@wazobiatech/auth-middleware 1.0.8 → 1.0.9

package/dist/middlewares/project.guard.d.ts

@@ -1,19 +1,44 @@
 import { Response, NextFunction } from 'express';
 import { AuthenticatedRequest } from '../types/jwt-payload';
 export declare class ProjectAuthMiddleware {
-    private jwksCacheKey;
+    private serviceJwksCacheKey;
     private jwksCacheTTL;
-    constructor();
+    private serviceName;
+    constructor(serviceName: string);
     /**
-     * Main authentication middleware for project tokens
+     * Main authentication middleware for platform, project and service tokens
      */
     authenticate(req: AuthenticatedRequest): Promise<void>;
     /**
-     * Validate project token using cached JWKS + RSA verification
+     * Inject platform token context
+     */
+    private injectPlatformContext;
+    /**
+     * Inject project token context
+     */
+    private injectProjectContext;
+    /**
+     * Inject service token context
+     */
+    private injectServiceContext;
+    /**
+     * Validate token using cached JWKS + RSA verification
+     */
+    private validateToken;
+    /**
+     * Validate platform token structure and revocation
+     */
+    private validatePlatformToken;
+    /**
+     * Validate project token structure, secret version, and revocation
      */
     private validateProjectToken;
     /**
-     * Get RSA public key from cached JWKS (with 5+ hour caching)
+     * Validate service token structure (stateless - no revocation check)
+     */
+    private validateServiceToken;
+    /**
+     * Get RSA public key from cached JWKS with auto-refresh on key miss
      */
     private getPublicKeyFromCache;
     /**
@@ -25,21 +50,21 @@ export declare class ProjectAuthMiddleware {
      */
     private decodeJwtHeader;
     /**
-   * Get current project secret version from Redis (cached by Mercury)
-   */
-    private getCurrentProjectSecretVersion;
+     * Decode JWT payload to extract tenant_id and type (without verification)
+     */
+    private decodeJwtPayload;
+    /**
+     * Get current secret version from Redis (cached by Mercury)
+     */
+    private getCurrentSecretVersion;
     /**
      * Express middleware factory
      */
-    static middleware(): (req: AuthenticatedRequest, res: Response, next: NextFunction) => Promise<void>;
+    static middleware(serviceName: string): (req: AuthenticatedRequest, res: Response, next: NextFunction) => Promise<void>;
     /**
      * Update JWKS cache TTL (can be increased beyond 5 hours)
      */
     setCacheTTL(seconds: number): void;
-    /**
-     * Manually refresh JWKS cache
-     */
-    refreshJWKSCache(): Promise<void>;
     /**
      * Cleanup Redis connection
      */

package/dist/middlewares/project.guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project.guard.d.ts","sourceRoot":"","sources":["../../src/middlewares/project.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAKjD,OAAO,EAAE,oBAAoB,EAAuB,MAAM,sBAAsB,CAAC;AAIjF,qBAAa,qBAAqB;IAChC,OAAO,CAAC,YAAY,CAAwB;IAC5C,OAAO,CAAC,YAAY,CAAS;;IAI7B;;OAEG;IACG,YAAY,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IA0D5D;;OAEG;YACW,oBAAoB;IAmElC;;OAEG;YACW,qBAAqB;IAwCnC;;OAEG;YACW,iBAAiB;IAuD/B;;OAEG;IACH,OAAO,CAAC,eAAe;IAUvB;;KAEC;YACa,8BAA8B;IAuB5C;;OAEG;IACH,MAAM,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC;IAOpG;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIlC;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIvC;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAI/B;AAED,eAAe,qBAAqB,CAAC"}
+{"version":3,"file":"project.guard.d.ts","sourceRoot":"","sources":["../../src/middlewares/project.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAKjD,OAAO,EACL,oBAAoB,EAIrB,MAAM,sBAAsB,CAAC;AAI9B,qBAAa,qBAAqB;IAChC,OAAO,CAAC,mBAAmB,CAAwB;IACnD,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,WAAW,CAAS;gBAEhB,WAAW,EAAE,MAAM;IAI/B;;OAEG;IACG,YAAY,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IA+C5D;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAa7B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA4B5B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAmB5B;;OAEG;YACW,aAAa;IA8C3B;;OAEG;YACW,qBAAqB;IAkCnC;;OAEG;YACW,oBAAoB;IA2ClC;;OAEG;YACW,oBAAoB;IAsBlC;;OAEG;YACW,qBAAqB;IA0EnC;;OAEG;YACW,iBAAiB;IA0D/B;;OAEG;IACH,OAAO,CAAC,eAAe;IAUvB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAUxB;;OAEG;YACW,uBAAuB;IAoBrC;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,CACtC,GAAG,EAAE,oBAAoB,EACzB,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,KACf,OAAO,CAAC,IAAI,CAAC;IAelB;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIlC;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAI/B;AAED,eAAe,qBAAqB,CAAC"}

package/dist/middlewares/project.guard.js

@@ -42,66 +42,109 @@ const axios_1 = __importDefault(require("axios"));
 const jose = __importStar(require("node-jose"));
 const crypto = __importStar(require("crypto"));
 const redis_connection_1 = __importDefault(require("../utils/redis.connection"));
-// Redis-cached JWKS Project Authentication Middleware
+// Redis-cached JWKS Authentication Middleware for Platform, Project & Service Tokens
 class ProjectAuthMiddleware {
-    constructor() {
-        this.jwksCacheKey = 'project_jwks_cache';
+    constructor(serviceName) {
+        this.serviceJwksCacheKey = 'service_jwks_cache';
         this.jwksCacheTTL = 18000; // 5 hours in seconds
+        this.serviceName = serviceName.toLowerCase();
     }
     /**
-     * Main authentication middleware for project tokens
+     * Main authentication middleware for platform, project and service tokens
      */
     async authenticate(req) {
         try {
             // Extract token from x-project-token header
             const authHeader = req.headers['x-project-token'];
             if (!authHeader) {
-                throw new Error(`No project token provided, required_header: 'x-project-token'`);
+                throw new Error(`No token provided, required_header: 'x-project-token'`);
             }
-            // Handle Bearer prefix`
+            // Handle Bearer prefix
             const token = authHeader.startsWith('Bearer ')
                 ? authHeader.slice(7)
                 : authHeader;
             if (!token) {
-                throw new Error('Empty project token');
+                throw new Error('Empty token');
             }
-            // Validate project token using cached JWKS
-            const validation = await this.validateProjectToken(token);
+            // Validate token using cached JWKS
+            const validation = await this.validateToken(token);
             if (!validation.isValid) {
-                throw new Error(`Invalid project token, message: ${validation.error}`);
-                return;
+                throw new Error(`Invalid token: ${validation.error}`);
             }
-            // Check if current service is enabled for this project
-            const serviceId = process.env.SERVICE_ID;
-            if (!serviceId) {
-                throw new Error('Service ID not configured');
+            const payload = validation.payload;
+            // Route based on token type
+            switch (payload.type) {
+                case 'platform':
+                    this.injectPlatformContext(req, payload);
+                    break;
+                case 'project':
+                    this.injectProjectContext(req, payload);
+                    break;
+                case 'service':
+                    this.injectServiceContext(req, payload);
+                    break;
+                default:
+                    throw new Error(`Invalid token type: ${JSON.stringify(payload)}`);
             }
-            const hasAccess = validation.payload.enabled_services.includes(serviceId);
-            if (!hasAccess) {
-                throw new Error(`
-          error: Service access denied,
-          service_id: ${serviceId},
-          project: ${validation.payload.project_uuid},
-          enabled_services: ${validation.payload.enabled_services}
-        `);
-            }
-            // Inject project context into request (NO user context)
-            req.project = {
-                project_uuid: validation.payload.project_uuid,
-                enabled_services: validation.payload.enabled_services,
-                secret_version: validation.payload.secret_version,
-                token_id: validation.payload.token_id,
-                expires_at: validation.payload.exp
-            };
         }
         catch (error) {
-            throw new Error(`Authentication service error ${error}`);
+            throw new Error(`Authentication service error: ${error.message}`);
         }
     }
     /**
-     * Validate project token using cached JWKS + RSA verification
+     * Inject platform token context
+     */
+    injectPlatformContext(req, payload) {
+        req.platform = {
+            tenant_id: payload.tenant_id,
+            project_uuid: payload.tenant_id,
+            scopes: payload.scopes || [],
+            token_id: payload.token_id,
+            expires_at: payload.exp
+        };
+    }
+    /**
+     * Inject project token context
+     */
+    injectProjectContext(req, payload) {
+        // Check if current service is enabled for this project
+        const enabledServices = payload.enabled_services || [];
+        const serviceId = process.env.SERVICE_ID || this.serviceName;
+        if (!enabledServices.includes(serviceId)) {
+            throw new Error(`Service access denied. Service '${serviceId}' is not enabled for this project. ` +
+                `Enabled services: ${enabledServices.join(', ')}`);
+        }
+        // Inject project context into request
+        req.project = {
+            tenant_id: payload.tenant_id,
+            project_uuid: payload.tenant_id,
+            enabled_services: enabledServices,
+            scopes: payload.scopes || [],
+            secret_version: payload.secret_version,
+            token_id: payload.token_id,
+            expires_at: payload.exp
+        };
+    }
+    /**
+     * Inject service token context
      */
-    async validateProjectToken(token) {
+    injectServiceContext(req, payload) {
+        // Parse scopes from space-separated string
+        const scopes = payload.scope ? payload.scope.split(' ') : [];
+        req.service = {
+            client_id: payload.client_id,
+            service_name: payload.service_name,
+            scopes: scopes,
+            token_id: payload.jti,
+            issued_at: payload.iat,
+            expires_at: payload.exp
+        };
+        console.log(`Service authenticated: ${payload.service_name}, scopes: ${scopes.join(', ')}`);
+    }
+    /**
+     * Validate token using cached JWKS + RSA verification
+     */
+    async validateToken(token) {
         try {
             // Get public key from cached JWKS
             const publicKey = await this.getPublicKeyFromCache(token);
@@ -117,36 +160,22 @@ class ProjectAuthMiddleware {
                 };
             }
             const payload = verified;
-            // Validate project token structure
-            if (!payload.project_uuid || !payload.token_id || !Array.isArray(payload.enabled_services)) {
-                return {
-                    isValid: false,
-                    error: 'Invalid project token structure'
-                };
+            // Validate based on token type
+            if (payload.type === 'platform') {
+                return await this.validatePlatformToken(payload);
             }
-            const currentSecretVersion = await this.getCurrentProjectSecretVersion(payload.project_uuid);
-            if (currentSecretVersion > 0 && payload.secret_version < currentSecretVersion) {
-                return {
-                    isValid: false,
-                    error: `Token secret version outdated (token: ${payload.secret_version}, current: ${currentSecretVersion}) - re-authentication required`
-                };
+            else if (payload.type === 'project') {
+                return await this.validateProjectToken(payload);
             }
-            const redis = await redis_connection_1.default.getInstance();
-            // Check if token is in Redis cache (for revocation)
-            const tokenExists = await redis.sendCommand([
-                'EXISTS',
-                `project_token:${payload.token_id}`
-            ]);
-            if (tokenExists === 0) {
+            else if (payload.type === 'service') {
+                return await this.validateServiceToken(payload);
+            }
+            else {
                 return {
                     isValid: false,
-                    error: 'Token has been revoked'
+                    error: `Unsupported token type: ${payload.type}.`
                 };
             }
-            return {
-                isValid: true,
-                payload
-            };
         }
         catch (error) {
             return {
@@ -156,7 +185,89 @@ class ProjectAuthMiddleware {
         }
     }
     /**
-     * Get RSA public key from cached JWKS (with 5+ hour caching)
+     * Validate platform token structure and revocation
+     */
+    async validatePlatformToken(payload) {
+        // Validate structure
+        if (!payload.tenant_id || !payload.token_id) {
+            return {
+                isValid: false,
+                error: 'Invalid platform token structure'
+            };
+        }
+        const redis = await redis_connection_1.default.getInstance();
+        // Check if token is revoked
+        const tokenExists = await redis.sendCommand([
+            'EXISTS',
+            `platform_token:${payload.token_id}`
+        ]);
+        if (tokenExists === 0) {
+            return {
+                isValid: false,
+                error: 'Token has been revoked'
+            };
+        }
+        return {
+            isValid: true,
+            payload
+        };
+    }
+    /**
+     * Validate project token structure, secret version, and revocation
+     */
+    async validateProjectToken(payload) {
+        // Validate structure
+        if (!payload.tenant_id || !payload.token_id || !Array.isArray(payload.enabled_services)) {
+            return {
+                isValid: false,
+                error: 'Invalid project token structure'
+            };
+        }
+        const redis = await redis_connection_1.default.getInstance();
+        // Check secret version
+        const currentSecretVersion = await this.getCurrentSecretVersion(payload.tenant_id);
+        if (currentSecretVersion > 0 && payload.secret_version < currentSecretVersion) {
+            return {
+                isValid: false,
+                error: `Token secret version outdated (token: ${payload.secret_version}, current: ${currentSecretVersion}) - re-authentication required`
+            };
+        }
+        // Check if token is revoked
+        const tokenExists = await redis.sendCommand([
+            'EXISTS',
+            `project_token:${payload.token_id}`
+        ]);
+        if (tokenExists === 0) {
+            return {
+                isValid: false,
+                error: 'Token has been revoked'
+            };
+        }
+        return {
+            isValid: true,
+            payload
+        };
+    }
+    /**
+     * Validate service token structure (stateless - no revocation check)
+     */
+    async validateServiceToken(payload) {
+        // Validate structure
+        if (!payload.client_id || !payload.service_name || !payload.jti) {
+            return {
+                isValid: false,
+                error: 'Invalid service token structure'
+            };
+        }
+        // Service tokens are stateless - no Redis revocation check
+        // Only signature + expiration validation (done by jwt.verify)
+        return {
+            isValid: true,
+            payload
+        };
+    }
+    /**
+     * Get RSA public key from cached JWKS with auto-refresh on key miss
      */
     async getPublicKeyFromCache(token) {
         try {
@@ -165,30 +276,57 @@ class ProjectAuthMiddleware {
             if (!header.kid) {
                 throw new Error('Missing key ID in token header');
             }
+            // Extract payload to determine token type
+            const payload = this.decodeJwtPayload(token);
+            // Determine JWKS endpoint and cache key based on token type
+            let cacheKey;
+            let jwksPath;
+            if (payload.type === 'service') {
+                cacheKey = this.serviceJwksCacheKey;
+                jwksPath = 'auth/service/.well-known/jwks.json';
+                console.log('Service token detected, using service JWKS endpoint');
+            }
+            else {
+                // ✅ CACHE PER TENANT - Each tenant gets its own cache
+                const tenantId = payload.tenant_id;
+                cacheKey = `jwks_cache:${tenantId}`; // ← Per-tenant cache key
+                jwksPath = `auth/projects/${tenantId}/.well-known/jwks.json`;
+                console.log(`${payload.type} token detected, tenant_id: ${tenantId}`);
+            }
             // Check Redis for cached JWKS
             const redis = await redis_connection_1.default.getInstance();
             const cachedJwks = await redis.sendCommand([
                 'GET',
-                this.jwksCacheKey
+                cacheKey
             ]);
             let keyStore;
             if (cachedJwks) {
-                // Use cached JWKS
+                console.log('Using cached JWKS from Redis');
                 const jwksData = JSON.parse(cachedJwks);
                 keyStore = await jose.JWK.asKeyStore(jwksData);
+                // ✅ AUTO-REFRESH: Try to get the key, if not found fetch fresh JWKS
+                const key = keyStore.get(header.kid);
+                if (!key) {
+                    console.log(`Key ${header.kid} not found in cache, fetching fresh JWKS`);
+                    keyStore = await this.fetchAndCacheJWKS(jwksPath, cacheKey);
+                    // Try again with fresh JWKS
+                    const freshKey = keyStore.get(header.kid);
+                    if (!freshKey) {
+                        throw new Error(`Key ${header.kid} not found even after JWKS refresh`);
+                    }
+                    return freshKey.toPEM(false);
+                }
+                return key.toPEM(false);
             }
             else {
-                // Fetch fresh JWKS from Mercury and cache it
-                keyStore = await this.fetchAndCacheJWKS();
-            }
-            // Get the specific key
-            const key = keyStore.get(header.kid);
-            if (!key) {
-                throw new Error(`Key ${header.kid} not found in JWKS`);
+                console.log('No cached JWKS found, fetching from Mercury');
+                keyStore = await this.fetchAndCacheJWKS(jwksPath, cacheKey);
+                const key = keyStore.get(header.kid);
+                if (!key) {
+                    throw new Error(`Key ${header.kid} not found in JWKS`);
+                }
+                return key.toPEM(false);
             }
-            // Return PEM format public key
-            const publicKey = key.toPEM(false);
-            return publicKey;
         }
         catch (error) {
             throw new Error(`Failed to get public key: ${error.message}`);
@@ -197,20 +335,20 @@ class ProjectAuthMiddleware {
     /**
      * Fetch JWKS from Mercury and cache in Redis
      */
-    async fetchAndCacheJWKS() {
+    async fetchAndCacheJWKS(path, cacheKey) {
         try {
-            const path = 'auth/project/.well-known/jwks.json';
             const jwksUri = `${process.env.MERCURY_BASE_URL}/${path}`;
             const timestamp = Date.now().toString();
             const signatureInput = 'GET' + `/${path}` + timestamp;
             const sharedSecret = process.env.SIGNATURE_SHARED_SECRET || '';
+            console.log(`Fetching JWKS from ${jwksUri}`);
             const signature = crypto
                 .createHmac('sha256', sharedSecret)
                 .update(signatureInput)
                 .digest('hex');
             const headers = {
                 Accept: 'application/json',
-                'User-Agent': 'Node-JWT-Strategy/1.0',
+                'User-Agent': 'Mercury-Auth-SDK/2.0',
                 'X-Timestamp': timestamp,
                 'X-Signature': signature,
             };
@@ -221,14 +359,15 @@ class ProjectAuthMiddleware {
             if (!response.data || !response.data.keys) {
                 throw new Error('Invalid JWKS response');
             }
-            // Cache JWKS in Redis for 5+ hours
+            // Cache JWKS in Redis
             const redis = await redis_connection_1.default.getInstance();
             await redis.sendCommand([
                 'SETEX',
-                this.jwksCacheKey,
+                cacheKey,
                 this.jwksCacheTTL.toString(),
                 JSON.stringify(response.data)
             ]);
+            console.log(`JWKS cached successfully with key: ${cacheKey}`);
             // Create and return key store
             return await jose.JWK.asKeyStore(response.data);
         }
@@ -255,34 +394,51 @@ class ProjectAuthMiddleware {
         return JSON.parse(headerJson);
     }
     /**
-   * Get current project secret version from Redis (cached by Mercury)
-   */
-    async getCurrentProjectSecretVersion(projectUuid) {
+     * Decode JWT payload to extract tenant_id and type (without verification)
+     */
+    decodeJwtPayload(token) {
+        const parts = token.split('.');
+        if (parts.length !== 3) {
+            throw new Error('Invalid JWT format');
+        }
+        const payloadJson = Buffer.from(parts[1], 'base64').toString();
+        return JSON.parse(payloadJson);
+    }
+    /**
+     * Get current secret version from Redis (cached by Mercury)
+     */
+    async getCurrentSecretVersion(tenantId) {
         try {
             const redis = await redis_connection_1.default.getInstance();
-            const cacheKey = `project_secret_version:${projectUuid}`;
+            const cacheKey = `tenant_secret_version:${tenantId}`;
             const cachedVersion = await redis.sendCommand([
                 'GET', cacheKey
             ]);
             if (cachedVersion) {
                 return parseInt(cachedVersion, 10);
             }
-            // If not in Redis, this means Mercury hasn't cached it yet
-            // This shouldn't happen in normal flow, but fallback to allowing the token
-            // Mercury's Kafka handler will eventually populate this
             return 0; // Default to allow if version not found
         }
         catch (error) {
-            throw new Error(`Failed to get project secret version: ${error.message}`);
+            throw new Error(`Failed to get secret version: ${error.message}`);
         }
     }
     /**
      * Express middleware factory
      */
-    static middleware() {
-        const authMiddleware = new ProjectAuthMiddleware();
-        return (req) => {
-            return authMiddleware.authenticate(req);
+    static middleware(serviceName) {
+        const authMiddleware = new ProjectAuthMiddleware(serviceName);
+        return async (req, res, next) => {
+            try {
+                await authMiddleware.authenticate(req);
+                next();
+            }
+            catch (error) {
+                res.status(401).json({
+                    error: 'Unauthorized',
+                    message: error.message
+                });
+            }
         };
     }
     /**
@@ -291,12 +447,6 @@ class ProjectAuthMiddleware {
     setCacheTTL(seconds) {
         this.jwksCacheTTL = seconds;
     }
-    /**
-     * Manually refresh JWKS cache
-     */
-    async refreshJWKSCache() {
-        await this.fetchAndCacheJWKS();
-    }
     /**
      * Cleanup Redis connection
      */

package/dist/middlewares/project.guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"project.guard.js","sourceRoot":"","sources":["../../src/middlewares/project.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,kDAAoC;AACpC,kDAA0B;AAC1B,gDAAkC;AAClC,+CAAiC;AAEjC,iFAA+D;AAE/D,sDAAsD;AACtD,MAAa,qBAAqB;IAIhC;QAHQ,iBAAY,GAAG,oBAAoB,CAAC;QACpC,iBAAY,GAAG,KAAK,CAAC,CAAC,qBAAqB;IAEnC,CAAC;IAEjB;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,GAAyB;QAC1C,IAAI,CAAC;YACH,4CAA4C;YAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAW,CAAC;YAE5D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;YACnF,CAAC;YAED,wBAAwB;YACxB,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;gBAC5C,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrB,CAAC,CAAC,UAAU,CAAC;YAEf,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC;YAED,2CAA2C;YAC3C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAE1D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,mCAAmC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;gBAEvE,OAAO;YACT,CAAC;YAED,uDAAuD;YACvD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YACzC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,SAAS,GAAG,UAAU,CAAC,OAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC;;wBAEA,SAAS;qBACZ,UAAU,CAAC,OAAQ,CAAC,YAAY;8BACvB,UAAU,CAAC,OAAQ,CAAC,gBAAgB;SACzD,CAAC,CAAC;YACL,CAAC;YAED,wDAAwD;YACxD,GAAG,CAAC,OAAO,GAAG;gBACZ,YAAY,EAAE,UAAU,CAAC,OAAQ,CAAC,YAAY;gBAC9C,gBAAgB,EAAE,UAAU,CAAC,OAAQ,CAAC,gBAAgB;gBACtD,cAAc,EAAE,UAAU,CAAC,OAAQ,CAAC,cAAc;gBAClD,QAAQ,EAAE,UAAU,CAAC,OAAQ,CAAC,QAAQ;gBACtC,UAAU,EAAE,UAAU,CAAC,OAAQ,CAAC,GAAG;aACpC,CAAC;QAGJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAAC,KAAa;QAK9C,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAE1D,iCAAiC;YACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE;gBAC5C,UAAU,EAAE,CAAC,OAAO,CAAC;gBACrB,gBAAgB,EAAE,KAAK;aACxB,CAAC,CAAC;YAEH,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,uBAAuB;iBAC/B,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,QAA+B,CAAC;YAEhD,mCAAmC;YACnC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC3F,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,iCAAiC;iBACzC,CAAC;YACJ,CAAC;YAED,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC7F,IAAI,oBAAoB,GAAG,CAAC,IAAI,OAAO,CAAC,cAAc,GAAG,oBAAoB,EAAE,CAAC;gBAC9E,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,yCAAyC,OAAO,CAAC,cAAc,cAAc,oBAAoB,gCAAgC;iBACzI,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;YACzD,oDAAoD;YACpD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;gBAC1C,QAAQ;gBACR,iBAAiB,OAAO,CAAC,QAAQ,EAAE;aACpC,CAAW,CAAC;YAEb,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,wBAAwB;iBAChC,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO;aACR,CAAC;QAEJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;aAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,qBAAqB,CAAC,KAAa;QAC/C,IAAI,CAAC;YACH,8BAA8B;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YAED,8BAA8B;YAC9B,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;gBACzC,KAAK;gBACL,IAAI,CAAC,YAAY;aAClB,CAAkB,CAAC;YAEpB,IAAI,QAA2B,CAAC;YAEhC,IAAI,UAAU,EAAE,CAAC;gBACf,kBAAkB;gBAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACxC,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,6CAA6C;gBAC7C,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5C,CAAC;YAED,uBAAuB;YACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAA6B,CAAC;YACjE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,OAAO,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC;YACzD,CAAC;YAED,+BAA+B;YAC/B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,oCAAoC,CAAA;YACjD,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,cAAc,GAAG,KAAK,GAAG,IAAI,IAAI,EAAE,GAAG,SAAS,CAAC;YACtD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC;YAE/D,MAAM,SAAS,GAAG,MAAM;iBACrB,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC;iBAClC,MAAM,CAAC,cAAc,CAAC;iBACtB,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjB,MAAM,OAAO,GAAG;gBACd,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,uBAAuB;gBACrC,aAAa,EAAE,SAAS;gBACxB,aAAa,EAAE,SAAS;aACzB,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAA0C,OAAO,EAAE;gBACjF,OAAO,EAAE,KAAK;gBACd,OAAO;aACR,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YAED,mCAAmC;YACnC,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,KAAK,CAAC,WAAW,CAAC;gBACtB,OAAO;gBACP,IAAI,CAAC,YAAY;gBACjB,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE;gBAC5B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;aAC9B,CAAC,CAAC;YAEH,8BAA8B;YAC9B,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAElD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,eAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,UAAU,GAAG,KAAK,CAAC;gBACzB,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBACvC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBACjD,CAAC;gBAED,MAAM,IAAI,KAAK,CAAC,QAAQ,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,SAAS,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,KAAa;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAED;;KAEC;IACO,KAAK,CAAC,8BAA8B,CAAC,WAAmB;QAC9D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,QAAQ,GAAG,0BAA0B,WAAW,EAAE,CAAC;YAEzD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;gBAC5C,KAAK,EAAE,QAAQ;aAChB,CAAkB,CAAC;YAEpB,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YACrC,CAAC;YAED,2DAA2D;YAC3D,2EAA2E;YAC3E,wDAAwD;YACxD,OAAO,CAAC,CAAC,CAAC,wCAAwC;QAEpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAAU;QACf,MAAM,cAAc,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACnD,OAAO,CAAC,GAAyB,EAAE,EAAE;YACnC,OAAO,cAAc,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC1C,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,OAAe;QACzB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;QACzD,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;CACF;AApTD,sDAoTC;AAED,kBAAe,qBAAqB,CAAC"}
+{"version":3,"file":"project.guard.js","sourceRoot":"","sources":["../../src/middlewares/project.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,kDAAoC;AACpC,kDAA0B;AAC1B,gDAAkC;AAClC,+CAAiC;AAOjC,iFAA+D;AAE/D,qFAAqF;AACrF,MAAa,qBAAqB;IAKhC,YAAY,WAAmB;QAJvB,wBAAmB,GAAG,oBAAoB,CAAC;QAC3C,iBAAY,GAAG,KAAK,CAAC,CAAC,qBAAqB;QAIjD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,GAAyB;QAC1C,IAAI,CAAC;YACH,4CAA4C;YAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAW,CAAC;YAE5D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;YAED,uBAAuB;YACvB,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;gBAC5C,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrB,CAAC,CAAC,UAAU,CAAC;YAEf,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;YACjC,CAAC;YAED,mCAAmC;YACnC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAEnD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,kBAAkB,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,CAAC,OAAQ,CAAC;YAEpC,4BAA4B;YAC5B,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrB,KAAK,UAAU;oBACb,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,OAA+B,CAAC,CAAC;oBACjE,MAAM;gBACR,KAAK,SAAS;oBACZ,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAA8B,CAAC,CAAC;oBAC/D,MAAM;gBACR,KAAK,SAAS;oBACZ,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAA8B,CAAC,CAAC;oBAC/D,MAAM;gBACR;oBACE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;QAEH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED;;OAEG;IACK,qBAAqB,CAC3B,GAAyB,EACzB,OAA6B;QAE7B,GAAG,CAAC,QAAQ,GAAG;YACb,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,SAAS;YAC/B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,GAAG;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,oBAAoB,CAC1B,GAAyB,EACzB,OAA4B;QAE5B,uDAAuD;QACvD,MAAM,eAAe,GAAG,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAEvD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,CAAC;QAE7D,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,mCAAmC,SAAS,qCAAqC;gBACjF,qBAAqB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClD,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,GAAG,CAAC,OAAO,GAAG;YACZ,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,SAAS;YAC/B,gBAAgB,EAAE,eAAe;YACjC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;YAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,GAAG;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,oBAAoB,CAC1B,GAAyB,EACzB,OAA4B;QAE5B,2CAA2C;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE7D,GAAG,CAAC,OAAO,GAAG;YACZ,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,SAAS,EAAE,OAAO,CAAC,GAAG;YACtB,UAAU,EAAE,OAAO,CAAC,GAAG;SACxB,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,0BAA0B,OAAO,CAAC,YAAY,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,KAAa;QAKvC,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAE1D,iCAAiC;YACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE;gBAC5C,UAAU,EAAE,CAAC,OAAO,CAAC;gBACrB,gBAAgB,EAAE,KAAK;aACxB,CAAC,CAAC;YAEH,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,uBAAuB;iBAC/B,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,QAAe,CAAC;YAEhC,+BAA+B;YAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAChC,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAClD,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,2BAA2B,OAAO,CAAC,IAAI,GAAG;iBAClD,CAAC;YACJ,CAAC;QAEH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;aAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,qBAAqB,CAAC,OAAY;QAK9C,qBAAqB;QACrB,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,kCAAkC;aAC1C,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;QAEzD,4BAA4B;QAC5B,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;YAC1C,QAAQ;YACR,kBAAkB,OAAO,CAAC,QAAQ,EAAE;SACrC,CAAW,CAAC;QAEb,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,wBAAwB;aAChC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAAC,OAAY;QAK7C,qBAAqB;QACrB,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,iCAAiC;aACzC,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;QAEzD,uBAAuB;QACvB,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnF,IAAI,oBAAoB,GAAG,CAAC,IAAI,OAAO,CAAC,cAAc,GAAG,oBAAoB,EAAE,CAAC;YAC9E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,yCAAyC,OAAO,CAAC,cAAc,cAAc,oBAAoB,gCAAgC;aACzI,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;YAC1C,QAAQ;YACR,iBAAiB,OAAO,CAAC,QAAQ,EAAE;SACpC,CAAW,CAAC;QAEb,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,wBAAwB;aAChC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAAC,OAAY;QAK7C,qBAAqB;QACrB,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAChE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,iCAAiC;aACzC,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,8DAA8D;QAE9D,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,qBAAqB,CAAC,KAAa;QAC/C,IAAI,CAAC;YACH,8BAA8B;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YAED,0CAA0C;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAE7C,4DAA4D;YAC5D,IAAI,QAAgB,CAAC;YACrB,IAAI,QAAgB,CAAC;YAErB,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC;gBACpC,QAAQ,GAAG,oCAAoC,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,sDAAsD;gBACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;gBACnC,QAAQ,GAAG,cAAc,QAAQ,EAAE,CAAC,CAAC,yBAAyB;gBAC9D,QAAQ,GAAG,iBAAiB,QAAQ,wBAAwB,CAAC;gBAC7D,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,+BAA+B,QAAQ,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,8BAA8B;YAC9B,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;gBACzC,KAAK;gBACL,QAAQ;aACT,CAAkB,CAAC;YAEpB,IAAI,QAA2B,CAAC;YAEhC,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACxC,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAE/C,oEAAoE;gBACpE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAA6B,CAAC;gBAEjE,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,GAAG,0CAA0C,CAAC,CAAC;oBACzE,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAE5D,4BAA4B;oBAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAA6B,CAAC;oBACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,MAAM,IAAI,KAAK,CAAC,OAAO,MAAM,CAAC,GAAG,oCAAoC,CAAC,CAAC;oBACzE,CAAC;oBAED,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/B,CAAC;gBAED,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;gBAC3D,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAE5D,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAA6B,CAAC;gBACjE,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,MAAM,IAAI,KAAK,CAAC,OAAO,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC;gBACzD,CAAC;gBAED,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAAC,IAAY,EAAE,QAAgB;QAC5D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,cAAc,GAAG,KAAK,GAAG,IAAI,IAAI,EAAE,GAAG,SAAS,CAAC;YACtD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC;YAE/D,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;YAE7C,MAAM,SAAS,GAAG,MAAM;iBACrB,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC;iBAClC,MAAM,CAAC,cAAc,CAAC;iBACtB,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjB,MAAM,OAAO,GAAG;gBACd,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,sBAAsB;gBACpC,aAAa,EAAE,SAAS;gBACxB,aAAa,EAAE,SAAS;aACzB,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAA0C,OAAO,EAAE;gBACjF,OAAO,EAAE,KAAK;gBACd,OAAO;aACR,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YAED,sBAAsB;YACtB,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,KAAK,CAAC,WAAW,CAAC;gBACtB,OAAO;gBACP,QAAQ;gBACR,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE;gBAC5B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;aAC9B,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,CAAC,sCAAsC,QAAQ,EAAE,CAAC,CAAC;YAE9D,8BAA8B;YAC9B,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAElD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,eAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,UAAU,GAAG,KAAK,CAAC;gBACzB,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBACvC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBACjD,CAAC;gBAED,MAAM,IAAI,KAAK,CAAC,QAAQ,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,SAAS,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,KAAa;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,KAAa;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,uBAAuB,CAAC,QAAgB;QACpD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,QAAQ,GAAG,yBAAyB,QAAQ,EAAE,CAAC;YAErD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;gBAC5C,KAAK,EAAE,QAAQ;aAChB,CAAkB,CAAC;YAEpB,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YACrC,CAAC;YAED,OAAO,CAAC,CAAC,CAAC,wCAAwC;QAEpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,WAAmB;QAKnC,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAC9D,OAAO,KAAK,EAAE,GAAyB,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAC5E,IAAI,CAAC;gBACH,MAAM,cAAc,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,EAAE,CAAC;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,cAAc;oBACrB,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,OAAe;QACzB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;QACzD,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;CACF;AA5fD,sDA4fC;AAED,kBAAe,qBAAqB,CAAC"}

package/dist/nestjs/decorators/auth.decorator.d.ts

@@ -1,2 +1,43 @@
-export declare function ProjectAndUserAuth(): <TFunction extends Function, Y>(target: TFunction | object, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;
+export declare const PROJECT_SCOPES_KEY = "project_scopes";
+export declare const USER_SCOPES_KEY = "user_scopes";
+export declare const SERVICE_SCOPES_KEY = "service_scopes";
+/**
+ * Requires both User token (Authorization header) AND Project/Platform token (x-project-token header)
+ * Use for: Operations needing both user and project context
+ *
+ * @param options - Optional scopes for project and user
+ * @example
+ * @ProjectAndUserAuth({ projectScopes: ['billing:read'], userScopes: ['invoices:create'] })
+ */
+export declare function ProjectAndUserAuth(options?: {
+    projectScopes?: string[];
+    userScopes?: string[];
+}): <TFunction extends Function, Y>(target: TFunction | object, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;
+/**
+ * Requires only Project/Platform token (x-project-token header)
+ * Use for: Project management, admin operations
+ *
+ * @param scopes - Optional required scopes
+ * @example
+ * @ProjectAuth(['projects:write', 'users:manage'])
+ */
+export declare function ProjectAuth(scopes?: string[]): <TFunction extends Function, Y>(target: TFunction | object, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;
+/**
+ * Requires only User token (Authorization header)
+ * Use for: User profile operations (me, updateMe, deleteMe)
+ *
+ * @param scopes - Optional required permissions
+ * @example
+ * @UserAuth(['users:delete'])
+ */
+export declare function UserAuth(scopes?: string[]): <TFunction extends Function, Y>(target: TFunction | object, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;
+/**
+ * Requires service token (x-project-token header with type: 'service')
+ * Use for: Service-to-service operations
+ *
+ * @param scopes - Required service scopes
+ * @example
+ * @ServiceAuth(['tokens:create', 'users:read'])
+ */
+export declare function ServiceAuth(scopes: string[]): <TFunction extends Function, Y>(target: TFunction | object, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;
 //# sourceMappingURL=auth.decorator.d.ts.map

package/dist/nestjs/decorators/auth.decorator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.decorator.d.ts","sourceRoot":"","sources":["../../../src/nestjs/decorators/auth.decorator.ts"],"names":[],"mappings":"AAIA,wBAAgB,kBAAkB,gJAEjC"}
+{"version":3,"file":"auth.decorator.d.ts","sourceRoot":"","sources":["../../../src/nestjs/decorators/auth.decorator.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AACnD,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAC7C,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AAEnD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE;IAC3C,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,+IAYA;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,+IAQ5C;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,+IAQzC;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,+IAK3C"}