT,OAAY,EACZ,MAAW;QAEX,MAAM,oBAAoB,GAAG,IAAI,IAAI,EAAE,CAAC;QACxC,oBAAoB,CAAC,UAAU,CAC7B,oBAAoB,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAC/D,CAAC;QAEF,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CACpC,IAAI,wBAAU,CAAC;YACb,SAAS,EAAE,sBAAc,CAAC,YAAY;YACtC,KAAK,EAAE,WAAW;YAClB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,oBAAoB;SAChC,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,YAAoB,EACpB,IAAS,EACT,OAAY,EACZ,MAAW,EACX,oBAA4B;QAE5B,MAAM,qBAAqB,GAAG,IAAI,IAAI,EAAE,CAAC;QACzC,qBAAqB,CAAC,UAAU,CAC9B,qBAAqB,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,oBAAoB,CACjE,CAAC;QAEF,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CACpC,IAAI,wBAAU,CAAC;YACb,SAAS,EAAE,sBAAc,CAAC,aAAa;YACvC,KAAK,EAAE,YAAY;YACnB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,qBAAqB;YAChC,oBAAoB;SACrB,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAA;AAtOY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,mCAA0B,CAAC,CAAA;IAElC,WAAA,IAAA,eAAM,EAAC,sCAA6B,CAAC,CAAA;IAErC,WAAA,IAAA,eAAM,EAAC,qCAA4B,CAAC,CAAA;IAEpC,WAAA,IAAA,eAAM,EAAC,sCAA6B,CAAC,CAAA;IAErC,WAAA,IAAA,eAAM,EAAC,mCAAmB,CAAC,CAAA;;GAVnB,kBAAkB,CAsO9B"}

package/dist/server/auth/application/actions/auth/register.action.d.ts

@@ -0,0 +1,16 @@
+import { EventEmitter2 } from '@nestjs/event-emitter';
+import { AuthUser } from '../../../domain/entities/auth-user';
+import { AuthUserRepository, EmailVerificationTokenRepository } from '../../../domain/repositories';
+import { RegisterDto } from '../../dto/register.dto';
+import { HashService, TokenService } from '../../ports';
+export declare class RegisterAction {
+    private readonly authUserRepository;
+    private readonly emailTokenRepository;
+    private readonly hashService;
+    private readonly tokenService;
+    private readonly eventEmitter;
+    constructor(authUserRepository: AuthUserRepository, emailTokenRepository: EmailVerificationTokenRepository, hashService: HashService, tokenService: TokenService, eventEmitter: EventEmitter2);
+    handle(dto: RegisterDto): Promise<AuthUser>;
+    private sendVerificationEmail;
+}
+//# sourceMappingURL=register.action.d.ts.map

package/dist/server/auth/application/actions/auth/register.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.action.d.ts","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/register.action.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAC9D,OAAO,EAGL,kBAAkB,EAClB,gCAAgC,EACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAEL,WAAW,EAEX,YAAY,EACb,MAAM,aAAa,CAAC;AAIrB,qBACa,cAAc;IAGvB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAErC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAPZ,kBAAkB,EAAE,kBAAkB,EAEtC,oBAAoB,EAAE,gCAAgC,EAEtD,WAAW,EAAE,WAAW,EAExB,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,aAAa;IAMxC,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;YAiCnC,qBAAqB;CAuBpC"}

package/dist/server/auth/application/actions/auth/register.action.js

@@ -0,0 +1,83 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RegisterAction = void 0;
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const auth_user_1 = require("../../../domain/entities/auth-user");
+const repositories_1 = require("../../../domain/repositories");
+const ports_1 = require("../../ports");
+const enums_1 = require("../../../domain/enums");
+const mail_1 = require("../../../../common/events/mail");
+let RegisterAction = class RegisterAction {
+    authUserRepository;
+    emailTokenRepository;
+    hashService;
+    tokenService;
+    eventEmitter;
+    constructor(authUserRepository, emailTokenRepository, hashService, tokenService, eventEmitter) {
+        this.authUserRepository = authUserRepository;
+        this.emailTokenRepository = emailTokenRepository;
+        this.hashService = hashService;
+        this.tokenService = tokenService;
+        this.eventEmitter = eventEmitter;
+    }
+    async handle(dto) {
+        const existingUser = await this.authUserRepository.findByEmail(dto.email);
+        if (existingUser) {
+            throw new common_1.ConflictException('Email đã được sử dụng');
+        }
+        if (dto.username) {
+            const existingUsername = await this.authUserRepository.findByUsername(dto.username);
+            if (existingUsername) {
+                throw new common_1.ConflictException('Username đã được sử dụng');
+            }
+        }
+        const passwordHash = await this.hashService.hash(dto.password);
+        const user = new auth_user_1.AuthUser({
+            email: dto.email,
+            username: dto.username,
+            displayName: dto.displayName || dto.username || dto.email.split('@')[0],
+            passwordHash,
+            status: enums_1.AuthUserStatus.PENDING_VERIFICATION,
+            failedLoginAttempts: 0,
+            twoFactorEnabled: false,
+            passwordChangedAt: new Date(),
+        });
+        const savedUser = await this.authUserRepository.create(user);
+        await this.sendVerificationEmail(savedUser);
+        return savedUser;
+    }
+    async sendVerificationEmail(user) {
+        const verificationToken = this.tokenService.generateEmailVerificationToken(user.id);
+        const tokenExpiry = new Date();
+        tokenExpiry.setHours(tokenExpiry.getHours() + 24);
+        await this.emailTokenRepository.create({
+            userId: user.id,
+            token: verificationToken,
+            expiresAt: tokenExpiry,
+        });
+        this.eventEmitter.emit(mail_1.MailEvents.SEND_VERIFICATION, new mail_1.SendVerificationEmailEvent(user.email, verificationToken, user.displayName));
+    }
+};
+exports.RegisterAction = RegisterAction;
+exports.RegisterAction = RegisterAction = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(repositories_1.AUTH_USER_REPOSITORY_TOKEN)),
+    __param(1, (0, common_1.Inject)(repositories_1.EMAIL_VERIFICATION_TOKEN_REPOSITORY_TOKEN)),
+    __param(2, (0, common_1.Inject)(ports_1.HASH_SERVICE_TOKEN)),
+    __param(3, (0, common_1.Inject)(ports_1.TOKEN_SERVICE_TOKEN)),
+    __metadata("design:paramtypes", [Object, Object, Object, Object, event_emitter_1.EventEmitter2])
+], RegisterAction);
+//# sourceMappingURL=register.action.js.map

package/dist/server/auth/application/actions/auth/register.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.action.js","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/register.action.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAuE;AACvE,yDAAsD;AAEtD,kEAA8D;AAC9D,+DAKsC;AAEtC,uCAKqB;AACrB,iDAAuD;AACvD,yDAAwF;AAGjF,IAAM,cAAc,GAApB,MAAM,cAAc;IAGN;IAEA;IAEA;IAEA;IACA;IATnB,YAEmB,kBAAsC,EAEtC,oBAAsD,EAEtD,WAAwB,EAExB,YAA0B,EAC1B,YAA2B;QAP3B,uBAAkB,GAAlB,kBAAkB,CAAoB;QAEtC,yBAAoB,GAApB,oBAAoB,CAAkC;QAEtD,gBAAW,GAAX,WAAW,CAAa;QAExB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,iBAAY,GAAZ,YAAY,CAAe;IAC3C,CAAC;IAKJ,KAAK,CAAC,MAAM,CAAC,GAAgB;QAC3B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1E,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,0BAAiB,CAAC,uBAAuB,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpF,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,IAAI,0BAAiB,CAAC,0BAA0B,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/D,MAAM,IAAI,GAAG,IAAI,oBAAQ,CAAC;YACxB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACvE,YAAY;YACZ,MAAM,EAAE,sBAAc,CAAC,oBAAoB;YAC3C,mBAAmB,EAAE,CAAC;YACtB,gBAAgB,EAAE,KAAK;YACvB,iBAAiB,EAAE,IAAI,IAAI,EAAE;SAC9B,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7D,MAAM,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAE5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,IAAc;QAChD,MAAM,iBAAiB,GAAG,IAAI,CAAC,YAAY,CAAC,8BAA8B,CACxE,IAAI,CAAC,EAAE,CACR,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QAElD,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;YACrC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,iBAAiB;YACxB,SAAS,EAAE,WAAW;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,IAAI,CACpB,iBAAU,CAAC,iBAAiB,EAC5B,IAAI,iCAA0B,CAC5B,IAAI,CAAC,KAAK,EACV,iBAAiB,EACjB,IAAI,CAAC,WAAW,CACjB,CACF,CAAC;IACJ,CAAC;CACF,CAAA;AAxEY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,yCAA0B,CAAC,CAAA;IAElC,WAAA,IAAA,eAAM,EAAC,wDAAyC,CAAC,CAAA;IAEjD,WAAA,IAAA,eAAM,EAAC,0BAAkB,CAAC,CAAA;IAE1B,WAAA,IAAA,eAAM,EAAC,2BAAmB,CAAC,CAAA;qEAEG,6BAAa;GAVnC,cAAc,CAwE1B"}

package/dist/server/auth/application/actions/auth/resend-verification-email.action.d.ts

@@ -0,0 +1,12 @@
+import { EventEmitter2 } from '@nestjs/event-emitter';
+import { EmailVerificationTokenRepository, AuthUserRepository } from '../../../domain/repositories';
+import { TokenService } from '../../ports/token.service';
+export declare class ResendVerificationEmailAction {
+    private readonly authUserRepository;
+    private readonly emailTokenRepository;
+    private readonly tokenService;
+    private readonly eventEmitter;
+    constructor(authUserRepository: AuthUserRepository, emailTokenRepository: EmailVerificationTokenRepository, tokenService: TokenService, eventEmitter: EventEmitter2);
+    handle(userId: number): Promise<void>;
+}
+//# sourceMappingURL=resend-verification-email.action.d.ts.map

package/dist/server/auth/application/actions/auth/resend-verification-email.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend-verification-email.action.d.ts","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/resend-verification-email.action.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAEL,gCAAgC,EAEhC,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEL,YAAY,EACb,MAAM,2BAA2B,CAAC;AAGnC,qBACa,6BAA6B;IAGtC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAErC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBALZ,kBAAkB,EAAE,kBAAkB,EAEtC,oBAAoB,EAAE,gCAAgC,EAEtD,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,aAAa;IAGxC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAoC5C"}

package/dist/server/auth/application/actions/auth/resend-verification-email.action.js

@@ -0,0 +1,61 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResendVerificationEmailAction = void 0;
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const repositories_1 = require("../../../domain/repositories");
+const token_service_1 = require("../../ports/token.service");
+const mail_1 = require("../../../../common/events/mail");
+let ResendVerificationEmailAction = class ResendVerificationEmailAction {
+    authUserRepository;
+    emailTokenRepository;
+    tokenService;
+    eventEmitter;
+    constructor(authUserRepository, emailTokenRepository, tokenService, eventEmitter) {
+        this.authUserRepository = authUserRepository;
+        this.emailTokenRepository = emailTokenRepository;
+        this.tokenService = tokenService;
+        this.eventEmitter = eventEmitter;
+    }
+    async handle(userId) {
+        const user = await this.authUserRepository.findById(userId);
+        console.log(user);
+        if (!user) {
+            throw new common_1.NotFoundException('User không tồn tại');
+        }
+        if (user.isEmailVerified) {
+            throw new Error('Email đã được xác thực');
+        }
+        await this.emailTokenRepository.deleteByUserId(userId);
+        const verificationToken = this.tokenService.generateEmailVerificationToken(user.id);
+        const tokenExpiry = new Date();
+        tokenExpiry.setHours(tokenExpiry.getHours() + 24);
+        await this.emailTokenRepository.create({
+            userId: user.id,
+            token: verificationToken,
+            expiresAt: tokenExpiry,
+        });
+        this.eventEmitter.emit(mail_1.MailEvents.SEND_VERIFICATION, new mail_1.SendVerificationEmailEvent(user.email, verificationToken, user.displayName));
+    }
+};
+exports.ResendVerificationEmailAction = ResendVerificationEmailAction;
+exports.ResendVerificationEmailAction = ResendVerificationEmailAction = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(repositories_1.AUTH_USER_REPOSITORY_TOKEN)),
+    __param(1, (0, common_1.Inject)(repositories_1.EMAIL_VERIFICATION_TOKEN_REPOSITORY_TOKEN)),
+    __param(2, (0, common_1.Inject)(token_service_1.TOKEN_SERVICE_TOKEN)),
+    __metadata("design:paramtypes", [Object, Object, Object, event_emitter_1.EventEmitter2])
+], ResendVerificationEmailAction);
+//# sourceMappingURL=resend-verification-email.action.js.map

package/dist/server/auth/application/actions/auth/resend-verification-email.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend-verification-email.action.js","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/resend-verification-email.action.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAuE;AACvE,yDAAsD;AAEtD,+DAKsC;AACtC,6DAGmC;AACnC,yDAAwF;AAGjF,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IAGrB;IAEA;IAEA;IACA;IAPnB,YAEmB,kBAAsC,EAEtC,oBAAsD,EAEtD,YAA0B,EAC1B,YAA2B;QAL3B,uBAAkB,GAAlB,kBAAkB,CAAoB;QAEtC,yBAAoB,GAApB,oBAAoB,CAAkC;QAEtD,iBAAY,GAAZ,YAAY,CAAc;QAC1B,iBAAY,GAAZ,YAAY,CAAe;IAC3C,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACjB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,0BAAiB,CAAC,oBAAoB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAGD,MAAM,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAGvD,MAAM,iBAAiB,GAAG,IAAI,CAAC,YAAY,CAAC,8BAA8B,CACxE,IAAI,CAAC,EAAE,CACR,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QAElD,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;YACrC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,iBAAiB;YACxB,SAAS,EAAE,WAAW;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,IAAI,CACpB,iBAAU,CAAC,iBAAiB,EAC5B,IAAI,iCAA0B,CAC5B,IAAI,CAAC,KAAK,EACV,iBAAiB,EACjB,IAAI,CAAC,WAAW,CACjB,CACF,CAAC;IACJ,CAAC;CACF,CAAA;AA/CY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,yCAA0B,CAAC,CAAA;IAElC,WAAA,IAAA,eAAM,EAAC,wDAAyC,CAAC,CAAA;IAEjD,WAAA,IAAA,eAAM,EAAC,mCAAmB,CAAC,CAAA;6DAEG,6BAAa;GARnC,6BAA6B,CA+CzC"}

package/dist/server/auth/application/actions/auth/reset-password.action.d.ts

@@ -0,0 +1,10 @@
+import { AuthUserRepository } from '../../../domain/repositories/auth-user.repository';
+import { ResetPasswordDto } from '../../dto/reset-password.dto';
+import { HashService } from '../../ports/hash.service';
+export declare class ResetPasswordAction {
+    private readonly authUserRepository;
+    private readonly hashService;
+    constructor(authUserRepository: AuthUserRepository, hashService: HashService);
+    handle(dto: ResetPasswordDto): Promise<void>;
+}
+//# sourceMappingURL=reset-password.action.d.ts.map

package/dist/server/auth/application/actions/auth/reset-password.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-password.action.d.ts","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/reset-password.action.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,kBAAkB,EACnB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAEL,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAElC,qBACa,mBAAmB;IAG5B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAFX,kBAAkB,EAAE,kBAAkB,EAEtC,WAAW,EAAE,WAAW;IAGrC,MAAM,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;CAyBnD"}

package/dist/server/auth/application/actions/auth/reset-password.action.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResetPasswordAction = void 0;
+const common_1 = require("@nestjs/common");
+const auth_user_repository_1 = require("../../../domain/repositories/auth-user.repository");
+const hash_service_1 = require("../../ports/hash.service");
+let ResetPasswordAction = class ResetPasswordAction {
+    authUserRepository;
+    hashService;
+    constructor(authUserRepository, hashService) {
+        this.authUserRepository = authUserRepository;
+        this.hashService = hashService;
+    }
+    async handle(dto) {
+        const user = await this.authUserRepository.findByPasswordResetToken(dto.token);
+        if (!user) {
+            throw new common_1.NotFoundException('Token không hợp lệ hoặc đã hết hạn');
+        }
+        console.log('User found for password reset:', user.id, user.email, user.passwordResetTokenExpiry);
+        if (!user.passwordResetTokenExpiry ||
+            user.passwordResetTokenExpiry < new Date()) {
+            throw new common_1.BadRequestException('Token đã hết hạn');
+        }
+        const passwordHash = await this.hashService.hash(dto.password);
+        user.passwordHash = passwordHash;
+        user.passwordChangedAt = new Date();
+        user.passwordResetToken = null;
+        user.passwordResetTokenExpiry = null;
+        user.resetFailedAttempts();
+        await this.authUserRepository.save(user);
+    }
+};
+exports.ResetPasswordAction = ResetPasswordAction;
+exports.ResetPasswordAction = ResetPasswordAction = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(auth_user_repository_1.AUTH_USER_REPOSITORY_TOKEN)),
+    __param(1, (0, common_1.Inject)(hash_service_1.HASH_SERVICE_TOKEN)),
+    __metadata("design:paramtypes", [Object, Object])
+], ResetPasswordAction);
+//# sourceMappingURL=reset-password.action.js.map

package/dist/server/auth/application/actions/auth/reset-password.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-password.action.js","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/reset-password.action.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAKwB;AAExB,4FAG2D;AAE3D,2DAGkC;AAG3B,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAGX;IAEA;IAJnB,YAEmB,kBAAsC,EAEtC,WAAwB;QAFxB,uBAAkB,GAAlB,kBAAkB,CAAoB;QAEtC,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,GAAqB;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,wBAAwB,CACjE,GAAG,CAAC,KAAK,CACV,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,0BAAiB,CAAC,oCAAoC,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAClG,IACE,CAAC,IAAI,CAAC,wBAAwB;YAC9B,IAAI,CAAC,wBAAwB,GAAG,IAAI,IAAI,EAAE,EAC1C,CAAC;YACD,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,iBAAiB,GAAG,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC;QACrC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAE3B,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF,CAAA;AAjCY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,iDAA0B,CAAC,CAAA;IAElC,WAAA,IAAA,eAAM,EAAC,iCAAkB,CAAC,CAAA;;GAJlB,mBAAmB,CAiC/B"}

package/dist/server/auth/application/actions/auth/update-profile.action.d.ts

@@ -0,0 +1,8 @@
+import { UpdateProfileDto } from '../../dto/update-profile.dto';
+import { AuthUserRepository } from '../../../domain';
+export declare class UpdateProfileAction {
+    private readonly authUserRepository;
+    constructor(authUserRepository: AuthUserRepository);
+    handle(userId: number, updateDto: UpdateProfileDto): Promise<import("../../../domain").AuthUser>;
+}
+//# sourceMappingURL=update-profile.action.d.ts.map

package/dist/server/auth/application/actions/auth/update-profile.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-profile.action.d.ts","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/update-profile.action.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAA8B,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEjF,qBACa,mBAAmB;IAG5B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;gBAAlB,kBAAkB,EAAE,kBAAkB;IAGnD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB;CA4CzD"}

package/dist/server/auth/application/actions/auth/update-profile.action.js

@@ -0,0 +1,63 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateProfileAction = void 0;
+const common_1 = require("@nestjs/common");
+const domain_1 = require("../../../domain");
+let UpdateProfileAction = class UpdateProfileAction {
+    authUserRepository;
+    constructor(authUserRepository) {
+        this.authUserRepository = authUserRepository;
+    }
+    async handle(userId, updateDto) {
+        const user = await this.authUserRepository.findById(userId);
+        if (!user) {
+            throw new common_1.NotFoundException('User not found');
+        }
+        if (updateDto.email && updateDto.email !== user.email) {
+            const existingUser = await this.authUserRepository.findByEmail(updateDto.email);
+            if (existingUser) {
+                throw new common_1.ConflictException('Email already in use');
+            }
+        }
+        if (updateDto.username && updateDto.username !== user.username) {
+            const existingUser = await this.authUserRepository.findByUsername(updateDto.username);
+            if (existingUser) {
+                throw new common_1.ConflictException('Username already in use');
+            }
+        }
+        if (updateDto.displayName !== undefined) {
+            user.displayName = updateDto.displayName;
+        }
+        if (updateDto.username !== undefined) {
+            user.username = updateDto.username;
+        }
+        if (updateDto.email !== undefined) {
+            user.email = updateDto.email;
+            user.emailVerifiedAt = null;
+        }
+        if (updateDto.avatar !== undefined) {
+            user.avatar = updateDto.avatar;
+        }
+        const updatedUser = await this.authUserRepository.save(user);
+        return updatedUser;
+    }
+};
+exports.UpdateProfileAction = UpdateProfileAction;
+exports.UpdateProfileAction = UpdateProfileAction = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(domain_1.AUTH_USER_REPOSITORY_TOKEN)),
+    __metadata("design:paramtypes", [Object])
+], UpdateProfileAction);
+//# sourceMappingURL=update-profile.action.js.map

package/dist/server/auth/application/actions/auth/update-profile.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-profile.action.js","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/update-profile.action.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA0F;AAE1F,4CAAiF;AAG1E,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAGX;IAFnB,YAEmB,kBAAsC;QAAtC,uBAAkB,GAAlB,kBAAkB,CAAoB;IACtD,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,SAA2B;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE5D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,0BAAiB,CAAC,gBAAgB,CAAC,CAAC;QAChD,CAAC;QAGD,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YACtD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAChF,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,0BAAiB,CAAC,sBAAsB,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAGD,IAAI,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtF,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,0BAAiB,CAAC,yBAAyB,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAGD,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;QAC3C,CAAC;QACD,IAAI,SAAS,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QACrC,CAAC;QACD,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;YAE7B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QACjC,CAAC;QAGD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7D,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAA;AAlDY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,mCAA0B,CAAC,CAAA;;GAF1B,mBAAmB,CAkD/B"}

package/dist/server/auth/application/actions/auth/verify-email.action.d.ts

@@ -0,0 +1,9 @@
+import { EmailVerificationTokenRepository, AuthUserRepository } from '../../../domain/repositories';
+import { VerifyEmailDto } from '../../dto/verify-email.dto';
+export declare class VerifyEmailAction {
+    private readonly tokenRepository;
+    private readonly authUserRepository;
+    constructor(tokenRepository: EmailVerificationTokenRepository, authUserRepository: AuthUserRepository);
+    handle(dto: VerifyEmailDto): Promise<void>;
+}
+//# sourceMappingURL=verify-email.action.d.ts.map

package/dist/server/auth/application/actions/auth/verify-email.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-email.action.d.ts","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/verify-email.action.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,gCAAgC,EAEhC,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAG5D,qBACa,iBAAiB;IAG1B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAEhC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;gBAFlB,eAAe,EAAE,gCAAgC,EAEjD,kBAAkB,EAAE,kBAAkB;IAGnD,MAAM,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;CAyBjD"}

package/dist/server/auth/application/actions/auth/verify-email.action.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerifyEmailAction = void 0;
+const common_1 = require("@nestjs/common");
+const repositories_1 = require("../../../domain/repositories");
+const enums_1 = require("../../../domain/enums");
+let VerifyEmailAction = class VerifyEmailAction {
+    tokenRepository;
+    authUserRepository;
+    constructor(tokenRepository, authUserRepository) {
+        this.tokenRepository = tokenRepository;
+        this.authUserRepository = authUserRepository;
+    }
+    async handle(dto) {
+        const tokenRecord = await this.tokenRepository.findByToken(dto.token);
+        if (!tokenRecord) {
+            throw new common_1.NotFoundException('Token không hợp lệ hoặc đã hết hạn');
+        }
+        if (tokenRecord.isExpired()) {
+            await this.tokenRepository.delete(tokenRecord.id);
+            throw new common_1.NotFoundException('Token đã hết hạn');
+        }
+        const user = await this.authUserRepository.findById(tokenRecord.userId);
+        if (!user) {
+            throw new common_1.NotFoundException('User không tồn tại');
+        }
+        user.verifyEmail();
+        if (user.status === enums_1.AuthUserStatus.PENDING_VERIFICATION) {
+            user.status = enums_1.AuthUserStatus.ACTIVE;
+        }
+        await this.authUserRepository.save(user);
+        await this.tokenRepository.delete(tokenRecord.id);
+    }
+};
+exports.VerifyEmailAction = VerifyEmailAction;
+exports.VerifyEmailAction = VerifyEmailAction = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(repositories_1.EMAIL_VERIFICATION_TOKEN_REPOSITORY_TOKEN)),
+    __param(1, (0, common_1.Inject)(repositories_1.AUTH_USER_REPOSITORY_TOKEN)),
+    __metadata("design:paramtypes", [Object, Object])
+], VerifyEmailAction);
+//# sourceMappingURL=verify-email.action.js.map

package/dist/server/auth/application/actions/auth/verify-email.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-email.action.js","sourceRoot":"","sources":["../../../../../../src/server/auth/application/actions/auth/verify-email.action.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAuE;AAEvE,+DAKsC;AAEtC,iDAAuD;AAGhD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAGT;IAEA;IAJnB,YAEmB,eAAiD,EAEjD,kBAAsC;QAFtC,oBAAe,GAAf,eAAe,CAAkC;QAEjD,uBAAkB,GAAlB,kBAAkB,CAAoB;IACtD,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,GAAmB;QAC9B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,0BAAiB,CAAC,oCAAoC,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAClD,MAAM,IAAI,0BAAiB,CAAC,kBAAkB,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,0BAAiB,CAAC,oBAAoB,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnB,IAAI,IAAI,CAAC,MAAM,KAAK,sBAAc,CAAC,oBAAoB,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,GAAG,sBAAc,CAAC,MAAM,CAAC;QACtC,CAAC;QAED,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;CACF,CAAA;AAjCY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,wDAAyC,CAAC,CAAA;IAEjD,WAAA,IAAA,eAAM,EAAC,yCAA0B,CAAC,CAAA;;GAJ1B,iBAAiB,CAiC7B"}

package/dist/server/auth/application/actions/index.d.ts

@@ -0,0 +1,5 @@
+export * from './auth';
+export * from './session';
+export * from './two-factor';
+export * from './social';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/auth/application/actions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/application/actions/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC"}