@volontariapp/auth 1.0.0 → 2.0.0-next.20260407111312

package/dist/auth.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.module.d.ts","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAIpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD,qBAEa,UAAU;IACrB,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,aAAa;CAcpD"}
+{"version":3,"file":"auth.module.d.ts","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAIpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD,qBAEa,UAAU;IACrB,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,aAAa;CAkBpD"}

package/dist/auth.module.js

@@ -18,7 +18,11 @@ let AuthModule = AuthModule_1 = class AuthModule {
                     provide: AUTH_OPTIONS,
                     useValue: options,
                 },
-                JwtService,
+                {
+                    provide: JwtService,
+                    useFactory: (opts) => new JwtService(opts),
+                    inject: [AUTH_OPTIONS],
+                },
                 GrpcMetadataHelper,
             ],
             exports: [JwtService, GrpcMetadataHelper],

package/dist/auth.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":";;;;;;;AACA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAIjE,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACrB,MAAM,CAAC,QAAQ,CAAC,OAAmB;QACjC,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,YAAY;oBACrB,QAAQ,EAAE,OAAO;iBAClB;gBACD,UAAU;gBACV,kBAAkB;aACnB;YACD,OAAO,EAAE,CAAC,UAAU,EAAE,kBAAkB,CAAC;SAC1C,CAAC;IACJ,CAAC;CACF,CAAA;AAfY,UAAU;IAFtB,MAAM,EAAE;IACR,MAAM,CAAC,EAAE,CAAC;GACE,UAAU,CAetB"}
+{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":";;;;;;;AACA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAIjE,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACrB,MAAM,CAAC,QAAQ,CAAC,OAAmB;QACjC,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,YAAY;oBACrB,QAAQ,EAAE,OAAO;iBAClB;gBACD;oBACE,OAAO,EAAE,UAAU;oBACnB,UAAU,EAAE,CAAC,IAAgB,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC;oBACtD,MAAM,EAAE,CAAC,YAAY,CAAC;iBACvB;gBACD,kBAAkB;aACnB;YACD,OAAO,EAAE,CAAC,UAAU,EAAE,kBAAkB,CAAC;SAC1C,CAAC;IACJ,CAAC;CACF,CAAA;AAnBY,UAAU;IAFtB,MAAM,EAAE;IACR,MAAM,CAAC,EAAE,CAAC;GACE,UAAU,CAmBtB"}

package/dist/decorators/roles.decorator.d.ts

@@ -0,0 +1,3 @@
+export declare const ROLES_KEY = "roles";
+export declare const Roles: (...roles: string[]) => import("@nestjs/common").CustomDecorator<string>;
+//# sourceMappingURL=roles.decorator.d.ts.map

package/dist/decorators/roles.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.decorator.d.ts","sourceRoot":"","sources":["../../src/decorators/roles.decorator.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS,UAAU,CAAC;AACjC,eAAO,MAAM,KAAK,aAAc,MAAM,EAAE,qDAAkC,CAAC"}

package/dist/decorators/roles.decorator.js

@@ -0,0 +1,4 @@
+import { SetMetadata } from '@nestjs/common';
+export const ROLES_KEY = 'roles';
+export const Roles = (...roles) => SetMetadata(ROLES_KEY, roles);
+//# sourceMappingURL=roles.decorator.js.map

package/dist/decorators/roles.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.decorator.js","sourceRoot":"","sources":["../../src/decorators/roles.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC;AACjC,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,GAAG,KAAe,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC"}

package/dist/errors/auth.errors.d.ts

@@ -0,0 +1,13 @@
+import { UnauthorizedError, ForbiddenError, InternalServerError } from '@volontariapp/errors';
+export declare const INVALID_INTERNAL_TOKEN: (details?: string) => UnauthorizedError;
+export declare const MISSING_INTERNAL_TOKEN: () => UnauthorizedError;
+export declare const INVALID_ACCESS_TOKEN: (details?: string) => UnauthorizedError;
+export declare const MISSING_ACCESS_TOKEN: () => UnauthorizedError;
+export declare const INVALID_REFRESH_TOKEN: (details?: string) => UnauthorizedError;
+export declare const MISSING_REFRESH_TOKEN: () => UnauthorizedError;
+export declare const INSUFFICIENT_PERMISSIONS: () => ForbiddenError;
+export declare const MISSING_AUTHENTICATED_USER: () => ForbiddenError;
+export declare const CONFIG_ERROR: (message: string) => InternalServerError;
+export declare const INVALID_TOKEN_PAYLOAD: (type: string) => InternalServerError;
+export declare const VERIFY_TOKEN_FAILED: (type: string, details: string) => InternalServerError;
+//# sourceMappingURL=auth.errors.d.ts.map

package/dist/errors/auth.errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.errors.d.ts","sourceRoot":"","sources":["../../src/errors/auth.errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE9F,eAAO,MAAM,sBAAsB,aAAc,MAAM,sBAKpD,CAAC;AAEJ,eAAO,MAAM,sBAAsB,yBAAwD,CAAC;AAE5F,eAAO,MAAM,oBAAoB,aAAc,MAAM,sBAKlD,CAAC;AAEJ,eAAO,MAAM,oBAAoB,yBAAsD,CAAC;AAExF,eAAO,MAAM,qBAAqB,aAAc,MAAM,sBAKnD,CAAC;AAEJ,eAAO,MAAM,qBAAqB,yBAAuD,CAAC;AAE1F,eAAO,MAAM,wBAAwB,sBACsC,CAAC;AAE5E,eAAO,MAAM,0BAA0B,sBAC2B,CAAC;AAEnE,eAAO,MAAM,YAAY,YAAa,MAAM,wBACW,CAAC;AAExD,eAAO,MAAM,qBAAqB,SAAU,MAAM,wBAC4B,CAAC;AAE/E,eAAO,MAAM,mBAAmB,SAAU,MAAM,WAAW,MAAM,wBAC0B,CAAC"}

package/dist/errors/auth.errors.js

@@ -0,0 +1,19 @@
+import { UnauthorizedError, ForbiddenError, InternalServerError } from '@volontariapp/errors';
+export const INVALID_INTERNAL_TOKEN = (details) => new UnauthorizedError(details !== undefined && details !== ''
+    ? `Invalid internal token: ${details}`
+    : 'Invalid internal token');
+export const MISSING_INTERNAL_TOKEN = () => new UnauthorizedError('Missing internal token');
+export const INVALID_ACCESS_TOKEN = (details) => new UnauthorizedError(details !== undefined && details !== ''
+    ? `Invalid access token: ${details}`
+    : 'Invalid access token');
+export const MISSING_ACCESS_TOKEN = () => new UnauthorizedError('Missing access token');
+export const INVALID_REFRESH_TOKEN = (details) => new UnauthorizedError(details !== undefined && details !== ''
+    ? `Invalid refresh token: ${details}`
+    : 'Invalid refresh token');
+export const MISSING_REFRESH_TOKEN = () => new UnauthorizedError('Missing refresh token');
+export const INSUFFICIENT_PERMISSIONS = () => new ForbiddenError('You do not have the required role for this resource');
+export const MISSING_AUTHENTICATED_USER = () => new ForbiddenError('No authenticated user found for role check');
+export const CONFIG_ERROR = (message) => new InternalServerError(message, 'AUTH_CONFIG_ERROR');
+export const INVALID_TOKEN_PAYLOAD = (type) => new InternalServerError(`Invalid ${type} token payload`, 'AUTH_TOKEN_ERROR');
+export const VERIFY_TOKEN_FAILED = (type, details) => new InternalServerError(`Failed to verify ${type} token: ${details}`, 'AUTH_TOKEN_ERROR');
+//# sourceMappingURL=auth.errors.js.map

package/dist/errors/auth.errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.errors.js","sourceRoot":"","sources":["../../src/errors/auth.errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE9F,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAgB,EAAE,EAAE,CACzD,IAAI,iBAAiB,CACnB,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;IACrC,CAAC,CAAC,2BAA2B,OAAO,EAAE;IACtC,CAAC,CAAC,wBAAwB,CAC7B,CAAC;AAEJ,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,EAAE,CAAC,IAAI,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;AAE5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAgB,EAAE,EAAE,CACvD,IAAI,iBAAiB,CACnB,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;IACrC,CAAC,CAAC,yBAAyB,OAAO,EAAE;IACpC,CAAC,CAAC,sBAAsB,CAC3B,CAAC;AAEJ,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,EAAE,CAAC,IAAI,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;AAExF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAgB,EAAE,EAAE,CACxD,IAAI,iBAAiB,CACnB,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;IACrC,CAAC,CAAC,0BAA0B,OAAO,EAAE;IACrC,CAAC,CAAC,uBAAuB,CAC5B,CAAC;AAEJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,EAAE,CAAC,IAAI,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;AAE1F,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,EAAE,CAC3C,IAAI,cAAc,CAAC,qDAAqD,CAAC,CAAC;AAE5E,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,EAAE,CAC7C,IAAI,cAAc,CAAC,4CAA4C,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAe,EAAE,EAAE,CAC9C,IAAI,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;AAExD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,IAAY,EAAE,EAAE,CACpD,IAAI,mBAAmB,CAAC,WAAW,IAAI,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;AAE/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CACnE,IAAI,mBAAmB,CAAC,oBAAoB,IAAI,WAAW,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC"}

package/dist/errors/index.d.ts

@@ -0,0 +1,2 @@
+export * from './auth.errors.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC"}

package/dist/errors/index.js

@@ -0,0 +1,2 @@
+export * from './auth.errors.js';
+//# sourceMappingURL=index.js.map

package/dist/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC"}

package/dist/guards/access-token.guard.d.ts

@@ -0,0 +1,8 @@
+import type { CanActivate, ExecutionContext } from '@nestjs/common';
+import { JwtService } from '../services/jwt.service.js';
+export declare class AccessTokenGuard implements CanActivate {
+    private readonly jwtService;
+    constructor(jwtService: JwtService);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}
+//# sourceMappingURL=access-token.guard.d.ts.map

package/dist/guards/access-token.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-token.guard.d.ts","sourceRoot":"","sources":["../../src/guards/access-token.guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGxD,qBACa,gBAAiB,YAAW,WAAW;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAE7C,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAgB/D"}

package/dist/guards/access-token.guard.js

@@ -0,0 +1,39 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Injectable } from '@nestjs/common';
+import { JwtService } from '../services/jwt.service.js';
+import { MISSING_ACCESS_TOKEN, INVALID_ACCESS_TOKEN } from '../errors/auth.errors.js';
+let AccessTokenGuard = class AccessTokenGuard {
+    jwtService;
+    constructor(jwtService) {
+        this.jwtService = jwtService;
+    }
+    async canActivate(context) {
+        const request = context.switchToHttp().getRequest();
+        const token = request['accessToken'];
+        if (typeof token !== 'string') {
+            throw MISSING_ACCESS_TOKEN();
+        }
+        try {
+            const user = await this.jwtService.verifyAccessToken(token);
+            request['user'] = user;
+            return true;
+        }
+        catch (error) {
+            throw INVALID_ACCESS_TOKEN(error instanceof Error ? error.message : undefined);
+        }
+    }
+};
+AccessTokenGuard = __decorate([
+    Injectable(),
+    __metadata("design:paramtypes", [JwtService])
+], AccessTokenGuard);
+export { AccessTokenGuard };
+//# sourceMappingURL=access-token.guard.js.map

package/dist/guards/access-token.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-token.guard.js","sourceRoot":"","sources":["../../src/guards/access-token.guard.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAG/E,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IACE;IAA7B,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAEvD,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAA2B,CAAC;QAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QAErC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,oBAAoB,EAAE,CAAC;QAC/B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC5D,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,oBAAoB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;CACF,CAAA;AAnBY,gBAAgB;IAD5B,UAAU,EAAE;qCAE8B,UAAU;GADxC,gBAAgB,CAmB5B"}

package/dist/guards/grpc-internal.guard.d.ts

@@ -1,8 +1,7 @@
 import type { CanActivate, ExecutionContext } from '@nestjs/common';
-import type { JwtService } from '../services/jwt.service.js';
+import { JwtService } from '../services/jwt.service.js';
 export declare class GrpcInternalGuard implements CanActivate {
     private readonly jwtService;
-    private readonly logger;
     constructor(jwtService: JwtService);
     canActivate(context: ExecutionContext): Promise<boolean>;
 }

package/dist/guards/grpc-internal.guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grpc-internal.guard.d.ts","sourceRoot":"","sources":["../../src/guards/grpc-internal.guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAG7D,qBACa,iBAAkB,YAAW,WAAW;IAGvC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAFvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;gBAEhC,UAAU,EAAE,UAAU;IAE7C,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CA6B/D"}
+{"version":3,"file":"grpc-internal.guard.d.ts","sourceRoot":"","sources":["../../src/guards/grpc-internal.guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAKxD,qBACa,iBAAkB,YAAW,WAAW;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAE7C,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAiB/D"}

package/dist/guards/grpc-internal.guard.js

@@ -7,44 +7,35 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-var GrpcInternalGuard_1;
-import { Injectable, Logger } from '@nestjs/common';
-import { UnauthorizedError } from '@volontariapp/errors';
+import { Injectable } from '@nestjs/common';
+import { JwtService } from '../services/jwt.service.js';
 import { INTERNAL_TOKEN_METADATA_KEY } from '../constants/index.js';
-let GrpcInternalGuard = GrpcInternalGuard_1 = class GrpcInternalGuard {
+import { MISSING_INTERNAL_TOKEN, INVALID_INTERNAL_TOKEN } from '../errors/auth.errors.js';
+let GrpcInternalGuard = class GrpcInternalGuard {
     jwtService;
-    logger = new Logger(GrpcInternalGuard_1.name);
     constructor(jwtService) {
         this.jwtService = jwtService;
     }
     async canActivate(context) {
-        if (context.getType() !== 'rpc') {
-            return true;
-        }
-        const rpcArgumentsHost = context.switchToRpc();
-        const metadata = rpcArgumentsHost.getContext();
-        const tokens = metadata.get(INTERNAL_TOKEN_METADATA_KEY);
-        if (tokens.length === 0) {
-            this.logger.warn(`Missing ${INTERNAL_TOKEN_METADATA_KEY} in metadata`);
-            throw new UnauthorizedError('Missing internal token');
-        }
+        const rpcContext = context.switchToRpc().getContext();
+        const tokens = rpcContext.get(INTERNAL_TOKEN_METADATA_KEY);
         const token = tokens[0];
+        if (typeof token !== 'string') {
+            throw MISSING_INTERNAL_TOKEN();
+        }
         try {
             const user = await this.jwtService.verifyInternal(token);
-            const rpcContext = rpcArgumentsHost.getContext();
-            rpcContext.user = user;
+            rpcContext['user'] = user;
             return true;
         }
         catch (error) {
-            const message = error instanceof Error ? error.message : 'Unknown error';
-            this.logger.error(`Invalid internal token: ${message}`);
-            throw new UnauthorizedError('Invalid internal token');
+            throw INVALID_INTERNAL_TOKEN(error instanceof Error ? error.message : undefined);
         }
     }
 };
-GrpcInternalGuard = GrpcInternalGuard_1 = __decorate([
+GrpcInternalGuard = __decorate([
     Injectable(),
-    __metadata("design:paramtypes", [Function])
+    __metadata("design:paramtypes", [JwtService])
 ], GrpcInternalGuard);
 export { GrpcInternalGuard };
 //# sourceMappingURL=grpc-internal.guard.js.map

package/dist/guards/grpc-internal.guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"grpc-internal.guard.js","sourceRoot":"","sources":["../../src/guards/grpc-internal.guard.ts"],"names":[],"mappings":";;;;;;;;;;AACA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAG7D,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAGC;IAFZ,MAAM,GAAG,IAAI,MAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IAE7D,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAEvD,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,IAAI,OAAO,CAAC,OAAO,EAAE,KAAK,KAAK,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAY,CAAC;QACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAEzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,2BAA2B,cAAc,CAAC,CAAC;YACvE,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAW,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAEzD,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,EAA2B,CAAC;YAC1E,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC;YAEvB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;YACxD,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;CACF,CAAA;AAlCY,iBAAiB;IAD7B,UAAU,EAAE;;GACA,iBAAiB,CAkC7B"}
+{"version":3,"file":"grpc-internal.guard.js","sourceRoot":"","sources":["../../src/guards/grpc-internal.guard.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAInF,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAEvD,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,EAAY,CAAC;QAChE,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAExB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,sBAAsB,EAAE,CAAC;QACjC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACxD,UAAiD,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,sBAAsB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;CACF,CAAA;AApBY,iBAAiB;IAD7B,UAAU,EAAE;qCAE8B,UAAU;GADxC,iBAAiB,CAoB7B"}

package/dist/guards/refresh-token.guard.d.ts

@@ -0,0 +1,8 @@
+import type { CanActivate, ExecutionContext } from '@nestjs/common';
+import { JwtService } from '../services/jwt.service.js';
+export declare class RefreshTokenGuard implements CanActivate {
+    private readonly jwtService;
+    constructor(jwtService: JwtService);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}
+//# sourceMappingURL=refresh-token.guard.d.ts.map

package/dist/guards/refresh-token.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.guard.d.ts","sourceRoot":"","sources":["../../src/guards/refresh-token.guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGxD,qBACa,iBAAkB,YAAW,WAAW;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAE7C,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAgB/D"}

package/dist/guards/refresh-token.guard.js

@@ -0,0 +1,39 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Injectable } from '@nestjs/common';
+import { JwtService } from '../services/jwt.service.js';
+import { MISSING_REFRESH_TOKEN, INVALID_REFRESH_TOKEN } from '../errors/auth.errors.js';
+let RefreshTokenGuard = class RefreshTokenGuard {
+    jwtService;
+    constructor(jwtService) {
+        this.jwtService = jwtService;
+    }
+    async canActivate(context) {
+        const request = context.switchToHttp().getRequest();
+        const token = request['refreshToken'];
+        if (typeof token !== 'string') {
+            throw MISSING_REFRESH_TOKEN();
+        }
+        try {
+            const user = await this.jwtService.verifyRefreshToken(token);
+            request['user'] = user;
+            return true;
+        }
+        catch (error) {
+            throw INVALID_REFRESH_TOKEN(error instanceof Error ? error.message : undefined);
+        }
+    }
+};
+RefreshTokenGuard = __decorate([
+    Injectable(),
+    __metadata("design:paramtypes", [JwtService])
+], RefreshTokenGuard);
+export { RefreshTokenGuard };
+//# sourceMappingURL=refresh-token.guard.js.map

package/dist/guards/refresh-token.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.guard.js","sourceRoot":"","sources":["../../src/guards/refresh-token.guard.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjF,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAEvD,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAA2B,CAAC;QAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;QAEtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,qBAAqB,EAAE,CAAC;QAChC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC7D,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,qBAAqB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;CACF,CAAA;AAnBY,iBAAiB;IAD7B,UAAU,EAAE;qCAE8B,UAAU;GADxC,iBAAiB,CAmB7B"}

package/dist/guards/roles.guard.d.ts

@@ -0,0 +1,8 @@
+import type { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+export declare class RolesGuard implements CanActivate {
+    private readonly reflector;
+    constructor(reflector: Reflector);
+    canActivate(context: ExecutionContext): boolean;
+}
+//# sourceMappingURL=roles.guard.d.ts.map

package/dist/guards/roles.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.guard.d.ts","sourceRoot":"","sources":["../../src/guards/roles.guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAKzC,qBACa,UAAW,YAAW,WAAW;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,SAAS;IAEjD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CAsBhD"}

package/dist/guards/roles.guard.js

@@ -0,0 +1,42 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Injectable } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { ROLES_KEY } from '../decorators/roles.decorator.js';
+import { INSUFFICIENT_PERMISSIONS, MISSING_AUTHENTICATED_USER } from '../errors/auth.errors.js';
+let RolesGuard = class RolesGuard {
+    reflector;
+    constructor(reflector) {
+        this.reflector = reflector;
+    }
+    canActivate(context) {
+        const requiredRoles = this.reflector.getAllAndOverride(ROLES_KEY, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        if (requiredRoles.length === 0) {
+            return true;
+        }
+        const { user } = context.switchToHttp().getRequest();
+        if (!user) {
+            throw MISSING_AUTHENTICATED_USER();
+        }
+        if (!requiredRoles.includes(user.role)) {
+            throw INSUFFICIENT_PERMISSIONS();
+        }
+        return true;
+    }
+};
+RolesGuard = __decorate([
+    Injectable(),
+    __metadata("design:paramtypes", [Reflector])
+], RolesGuard);
+export { RolesGuard };
+//# sourceMappingURL=roles.guard.js.map

package/dist/guards/roles.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.guard.js","sourceRoot":"","sources":["../../src/guards/roles.guard.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAIzF,IAAM,UAAU,GAAhB,MAAM,UAAU;IACQ;IAA7B,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,WAAW,CAAC,OAAyB;QACnC,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAW,SAAS,EAAE;YAC1E,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAuB,CAAC;QAE1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,0BAA0B,EAAE,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,wBAAwB,EAAE,CAAC;QACnC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAzBY,UAAU;IADtB,UAAU,EAAE;qCAE6B,SAAS;GADtC,UAAU,CAyBtB"}

package/dist/index.d.ts

@@ -1,10 +1,17 @@
 import 'reflect-metadata';
 export * from './constants/index.js';
 export * from './interfaces/index.js';
+export * from './errors/index.js';
 export * from './services/jwt.service.js';
 export * from './services/grpc-metadata.helper.js';
 export * from './auth.module.js';
 export * from './guards/grpc-internal.guard.js';
+export * from './guards/access-token.guard.js';
+export * from './guards/refresh-token.guard.js';
+export * from './guards/roles.guard.js';
+export * from './middlewares/access-token.middleware.js';
+export * from './middlewares/refresh-token.middleware.js';
 export * from './decorators/current-user.decorator.js';
+export * from './decorators/roles.decorator.js';
 export * from './interceptors/grpc-internal.interceptor.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,kBAAkB,CAAC;AACjC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,kBAAkB,CAAC;AACjC,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,0CAA0C,CAAC;AACzD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,iCAAiC,CAAC;AAChD,cAAc,6CAA6C,CAAC"}

package/dist/index.js

@@ -1,10 +1,17 @@
 import 'reflect-metadata';
 export * from './constants/index.js';
 export * from './interfaces/index.js';
+export * from './errors/index.js';
 export * from './services/jwt.service.js';
 export * from './services/grpc-metadata.helper.js';
 export * from './auth.module.js';
 export * from './guards/grpc-internal.guard.js';
+export * from './guards/access-token.guard.js';
+export * from './guards/refresh-token.guard.js';
+export * from './guards/roles.guard.js';
+export * from './middlewares/access-token.middleware.js';
+export * from './middlewares/refresh-token.middleware.js';
 export * from './decorators/current-user.decorator.js';
+export * from './decorators/roles.decorator.js';
 export * from './interceptors/grpc-internal.interceptor.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,kBAAkB,CAAC;AACjC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,kBAAkB,CAAC;AACjC,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,0CAA0C,CAAC;AACzD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,iCAAiC,CAAC;AAChD,cAAc,6CAA6C,CAAC"}

package/dist/interceptors/grpc-internal.interceptor.d.ts

@@ -1,6 +1,6 @@
 import type { CallHandler, ExecutionContext, NestInterceptor } from '@nestjs/common';
 import type { Observable } from 'rxjs';
-import type { JwtService } from '../services/jwt.service.js';
+import { JwtService } from '../services/jwt.service.js';
 export declare class GrpcInternalInterceptor implements NestInterceptor {
     private readonly jwtService;
     constructor(jwtService: JwtService);

package/dist/interceptors/grpc-internal.interceptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grpc-internal.interceptor.d.ts","sourceRoot":"","sources":["../../src/interceptors/grpc-internal.interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAErF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAGvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAG7D,qBACa,uBAAwB,YAAW,eAAe;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAEnD,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC;CAc7E"}
+{"version":3,"file":"grpc-internal.interceptor.d.ts","sourceRoot":"","sources":["../../src/interceptors/grpc-internal.interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAErF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAGvC,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGxD,qBACa,uBAAwB,YAAW,eAAe;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAEnD,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC;CAgB7E"}

package/dist/interceptors/grpc-internal.interceptor.js

@@ -10,6 +10,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 import { Injectable } from '@nestjs/common';
 import { from } from 'rxjs';
 import { switchMap } from 'rxjs/operators';
+import { JwtService } from '../services/jwt.service.js';
 let GrpcInternalInterceptor = class GrpcInternalInterceptor {
     jwtService;
     constructor(jwtService) {
@@ -21,14 +22,16 @@ let GrpcInternalInterceptor = class GrpcInternalInterceptor {
         if (!user) {
             return next.handle();
         }
-        return from(this.jwtService.signInternal(user)).pipe(switchMap((_token) => {
+        return from(this.jwtService.signInternal(user)).pipe(switchMap((token) => {
+            const req = httpRequest;
+            req['internalToken'] = token;
             return next.handle();
         }));
     }
 };
 GrpcInternalInterceptor = __decorate([
     Injectable(),
-    __metadata("design:paramtypes", [Function])
+    __metadata("design:paramtypes", [JwtService])
 ], GrpcInternalInterceptor);
 export { GrpcInternalInterceptor };
 //# sourceMappingURL=grpc-internal.interceptor.js.map

package/dist/interceptors/grpc-internal.interceptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"grpc-internal.interceptor.js","sourceRoot":"","sources":["../../src/interceptors/grpc-internal.interceptor.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAKpC,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACL;IAA7B,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAEvD,SAAS,CAAC,OAAyB,EAAE,IAAiB;QACpD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAuB,CAAC;QAC7E,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC;QAE9B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAClD,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE;YACnB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAA;AAjBY,uBAAuB;IADnC,UAAU,EAAE;;GACA,uBAAuB,CAiBnC"}
+{"version":3,"file":"grpc-internal.interceptor.js","sourceRoot":"","sources":["../../src/interceptors/grpc-internal.interceptor.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAIjD,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACL;IAA7B,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAEvD,SAAS,CAAC,OAAyB,EAAE,IAAiB;QACpD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAuB,CAAC;QAC7E,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC;QAE9B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAClD,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;YAClB,MAAM,GAAG,GAAG,WAAiD,CAAC;YAC9D,GAAG,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC;YAC7B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAA;AAnBY,uBAAuB;IADnC,UAAU,EAAE;qCAE8B,UAAU;GADxC,uBAAuB,CAmBnC"}

package/dist/interfaces/auth-config.interface.d.ts

@@ -1,7 +1,12 @@
 export interface AuthConfig {
-    internalSecret: string;
-    gatewaySecret: string;
-    internalExpiresIn: number;
-    gatewayExpiresIn: number;
+    internalPrivateKeyPath?: string;
+    internalPublicKeyPath?: string;
+    accessTokenPrivateKeyPath?: string;
+    accessTokenPublicKeyPath?: string;
+    refreshTokenPrivateKeyPath?: string;
+    refreshTokenPublicKeyPath?: string;
+    readonly internalExpiresIn?: string | number;
+    readonly accessTokenExpiresIn?: string | number;
+    readonly refreshTokenExpiresIn?: string | number;
 }
 //# sourceMappingURL=auth-config.interface.d.ts.map

package/dist/interfaces/auth-config.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-config.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/auth-config.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;CAC1B"}
+{"version":3,"file":"auth-config.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/auth-config.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAClD"}

package/dist/interfaces/auth-user.interface.d.ts

@@ -1,5 +1,6 @@
 export interface AuthUser {
     id: string;
     role: string;
+    [key: string]: unknown;
 }
 //# sourceMappingURL=auth-user.interface.d.ts.map

package/dist/interfaces/auth-user.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-user.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/auth-user.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd"}
+{"version":3,"file":"auth-user.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/auth-user.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB"}

package/dist/middlewares/access-token.middleware.d.ts

@@ -0,0 +1,5 @@
+import type { NestMiddleware } from '@nestjs/common';
+export declare class AccessTokenMiddleware implements NestMiddleware {
+    use(req: unknown, _res: unknown, next: unknown): void;
+}
+//# sourceMappingURL=access-token.middleware.d.ts.map

package/dist/middlewares/access-token.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-token.middleware.d.ts","sourceRoot":"","sources":["../../src/middlewares/access-token.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGrD,qBACa,qBAAsB,YAAW,cAAc;IAC1D,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI;CAuBtD"}

package/dist/middlewares/access-token.middleware.js

@@ -0,0 +1,34 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Injectable } from '@nestjs/common';
+let AccessTokenMiddleware = class AccessTokenMiddleware {
+    use(req, _res, next) {
+        const request = req;
+        const nextFn = next;
+        const headers = (request['headers'] ?? {});
+        const authHeader = headers['authorization'];
+        let token;
+        if (typeof authHeader === 'string' && authHeader.startsWith('Bearer ')) {
+            token = authHeader.split(' ')[1];
+        }
+        else if (request['cookies'] !== undefined &&
+            typeof request['cookies'] === 'object' &&
+            request['cookies'] !== null) {
+            const cookies = request['cookies'];
+            token = cookies['accessToken'] ?? cookies['access_token'];
+        }
+        if (typeof token === 'string' && token !== '') {
+            request['accessToken'] = token;
+        }
+        nextFn();
+    }
+};
+AccessTokenMiddleware = __decorate([
+    Injectable()
+], AccessTokenMiddleware);
+export { AccessTokenMiddleware };
+//# sourceMappingURL=access-token.middleware.js.map

package/dist/middlewares/access-token.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-token.middleware.js","sourceRoot":"","sources":["../../src/middlewares/access-token.middleware.ts"],"names":[],"mappings":";;;;;;AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAGrC,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,GAAG,CAAC,GAAY,EAAE,IAAa,EAAE,IAAa;QAC5C,MAAM,OAAO,GAAG,GAA8B,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAkB,CAAC;QAClC,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAA4B,CAAC;QACtE,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,KAAyB,CAAC;QAE9B,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvE,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;aAAM,IACL,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS;YAChC,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ;YACtC,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,EAC3B,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAuC,CAAC;YACzE,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC9C,OAAO,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC;QACjC,CAAC;QACD,MAAM,EAAE,CAAC;IACX,CAAC;CACF,CAAA;AAxBY,qBAAqB;IADjC,UAAU,EAAE;GACA,qBAAqB,CAwBjC"}

package/dist/middlewares/refresh-token.middleware.d.ts

@@ -0,0 +1,5 @@
+import type { NestMiddleware } from '@nestjs/common';
+export declare class RefreshTokenMiddleware implements NestMiddleware {
+    use(req: unknown, _res: unknown, next: unknown): void;
+}
+//# sourceMappingURL=refresh-token.middleware.d.ts.map

package/dist/middlewares/refresh-token.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.middleware.d.ts","sourceRoot":"","sources":["../../src/middlewares/refresh-token.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGrD,qBACa,sBAAuB,YAAW,cAAc;IAC3D,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI;CAmBtD"}

package/dist/middlewares/refresh-token.middleware.js

@@ -0,0 +1,29 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Injectable } from '@nestjs/common';
+let RefreshTokenMiddleware = class RefreshTokenMiddleware {
+    use(req, _res, next) {
+        const request = req;
+        const nextFn = next;
+        let token;
+        if (request['cookies'] !== undefined &&
+            typeof request['cookies'] === 'object' &&
+            request['cookies'] !== null) {
+            const cookies = request['cookies'];
+            token = cookies['refreshToken'] ?? cookies['refresh_token'];
+        }
+        if (typeof token === 'string' && token !== '') {
+            request['refreshToken'] = token;
+        }
+        nextFn();
+    }
+};
+RefreshTokenMiddleware = __decorate([
+    Injectable()
+], RefreshTokenMiddleware);
+export { RefreshTokenMiddleware };
+//# sourceMappingURL=refresh-token.middleware.js.map