@xfilecom/core-sdk 1.3.28 → 1.4.1

package/dist/filters/i18n-exception.filter.d.ts

@@ -0,0 +1,18 @@
+import { ExceptionFilter, ArgumentsHost } from '@nestjs/common';
+import type { ExceptionFilterOptions } from './exception.filter';
+export interface I18nMessageShape {
+    ko?: string;
+    en?: string;
+}
+export declare class I18nExceptionFilter implements ExceptionFilter {
+    private readonly logger;
+    private readonly errorUtils;
+    private readonly options;
+    constructor(options?: ExceptionFilterOptions);
+    catch(exception: unknown, host: ArgumentsHost): void;
+    private handleOptionsRequest;
+    private isStaticFile404;
+    private buildMeta;
+    private extractMessage;
+    private logError;
+}

package/dist/filters/i18n-exception.filter.js

@@ -0,0 +1,227 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var I18nExceptionFilter_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.I18nExceptionFilter = void 0;
+const common_1 = require("@nestjs/common");
+const error_utils_1 = require("../utils/error.utils");
+function tryParseI18nMessage(message) {
+    if (typeof message !== 'string' || !message.trim())
+        return null;
+    const trimmed = message.trim();
+    if ((trimmed.startsWith('{') && trimmed.endsWith('}')) === false)
+        return null;
+    try {
+        const parsed = JSON.parse(message);
+        if (parsed === null || typeof parsed !== 'object')
+            return null;
+        const ko = parsed.ko;
+        const en = parsed.en;
+        if (ko == null && en == null)
+            return null;
+        return {
+            ...(typeof ko === 'string' && { ko }),
+            ...(typeof en === 'string' && { en }),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+let I18nExceptionFilter = I18nExceptionFilter_1 = class I18nExceptionFilter {
+    constructor(options = {}) {
+        this.logger = new common_1.Logger(I18nExceptionFilter_1.name);
+        this.errorUtils = new error_utils_1.ErrorUtils();
+        this.options = {
+            cors: {
+                enabled: options.cors?.enabled ?? true,
+                allowedOrigins: options.cors?.allowedOrigins || [
+                    'http://localhost:3001',
+                    'http://localhost:5173',
+                    'http://localhost:5174',
+                    'http://localhost:5175',
+                    'http://localhost:5176',
+                    ...(process.env.FRONTEND_URL?.split(',') || []),
+                ],
+                allowAllOriginsInDev: options.cors?.allowAllOriginsInDev ?? true,
+            },
+            meta: {
+                enabled: options.meta?.enabled ?? false,
+                includeTimestamp: options.meta?.includeTimestamp ?? true,
+                includePath: options.meta?.includePath ?? true,
+                includeMethod: options.meta?.includeMethod ?? true,
+            },
+            logging: {
+                enabled: options.logging?.enabled ?? true,
+                level: options.logging?.level || 'warn',
+                includeStack: options.logging?.includeStack ?? true,
+                debug: options.logging?.debug ?? false,
+            },
+            responseFormat: {
+                includeDetails: options.responseFormat?.includeDetails ?? false,
+            },
+            filterStaticFiles: options.filterStaticFiles ?? true,
+        };
+    }
+    catch(exception, host) {
+        const ctx = host.switchToHttp();
+        const response = ctx.getResponse();
+        const request = ctx.getRequest();
+        if (this.options.logging.debug) {
+            this.logger.debug(`[I18nExceptionFilter] Caught exception for ${request.method} ${request.url}`, {
+                exceptionType: exception?.constructor?.name,
+                isHttpException: exception instanceof common_1.HttpException,
+                isError: exception instanceof Error,
+            });
+        }
+        if (this.options.cors.enabled && request.method === 'OPTIONS') {
+            return this.handleOptionsRequest(request, response);
+        }
+        const status = exception instanceof common_1.HttpException
+            ? exception.getStatus()
+            : common_1.HttpStatus.INTERNAL_SERVER_ERROR;
+        if (this.options.filterStaticFiles && this.isStaticFile404(request, status)) {
+            response.status(status).json(this.errorUtils.fromException(exception));
+            return;
+        }
+        const errorDto = this.errorUtils.fromException(exception);
+        if (errorDto.error?.message != null) {
+            const i18n = tryParseI18nMessage(errorDto.error.message);
+            if (i18n != null && Object.keys(i18n).length > 0) {
+                errorDto.error = { ...errorDto.error, message: i18n };
+            }
+        }
+        if (this.options.meta.enabled) {
+            errorDto.meta = this.buildMeta(request);
+        }
+        if (this.options.responseFormat.includeDetails) {
+            const message = this.extractMessage(errorDto);
+            errorDto.error = {
+                ...errorDto.error,
+                message,
+                details: Array.isArray(message) ? message : [message],
+            };
+        }
+        if (this.options.logging.enabled) {
+            this.logError(exception, request, errorDto, status);
+        }
+        if (response.headersSent) {
+            this.logger.warn(`Response already sent for ${request.method} ${request.url}, cannot send error response`);
+            return;
+        }
+        try {
+            if (this.options.logging.debug) {
+                this.logger.debug(`[I18nExceptionFilter] Sending error response:`, {
+                    status: errorDto.code,
+                    message: this.extractMessage(errorDto),
+                    path: request.url,
+                    method: request.method,
+                });
+            }
+            response.status(errorDto.code).json(errorDto);
+        }
+        catch (error) {
+            this.logger.error(`Failed to send error response for ${request.method} ${request.url}:`, error);
+        }
+    }
+    handleOptionsRequest(request, response) {
+        const origin = request.headers.origin;
+        const allowedOrigin = this.options.cors.allowAllOriginsInDev && process.env.NODE_ENV !== 'production'
+            ? origin || '*'
+            : origin && this.options.cors.allowedOrigins.includes(origin)
+                ? origin
+                : this.options.cors.allowedOrigins[0] || '*';
+        response.status(common_1.HttpStatus.OK);
+        response.setHeader('Access-Control-Allow-Origin', allowedOrigin);
+        response.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, PATCH, OPTIONS, HEAD');
+        response.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization, X-Requested-With, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers');
+        response.setHeader('Access-Control-Allow-Credentials', 'true');
+        response.setHeader('Access-Control-Max-Age', '86400');
+        response.end();
+    }
+    isStaticFile404(request, status) {
+        if (status !== common_1.HttpStatus.NOT_FOUND)
+            return false;
+        const url = request.url;
+        return (url === '/favicon.ico' ||
+            url.includes('.ico') ||
+            url.includes('.png') ||
+            url.includes('.jpg') ||
+            url.includes('.jpeg') ||
+            url.includes('.gif') ||
+            url.includes('.svg') ||
+            url.includes('.css') ||
+            url.includes('.js') ||
+            url.includes('.woff') ||
+            url.includes('.woff2') ||
+            url.includes('.ttf'));
+    }
+    buildMeta(request) {
+        const meta = {};
+        if (this.options.meta.includeTimestamp)
+            meta.timestamp = new Date().toISOString();
+        if (this.options.meta.includePath)
+            meta.path = request.url;
+        if (this.options.meta.includeMethod)
+            meta.method = request.method;
+        return meta;
+    }
+    extractMessage(errorDto) {
+        if (!errorDto.error)
+            return 'Internal server error';
+        const message = errorDto.error.message;
+        if (typeof message === 'string')
+            return message;
+        if (Array.isArray(message))
+            return message;
+        if (typeof message === 'object' && message !== null && 'message' in message) {
+            const inner = message.message;
+            if (typeof inner === 'string')
+                return inner;
+            return JSON.stringify(message);
+        }
+        if (typeof message === 'object' && message !== null && ('ko' in message || 'en' in message)) {
+            return message.ko ?? message.en ?? JSON.stringify(message);
+        }
+        return String(message);
+    }
+    logError(exception, request, errorDto, status) {
+        const errorLog = {
+            status: errorDto.code,
+            message: this.extractMessage(errorDto),
+            path: request.url,
+            method: request.method,
+            timestamp: new Date().toISOString(),
+        };
+        if (status >= common_1.HttpStatus.INTERNAL_SERVER_ERROR) {
+            const logData = { ...errorLog };
+            if (this.options.logging.includeStack && exception instanceof Error) {
+                logData.exception = exception.stack;
+            }
+            else {
+                logData.exception = exception;
+            }
+            this.logger.error(`[${request.method}] ${request.url}`, logData);
+        }
+        else if (status === common_1.HttpStatus.NOT_FOUND) {
+            this.logger.debug(`[${request.method}] ${request.url}`, errorLog);
+        }
+        else {
+            this.logger.warn(`[${request.method}] ${request.url}`, errorLog);
+        }
+    }
+};
+exports.I18nExceptionFilter = I18nExceptionFilter;
+exports.I18nExceptionFilter = I18nExceptionFilter = I18nExceptionFilter_1 = __decorate([
+    (0, common_1.Catch)(),
+    __metadata("design:paramtypes", [Object])
+], I18nExceptionFilter);
+//# sourceMappingURL=i18n-exception.filter.js.map

package/dist/filters/i18n-exception.filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n-exception.filter.js","sourceRoot":"","sources":["../../src/filters/i18n-exception.filter.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAOwB;AAExB,sDAAkD;AAUlD,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;QAC9D,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/D,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO;YACL,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,EAAE,EAAE,CAAC;YACrC,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,EAAE,EAAE,CAAC;SACtC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAaM,IAAM,mBAAmB,2BAAzB,MAAM,mBAAmB;IAK9B,YAAY,UAAkC,EAAE;QAJ/B,WAAM,GAAG,IAAI,eAAM,CAAC,qBAAmB,CAAC,IAAI,CAAC,CAAC;QAC9C,eAAU,GAAG,IAAI,wBAAU,EAAE,CAAC;QAI7C,IAAI,CAAC,OAAO,GAAG;YACb,IAAI,EAAE;gBACJ,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,IAAI;gBACtC,cAAc,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,IAAI;oBAC9C,uBAAuB;oBACvB,uBAAuB;oBACvB,uBAAuB;oBACvB,uBAAuB;oBACvB,uBAAuB;oBACvB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;iBAChD;gBACD,oBAAoB,EAAE,OAAO,CAAC,IAAI,EAAE,oBAAoB,IAAI,IAAI;aACjE;YACD,IAAI,EAAE;gBACJ,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK;gBACvC,gBAAgB,EAAE,OAAO,CAAC,IAAI,EAAE,gBAAgB,IAAI,IAAI;gBACxD,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,IAAI,IAAI;gBAC9C,aAAa,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,IAAI,IAAI;aACnD;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,IAAI,IAAI;gBACzC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,MAAM;gBACvC,YAAY,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI;gBACnD,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,KAAK;aACvC;YACD,cAAc,EAAE;gBACd,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,cAAc,IAAI,KAAK;aAChE;YACD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI;SACrD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAkB,EAAE,IAAmB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAY,CAAC;QAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,EAAW,CAAC;QAE1C,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE;gBAC/F,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI;gBAC3C,eAAe,EAAE,SAAS,YAAY,sBAAa;gBACnD,OAAO,EAAE,SAAS,YAAY,KAAK;aACpC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,MAAM,GACV,SAAS,YAAY,sBAAa;YAChC,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE;YACvB,CAAC,CAAC,mBAAU,CAAC,qBAAqB,CAAC;QAEvC,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5E,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAG1D,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzD,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,QAAgB,CAAC,KAAK,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACjE,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,QAAgB,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAC7C,QAAgB,CAAC,KAAK,GAAG;gBACxB,GAAI,QAAgB,CAAC,KAAK;gBAC1B,OAAO;gBACP,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;aACtD,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,8BAA8B,CAAC,CAAC;YAC3G,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE;oBACjE,MAAM,EAAE,QAAQ,CAAC,IAAI;oBACrB,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;oBACtC,IAAI,EAAE,OAAO,CAAC,GAAG;oBACjB,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,OAAgB,EAAE,QAAkB;QAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAA4B,CAAC;QAC5D,MAAM,aAAa,GACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YAC7E,CAAC,CAAC,MAAM,IAAI,GAAG;YACf,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC3D,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QAEnD,QAAQ,CAAC,MAAM,CAAC,mBAAU,CAAC,EAAE,CAAC,CAAC;QAC/B,QAAQ,CAAC,SAAS,CAAC,6BAA6B,EAAE,aAAa,CAAC,CAAC;QACjE,QAAQ,CAAC,SAAS,CAAC,8BAA8B,EAAE,8CAA8C,CAAC,CAAC;QACnG,QAAQ,CAAC,SAAS,CAChB,8BAA8B,EAC9B,8HAA8H,CAC/H,CAAC;QACF,QAAQ,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QAC/D,QAAQ,CAAC,SAAS,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;QACtD,QAAQ,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;IAEO,eAAe,CAAC,OAAgB,EAAE,MAAc;QACtD,IAAI,MAAM,KAAK,mBAAU,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,OAAO,CACL,GAAG,KAAK,cAAc;YACtB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YACnB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACtB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CACrB,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,OAAgB;QAChC,MAAM,IAAI,GAAQ,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB;YAAE,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAClF,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW;YAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC;QAC3D,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa;YAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,cAAc,CAAC,QAAwB;QAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK;YAAE,OAAO,uBAAuB,CAAC;QACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;QAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;YAC5E,MAAM,KAAK,GAAI,OAAgC,CAAC,OAAO,CAAC;YACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC;YAC5F,OAAQ,OAA4B,CAAC,EAAE,IAAK,OAA4B,CAAC,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACzG,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAEO,QAAQ,CAAC,SAAkB,EAAE,OAAgB,EAAE,QAAwB,EAAE,MAAc;QAC7F,MAAM,QAAQ,GAAG;YACf,MAAM,EAAE,QAAQ,CAAC,IAAI;YACrB,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;YACtC,IAAI,EAAE,OAAO,CAAC,GAAG;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,IAAI,MAAM,IAAI,mBAAU,CAAC,qBAAqB,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAQ,EAAE,GAAG,QAAQ,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,SAAS,YAAY,KAAK,EAAE,CAAC;gBACpE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;YAChC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,MAAM,KAAK,mBAAU,CAAC,SAAS,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;CACF,CAAA;AAvMY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,cAAK,GAAE;;GACK,mBAAmB,CAuM/B"}

package/dist/index.d.ts

@@ -17,6 +17,7 @@ export * from './interceptors/database-check.interceptor';
 export * from './guards/jwt-auth.guard';
 export * from './guards/roles.guard';
 export { AllExceptionsFilter, ExceptionFilterOptions } from './filters/exception.filter';
+export { I18nExceptionFilter, type I18nMessageShape, } from './filters/i18n-exception.filter';
 export * from './decorators/public.decorator';
 export { User, JwtUser } from './decorators/user.decorator';
 export { Roles, ROLES_KEY } from './decorators/roles.decorator';
@@ -27,3 +28,5 @@ export { loadApplicationYaml, loadApplicationYamlSync, LoadApplicationYamlOption
 export { resolveConfigRootDir, createConfigLoader, DEFAULT_CONFIG_ROOT_CANDIDATES, type ResolveConfigRootDirOptions, type CreateConfigLoaderOptions, type GetServiceConfigOverrides, } from './utils/config-loader.utils';
 export { pbkdf2HashPassword, pbkdf2VerifyPassword, deriveKeySha256, PBKDF2_DEFAULT_ITERATIONS, PBKDF2_DEFAULT_KEYLEN, PBKDF2_DEFAULT_DIGEST, PBKDF2_SALT_BYTES, type Pbkdf2Options, } from './utils/crypto.utils';
 export { hashValue, compareValue, hashEmail, compareEmail, emailNormalizer, digitsNormalizer, BUILT_IN_NORMALIZERS, getProfileConfig, hashByKey, compareByKey, lookupHash, compareLookupHash, HashVerificationConfig, HashVerificationConfigMap, type LookupHashOptions, } from './utils/hash-verification.utils';
+export { getOptionalSecret, getEncryptionKey, type ConfigGetter, type GetOptionalSecretOptions, } from './utils/config-secret.utils';
+export { findUserByLookupHash, authenticateWithHashLookup, type DrizzleDb, type FindUserByLookupHashOptions, type AuthenticateWithHashLookupOptions, } from './utils/auth-lookup.utils';

package/dist/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.compareLookupHash = exports.lookupHash = exports.compareByKey = exports.hashByKey = exports.getProfileConfig = exports.BUILT_IN_NORMALIZERS = exports.digitsNormalizer = exports.emailNormalizer = exports.compareEmail = exports.hashEmail = exports.compareValue = exports.hashValue = exports.PBKDF2_SALT_BYTES = exports.PBKDF2_DEFAULT_DIGEST = exports.PBKDF2_DEFAULT_KEYLEN = exports.PBKDF2_DEFAULT_ITERATIONS = exports.deriveKeySha256 = exports.pbkdf2VerifyPassword = exports.pbkdf2HashPassword = exports.DEFAULT_CONFIG_ROOT_CANDIDATES = exports.createConfigLoader = exports.resolveConfigRootDir = exports.CONFIG_SOURCE_ENV_KEY = exports.ENV_CONFIG_FILENAME_PATTERN = exports.DEFAULT_CONFIG_FILENAMES = exports.loadApplicationYamlSync = exports.loadApplicationYaml = exports.getLoggingConfigFromEnv = exports.isProd = exports.isDev = exports.currentAppEnv = exports.isStaging = exports.isProduction = exports.isDevelopment = exports.getAppEnv = exports.ROLES_KEY = exports.Roles = exports.User = exports.AllExceptionsFilter = exports.isLevelEnabled = exports.LOG_LEVEL_ORDER = exports.FileLogWriter = exports.ConsoleLogWriter = exports.CommonErrorDto = exports.CommonResponseDto = void 0;
+exports.authenticateWithHashLookup = exports.findUserByLookupHash = exports.getEncryptionKey = exports.getOptionalSecret = exports.compareLookupHash = exports.lookupHash = exports.compareByKey = exports.hashByKey = exports.getProfileConfig = exports.BUILT_IN_NORMALIZERS = exports.digitsNormalizer = exports.emailNormalizer = exports.compareEmail = exports.hashEmail = exports.compareValue = exports.hashValue = exports.PBKDF2_SALT_BYTES = exports.PBKDF2_DEFAULT_DIGEST = exports.PBKDF2_DEFAULT_KEYLEN = exports.PBKDF2_DEFAULT_ITERATIONS = exports.deriveKeySha256 = exports.pbkdf2VerifyPassword = exports.pbkdf2HashPassword = exports.DEFAULT_CONFIG_ROOT_CANDIDATES = exports.createConfigLoader = exports.resolveConfigRootDir = exports.CONFIG_SOURCE_ENV_KEY = exports.ENV_CONFIG_FILENAME_PATTERN = exports.DEFAULT_CONFIG_FILENAMES = exports.loadApplicationYamlSync = exports.loadApplicationYaml = exports.getLoggingConfigFromEnv = exports.isProd = exports.isDev = exports.currentAppEnv = exports.isStaging = exports.isProduction = exports.isDevelopment = exports.getAppEnv = exports.ROLES_KEY = exports.Roles = exports.User = exports.I18nExceptionFilter = exports.AllExceptionsFilter = exports.isLevelEnabled = exports.LOG_LEVEL_ORDER = exports.FileLogWriter = exports.ConsoleLogWriter = exports.CommonErrorDto = exports.CommonResponseDto = void 0;
 __exportStar(require("./core.module"), exports);
 __exportStar(require("./database/database.module"), exports);
 __exportStar(require("./database/database.service"), exports);
@@ -40,6 +40,8 @@ __exportStar(require("./guards/jwt-auth.guard"), exports);
 __exportStar(require("./guards/roles.guard"), exports);
 var exception_filter_1 = require("./filters/exception.filter");
 Object.defineProperty(exports, "AllExceptionsFilter", { enumerable: true, get: function () { return exception_filter_1.AllExceptionsFilter; } });
+var i18n_exception_filter_1 = require("./filters/i18n-exception.filter");
+Object.defineProperty(exports, "I18nExceptionFilter", { enumerable: true, get: function () { return i18n_exception_filter_1.I18nExceptionFilter; } });
 __exportStar(require("./decorators/public.decorator"), exports);
 var user_decorator_1 = require("./decorators/user.decorator");
 Object.defineProperty(exports, "User", { enumerable: true, get: function () { return user_decorator_1.User; } });
@@ -88,4 +90,10 @@ Object.defineProperty(exports, "hashByKey", { enumerable: true, get: function ()
 Object.defineProperty(exports, "compareByKey", { enumerable: true, get: function () { return hash_verification_utils_1.compareByKey; } });
 Object.defineProperty(exports, "lookupHash", { enumerable: true, get: function () { return hash_verification_utils_1.lookupHash; } });
 Object.defineProperty(exports, "compareLookupHash", { enumerable: true, get: function () { return hash_verification_utils_1.compareLookupHash; } });
+var config_secret_utils_1 = require("./utils/config-secret.utils");
+Object.defineProperty(exports, "getOptionalSecret", { enumerable: true, get: function () { return config_secret_utils_1.getOptionalSecret; } });
+Object.defineProperty(exports, "getEncryptionKey", { enumerable: true, get: function () { return config_secret_utils_1.getEncryptionKey; } });
+var auth_lookup_utils_1 = require("./utils/auth-lookup.utils");
+Object.defineProperty(exports, "findUserByLookupHash", { enumerable: true, get: function () { return auth_lookup_utils_1.findUserByLookupHash; } });
+Object.defineProperty(exports, "authenticateWithHashLookup", { enumerable: true, get: function () { return auth_lookup_utils_1.authenticateWithHashLookup; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AACA,gDAA8B;AAG9B,6DAA2C;AAC3C,8DAA4C;AAC5C,4DAA0C;AAG1C,6DAA2C;AAC3C,iEAKoC;AAJlC,uHAAA,iBAAiB,OAAA;AACjB,oHAAA,cAAc,OAAA;AAIhB,0DAAwC;AACxC,sDAAoC;AACpC,uDAAqC;AACrC,yDAAuC;AACvC,yDAQgC;AAN9B,kHAAA,gBAAgB,OAAA;AAChB,+GAAA,aAAa,OAAA;AAGb,iHAAA,eAAe,OAAA;AACf,gHAAA,cAAc,OAAA;AAIhB,qEAAmD;AAEnD,4EAA0D;AAC1D,gFAA8D;AAC9D,4EAA0D;AAG1D,0DAAwC;AACxC,uDAAqC;AAGrC,+DAAyF;AAAhF,uHAAA,mBAAmB,OAAA;AAG5B,gEAA8C;AAC9C,8DAA4D;AAAnD,sGAAA,IAAI,OAAA;AACb,gEAAgE;AAAvD,wGAAA,KAAK,OAAA;AAAE,4GAAA,SAAS,OAAA;AAGzB,2DAAyC;AAGzC,+CAS2B;AARzB,sGAAA,SAAS,OAAA;AACT,0GAAA,aAAa,OAAA;AACb,yGAAA,YAAY,OAAA;AACZ,sGAAA,SAAS,OAAA;AACT,0GAAA,aAAa,OAAA;AACb,kGAAA,KAAK,OAAA;AACL,mGAAA,MAAM,OAAA;AAKR,yDAAiE;AAAxD,yHAAA,uBAAuB,OAAA;AAGhC,iEAQoC;AAPlC,yHAAA,mBAAmB,OAAA;AACnB,6HAAA,uBAAuB,OAAA;AAEvB,8HAAA,wBAAwB,OAAA;AACxB,iIAAA,2BAA2B,OAAA;AAC3B,2HAAA,qBAAqB,OAAA;AAKvB,mEAOqC;AANnC,2HAAA,oBAAoB,OAAA;AACpB,yHAAA,kBAAkB,OAAA;AAClB,qIAAA,8BAA8B,OAAA;AAOhC,qDAS8B;AAR5B,kHAAA,kBAAkB,OAAA;AAClB,oHAAA,oBAAoB,OAAA;AACpB,+GAAA,eAAe,OAAA;AACf,yHAAA,yBAAyB,OAAA;AACzB,qHAAA,qBAAqB,OAAA;AACrB,qHAAA,qBAAqB,OAAA;AACrB,iHAAA,iBAAiB,OAAA;AAKnB,2EAgByC;AAfvC,oHAAA,SAAS,OAAA;AACT,uHAAA,YAAY,OAAA;AACZ,oHAAA,SAAS,OAAA;AACT,uHAAA,YAAY,OAAA;AACZ,0HAAA,eAAe,OAAA;AACf,2HAAA,gBAAgB,OAAA;AAChB,+HAAA,oBAAoB,OAAA;AACpB,2HAAA,gBAAgB,OAAA;AAChB,oHAAA,SAAS,OAAA;AACT,uHAAA,YAAY,OAAA;AACZ,qHAAA,UAAU,OAAA;AACV,4HAAA,iBAAiB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AACA,gDAA8B;AAG9B,6DAA2C;AAC3C,8DAA4C;AAC5C,4DAA0C;AAG1C,6DAA2C;AAC3C,iEAKoC;AAJlC,uHAAA,iBAAiB,OAAA;AACjB,oHAAA,cAAc,OAAA;AAIhB,0DAAwC;AACxC,sDAAoC;AACpC,uDAAqC;AACrC,yDAAuC;AACvC,yDAQgC;AAN9B,kHAAA,gBAAgB,OAAA;AAChB,+GAAA,aAAa,OAAA;AAGb,iHAAA,eAAe,OAAA;AACf,gHAAA,cAAc,OAAA;AAIhB,qEAAmD;AAEnD,4EAA0D;AAC1D,gFAA8D;AAC9D,4EAA0D;AAG1D,0DAAwC;AACxC,uDAAqC;AAGrC,+DAAyF;AAAhF,uHAAA,mBAAmB,OAAA;AAC5B,yEAGyC;AAFvC,4HAAA,mBAAmB,OAAA;AAKrB,gEAA8C;AAC9C,8DAA4D;AAAnD,sGAAA,IAAI,OAAA;AACb,gEAAgE;AAAvD,wGAAA,KAAK,OAAA;AAAE,4GAAA,SAAS,OAAA;AAGzB,2DAAyC;AAGzC,+CAS2B;AARzB,sGAAA,SAAS,OAAA;AACT,0GAAA,aAAa,OAAA;AACb,yGAAA,YAAY,OAAA;AACZ,sGAAA,SAAS,OAAA;AACT,0GAAA,aAAa,OAAA;AACb,kGAAA,KAAK,OAAA;AACL,mGAAA,MAAM,OAAA;AAKR,yDAAiE;AAAxD,yHAAA,uBAAuB,OAAA;AAGhC,iEAQoC;AAPlC,yHAAA,mBAAmB,OAAA;AACnB,6HAAA,uBAAuB,OAAA;AAEvB,8HAAA,wBAAwB,OAAA;AACxB,iIAAA,2BAA2B,OAAA;AAC3B,2HAAA,qBAAqB,OAAA;AAKvB,mEAOqC;AANnC,2HAAA,oBAAoB,OAAA;AACpB,yHAAA,kBAAkB,OAAA;AAClB,qIAAA,8BAA8B,OAAA;AAOhC,qDAS8B;AAR5B,kHAAA,kBAAkB,OAAA;AAClB,oHAAA,oBAAoB,OAAA;AACpB,+GAAA,eAAe,OAAA;AACf,yHAAA,yBAAyB,OAAA;AACzB,qHAAA,qBAAqB,OAAA;AACrB,qHAAA,qBAAqB,OAAA;AACrB,iHAAA,iBAAiB,OAAA;AAKnB,2EAgByC;AAfvC,oHAAA,SAAS,OAAA;AACT,uHAAA,YAAY,OAAA;AACZ,oHAAA,SAAS,OAAA;AACT,uHAAA,YAAY,OAAA;AACZ,0HAAA,eAAe,OAAA;AACf,2HAAA,gBAAgB,OAAA;AAChB,+HAAA,oBAAoB,OAAA;AACpB,2HAAA,gBAAgB,OAAA;AAChB,oHAAA,SAAS,OAAA;AACT,uHAAA,YAAY,OAAA;AACZ,qHAAA,UAAU,OAAA;AACV,4HAAA,iBAAiB,OAAA;AAOnB,mEAKqC;AAJnC,wHAAA,iBAAiB,OAAA;AACjB,uHAAA,gBAAgB,OAAA;AAMlB,+DAMmC;AALjC,yHAAA,oBAAoB,OAAA;AACpB,+HAAA,0BAA0B,OAAA"}

package/dist/utils/auth-lookup.utils.d.ts

@@ -0,0 +1,23 @@
+export type DrizzleDb = {
+    select: (cols?: any) => {
+        from: (table: any) => {
+            where: (cond: any) => {
+                limit: (n: number) => Promise<any[]>;
+            };
+        };
+    };
+};
+export interface FindUserByLookupHashOptions {
+    identifier: string;
+    encryptionKey: string;
+    lookupFieldMap?: Record<string, string>;
+    plainColumn?: string;
+    normalizer?: (s: string) => string;
+    useSha256Variant?: boolean;
+    keyDerivation?: 'none' | 'sha256';
+}
+export declare function findUserByLookupHash(db: DrizzleDb, table: Record<string, any>, options: FindUserByLookupHashOptions): Promise<Record<string, unknown> | null>;
+export interface AuthenticateWithHashLookupOptions extends FindUserByLookupHashOptions {
+    passwordColumn?: string;
+}
+export declare function authenticateWithHashLookup(db: DrizzleDb, table: Record<string, any>, identifier: string, password: string, options: AuthenticateWithHashLookupOptions): Promise<Record<string, unknown> | null>;

package/dist/utils/auth-lookup.utils.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findUserByLookupHash = findUserByLookupHash;
+exports.authenticateWithHashLookup = authenticateWithHashLookup;
+const crypto = require("crypto");
+const drizzle_orm_1 = require("drizzle-orm");
+const hash_verification_utils_1 = require("./hash-verification.utils");
+const crypto_utils_1 = require("./crypto.utils");
+async function findUserByLookupHash(db, table, options) {
+    const normalized = options.normalizer ? options.normalizer(options.identifier) : options.identifier;
+    if (options.lookupFieldMap && Object.keys(options.lookupFieldMap).length > 0) {
+        const plainKey = Object.keys(options.lookupFieldMap)[0];
+        const hashColumnName = options.lookupFieldMap[plainKey];
+        const hashColumn = table[hashColumnName];
+        if (!hashColumn) {
+            return null;
+        }
+        const hashes = [
+            (0, hash_verification_utils_1.lookupHash)(normalized, options.encryptionKey, {
+                keyDerivation: options.keyDerivation ?? 'sha256',
+            }),
+        ];
+        if (options.useSha256Variant) {
+            hashes.push(crypto.createHash('sha256').update(normalized).digest('hex'));
+        }
+        const rows = await db
+            .select()
+            .from(table)
+            .where((0, drizzle_orm_1.inArray)(hashColumn, hashes))
+            .limit(1);
+        const row = rows?.[0];
+        return row != null ? row : null;
+    }
+    if (options.plainColumn) {
+        const col = table[options.plainColumn];
+        if (!col)
+            return null;
+        const rows = await db
+            .select()
+            .from(table)
+            .where((0, drizzle_orm_1.eq)(col, normalized))
+            .limit(1);
+        const row = rows?.[0];
+        return row != null ? row : null;
+    }
+    return null;
+}
+async function authenticateWithHashLookup(db, table, identifier, password, options) {
+    const row = await findUserByLookupHash(db, table, options);
+    if (!row)
+        return null;
+    const passwordColumn = options.passwordColumn ?? 'password';
+    const stored = row[passwordColumn];
+    if (stored == null || typeof stored !== 'string')
+        return null;
+    if (!(0, crypto_utils_1.pbkdf2VerifyPassword)(password, stored))
+        return null;
+    const { [passwordColumn]: _, ...rest } = row;
+    return rest;
+}
+//# sourceMappingURL=auth-lookup.utils.js.map

package/dist/utils/auth-lookup.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-lookup.utils.js","sourceRoot":"","sources":["../../src/utils/auth-lookup.utils.ts"],"names":[],"mappings":";;AAuDA,oDA8CC;AAgCD,gEAkBC;AAvJD,iCAAiC;AACjC,6CAA0C;AAC1C,uEAAuD;AACvD,iDAAsD;AAoD/C,KAAK,UAAU,oBAAoB,CACxC,EAAa,EACb,KAA0B,EAC1B,OAAoC;IAEpC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAEpG,IAAI,OAAO,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAa;YACvB,IAAA,oCAAU,EAAC,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE;gBAC5C,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,QAAQ;aACjD,CAAC;SACH,CAAC;QACF,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,IAAI,GAAG,MAAO,EAAU;aAC3B,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,IAAA,qBAAO,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC;aAClC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtB,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,IAAI,GAAG,MAAO,EAAU;aAC3B,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,IAAA,gBAAE,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC;aAC1B,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtB,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAgCM,KAAK,UAAU,0BAA0B,CAC9C,EAAa,EACb,KAA0B,EAC1B,UAAkB,EAClB,QAAgB,EAChB,OAA0C;IAE1C,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,UAAU,CAAC;IAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE9D,IAAI,CAAC,IAAA,mCAAoB,EAAC,QAAQ,EAAE,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzD,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IAC7C,OAAO,IAA+B,CAAC;AACzC,CAAC"}

package/dist/utils/config-secret.utils.d.ts

@@ -0,0 +1,9 @@
+export interface ConfigGetter {
+    get<T = unknown>(key: string): T;
+}
+export interface GetOptionalSecretOptions {
+    keys: string[];
+    envKey: string;
+}
+export declare function getOptionalSecret(config: ConfigGetter | null | undefined, options: GetOptionalSecretOptions): string | undefined;
+export declare function getEncryptionKey(config: ConfigGetter | null | undefined, serviceKey?: string): string | undefined;

package/dist/utils/config-secret.utils.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOptionalSecret = getOptionalSecret;
+exports.getEncryptionKey = getEncryptionKey;
+function getOptionalSecret(config, options) {
+    const { keys, envKey } = options;
+    for (const key of keys) {
+        const value = config?.get?.(key);
+        if (value != null && typeof value === 'string' && value.trim() !== '') {
+            return value.trim();
+        }
+    }
+    const envVal = typeof process !== 'undefined' ? process.env[envKey] : undefined;
+    if (envVal != null && typeof envVal === 'string' && envVal.trim() !== '') {
+        return envVal.trim();
+    }
+    return undefined;
+}
+function getEncryptionKey(config, serviceKey) {
+    const keys = ['encryptionKey'];
+    if (serviceKey) {
+        keys.push(`${serviceKey}.encryptionKey`);
+    }
+    return getOptionalSecret(config, { keys, envKey: 'ENCRYPTION_KEY' });
+}
+//# sourceMappingURL=config-secret.utils.js.map

package/dist/utils/config-secret.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-secret.utils.js","sourceRoot":"","sources":["../../src/utils/config-secret.utils.ts"],"names":[],"mappings":";;AAiCA,8CAgBC;AAgBD,4CASC;AAzCD,SAAgB,iBAAiB,CAC/B,MAAuC,EACvC,OAAiC;IAEjC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAgBD,SAAgB,gBAAgB,CAC9B,MAAuC,EACvC,UAAmB;IAEnB,MAAM,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IAC/B,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACvE,CAAC"}

package/docs/IMPROVEMENTS_PROPOSAL.md

@@ -0,0 +1,54 @@
+# core-sdk 개선 제안 (전달용)
+
+token-services의 auth-service 정리하면서 **core-sdk로 옮기면 재사용·일관성에 도움이 되는 항목** 정리 문서입니다.  
+다른 프로젝트(usdt3 등)에서도 동일 패턴을 쓸 수 있도록 core-sdk에 반영해 주시면 됩니다.
+
+---
+
+## 1. encryptionKey 읽기 유틸 (반영 완료)
+
+- **getOptionalSecret(config, { keys, envKey })**, **getEncryptionKey(config, serviceKey?)**  
+- 설정·env에서 시크릿을 일관된 우선순위로 조회.  
+- `src/utils/config-secret.utils.ts`에서 export.
+
+---
+
+## 2. 해시 컬럼 기반 사용자 조회 + 비밀번호 검증 (반영 완료)
+
+- **findUserByLookupHash(db, table, options)**, **authenticateWithHashLookup(db, table, identifier, password, options)**  
+- DB 기반 인증 로직 재사용, auth-service 단순화.  
+- `src/utils/auth-lookup.utils.ts`에서 export.
+
+---
+
+## 3. resolveConfigRootDir 후보 확장 (선택, 반영)
+
+- token-services는 `options.candidates`로 shared/config 경로 전달 가능.  
+- `DEFAULT_CONFIG_ROOT_CANDIDATES` 주석에 안내 추가됨.
+
+---
+
+## 4. I18nExceptionFilter 제안
+
+- **에러 응답의 error.message를 { ko, en } 객체로 내리기**
+- **동작**: ErrorUtils.fromException → error.message가 `"{ \"ko\":..., \"en\":... }"` 문자열이면 JSON.parse 해서 객체로 교체 후 응답
+- **기존 기본 필터는 유지**하고, **새 필터는 export만 해 두고**, 쓰는 쪽에서 `filters: { exception: false }` 후 **이 필터만 APP_FILTER로 등록**
+- token-services의 auth-service(및 다른 마이크로서비스), usdt3 등에서 **공통 사용 가능**
+- core-sdk에 이 필터가 들어가면, auth-service에서는 지금 있는 로컬 I18nExceptionFilter를 지우고 core-sdk에서 export한 필터를 쓰면 됩니다.  
+  (지금은 문서만 수정했고, 코드는 auth-service에 그대로 두었습니다.)
+
+**구현 상태**: `I18nExceptionFilter` 및 `I18nMessageShape`를 `src/filters/i18n-exception.filter.ts`에서 구현·export함.
+
+---
+
+## 5. 정리
+
+| 항목 | 우선순위 | 요약 |
+|------|----------|------|
+| **getEncryptionKey / getOptionalSecret** | 높음 | 설정·env에서 secret 한 번에 읽기, 서비스 간 일관성 (반영 완료) |
+| **findUserByLookupHash / authenticateWithHashLookup** | 중간 | DB 기반 인증 로직 재사용, auth-service 단순화 (반영 완료) |
+| **resolveConfigRootDir preset/확장** | 낮음 | token-services는 shared/config로 대응 가능 (주석 반영) |
+| **I18nExceptionFilter** | 선택 | error.message를 { ko, en } 객체로 내리기, APP_FILTER로만 사용 (반영 완료) |
+
+token-services 쪽에서는 위 1·2·4번이 core-sdk에 반영되면 auth-service를 그에 맞춰 리팩터링할 예정입니다.  
+문의나 스펙 조정이 필요하면 알려 주세요.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xfilecom/core-sdk",
-  "version": "1.3.28",
+  "version": "1.4.1",
   "description": "Core SDK for NestJS microservices - 통합 개발 키트",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",