@udhuong/admin-core 0.1.1 → 0.1.3

package/dist/server/auth/infrastructure/services/jwt-token.service.d.ts

@@ -0,0 +1,41 @@
+import { JwtService } from '@nestjs/jwt';
+import { ConfigService } from '@nestjs/config';
+import { TokenService } from '../../application/ports/token.service';
+export declare class JwtTokenService implements TokenService {
+    private readonly jwtService;
+    private readonly configService;
+    constructor(jwtService: JwtService, configService: ConfigService);
+    generateAccessToken(payload: {
+        userId: number;
+        email: string;
+        roles?: string[];
+        permissions?: string[];
+    }): string;
+    generateRefreshToken(payload: {
+        userId: number;
+        sessionId: number;
+    }): string;
+    verifyAccessToken(token: string): {
+        userId: number;
+        email: string;
+        roles?: string[];
+        permissions?: string[];
+    };
+    verifyRefreshToken(token: string): {
+        userId: number;
+        sessionId: number;
+    };
+    generateEmailVerificationToken(userId: number): string;
+    verifyEmailVerificationToken(token: string): {
+        userId: number;
+    };
+    generatePasswordResetToken(userId: number): string;
+    verifyPasswordResetToken(token: string): {
+        userId: number;
+    };
+    generateClientAccessToken(payload: {
+        clientId: number;
+        scopes: string[];
+    }): string;
+}
+//# sourceMappingURL=jwt-token.service.d.ts.map

package/dist/server/auth/infrastructure/services/jwt-token.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-token.service.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/jwt-token.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAErE,qBACa,eAAgB,YAAW,YAAY;IAEhD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa;gBADb,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,aAAa;IAG/C,mBAAmB,CAAC,OAAO,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,GAAG,MAAM;IAOV,oBAAoB,CAAC,OAAO,EAAE;QAC5B,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,MAAM;IAOV,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG;QAChC,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB;IAUD,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG;QACjC,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;KACnB;IAUD,8BAA8B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAUtD,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE;IAgB/D,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAUlD,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE;IAe3D,yBAAyB,CAAC,OAAO,EAAE;QACjC,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB,GAAG,MAAM;CAYR"}

package/dist/server/auth/infrastructure/services/jwt-token.service.js

@@ -0,0 +1,112 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtTokenService = void 0;
+const common_1 = require("@nestjs/common");
+const jwt_1 = require("@nestjs/jwt");
+const config_1 = require("@nestjs/config");
+let JwtTokenService = class JwtTokenService {
+    jwtService;
+    configService;
+    constructor(jwtService, configService) {
+        this.jwtService = jwtService;
+        this.configService = configService;
+    }
+    generateAccessToken(payload) {
+        return this.jwtService.sign(payload, {
+            secret: this.configService.get('JWT_ACCESS_SECRET'),
+            expiresIn: this.configService.get('JWT_ACCESS_EXPIRES_IN', '1h'),
+        });
+    }
+    generateRefreshToken(payload) {
+        return this.jwtService.sign(payload, {
+            secret: this.configService.get('JWT_REFRESH_SECRET'),
+            expiresIn: this.configService.get('JWT_REFRESH_EXPIRES_IN', '30d'),
+        });
+    }
+    verifyAccessToken(token) {
+        try {
+            return this.jwtService.verify(token, {
+                secret: this.configService.get('JWT_ACCESS_SECRET'),
+            });
+        }
+        catch (error) {
+            throw new Error('Token không hợp lệ hoặc đã hết hạn');
+        }
+    }
+    verifyRefreshToken(token) {
+        try {
+            return this.jwtService.verify(token, {
+                secret: this.configService.get('JWT_REFRESH_SECRET'),
+            });
+        }
+        catch (error) {
+            throw new Error('Refresh token không hợp lệ hoặc đã hết hạn');
+        }
+    }
+    generateEmailVerificationToken(userId) {
+        return this.jwtService.sign({ userId, type: 'email_verification' }, {
+            secret: this.configService.get('JWT_VERIFICATION_SECRET'),
+            expiresIn: '24h',
+        });
+    }
+    verifyEmailVerificationToken(token) {
+        try {
+            const payload = this.jwtService.verify(token, {
+                secret: this.configService.get('JWT_VERIFICATION_SECRET'),
+            });
+            if (payload.type !== 'email_verification') {
+                throw new Error('Token không hợp lệ');
+            }
+            return { userId: payload.userId };
+        }
+        catch (error) {
+            throw new Error('Token xác thực email không hợp lệ hoặc đã hết hạn');
+        }
+    }
+    generatePasswordResetToken(userId) {
+        return this.jwtService.sign({ userId, type: 'password_reset' }, {
+            secret: this.configService.get('JWT_RESET_SECRET'),
+            expiresIn: '1h',
+        });
+    }
+    verifyPasswordResetToken(token) {
+        try {
+            const payload = this.jwtService.verify(token, {
+                secret: this.configService.get('JWT_RESET_SECRET'),
+            });
+            if (payload.type !== 'password_reset') {
+                throw new Error('Token không hợp lệ');
+            }
+            return { userId: payload.userId };
+        }
+        catch (error) {
+            throw new Error('Token reset mật khẩu không hợp lệ hoặc đã hết hạn');
+        }
+    }
+    generateClientAccessToken(payload) {
+        return this.jwtService.sign({
+            clientId: payload.clientId,
+            scopes: payload.scopes,
+            type: 'client_credentials',
+        }, {
+            secret: this.configService.get('JWT_ACCESS_SECRET'),
+            expiresIn: this.configService.get('JWT_ACCESS_EXPIRES_IN', '1h'),
+        });
+    }
+};
+exports.JwtTokenService = JwtTokenService;
+exports.JwtTokenService = JwtTokenService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [jwt_1.JwtService,
+        config_1.ConfigService])
+], JwtTokenService);
+//# sourceMappingURL=jwt-token.service.js.map

package/dist/server/auth/infrastructure/services/jwt-token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-token.service.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/jwt-token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,qCAAyC;AACzC,2CAA+C;AAIxC,IAAM,eAAe,GAArB,MAAM,eAAe;IAEP;IACA;IAFnB,YACmB,UAAsB,EACtB,aAA4B;QAD5B,eAAU,GAAV,UAAU,CAAY;QACtB,kBAAa,GAAb,aAAa,CAAe;IAC5C,CAAC;IAEJ,mBAAmB,CAAC,OAKnB;QACC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE;YACnC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,mBAAmB,CAAC;YACnD,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC;SACjE,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAAC,OAGpB;QACC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE;YACnC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,oBAAoB,CAAC;YACpD,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC;SACnE,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,KAAa;QAM7B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,mBAAmB,CAAC;aACpD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,KAAa;QAI9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,oBAAoB,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,8BAA8B,CAAC,MAAc;QAC3C,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,EACtC;YACE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,yBAAyB,CAAC;YACzD,SAAS,EAAE,KAAK;SACjB,CACF,CAAC;IACJ,CAAC;IAED,4BAA4B,CAAC,KAAa;QACxC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE;gBAC5C,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,yBAAyB,CAAC;aAC1D,CAAC,CAAC;YAEH,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,CAAC;YAED,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,0BAA0B,CAAC,MAAc;QACvC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAClC;YACE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAClD,SAAS,EAAE,IAAI;SAChB,CACF,CAAC;IACJ,CAAC;IAED,wBAAwB,CAAC,KAAa;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE;gBAC5C,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC;aACnD,CAAC,CAAC;YAEH,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,CAAC;YAED,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,yBAAyB,CAAC,OAGzB;QACC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB;YACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,oBAAoB;SAC3B,EACD;YACE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,mBAAmB,CAAC;YACnD,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC;SACjE,CACF,CAAC;IACJ,CAAC;CAAC,CAAA;AA1HS,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;qCAGoB,gBAAU;QACP,sBAAa;GAHpC,eAAe,CA0HxB"}

package/dist/server/auth/infrastructure/services/nodemailer-email.service.d.ts

@@ -0,0 +1,17 @@
+import { ConfigService } from '@nestjs/config';
+import { EmailService } from '../../application/ports/email.service';
+export declare class NodemailerEmailService implements EmailService {
+    private readonly configService;
+    private readonly logger;
+    constructor(configService: ConfigService);
+    sendVerificationEmail(email: string, token: string, displayName?: string): Promise<void>;
+    sendPasswordResetEmail(email: string, token: string, displayName?: string): Promise<void>;
+    sendWelcomeEmail(email: string, displayName?: string): Promise<void>;
+    sendNewDeviceLoginEmail(email: string, deviceInfo: {
+        deviceName: string;
+        ipAddress: string;
+        location?: string;
+    }): Promise<void>;
+    send2FABackupCodesEmail(email: string, backupCodes: string[], displayName?: string): Promise<void>;
+}
+//# sourceMappingURL=nodemailer-email.service.d.ts.map

package/dist/server/auth/infrastructure/services/nodemailer-email.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodemailer-email.service.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/nodemailer-email.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAErE,qBACa,sBAAuB,YAAW,YAAY;IAG7C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAF1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2C;gBAErC,aAAa,EAAE,aAAa;IAEnD,qBAAqB,CACzB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAoCV,sBAAsB,CAC1B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAyBV,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBpE,uBAAuB,CAC3B,KAAK,EAAE,MAAM,EACb,UAAU,EAAE;QACV,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GACA,OAAO,CAAC,IAAI,CAAC;IAoBV,uBAAuB,CAC3B,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EAAE,EACrB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;CAkBjB"}

package/dist/server/auth/infrastructure/services/nodemailer-email.service.js

@@ -0,0 +1,125 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var NodemailerEmailService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NodemailerEmailService = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+let NodemailerEmailService = NodemailerEmailService_1 = class NodemailerEmailService {
+    configService;
+    logger = new common_1.Logger(NodemailerEmailService_1.name);
+    constructor(configService) {
+        this.configService = configService;
+    }
+    async sendVerificationEmail(email, token, displayName) {
+        const verificationUrl = `${this.configService.get('FRONTEND_URL')}/verify-email?token=${token}`;
+        const verificationUrlDirect = `${this.configService.get('BACKEND_URL')}/api/email/verify?token=${token}`;
+        this.logger.log(`
+      ========================================
+      📧 EMAIL XÁC THỰC
+      ========================================
+      To: ${email}
+      Subject: Xác thực tài khoản của bạn
+      
+      Xin chào ${displayName || 'bạn'},
+      
+      Vui lòng click vào link dưới đây để xác thực email:
+      ${verificationUrl}
+      Test:
+      ${verificationUrlDirect}
+      
+      Link có hiệu lực trong 24 giờ.
+      
+      Nếu bạn không tạo tài khoản này, vui lòng bỏ qua email này.
+      ========================================
+    `);
+    }
+    async sendPasswordResetEmail(email, token, displayName) {
+        const resetUrl = `${this.configService.get('FRONTEND_URL')}/reset-password?token=${token}`;
+        this.logger.log(`
+      ========================================
+      🔐 EMAIL ĐẶT LẠI MẬT KHẨU
+      ========================================
+      To: ${email}
+      Subject: Đặt lại mật khẩu của bạn
+      
+      Xin chào ${displayName || 'bạn'},
+      
+      Bạn đã yêu cầu đặt lại mật khẩu. Click vào link dưới đây:
+      ${resetUrl}
+      
+      Link có hiệu lực trong 1 giờ.
+      
+      Nếu bạn không yêu cầu đặt lại mật khẩu, vui lòng bỏ qua email này.
+      ========================================
+    `);
+    }
+    async sendWelcomeEmail(email, displayName) {
+        this.logger.log(`
+      ========================================
+      👋 EMAIL CHÀO MỪNG
+      ========================================
+      To: ${email}
+      Subject: Chào mừng bạn đến với hệ thống
+      
+      Xin chào ${displayName || 'bạn'},
+      
+      Cảm ơn bạn đã đăng ký tài khoản!
+      Tài khoản của bạn đã được kích hoạt thành công.
+      
+      Bạn có thể bắt đầu sử dụng dịch vụ ngay bây giờ.
+      ========================================
+    `);
+    }
+    async sendNewDeviceLoginEmail(email, deviceInfo) {
+        this.logger.log(`
+      ========================================
+      🔔 CẢNH BÁO ĐĂNG NHẬP TỪ THIẾT BỊ MỚI
+      ========================================
+      To: ${email}
+      Subject: Phát hiện đăng nhập từ thiết bị mới
+      
+      Xin chào,
+      
+      Chúng tôi phát hiện đăng nhập từ thiết bị mới:
+      - Thiết bị: ${deviceInfo.deviceName}
+      - Địa chỉ IP: ${deviceInfo.ipAddress}
+      ${deviceInfo.location ? `- Vị trí: ${deviceInfo.location}` : ''}
+      
+      Nếu đây không phải là bạn, vui lòng đổi mật khẩu ngay lập tức.
+      ========================================
+    `);
+    }
+    async send2FABackupCodesEmail(email, backupCodes, displayName) {
+        this.logger.log(`
+      ========================================
+      🔑 MÃ DỰ PHÒNG XÁC THỰC 2 YẾU TỐ
+      ========================================
+      To: ${email}
+      Subject: Mã dự phòng 2FA của bạn
+      
+      Xin chào ${displayName || 'bạn'},
+      
+      Dưới đây là các mã dự phòng để đăng nhập khi bạn không có thiết bị 2FA:
+      ${backupCodes.map((code, i) => `${i + 1}. ${code}`).join('\n      ')}
+      
+      Vui lòng lưu trữ các mã này ở nơi an toàn.
+      Mỗi mã chỉ có thể sử dụng một lần.
+      ========================================
+    `);
+    }
+};
+exports.NodemailerEmailService = NodemailerEmailService;
+exports.NodemailerEmailService = NodemailerEmailService = NodemailerEmailService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [config_1.ConfigService])
+], NodemailerEmailService);
+//# sourceMappingURL=nodemailer-email.service.js.map

package/dist/server/auth/infrastructure/services/nodemailer-email.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodemailer-email.service.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/nodemailer-email.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,2CAA+C;AAIxC,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IAGJ;IAFZ,MAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;IAElE,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAE7D,KAAK,CAAC,qBAAqB,CACzB,KAAa,EACb,KAAa,EACb,WAAoB;QAEpB,MAAM,eAAe,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,uBAAuB,KAAK,EAAE,CAAC;QAChG,MAAM,qBAAqB,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,2BAA2B,KAAK,EAAE,CAAC;QAIzG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;;;;YAIR,KAAK;;;iBAGA,WAAW,IAAI,KAAK;;;QAG7B,eAAe;;QAEf,qBAAqB;;;;;;KAMxB,CAAC,CAAC;IAUL,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,KAAa,EACb,KAAa,EACb,WAAoB;QAEpB,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,yBAAyB,KAAK,EAAE,CAAC;QAG3F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;;;;YAIR,KAAK;;;iBAGA,WAAW,IAAI,KAAK;;;QAG7B,QAAQ;;;;;;KAMX,CAAC,CAAC;IAGL,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,WAAoB;QACxD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;;;;YAIR,KAAK;;;iBAGA,WAAW,IAAI,KAAK;;;;;;;KAOhC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,KAAa,EACb,UAIC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;;;;YAIR,KAAK;;;;;;oBAMG,UAAU,CAAC,UAAU;sBACnB,UAAU,CAAC,SAAS;QAClC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE;;;;KAIhE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,KAAa,EACb,WAAqB,EACrB,WAAoB;QAEpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;;;;YAIR,KAAK;;;iBAGA,WAAW,IAAI,KAAK;;;QAG7B,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;;;;;KAKrE,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA7IY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;qCAIiC,sBAAa;GAH9C,sBAAsB,CA6IlC"}

package/dist/server/auth/infrastructure/services/oauth-token.service.d.ts

@@ -0,0 +1,27 @@
+import { Repository } from 'typeorm';
+import { JwtService } from '@nestjs/jwt';
+import { ConfigService } from '@nestjs/config';
+import { AuthUserEntity } from '../persistence/entities/auth-user.entity';
+import { OAuthClientEntity } from '../persistence/entities/oauth-client.entity';
+import { OAuthTokenEntity } from '../persistence/entities/oauth-token.entity';
+import { UserSessionEntity } from '../persistence/entities/user-session.entity';
+import { TokenResponse } from '../../application';
+import { JwtPayload } from '../../domain/interfaces';
+export declare class TokenService {
+    private oauthTokenRepository;
+    private oauthClientRepository;
+    private authUserRepository;
+    private userSessionRepository;
+    private jwtService;
+    private configService;
+    constructor(oauthTokenRepository: Repository<OAuthTokenEntity>, oauthClientRepository: Repository<OAuthClientEntity>, authUserRepository: Repository<AuthUserEntity>, userSessionRepository: Repository<UserSessionEntity>, jwtService: JwtService, configService: ConfigService);
+    generateAccessToken(userId: number | null, clientId: number, scopes: string[], sessionId?: number | null): Promise<OAuthTokenEntity>;
+    generateRefreshToken(userId: number | null, clientId: number, scopes: string[], sessionId?: number | null, parentRefreshTokenId?: number): Promise<OAuthTokenEntity>;
+    refreshAccessToken(refreshToken: string): Promise<TokenResponse>;
+    revokeToken(token: string): Promise<void>;
+    revokeTokensByUser(userId: number): Promise<void>;
+    revokeTokensBySession(sessionId: number): Promise<void>;
+    validateToken(token: string): Promise<JwtPayload>;
+    cleanupExpiredTokens(): Promise<void>;
+}
+//# sourceMappingURL=oauth-token.service.d.ts.map

package/dist/server/auth/infrastructure/services/oauth-token.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-token.service.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/oauth-token.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAoB,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGlD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAKrD,qBACa,YAAY;IAGrB,OAAO,CAAC,oBAAoB;IAE5B,OAAO,CAAC,qBAAqB;IAE7B,OAAO,CAAC,kBAAkB;IAE1B,OAAO,CAAC,qBAAqB;IAC7B,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,aAAa;gBARb,oBAAoB,EAAE,UAAU,CAAC,gBAAgB,CAAC,EAElD,qBAAqB,EAAE,UAAU,CAAC,iBAAiB,CAAC,EAEpD,kBAAkB,EAAE,UAAU,CAAC,cAAc,CAAC,EAE9C,qBAAqB,EAAE,UAAU,CAAC,iBAAiB,CAAC,EACpD,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,aAAa;IAGhC,mBAAmB,CACvB,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,OAAO,CAAC,gBAAgB,CAAC;IAyCtB,oBAAoB,CACxB,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,oBAAoB,CAAC,EAAE,MAAM,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IA0CtB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA2DhE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAazC,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAejD,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcvD,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAwBjD,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;CAO5C"}

package/dist/server/auth/infrastructure/services/oauth-token.service.js

@@ -0,0 +1,215 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenService = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const jwt_1 = require("@nestjs/jwt");
+const config_1 = require("@nestjs/config");
+const auth_user_entity_1 = require("../persistence/entities/auth-user.entity");
+const oauth_client_entity_1 = require("../persistence/entities/oauth-client.entity");
+const oauth_token_entity_1 = require("../persistence/entities/oauth-token.entity");
+const user_session_entity_1 = require("../persistence/entities/user-session.entity");
+const constants_1 = require("../../domain/constants");
+const enums_1 = require("../../domain/enums");
+let TokenService = class TokenService {
+    oauthTokenRepository;
+    oauthClientRepository;
+    authUserRepository;
+    userSessionRepository;
+    jwtService;
+    configService;
+    constructor(oauthTokenRepository, oauthClientRepository, authUserRepository, userSessionRepository, jwtService, configService) {
+        this.oauthTokenRepository = oauthTokenRepository;
+        this.oauthClientRepository = oauthClientRepository;
+        this.authUserRepository = authUserRepository;
+        this.userSessionRepository = userSessionRepository;
+        this.jwtService = jwtService;
+        this.configService = configService;
+    }
+    async generateAccessToken(userId, clientId, scopes, sessionId) {
+        const client = await this.oauthClientRepository.findOne({ where: { id: clientId } });
+        if (!client) {
+            throw new common_1.NotFoundException('OAuth client không tồn tại');
+        }
+        let email = null;
+        if (userId) {
+            const user = await this.authUserRepository.findOne({ where: { id: userId } });
+            if (!user) {
+                throw new common_1.NotFoundException('Người dùng không tồn tại');
+            }
+            email = user.email;
+        }
+        const payload = {
+            sub: userId,
+            email,
+            clientId: clientId,
+            scopes,
+            sessionId: sessionId,
+            type: 'accessToken',
+        };
+        const tokenLifetime = client.accessTokenLifetime || constants_1.OAUTH_CONFIG.ACCESS_TOKEN_LIFETIME;
+        const token = this.jwtService.sign(payload, { expiresIn: `${tokenLifetime}s` });
+        const oauthToken = this.oauthTokenRepository.create({
+            tokenType: enums_1.OAuthTokenType.ACCESS_TOKEN,
+            token,
+            clientId: clientId,
+            userId: userId,
+            sessionId: sessionId,
+            scopes: scopes,
+            expiresAt: new Date(Date.now() + tokenLifetime * 1000),
+        });
+        return await this.oauthTokenRepository.save(oauthToken);
+    }
+    async generateRefreshToken(userId, clientId, scopes, sessionId, parentRefreshTokenId) {
+        const client = await this.oauthClientRepository.findOne({ where: { id: clientId } });
+        if (!client) {
+            throw new common_1.NotFoundException('OAuth client không tồn tại');
+        }
+        let email = null;
+        if (userId) {
+            const user = await this.authUserRepository.findOne({ where: { id: userId } });
+            if (!user) {
+                throw new common_1.NotFoundException('Người dùng không tồn tại');
+            }
+            email = user.email;
+        }
+        const payload = {
+            sub: userId,
+            email,
+            clientId: clientId,
+            scopes,
+            sessionId: sessionId,
+            type: 'refreshToken',
+        };
+        const tokenLifetime = client.refreshTokenLifetime || constants_1.OAUTH_CONFIG.REFRESH_TOKEN_LIFETIME;
+        const token = this.jwtService.sign(payload, { expiresIn: `${tokenLifetime}s` });
+        const oauthToken = this.oauthTokenRepository.create({
+            tokenType: enums_1.OAuthTokenType.REFRESH_TOKEN,
+            token,
+            clientId: clientId,
+            userId: userId,
+            sessionId: sessionId,
+            scopes: scopes,
+            expiresAt: new Date(Date.now() + tokenLifetime * 1000),
+            parentRefreshTokenId: parentRefreshTokenId,
+        });
+        return await this.oauthTokenRepository.save(oauthToken);
+    }
+    async refreshAccessToken(refreshToken) {
+        let payload;
+        try {
+            payload = this.jwtService.verify(refreshToken);
+        }
+        catch {
+            throw new common_1.UnauthorizedException('Refresh token không hợp lệ hoặc đã hết hạn');
+        }
+        const tokenRecord = await this.oauthTokenRepository.findOne({
+            where: {
+                token: refreshToken,
+                tokenType: enums_1.OAuthTokenType.REFRESH_TOKEN,
+                revokedAt: (0, typeorm_2.IsNull)(),
+            },
+        });
+        if (!tokenRecord) {
+            throw new common_1.UnauthorizedException('Refresh token không hợp lệ hoặc đã bị thu hồi');
+        }
+        if (tokenRecord.expiresAt < new Date()) {
+            throw new common_1.UnauthorizedException('Refresh token đã hết hạn');
+        }
+        tokenRecord.revokedAt = new Date();
+        await this.oauthTokenRepository.save(tokenRecord);
+        const accessTokenEntity = await this.generateAccessToken(payload.sub, payload.clientId, payload.scopes, payload.sessionId);
+        const refreshTokenEntity = await this.generateRefreshToken(payload.sub, payload.clientId, payload.scopes, payload.sessionId, tokenRecord.id);
+        const client = await this.oauthClientRepository.findOne({ where: { id: payload.clientId } });
+        const tokenLifetime = client?.accessTokenLifetime || constants_1.OAUTH_CONFIG.ACCESS_TOKEN_LIFETIME;
+        return {
+            accessToken: accessTokenEntity.token,
+            refreshToken: refreshTokenEntity.token,
+            tokenType: 'Bearer',
+            expiresIn: tokenLifetime,
+            scope: payload.scopes.join(' '),
+        };
+    }
+    async revokeToken(token) {
+        const tokenRecord = await this.oauthTokenRepository.findOne({
+            where: { token, revokedAt: (0, typeorm_2.IsNull)() },
+        });
+        if (!tokenRecord) {
+            throw new common_1.NotFoundException('Token không tồn tại hoặc đã bị thu hồi');
+        }
+        tokenRecord.revokedAt = new Date();
+        await this.oauthTokenRepository.save(tokenRecord);
+    }
+    async revokeTokensByUser(userId) {
+        const count = await this.oauthTokenRepository.count({
+            where: { userId: userId, revokedAt: (0, typeorm_2.IsNull)() },
+        });
+        if (count === 0) {
+            return;
+        }
+        await this.userSessionRepository.update({ userId: userId, revokedAt: (0, typeorm_2.IsNull)() }, { revokedAt: new Date() });
+    }
+    async revokeTokensBySession(sessionId) {
+        const tokens = await this.oauthTokenRepository.find({
+            where: { sessionId: sessionId, revokedAt: (0, typeorm_2.IsNull)() },
+        });
+        for (const token of tokens) {
+            token.revokedAt = new Date();
+        }
+        if (tokens.length > 0) {
+            await this.oauthTokenRepository.save(tokens);
+        }
+    }
+    async validateToken(token) {
+        try {
+            const payload = this.jwtService.verify(token);
+            const tokenRecord = await this.oauthTokenRepository.findOne({
+                where: { token, revokedAt: (0, typeorm_2.IsNull)() },
+            });
+            if (!tokenRecord) {
+                throw new common_1.UnauthorizedException('Token không hợp lệ hoặc đã bị thu hồi');
+            }
+            if (tokenRecord.expiresAt < new Date()) {
+                throw new common_1.UnauthorizedException('Token đã hết hạn');
+            }
+            return payload;
+        }
+        catch (error) {
+            throw new common_1.UnauthorizedException('Token không hợp lệ: ' + error.message);
+        }
+    }
+    async cleanupExpiredTokens() {
+        const sevenDaysAgo = new Date(Date.now() - 7 * 24 * 60 * 60 * 1000);
+        await this.oauthTokenRepository.delete({
+            expiresAt: (0, typeorm_2.LessThan)(sevenDaysAgo),
+        });
+    }
+};
+exports.TokenService = TokenService;
+exports.TokenService = TokenService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_1.InjectRepository)(oauth_token_entity_1.OAuthTokenEntity)),
+    __param(1, (0, typeorm_1.InjectRepository)(oauth_client_entity_1.OAuthClientEntity)),
+    __param(2, (0, typeorm_1.InjectRepository)(auth_user_entity_1.AuthUserEntity)),
+    __param(3, (0, typeorm_1.InjectRepository)(user_session_entity_1.UserSessionEntity)),
+    __metadata("design:paramtypes", [typeorm_2.Repository,
+        typeorm_2.Repository,
+        typeorm_2.Repository,
+        typeorm_2.Repository,
+        jwt_1.JwtService,
+        config_1.ConfigService])
+], TokenService);
+//# sourceMappingURL=oauth-token.service.js.map

package/dist/server/auth/infrastructure/services/oauth-token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-token.service.js","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/oauth-token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAsF;AACtF,6CAAmD;AACnD,qCAAuD;AACvD,qCAAyC;AACzC,2CAA+C;AAC/C,+EAA0E;AAC1E,qFAAgF;AAChF,mFAA8E;AAC9E,qFAAgF;AAEhF,sDAAsD;AACtD,8CAAoD;AAO7C,IAAM,YAAY,GAAlB,MAAM,YAAY;IAGb;IAEA;IAEA;IAEA;IACA;IACA;IAVV,YAEU,oBAAkD,EAElD,qBAAoD,EAEpD,kBAA8C,EAE9C,qBAAoD,EACpD,UAAsB,EACtB,aAA4B;QAR5B,yBAAoB,GAApB,oBAAoB,CAA8B;QAElD,0BAAqB,GAArB,qBAAqB,CAA+B;QAEpD,uBAAkB,GAAlB,kBAAkB,CAA4B;QAE9C,0BAAqB,GAArB,qBAAqB,CAA+B;QACpD,eAAU,GAAV,UAAU,CAAY;QACtB,kBAAa,GAAb,aAAa,CAAe;IACnC,CAAC;IAEJ,KAAK,CAAC,mBAAmB,CACvB,MAAqB,EACrB,QAAgB,EAChB,MAAgB,EAChB,SAAyB;QAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,0BAAiB,CAAC,4BAA4B,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,KAAK,GAAkB,IAAI,CAAC;QAChC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YAC9E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,0BAAiB,CAAC,0BAA0B,CAAC,CAAC;YAC1D,CAAC;YACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,CAAC;QAED,MAAM,OAAO,GAAG;YACd,GAAG,EAAE,MAAM;YACX,KAAK;YACL,QAAQ,EAAE,QAAQ;YAClB,MAAM;YACN,SAAS,EAAE,SAAS;YACpB,IAAI,EAAE,aAAa;SACpB,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,CAAC,mBAAmB,IAAI,wBAAY,CAAC,qBAAqB,CAAC;QACvF,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,aAAa,GAAG,EAAE,CAAC,CAAC;QAGhF,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;YAClD,SAAS,EAAE,sBAAc,CAAC,YAAY;YACtC,KAAK;YACL,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,IAAI,CAAC;SACvD,CAAC,CAAC;QAEH,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,MAAqB,EACrB,QAAgB,EAChB,MAAgB,EAChB,SAAyB,EACzB,oBAA6B;QAE7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,0BAAiB,CAAC,4BAA4B,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,KAAK,GAAkB,IAAI,CAAC;QAChC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YAC9E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,0BAAiB,CAAC,0BAA0B,CAAC,CAAC;YAC1D,CAAC;YACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,CAAC;QAED,MAAM,OAAO,GAAG;YACd,GAAG,EAAE,MAAM;YACX,KAAK;YACL,QAAQ,EAAE,QAAQ;YAClB,MAAM;YACN,SAAS,EAAE,SAAS;YACpB,IAAI,EAAE,cAAc;SACrB,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,IAAI,wBAAY,CAAC,sBAAsB,CAAC;QACzF,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,aAAa,GAAG,EAAE,CAAC,CAAC;QAGhF,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;YAClD,SAAS,EAAE,sBAAc,CAAC,aAAa;YACvC,KAAK;YACL,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,IAAI,CAAC;YACtD,oBAAoB,EAAE,oBAAoB;SAC3C,CAAC,CAAC;QAEH,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,YAAoB;QAE3C,IAAI,OAAmB,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAe,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,4CAA4C,CAAC,CAAC;QAChF,CAAC;QAGD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;YAC1D,KAAK,EAAE;gBACL,KAAK,EAAE,YAAY;gBACnB,SAAS,EAAE,sBAAc,CAAC,aAAa;gBACvC,SAAS,EAAE,IAAA,gBAAM,GAAE;aACpB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,8BAAqB,CAAC,+CAA+C,CAAC,CAAC;QACnF,CAAC;QAGD,IAAI,WAAW,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,8BAAqB,CAAC,0BAA0B,CAAC,CAAC;QAC9D,CAAC;QAGD,WAAW,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAGlD,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACtD,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,SAAS,CAClB,CAAC;QAEF,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACxD,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,SAAS,EACjB,WAAW,CAAC,EAAE,CACf,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7F,MAAM,aAAa,GAAG,MAAM,EAAE,mBAAmB,IAAI,wBAAY,CAAC,qBAAqB,CAAC;QAExF,OAAO;YACL,WAAW,EAAE,iBAAiB,CAAC,KAAK;YACpC,YAAY,EAAE,kBAAkB,CAAC,KAAK;YACtC,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,aAAa;YACxB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;YAC1D,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE;SACtC,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,0BAAiB,CAAC,wCAAwC,CAAC,CAAC;QACxE,CAAC;QAED,WAAW,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;YAClD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE;SAC/C,CAAC,CAAC;QAEH,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CACrC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE,EACvC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,SAAiB;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;YAClD,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE;SACrD,CAAC,CAAC;QAEH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa;QAC/B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAG9C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;gBAC1D,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE;aACtC,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,8BAAqB,CAAC,uCAAuC,CAAC,CAAC;YAC3E,CAAC;YAGD,IAAI,WAAW,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;gBACvC,MAAM,IAAI,8BAAqB,CAAC,kBAAkB,CAAC,CAAC;YACtD,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,8BAAqB,CAAC,sBAAsB,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB;QAExB,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;YACrC,SAAS,EAAE,IAAA,kBAAQ,EAAC,YAAY,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAhPY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,0BAAgB,EAAC,qCAAgB,CAAC,CAAA;IAElC,WAAA,IAAA,0BAAgB,EAAC,uCAAiB,CAAC,CAAA;IAEnC,WAAA,IAAA,0BAAgB,EAAC,iCAAc,CAAC,CAAA;IAEhC,WAAA,IAAA,0BAAgB,EAAC,uCAAiB,CAAC,CAAA;qCALN,oBAAU;QAET,oBAAU;QAEb,oBAAU;QAEP,oBAAU;QACrB,gBAAU;QACP,sBAAa;GAX3B,YAAY,CAgPxB"}

package/dist/server/auth/infrastructure/services/root-account.service.d.ts

@@ -0,0 +1,19 @@
+import { OnModuleInit } from '@nestjs/common';
+import { Repository } from 'typeorm';
+import { AuthUserService } from '../../application/services/auth-user.service';
+import { AuthUserEntity } from '../persistence/entities';
+import { RoleEntity } from '../persistence/entities';
+import { UserRoleEntity } from '../persistence/entities';
+import { AdminCoreOptions } from '../../../admin-core-options.interface';
+export declare class RootAccountService implements OnModuleInit {
+    private readonly authUserService;
+    private readonly coreOptions;
+    private readonly authUserRepo;
+    private readonly roleRepo;
+    private readonly userRoleRepo;
+    private readonly logger;
+    constructor(authUserService: AuthUserService, coreOptions: AdminCoreOptions, authUserRepo: Repository<AuthUserEntity>, roleRepo: Repository<RoleEntity>, userRoleRepo: Repository<UserRoleEntity>);
+    onModuleInit(): Promise<void>;
+    private seedRootAccount;
+}
+//# sourceMappingURL=root-account.service.d.ts.map

package/dist/server/auth/infrastructure/services/root-account.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-account.service.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/infrastructure/services/root-account.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,YAAY,EAAU,MAAM,gBAAgB,CAAC;AAE1E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAsB,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAQ7F,qBACa,kBAAmB,YAAW,YAAY;IAInD,OAAO,CAAC,QAAQ,CAAC,eAAe;IAEhC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAEzB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAX/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;gBAG3C,eAAe,EAAE,eAAe,EAEhC,WAAW,EAAE,gBAAgB,EAE7B,YAAY,EAAE,UAAU,CAAC,cAAc,CAAC,EAExC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,EAEhC,YAAY,EAAE,UAAU,CAAC,cAAc,CAAC;IAGrD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;YAIrB,eAAe;CAgD9B"}