@xlt-token/nestjs 1.0.0-rc.3

package/dist/index.mjs

@@ -0,0 +1,525 @@
+import { ForbiddenException, Inject, Injectable, Module, Optional, SetMetadata, UnauthorizedException, createParamDecorator } from "@nestjs/common";
+import { DEFAULT_XLT_TOKEN_CONFIG, DEFAULT_XLT_TOKEN_CONFIG as DEFAULT_XLT_TOKEN_CONFIG$1, MemoryStore, MemoryStore as MemoryStore$1, NotLoginException as NotLoginException$1, NotLoginType, NotLoginType as NotLoginType$1, NotPermissionException as NotPermissionException$1, NotRoleException as NotRoleException$1, NotSafeException as NotSafeException$1, StpLogic, StpLogic as StpLogic$1, StpPermLogic, StpPermLogic as StpPermLogic$1, StpUtil, UuidStrategy, UuidStrategy as UuidStrategy$1, XLT_CHECK_LOGIN_KEY, XLT_IGNORE_KEY, XLT_PERMISSION_KEY, XLT_ROLE_KEY, XLT_STP_INTERFACE, XLT_STP_INTERFACE as XLT_STP_INTERFACE$1, XLT_TOKEN_CONFIG, XLT_TOKEN_CONFIG as XLT_TOKEN_CONFIG$1, XLT_TOKEN_HOOKS, XLT_TOKEN_HOOKS as XLT_TOKEN_HOOKS$1, XLT_TOKEN_STORE, XLT_TOKEN_STORE as XLT_TOKEN_STORE$1, XLT_TOKEN_STRATEGY, XLT_TOKEN_STRATEGY as XLT_TOKEN_STRATEGY$1, XltMode, XltMode as XltMode$1, XltSession, XltTokenConfig, createExpressContext, createExpressContext as createExpressContext$1, createMockHttpContext, createXltToken, matchPermission, setStpLogic, setStpLogic as setStpLogic$1, setStpPermLogic, setStpPermLogic as setStpPermLogic$1 } from "@xlt-token/core";
+import { sign, verify } from "jsonwebtoken";
+import { Reflector } from "@nestjs/core";
+
+//#region \0@oxc-project+runtime@0.112.0/helpers/decorate.js
+function __decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+
+//#endregion
+//#region src/xlt-token.module.ts
+var _XltTokenModule;
+let XltTokenModule = class XltTokenModule {
+	static {
+		_XltTokenModule = this;
+	}
+	static createStoreProvider(store) {
+		if (!store) return {
+			provide: XLT_TOKEN_STORE$1,
+			useClass: MemoryStore$1
+		};
+		return "useClass" in store ? {
+			provide: XLT_TOKEN_STORE$1,
+			useClass: store.useClass
+		} : {
+			provide: XLT_TOKEN_STORE$1,
+			useValue: store.useValue
+		};
+	}
+	static createStrategyProvider(strategy) {
+		return strategy?.useClass ? {
+			provide: XLT_TOKEN_STRATEGY$1,
+			useClass: strategy.useClass
+		} : {
+			provide: XLT_TOKEN_STRATEGY$1,
+			useClass: UuidStrategy$1
+		};
+	}
+	static createStpInterfaceProvider(stpInterface) {
+		if (stpInterface) return {
+			provide: XLT_STP_INTERFACE$1,
+			useClass: stpInterface
+		};
+		return {
+			provide: XLT_STP_INTERFACE$1,
+			useValue: {
+				getPermissionList: () => {
+					throw new Error("StpInterface not registered: getPermissionList");
+				},
+				getRoleList: () => {
+					throw new Error("StpInterface not registered: getRoleList");
+				}
+			}
+		};
+	}
+	static createHooksProvider(hooks) {
+		return {
+			provide: XLT_TOKEN_HOOKS$1,
+			useValue: hooks ?? {}
+		};
+	}
+	static {
+		this.stpLogicProvider = {
+			provide: StpLogic$1,
+			useFactory: (config, store, strategy, hooks) => new StpLogic$1(config, store, strategy, hooks),
+			inject: [
+				XLT_TOKEN_CONFIG$1,
+				XLT_TOKEN_STORE$1,
+				XLT_TOKEN_STRATEGY$1,
+				XLT_TOKEN_HOOKS$1
+			]
+		};
+	}
+	static {
+		this.stpPermLogicProvider = {
+			provide: StpPermLogic$1,
+			useFactory: (stpInterface, store, config) => new StpPermLogic$1(stpInterface, store, config),
+			inject: [
+				XLT_STP_INTERFACE$1,
+				XLT_TOKEN_STORE$1,
+				XLT_TOKEN_CONFIG$1
+			]
+		};
+	}
+	static {
+		this.initProvider = {
+			provide: "XLT_TOKEN_INIT",
+			useFactory: (stpLogic, stpPermLogic) => {
+				setStpLogic$1(stpLogic);
+				setStpPermLogic$1(stpPermLogic);
+				return true;
+			},
+			inject: [StpLogic$1, StpPermLogic$1]
+		};
+	}
+	static {
+		this.moduleExports = [
+			XLT_TOKEN_CONFIG$1,
+			XLT_TOKEN_STORE$1,
+			XLT_TOKEN_STRATEGY$1,
+			StpLogic$1,
+			StpPermLogic$1
+		];
+	}
+	static forRoot(options = {}) {
+		const { config: userConfig, store, strategy, isGlobal = false, providers = [], stpInterface } = options;
+		return {
+			module: _XltTokenModule,
+			providers: [
+				{
+					provide: XLT_TOKEN_CONFIG$1,
+					useValue: {
+						...DEFAULT_XLT_TOKEN_CONFIG$1,
+						...userConfig
+					}
+				},
+				_XltTokenModule.createStoreProvider(store),
+				_XltTokenModule.createStrategyProvider(strategy),
+				_XltTokenModule.createStpInterfaceProvider(stpInterface),
+				_XltTokenModule.createHooksProvider(options.hooks),
+				_XltTokenModule.stpLogicProvider,
+				_XltTokenModule.stpPermLogicProvider,
+				_XltTokenModule.initProvider,
+				...providers
+			],
+			exports: _XltTokenModule.moduleExports,
+			global: isGlobal
+		};
+	}
+	static forRootAsync(options) {
+		const { useFactory, inject = [], imports = [], store, strategy, isGlobal = false, providers = [], stpInterface } = options;
+		return {
+			module: _XltTokenModule,
+			imports,
+			providers: [
+				{
+					provide: XLT_TOKEN_CONFIG$1,
+					useFactory: async (...args) => {
+						const { config = {} } = await useFactory(...args);
+						return {
+							...DEFAULT_XLT_TOKEN_CONFIG$1,
+							...config
+						};
+					},
+					inject
+				},
+				_XltTokenModule.createStoreProvider(store),
+				_XltTokenModule.createStrategyProvider(strategy),
+				_XltTokenModule.createStpInterfaceProvider(stpInterface),
+				_XltTokenModule.createHooksProvider(options.hooks),
+				_XltTokenModule.stpLogicProvider,
+				_XltTokenModule.stpPermLogicProvider,
+				_XltTokenModule.initProvider,
+				...providers
+			],
+			exports: _XltTokenModule.moduleExports,
+			global: isGlobal
+		};
+	}
+};
+XltTokenModule = _XltTokenModule = __decorate([Module({})], XltTokenModule);
+
+//#endregion
+//#region \0@oxc-project+runtime@0.112.0/helpers/decorateMetadata.js
+function __decorateMetadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+
+//#endregion
+//#region \0@oxc-project+runtime@0.112.0/helpers/decorateParam.js
+function __decorateParam(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+
+//#endregion
+//#region src/store/redis-store.ts
+const XLT_REDIS_CLIENT = "XLT_REDIS_CLIENT";
+let RedisStore = class RedisStore {
+	constructor(redisClient) {
+		this.redisClient = redisClient;
+	}
+	async get(key) {
+		return this.redisClient.get(key);
+	}
+	async set(key, value, timeoutSec) {
+		if (timeoutSec === -1) await this.redisClient.set(key, value);
+		else await this.redisClient.set(key, value, { EX: timeoutSec });
+	}
+	async delete(key) {
+		await this.redisClient.del(key);
+	}
+	async update(key, value) {
+		if (await this.redisClient.set(key, value, {
+			XX: true,
+			KEEPTTL: true
+		}) === null) throw new Error(`Key not found: ${key}`);
+	}
+	async has(key) {
+		return await this.redisClient.exists(key) === 1;
+	}
+	async updateTimeout(key, timeoutSec) {
+		if (!await this.redisClient.exists(key)) throw new Error(`Key not found: ${key}`);
+		if (timeoutSec === -1) await this.redisClient.persist(key);
+		else await this.redisClient.expire(key, timeoutSec);
+	}
+	async getTimeout(key) {
+		return await this.redisClient.ttl(key);
+	}
+	async keys(pattern) {
+		const result = [];
+		let cursor = 0;
+		do {
+			const reply = await this.redisClient.scan(cursor, {
+				MATCH: pattern,
+				COUNT: 100
+			});
+			cursor = reply.cursor;
+			result.push(...reply.keys);
+		} while (cursor !== 0);
+		return result;
+	}
+};
+RedisStore = __decorate([
+	Injectable(),
+	__decorateParam(0, Inject(XLT_REDIS_CLIENT)),
+	__decorateMetadata("design:paramtypes", [Object])
+], RedisStore);
+
+//#endregion
+//#region src/token/jwt-strategy.ts
+var _ref$2;
+let JwtStrategy = class JwtStrategy {
+	constructor(config) {
+		this.config = config;
+	}
+	createToken(loginId, config) {
+		const jwt = config.jwt;
+		return sign({
+			sub: loginId,
+			jti: crypto.randomUUID()
+		}, jwt.secret, {
+			algorithm: jwt.algorithm ?? "HS256",
+			...jwt.issuer && { issuer: jwt.issuer },
+			...jwt.audience && { audience: jwt.audience },
+			...config.timeout > 0 && { expiresIn: config.timeout }
+		});
+	}
+	generateToken(payload) {
+		return sign(payload, this.config.jwt.secret);
+	}
+	verifyToken(token) {
+		return verify(token, this.config.jwt.secret);
+	}
+};
+JwtStrategy = __decorate([
+	Injectable(),
+	__decorateParam(0, Inject(XLT_TOKEN_CONFIG$1)),
+	__decorateMetadata("design:paramtypes", [typeof (_ref$2 = typeof XltTokenConfig !== "undefined" && XltTokenConfig) === "function" ? _ref$2 : Object])
+], JwtStrategy);
+
+//#endregion
+//#region src/decorators/xlt-check-login.decorator.ts
+/**
+* 登录校验装饰器
+* @constructor
+*/
+const XltCheckLogin = () => SetMetadata(XLT_CHECK_LOGIN_KEY, true);
+
+//#endregion
+//#region src/decorators/xlt-ignore.decorator.ts
+const XltIgnore = () => SetMetadata(XLT_IGNORE_KEY, true);
+
+//#endregion
+//#region src/decorators/login-id.decorator.ts
+/**
+* 注入当前用户 ID
+* @constructor
+*/
+const LoginId = createParamDecorator((data, ctx) => {
+	return ctx.switchToHttp().getRequest().stpLoginId;
+});
+
+//#endregion
+//#region src/decorators/token-value.decorator.ts
+/**
+* 注入当前 Token
+* @constructor
+*/
+const TokenValue = createParamDecorator((data, ctx) => {
+	return ctx.switchToHttp().getRequest().stpToken;
+});
+
+//#endregion
+//#region src/decorators/xlt-check-permission.decorator.ts
+/**
+* 权限检查装饰器
+* @param {string | string[]} permissions 权限列表
+* @param {Object} [options] 模式选项
+* @param {XltMode} [options.mode] 模式选项
+* @constructor
+*/
+const XltCheckPermission = (permissions, options) => {
+	return SetMetadata(XLT_PERMISSION_KEY, {
+		permissions: Array.isArray(permissions) ? permissions : [permissions],
+		mode: options?.mode ?? XltMode$1.AND
+	});
+};
+
+//#endregion
+//#region src/decorators/xlt-check-role.decorator.ts
+/**
+* 角色检查装饰器
+* @param {string | string[]} roles 角色列表
+* @param {Object} [options] 模式选项
+* @param {XltMode} [options.mode] 模式选项
+* @constructor
+*/
+const XltCheckRole = (roles, options) => {
+	return SetMetadata(XLT_ROLE_KEY, {
+		roles: Array.isArray(roles) ? roles : [roles],
+		mode: options?.mode ?? XltMode$1.AND
+	});
+};
+
+//#endregion
+//#region src/decorators/xlt-check-safe.decorator.ts
+const XLT_CHECK_SAFE_KEY = "XLT_CHECK_SAFE";
+const XltCheckSafe = (business) => {
+	return SetMetadata(XLT_CHECK_SAFE_KEY, business);
+};
+
+//#endregion
+//#region src/exceptions/not-login.exception.ts
+var NotLoginException = class NotLoginException extends UnauthorizedException {
+	constructor(type, token) {
+		super({
+			statusCode: 401,
+			type,
+			message: NotLoginException.describeType(type)
+		});
+		this.type = type;
+		this.token = token;
+	}
+	static describeType(type) {
+		return {
+			[NotLoginType$1.NOT_TOKEN]: "未提供 Token",
+			[NotLoginType$1.INVALID_TOKEN]: "Token 无效",
+			[NotLoginType$1.TOKEN_TIMEOUT]: "Token 已过期",
+			[NotLoginType$1.TOKEN_FREEZE]: "Token 已被冻结",
+			[NotLoginType$1.BE_REPLACED]: "已被顶下线",
+			[NotLoginType$1.KICK_OUT]: "已被踢下线"
+		}[type] ?? "未登录";
+	}
+};
+
+//#endregion
+//#region src/exceptions/not-permission.exception.ts
+var NotPermissionException = class extends ForbiddenException {
+	constructor(permission, mode) {
+		super({
+			statusCode: 403,
+			type: "NOT_PERMISSION",
+			message: `缺少权限: ${Array.isArray(permission) ? permission.join(", ") : permission}`
+		});
+		this.permission = permission;
+		this.mode = mode;
+	}
+};
+
+//#endregion
+//#region src/exceptions/not-role.exception.ts
+var NotRoleException = class extends ForbiddenException {
+	constructor(role, mode) {
+		super({
+			statusCode: 403,
+			type: "NOT_ROLE",
+			message: `缺少角色: ${Array.isArray(role) ? role.join(", ") : role}`
+		});
+		this.role = role;
+		this.mode = mode;
+	}
+};
+
+//#endregion
+//#region src/exceptions/not-safe.exception.ts
+var NotSafeException = class extends ForbiddenException {
+	constructor(business) {
+		super({
+			statusCode: 403,
+			type: "NOT_SAFE",
+			message: `二级认证未开启：${business}`
+		});
+		this.business = business;
+	}
+};
+
+//#endregion
+//#region src/http/nest-bridge.ts
+function createNestHttpContext(req, res) {
+	return createExpressContext$1(req, res);
+}
+function rethrowCoreAuthException(error) {
+	if (error instanceof NotLoginException$1) throw new NotLoginException(error.type, error.token);
+	if (error instanceof NotPermissionException$1) throw new NotPermissionException(error.permission, error.mode);
+	if (error instanceof NotRoleException$1) throw new NotRoleException(error.role, error.mode);
+	if (error instanceof NotSafeException$1) throw new NotSafeException(error.business);
+	throw error;
+}
+
+//#endregion
+//#region src/guards/xlt-token.guard.ts
+var _ref$1, _ref2$1, _ref3;
+let XltTokenGuard = class XltTokenGuard {
+	constructor(reflector, config, stpLogic, stpPermLogic) {
+		this.reflector = reflector;
+		this.config = config;
+		this.stpLogic = stpLogic;
+		this.stpPermLogic = stpPermLogic;
+	}
+	async canActivate(context) {
+		if (!this.requiresLogin(context)) return true;
+		const request = context.switchToHttp().getRequest();
+		const response = context.switchToHttp().getResponse();
+		let result;
+		try {
+			result = await this.stpLogic.checkLogin(createNestHttpContext(request, response));
+		} catch (error) {
+			rethrowCoreAuthException(error);
+		}
+		const business = this.getBusiness(context);
+		request.stpLoginId = result.loginId;
+		request.stpToken = result.token;
+		try {
+			if (this.stpPermLogic) {
+				const handler = context.getHandler();
+				const cls = context.getClass();
+				const permMeta = this.reflector.getAllAndOverride(XLT_PERMISSION_KEY, [handler, cls]);
+				if (permMeta) await this.stpPermLogic.checkPermission(result.loginId, permMeta.permissions, permMeta.mode);
+				const roleMeta = this.reflector.getAllAndOverride(XLT_ROLE_KEY, [handler, cls]);
+				if (roleMeta) await this.stpPermLogic.checkRole(result.loginId, roleMeta.roles, roleMeta.mode);
+			}
+			if (business) await this.stpLogic.checkSafe(result.token, business);
+		} catch (error) {
+			rethrowCoreAuthException(error);
+		}
+		return true;
+	}
+	requiresLogin(context) {
+		const isIgnored = this.reflector.getAllAndOverride(XLT_IGNORE_KEY, [context.getHandler(), context.getClass()]);
+		if (this.config.defaultCheck) return !isIgnored;
+		return this.reflector.getAllAndOverride(XLT_CHECK_LOGIN_KEY, [context.getHandler(), context.getClass()]) ?? false;
+	}
+	getBusiness(context) {
+		return this.reflector.getAllAndOverride(XLT_CHECK_SAFE_KEY, [context.getHandler(), context.getClass()]);
+	}
+};
+XltTokenGuard = __decorate([
+	Injectable(),
+	__decorateParam(1, Inject(XLT_TOKEN_CONFIG$1)),
+	__decorateParam(3, Optional()),
+	__decorateMetadata("design:paramtypes", [
+		typeof (_ref$1 = typeof Reflector !== "undefined" && Reflector) === "function" ? _ref$1 : Object,
+		Object,
+		typeof (_ref2$1 = typeof StpLogic$1 !== "undefined" && StpLogic$1) === "function" ? _ref2$1 : Object,
+		typeof (_ref3 = typeof StpPermLogic$1 !== "undefined" && StpPermLogic$1) === "function" ? _ref3 : Object
+	])
+], XltTokenGuard);
+
+//#endregion
+//#region src/guards/xlt-abstract-login.guard.ts
+var _ref, _ref2;
+let XltAbstractLoginGuard = class XltAbstractLoginGuard {
+	constructor(reflector, config, stpLogic) {
+		this.reflector = reflector;
+		this.config = config;
+		this.stpLogic = stpLogic;
+	}
+	async canActivate(ctx) {
+		if (!this.requiresLogin(ctx)) return true;
+		const request = ctx.switchToHttp().getRequest();
+		const response = ctx.switchToHttp().getResponse();
+		let result;
+		try {
+			result = await this.stpLogic.checkLogin(createNestHttpContext(request, response));
+		} catch (err) {
+			if (err instanceof NotLoginException$1) {
+				await this.onAuthFail?.({
+					ok: false,
+					reason: err.type,
+					token: err.token
+				}, request);
+				throw new NotLoginException(err.type, err.token);
+			}
+			throw err;
+		}
+		request.stpLoginId = result.loginId;
+		request.stpToken = result.token;
+		await this.onAuthSuccess?.(result, request);
+		return true;
+	}
+	requiresLogin(ctx) {
+		const isIgnored = this.reflector.getAllAndOverride(XLT_IGNORE_KEY, [ctx.getHandler(), ctx.getClass()]);
+		if (this.config.defaultCheck) return !isIgnored;
+		return this.reflector.getAllAndOverride(XLT_CHECK_LOGIN_KEY, [ctx.getHandler(), ctx.getClass()]) ?? false;
+	}
+};
+XltAbstractLoginGuard = __decorate([
+	Injectable(),
+	__decorateParam(1, Inject(XLT_TOKEN_CONFIG$1)),
+	__decorateMetadata("design:paramtypes", [
+		typeof (_ref = typeof Reflector !== "undefined" && Reflector) === "function" ? _ref : Object,
+		Object,
+		typeof (_ref2 = typeof StpLogic$1 !== "undefined" && StpLogic$1) === "function" ? _ref2 : Object
+	])
+], XltAbstractLoginGuard);
+
+//#endregion
+export { DEFAULT_XLT_TOKEN_CONFIG, JwtStrategy, LoginId, MemoryStore, NotLoginException, NotLoginType, NotPermissionException, NotRoleException, NotSafeException, RedisStore, StpLogic, StpPermLogic, StpUtil, TokenValue, UuidStrategy, XLT_CHECK_SAFE_KEY, XLT_REDIS_CLIENT, XLT_STP_INTERFACE, XLT_TOKEN_CONFIG, XLT_TOKEN_HOOKS, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XltAbstractLoginGuard, XltCheckLogin, XltCheckPermission, XltCheckRole, XltCheckSafe, XltIgnore, XltMode, XltSession, XltTokenGuard, XltTokenModule, createExpressContext, createMockHttpContext, createXltToken, matchPermission, setStpLogic, setStpPermLogic };
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":["XLT_TOKEN_STORE","MemoryStore","XLT_TOKEN_STRATEGY","UuidStrategy","XLT_STP_INTERFACE","XLT_TOKEN_HOOKS","StpLogic","XLT_TOKEN_CONFIG","StpPermLogic","DEFAULT_XLT_TOKEN_CONFIG","XLT_TOKEN_CONFIG","XltMode","XltMode","NotLoginType","createExpressContext","CoreNotLoginException","CoreNotPermissionException","CoreNotRoleException","CoreNotSafeException","XLT_TOKEN_CONFIG","CoreNotLoginException","XLT_TOKEN_CONFIG"],"sources":["../src/xlt-token.module.ts","../src/store/redis-store.ts","../src/token/jwt-strategy.ts","../src/decorators/xlt-check-login.decorator.ts","../src/decorators/xlt-ignore.decorator.ts","../src/decorators/login-id.decorator.ts","../src/decorators/token-value.decorator.ts","../src/decorators/xlt-check-permission.decorator.ts","../src/decorators/xlt-check-role.decorator.ts","../src/decorators/xlt-check-safe.decorator.ts","../src/exceptions/not-login.exception.ts","../src/exceptions/not-permission.exception.ts","../src/exceptions/not-role.exception.ts","../src/exceptions/not-safe.exception.ts","../src/http/nest-bridge.ts","../src/guards/xlt-token.guard.ts","../src/guards/xlt-abstract-login.guard.ts"],"sourcesContent":["import { Module, ModuleMetadata, Provider } from '@nestjs/common';\nimport {\n  DEFAULT_XLT_TOKEN_CONFIG,\n  MemoryStore,\n  StpInterface,\n  StpLogic,\n  StpPermLogic,\n  TokenStrategy,\n  UuidStrategy,\n  XLT_STP_INTERFACE,\n  XLT_TOKEN_CONFIG,\n  XLT_TOKEN_HOOKS,\n  XLT_TOKEN_STORE,\n  XLT_TOKEN_STRATEGY,\n  XltHooks,\n  XltTokenConfig,\n  XltTokenStore,\n  setStpLogic,\n  setStpPermLogic,\n} from '@xlt-token/core';\n\nexport interface XltTokenModuleOptions {\n  config?: Partial<XltTokenConfig>;\n  store?: { useClass: new (...args: any[]) => XltTokenStore } | { useValue: XltTokenStore };\n  strategy?: { useClass: new (...args: any[]) => TokenStrategy };\n  isGlobal?: boolean;\n  providers?: Provider[];\n  stpInterface?: new (...args: any[]) => StpInterface;\n  hooks?: XltHooks;\n}\n\nexport interface XltTokenModuleAsyncOptions extends Pick<ModuleMetadata, 'imports'> {\n  useFactory: (...args: any[]) => Promise<XltTokenModuleOptions> | XltTokenModuleOptions;\n  inject?: any[];\n  store?: { useClass: new (...args: any[]) => XltTokenStore } | { useValue: XltTokenStore };\n  strategy?: { useClass: new (...args: any[]) => TokenStrategy };\n  isGlobal?: boolean;\n  providers?: Provider[];\n  stpInterface?: new (...args: any[]) => StpInterface;\n  hooks?: XltHooks;\n}\n\n@Module({})\nexport class XltTokenModule {\n  private static createStoreProvider(\n    store?: XltTokenModuleOptions['store'],\n  ): Provider {\n    if (!store) return { provide: XLT_TOKEN_STORE, useClass: MemoryStore };\n    return 'useClass' in store\n      ? { provide: XLT_TOKEN_STORE, useClass: store.useClass }\n      : { provide: XLT_TOKEN_STORE, useValue: store.useValue };\n  }\n\n  private static createStrategyProvider(\n    strategy?: XltTokenModuleOptions['strategy'],\n  ): Provider {\n    return strategy?.useClass\n      ? { provide: XLT_TOKEN_STRATEGY, useClass: strategy.useClass }\n      : { provide: XLT_TOKEN_STRATEGY, useClass: UuidStrategy };\n  }\n\n  private static createStpInterfaceProvider(\n    stpInterface?: new (...args: any[]) => StpInterface,\n  ): Provider {\n    if (stpInterface) return { provide: XLT_STP_INTERFACE, useClass: stpInterface };\n    return {\n      provide: XLT_STP_INTERFACE,\n      useValue: {\n        getPermissionList: () => { throw new Error('StpInterface not registered: getPermissionList'); },\n        getRoleList: () => { throw new Error('StpInterface not registered: getRoleList'); },\n      },\n    };\n  }\n\n  private static createHooksProvider(\n    hooks?: XltTokenModuleOptions['hooks'],\n  ): Provider {\n    return { provide: XLT_TOKEN_HOOKS, useValue: hooks ?? {} };\n  }\n\n  private static readonly stpLogicProvider: Provider = {\n    provide: StpLogic,\n    useFactory: (\n      config: XltTokenConfig,\n      store: XltTokenStore,\n      strategy: TokenStrategy,\n      hooks: XltHooks,\n    ) => new StpLogic(config, store, strategy, hooks),\n    inject: [XLT_TOKEN_CONFIG, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XLT_TOKEN_HOOKS],\n  };\n\n  private static readonly stpPermLogicProvider: Provider = {\n    provide: StpPermLogic,\n    useFactory: (\n      stpInterface: StpInterface,\n      store: XltTokenStore,\n      config: XltTokenConfig,\n    ) => new StpPermLogic(stpInterface, store, config),\n    inject: [XLT_STP_INTERFACE, XLT_TOKEN_STORE, XLT_TOKEN_CONFIG],\n  };\n\n  private static readonly initProvider: Provider = {\n    provide: 'XLT_TOKEN_INIT',\n    useFactory: (stpLogic: StpLogic, stpPermLogic: StpPermLogic) => {\n      setStpLogic(stpLogic);\n      setStpPermLogic(stpPermLogic);\n      return true;\n    },\n    inject: [StpLogic, StpPermLogic],\n  };\n\n  private static readonly moduleExports = [XLT_TOKEN_CONFIG, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, StpLogic, StpPermLogic];\n\n  static forRoot(options: XltTokenModuleOptions = {}) {\n    const { config: userConfig, store, strategy, isGlobal = false, providers = [], stpInterface } = options;\n\n    return {\n      module: XltTokenModule,\n      providers: [\n        { provide: XLT_TOKEN_CONFIG, useValue: { ...DEFAULT_XLT_TOKEN_CONFIG, ...userConfig } },\n        XltTokenModule.createStoreProvider(store),\n        XltTokenModule.createStrategyProvider(strategy),\n        XltTokenModule.createStpInterfaceProvider(stpInterface),\n        XltTokenModule.createHooksProvider(options.hooks),\n        XltTokenModule.stpLogicProvider,\n        XltTokenModule.stpPermLogicProvider,\n        XltTokenModule.initProvider,\n        ...providers,\n      ],\n      exports: XltTokenModule.moduleExports,\n      global: isGlobal,\n    };\n  }\n\n  static forRootAsync(options: XltTokenModuleAsyncOptions) {\n    const { useFactory, inject = [], imports = [], store, strategy, isGlobal = false, providers = [], stpInterface } = options;\n\n    return {\n      module: XltTokenModule,\n      imports,\n      providers: [\n        {\n          provide: XLT_TOKEN_CONFIG,\n          useFactory: async (...args: any[]) => {\n            const { config = {} } = await useFactory(...args);\n            return { ...DEFAULT_XLT_TOKEN_CONFIG, ...config };\n          },\n          inject,\n        },\n        XltTokenModule.createStoreProvider(store),\n        XltTokenModule.createStrategyProvider(strategy),\n        XltTokenModule.createStpInterfaceProvider(stpInterface),\n        XltTokenModule.createHooksProvider(options.hooks),\n        XltTokenModule.stpLogicProvider,\n        XltTokenModule.stpPermLogicProvider,\n        XltTokenModule.initProvider,\n        ...providers,\n      ],\n      exports: XltTokenModule.moduleExports,\n      global: isGlobal,\n    };\n  }\n}\n","import { XltTokenStore } from '@xlt-token/core';\nimport { Inject, Injectable } from '@nestjs/common';\n\n\nexport  const XLT_REDIS_CLIENT = 'XLT_REDIS_CLIENT';\n\n\n@Injectable()\nexport  class RedisStore implements XltTokenStore {\n\n  constructor(\n    @Inject(XLT_REDIS_CLIENT)\n    private readonly redisClient: any,\n  ) {\n\n  }\n\n\n  async get(key:string):Promise<string | null> {\n    return this.redisClient.get(key);\n  }\n\n\n  async set(key:string, value:string, timeoutSec:number):Promise<void> {\n    if (timeoutSec === -1){\n      await this.redisClient.set(key, value);\n    }else {\n      await this.redisClient.set(key, value, {EX: timeoutSec});\n    }\n  }\n\n\n  async delete(key:string):Promise<void> {\n    await this.redisClient.del(key);\n  }\n\n\n  async update(key:string, value:string):Promise<void> {\n    const result = await this.redisClient.set(key, value,{XX:true,KEEPTTL:true})\n    if (result ===null){\n      throw new Error(`Key not found: ${key}`);\n    }\n  }\n\n\n  async has(key:string):Promise<boolean> {\n    const result = await this.redisClient.exists(key);\n    return result === 1;\n  }\n\n\n  async updateTimeout(key:string, timeoutSec:number):Promise<void> {\n    const exists =  await  this.redisClient.exists(key);\n\n    if (!exists) {\n      throw new Error(`Key not found: ${key}`);\n    }\n\n    if (timeoutSec === -1) {\n      await this.redisClient.persist(key);\n    }else {\n      await this.redisClient.expire(key, timeoutSec);\n    }\n\n  }\n\n  async getTimeout(key:string):Promise<number> {\n    const result = await this.redisClient.ttl(key);\n    // Redis TTL 返回值约定：\n    // -2 = key 不存在\n    // -1 = key 存在但无过期时间（永久）\n    // >0 = 剩余秒数\n    // 恰好与 XltTokenStore 接口约定一致\n    return result;\n  }\n\n  async keys(pattern: string): Promise<string[]> {\n    const result: string[] = [];\n    let cursor = 0;\n    do {\n      const reply = await this.redisClient.scan(cursor, { MATCH: pattern, COUNT: 100 });\n      cursor = reply.cursor;\n      result.push(...reply.keys);\n    } while (cursor !== 0);\n    return result;\n  }\n}\n","import { Inject, Injectable } from \"@nestjs/common\";\nimport { XLT_TOKEN_CONFIG, XltTokenConfig } from '@xlt-token/core';\nimport type { TokenStrategy } from '@xlt-token/core';\nimport { sign, verify, JwtPayload } from \"jsonwebtoken\";\n\n@Injectable()\nexport class JwtStrategy implements TokenStrategy {\n  constructor(\n    @Inject(XLT_TOKEN_CONFIG) private readonly config: XltTokenConfig\n  ) { }\n\n\n\n  createToken(loginId: string, config: XltTokenConfig): string {\n    const jwt = config.jwt!;\n    const jti = crypto.randomUUID();\n\n\n    return sign({\n      sub: loginId, jti\n    }, jwt.secret, {\n      algorithm: jwt.algorithm ?? 'HS256',\n      ...(jwt.issuer && { issuer: jwt.issuer }),\n      ...(jwt.audience && { audience: jwt.audience }),\n      ...(config.timeout > 0 && { expiresIn: config.timeout }),\n    })\n\n  }\n\n\n  generateToken(payload: any): string {\n    return sign(payload, this.config.jwt!.secret);\n  }\n\n\n\n  verifyToken(token: string): JwtPayload & { sub: string; jti: string } {\n    return verify(token, this.config.jwt!.secret) as any;\n  }\n\n}\n","// 登录校验装饰器\n\nimport { SetMetadata } from '@nestjs/common';\nimport { XLT_CHECK_LOGIN_KEY } from '@xlt-token/core';\n\n\n/**\n * 登录校验装饰器\n * @constructor\n */\nexport const XltCheckLogin = () => SetMetadata(XLT_CHECK_LOGIN_KEY, true);\n","// 忽略校验装饰器\n\nimport { SetMetadata } from '@nestjs/common';\nimport { XLT_IGNORE_KEY } from '@xlt-token/core';\n\nexport const XltIgnore = () => SetMetadata(XLT_IGNORE_KEY, true);\n","// 注入当前用户 ID\n\nimport { createParamDecorator, ExecutionContext } from '@nestjs/common';\n\n/**\n * 注入当前用户 ID\n * @constructor\n */\nexport const LoginId = createParamDecorator(\n  (data: unknown, ctx: ExecutionContext) => {\n    const request = ctx.switchToHttp().getRequest();\n    return request.stpLoginId;\n  },\n);\n","// 注入当前 Token\n\nimport { createParamDecorator, ExecutionContext } from '@nestjs/common';\n\n\n/**\n * 注入当前 Token\n * @constructor\n */\nexport const TokenValue = createParamDecorator((data: any, ctx: ExecutionContext) => {\n  const request = ctx.switchToHttp().getRequest();\n  return request.stpToken;\n});\n","import { XLT_PERMISSION_KEY, XltMode } from '@xlt-token/core';\nimport { SetMetadata } from '@nestjs/common';\n\n\n/**\n * 权限检查装饰器\n * @param {string | string[]} permissions 权限列表\n * @param {Object} [options] 模式选项\n * @param {XltMode} [options.mode] 模式选项\n * @constructor\n */\nexport const XltCheckPermission = (permissions: string | string[], options?: { mode: XltMode; }) => {\n  const perms = Array.isArray(permissions) ? permissions : [permissions];\n  const mode = options?.mode ?? XltMode.AND;\n  return SetMetadata(XLT_PERMISSION_KEY, { permissions: perms, mode });\n};\n","import { XLT_ROLE_KEY, XltMode } from '@xlt-token/core';\nimport { SetMetadata } from '@nestjs/common';\n\n\n/**\n * 角色检查装饰器\n * @param {string | string[]} roles 角色列表\n * @param {Object} [options] 模式选项\n * @param {XltMode} [options.mode] 模式选项\n * @constructor\n */\nexport const XltCheckRole = (roles: string | string[], options?: { mode: XltMode; }) => {\n  const _roles = Array.isArray(roles) ? roles : [roles];\n  const mode = options?.mode ?? XltMode.AND;\n  return SetMetadata(XLT_ROLE_KEY, { roles: _roles, mode });\n\n};\n","import { SetMetadata } from \"@nestjs/common\"\n\nexport const XLT_CHECK_SAFE_KEY = 'XLT_CHECK_SAFE';\n\nexport const XltCheckSafe = (business: string) => {\n  return SetMetadata(XLT_CHECK_SAFE_KEY, business);\n}\n","import { UnauthorizedException } from '@nestjs/common';\nimport { NotLoginType } from '@xlt-token/core';\n\nexport class NotLoginException extends UnauthorizedException {\n  public readonly type: NotLoginType;\n  public readonly token: string | undefined;\n\n  constructor(type: NotLoginType, token?: string) {\n    super({\n      statusCode: 401,\n      type,\n      message: NotLoginException.describeType(type),\n    });\n    this.type = type;\n    this.token = token;\n  }\n\n  private static describeType(type: NotLoginType): string {\n    const map: Record<NotLoginType, string> = {\n      [NotLoginType.NOT_TOKEN]: '未提供 Token',\n      [NotLoginType.INVALID_TOKEN]: 'Token 无效',\n      [NotLoginType.TOKEN_TIMEOUT]: 'Token 已过期',\n      [NotLoginType.TOKEN_FREEZE]: 'Token 已被冻结',\n      [NotLoginType.BE_REPLACED]: '已被顶下线',\n      [NotLoginType.KICK_OUT]: '已被踢下线',\n    };\n    return map[type] ?? '未登录';\n  }\n}\n\n","import { ForbiddenException } from '@nestjs/common';\nimport { XltMode } from '@xlt-token/core';\n\nexport class NotPermissionException extends ForbiddenException {\n  public readonly permission: string | string[];\n  public readonly mode: XltMode;\n\n  constructor(permission: string | string[], mode: XltMode) {\n    super({\n      statusCode: 403,\n      type: 'NOT_PERMISSION',\n      message: `缺少权限: ${Array.isArray(permission) ? permission.join(', ') : permission}`,\n    });\n    this.permission = permission;\n    this.mode = mode;\n  }\n}\n","import { ForbiddenException } from '@nestjs/common';\nimport { XltMode } from '@xlt-token/core';\n\nexport class NotRoleException extends ForbiddenException {\n  public readonly role: string | string[];\n  public readonly mode: XltMode;\n\n  constructor(role: string | string[], mode: XltMode) {\n    super({\n      statusCode: 403,\n      type: 'NOT_ROLE',\n      message: `缺少角色: ${Array.isArray(role) ? role.join(', ') : role}`,\n    });\n    this.role = role;\n    this.mode = mode;\n  }\n}\n","import { ForbiddenException } from \"@nestjs/common\";\n\nexport class NotSafeException extends ForbiddenException {\n  readonly business: string;\n\n\n  constructor(business: string) {\n    super({\n      statusCode: 403,\n      type: 'NOT_SAFE',\n      message: `二级认证未开启：${business}`,\n    });\n    this.business = business;\n  }\n\n}\n","import {\n  createExpressContext,\n  NotLoginException as CoreNotLoginException,\n  NotPermissionException as CoreNotPermissionException,\n  NotRoleException as CoreNotRoleException,\n  NotSafeException as CoreNotSafeException,\n} from '@xlt-token/core';\nimport { NotLoginException } from '../exceptions/not-login.exception.js';\nimport { NotPermissionException } from '../exceptions/not-permission.exception.js';\nimport { NotRoleException } from '../exceptions/not-role.exception.js';\nimport { NotSafeException } from '../exceptions/not-safe.exception.js';\n\nexport function createNestHttpContext(req: any, res: any) {\n  return createExpressContext(req, res);\n}\n\nexport function rethrowCoreAuthException(error: unknown): never {\n  if (error instanceof CoreNotLoginException) {\n    throw new NotLoginException(error.type, error.token);\n  }\n  if (error instanceof CoreNotPermissionException) {\n    throw new NotPermissionException(error.permission, error.mode);\n  }\n  if (error instanceof CoreNotRoleException) {\n    throw new NotRoleException(error.role, error.mode);\n  }\n  if (error instanceof CoreNotSafeException) {\n    throw new NotSafeException(error.business);\n  }\n  throw error;\n}\n","// 全局守卫\n\nimport { CanActivate, ExecutionContext, Inject, Injectable, Optional } from '@nestjs/common';\nimport { Reflector } from '@nestjs/core';\nimport {\n  type AuthResult,\n  StpLogic,\n  StpPermLogic,\n  XLT_CHECK_LOGIN_KEY,\n  XLT_IGNORE_KEY,\n  XLT_PERMISSION_KEY,\n  XLT_ROLE_KEY,\n  XLT_TOKEN_CONFIG,\n  type XltTokenConfig,\n} from '@xlt-token/core';\nimport { XLT_CHECK_SAFE_KEY } from '../decorators/xlt-check-safe.decorator.js';\nimport { createNestHttpContext, rethrowCoreAuthException } from '../http/nest-bridge.js';\n\n@Injectable()\nexport class XltTokenGuard implements CanActivate {\n  constructor(\n    private readonly reflector: Reflector,\n    @Inject(XLT_TOKEN_CONFIG) private readonly config: XltTokenConfig,\n    private readonly stpLogic: StpLogic,\n    @Optional() private readonly stpPermLogic?: StpPermLogic,\n  ) {\n  }\n\n  async canActivate(context: ExecutionContext): Promise<boolean> {\n    if (!this.requiresLogin(context)) return true;\n\n    const request = context.switchToHttp().getRequest();\n    const response = context.switchToHttp().getResponse();\n\n    let result: AuthResult;\n    try {\n      result = await this.stpLogic.checkLogin(createNestHttpContext(request, response));\n    } catch (error) {\n      rethrowCoreAuthException(error);\n    }\n\n    const business = this.getBusiness(context);\n    request.stpLoginId = result.loginId;\n    request.stpToken = result.token;\n\n    try {\n      if (this.stpPermLogic) {\n        const handler = context.getHandler();\n        const cls = context.getClass();\n\n        const permMeta = this.reflector.getAllAndOverride(XLT_PERMISSION_KEY, [handler, cls]);\n        if (permMeta) {\n          await this.stpPermLogic.checkPermission(result.loginId!, permMeta.permissions, permMeta.mode);\n        }\n\n        const roleMeta = this.reflector.getAllAndOverride(XLT_ROLE_KEY, [handler, cls]);\n        if (roleMeta) {\n          await this.stpPermLogic.checkRole(result.loginId!, roleMeta.roles, roleMeta.mode);\n        }\n      }\n\n      if (business) {\n        await this.stpLogic.checkSafe(result.token!, business);\n      }\n    } catch (error) {\n      rethrowCoreAuthException(error);\n    }\n\n    return true;\n  }\n\n  private requiresLogin(context: ExecutionContext): boolean {\n    const isIgnored = this.reflector.getAllAndOverride<boolean>(XLT_IGNORE_KEY, [\n      context.getHandler(),\n      context.getClass(),\n    ]);\n\n    if (this.config.defaultCheck) {\n      return !isIgnored;\n    }\n\n    const shouldCheck = this.reflector.getAllAndOverride<boolean>(XLT_CHECK_LOGIN_KEY, [\n      context.getHandler(),\n      context.getClass(),\n    ]);\n    return shouldCheck ?? false;\n  }\n\n  private getBusiness(context: ExecutionContext): string {\n    return this.reflector.getAllAndOverride<string>(XLT_CHECK_SAFE_KEY, [\n      context.getHandler(),\n      context.getClass(),\n    ]);\n  }\n}\n","import { CanActivate, ExecutionContext, Inject, Injectable } from '@nestjs/common';\nimport { Reflector } from '@nestjs/core';\nimport {\n  NotLoginException as CoreNotLoginException,\n  NotLoginType,\n  StpLogic,\n  XLT_CHECK_LOGIN_KEY,\n  XLT_IGNORE_KEY,\n  XLT_TOKEN_CONFIG,\n  type XltTokenConfig,\n} from '@xlt-token/core';\nimport { NotLoginException } from '../exceptions/not-login.exception.js';\nimport { createNestHttpContext } from '../http/nest-bridge.js';\n\n@Injectable()\nexport abstract class XltAbstractLoginGuard implements CanActivate {\n  protected constructor(\n    protected readonly reflector: Reflector,\n    @Inject(XLT_TOKEN_CONFIG) protected readonly config: XltTokenConfig,\n    protected readonly stpLogic: StpLogic,\n  ) {}\n\n  async canActivate(ctx: ExecutionContext): Promise<boolean> {\n    if (!this.requiresLogin(ctx)) return true;\n\n    const request = ctx.switchToHttp().getRequest();\n    const response = ctx.switchToHttp().getResponse();\n\n    let result: { ok: boolean; loginId?: string; token?: string; reason?: NotLoginType };\n    try {\n      result = await this.stpLogic.checkLogin(createNestHttpContext(request, response));\n    } catch (err) {\n      if (err instanceof CoreNotLoginException) {\n        await this.onAuthFail?.({ ok: false, reason: err.type, token: err.token }, request);\n        throw new NotLoginException(err.type, err.token);\n      }\n      throw err;\n    }\n\n    request.stpLoginId = result.loginId;\n    request.stpToken = result.token;\n    await this.onAuthSuccess?.(result, request);\n    return true;\n  }\n\n  protected requiresLogin(ctx: ExecutionContext): boolean {\n    const isIgnored = this.reflector.getAllAndOverride<boolean>(XLT_IGNORE_KEY, [ctx.getHandler(), ctx.getClass()]);\n\n    if (this.config.defaultCheck) return !isIgnored;\n\n    return this.reflector.getAllAndOverride<boolean>(XLT_CHECK_LOGIN_KEY, [ctx.getHandler(), ctx.getClass()]) ?? false;\n  }\n\n  protected onAuthSuccess?(\n    result: {\n      ok: boolean;\n      loginId?: string | undefined;\n      token?: string | undefined;\n      reason?: NotLoginType | undefined;\n    },\n    request: any,\n  ): void | Promise<void>;\n\n  protected onAuthFail?(\n    result: {\n      ok: boolean;\n      loginId?: string | undefined;\n      token?: string | undefined;\n      reason?: NotLoginType | undefined;\n    },\n    request: any,\n  ): void | Promise<void>;\n\n  protected onPermissionDenied?(\n    result: {\n      ok: boolean;\n      loginId?: string | undefined;\n      token?: string | undefined;\n      reason?: NotLoginType | undefined;\n    },\n    request: any,\n  ): void | Promise<void>;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA2CO,2BAAM,eAAe;;;;CAC1B,OAAe,oBACb,OACU;AACV,MAAI,CAAC,MAAO,QAAO;GAAE,SAASA;GAAiB,UAAUC;GAAa;AACtE,SAAO,cAAc,QACjB;GAAE,SAASD;GAAiB,UAAU,MAAM;GAAU,GACtD;GAAE,SAASA;GAAiB,UAAU,MAAM;GAAU;;CAG5D,OAAe,uBACb,UACU;AACV,SAAO,UAAU,WACb;GAAE,SAASE;GAAoB,UAAU,SAAS;GAAU,GAC5D;GAAE,SAASA;GAAoB,UAAUC;GAAc;;CAG7D,OAAe,2BACb,cACU;AACV,MAAI,aAAc,QAAO;GAAE,SAASC;GAAmB,UAAU;GAAc;AAC/E,SAAO;GACL,SAASA;GACT,UAAU;IACR,yBAAyB;AAAE,WAAM,IAAI,MAAM,iDAAiD;;IAC5F,mBAAmB;AAAE,WAAM,IAAI,MAAM,2CAA2C;;IACjF;GACF;;CAGH,OAAe,oBACb,OACU;AACV,SAAO;GAAE,SAASC;GAAiB,UAAU,SAAS,EAAE;GAAE;;;0BAGP;GACnD,SAASC;GACT,aACE,QACA,OACA,UACA,UACG,IAAIA,WAAS,QAAQ,OAAO,UAAU,MAAM;GACjD,QAAQ;IAACC;IAAkBP;IAAiBE;IAAoBG;IAAgB;GACjF;;;8BAEwD;GACvD,SAASG;GACT,aACE,cACA,OACA,WACG,IAAIA,eAAa,cAAc,OAAO,OAAO;GAClD,QAAQ;IAACJ;IAAmBJ;IAAiBO;IAAiB;GAC/D;;;sBAEgD;GAC/C,SAAS;GACT,aAAa,UAAoB,iBAA+B;AAC9D,kBAAY,SAAS;AACrB,sBAAgB,aAAa;AAC7B,WAAO;;GAET,QAAQ,CAACD,YAAUE,eAAa;GACjC;;;uBAEuC;GAACD;GAAkBP;GAAiBE;GAAoBI;GAAUE;GAAa;;CAEvH,OAAO,QAAQ,UAAiC,EAAE,EAAE;EAClD,MAAM,EAAE,QAAQ,YAAY,OAAO,UAAU,WAAW,OAAO,YAAY,EAAE,EAAE,iBAAiB;AAEhG,SAAO;GACL;GACA,WAAW;IACT;KAAE,SAASD;KAAkB,UAAU;MAAE,GAAGE;MAA0B,GAAG;MAAY;KAAE;oBACxE,oBAAoB,MAAM;oBAC1B,uBAAuB,SAAS;oBAChC,2BAA2B,aAAa;oBACxC,oBAAoB,QAAQ,MAAM;oBAClC;oBACA;oBACA;IACf,GAAG;IACJ;GACD,yBAAwB;GACxB,QAAQ;GACT;;CAGH,OAAO,aAAa,SAAqC;EACvD,MAAM,EAAE,YAAY,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,UAAU,WAAW,OAAO,YAAY,EAAE,EAAE,iBAAiB;AAEnH,SAAO;GACL;GACA;GACA,WAAW;IACT;KACE,SAASF;KACT,YAAY,OAAO,GAAG,SAAgB;MACpC,MAAM,EAAE,SAAS,EAAE,KAAK,MAAM,WAAW,GAAG,KAAK;AACjD,aAAO;OAAE,GAAGE;OAA0B,GAAG;OAAQ;;KAEnD;KACD;oBACc,oBAAoB,MAAM;oBAC1B,uBAAuB,SAAS;oBAChC,2BAA2B,aAAa;oBACxC,oBAAoB,QAAQ,MAAM;oBAClC;oBACA;oBACA;IACf,GAAG;IACJ;GACD,yBAAwB;GACxB,QAAQ;GACT;;;+CAtHJ,OAAO,EAAE,CAAC;;;;;;;;;;;;;;;;;;ACtCX,MAAc,mBAAmB;AAIzB,uBAAM,WAAoC;CAEhD,YACE,AACiB,aACjB;EADiB;;CAMnB,MAAM,IAAI,KAAmC;AAC3C,SAAO,KAAK,YAAY,IAAI,IAAI;;CAIlC,MAAM,IAAI,KAAY,OAAc,YAAiC;AACnE,MAAI,eAAe,GACjB,OAAM,KAAK,YAAY,IAAI,KAAK,MAAM;MAEtC,OAAM,KAAK,YAAY,IAAI,KAAK,OAAO,EAAC,IAAI,YAAW,CAAC;;CAK5D,MAAM,OAAO,KAA0B;AACrC,QAAM,KAAK,YAAY,IAAI,IAAI;;CAIjC,MAAM,OAAO,KAAY,OAA4B;AAEnD,MADe,MAAM,KAAK,YAAY,IAAI,KAAK,OAAM;GAAC,IAAG;GAAK,SAAQ;GAAK,CAAC,KAC9D,KACZ,OAAM,IAAI,MAAM,kBAAkB,MAAM;;CAK5C,MAAM,IAAI,KAA6B;AAErC,SADe,MAAM,KAAK,YAAY,OAAO,IAAI,KAC/B;;CAIpB,MAAM,cAAc,KAAY,YAAiC;AAG/D,MAAI,CAFY,MAAO,KAAK,YAAY,OAAO,IAAI,CAGjD,OAAM,IAAI,MAAM,kBAAkB,MAAM;AAG1C,MAAI,eAAe,GACjB,OAAM,KAAK,YAAY,QAAQ,IAAI;MAEnC,OAAM,KAAK,YAAY,OAAO,KAAK,WAAW;;CAKlD,MAAM,WAAW,KAA4B;AAO3C,SANe,MAAM,KAAK,YAAY,IAAI,IAAI;;CAShD,MAAM,KAAK,SAAoC;EAC7C,MAAM,SAAmB,EAAE;EAC3B,IAAI,SAAS;AACb,KAAG;GACD,MAAM,QAAQ,MAAM,KAAK,YAAY,KAAK,QAAQ;IAAE,OAAO;IAAS,OAAO;IAAK,CAAC;AACjF,YAAS,MAAM;AACf,UAAO,KAAK,GAAG,MAAM,KAAK;WACnB,WAAW;AACpB,SAAO;;;;CA7EV,YAAY;oBAIR,OAAO,iBAAiB;;;;;;;ACLtB,wBAAM,YAAqC;CAChD,YACE,AAA2C,QAC3C;EAD2C;;CAK7C,YAAY,SAAiB,QAAgC;EAC3D,MAAM,MAAM,OAAO;AAInB,SAAO,KAAK;GACV,KAAK;GAAS,KAJJ,OAAO,YAAY;GAK9B,EAAE,IAAI,QAAQ;GACb,WAAW,IAAI,aAAa;GAC5B,GAAI,IAAI,UAAU,EAAE,QAAQ,IAAI,QAAQ;GACxC,GAAI,IAAI,YAAY,EAAE,UAAU,IAAI,UAAU;GAC9C,GAAI,OAAO,UAAU,KAAK,EAAE,WAAW,OAAO,SAAS;GACxD,CAAC;;CAKJ,cAAc,SAAsB;AAClC,SAAO,KAAK,SAAS,KAAK,OAAO,IAAK,OAAO;;CAK/C,YAAY,OAA0D;AACpE,SAAO,OAAO,OAAO,KAAK,OAAO,IAAK,OAAO;;;;CAhChD,YAAY;oBAGR,OAAOC,mBAAiB;;;;;;;;;;ACE7B,MAAa,sBAAsB,YAAY,qBAAqB,KAAK;;;;ACLzE,MAAa,kBAAkB,YAAY,gBAAgB,KAAK;;;;;;;;ACGhE,MAAa,UAAU,sBACpB,MAAe,QAA0B;AAExC,QADgB,IAAI,cAAc,CAAC,YAAY,CAChC;EAElB;;;;;;;;ACJD,MAAa,aAAa,sBAAsB,MAAW,QAA0B;AAEnF,QADgB,IAAI,cAAc,CAAC,YAAY,CAChC;EACf;;;;;;;;;;;ACDF,MAAa,sBAAsB,aAAgC,YAAiC;AAGlG,QAAO,YAAY,oBAAoB;EAAE,aAF3B,MAAM,QAAQ,YAAY,GAAG,cAAc,CAAC,YAAY;EAET,MADhD,SAAS,QAAQC,UAAQ;EAC6B,CAAC;;;;;;;;;;;;ACHtE,MAAa,gBAAgB,OAA0B,YAAiC;AAGtF,QAAO,YAAY,cAAc;EAAE,OAFpB,MAAM,QAAQ,MAAM,GAAG,QAAQ,CAAC,MAAM;EAEH,MADrC,SAAS,QAAQC,UAAQ;EACkB,CAAC;;;;;ACZ3D,MAAa,qBAAqB;AAElC,MAAa,gBAAgB,aAAqB;AAChD,QAAO,YAAY,oBAAoB,SAAS;;;;;ACFlD,IAAa,oBAAb,MAAa,0BAA0B,sBAAsB;CAI3D,YAAY,MAAoB,OAAgB;AAC9C,QAAM;GACJ,YAAY;GACZ;GACA,SAAS,kBAAkB,aAAa,KAAK;GAC9C,CAAC;AACF,OAAK,OAAO;AACZ,OAAK,QAAQ;;CAGf,OAAe,aAAa,MAA4B;AAStD,SAR0C;IACvCC,eAAa,YAAY;IACzBA,eAAa,gBAAgB;IAC7BA,eAAa,gBAAgB;IAC7BA,eAAa,eAAe;IAC5BA,eAAa,cAAc;IAC3BA,eAAa,WAAW;GAC1B,CACU,SAAS;;;;;;ACvBxB,IAAa,yBAAb,cAA4C,mBAAmB;CAI7D,YAAY,YAA+B,MAAe;AACxD,QAAM;GACJ,YAAY;GACZ,MAAM;GACN,SAAS,SAAS,MAAM,QAAQ,WAAW,GAAG,WAAW,KAAK,KAAK,GAAG;GACvE,CAAC;AACF,OAAK,aAAa;AAClB,OAAK,OAAO;;;;;;ACXhB,IAAa,mBAAb,cAAsC,mBAAmB;CAIvD,YAAY,MAAyB,MAAe;AAClD,QAAM;GACJ,YAAY;GACZ,MAAM;GACN,SAAS,SAAS,MAAM,QAAQ,KAAK,GAAG,KAAK,KAAK,KAAK,GAAG;GAC3D,CAAC;AACF,OAAK,OAAO;AACZ,OAAK,OAAO;;;;;;ACZhB,IAAa,mBAAb,cAAsC,mBAAmB;CAIvD,YAAY,UAAkB;AAC5B,QAAM;GACJ,YAAY;GACZ,MAAM;GACN,SAAS,WAAW;GACrB,CAAC;AACF,OAAK,WAAW;;;;;;ACApB,SAAgB,sBAAsB,KAAU,KAAU;AACxD,QAAOC,uBAAqB,KAAK,IAAI;;AAGvC,SAAgB,yBAAyB,OAAuB;AAC9D,KAAI,iBAAiBC,oBACnB,OAAM,IAAI,kBAAkB,MAAM,MAAM,MAAM,MAAM;AAEtD,KAAI,iBAAiBC,yBACnB,OAAM,IAAI,uBAAuB,MAAM,YAAY,MAAM,KAAK;AAEhE,KAAI,iBAAiBC,mBACnB,OAAM,IAAI,iBAAiB,MAAM,MAAM,MAAM,KAAK;AAEpD,KAAI,iBAAiBC,mBACnB,OAAM,IAAI,iBAAiB,MAAM,SAAS;AAE5C,OAAM;;;;;;ACVD,0BAAM,cAAqC;CAChD,YACE,AAAiB,WACjB,AAA2C,QAC3C,AAAiB,UACjB,AAA6B,cAC7B;EAJiB;EAC0B;EAC1B;EACY;;CAI/B,MAAM,YAAY,SAA6C;AAC7D,MAAI,CAAC,KAAK,cAAc,QAAQ,CAAE,QAAO;EAEzC,MAAM,UAAU,QAAQ,cAAc,CAAC,YAAY;EACnD,MAAM,WAAW,QAAQ,cAAc,CAAC,aAAa;EAErD,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,KAAK,SAAS,WAAW,sBAAsB,SAAS,SAAS,CAAC;WAC1E,OAAO;AACd,4BAAyB,MAAM;;EAGjC,MAAM,WAAW,KAAK,YAAY,QAAQ;AAC1C,UAAQ,aAAa,OAAO;AAC5B,UAAQ,WAAW,OAAO;AAE1B,MAAI;AACF,OAAI,KAAK,cAAc;IACrB,MAAM,UAAU,QAAQ,YAAY;IACpC,MAAM,MAAM,QAAQ,UAAU;IAE9B,MAAM,WAAW,KAAK,UAAU,kBAAkB,oBAAoB,CAAC,SAAS,IAAI,CAAC;AACrF,QAAI,SACF,OAAM,KAAK,aAAa,gBAAgB,OAAO,SAAU,SAAS,aAAa,SAAS,KAAK;IAG/F,MAAM,WAAW,KAAK,UAAU,kBAAkB,cAAc,CAAC,SAAS,IAAI,CAAC;AAC/E,QAAI,SACF,OAAM,KAAK,aAAa,UAAU,OAAO,SAAU,SAAS,OAAO,SAAS,KAAK;;AAIrF,OAAI,SACF,OAAM,KAAK,SAAS,UAAU,OAAO,OAAQ,SAAS;WAEjD,OAAO;AACd,4BAAyB,MAAM;;AAGjC,SAAO;;CAGT,AAAQ,cAAc,SAAoC;EACxD,MAAM,YAAY,KAAK,UAAU,kBAA2B,gBAAgB,CAC1E,QAAQ,YAAY,EACpB,QAAQ,UAAU,CACnB,CAAC;AAEF,MAAI,KAAK,OAAO,aACd,QAAO,CAAC;AAOV,SAJoB,KAAK,UAAU,kBAA2B,qBAAqB,CACjF,QAAQ,YAAY,EACpB,QAAQ,UAAU,CACnB,CAAC,IACoB;;CAGxB,AAAQ,YAAY,SAAmC;AACrD,SAAO,KAAK,UAAU,kBAA0B,oBAAoB,CAClE,QAAQ,YAAY,EACpB,QAAQ,UAAU,CACnB,CAAC;;;;CA1EL,YAAY;oBAIR,OAAOC,mBAAiB;oBAExB,UAAU;;;;;;;;;;;;ACTR,kCAAe,sBAA6C;CACjE,AAAU,YACR,AAAmB,WACnB,AAA6C,QAC7C,AAAmB,UACnB;EAHmB;EAC0B;EAC1B;;CAGrB,MAAM,YAAY,KAAyC;AACzD,MAAI,CAAC,KAAK,cAAc,IAAI,CAAE,QAAO;EAErC,MAAM,UAAU,IAAI,cAAc,CAAC,YAAY;EAC/C,MAAM,WAAW,IAAI,cAAc,CAAC,aAAa;EAEjD,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,KAAK,SAAS,WAAW,sBAAsB,SAAS,SAAS,CAAC;WAC1E,KAAK;AACZ,OAAI,eAAeC,qBAAuB;AACxC,UAAM,KAAK,aAAa;KAAE,IAAI;KAAO,QAAQ,IAAI;KAAM,OAAO,IAAI;KAAO,EAAE,QAAQ;AACnF,UAAM,IAAI,kBAAkB,IAAI,MAAM,IAAI,MAAM;;AAElD,SAAM;;AAGR,UAAQ,aAAa,OAAO;AAC5B,UAAQ,WAAW,OAAO;AAC1B,QAAM,KAAK,gBAAgB,QAAQ,QAAQ;AAC3C,SAAO;;CAGT,AAAU,cAAc,KAAgC;EACtD,MAAM,YAAY,KAAK,UAAU,kBAA2B,gBAAgB,CAAC,IAAI,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC;AAE/G,MAAI,KAAK,OAAO,aAAc,QAAO,CAAC;AAEtC,SAAO,KAAK,UAAU,kBAA2B,qBAAqB,CAAC,IAAI,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,IAAI;;;;CApChH,YAAY;oBAIR,OAAOC,mBAAiB"}

package/package.json

@@ -0,0 +1,90 @@
+{
+  "name": "@xlt-token/nestjs",
+  "version": "1.0.0-rc.3",
+  "description": "NestJS integration for xlt-token",
+  "keywords": [
+    "nestjs",
+    "token",
+    "auth",
+    "jwt",
+    "session"
+  ],
+  "author": "xltorg",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/xiaoLangtou/xlt-token.git",
+    "directory": "packages/nestjs"
+  },
+  "bugs": {
+    "url": "https://github.com/xiaoLangtou/xlt-token/issues"
+  },
+  "homepage": "https://xiaolangtou.github.io/xlt-token/",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "exports": {
+    ".": {
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.cts",
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md"
+  ],
+  "peerDependencies": {
+    "@nestjs/common": "^10.0.0 || ^11.0.0",
+    "@nestjs/core": "^10.0.0 || ^11.0.0",
+    "reflect-metadata": "^0.1.13 || ^0.2.0",
+    "rxjs": "^7.0.0"
+  },
+  "peerDependenciesMeta": {
+    "redis": {
+      "optional": true
+    },
+    "jsonwebtoken": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "uuid": "^10.0.0",
+    "@xlt-token/core": "1.0.0-rc.3"
+  },
+  "devDependencies": {
+    "@nestjs/common": "^10.0.0",
+    "@nestjs/core": "^10.0.0",
+    "@nestjs/platform-express": "^10.0.0",
+    "@nestjs/testing": "^10.0.0",
+    "@swc/core": "^1.15.30",
+    "@types/jsonwebtoken": "^9.0.10",
+    "@types/node": "^20.0.0",
+    "@types/supertest": "^7.2.0",
+    "@types/uuid": "^10.0.0",
+    "@vitest/coverage-v8": "^2.1.9",
+    "jsonwebtoken": "^9.0.3",
+    "reflect-metadata": "^0.1.13",
+    "rxjs": "^7.8.0",
+    "supertest": "^7.2.2",
+    "tsdown": "^0.20.0",
+    "typescript": "^5.1.0",
+    "unplugin-swc": "^1.5.9",
+    "vitest": "^2.0.0"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "build:watch": "tsdown --watch",
+    "test": "vitest run",
+    "test:cov": "vitest run --coverage",
+    "test:e2e": "vitest run --config vitest.e2e.config.ts",
+    "test:e2e:cov": "vitest run --config vitest.e2e.config.ts --coverage",
+    "test:e2e:junit": "vitest run --config vitest.e2e.config.ts --reporter=junit --outputFile=reports/junit-e2e.xml"
+  }
+}