@udhuong/admin-core 0.1.1 → 0.1.3

package/dist/server/auth/infrastructure/services/authorization-code.service.js

@@ -0,0 +1,176 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationCodeService = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const crypto = __importStar(require("crypto"));
+const oauth_authorization_code_entity_1 = require("../persistence/entities/oauth-authorization-code.entity");
+const oauth_client_entity_1 = require("../persistence/entities/oauth-client.entity");
+const oauth_scope_entity_1 = require("../persistence/entities/oauth-scope.entity");
+let AuthorizationCodeService = class AuthorizationCodeService {
+    authCodeRepository;
+    clientRepository;
+    scopeRepository;
+    constructor(authCodeRepository, clientRepository, scopeRepository) {
+        this.authCodeRepository = authCodeRepository;
+        this.clientRepository = clientRepository;
+        this.scopeRepository = scopeRepository;
+    }
+    async generateAuthorizationCode(clientCode, userId, redirectUri, scopes, codeChallenge, codeChallengeMethod) {
+        const client = await this.clientRepository.findOne({
+            where: { clientCode: clientCode, isActive: true },
+        });
+        if (!client) {
+            throw new common_1.UnauthorizedException('Invalid client');
+        }
+        const allowedUris = Array.isArray(client.redirectUris) ? client.redirectUris : [];
+        if (!allowedUris.includes(redirectUri)) {
+            throw new common_1.BadRequestException('Invalid redirect URI');
+        }
+        const requestedScopes = await this.scopeRepository.find({
+            where: scopes.map(scope => ({ name: scope })),
+        });
+        if (requestedScopes.length !== scopes.length) {
+            throw new common_1.BadRequestException('Invalid scopes requested');
+        }
+        const code = this.generateSecureCode();
+        const expiresAt = new Date(Date.now() + 10 * 60 * 1000);
+        const authCode = this.authCodeRepository.create({
+            code,
+            clientId: client.id,
+            userId: userId,
+            redirectUri: redirectUri,
+            scopes: scopes,
+            expiresAt: expiresAt,
+            codeChallenge: codeChallenge,
+            codeChallengeMethod: codeChallengeMethod,
+        });
+        await this.authCodeRepository.save(authCode);
+        return code;
+    }
+    async exchangeAuthorizationCode(code, clientCode, clientSecret, redirectUri, codeVerifier) {
+        const authCode = await this.authCodeRepository.findOne({
+            where: { code, usedAt: (0, typeorm_2.IsNull)() },
+            relations: ['client', 'user'],
+        });
+        if (!authCode) {
+            throw new common_1.UnauthorizedException('Invalid or expired authorization code');
+        }
+        if (new Date() > authCode.expiresAt) {
+            throw new common_1.UnauthorizedException('Authorization code expired');
+        }
+        const client = await this.clientRepository.findOne({
+            where: { clientCode: clientCode },
+        });
+        if (!client || client.id !== authCode.clientId) {
+            throw new common_1.UnauthorizedException('Invalid client');
+        }
+        if (client.confidential) {
+            const isValidSecret = await this.validateClientSecret(client.clientSecret, clientSecret);
+            if (!isValidSecret) {
+                throw new common_1.UnauthorizedException('Invalid client credentials');
+            }
+        }
+        if (authCode.redirectUri !== redirectUri) {
+            throw new common_1.BadRequestException('Redirect URI mismatch');
+        }
+        if (authCode.codeChallenge) {
+            if (!codeVerifier) {
+                throw new common_1.BadRequestException('Code verifier required');
+            }
+            const isValidVerifier = this.validatePKCE(codeVerifier, authCode.codeChallenge, authCode.codeChallengeMethod);
+            if (!isValidVerifier) {
+                throw new common_1.UnauthorizedException('Invalid code verifier');
+            }
+        }
+        authCode.usedAt = new Date();
+        await this.authCodeRepository.save(authCode);
+        return {
+            userId: authCode.userId,
+            clientId: authCode.clientId,
+            scopes: authCode.scopes,
+        };
+    }
+    validatePKCE(verifier, challenge, method) {
+        if (method === 'plain') {
+            return verifier === challenge;
+        }
+        const hash = crypto
+            .createHash('sha256')
+            .update(verifier)
+            .digest('base64url');
+        return hash === challenge;
+    }
+    async validateClientSecret(storedSecret, providedSecret) {
+        return storedSecret === providedSecret;
+    }
+    generateSecureCode() {
+        return crypto.randomBytes(32).toString('base64url');
+    }
+    async revokeUserAuthorizationCodes(userId) {
+        await this.authCodeRepository.update({ userId: userId, usedAt: (0, typeorm_2.IsNull)() }, { usedAt: new Date() });
+    }
+    async cleanupExpiredCodes() {
+        const now = new Date();
+        await this.authCodeRepository.delete({
+            expiresAt: (0, typeorm_2.LessThan)(now),
+        });
+    }
+};
+exports.AuthorizationCodeService = AuthorizationCodeService;
+exports.AuthorizationCodeService = AuthorizationCodeService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_1.InjectRepository)(oauth_authorization_code_entity_1.OAuthAuthorizationCodeEntity)),
+    __param(1, (0, typeorm_1.InjectRepository)(oauth_client_entity_1.OAuthClientEntity)),
+    __param(2, (0, typeorm_1.InjectRepository)(oauth_scope_entity_1.OAuthScopeEntity)),
+    __metadata("design:paramtypes", [typeorm_2.Repository,
+        typeorm_2.Repository,
+        typeorm_2.Repository])
+], AuthorizationCodeService);
+//# sourceMappingURL=authorization-code.service.js.map

package/dist/server/auth/infrastructure/services/authorization-code.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-code.service.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/authorization-code.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAwF;AACxF,6CAAmD;AACnD,qCAAuD;AACvD,+CAAiC;AACjC,6GAAuG;AACvG,qFAAgF;AAChF,mFAA8E;AAIvE,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAGhB;IAEA;IAEA;IANnB,YAEmB,kBAA4D,EAE5D,gBAA+C,EAE/C,eAA6C;QAJ7C,uBAAkB,GAAlB,kBAAkB,CAA0C;QAE5D,qBAAgB,GAAhB,gBAAgB,CAA+B;QAE/C,oBAAe,GAAf,eAAe,CAA8B;IAC7D,CAAC;IAKJ,KAAK,CAAC,yBAAyB,CAC7B,UAAkB,EAClB,MAAc,EACd,WAAmB,EACnB,MAAgB,EAChB,aAAsB,EACtB,mBAAsC;QAGtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;SAClD,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAGD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,4BAAmB,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;QAGD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YACtD,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;SAC9C,CAAC,CAAC;QAEH,IAAI,eAAe,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,4BAAmB,CAAC,0BAA0B,CAAC,CAAC;QAC5D,CAAC;QAGD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAGxD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;YAC9C,IAAI;YACJ,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,SAAS;YACpB,aAAa,EAAE,aAAa;YAC5B,mBAAmB,EAAE,mBAA0C;SAChE,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE7C,OAAO,IAAI,CAAC;IACd,CAAC;IAKD,KAAK,CAAC,yBAAyB,CAC7B,IAAY,EACZ,UAAkB,EAClB,YAAoB,EACpB,WAAmB,EACnB,YAAqB;QAOrB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YACrD,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAA,gBAAM,GAAE,EAAE;YACjC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,8BAAqB,CAAC,uCAAuC,CAAC,CAAC;QAC3E,CAAC;QAGD,IAAI,IAAI,IAAI,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,8BAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QAGD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAGD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACnD,MAAM,CAAC,YAAY,EACnB,YAAY,CACb,CAAC;YACF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,8BAAqB,CAAC,4BAA4B,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAGD,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,CAAC;QACzD,CAAC;QAGD,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC3B,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,4BAAmB,CAAC,wBAAwB,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,CACvC,YAAY,EACZ,QAAQ,CAAC,aAAa,EACtB,QAAQ,CAAC,mBAAuC,CACjD,CAAC;YAEF,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAGD,QAAQ,CAAC,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE7C,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC;IACJ,CAAC;IAKO,YAAY,CAClB,QAAgB,EAChB,SAAiB,EACjB,MAAwB;QAExB,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,OAAO,QAAQ,KAAK,SAAS,CAAC;QAChC,CAAC;QAGD,MAAM,IAAI,GAAG,MAAM;aAChB,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC,WAAW,CAAC,CAAC;QAEvB,OAAO,IAAI,KAAK,SAAS,CAAC;IAC5B,CAAC;IAKO,KAAK,CAAC,oBAAoB,CAChC,YAAoB,EACpB,cAAsB;QAGtB,OAAO,YAAY,KAAK,cAAc,CAAC;IACzC,CAAC;IAKO,kBAAkB;QACxB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAKD,KAAK,CAAC,4BAA4B,CAAC,MAAc;QAC/C,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAClC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAA,gBAAM,GAAE,EAAE,EACpC,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,CACvB,CAAC;IACJ,CAAC;IAKD,KAAK,CAAC,mBAAmB;QACvB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;YACnC,SAAS,EAAE,IAAA,kBAAQ,EAAC,GAAG,CAAC;SACzB,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA9MY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,0BAAgB,EAAC,8DAA4B,CAAC,CAAA;IAE9C,WAAA,IAAA,0BAAgB,EAAC,uCAAiB,CAAC,CAAA;IAEnC,WAAA,IAAA,0BAAgB,EAAC,qCAAgB,CAAC,CAAA;qCAHE,oBAAU;QAEZ,oBAAU;QAEX,oBAAU;GAPnC,wBAAwB,CA8MpC"}

package/dist/server/auth/infrastructure/services/bcrypt-hash.service.d.ts

@@ -0,0 +1,8 @@
+import { HashService } from '../../application/ports/hash.service';
+export declare class BcryptHashService implements HashService {
+    private readonly saltRounds;
+    hash(plainText: string): Promise<string>;
+    compare(plainText: string, hashedText: string): Promise<boolean>;
+    isValidHash(hash: string): boolean;
+}
+//# sourceMappingURL=bcrypt-hash.service.d.ts.map

package/dist/server/auth/infrastructure/services/bcrypt-hash.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bcrypt-hash.service.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/bcrypt-hash.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAEnE,qBACa,iBAAkB,YAAW,WAAW;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAM;IAE3B,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIxC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAOtE,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CAInC"}

package/dist/server/auth/infrastructure/services/bcrypt-hash.service.js

@@ -0,0 +1,61 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BcryptHashService = void 0;
+const common_1 = require("@nestjs/common");
+const bcrypt = __importStar(require("bcrypt"));
+let BcryptHashService = class BcryptHashService {
+    saltRounds = 10;
+    async hash(plainText) {
+        return bcrypt.hash(plainText, this.saltRounds);
+    }
+    async compare(plainText, hashedText) {
+        return bcrypt.compare(plainText, hashedText);
+    }
+    isValidHash(hash) {
+        return /^\$2[aby]\$\d{2}\$.{53}$/.test(hash);
+    }
+};
+exports.BcryptHashService = BcryptHashService;
+exports.BcryptHashService = BcryptHashService = __decorate([
+    (0, common_1.Injectable)()
+], BcryptHashService);
+//# sourceMappingURL=bcrypt-hash.service.js.map

package/dist/server/auth/infrastructure/services/bcrypt-hash.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bcrypt-hash.service.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/bcrypt-hash.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,+CAAiC;AAI1B,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACX,UAAU,GAAG,EAAE,CAAC;IAEjC,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,UAAkB;QACjD,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC/C,CAAC;IAKD,WAAW,CAAC,IAAY;QAEtB,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;CACF,CAAA;AAlBY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;GACA,iBAAiB,CAkB7B"}

package/dist/server/auth/infrastructure/services/consent.service.d.ts

@@ -0,0 +1,19 @@
+import { Repository } from 'typeorm';
+import { OAuthClientConsentEntity, OAuthClientEntity, OAuthScopeEntity } from '../persistence/entities';
+export declare class ConsentService {
+    private readonly consentRepository;
+    private readonly clientRepository;
+    private readonly scopeRepository;
+    constructor(consentRepository: Repository<OAuthClientConsentEntity>, clientRepository: Repository<OAuthClientEntity>, scopeRepository: Repository<OAuthScopeEntity>);
+    hasUserConsented(userId: number, clientId: number, requestedScopes: string[]): Promise<boolean>;
+    getConsent(userId: number, clientId: number): Promise<OAuthClientConsentEntity | null>;
+    grantConsent(userId: number, clientId: number, scopes: string[]): Promise<OAuthClientConsentEntity>;
+    revokeConsent(userId: number, clientId: number): Promise<void>;
+    getUserConsents(userId: number): Promise<OAuthClientConsentEntity[]>;
+    revokeAllUserConsents(userId: number): Promise<void>;
+    getClientWithScopes(clientId: number, requestedScopes: string[]): Promise<{
+        client: OAuthClientEntity;
+        scopes: OAuthScopeEntity[];
+    }>;
+}
+//# sourceMappingURL=consent.service.d.ts.map

package/dist/server/auth/infrastructure/services/consent.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.service.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/consent.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAExG,qBACa,cAAc;IAGvB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAEjC,OAAO,CAAC,QAAQ,CAAC,eAAe;gBAJf,iBAAiB,EAAE,UAAU,CAAC,wBAAwB,CAAC,EAEvD,gBAAgB,EAAE,UAAU,CAAC,iBAAiB,CAAC,EAE/C,eAAe,EAAE,UAAU,CAAC,gBAAgB,CAAC;IAM1D,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EAAE,GACxB,OAAO,CAAC,OAAO,CAAC;IAqBb,UAAU,CACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC;IAcrC,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,wBAAwB,CAAC;IA8B9B,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe9D,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAgBpE,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUpD,mBAAmB,CACvB,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EAAE,GACxB,OAAO,CAAC;QACT,MAAM,EAAE,iBAAiB,CAAC;QAC1B,MAAM,EAAE,gBAAgB,EAAE,CAAC;KAC5B,CAAC;CAeH"}

package/dist/server/auth/infrastructure/services/consent.service.js

@@ -0,0 +1,121 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConsentService = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const entities_1 = require("../persistence/entities");
+let ConsentService = class ConsentService {
+    consentRepository;
+    clientRepository;
+    scopeRepository;
+    constructor(consentRepository, clientRepository, scopeRepository) {
+        this.consentRepository = consentRepository;
+        this.clientRepository = clientRepository;
+        this.scopeRepository = scopeRepository;
+    }
+    async hasUserConsented(userId, clientId, requestedScopes) {
+        const consent = await this.consentRepository.findOne({
+            where: {
+                userId: userId,
+                clientId: clientId,
+                revokedAt: null,
+            },
+        });
+        if (!consent) {
+            return false;
+        }
+        const consentedScopes = Array.isArray(consent.scopes) ? consent.scopes : [];
+        return requestedScopes.every(scope => consentedScopes.includes(scope));
+    }
+    async getConsent(userId, clientId) {
+        return this.consentRepository.findOne({
+            where: {
+                userId: userId,
+                clientId: clientId,
+                revokedAt: null,
+            },
+            relations: ['client'],
+        });
+    }
+    async grantConsent(userId, clientId, scopes) {
+        let consent = await this.consentRepository.findOne({
+            where: {
+                userId: userId,
+                clientId: clientId,
+            },
+        });
+        if (consent) {
+            consent.scopes = scopes;
+            consent.revokedAt = null;
+            consent.consentedAt = new Date();
+        }
+        else {
+            consent = this.consentRepository.create({
+                userId: userId,
+                clientId: clientId,
+                scopes: scopes,
+                consentedAt: new Date(),
+            });
+        }
+        return this.consentRepository.save(consent);
+    }
+    async revokeConsent(userId, clientId) {
+        await this.consentRepository.update({
+            userId: userId,
+            clientId: clientId,
+        }, {
+            revokedAt: new Date(),
+        });
+    }
+    async getUserConsents(userId) {
+        return this.consentRepository.find({
+            where: {
+                userId: userId,
+                revokedAt: null,
+            },
+            relations: ['client'],
+            order: {
+                consentedAt: 'DESC',
+            },
+        });
+    }
+    async revokeAllUserConsents(userId) {
+        await this.consentRepository.update({ userId: userId }, { revokedAt: new Date() });
+    }
+    async getClientWithScopes(clientId, requestedScopes) {
+        const client = await this.clientRepository.findOne({
+            where: { id: clientId },
+        });
+        if (!client) {
+            throw new common_1.NotFoundException('Client not found');
+        }
+        const scopes = await this.scopeRepository.find({
+            where: requestedScopes.map(scope => ({ name: scope })),
+        });
+        return { client, scopes };
+    }
+};
+exports.ConsentService = ConsentService;
+exports.ConsentService = ConsentService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_1.InjectRepository)(entities_1.OAuthClientConsentEntity)),
+    __param(1, (0, typeorm_1.InjectRepository)(entities_1.OAuthClientEntity)),
+    __param(2, (0, typeorm_1.InjectRepository)(entities_1.OAuthScopeEntity)),
+    __metadata("design:paramtypes", [typeorm_2.Repository,
+        typeorm_2.Repository,
+        typeorm_2.Repository])
+], ConsentService);
+//# sourceMappingURL=consent.service.js.map

package/dist/server/auth/infrastructure/services/consent.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.service.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/consent.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA+D;AAC/D,6CAAmD;AACnD,qCAAqC;AACrC,sDAAwG;AAGjG,IAAM,cAAc,GAApB,MAAM,cAAc;IAGN;IAEA;IAEA;IANnB,YAEmB,iBAAuD,EAEvD,gBAA+C,EAE/C,eAA6C;QAJ7C,sBAAiB,GAAjB,iBAAiB,CAAsC;QAEvD,qBAAgB,GAAhB,gBAAgB,CAA+B;QAE/C,oBAAe,GAAf,eAAe,CAA8B;IAC7D,CAAC;IAKJ,KAAK,CAAC,gBAAgB,CACpB,MAAc,EACd,QAAgB,EAChB,eAAyB;QAEzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;YACnD,KAAK,EAAE;gBACL,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,IAAI;aAChB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,CAAC;IAKD,KAAK,CAAC,UAAU,CACd,MAAc,EACd,QAAgB;QAEhB,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE;gBACL,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,IAAI;aAChB;YACD,SAAS,EAAE,CAAC,QAAQ,CAAC;SACtB,CAAC,CAAC;IACL,CAAC;IAKD,KAAK,CAAC,YAAY,CAChB,MAAc,EACd,QAAgB,EAChB,MAAgB;QAGhB,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE;gBACL,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,QAAQ;aACnB;SACF,CAAC,CAAC;QAEH,IAAI,OAAO,EAAE,CAAC;YAEZ,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;YACxB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YACzB,OAAO,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,CAAC;aAAM,CAAC;YAEN,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBACtC,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,IAAI,IAAI,EAAE;aACxB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAKD,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,QAAgB;QAClD,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CACjC;YACE,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;SACnB,EACD;YACE,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CACF,CAAC;IACJ,CAAC;IAKD,KAAK,CAAC,eAAe,CAAC,MAAc;QAClC,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;YACjC,KAAK,EAAE;gBACL,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,IAAI;aAChB;YACD,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,KAAK,EAAE;gBACL,WAAW,EAAE,MAAM;aACpB;SACF,CAAC,CAAC;IACL,CAAC;IAKD,KAAK,CAAC,qBAAqB,CAAC,MAAc;QACxC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CACjC,EAAE,MAAM,EAAE,MAAM,EAAE,EAClB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAC1B,CAAC;IACJ,CAAC;IAKD,KAAK,CAAC,mBAAmB,CACvB,QAAgB,EAChB,eAAyB;QAKzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,0BAAiB,CAAC,kBAAkB,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAC7C,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;SACvD,CAAC,CAAC;QAEH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;CACF,CAAA;AAvJY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,0BAAgB,EAAC,mCAAwB,CAAC,CAAA;IAE1C,WAAA,IAAA,0BAAgB,EAAC,4BAAiB,CAAC,CAAA;IAEnC,WAAA,IAAA,0BAAgB,EAAC,2BAAgB,CAAC,CAAA;qCAHC,oBAAU;QAEX,oBAAU;QAEX,oBAAU;GAPnC,cAAc,CAuJ1B"}

package/dist/server/auth/infrastructure/services/email-verification.service.d.ts

@@ -0,0 +1,11 @@
+import { Repository } from 'typeorm';
+import { EmailVerificationTokenEntity } from '../persistence/entities/email-verification-token.entity';
+export declare class EmailVerificationService {
+    private readonly tokenRepository;
+    private readonly logger;
+    constructor(tokenRepository: Repository<EmailVerificationTokenEntity>);
+    cleanupExpiredTokens(): Promise<void>;
+    cleanupUsedTokens(): Promise<void>;
+    deleteUserTokens(userId: number): Promise<void>;
+}
+//# sourceMappingURL=email-verification.service.d.ts.map

package/dist/server/auth/infrastructure/services/email-verification.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-verification.service.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/email-verification.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAyB,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,4BAA4B,EAAE,MAAM,yDAAyD,CAAC;AAEvG,qBACa,wBAAwB;IAKjC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAJlC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6C;gBAIjD,eAAe,EAAE,UAAU,CAAC,4BAA4B,CAAC;IAMtE,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAYrC,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAclC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGtD"}

package/dist/server/auth/infrastructure/services/email-verification.service.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var EmailVerificationService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailVerificationService = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const email_verification_token_entity_1 = require("../persistence/entities/email-verification-token.entity");
+let EmailVerificationService = EmailVerificationService_1 = class EmailVerificationService {
+    tokenRepository;
+    logger = new common_1.Logger(EmailVerificationService_1.name);
+    constructor(tokenRepository) {
+        this.tokenRepository = tokenRepository;
+    }
+    async cleanupExpiredTokens() {
+        const now = new Date();
+        const result = await this.tokenRepository.delete({
+            expiresAt: (0, typeorm_2.LessThan)(now),
+        });
+        this.logger.log(`Cleaned up ${result.affected || 0} expired email verification tokens`);
+    }
+    async cleanupUsedTokens() {
+        const sevenDaysAgo = new Date();
+        sevenDaysAgo.setDate(sevenDaysAgo.getDate() - 7);
+        const result = await this.tokenRepository.delete({
+            usedAt: (0, typeorm_2.LessThan)(sevenDaysAgo),
+        });
+        this.logger.log(`Cleaned up ${result.affected || 0} used email verification tokens`);
+    }
+    async deleteUserTokens(userId) {
+        await this.tokenRepository.delete({ userId });
+    }
+};
+exports.EmailVerificationService = EmailVerificationService;
+exports.EmailVerificationService = EmailVerificationService = EmailVerificationService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_1.InjectRepository)(email_verification_token_entity_1.EmailVerificationTokenEntity)),
+    __metadata("design:paramtypes", [typeorm_2.Repository])
+], EmailVerificationService);
+//# sourceMappingURL=email-verification.service.js.map

package/dist/server/auth/infrastructure/services/email-verification.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-verification.service.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/email-verification.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,6CAAmD;AACnD,qCAA4D;AAC5D,6GAAuG;AAGhG,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAKhB;IAJF,MAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IAEpE,YAEmB,eAAyD;QAAzD,oBAAe,GAAf,eAAe,CAA0C;IACzE,CAAC;IAKJ,KAAK,CAAC,oBAAoB;QACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;YAC/C,SAAS,EAAE,IAAA,kBAAQ,EAAC,GAAG,CAAC;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,QAAQ,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAC1F,CAAC;IAKD,KAAK,CAAC,iBAAiB;QACrB,MAAM,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC;QAChC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;YAC/C,MAAM,EAAE,IAAA,kBAAQ,EAAC,YAAY,CAAC;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,QAAQ,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACvF,CAAC;IAKD,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACnC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;CACF,CAAA;AAxCY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,0BAAgB,EAAC,8DAA4B,CAAC,CAAA;qCACb,oBAAU;GALnC,wBAAwB,CAwCpC"}

package/dist/server/auth/infrastructure/services/google-auth.service.d.ts

@@ -0,0 +1,11 @@
+import { ConfigService } from '@nestjs/config';
+import { SocialAuthService, SocialUserInfo } from '../../application/ports/social-auth.service';
+export declare class GoogleAuthService implements SocialAuthService {
+    private readonly configService;
+    private readonly logger;
+    private readonly client;
+    constructor(configService: ConfigService);
+    getUserInfo(accessToken: string): Promise<SocialUserInfo>;
+    verifyToken(accessToken: string): Promise<boolean>;
+}
+//# sourceMappingURL=google-auth.service.d.ts.map

package/dist/server/auth/infrastructure/services/google-auth.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-auth.service.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/google-auth.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACf,MAAM,6CAA6C,CAAC;AAOrD,qBACa,iBAAkB,YAAW,iBAAiB;IAI7C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAH1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;gBAET,aAAa,EAAE,aAAa;IAWnD,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IA8BzD,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAYzD"}

package/dist/server/auth/infrastructure/services/google-auth.service.js

@@ -0,0 +1,68 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var GoogleAuthService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GoogleAuthService = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const google_auth_library_1 = require("google-auth-library");
+const oauth_enums_1 = require("../../domain/enums/oauth.enums");
+let GoogleAuthService = GoogleAuthService_1 = class GoogleAuthService {
+    configService;
+    logger = new common_1.Logger(GoogleAuthService_1.name);
+    client;
+    constructor(configService) {
+        this.configService = configService;
+        this.client = new google_auth_library_1.OAuth2Client(this.configService.get('GOOGLE_CLIENT_ID'), this.configService.get('GOOGLE_CLIENT_SECRET'));
+    }
+    async getUserInfo(accessToken) {
+        try {
+            const ticket = await this.client.verifyIdToken({
+                idToken: accessToken,
+                audience: this.configService.get('GOOGLE_CLIENT_ID'),
+            });
+            const payload = ticket.getPayload();
+            if (!payload) {
+                throw new Error('Invalid Google token payload');
+            }
+            return {
+                providerId: payload.sub,
+                email: payload.email,
+                displayName: payload.name,
+                avatar: payload.picture,
+                provider: oauth_enums_1.SocialProvider.GOOGLE,
+            };
+        }
+        catch (error) {
+            this.logger.error('Failed to get Google user info', error);
+            throw new Error('Không thể lấy thông tin từ Google. Token có thể không hợp lệ.');
+        }
+    }
+    async verifyToken(accessToken) {
+        try {
+            await this.client.verifyIdToken({
+                idToken: accessToken,
+                audience: this.configService.get('GOOGLE_CLIENT_ID'),
+            });
+            return true;
+        }
+        catch (error) {
+            this.logger.error('Failed to verify Google token', error);
+            return false;
+        }
+    }
+};
+exports.GoogleAuthService = GoogleAuthService;
+exports.GoogleAuthService = GoogleAuthService = GoogleAuthService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [config_1.ConfigService])
+], GoogleAuthService);
+//# sourceMappingURL=google-auth.service.js.map

package/dist/server/auth/infrastructure/services/google-auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-auth.service.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/google-auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,2CAA+C;AAC/C,6DAAmD;AAKnD,gEAAgE;AAOzD,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAIC;IAHZ,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,CAAe;IAEtC,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QAEvD,IAAI,CAAC,MAAM,GAAG,IAAI,kCAAY,CAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAC1C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAC/C,CAAC;IACJ,CAAC;IAKD,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,IAAI,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC7C,OAAO,EAAE,WAAW;gBACpB,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC;aACrD,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YAED,OAAO;gBACL,UAAU,EAAE,OAAO,CAAC,GAAG;gBACvB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,WAAW,EAAE,OAAO,CAAC,IAAI;gBACzB,MAAM,EAAE,OAAO,CAAC,OAAO;gBACvB,QAAQ,EAAE,4BAAc,CAAC,MAAM;aAChC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC9B,OAAO,EAAE,WAAW;gBACpB,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC;aACrD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF,CAAA;AAzDY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAKiC,sBAAa;GAJ9C,iBAAiB,CAyD7B"}

package/dist/server/auth/infrastructure/services/index.d.ts

@@ -0,0 +1,11 @@
+export * from './bcrypt-hash.service';
+export * from './jwt-token.service';
+export * from './nodemailer-email.service';
+export * from './google-auth.service';
+export * from './authorization-code.service';
+export * from './consent.service';
+export * from './oauth-token.service';
+export * from './session.service';
+export * from './email-verification.service';
+export * from './root-account.service';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/auth/infrastructure/services/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC"}

package/dist/server/auth/infrastructure/services/index.js

@@ -0,0 +1,27 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./bcrypt-hash.service"), exports);
+__exportStar(require("./jwt-token.service"), exports);
+__exportStar(require("./nodemailer-email.service"), exports);
+__exportStar(require("./google-auth.service"), exports);
+__exportStar(require("./authorization-code.service"), exports);
+__exportStar(require("./consent.service"), exports);
+__exportStar(require("./oauth-token.service"), exports);
+__exportStar(require("./session.service"), exports);
+__exportStar(require("./email-verification.service"), exports);
+__exportStar(require("./root-account.service"), exports);
+//# sourceMappingURL=index.js.map

package/dist/server/auth/infrastructure/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,sDAAoC;AACpC,6DAA2C;AAC3C,wDAAsC;AACtC,+DAA6C;AAC7C,oDAAkC;AAClC,wDAAsC;AACtC,oDAAkC;AAClC,+DAA6C;AAC7C,yDAAuC"}