@zorionapp/gg-core 4.14.0

package/README.md

@@ -0,0 +1,11 @@
+# gg-core
+
+This library was generated with [Nx](https://nx.dev)
+
+## Building
+
+Run `nx build gg-core` to build the library.
+
+## Running unit tests
+
+Run `nx test gg-core` to execute the unit tests via [Jest](https://jestjs.io).

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@zorionapp/gg-core",
+  "version": "4.14.0",
+  "type": "commonjs",
+  "dependencies": {
+    "cache-manager": "5.2.4",
+    "@google-cloud/error-reporting": "3.0.5",
+    "@google-cloud/profiler": "6.0.0",
+    "@google-cloud/trace-agent": "7.1.2"
+  },
+  "peerDependencies": {
+    "cache-manager-redis-yet": "^4.1.2",
+    "amqp-connection-manager": "^4.1.14",
+    "amqplib": "^0.10.3",
+    "redis": "^4.6.10",
+    "helmet": "^7.1.0",
+    "pino-http": "^8.5.0",
+    "@google-cloud/error-reporting": "^3.0.5",
+    "@google-cloud/profiler": "^6.0.0",
+    "@google-cloud/trace-agent": "^7.1.2",
+    "@horizon-republic/nominal-types": "^2.0.14",
+    "@mikro-orm/core": "^5.0.0 || ^6.0.0",
+    "@mikro-orm/migrations": "^6.2.8",
+    "@mikro-orm/nestjs": "^6.0.1",
+    "@mikro-orm/postgresql": "^6.2.8",
+    "@mikro-orm/seeder": "^6.2.8",
+    "@nestjs/axios": "^3.0.0",
+    "@nestjs/cache-manager": "^2.0.0",
+    "@nestjs/common": "^8.0.0 || ^9.0.0 || ^10.0.0",
+    "@nestjs/config": "^3.0.0",
+    "@nestjs/core": "^8.0.0 || ^9.0.0 || ^10.0.0",
+    "@nestjs/microservices": "^8.0.0 || ^9.0.0 || ^10.0.0",
+    "@nestjs/platform-express": "^8.0.0 || ^9.0.0 || ^10.0.0",
+    "@nestjs/swagger": "^6.0.0 || ^7.0.0",
+    "@nestjs/terminus": "^8.0.0 || ^9.0.0 || ^10.0.0",
+    "@nestjs/throttler": "^3.0.0 || ^4.0.0",
+    "@willsoto/nestjs-prometheus": "^5.5.1",
+    "axios": "^1.0.0",
+    "class-transformer": "^0.5.1",
+    "class-transformer-validator": "^0.9.1",
+    "class-validator": "^0.14.0",
+    "express": "^4.18.0",
+    "get-root-path": "^2.0.2",
+    "lodash": "^4.17.0",
+    "luxon": "^3.4.0",
+    "mathjs": "^11.0.0 || ^12.0.0 || ^13.0.0",
+    "nestjs-cls": "^3.0.0",
+    "nestjs-pino": "^3.3.0",
+    "pino-pretty": "^10.2.0",
+    "prom-client": "^14.2.0",
+    "rxjs": "^7.8.1",
+    "ts-enum-util": "^4.0.2",
+    "uuid": "^9.0.0",
+    "yaml": "^2.3.1",
+    "kutt": "^3.0.2"
+  },
+  "main": "./src/index.js"
+}

package/src/gg-auth/decorators/protected.decorator.d.ts

@@ -0,0 +1,9 @@
+import { User } from '@zorionapp/gg-toolkit/enum';
+import { AuthType } from '../gg-auth.module-options';
+type ProtectedOptions = {
+    roles?: User.Role[];
+    authTypes?: AuthType[];
+    allowedUserStatuses?: User.Status[];
+};
+export declare const Protected: (options?: ProtectedOptions) => <TFunction extends Function, Y>(target: object | TFunction, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;
+export {};

package/src/gg-auth/decorators/protected.decorator.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Protected = void 0;
+const common_1 = require("@nestjs/common");
+const gg_auth_module_options_1 = require("../gg-auth.module-options");
+const Protected = (options = { roles: [], authTypes: [gg_auth_module_options_1.AuthType.Bearer], allowedUserStatuses: [] }) => (0, common_1.applyDecorators)((0, common_1.SetMetadata)(gg_auth_module_options_1.GG_AUTH_PROTECTED_TOKEN, true), (0, common_1.SetMetadata)(gg_auth_module_options_1.GG_AUTH_ROLES_TOKEN, options.roles ?? []), (0, common_1.SetMetadata)(gg_auth_module_options_1.GG_AUTH_AUTH_TYPE_TOKEN, options.authTypes ?? gg_auth_module_options_1.AuthType.Bearer), (0, common_1.SetMetadata)(gg_auth_module_options_1.GG_AUTH_ALLOWED_USER_STATUS_TOKEN, options.allowedUserStatuses ?? []));
+exports.Protected = Protected;
+//# sourceMappingURL=protected.decorator.js.map

package/src/gg-auth/decorators/protected.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected.decorator.js","sourceRoot":"","sources":["../../../../../../libs/gg-core/src/gg-auth/decorators/protected.decorator.ts"],"names":[],"mappings":";;;AACA,2CAA8D;AAC9D,sEAMmC;AAI5B,MAAM,SAAS,GAAG,CACvB,UAA4B,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,iCAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,EAChG,EAAE,CACF,IAAA,wBAAe,EACb,IAAA,oBAAW,EAAC,gDAAuB,EAAE,IAAI,CAAC,EAC1C,IAAA,oBAAW,EAAC,4CAAmB,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EACrD,IAAA,oBAAW,EAAC,gDAAuB,EAAE,OAAO,CAAC,SAAS,IAAI,iCAAQ,CAAC,MAAM,CAAC,EAC1E,IAAA,oBAAW,EAAC,0DAAiC,EAAE,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAClF,CAAC;AARS,QAAA,SAAS,aAQlB"}

package/src/gg-auth/exceptions/merchant-ip-mismatch.exception.d.ts

@@ -0,0 +1,7 @@
+import { ExceptionDomainCodes } from '../../gg-errors/exception.domain-codes';
+import { GgException } from '../../gg-errors/exceptions/gg.exception';
+export declare class MerchantIpMismatchException extends GgException {
+    protected domainCode: ExceptionDomainCodes;
+    protected message: string;
+    protected internalMessage: string;
+}

package/src/gg-auth/exceptions/merchant-ip-mismatch.exception.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MerchantIpMismatchException = void 0;
+const exception_domain_codes_1 = require("../../gg-errors/exception.domain-codes");
+const gg_exception_1 = require("../../gg-errors/exceptions/gg.exception");
+class MerchantIpMismatchException extends gg_exception_1.GgException {
+    constructor() {
+        super(...arguments);
+        this.domainCode = exception_domain_codes_1.ExceptionDomainCodes.MerchantIPMismatch;
+        this.message = 'Your IP is not whitelisted';
+        this.internalMessage = 'Your IP is not whitelisted';
+    }
+}
+exports.MerchantIpMismatchException = MerchantIpMismatchException;
+//# sourceMappingURL=merchant-ip-mismatch.exception.js.map

package/src/gg-auth/exceptions/merchant-ip-mismatch.exception.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merchant-ip-mismatch.exception.js","sourceRoot":"","sources":["../../../../../../libs/gg-core/src/gg-auth/exceptions/merchant-ip-mismatch.exception.ts"],"names":[],"mappings":";;;AAAA,mFAA8E;AAC9E,0EAAsE;AAEtE,MAAa,2BAA4B,SAAQ,0BAAW;IAA5D;;QACY,eAAU,GAAG,6CAAoB,CAAC,kBAAkB,CAAC;QACrD,YAAO,GAAG,4BAA4B,CAAC;QACvC,oBAAe,GAAG,4BAA4B,CAAC;IAC3D,CAAC;CAAA;AAJD,kEAIC"}

package/src/gg-auth/exceptions/user-blocked.exception.d.ts

@@ -0,0 +1,9 @@
+import { HttpStatus } from '@nestjs/common';
+import { ExceptionDomainCodes } from '../../gg-errors/exception.domain-codes';
+import { GgException } from '../../gg-errors/exceptions/gg.exception';
+export declare class UserBlockedException extends GgException {
+    protected domainCode: ExceptionDomainCodes;
+    protected message: string;
+    protected internalMessage: string;
+    protected status: HttpStatus;
+}

package/src/gg-auth/exceptions/user-blocked.exception.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserBlockedException = void 0;
+const common_1 = require("@nestjs/common");
+const exception_domain_codes_1 = require("../../gg-errors/exception.domain-codes");
+const gg_exception_1 = require("../../gg-errors/exceptions/gg.exception");
+class UserBlockedException extends gg_exception_1.GgException {
+    constructor() {
+        super(...arguments);
+        this.domainCode = exception_domain_codes_1.ExceptionDomainCodes.UserBlocked;
+        this.message = 'User blocked';
+        this.internalMessage = 'User blocked';
+        this.status = common_1.HttpStatus.FORBIDDEN;
+    }
+}
+exports.UserBlockedException = UserBlockedException;
+//# sourceMappingURL=user-blocked.exception.js.map

package/src/gg-auth/exceptions/user-blocked.exception.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-blocked.exception.js","sourceRoot":"","sources":["../../../../../../libs/gg-core/src/gg-auth/exceptions/user-blocked.exception.ts"],"names":[],"mappings":";;;AAAA,2CAA4C;AAC5C,mFAA8E;AAC9E,0EAAsE;AAEtE,MAAa,oBAAqB,SAAQ,0BAAW;IAArD;;QACY,eAAU,GAAG,6CAAoB,CAAC,WAAW,CAAC;QAC9C,YAAO,GAAG,cAAc,CAAC;QACzB,oBAAe,GAAG,cAAc,CAAC;QACjC,WAAM,GAAG,mBAAU,CAAC,SAAS,CAAC;IAC1C,CAAC;CAAA;AALD,oDAKC"}

package/src/gg-auth/exceptions/user-inactive.exception.d.ts

@@ -0,0 +1,9 @@
+import { HttpStatus } from '@nestjs/common';
+import { ExceptionDomainCodes } from '../../gg-errors/exception.domain-codes';
+import { GgException } from '../../gg-errors/exceptions/gg.exception';
+export declare class UserInactiveException extends GgException {
+    protected domainCode: ExceptionDomainCodes;
+    protected message: string;
+    protected internalMessage: string;
+    protected status: HttpStatus;
+}

package/src/gg-auth/exceptions/user-inactive.exception.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserInactiveException = void 0;
+const common_1 = require("@nestjs/common");
+const exception_domain_codes_1 = require("../../gg-errors/exception.domain-codes");
+const gg_exception_1 = require("../../gg-errors/exceptions/gg.exception");
+class UserInactiveException extends gg_exception_1.GgException {
+    constructor() {
+        super(...arguments);
+        this.domainCode = exception_domain_codes_1.ExceptionDomainCodes.UserInactive;
+        this.message = 'User inactive';
+        this.internalMessage = 'User inactive';
+        this.status = common_1.HttpStatus.FORBIDDEN;
+    }
+}
+exports.UserInactiveException = UserInactiveException;
+//# sourceMappingURL=user-inactive.exception.js.map

package/src/gg-auth/exceptions/user-inactive.exception.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-inactive.exception.js","sourceRoot":"","sources":["../../../../../../libs/gg-core/src/gg-auth/exceptions/user-inactive.exception.ts"],"names":[],"mappings":";;;AAAA,2CAA4C;AAC5C,mFAA8E;AAC9E,0EAAsE;AAEtE,MAAa,qBAAsB,SAAQ,0BAAW;IAAtD;;QACY,eAAU,GAAG,6CAAoB,CAAC,YAAY,CAAC;QAC/C,YAAO,GAAG,eAAe,CAAC;QAC1B,oBAAe,GAAG,eAAe,CAAC;QAClC,WAAM,GAAG,mBAAU,CAAC,SAAS,CAAC;IAC1C,CAAC;CAAA;AALD,sDAKC"}

package/src/gg-auth/exceptions/user-otp-blocked.exception.d.ts

@@ -0,0 +1,9 @@
+import { HttpStatus } from '@nestjs/common';
+import { ExceptionDomainCodes } from '../../gg-errors/exception.domain-codes';
+import { GgException } from '../../gg-errors/exceptions/gg.exception';
+export declare class UserOtpBlockedException extends GgException {
+    protected domainCode: ExceptionDomainCodes;
+    protected message: string;
+    protected internalMessage: string;
+    protected status: HttpStatus;
+}

package/src/gg-auth/exceptions/user-otp-blocked.exception.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserOtpBlockedException = void 0;
+const common_1 = require("@nestjs/common");
+const exception_domain_codes_1 = require("../../gg-errors/exception.domain-codes");
+const gg_exception_1 = require("../../gg-errors/exceptions/gg.exception");
+class UserOtpBlockedException extends gg_exception_1.GgException {
+    constructor() {
+        super(...arguments);
+        this.domainCode = exception_domain_codes_1.ExceptionDomainCodes.UserOTPBlocked;
+        this.message = 'User OTP blocked';
+        this.internalMessage = 'User OTP blocked';
+        this.status = common_1.HttpStatus.FORBIDDEN;
+    }
+}
+exports.UserOtpBlockedException = UserOtpBlockedException;
+//# sourceMappingURL=user-otp-blocked.exception.js.map

package/src/gg-auth/exceptions/user-otp-blocked.exception.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-otp-blocked.exception.js","sourceRoot":"","sources":["../../../../../../libs/gg-core/src/gg-auth/exceptions/user-otp-blocked.exception.ts"],"names":[],"mappings":";;;AAAA,2CAA4C;AAC5C,mFAA8E;AAC9E,0EAAsE;AAEtE,MAAa,uBAAwB,SAAQ,0BAAW;IAAxD;;QACY,eAAU,GAAG,6CAAoB,CAAC,cAAc,CAAC;QACjD,YAAO,GAAG,kBAAkB,CAAC;QAC7B,oBAAe,GAAG,kBAAkB,CAAC;QACrC,WAAM,GAAG,mBAAU,CAAC,SAAS,CAAC;IAC1C,CAAC;CAAA;AALD,0DAKC"}

package/src/gg-auth/exceptions/user-password-blocked.exception.d.ts

@@ -0,0 +1,9 @@
+import { HttpStatus } from '@nestjs/common';
+import { ExceptionDomainCodes } from '../../gg-errors/exception.domain-codes';
+import { GgException } from '../../gg-errors/exceptions/gg.exception';
+export declare class UserPasswordBlockedException extends GgException {
+    protected domainCode: ExceptionDomainCodes;
+    protected message: string;
+    protected internalMessage: string;
+    protected status: HttpStatus;
+}

package/src/gg-auth/exceptions/user-password-blocked.exception.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserPasswordBlockedException = void 0;
+const common_1 = require("@nestjs/common");
+const exception_domain_codes_1 = require("../../gg-errors/exception.domain-codes");
+const gg_exception_1 = require("../../gg-errors/exceptions/gg.exception");
+class UserPasswordBlockedException extends gg_exception_1.GgException {
+    constructor() {
+        super(...arguments);
+        this.domainCode = exception_domain_codes_1.ExceptionDomainCodes.UserPasswordBlocked;
+        this.message = 'User password blocked';
+        this.internalMessage = 'User password blocked';
+        this.status = common_1.HttpStatus.FORBIDDEN;
+    }
+}
+exports.UserPasswordBlockedException = UserPasswordBlockedException;
+//# sourceMappingURL=user-password-blocked.exception.js.map

package/src/gg-auth/exceptions/user-password-blocked.exception.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-password-blocked.exception.js","sourceRoot":"","sources":["../../../../../../libs/gg-core/src/gg-auth/exceptions/user-password-blocked.exception.ts"],"names":[],"mappings":";;;AAAA,2CAA4C;AAC5C,mFAA8E;AAC9E,0EAAsE;AAEtE,MAAa,4BAA6B,SAAQ,0BAAW;IAA7D;;QACY,eAAU,GAAG,6CAAoB,CAAC,mBAAmB,CAAC;QACtD,YAAO,GAAG,uBAAuB,CAAC;QAClC,oBAAe,GAAG,uBAAuB,CAAC;QAC1C,WAAM,GAAG,mBAAU,CAAC,SAAS,CAAC;IAC1C,CAAC;CAAA;AALD,oEAKC"}

package/src/gg-auth/exceptions/user-password-recovery-blocked.exception.d.ts

@@ -0,0 +1,9 @@
+import { HttpStatus } from '@nestjs/common';
+import { ExceptionDomainCodes } from '../../gg-errors/exception.domain-codes';
+import { GgException } from '../../gg-errors/exceptions/gg.exception';
+export declare class UserPasswordRecoveryBlockedException extends GgException {
+    protected domainCode: ExceptionDomainCodes;
+    protected message: string;
+    protected internalMessage: string;
+    protected status: HttpStatus;
+}

package/src/gg-auth/exceptions/user-password-recovery-blocked.exception.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserPasswordRecoveryBlockedException = void 0;
+const common_1 = require("@nestjs/common");
+const exception_domain_codes_1 = require("../../gg-errors/exception.domain-codes");
+const gg_exception_1 = require("../../gg-errors/exceptions/gg.exception");
+class UserPasswordRecoveryBlockedException extends gg_exception_1.GgException {
+    constructor() {
+        super(...arguments);
+        this.domainCode = exception_domain_codes_1.ExceptionDomainCodes.UserPasswordRecoveryBlocked;
+        this.message = 'User password recovery blocked';
+        this.internalMessage = 'User password recovery blocked';
+        this.status = common_1.HttpStatus.FORBIDDEN;
+    }
+}
+exports.UserPasswordRecoveryBlockedException = UserPasswordRecoveryBlockedException;
+//# sourceMappingURL=user-password-recovery-blocked.exception.js.map

package/src/gg-auth/exceptions/user-password-recovery-blocked.exception.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-password-recovery-blocked.exception.js","sourceRoot":"","sources":["../../../../../../libs/gg-core/src/gg-auth/exceptions/user-password-recovery-blocked.exception.ts"],"names":[],"mappings":";;;AAAA,2CAA4C;AAC5C,mFAA8E;AAC9E,0EAAsE;AAEtE,MAAa,oCAAqC,SAAQ,0BAAW;IAArE;;QACY,eAAU,GAAG,6CAAoB,CAAC,2BAA2B,CAAC;QAC9D,YAAO,GAAG,gCAAgC,CAAC;QAC3C,oBAAe,GAAG,gCAAgC,CAAC;QACnD,WAAM,GAAG,mBAAU,CAAC,SAAS,CAAC;IAC1C,CAAC;CAAA;AALD,oFAKC"}

package/src/gg-auth/gg-auth.module-options.d.ts

@@ -0,0 +1,41 @@
+import { FactoryProvider, ModuleMetadata } from '@nestjs/common';
+import { Constructor } from '@nestjs/common/utils/merge-with-values.util';
+import { AuthService } from './services/auth-service.interface';
+export declare const GG_AUTH_MODULE_OPTIONS_TOKEN = "GG_AUTH_MODULE_OPTIONS";
+export declare const GG_AUTH_PROTECTED_TOKEN = "GG_AUTH_PROTECTED_TOKEN";
+export declare const GG_AUTH_ROLES_TOKEN = "GG_AUTH_ROLES_TOKEN";
+export declare const GG_AUTH_ALLOWED_USER_STATUS_TOKEN = "GG_AUTH_ALLOWED_USER_STATUS_TOKEN";
+export declare const GG_AUTH_AUTH_TYPE_TOKEN = "GG_AUTH_AUTH_TYPE_TOKEN";
+export declare const GG_AUTH_AUTH_TYPE_BEARER_TOKEN = "GG_AUTH_AUTH_TYPE_BEARER_TOKEN";
+export declare const GG_AUTH_AUTH_TYPE_MERCHANT_TOKEN = "GG_AUTH_AUTH_TYPE_MERCHANT_TOKEN";
+export declare enum AuthType {
+    Merchant = "merchant",
+    Bearer = "bearer"
+}
+export interface GgAuthOptions {
+    enabled: boolean;
+    /**
+     * Host without http://
+     * not required with authBearerService
+     */
+    ggUsersHost?: string;
+    /**
+     * Host without http://
+     * not required with authBearerService
+     */
+    ggMerchantsHost?: string;
+}
+interface GgAuthCustomServices {
+    /**
+     * Service that implements AuthService
+     * required without ggUsersHost
+     */
+    authBearerService?: Constructor<AuthService>;
+    /**
+     * Service that implements AuthService
+     * required without ggMerchantsHost
+     */
+    authMerchantService?: Constructor<AuthService>;
+}
+export type GgAuthModuleOptions = Pick<ModuleMetadata, 'imports' | 'providers'> & Pick<FactoryProvider<GgAuthOptions>, 'useFactory' | 'inject'> & GgAuthCustomServices;
+export {};

package/src/gg-auth/gg-auth.module-options.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthType = exports.GG_AUTH_AUTH_TYPE_MERCHANT_TOKEN = exports.GG_AUTH_AUTH_TYPE_BEARER_TOKEN = exports.GG_AUTH_AUTH_TYPE_TOKEN = exports.GG_AUTH_ALLOWED_USER_STATUS_TOKEN = exports.GG_AUTH_ROLES_TOKEN = exports.GG_AUTH_PROTECTED_TOKEN = exports.GG_AUTH_MODULE_OPTIONS_TOKEN = void 0;
+exports.GG_AUTH_MODULE_OPTIONS_TOKEN = 'GG_AUTH_MODULE_OPTIONS';
+exports.GG_AUTH_PROTECTED_TOKEN = 'GG_AUTH_PROTECTED_TOKEN';
+exports.GG_AUTH_ROLES_TOKEN = 'GG_AUTH_ROLES_TOKEN';
+exports.GG_AUTH_ALLOWED_USER_STATUS_TOKEN = 'GG_AUTH_ALLOWED_USER_STATUS_TOKEN';
+exports.GG_AUTH_AUTH_TYPE_TOKEN = 'GG_AUTH_AUTH_TYPE_TOKEN';
+exports.GG_AUTH_AUTH_TYPE_BEARER_TOKEN = 'GG_AUTH_AUTH_TYPE_BEARER_TOKEN';
+exports.GG_AUTH_AUTH_TYPE_MERCHANT_TOKEN = 'GG_AUTH_AUTH_TYPE_MERCHANT_TOKEN';
+var AuthType;
+(function (AuthType) {
+    AuthType["Merchant"] = "merchant";
+    AuthType["Bearer"] = "bearer";
+})(AuthType || (exports.AuthType = AuthType = {}));
+//# sourceMappingURL=gg-auth.module-options.js.map

package/src/gg-auth/gg-auth.module-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gg-auth.module-options.js","sourceRoot":"","sources":["../../../../../libs/gg-core/src/gg-auth/gg-auth.module-options.ts"],"names":[],"mappings":";;;AAIa,QAAA,4BAA4B,GAAG,wBAAwB,CAAC;AACxD,QAAA,uBAAuB,GAAG,yBAAyB,CAAC;AACpD,QAAA,mBAAmB,GAAG,qBAAqB,CAAC;AAC5C,QAAA,iCAAiC,GAAG,mCAAmC,CAAC;AACxE,QAAA,uBAAuB,GAAG,yBAAyB,CAAC;AACpD,QAAA,8BAA8B,GAAG,gCAAgC,CAAC;AAClE,QAAA,gCAAgC,GAAG,kCAAkC,CAAC;AAEnF,IAAY,QAGX;AAHD,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,6BAAiB,CAAA;AACnB,CAAC,EAHW,QAAQ,wBAAR,QAAQ,QAGnB"}

package/src/gg-auth/gg-auth.module.d.ts

@@ -0,0 +1,5 @@
+import { DynamicModule } from '@nestjs/common';
+import { GgAuthModuleOptions } from './gg-auth.module-options';
+export declare class GgAuthModule {
+    static forRootAsync(options?: GgAuthModuleOptions): DynamicModule;
+}

package/src/gg-auth/gg-auth.module.js

@@ -0,0 +1,68 @@
+"use strict";
+var GgAuthModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GgAuthModule = void 0;
+const tslib_1 = require("tslib");
+const axios_1 = require("@nestjs/axios");
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const lodash_1 = require("lodash");
+const nestjs_cls_1 = require("nestjs-cls");
+const gg_auth_module_options_1 = require("./gg-auth.module-options");
+const auth_guard_1 = require("./guards/auth.guard");
+const authorized_merchant_1 = require("./injectable-proxy/authorized-merchant");
+const authorized_user_1 = require("./injectable-proxy/authorized-user");
+const gg_bearer_auth_service_1 = require("./services/gg-bearer-auth.service");
+const gg_merchant_auth_service_1 = require("./services/gg-merchant-auth.service");
+const authorizedUserFactory = () => {
+    return nestjs_cls_1.ClsModule.forFeatureAsync({
+        provide: authorized_user_1.AuthorizedUser,
+        imports: [],
+        inject: [],
+        useFactory: () => new authorized_user_1.AuthorizedUser(),
+    });
+};
+const authorizedMerchantFactory = () => {
+    return nestjs_cls_1.ClsModule.forFeatureAsync({
+        provide: authorized_merchant_1.AuthorizedMerchant,
+        imports: [],
+        inject: [],
+        useFactory: () => new authorized_merchant_1.AuthorizedMerchant(),
+    });
+};
+let GgAuthModule = GgAuthModule_1 = class GgAuthModule {
+    static forRootAsync(options) {
+        const bearerProvider = {
+            provide: gg_auth_module_options_1.GG_AUTH_AUTH_TYPE_BEARER_TOKEN,
+            useClass: options?.authBearerService ?? gg_bearer_auth_service_1.GgBearerAuthService,
+        };
+        const merchantProvider = {
+            provide: gg_auth_module_options_1.GG_AUTH_AUTH_TYPE_MERCHANT_TOKEN,
+            useClass: options?.authMerchantService ?? gg_merchant_auth_service_1.GgMerchantAuthService,
+        };
+        const providers = [
+            ...(options?.providers ?? []),
+            { provide: core_1.APP_GUARD, useClass: auth_guard_1.AuthGuard },
+            bearerProvider,
+            merchantProvider,
+            {
+                provide: gg_auth_module_options_1.GG_AUTH_MODULE_OPTIONS_TOKEN,
+                useFactory: options?.useFactory,
+                inject: options?.inject,
+            },
+        ];
+        const exports = [authorizedUserFactory(), authorizedMerchantFactory(), bearerProvider, merchantProvider];
+        return {
+            module: GgAuthModule_1,
+            global: true,
+            imports: (0, lodash_1.merge)(options?.imports ?? [], [axios_1.HttpModule, authorizedUserFactory(), authorizedMerchantFactory()]),
+            providers: !(0, lodash_1.isNil)(options) ? providers : [],
+            exports: !(0, lodash_1.isNil)(options) ? exports : [authorizedUserFactory(), authorizedMerchantFactory()],
+        };
+    }
+};
+exports.GgAuthModule = GgAuthModule;
+exports.GgAuthModule = GgAuthModule = GgAuthModule_1 = tslib_1.__decorate([
+    (0, common_1.Module)({})
+], GgAuthModule);
+//# sourceMappingURL=gg-auth.module.js.map

package/src/gg-auth/gg-auth.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gg-auth.module.js","sourceRoot":"","sources":["../../../../../libs/gg-core/src/gg-auth/gg-auth.module.ts"],"names":[],"mappings":";;;;;AAAA,yCAA2C;AAC3C,2CAAiE;AACjE,uCAAyC;AACzC,mCAAsC;AACtC,2CAAuC;AACvC,qEAKkC;AAClC,oDAAgD;AAChD,gFAA4E;AAC5E,wEAAoE;AACpE,8EAAwE;AACxE,kFAA4E;AAE5E,MAAM,qBAAqB,GAAG,GAAG,EAAE;IACjC,OAAO,sBAAS,CAAC,eAAe,CAAC;QAC/B,OAAO,EAAE,gCAAc;QACvB,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,EAAE;QACV,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,gCAAc,EAAE;KACvC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,GAAG,EAAE;IACrC,OAAO,sBAAS,CAAC,eAAe,CAAC;QAC/B,OAAO,EAAE,wCAAkB;QAC3B,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,EAAE;QACV,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,wCAAkB,EAAE;KAC3C,CAAC,CAAC;AACL,CAAC,CAAC;AAGK,IAAM,YAAY,oBAAlB,MAAM,YAAY;IAChB,MAAM,CAAC,YAAY,CAAC,OAA6B;QACtD,MAAM,cAAc,GAAa;YAC/B,OAAO,EAAE,uDAA8B;YACvC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,IAAI,4CAAmB;SAC5D,CAAC;QAEF,MAAM,gBAAgB,GAAa;YACjC,OAAO,EAAE,yDAAgC;YACzC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,IAAI,gDAAqB;SAChE,CAAC;QAEF,MAAM,SAAS,GAAe;YAC5B,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;YAC7B,EAAE,OAAO,EAAE,gBAAS,EAAE,QAAQ,EAAE,sBAAS,EAAE;YAC3C,cAAc;YACd,gBAAgB;YAChB;gBACE,OAAO,EAAE,qDAA4B;gBACrC,UAAU,EAAE,OAAO,EAAE,UAAU;gBAC/B,MAAM,EAAE,OAAO,EAAE,MAAM;aACxB;SACF,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,qBAAqB,EAAE,EAAE,yBAAyB,EAAE,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAEzG,OAAO;YACL,MAAM,EAAE,cAAY;YACpB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAA,cAAK,EAAC,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC,kBAAU,EAAE,qBAAqB,EAAE,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC1G,SAAS,EAAE,CAAC,IAAA,cAAK,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YAC3C,OAAO,EAAE,CAAC,IAAA,cAAK,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,qBAAqB,EAAE,EAAE,yBAAyB,EAAE,CAAC;SAC5F,CAAC;IACJ,CAAC;CACF,CAAA;AAlCY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,YAAY,CAkCxB"}

package/src/gg-auth/guards/auth.guard.d.ts

@@ -0,0 +1,69 @@
+import { User } from '@zorionapp/gg-toolkit/enum';
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { ClsService } from 'nestjs-cls';
+import { PinoLogger } from 'nestjs-pino';
+import { AuthType } from '../gg-auth.module-options';
+import { AuthorizedMerchant } from '../injectable-proxy/authorized-merchant';
+import { AuthorizedUser } from '../injectable-proxy/authorized-user';
+import { AuthService } from '../services/auth-service.interface';
+type ContextTargets = ReturnType<ExecutionContext['getHandler'] | ExecutionContext['getClass']>[];
+export declare class AuthGuard implements CanActivate {
+    private readonly ggAuthMerchantService;
+    private readonly ggAuthBearerService;
+    private readonly reflector;
+    private readonly user;
+    private readonly merchant;
+    private readonly logger;
+    private readonly cls;
+    private userStatusExceptionMap;
+    constructor(ggAuthMerchantService: AuthService, ggAuthBearerService: AuthService, reflector: Reflector, user: AuthorizedUser, merchant: AuthorizedMerchant, logger: PinoLogger, cls: ClsService);
+    /**
+     * Check if user is authorized to access endpoint
+     *
+     * @param context
+     */
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    /**
+     * Check user status and throw exception if user is blocked
+     */
+    checkUserStatus(allowedUserStatuses?: User.Status[]): boolean;
+    /**
+     * Check merchant allowed IPs and throw exception if it's not allowed
+     */
+    checkMerchantIP(): void;
+    protected handleRpc(context: ExecutionContext): Promise<boolean>;
+    protected handleHttp(context: ExecutionContext): Promise<boolean>;
+    /**
+     * Try to authorize user by auth type
+     *
+     * @param authType
+     * @protected
+     */
+    protected authAttempt(authType: AuthType[]): Promise<void>;
+    /**
+     * Depends on auth type will be used different user query services
+     */
+    protected getAuthType(contextTargets: ContextTargets): AuthType[];
+    /**
+     * Return active roles for currently queried user
+     */
+    protected getRoles(contextTargets: ContextTargets): User.Role[];
+    /**
+     * Return allowed user statuses for currently queried user
+     */
+    protected getAllowedUserStatuses(contextTargets: ContextTargets): User.Status[];
+    /**
+     * Skip authentication if controller hasn't @Protected decorator
+     */
+    protected shouldSkipAuth(contextTargets: ContextTargets): boolean;
+    /**
+     * Check UserDTO for having required fields after auth queries
+     */
+    protected isAuthenticated(): true;
+    /**
+     * Set context in logger to track all user's requests
+     */
+    protected setLoggerContext(): void;
+}
+export {};