@vnodes/auth 0.0.8 → 0.0.13

package/dist/auth.controller.d.ts

@@ -1,3 +1,4 @@
+import { CanActivateDto } from './dto/can-activate.dto.js';
 import { ForgotPasswordDto } from './dto/forgot-password.dto.js';
 import { LoginDto } from './dto/login.dto.js';
 import { UpdatePasswordDto } from './dto/update-password.dto.js';
@@ -10,5 +11,6 @@ export declare class AuthController {
     forgotPassword(body: ForgotPasswordDto): import("./index.js").MessageDto;
     updatePassword(uuid: string, body: UpdatePasswordDto): Promise<import("./index.js").MessageDto>;
     profile(uuid: string): import("./index.js").UserManager;
+    canActivate(username: string, body: CanActivateDto): Promise<import("./index.js").CanActivateResponseDto>;
 }
 //# sourceMappingURL=auth.controller.d.ts.map

package/dist/auth.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.controller.d.ts","sourceRoot":"","sources":["../src/auth.controller.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,qBAEa,cAAc;IACX,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW;gBAAxB,WAAW,EAAE,WAAW;IAIvD,KAAK,CAAS,IAAI,EAAE,QAAQ;IAK5B,MAAM,CAAgB,WAAW,EAAE,MAAM;IAMzC,cAAc,CAAS,IAAI,EAAE,iBAAiB;IAK9C,cAAc,CAAa,IAAI,EAAE,MAAM,EAAU,IAAI,EAAE,iBAAiB;IAKxE,OAAO,CAAa,IAAI,EAAE,MAAM;CAGnC"}
+{"version":3,"file":"auth.controller.d.ts","sourceRoot":"","sources":["../src/auth.controller.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,qBAKa,cAAc;IACX,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW;gBAAxB,WAAW,EAAE,WAAW;IAIvD,KAAK,CAAS,IAAI,EAAE,QAAQ;IAK5B,MAAM,CAAgB,WAAW,EAAE,MAAM;IAMzC,cAAc,CAAS,IAAI,EAAE,iBAAiB;IAK9C,cAAc,CAAa,IAAI,EAAE,MAAM,EAAU,IAAI,EAAE,iBAAiB;IAKxE,OAAO,CAAa,IAAI,EAAE,MAAM;IAKhC,WAAW,CAAiB,QAAQ,EAAE,MAAM,EAAU,IAAI,EAAE,cAAc;CAG7E"}

package/dist/auth.controller.js

@@ -1,8 +1,10 @@
 import { __decorate, __metadata, __param } from "tslib";
 import { Body, Controller, Get, Post } from '@nestjs/common';
+import { ApiBearerAuth } from '@nestjs/swagger';
 import { Throttle } from '@nestjs/throttler';
-import { Public } from '@vnodes/metadata';
-import { AccessToken, UserUuid } from './context/context.js';
+import { ByPassAutorization, Public, ResourceName } from '@vnodes/metadata';
+import { AccessToken, UserUsername, UserUuid } from './context/context.js';
+import { CanActivateDto } from './dto/can-activate.dto.js';
 import { ForgotPasswordDto } from './dto/forgot-password.dto.js';
 import { LoginDto } from './dto/login.dto.js';
 import { UpdatePasswordDto } from './dto/update-password.dto.js';
@@ -27,6 +29,9 @@ let AuthController = class AuthController {
     profile(uuid) {
         return this.authService.profile(uuid);
     }
+    canActivate(username, body) {
+        return this.authService.canActivate(username, body);
+    }
 };
 __decorate([
     Public(),
@@ -66,8 +71,19 @@ __decorate([
     __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", void 0)
 ], AuthController.prototype, "profile", null);
+__decorate([
+    Post('can-activate'),
+    __param(0, UserUsername()),
+    __param(1, Body()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, CanActivateDto]),
+    __metadata("design:returntype", void 0)
+], AuthController.prototype, "canActivate", null);
 AuthController = __decorate([
+    ByPassAutorization(),
     Throttle({ default: { limit: 6, ttl: 30_000 } }),
+    ResourceName('Auth'),
+    ApiBearerAuth(),
     Controller('auth'),
     __metadata("design:paramtypes", [AuthService])
 ], AuthController);

package/dist/auth.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.module.d.ts","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":"AAUA,qBAsBa,UAAU;CAAG"}
+{"version":3,"file":"auth.module.d.ts","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":"AAWA,qBAsBa,UAAU;CAAG"}

package/dist/auth.module.js

@@ -4,6 +4,7 @@ import { ConfigModule, ConfigService } from '@nestjs/config';
 import { APP_GUARD } from '@nestjs/core';
 import { EventEmitterModule } from '@nestjs/event-emitter';
 import { JwtModule } from '@nestjs/jwt';
+import { Env } from '@vnodes/metadata';
 import { AuthController } from './auth.controller.js';
 import { AuthGuard } from './guards/auth.guard.js';
 import { AuthService } from './services/auth.service.js';
@@ -18,8 +19,8 @@ AuthModule = __decorate([
                 imports: [ConfigModule],
                 inject: [ConfigService],
                 useFactory(config) {
-                    const secret = config.getOrThrow('JWT_SECRET');
-                    const expiresIn = config.getOrThrow('JWT_EXPIRES_IN');
+                    const secret = config.getOrThrow(Env.JWT_SECRET);
+                    const expiresIn = config.getOrThrow(Env.JWT_EXPIRES_IN);
                     return {
                         secret,
                         signOptions: {

package/dist/client/auth-client.module.d.ts

@@ -0,0 +1,3 @@
+export declare class AuthClientModule {
+}
+//# sourceMappingURL=auth-client.module.d.ts.map

package/dist/client/auth-client.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-client.module.d.ts","sourceRoot":"","sources":["../../src/client/auth-client.module.ts"],"names":[],"mappings":"AAMA,qBAUa,gBAAgB;CAAG"}

package/dist/client/auth-client.module.js

@@ -0,0 +1,21 @@
+import { __decorate } from "tslib";
+import { Module } from '@nestjs/common';
+import { ConfigModule } from '@nestjs/config';
+import { APP_GUARD } from '@nestjs/core';
+import { AuthClientGuard } from '../guards/auth-client.guard.js';
+import { provideAuthClientOptions } from '../providers/auth-client-options.provider.js';
+let AuthClientModule = class AuthClientModule {
+};
+AuthClientModule = __decorate([
+    Module({
+        imports: [ConfigModule],
+        providers: [
+            provideAuthClientOptions(),
+            {
+                provide: APP_GUARD,
+                useClass: AuthClientGuard,
+            },
+        ],
+    })
+], AuthClientModule);
+export { AuthClientModule };

package/dist/dto/can-activate-response-dto.d.ts

@@ -0,0 +1,5 @@
+export declare class CanActivateResponseDto {
+    canActivate: boolean;
+    constructor(data: CanActivateResponseDto);
+}
+//# sourceMappingURL=can-activate-response-dto.d.ts.map

package/dist/dto/can-activate-response-dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-activate-response-dto.d.ts","sourceRoot":"","sources":["../../src/dto/can-activate-response-dto.ts"],"names":[],"mappings":"AAEA,qBAAa,sBAAsB;IACvB,WAAW,EAAE,OAAO,CAAC;gBAEjB,IAAI,EAAE,sBAAsB;CAG3C"}

package/dist/dto/can-activate-response-dto.js

@@ -0,0 +1,12 @@
+import { __decorate, __metadata } from "tslib";
+import { Prop } from '@vnodes/property';
+export class CanActivateResponseDto {
+    canActivate;
+    constructor(data) {
+        Object.assign(this, data);
+    }
+}
+__decorate([
+    Prop(),
+    __metadata("design:type", Boolean)
+], CanActivateResponseDto.prototype, "canActivate", void 0);

package/dist/dto/can-activate.dto.d.ts

@@ -0,0 +1,6 @@
+export declare class CanActivateDto {
+    requiredRoles?: string[];
+    requiredPermissions?: string[];
+    constructor(data: CanActivateDto);
+}
+//# sourceMappingURL=can-activate.dto.d.ts.map

package/dist/dto/can-activate.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-activate.dto.d.ts","sourceRoot":"","sources":["../../src/dto/can-activate.dto.ts"],"names":[],"mappings":"AAEA,qBAAa,cAAc;IACG,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;gBAC7C,IAAI,EAAE,cAAc;CAGnC"}

package/dist/dto/can-activate.dto.js

@@ -0,0 +1,17 @@
+import { __decorate, __metadata } from "tslib";
+import { Prop } from '@vnodes/property';
+export class CanActivateDto {
+    requiredRoles;
+    requiredPermissions;
+    constructor(data) {
+        Object.assign(this, data);
+    }
+}
+__decorate([
+    Prop({ type: [String] }),
+    __metadata("design:type", Array)
+], CanActivateDto.prototype, "requiredRoles", void 0);
+__decorate([
+    Prop({ type: [String] }),
+    __metadata("design:type", Array)
+], CanActivateDto.prototype, "requiredPermissions", void 0);

package/dist/dto/forgot-password.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"forgot-password.dto.d.ts","sourceRoot":"","sources":["../../src/dto/forgot-password.dto.ts"],"names":[],"mappings":"AAEA,qBAAa,iBAAiB;IACiB,QAAQ,EAAE,MAAM,CAAC;CAC/D"}
+{"version":3,"file":"forgot-password.dto.d.ts","sourceRoot":"","sources":["../../src/dto/forgot-password.dto.ts"],"names":[],"mappings":"AAEA,qBAAa,iBAAiB;IACA,QAAQ,EAAE,MAAM,CAAC;CAC9C"}

package/dist/dto/forgot-password.dto.js

@@ -4,6 +4,6 @@ export class ForgotPasswordDto {
     username;
 }
 __decorate([
-    Prop({ required: true, format: 'email' }),
+    Prop({ required: true }),
     __metadata("design:type", String)
 ], ForgotPasswordDto.prototype, "username", void 0);

package/dist/dto/login-with-otp.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login-with-otp.dto.d.ts","sourceRoot":"","sources":["../../src/dto/login-with-otp.dto.ts"],"names":[],"mappings":"AAEA,qBAAa,eAAe;IACmB,QAAQ,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACvD"}
+{"version":3,"file":"login-with-otp.dto.d.ts","sourceRoot":"","sources":["../../src/dto/login-with-otp.dto.ts"],"names":[],"mappings":"AAEA,qBAAa,eAAe;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACzC"}

package/dist/dto/login-with-otp.dto.js

@@ -5,10 +5,10 @@ export class LoginWithOtpDto {
     otp;
 }
 __decorate([
-    Prop({ required: true, format: 'email' }),
+    Prop({ required: true }),
     __metadata("design:type", String)
 ], LoginWithOtpDto.prototype, "username", void 0);
 __decorate([
-    Prop({ required: true, minLength: 6 }),
+    Prop({ required: true }),
     __metadata("design:type", String)
 ], LoginWithOtpDto.prototype, "otp", void 0);

package/dist/dto/login.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.dto.d.ts","sourceRoot":"","sources":["../../src/dto/login.dto.ts"],"names":[],"mappings":"AAEA,qBAAa,QAAQ;IAC0B,QAAQ,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClE"}
+{"version":3,"file":"login.dto.d.ts","sourceRoot":"","sources":["../../src/dto/login.dto.ts"],"names":[],"mappings":"AAEA,qBAAa,QAAQ;IACS,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAC9C"}

package/dist/dto/login.dto.js

@@ -5,10 +5,10 @@ export class LoginDto {
     password;
 }
 __decorate([
-    Prop({ required: true, format: 'email' }),
+    Prop({ required: true }),
     __metadata("design:type", String)
 ], LoginDto.prototype, "username", void 0);
 __decorate([
-    Prop({ required: true, format: 'password' }),
+    Prop({ required: true }),
     __metadata("design:type", String)
 ], LoginDto.prototype, "password", void 0);

package/dist/guards/auth-client.guard.d.ts

@@ -0,0 +1,14 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { Reflector } from '@nestjs/core';
+import { AuthClientOptions } from '../types/auth-client-options.js';
+import { AuthRequest } from '../types/auth-request.js';
+export declare class AuthClientGuard implements CanActivate {
+    protected readonly reflector: Reflector;
+    protected readonly config: ConfigService;
+    protected readonly serviceOptions: AuthClientOptions;
+    constructor(reflector: Reflector, config: ConfigService, serviceOptions: AuthClientOptions);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    extractToken(request: AuthRequest): string;
+}
+//# sourceMappingURL=auth-client.guard.d.ts.map

package/dist/guards/auth-client.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-client.guard.d.ts","sourceRoot":"","sources":["../../src/guards/auth-client.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAqC,MAAM,gBAAgB,CAAC;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAIzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,qBACa,eAAgB,YAAW,WAAW;IAE3C,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS;IACvC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa;IACb,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,iBAAiB;gBAF5D,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,aAAa,EACM,cAAc,EAAE,iBAAiB;IAG7E,WAAW,CAAC,OAAO,EAAE,gBAAgB;IAwC3C,YAAY,CAAC,OAAO,EAAE,WAAW;CAYpC"}

package/dist/guards/auth-client.guard.js

@@ -0,0 +1,64 @@
+import { __decorate, __metadata, __param } from "tslib";
+import { Injectable, UnauthorizedException } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { Reflector } from '@nestjs/core';
+import { getOperationName, getPermissions, getRoles, isPublic } from '@vnodes/metadata';
+import { CanActivateDto } from '../dto/can-activate.dto.js';
+import { InjectAutoClientOptions } from '../providers/auth-client-options.provider.js';
+import { AuthClientOptions } from '../types/auth-client-options.js';
+let AuthClientGuard = class AuthClientGuard {
+    reflector;
+    config;
+    serviceOptions;
+    constructor(reflector, config, serviceOptions) {
+        this.reflector = reflector;
+        this.config = config;
+        this.serviceOptions = serviceOptions;
+    }
+    async canActivate(context) {
+        const req = context.switchToHttp().getRequest();
+        if (isPublic(this.reflector, context)) {
+            return true;
+        }
+        const headers = new Headers();
+        const resourceName = getOperationName(this.reflector, context);
+        const operationName = getOperationName(this.reflector, context);
+        const permit = `${this.serviceOptions.appId}.${resourceName}.${operationName}`;
+        const customPermissions = getPermissions(this.reflector, context) ?? [];
+        const customRoles = getRoles(this.reflector, context) ?? [];
+        const token = this.extractToken(req);
+        headers.set('authorization', token);
+        const policy = new CanActivateDto({
+            requiredRoles: [...customRoles],
+            requiredPermissions: [permit, ...customPermissions],
+        });
+        const bodyAsString = JSON.stringify(policy);
+        const res = await fetch(this.serviceOptions.authServiceUrl, {
+            method: 'POST',
+            headers,
+            body: bodyAsString,
+        });
+        if (res.status > 200 && res.status < 300) {
+            return true;
+        }
+        return false;
+    }
+    extractToken(request) {
+        const rawToken = request.headers.authorization;
+        if (!rawToken) {
+            throw new UnauthorizedException('No token');
+        }
+        const [type, token] = rawToken.split(' ');
+        if (type === 'Bearer' && token)
+            return token;
+        throw new UnauthorizedException('Invalid token ');
+    }
+};
+AuthClientGuard = __decorate([
+    Injectable(),
+    __param(2, InjectAutoClientOptions()),
+    __metadata("design:paramtypes", [Reflector,
+        ConfigService,
+        AuthClientOptions])
+], AuthClientGuard);
+export { AuthClientGuard };

package/dist/guards/auth.guard.d.ts

@@ -1,6 +1,7 @@
 import { CanActivate, ExecutionContext } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
 import { Reflector } from '@nestjs/core';
+import { UserManager } from 'src/types/user-manager.js';
 import { AuthUserService } from '../services/auth-user.service.js';
 import { AuthRequest } from '../types/auth-request.js';
 export declare class AuthGuard implements CanActivate {
@@ -9,6 +10,7 @@ export declare class AuthGuard implements CanActivate {
     protected readonly authUserService: AuthUserService;
     constructor(config: ConfigService, reflector: Reflector, authUserService: AuthUserService);
     canActivate(context: ExecutionContext): Promise<boolean>;
+    protected isAutorized(context: ExecutionContext, user: UserManager): boolean;
     extractToken(request: AuthRequest): string;
 }
 //# sourceMappingURL=auth.guard.d.ts.map

package/dist/guards/auth.guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.guard.d.ts","sourceRoot":"","sources":["../../src/guards/auth.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAqC,MAAM,gBAAgB,CAAC;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,qBACa,SAAU,YAAW,WAAW;IAErC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa;IACxC,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS;IACvC,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,eAAe;gBAFhC,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,SAAS,EACpB,eAAe,EAAE,eAAe;IAGjD,WAAW,CAAC,OAAO,EAAE,gBAAgB;IA0C3C,YAAY,CAAC,OAAO,EAAE,WAAW;CAYpC"}
+{"version":3,"file":"auth.guard.d.ts","sourceRoot":"","sources":["../../src/guards/auth.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAqC,MAAM,gBAAgB,CAAC;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AASzC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,qBACa,SAAU,YAAW,WAAW;IAErC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa;IACxC,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS;IACvC,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,eAAe;gBAFhC,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,SAAS,EACpB,eAAe,EAAE,eAAe;IAGjD,WAAW,CAAC,OAAO,EAAE,gBAAgB;IAgB3C,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW;IAgClE,YAAY,CAAC,OAAO,EAAE,WAAW;CAYpC"}

package/dist/guards/auth.guard.js

@@ -2,7 +2,7 @@ import { __decorate, __metadata } from "tslib";
 import { Injectable, UnauthorizedException } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
 import { Reflector } from '@nestjs/core';
-import { getOperationName, getPermissions, getResourceName, getRoles, isPublic } from '@vnodes/metadata';
+import { getOperationName, getPermissions, getResourceName, getRoles, isByPassAuthorization, isPublic, } from '@vnodes/metadata';
 import { AuthUserService } from '../services/auth-user.service.js';
 let AuthGuard = class AuthGuard {
     config;
@@ -17,30 +17,36 @@ let AuthGuard = class AuthGuard {
         if (isPublic(this.reflector, context)) {
             return true;
         }
-        const appId = this.config.getOrThrow('APP_ID', 'none');
+        const req = context.switchToHttp().getRequest();
+        const token = this.extractToken(req);
+        const user = await this.authUserService.findByToken(token);
+        req.user = user.user;
+        if (isByPassAuthorization(this.reflector, context)) {
+            return true;
+        }
+        return this.isAutorized(context, user);
+    }
+    isAutorized(context, user) {
+        const appId = this.config.getOrThrow('APP_ID');
         const resourceName = getResourceName(this.reflector, context);
         const operationName = getOperationName(this.reflector, context);
-        const requiredPermissions = `${appId}.${resourceName}.${operationName}`;
-        const customRequiredPermission = getPermissions(this.reflector, context);
-        const requiredRoles = getRoles(this.reflector, context);
-        const authRequest = context.switchToHttp().getRequest();
-        const token = this.extractToken(authRequest);
-        const user = await this.authUserService.findByToken(token);
-        authRequest.user = user.user;
+        const customPermits = getPermissions(this.reflector, context);
+        const customRoles = getRoles(this.reflector, context);
+        const permit = `${appId}.${resourceName}.${operationName}`;
         if (user.isAdmin()) {
             return true;
         }
-        if (customRequiredPermission && customRequiredPermission.length > 0) {
-            if (!user.hasPermissions(customRequiredPermission)) {
+        if (customPermits && customPermits.length > 0) {
+            if (!user.hasAllPermissions(customPermits)) {
                 return false;
             }
         }
-        if (requiredRoles && requiredRoles.length > 0) {
-            if (!user.hasRoles(requiredRoles)) {
+        if (customRoles && customRoles.length > 0) {
+            if (!user.hasSomeRoles(customRoles)) {
                 return false;
             }
         }
-        if (!user.hasPermissions([requiredPermissions])) {
+        if (!user.hasAllPermissions([permit])) {
             return false;
         }
         return true;

package/dist/index.d.ts

@@ -1,7 +1,10 @@
 export * from './auth.controller.js';
 export * from './auth.module.js';
+export * from './client/auth-client.module.js';
 export * from './context/context.js';
 export * from './dto/access-token.dto.js';
+export * from './dto/can-activate.dto.js';
+export * from './dto/can-activate-response-dto.js';
 export * from './dto/email-otp-event.dto.js';
 export * from './dto/forgot-password.dto.js';
 export * from './dto/login.dto.js';
@@ -11,9 +14,12 @@ export * from './dto/otp-response-dto.js';
 export * from './dto/update-password.dto.js';
 export * from './dto/update-password-event.dto.js';
 export * from './guards/auth.guard.js';
+export * from './guards/auth-client.guard.js';
+export * from './providers/auth-client-options.provider.js';
 export * from './services/auth.service.js';
 export * from './services/auth-listener.service.js';
 export * from './services/auth-user.service.js';
+export * from './types/auth-client-options.js';
 export * from './types/auth-request.js';
 export * from './types/jwt-payload.js';
 export * from './types/user.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oCAAoC,CAAC;AACnD,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oCAAoC,CAAC;AACnD,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC"}

package/dist/index.js

@@ -1,8 +1,11 @@
 // @index(['./**/*.ts', '!./**/*.spec.ts', '!./**/{main,serve,index}.ts', '!./**/prisma', '!./**/generated'], f => `export * from '${f.path}.js'`)
 export * from './auth.controller.js';
 export * from './auth.module.js';
+export * from './client/auth-client.module.js';
 export * from './context/context.js';
 export * from './dto/access-token.dto.js';
+export * from './dto/can-activate.dto.js';
+export * from './dto/can-activate-response-dto.js';
 export * from './dto/email-otp-event.dto.js';
 export * from './dto/forgot-password.dto.js';
 export * from './dto/login.dto.js';
@@ -12,9 +15,12 @@ export * from './dto/otp-response-dto.js';
 export * from './dto/update-password.dto.js';
 export * from './dto/update-password-event.dto.js';
 export * from './guards/auth.guard.js';
+export * from './guards/auth-client.guard.js';
+export * from './providers/auth-client-options.provider.js';
 export * from './services/auth.service.js';
 export * from './services/auth-listener.service.js';
 export * from './services/auth-user.service.js';
+export * from './types/auth-client-options.js';
 export * from './types/auth-request.js';
 export * from './types/jwt-payload.js';
 export * from './types/user.js';

package/dist/providers/auth-client-options.provider.d.ts

@@ -0,0 +1,5 @@
+import { Provider } from '@nestjs/common';
+export declare function getAuthClientOptionsToken(): string;
+export declare function provideAuthClientOptions(): Provider;
+export declare const InjectAutoClientOptions: () => PropertyDecorator & ParameterDecorator;
+//# sourceMappingURL=auth-client-options.provider.d.ts.map

package/dist/providers/auth-client-options.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-client-options.provider.d.ts","sourceRoot":"","sources":["../../src/providers/auth-client-options.provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAKlD,wBAAgB,yBAAyB,WAExC;AAED,wBAAgB,wBAAwB,IAAI,QAAQ,CAanD;AAED,eAAO,MAAM,uBAAuB,8CAA4C,CAAC"}

package/dist/providers/auth-client-options.provider.js

@@ -0,0 +1,21 @@
+import { Inject } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { Env } from '@vnodes/metadata';
+export function getAuthClientOptionsToken() {
+    return 'AUTH_CLIENT_OPTIONS_TOKEN';
+}
+export function provideAuthClientOptions() {
+    return {
+        inject: [ConfigService],
+        provide: getAuthClientOptionsToken(),
+        useFactory(config) {
+            const appId = config.getOrThrow(Env.APP_ID);
+            const authHost = config.getOrThrow(Env.AUTH_SERVICE_URL);
+            return {
+                appId,
+                authServiceUrl: `${authHost}/api/auth/can-activate`,
+            };
+        },
+    };
+}
+export const InjectAutoClientOptions = () => Inject(getAuthClientOptionsToken());

package/dist/services/auth-user.service.d.ts

@@ -12,7 +12,12 @@ export declare class AuthUserService {
     deleteByUsername(username: string): void;
     load(users: User[]): void;
     findByUsername(username: string): UserManager;
-    findByToken(token: string): UserManager;
+    /**
+     * Find user by token and username or throw not found exception
+     * @param token
+     * @returns
+     */
+    findByToken(token: string): Promise<UserManager>;
     findByUuid(uuid: string): UserManager;
     deleteToken(token: string): boolean;
     updateToken(token: string, username: string): void;

package/dist/services/auth-user.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-user.service.d.ts","sourceRoot":"","sources":["../../src/services/auth-user.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,qBACa,eAAe;IAMZ,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU;IAL9C,SAAS,CAAC,QAAQ,CAAC,WAAW,oBAA2B;IACzD,SAAS,CAAC,QAAQ,CAAC,eAAe,sBAA6B;IAC/D,SAAS,CAAC,QAAQ,CAAC,gBAAgB,sBAA6B;IAChE,SAAS,CAAC,QAAQ,CAAC,cAAc,sBAA6B;gBAE/B,GAAG,EAAE,UAAU;IAE9C,MAAM,CAAC,IAAI,EAAE,IAAI;IAIjB,gBAAgB,CAAC,QAAQ,EAAE,MAAM;IAIjC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;IAQlB,cAAc,CAAC,QAAQ,EAAE,MAAM;IAQ/B,WAAW,CAAC,KAAK,EAAE,MAAM;IASzB,UAAU,CAAC,IAAI,EAAE,MAAM;IAQvB,WAAW,CAAC,KAAK,EAAE,MAAM;IAOzB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAI3C,SAAS,CAAC,QAAQ,EAAE,MAAM;IAM1B,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;IAYxC,SAAS,CAAC,QAAQ,EAAE,MAAM;CAG7B"}
+{"version":3,"file":"auth-user.service.d.ts","sourceRoot":"","sources":["../../src/services/auth-user.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,qBACa,eAAe;IAMZ,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU;IAL9C,SAAS,CAAC,QAAQ,CAAC,WAAW,oBAA2B;IACzD,SAAS,CAAC,QAAQ,CAAC,eAAe,sBAA6B;IAC/D,SAAS,CAAC,QAAQ,CAAC,gBAAgB,sBAA6B;IAChE,SAAS,CAAC,QAAQ,CAAC,cAAc,sBAA6B;gBAE/B,GAAG,EAAE,UAAU;IAE9C,MAAM,CAAC,IAAI,EAAE,IAAI;IAIjB,gBAAgB,CAAC,QAAQ,EAAE,MAAM;IAIjC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;IAQlB,cAAc,CAAC,QAAQ,EAAE,MAAM;IAQ/B;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM;IAa/B,UAAU,CAAC,IAAI,EAAE,MAAM;IAQvB,WAAW,CAAC,KAAK,EAAE,MAAM;IAOzB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAI3C,SAAS,CAAC,QAAQ,EAAE,MAAM;IAM1B,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;IAYxC,SAAS,CAAC,QAAQ,EAAE,MAAM;CAG7B"}

package/dist/services/auth-user.service.js

@@ -32,12 +32,23 @@ let AuthUserService = class AuthUserService {
         }
         throw new NotFoundException(`The user ${username} not found`);
     }
-    findByToken(token) {
+    /**
+     * Find user by token and username or throw not found exception
+     * @param token
+     * @returns
+     */
+    async findByToken(token) {
         const username = this.tokenUsernameMap.get(token);
         if (username) {
             return this.findByUsername(username);
         }
-        throw new UnauthorizedException(`User not found by token`);
+        else {
+            const paylaod = await this.jwt.verifyAsync(token);
+            const userManager = this.findByUsername(paylaod.username);
+            userManager.verifyVersion(paylaod.version);
+            this.tokenUsernameMap.set(token, paylaod.username);
+            return this.findByUsername(paylaod.username);
+        }
     }
     findByUuid(uuid) {
         const username = this.uuidUsernameMap.get(uuid);

package/dist/services/auth.service.d.ts

@@ -1,10 +1,12 @@
 import { EventEmitter2 } from '@nestjs/event-emitter';
-import { UpdatePasswordDto } from 'src/dto/update-password.dto.js';
 import { AccessTokenDto } from '../dto/access-token.dto.js';
+import { CanActivateDto } from '../dto/can-activate.dto.js';
+import { CanActivateResponseDto } from '../dto/can-activate-response-dto.js';
 import { ForgotPasswordDto } from '../dto/forgot-password.dto.js';
 import { LoginDto } from '../dto/login.dto.js';
 import { LoginWithOtpDto } from '../dto/login-with-otp.dto.js';
 import { MessageDto } from '../dto/message.dto.js';
+import { UpdatePasswordDto } from '../dto/update-password.dto.js';
 import { AuthUserService } from './auth-user.service.js';
 export declare class AuthService {
     protected readonly authUserService: AuthUserService;
@@ -41,5 +43,6 @@ export declare class AuthService {
      */
     updatePassword(uuid: string, body: UpdatePasswordDto): Promise<MessageDto>;
     profile(uuid: string): import("../index.js").UserManager;
+    canActivate(username: string, body: CanActivateDto): Promise<CanActivateResponseDto>;
 }
 //# sourceMappingURL=auth.service.d.ts.map

package/dist/services/auth.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,qBACa,WAAW;IAEhB,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,eAAe;IACnD,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,aAAa;gBAD3B,eAAe,EAAE,eAAe,EAChC,YAAY,EAAE,aAAa;IAGlD;;;;OAIG;IACG,KAAK,CAAC,IAAI,EAAE,QAAQ;IAQ1B;;;;OAIG;IACG,YAAY,CAAC,IAAI,EAAE,eAAe;IAQxC;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM;IAKpB;;;;OAIG;IACH,cAAc,CAAC,IAAI,EAAE,iBAAiB;IAMtC;;;;OAIG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB;IAK1D,OAAO,CAAC,IAAI,EAAE,MAAM;CAGvB"}
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,qBACa,WAAW;IAEhB,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,eAAe;IACnD,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,aAAa;gBAD3B,eAAe,EAAE,eAAe,EAChC,YAAY,EAAE,aAAa;IAGlD;;;;OAIG;IACG,KAAK,CAAC,IAAI,EAAE,QAAQ;IAQ1B;;;;OAIG;IACG,YAAY,CAAC,IAAI,EAAE,eAAe;IAQxC;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM;IAKpB;;;;OAIG;IACH,cAAc,CAAC,IAAI,EAAE,iBAAiB;IAMtC;;;;OAIG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB;IAK1D,OAAO,CAAC,IAAI,EAAE,MAAM;IAId,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc;CAO3D"}

package/dist/services/auth.service.js

@@ -3,6 +3,7 @@ import { Injectable } from '@nestjs/common';
 import { EventEmitter2 } from '@nestjs/event-emitter';
 import { hash } from '@vnodes/crypto';
 import { AccessTokenDto } from '../dto/access-token.dto.js';
+import { CanActivateResponseDto } from '../dto/can-activate-response-dto.js';
 import { MessageDto } from '../dto/message.dto.js';
 import { OtpResponseDto } from '../dto/otp-response-dto.js';
 import { AuthUserService } from './auth-user.service.js';
@@ -68,6 +69,12 @@ let AuthService = class AuthService {
     profile(uuid) {
         return this.authUserService.findByUuid(uuid);
     }
+    async canActivate(username, body) {
+        const found = this.authUserService.findByUsername(username);
+        return new CanActivateResponseDto({
+            canActivate: !!found.canActivate(body),
+        });
+    }
 };
 AuthService = __decorate([
     Injectable(),

package/dist/types/auth-client-options.d.ts

@@ -0,0 +1,6 @@
+export declare class AuthClientOptions {
+    appId: string;
+    authServiceUrl: string;
+    constructor(data: AuthClientOptions);
+}
+//# sourceMappingURL=auth-client-options.d.ts.map

package/dist/types/auth-client-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-client-options.d.ts","sourceRoot":"","sources":["../../src/types/auth-client-options.ts"],"names":[],"mappings":"AAAA,qBAAa,iBAAiB;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;gBAEX,IAAI,EAAE,iBAAiB;CAGtC"}

package/dist/types/auth-client-options.js

@@ -0,0 +1,7 @@
+export class AuthClientOptions {
+    appId;
+    authServiceUrl;
+    constructor(data) {
+        Object.assign(this, data);
+    }
+}

package/dist/types/user-manager.d.ts

@@ -1,4 +1,5 @@
 import { JwtService } from '@nestjs/jwt';
+import { CanActivateDto } from 'src/dto/can-activate.dto.js';
 import { JwtPayload } from './jwt-payload.js';
 import { User } from './user.js';
 export declare class UserManager {
@@ -28,11 +29,12 @@ export declare class UserManager {
     /**
      * Check the user has all {@link requiredPermissions} or throw {@link ForbiddenException}
      */
-    hasPermissions(requiredPermissions: string[]): boolean;
+    hasAllPermissions(requiredPermissions: string[]): boolean;
     /**
      * Check the user has one of the {@link requiredRoles} or throw {@link ForbiddenException}
      */
-    hasRoles(requiredRoles: string[]): boolean;
+    hasSomeRoles(requiredRoles: string[]): boolean;
+    canActivate(body: CanActivateDto): boolean | undefined;
     /**
      * Create the jwt payload object {@link JwtPayload}
      * @returns -- {@link JwtPayload}
@@ -55,5 +57,11 @@ export declare class UserManager {
      * @returns string or throw {@link UnauthorizedException} that indicated invalid or old versioned token
      */
     verifyToken(token: string): Promise<JwtPayload>;
+    /**
+     * Check the jwt version matches with the provided token's version or thow Invalid Jwt version error
+     * @param version
+     * @returns
+     */
+    verifyVersion(version: string): boolean;
 }
 //# sourceMappingURL=user-manager.d.ts.map

package/dist/types/user-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-manager.d.ts","sourceRoot":"","sources":["../../src/types/user-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,qBAAa,WAAW;IAEhB,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI;IACjC,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU;gBADf,QAAQ,EAAE,IAAI,EACd,GAAG,EAAE,UAAU;IAGtC;;OAEG;IACH,IAAI,IAAI,IAAI,IAAI,CAEf;IAED;;OAEG;IACH,IAAI,WAAW,gBAEd;IAED;;OAEG;IACH,IAAI,KAAK,gBAER;IAED;;OAEG;IACH,IAAI,OAAO,WAEV;IAED;;OAEG;IACH,OAAO;IAIP;;OAEG;IACH,cAAc,CAAC,mBAAmB,EAAE,MAAM,EAAE;IAO5C;;OAEG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE;IAOhC;;;OAGG;IACH,YAAY,IAAI,UAAU;IAQ1B;;;;OAIG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM;IAOtC;;;OAGG;IACG,SAAS;IAKf;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM;CASlC"}
+{"version":3,"file":"user-manager.d.ts","sourceRoot":"","sources":["../../src/types/user-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,qBAAa,WAAW;IAEhB,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI;IACjC,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU;gBADf,QAAQ,EAAE,IAAI,EACd,GAAG,EAAE,UAAU;IAGtC;;OAEG;IACH,IAAI,IAAI,IAAI,IAAI,CAEf;IAED;;OAEG;IACH,IAAI,WAAW,gBAEd;IAED;;OAEG;IACH,IAAI,KAAK,gBAER;IAED;;OAEG;IACH,IAAI,OAAO,WAEV;IAED;;OAEG;IACH,OAAO;IAIP;;OAEG;IACH,iBAAiB,CAAC,mBAAmB,EAAE,MAAM,EAAE;IAO/C;;OAEG;IACH,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE;IAOpC,WAAW,CAAC,IAAI,EAAE,cAAc;IAYhC;;;OAGG;IACH,YAAY,IAAI,UAAU;IAQ1B;;;;OAIG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM;IAOtC;;;OAGG;IACG,SAAS;IAKf;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM;IAM/B;;;;OAIG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM;CAMhC"}

package/dist/types/user-manager.js

@@ -36,12 +36,12 @@ export class UserManager {
      * Check the user has the "admin" role
      */
     isAdmin() {
-        return this.roles.has('admin');
+        return this.roles.has('Admin');
     }
     /**
      * Check the user has all {@link requiredPermissions} or throw {@link ForbiddenException}
      */
-    hasPermissions(requiredPermissions) {
+    hasAllPermissions(requiredPermissions) {
         if (requiredPermissions.every((permission) => this.permisisons.has(permission))) {
             return true;
         }
@@ -50,12 +50,20 @@ export class UserManager {
     /**
      * Check the user has one of the {@link requiredRoles} or throw {@link ForbiddenException}
      */
-    hasRoles(requiredRoles) {
+    hasSomeRoles(requiredRoles) {
         if (requiredRoles.some((role) => this.roles.has(role))) {
             return true;
         }
         throw new ForbiddenException('Insufficient role');
     }
+    canActivate(body) {
+        const { requiredPermissions, requiredRoles } = body;
+        if (this.isAdmin()) {
+            return true;
+        }
+        return ((requiredRoles && this.hasSomeRoles(requiredRoles)) ||
+            (requiredPermissions && this.hasAllPermissions(requiredPermissions)));
+    }
     /**
      * Create the jwt payload object {@link JwtPayload}
      * @returns -- {@link JwtPayload}
@@ -93,9 +101,18 @@ export class UserManager {
      */
     async verifyToken(token) {
         const jwtPayload = await this.jwt.verifyAsync(token);
-        if (jwtPayload.version === this.version) {
-            return jwtPayload;
+        this.verifyVersion(jwtPayload.version);
+        return jwtPayload;
+    }
+    /**
+     * Check the jwt version matches with the provided token's version or thow Invalid Jwt version error
+     * @param version
+     * @returns
+     */
+    verifyVersion(version) {
+        if (this.version !== version) {
+            throw new UnauthorizedException(`Invalid jwt version`);
         }
-        throw new UnauthorizedException(`Invalid jwt version`);
+        return true;
     }
 }

package/package.json

@@ -19,7 +19,7 @@
       "url": "https://cash.app/$puqlib"
     }
   ],
-  "version": "0.0.8",
+  "version": "0.0.13",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -61,8 +61,8 @@
     "@nestjs/jwt": "^11.0.2",
     "@nestjs/swagger": "^11.2.6",
     "@nestjs/throttler": "^6.5.0",
-    "@vnodes/crypto": "0.0.8",
-    "@vnodes/metadata": "0.0.8",
-    "@vnodes/property": "0.0.8"
+    "@vnodes/crypto": "0.0.13",
+    "@vnodes/metadata": "0.0.13",
+    "@vnodes/property": "0.0.13"
   }
 }