arkos 0.1.27-beta.1 → 0.2.0-beta.1

package/dist/cjs/modules/auth/auth.router.js

@@ -1,4 +1,13 @@
 "use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -10,55 +19,54 @@ const express_rate_limit_1 = __importDefault(require("express-rate-limit"));
 const models_helpers_1 = require("../../utils/helpers/models.helpers");
 const base_middlewares_1 = require("../base/base.middlewares");
 const router = (0, express_1.Router)();
-(async function () {
-    const { middlewares } = await (0, models_helpers_1.importPrismaModelModules)("auth");
-    const authController = (0, auth_controller_1.authControllerFactory)(middlewares);
-    router.get("/users/me", auth_service_1.default.authenticate, middlewares?.beforeGetMe ?? authController.getMe, middlewares?.beforeGetMe
-        ? authController.getMe
-        : middlewares?.afterGetMe ?? base_middlewares_1.sendResponse, middlewares?.beforeGetMe && middlewares?.afterGetMe
-        ? middlewares?.afterGetMe
-        : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
-    router.use((0, express_rate_limit_1.default)({
-        windowMs: 5000,
-        limit: 10,
-        standardHeaders: "draft-7",
-        legacyHeaders: false,
-    }));
-    router.post("/auth/login", middlewares?.beforeLogin ?? authController.login, middlewares?.beforeLogin
-        ? authController.login
-        : middlewares?.afterLogin ?? base_middlewares_1.sendResponse, middlewares?.beforeLogin && middlewares?.afterLogin
-        ? middlewares?.afterLogin
-        : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
-    router.delete("/auth/logout", auth_service_1.default.authenticate, middlewares?.beforeLogout ?? authController.logout, middlewares?.beforeLogout
-        ? authController.logout
-        : middlewares?.afterLogout ?? base_middlewares_1.sendResponse, middlewares?.beforeLogout && middlewares?.afterLogout
-        ? middlewares?.afterLogout
-        : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
-    router.post("/auth/signup", middlewares?.beforeSignup ?? authController.signup, middlewares?.beforeSignup
-        ? authController.signup
-        : middlewares?.afterSignup ?? base_middlewares_1.sendResponse, middlewares?.beforeSignup && middlewares?.afterSignup
-        ? middlewares?.afterSignup
-        : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
-    router.post("/auth/verify-email", middlewares?.beforeVerifyEmail ?? authController.verifyEmail, middlewares?.beforeVerifyEmail
-        ? authController.verifyEmail
-        : middlewares?.afterVerifyEmail ?? base_middlewares_1.sendResponse, middlewares?.beforeVerifyEmail && middlewares?.afterVerifyEmail
-        ? middlewares?.afterVerifyEmail
-        : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
-    router.post("/auth/forgot-password", middlewares?.beforeForgotPassword ?? authController.forgotPassword, middlewares?.beforeForgotPassword
-        ? authController.forgotPassword
-        : middlewares?.afterForgotPassword ?? base_middlewares_1.sendResponse, middlewares?.beforeForgotPassword && middlewares?.afterForgotPassword
-        ? middlewares?.afterForgotPassword
-        : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
-    router.post("/auth/reset-password", middlewares?.beforeResetPassword ?? authController.resetPassword, middlewares?.beforeResetPassword
-        ? authController.resetPassword
-        : middlewares?.afterResetPassword ?? base_middlewares_1.sendResponse, middlewares?.beforeResetPassword && middlewares?.afterResetPassword
-        ? middlewares?.afterResetPassword
-        : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
-    router.post("/auth/update-password", auth_service_1.default.authenticate, middlewares?.beforeUpdatePassword ?? authController.updatePassword, middlewares?.beforeUpdatePassword
-        ? authController.updatePassword
-        : middlewares?.afterUpdatePassword ?? base_middlewares_1.sendResponse, middlewares?.beforeUpdatePassword && middlewares?.afterUpdatePassword
-        ? middlewares?.afterUpdatePassword
-        : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
+(function () {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p;
+        const { middlewares } = yield (0, models_helpers_1.importPrismaModelModules)("auth");
+        const authController = yield (0, auth_controller_1.authControllerFactory)(middlewares);
+        router
+            .get("/users/me", auth_service_1.default.authenticate, (_a = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe) !== null && _a !== void 0 ? _a : authController.getMe, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe)
+            ? authController.getMe
+            : (_b = middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe) !== null && _b !== void 0 ? _b : base_middlewares_1.sendResponse, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe) && (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe)
+            ? middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe
+            : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse)
+            .patch("/users/me", auth_service_1.default.authenticate, (_c = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe) !== null && _c !== void 0 ? _c : authController.getMe, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe)
+            ? authController.getMe
+            : (_d = middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe) !== null && _d !== void 0 ? _d : base_middlewares_1.sendResponse, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe) && (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe)
+            ? middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe
+            : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse)
+            .delete("/users/me", auth_service_1.default.authenticate, (_e = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe) !== null && _e !== void 0 ? _e : authController.getMe, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe)
+            ? authController.getMe
+            : (_f = middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe) !== null && _f !== void 0 ? _f : base_middlewares_1.sendResponse, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe) && (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe)
+            ? middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe
+            : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
+        router.use((0, express_rate_limit_1.default)({
+            windowMs: 5000,
+            limit: 10,
+            standardHeaders: "draft-7",
+            legacyHeaders: false,
+        }));
+        router.post("/auth/login", (_g = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeLogin) !== null && _g !== void 0 ? _g : authController.login, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeLogin)
+            ? authController.login
+            : (_h = middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterLogin) !== null && _h !== void 0 ? _h : base_middlewares_1.sendResponse, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeLogin) && (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterLogin)
+            ? middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterLogin
+            : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
+        router.delete("/auth/logout", auth_service_1.default.authenticate, (_j = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeLogout) !== null && _j !== void 0 ? _j : authController.logout, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeLogout)
+            ? authController.logout
+            : (_k = middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterLogout) !== null && _k !== void 0 ? _k : base_middlewares_1.sendResponse, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeLogout) && (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterLogout)
+            ? middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterLogout
+            : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
+        router.post("/auth/signup", (_l = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeSignup) !== null && _l !== void 0 ? _l : authController.signup, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeSignup)
+            ? authController.signup
+            : (_m = middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterSignup) !== null && _m !== void 0 ? _m : base_middlewares_1.sendResponse, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeSignup) && (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterSignup)
+            ? middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterSignup
+            : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
+        router.post("/auth/update-password", auth_service_1.default.authenticate, (_o = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeUpdatePassword) !== null && _o !== void 0 ? _o : authController.updatePassword, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeUpdatePassword)
+            ? authController.updatePassword
+            : (_p = middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterUpdatePassword) !== null && _p !== void 0 ? _p : base_middlewares_1.sendResponse, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeUpdatePassword) && (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterUpdatePassword)
+            ? middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterUpdatePassword
+            : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
+    });
 })();
 exports.default = router;
 //# sourceMappingURL=auth.router.js.map

package/dist/cjs/modules/auth/auth.router.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.router.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.router.ts"],"names":[],"mappings":";;;;;AAAA,qCAAiC;AACjC,uDAA0D;AAC1D,kEAAyC;AACzC,4EAA2C;AAC3C,uEAA8E;AAC9E,+DAAwD;AAExD,MAAM,MAAM,GAAW,IAAA,gBAAM,GAAE,CAAC;AAEhC,CAAC,KAAK;IACJ,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAA,yCAAwB,EAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAG,IAAA,uCAAqB,EAAC,WAAW,CAAC,CAAC;IAE1D,MAAM,CAAC,GAAG,CACR,WAAW,EACX,sBAAW,CAAC,YAAY,EACxB,WAAW,EAAE,WAAW,IAAI,cAAc,CAAC,KAAK,EAChD,WAAW,EAAE,WAAW;QACtB,CAAC,CAAC,cAAc,CAAC,KAAK;QACtB,CAAC,CAAC,WAAW,EAAE,UAAU,IAAI,+BAAY,EAC3C,WAAW,EAAE,WAAW,IAAI,WAAW,EAAE,UAAU;QACjD,CAAC,CAAC,WAAW,EAAE,UAAU;QACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;IAEF,MAAM,CAAC,GAAG,CACR,IAAA,4BAAS,EAAC;QACR,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,EAAE;QACT,eAAe,EAAE,SAAS;QAC1B,aAAa,EAAE,KAAK;KACrB,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,aAAa,EACb,WAAW,EAAE,WAAW,IAAI,cAAc,CAAC,KAAK,EAChD,WAAW,EAAE,WAAW;QACtB,CAAC,CAAC,cAAc,CAAC,KAAK;QACtB,CAAC,CAAC,WAAW,EAAE,UAAU,IAAI,+BAAY,EAC3C,WAAW,EAAE,WAAW,IAAI,WAAW,EAAE,UAAU;QACjD,CAAC,CAAC,WAAW,EAAE,UAAU;QACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;IAEF,MAAM,CAAC,MAAM,CACX,cAAc,EACd,sBAAW,CAAC,YAAY,EACxB,WAAW,EAAE,YAAY,IAAI,cAAc,CAAC,MAAM,EAClD,WAAW,EAAE,YAAY;QACvB,CAAC,CAAC,cAAc,CAAC,MAAM;QACvB,CAAC,CAAC,WAAW,EAAE,WAAW,IAAI,+BAAY,EAC5C,WAAW,EAAE,YAAY,IAAI,WAAW,EAAE,WAAW;QACnD,CAAC,CAAC,WAAW,EAAE,WAAW;QAC1B,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,cAAc,EACd,WAAW,EAAE,YAAY,IAAI,cAAc,CAAC,MAAM,EAClD,WAAW,EAAE,YAAY;QACvB,CAAC,CAAC,cAAc,CAAC,MAAM;QACvB,CAAC,CAAC,WAAW,EAAE,WAAW,IAAI,+BAAY,EAC5C,WAAW,EAAE,YAAY,IAAI,WAAW,EAAE,WAAW;QACnD,CAAC,CAAC,WAAW,EAAE,WAAW;QAC1B,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,WAAW,EAAE,iBAAiB,IAAI,cAAc,CAAC,WAAW,EAC5D,WAAW,EAAE,iBAAiB;QAC5B,CAAC,CAAC,cAAc,CAAC,WAAW;QAC5B,CAAC,CAAC,WAAW,EAAE,gBAAgB,IAAI,+BAAY,EACjD,WAAW,EAAE,iBAAiB,IAAI,WAAW,EAAE,gBAAgB;QAC7D,CAAC,CAAC,WAAW,EAAE,gBAAgB;QAC/B,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,WAAW,EAAE,oBAAoB,IAAI,cAAc,CAAC,cAAc,EAClE,WAAW,EAAE,oBAAoB;QAC/B,CAAC,CAAC,cAAc,CAAC,cAAc;QAC/B,CAAC,CAAC,WAAW,EAAE,mBAAmB,IAAI,+BAAY,EACpD,WAAW,EAAE,oBAAoB,IAAI,WAAW,EAAE,mBAAmB;QACnE,CAAC,CAAC,WAAW,EAAE,mBAAmB;QAClC,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,WAAW,EAAE,mBAAmB,IAAI,cAAc,CAAC,aAAa,EAChE,WAAW,EAAE,mBAAmB;QAC9B,CAAC,CAAC,cAAc,CAAC,aAAa;QAC9B,CAAC,CAAC,WAAW,EAAE,kBAAkB,IAAI,+BAAY,EACnD,WAAW,EAAE,mBAAmB,IAAI,WAAW,EAAE,kBAAkB;QACjE,CAAC,CAAC,WAAW,EAAE,kBAAkB;QACjC,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,sBAAW,CAAC,YAAY,EACxB,WAAW,EAAE,oBAAoB,IAAI,cAAc,CAAC,cAAc,EAClE,WAAW,EAAE,oBAAoB;QAC/B,CAAC,CAAC,cAAc,CAAC,cAAc;QAC/B,CAAC,CAAC,WAAW,EAAE,mBAAmB,IAAI,+BAAY,EACpD,WAAW,EAAE,oBAAoB,IAAI,WAAW,EAAE,mBAAmB;QACnE,CAAC,CAAC,WAAW,EAAE,mBAAmB;QAClC,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;AACJ,CAAC,CAAC,EAAE,CAAC;AAEL,kBAAe,MAAM,CAAC","sourcesContent":["import { Router } from \"express\";\r\nimport { authControllerFactory } from \"./auth.controller\";\r\nimport authService from \"./auth.service\";\r\nimport rateLimit from \"express-rate-limit\";\r\nimport { importPrismaModelModules } from \"../../utils/helpers/models.helpers\";\r\nimport { sendResponse } from \"../base/base.middlewares\";\r\n\r\nconst router: Router = Router();\r\n\r\n(async function () {\r\n  const { middlewares } = await importPrismaModelModules(\"auth\");\r\n  const authController = authControllerFactory(middlewares);\r\n\r\n  router.get(\r\n    \"/users/me\",\r\n    authService.authenticate,\r\n    middlewares?.beforeGetMe ?? authController.getMe,\r\n    middlewares?.beforeGetMe\r\n      ? authController.getMe\r\n      : middlewares?.afterGetMe ?? sendResponse,\r\n    middlewares?.beforeGetMe && middlewares?.afterGetMe\r\n      ? middlewares?.afterGetMe\r\n      : sendResponse,\r\n    sendResponse\r\n  );\r\n\r\n  router.use(\r\n    rateLimit({\r\n      windowMs: 5000,\r\n      limit: 10,\r\n      standardHeaders: \"draft-7\",\r\n      legacyHeaders: false,\r\n    })\r\n  );\r\n\r\n  router.post(\r\n    \"/auth/login\",\r\n    middlewares?.beforeLogin ?? authController.login,\r\n    middlewares?.beforeLogin\r\n      ? authController.login\r\n      : middlewares?.afterLogin ?? sendResponse,\r\n    middlewares?.beforeLogin && middlewares?.afterLogin\r\n      ? middlewares?.afterLogin\r\n      : sendResponse,\r\n    sendResponse\r\n  );\r\n\r\n  router.delete(\r\n    \"/auth/logout\",\r\n    authService.authenticate,\r\n    middlewares?.beforeLogout ?? authController.logout,\r\n    middlewares?.beforeLogout\r\n      ? authController.logout\r\n      : middlewares?.afterLogout ?? sendResponse,\r\n    middlewares?.beforeLogout && middlewares?.afterLogout\r\n      ? middlewares?.afterLogout\r\n      : sendResponse,\r\n    sendResponse\r\n  );\r\n\r\n  router.post(\r\n    \"/auth/signup\",\r\n    middlewares?.beforeSignup ?? authController.signup,\r\n    middlewares?.beforeSignup\r\n      ? authController.signup\r\n      : middlewares?.afterSignup ?? sendResponse,\r\n    middlewares?.beforeSignup && middlewares?.afterSignup\r\n      ? middlewares?.afterSignup\r\n      : sendResponse,\r\n    sendResponse\r\n  );\r\n\r\n  router.post(\r\n    \"/auth/verify-email\",\r\n    middlewares?.beforeVerifyEmail ?? authController.verifyEmail,\r\n    middlewares?.beforeVerifyEmail\r\n      ? authController.verifyEmail\r\n      : middlewares?.afterVerifyEmail ?? sendResponse,\r\n    middlewares?.beforeVerifyEmail && middlewares?.afterVerifyEmail\r\n      ? middlewares?.afterVerifyEmail\r\n      : sendResponse,\r\n    sendResponse\r\n  );\r\n\r\n  router.post(\r\n    \"/auth/forgot-password\",\r\n    middlewares?.beforeForgotPassword ?? authController.forgotPassword,\r\n    middlewares?.beforeForgotPassword\r\n      ? authController.forgotPassword\r\n      : middlewares?.afterForgotPassword ?? sendResponse,\r\n    middlewares?.beforeForgotPassword && middlewares?.afterForgotPassword\r\n      ? middlewares?.afterForgotPassword\r\n      : sendResponse,\r\n    sendResponse\r\n  );\r\n\r\n  router.post(\r\n    \"/auth/reset-password\",\r\n    middlewares?.beforeResetPassword ?? authController.resetPassword,\r\n    middlewares?.beforeResetPassword\r\n      ? authController.resetPassword\r\n      : middlewares?.afterResetPassword ?? sendResponse,\r\n    middlewares?.beforeResetPassword && middlewares?.afterResetPassword\r\n      ? middlewares?.afterResetPassword\r\n      : sendResponse,\r\n    sendResponse\r\n  );\r\n\r\n  router.post(\r\n    \"/auth/update-password\",\r\n    authService.authenticate,\r\n    middlewares?.beforeUpdatePassword ?? authController.updatePassword,\r\n    middlewares?.beforeUpdatePassword\r\n      ? authController.updatePassword\r\n      : middlewares?.afterUpdatePassword ?? sendResponse,\r\n    middlewares?.beforeUpdatePassword && middlewares?.afterUpdatePassword\r\n      ? middlewares?.afterUpdatePassword\r\n      : sendResponse,\r\n    sendResponse\r\n  );\r\n})();\r\n\r\nexport default router;\r\n"]}
+{"version":3,"file":"auth.router.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.router.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,qCAAiC;AACjC,uDAA0D;AAC1D,kEAAyC;AACzC,4EAA2C;AAC3C,uEAA8E;AAC9E,+DAAwD;AAExD,MAAM,MAAM,GAAW,IAAA,gBAAM,GAAE,CAAC;AAEhC,CAAC;;;QACC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAA,yCAAwB,EAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,MAAM,IAAA,uCAAqB,EAAC,WAAW,CAAC,CAAC;QAEhE,MAAM;aACH,GAAG,CACF,WAAW,EACX,sBAAW,CAAC,YAAY,EACxB,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,cAAc,CAAC,KAAK,EAChD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YACtB,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,mCAAI,+BAAY,EAC3C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,CAAA;YACjD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU;YACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb;aACA,KAAK,CACJ,WAAW,EACX,sBAAW,CAAC,YAAY,EACxB,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,cAAc,CAAC,KAAK,EAChD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YACtB,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,mCAAI,+BAAY,EAC3C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,CAAA;YACjD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU;YACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb;aACA,MAAM,CACL,WAAW,EACX,sBAAW,CAAC,YAAY,EACxB,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,cAAc,CAAC,KAAK,EAChD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YACtB,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,mCAAI,+BAAY,EAC3C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,CAAA;YACjD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU;YACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEJ,MAAM,CAAC,GAAG,CACR,IAAA,4BAAS,EAAC;YACR,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;YACT,eAAe,EAAE,SAAS;YAC1B,aAAa,EAAE,KAAK;SACrB,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,aAAa,EACb,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,cAAc,CAAC,KAAK,EAChD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YACtB,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,mCAAI,+BAAY,EAC3C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,CAAA;YACjD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU;YACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEF,MAAM,CAAC,MAAM,CACX,cAAc,EACd,sBAAW,CAAC,YAAY,EACxB,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY,mCAAI,cAAc,CAAC,MAAM,EAClD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY;YACvB,CAAC,CAAC,cAAc,CAAC,MAAM;YACvB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,+BAAY,EAC5C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,CAAA;YACnD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YAC1B,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,cAAc,EACd,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY,mCAAI,cAAc,CAAC,MAAM,EAClD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY;YACvB,CAAC,CAAC,cAAc,CAAC,MAAM;YACvB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,+BAAY,EAC5C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,CAAA;YACnD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YAC1B,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,sBAAW,CAAC,YAAY,EACxB,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,oBAAoB,mCAAI,cAAc,CAAC,cAAc,EAClE,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,oBAAoB;YAC/B,CAAC,CAAC,cAAc,CAAC,cAAc;YAC/B,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,mBAAmB,mCAAI,+BAAY,EACpD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,oBAAoB,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,mBAAmB,CAAA;YACnE,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,mBAAmB;YAClC,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;IACJ,CAAC;CAAA,CAAC,EAAE,CAAC;AAEL,kBAAe,MAAM,CAAC","sourcesContent":["import { Router } from \"express\";\nimport { authControllerFactory } from \"./auth.controller\";\nimport authService from \"./auth.service\";\nimport rateLimit from \"express-rate-limit\";\nimport { importPrismaModelModules } from \"../../utils/helpers/models.helpers\";\nimport { sendResponse } from \"../base/base.middlewares\";\n\nconst router: Router = Router();\n\n(async function () {\n  const { middlewares } = await importPrismaModelModules(\"auth\");\n  const authController = await authControllerFactory(middlewares);\n\n  router\n    .get(\n      \"/users/me\",\n      authService.authenticate,\n      middlewares?.beforeGetMe ?? authController.getMe,\n      middlewares?.beforeGetMe\n        ? authController.getMe\n        : middlewares?.afterGetMe ?? sendResponse,\n      middlewares?.beforeGetMe && middlewares?.afterGetMe\n        ? middlewares?.afterGetMe\n        : sendResponse,\n      sendResponse\n    )\n    .patch(\n      \"/users/me\",\n      authService.authenticate,\n      middlewares?.beforeGetMe ?? authController.getMe,\n      middlewares?.beforeGetMe\n        ? authController.getMe\n        : middlewares?.afterGetMe ?? sendResponse,\n      middlewares?.beforeGetMe && middlewares?.afterGetMe\n        ? middlewares?.afterGetMe\n        : sendResponse,\n      sendResponse\n    )\n    .delete(\n      \"/users/me\",\n      authService.authenticate,\n      middlewares?.beforeGetMe ?? authController.getMe,\n      middlewares?.beforeGetMe\n        ? authController.getMe\n        : middlewares?.afterGetMe ?? sendResponse,\n      middlewares?.beforeGetMe && middlewares?.afterGetMe\n        ? middlewares?.afterGetMe\n        : sendResponse,\n      sendResponse\n    );\n\n  router.use(\n    rateLimit({\n      windowMs: 5000,\n      limit: 10,\n      standardHeaders: \"draft-7\",\n      legacyHeaders: false,\n    })\n  );\n\n  router.post(\n    \"/auth/login\",\n    middlewares?.beforeLogin ?? authController.login,\n    middlewares?.beforeLogin\n      ? authController.login\n      : middlewares?.afterLogin ?? sendResponse,\n    middlewares?.beforeLogin && middlewares?.afterLogin\n      ? middlewares?.afterLogin\n      : sendResponse,\n    sendResponse\n  );\n\n  router.delete(\n    \"/auth/logout\",\n    authService.authenticate,\n    middlewares?.beforeLogout ?? authController.logout,\n    middlewares?.beforeLogout\n      ? authController.logout\n      : middlewares?.afterLogout ?? sendResponse,\n    middlewares?.beforeLogout && middlewares?.afterLogout\n      ? middlewares?.afterLogout\n      : sendResponse,\n    sendResponse\n  );\n\n  router.post(\n    \"/auth/signup\",\n    middlewares?.beforeSignup ?? authController.signup,\n    middlewares?.beforeSignup\n      ? authController.signup\n      : middlewares?.afterSignup ?? sendResponse,\n    middlewares?.beforeSignup && middlewares?.afterSignup\n      ? middlewares?.afterSignup\n      : sendResponse,\n    sendResponse\n  );\n\n  router.post(\n    \"/auth/update-password\",\n    authService.authenticate,\n    middlewares?.beforeUpdatePassword ?? authController.updatePassword,\n    middlewares?.beforeUpdatePassword\n      ? authController.updatePassword\n      : middlewares?.afterUpdatePassword ?? sendResponse,\n    middlewares?.beforeUpdatePassword && middlewares?.afterUpdatePassword\n      ? middlewares?.afterUpdatePassword\n      : sendResponse,\n    sendResponse\n  );\n})();\n\nexport default router;\n"]}

package/dist/cjs/modules/auth/auth.service.js

@@ -1,4 +1,13 @@
 "use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -8,18 +17,18 @@ const bcryptjs_1 = __importDefault(require("bcryptjs"));
 const catch_async_1 = __importDefault(require("../error-handler/utils/catch-async"));
 const app_error_1 = __importDefault(require("../error-handler/utils/app-error"));
 const base_middlewares_1 = require("../base/base.middlewares");
-const app_1 = require("../../app");
 const server_1 = require("../../server");
 const arkos_env_1 = __importDefault(require("../../utils/arkos-env"));
+const prisma_helpers_1 = require("../../utils/helpers/prisma.helpers");
 class AuthService {
     constructor() {
-        this.authenticate = (0, catch_async_1.default)(async (req, res, next) => {
+        this.authenticate = (0, catch_async_1.default)((req, res, next) => __awaiter(this, void 0, void 0, function* () {
             const initConfigs = (0, server_1.getInitConfigs)();
-            if (initConfigs?.authentication === false)
+            if ((initConfigs === null || initConfigs === void 0 ? void 0 : initConfigs.authentication) === false)
                 return next();
-            req.user = (await this.getAuthenticatedUser(req));
+            req.user = (yield this.getAuthenticatedUser(req));
             next();
-        });
+        }));
     }
     signJwtToken(id, expiresIn = process.env.JWT_EXPIRES_IN ||
         arkos_env_1.default.JWT_EXPIRES_IN, secret = process.env.JWT_SECRET || arkos_env_1.default.JWT_SECRET) {
@@ -27,17 +36,21 @@ class AuthService {
             expiresIn: expiresIn,
         });
     }
-    async isCorrectPassword(candidatePassword, userPassword) {
-        return await bcryptjs_1.default.compare(candidatePassword, userPassword);
+    isCorrectPassword(candidatePassword, userPassword) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield bcryptjs_1.default.compare(candidatePassword, userPassword);
+        });
     }
-    async hashPassword(password) {
-        return await bcryptjs_1.default.hash(password, 12);
+    hashPassword(password) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield bcryptjs_1.default.hash(password, 12);
+        });
     }
     isPasswordStrong(password) {
-        const hasUppercase = /[A-Z]/.test(password);
-        const hasLowercase = /[a-z]/.test(password);
-        const hasNumber = /\d/.test(password);
-        return hasUppercase && hasLowercase && hasNumber;
+        var _a;
+        const initAuthConfigs = (_a = (0, server_1.getInitConfigs)()) === null || _a === void 0 ? void 0 : _a.authentication;
+        const strongPasswordRegex = initAuthConfigs.passwordRegex || /^(?=.*[A-Z])(?=.*[a-z])(?=.*\d).+$/;
+        return strongPasswordRegex.test(password);
     }
     userChangedPasswordAfter(user, JWTTimestamp) {
         if (user.passwordChangedAt) {
@@ -46,24 +59,33 @@ class AuthService {
         }
         return false;
     }
-    async verifyJwtToken(token, secret = process.env.JWT_SECRET) {
-        return new Promise((resolve, reject) => {
-            jsonwebtoken_1.default.verify(token, secret, (err, decoded) => {
-                if (err)
-                    reject(err);
-                else
-                    resolve(decoded);
+    verifyJwtToken(token_1) {
+        return __awaiter(this, arguments, void 0, function* (token, secret = process.env.JWT_SECRET || arkos_env_1.default.JWT_SECRET) {
+            return new Promise((resolve, reject) => {
+                jsonwebtoken_1.default.verify(token, secret, (err, decoded) => {
+                    if (err)
+                        reject(err);
+                    else
+                        resolve(decoded);
+                });
             });
         });
     }
     handleActionAccessControl(authConfigs, action, modelName) {
-        return (0, catch_async_1.default)(async (req, res, next) => {
+        return (0, catch_async_1.default)((req, res, next) => __awaiter(this, void 0, void 0, function* () {
             if (req.user) {
                 const user = req.user;
-                const permissions = await app_1.prisma.authPermission.count({
+                const prisma = (0, prisma_helpers_1.getPrismaInstance)();
+                const permissions = yield prisma.authPermission.count({
                     where: {
-                        resource: modelName,
-                        action,
+                        resource: {
+                            equals: modelName,
+                            mode: "insensitive",
+                        },
+                        action: {
+                            equals: action,
+                            mode: "insensitive",
+                        },
                         roleId: { in: user.roles.map((role) => role.roleId) },
                     },
                 });
@@ -72,50 +94,58 @@ class AuthService {
                 }
             }
             next();
-        });
+        }));
     }
-    async getAuthenticatedUser(req) {
-        const initConfigs = (0, server_1.getInitConfigs)();
-        if (initConfigs?.authentication === false)
-            return null;
-        let token;
-        if (req?.headers?.authorization &&
-            req?.headers?.authorization.startsWith("Bearer")) {
-            token = req?.headers?.authorization.split(" ")[1];
-        }
-        else if (req?.cookies?.arkos_access_token !== "no-token" && req.cookies) {
-            token = req?.cookies?.arkos_access_token;
-        }
-        if (!token)
-            throw new app_error_1.default("You are not logged in! please log in to get access", 401);
-        let decoded;
-        try {
-            decoded = await this.verifyJwtToken(token);
-        }
-        catch (err) {
-            throw new app_error_1.default("Your auth token is invalid, please login again.", 401);
-        }
-        if (!decoded?.id)
-            throw new app_error_1.default("Your auth token is invalid, please login again.", 401);
-        const user = await app_1.prisma.user.findUnique({
-            where: { id: String(decoded.id) },
-            include: {
-                roles: true,
-            },
-        });
-        if (!user)
-            throw new app_error_1.default("The user belonging to this token does no longer exists", 401);
-        if (this.userChangedPasswordAfter(user, decoded.iat) &&
-            !req.path.includes("logout"))
-            throw new app_error_1.default("User recently changed password! Please log in again.", 401);
-        if (!user.isVerified && !req.path.includes("logout"))
-            throw new app_error_1.default("You must verifiy your email in order to proceed!", 423, {
-                error: "email_verification_required",
+    getAuthenticatedUser(req) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e;
+            const initConfigs = (0, server_1.getInitConfigs)();
+            if ((initConfigs === null || initConfigs === void 0 ? void 0 : initConfigs.authentication) === false)
+                return null;
+            const prisma = (0, prisma_helpers_1.getPrismaInstance)();
+            let token;
+            if (((_a = req === null || req === void 0 ? void 0 : req.headers) === null || _a === void 0 ? void 0 : _a.authorization) &&
+                ((_b = req === null || req === void 0 ? void 0 : req.headers) === null || _b === void 0 ? void 0 : _b.authorization.startsWith("Bearer"))) {
+                token = (_c = req === null || req === void 0 ? void 0 : req.headers) === null || _c === void 0 ? void 0 : _c.authorization.split(" ")[1];
+            }
+            else if (((_d = req === null || req === void 0 ? void 0 : req.cookies) === null || _d === void 0 ? void 0 : _d.arkos_access_token) !== "no-token" && req.cookies) {
+                token = (_e = req === null || req === void 0 ? void 0 : req.cookies) === null || _e === void 0 ? void 0 : _e.arkos_access_token;
+            }
+            if (!token)
+                throw new app_error_1.default("You are not logged in! please log in to get access", 401);
+            let decoded;
+            try {
+                decoded = yield this.verifyJwtToken(token);
+            }
+            catch (err) {
+                throw new app_error_1.default("Your auth token is invalid, please login again.", 401);
+            }
+            if (!(decoded === null || decoded === void 0 ? void 0 : decoded.id))
+                throw new app_error_1.default("Your auth token is invalid, please login again.", 401);
+            const user = yield prisma.user.findUnique({
+                where: { id: String(decoded.id) },
+                include: {
+                    roles: {
+                        include: {
+                            role: {
+                                include: {
+                                    permissions: true,
+                                },
+                            },
+                        },
+                    },
+                },
             });
-        return user;
+            if (!user)
+                throw new app_error_1.default("The user belonging to this token does no longer exists", 401);
+            if (this.userChangedPasswordAfter(user, decoded.iat) &&
+                !req.path.includes("logout"))
+                throw new app_error_1.default("User recently changed password! Please log in again.", 401);
+            return user;
+        });
     }
     handleAuthenticationControl(authConfigs, action, modelName) {
-        const authenticationControl = authConfigs?.authenticationControl;
+        const authenticationControl = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.authenticationControl;
         if (authenticationControl && typeof authenticationControl === "object") {
             if (authenticationControl[action] === false)
                 return base_middlewares_1.callNext;

package/dist/cjs/modules/auth/auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.service.ts"],"names":[],"mappings":";;;;;AAAA,gEAA+B;AAC/B,wDAA8B;AAQ9B,qFAA4D;AAE5D,iFAAwD;AACxD,+DAAoD;AACpD,mCAAmC;AACnC,yCAA8C;AAC9C,sEAA6C;AAK7C,MAAM,WAAW;IAAjB;QA+NE,iBAAY,GAAG,IAAA,qBAAU,EACvB,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACxD,MAAM,WAAW,GAAG,IAAA,uBAAc,GAAE,CAAC;YACrC,IAAI,WAAW,EAAE,cAAc,KAAK,KAAK;gBAAE,OAAO,IAAI,EAAE,CAAC;YAEzD,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAS,CAAC;YAC1D,IAAI,EAAE,CAAC;QACT,CAAC,CACF,CAAC;IAwBJ,CAAC;IAtPC,YAAY,CACV,EAAmB,EACnB,YAA6B,OAAO,CAAC,GAAG,CAAC,cAAc;QACrD,mBAAQ,CAAC,cAAc,EACzB,SAAiB,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,mBAAQ,CAAC,UAAU;QAE9D,OAAO,sBAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YAC9B,SAAS,EAAE,SAAgB;SAC5B,CAAC,CAAC;IACL,CAAC;IASD,KAAK,CAAC,iBAAiB,CACrB,iBAAyB,EACzB,YAAoB;QAEpB,OAAO,MAAM,kBAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAC/D,CAAC;IAQD,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,OAAO,MAAM,kBAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAQD,gBAAgB,CAAC,QAAgB;QAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEtC,OAAO,YAAY,IAAI,YAAY,IAAI,SAAS,CAAC;IACnD,CAAC;IASD,wBAAwB,CAAC,IAAU,EAAE,YAAoB;QACvD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,kBAAkB,GAAG,QAAQ,CACjC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAC/C,EAAE,CACH,CAAC;YAEF,OAAO,YAAY,GAAG,kBAAkB,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAUD,KAAK,CAAC,cAAc,CAClB,KAAa,EACb,SAAiB,OAAO,CAAC,GAAG,CAAC,UAAW;QAExC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBACzC,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,OAAyB,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAUD,yBAAyB,CACvB,WAAwB,EACxB,MAAyB,EACzB,SAAiB;QAEjB,OAAO,IAAA,qBAAU,EACf,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACxD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,GAAG,CAAC,IAAW,CAAC;gBAE7B,MAAM,WAAW,GAAG,MAAO,YAAc,CAAC,cAAc,CAAC,KAAK,CAAC;oBAC7D,KAAK,EAAE;wBACL,QAAQ,EAAE,SAAS;wBACnB,MAAM;wBACN,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;qBAChE;iBACF,CAAC,CAAC;gBAEH,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,OAAO,IAAI,CACT,IAAI,mBAAQ,CACV,kDAAkD,EAClD,GAAG,CACJ,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC,CACF,CAAC;IACJ,CAAC;IAQD,KAAK,CAAC,oBAAoB,CAAC,GAAY;QACrC,MAAM,WAAW,GAAG,IAAA,uBAAc,GAAE,CAAC;QACrC,IAAI,WAAW,EAAE,cAAc,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAEvD,IAAI,KAAyB,CAAC;QAE9B,IACE,GAAG,EAAE,OAAO,EAAE,aAAa;YAC3B,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,EAChD,CAAC;YACD,KAAK,GAAG,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,GAAG,EAAE,OAAO,EAAE,kBAAkB,KAAK,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC1E,KAAK,GAAG,GAAG,EAAE,OAAO,EAAE,kBAAkB,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC,KAAK;YACR,MAAM,IAAI,mBAAQ,CAChB,oDAAoD,EACpD,GAAG,CACJ,CAAC;QAEJ,IAAI,OAAmC,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,mBAAQ,CAChB,iDAAiD,EACjD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,EAAE;YACd,MAAM,IAAI,mBAAQ,CAChB,iDAAiD,EACjD,GAAG,CACJ,CAAC;QAEJ,MAAM,IAAI,GAAe,MAAO,YAAc,CAAC,IAAI,CAAC,UAAU,CAAC;YAC7D,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;YACjC,OAAO,EAAE;gBACP,KAAK,EAAE,IAAI;aACZ;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,mBAAQ,CAChB,wDAAwD,EACxD,GAAG,CACJ,CAAC;QAEJ,IACE,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAI,CAAC;YACjD,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAE5B,MAAM,IAAI,mBAAQ,CAChB,sDAAsD,EACtD,GAAG,CACJ,CAAC;QAEJ,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAClD,MAAM,IAAI,mBAAQ,CAChB,kDAAkD,EAClD,GAAG,EACH;gBACE,KAAK,EAAE,6BAA6B;aACrC,CACF,CAAC;QAEJ,OAAO,IAAI,CAAC;IACd,CAAC;IA4BD,2BAA2B,CACzB,WAAoC,EACpC,MAAyB,EACzB,SAAiB;QAEjB,MAAM,qBAAqB,GAAG,WAAW,EAAE,qBAAqB,CAAC;QAEjE,IAAI,qBAAqB,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;YACvE,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,KAAK;gBAAE,OAAO,2BAAQ,CAAC;iBACxD,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAC5E,CAAC;;YAAM,OAAO,IAAI,CAAC,YAAY,CAAC;QAEhC,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CACF;AAKD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,kBAAe,WAAW,CAAC","sourcesContent":["import jwt from \"jsonwebtoken\";\r\nimport bcrypt from \"bcryptjs\";\r\nimport {\r\n  AuthConfigs,\r\n  AuthJwtPayload,\r\n  ControllerActions,\r\n  User,\r\n  UserRole,\r\n} from \"../../types\";\r\nimport catchAsync from \"../error-handler/utils/catch-async\";\r\nimport { NextFunction, Request, RequestHandler, Response } from \"express\";\r\nimport AppError from \"../error-handler/utils/app-error\";\r\nimport { callNext } from \"../base/base.middlewares\";\r\nimport { prisma } from \"../../app\";\r\nimport { getInitConfigs } from \"../../server\";\r\nimport arkosEnv from \"../../utils/arkos-env\";\r\n\r\n/**\r\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\r\n */\r\nclass AuthService {\r\n  /**\r\n   * Signs a JWT token for the user.\r\n   *\r\n   * @param {number | string} id - The unique identifier of the user to generate the token for.\r\n   * @param {string | number} [expiresIn] - The expiration time for the token. Defaults to environment variable `JWT_EXPIRES_IN`.\r\n   * @param {string} [secret] - The secret key used to sign the token. Defaults to environment variable `JWT_SECRET`.\r\n   * @returns {string} The signed JWT token.\r\n   */\r\n  signJwtToken(\r\n    id: number | string,\r\n    expiresIn: string | number = process.env.JWT_EXPIRES_IN ||\r\n      arkosEnv.JWT_EXPIRES_IN,\r\n    secret: string = process.env.JWT_SECRET || arkosEnv.JWT_SECRET\r\n  ): string {\r\n    return jwt.sign({ id }, secret, {\r\n      expiresIn: expiresIn as any,\r\n    });\r\n  }\r\n\r\n  /**\r\n   * Compares a candidate password with the stored user password to check if they match.\r\n   *\r\n   * @param {string} candidatePassword - The password provided by the user during login.\r\n   * @param {string} userPassword - The password stored in the database.\r\n   * @returns {Promise<boolean>} Returns true if the passwords match, otherwise false.\r\n   */\r\n  async isCorrectPassword(\r\n    candidatePassword: string,\r\n    userPassword: string\r\n  ): Promise<boolean> {\r\n    return await bcrypt.compare(candidatePassword, userPassword);\r\n  }\r\n\r\n  /**\r\n   * Hashes a plain text password using bcrypt.\r\n   *\r\n   * @param {string} password - The password to be hashed.\r\n   * @returns {Promise<string>} Returns the hashed password.\r\n   */\r\n  async hashPassword(password: string): Promise<string> {\r\n    return await bcrypt.hash(password, 12);\r\n  }\r\n\r\n  /**\r\n   * Checks if a password is strong, requiring uppercase, lowercase, and numeric characters.\r\n   *\r\n   * @param {string} password - The password to check.\r\n   * @returns {boolean} Returns true if the password meets the strength criteria, otherwise false.\r\n   */\r\n  isPasswordStrong(password: string): boolean {\r\n    const hasUppercase = /[A-Z]/.test(password);\r\n    const hasLowercase = /[a-z]/.test(password);\r\n    const hasNumber = /\\d/.test(password);\r\n\r\n    return hasUppercase && hasLowercase && hasNumber;\r\n  }\r\n\r\n  /**\r\n   * Checks if a user has changed their password after the JWT was issued.\r\n   *\r\n   * @param {User} user - The user object containing the passwordChangedAt field.\r\n   * @param {number} JWTTimestamp - The timestamp when the JWT was issued.\r\n   * @returns {boolean} Returns true if the user changed their password after the JWT was issued, otherwise false.\r\n   */\r\n  userChangedPasswordAfter(user: User, JWTTimestamp: number): boolean {\r\n    if (user.passwordChangedAt) {\r\n      const convertedTimestamp = parseInt(\r\n        String(user.passwordChangedAt.getTime() / 1000),\r\n        10\r\n      );\r\n\r\n      return JWTTimestamp < convertedTimestamp;\r\n    }\r\n    return false;\r\n  }\r\n\r\n  /**\r\n   * Verifies the authenticity of a JWT token.\r\n   *\r\n   * @param {string} token - The JWT token to verify.\r\n   * @param {string} [secret] - The secret key used to verify the token. Defaults to environment variable `JWT_SECRET`.\r\n   * @returns {Promise<AuthJwtPayload>} Returns the decoded JWT payload if the token is valid.\r\n   * @throws {Error} Throws an error if the token is invalid or expired.\r\n   */\r\n  async verifyJwtToken(\r\n    token: string,\r\n    secret: string = process.env.JWT_SECRET!\r\n  ): Promise<AuthJwtPayload> {\r\n    return new Promise((resolve, reject) => {\r\n      jwt.verify(token, secret, (err, decoded) => {\r\n        if (err) reject(err);\r\n        else resolve(decoded as AuthJwtPayload);\r\n      });\r\n    });\r\n  }\r\n\r\n  /**\r\n   * Middleware function to handle access control based on user roles and permissions.\r\n   *\r\n   * @param {AuthConfigs} authConfigs - The configuration object for authentication and access control.\r\n   * @param {ControllerActions} action - The action being performed (e.g., create, update, delete, view).\r\n   * @param {string} modelName - The model name that the action is being performed on (e.g., \"User\", \"Post\").\r\n   * @returns {RequestHandler} The middleware function that checks if the user has permission to perform the action.\r\n   */\r\n  handleActionAccessControl(\r\n    authConfigs: AuthConfigs,\r\n    action: ControllerActions,\r\n    modelName: string\r\n  ): RequestHandler {\r\n    return catchAsync(\r\n      async (req: Request, res: Response, next: NextFunction) => {\r\n        if (req.user) {\r\n          const user = req.user as any;\r\n\r\n          const permissions = await (prisma as any).authPermission.count({\r\n            where: {\r\n              resource: modelName,\r\n              action,\r\n              roleId: { in: user.roles.map((role: UserRole) => role.roleId) },\r\n            },\r\n          });\r\n\r\n          if (!permissions) {\r\n            return next(\r\n              new AppError(\r\n                \"You do not have permission to perfom this action\",\r\n                403\r\n              )\r\n            );\r\n          }\r\n        }\r\n\r\n        next();\r\n      }\r\n    );\r\n  }\r\n\r\n  /**\r\n   * Processes the cookies or authoriation token and returns the user.\r\n   * @param req\r\n   * @returns {Promise<User | null>} - if authentication is turned off in initConfigs it returns null\r\n   * @throws {AppError} Throws an error if the token is invalid or the user is not logged in.\r\n   */\r\n  async getAuthenticatedUser(req: Request): Promise<User | null> {\r\n    const initConfigs = getInitConfigs();\r\n    if (initConfigs?.authentication === false) return null;\r\n\r\n    let token: string | undefined;\r\n\r\n    if (\r\n      req?.headers?.authorization &&\r\n      req?.headers?.authorization.startsWith(\"Bearer\")\r\n    ) {\r\n      token = req?.headers?.authorization.split(\" \")[1];\r\n    } else if (req?.cookies?.arkos_access_token !== \"no-token\" && req.cookies) {\r\n      token = req?.cookies?.arkos_access_token;\r\n    }\r\n\r\n    if (!token)\r\n      throw new AppError(\r\n        \"You are not logged in! please log in to get access\",\r\n        401\r\n      );\r\n\r\n    let decoded: AuthJwtPayload | undefined;\r\n    try {\r\n      decoded = await this.verifyJwtToken(token);\r\n    } catch (err) {\r\n      throw new AppError(\r\n        \"Your auth token is invalid, please login again.\",\r\n        401\r\n      );\r\n    }\r\n\r\n    if (!decoded?.id)\r\n      throw new AppError(\r\n        \"Your auth token is invalid, please login again.\",\r\n        401\r\n      );\r\n\r\n    const user: any | null = await (prisma as any).user.findUnique({\r\n      where: { id: String(decoded.id) },\r\n      include: {\r\n        roles: true,\r\n      },\r\n    });\r\n\r\n    if (!user)\r\n      throw new AppError(\r\n        \"The user belonging to this token does no longer exists\",\r\n        401\r\n      );\r\n\r\n    if (\r\n      this.userChangedPasswordAfter(user, decoded.iat!) &&\r\n      !req.path.includes(\"logout\")\r\n    )\r\n      throw new AppError(\r\n        \"User recently changed password! Please log in again.\",\r\n        401\r\n      );\r\n\r\n    if (!user.isVerified && !req.path.includes(\"logout\"))\r\n      throw new AppError(\r\n        \"You must verifiy your email in order to proceed!\",\r\n        423,\r\n        {\r\n          error: \"email_verification_required\",\r\n        }\r\n      );\r\n\r\n    return user;\r\n  }\r\n\r\n  /**\r\n   * Middleware function to authenticate the user based on the JWT token.\r\n   *\r\n   * @param {Request} req - The request object.\r\n   * @param {Response} res - The response object.\r\n   * @param {NextFunction} next - The next middleware function to be called.\r\n   * @returns {void}\r\n   */\r\n  authenticate = catchAsync(\r\n    async (req: Request, res: Response, next: NextFunction) => {\r\n      const initConfigs = getInitConfigs();\r\n      if (initConfigs?.authentication === false) return next();\r\n\r\n      req.user = (await this.getAuthenticatedUser(req)) as User;\r\n      next();\r\n    }\r\n  );\r\n\r\n  /**\r\n   * Handles authentication control by checking the `authenticationControl` configuration in the `authConfigs`.\r\n   *\r\n   * @param {AuthConfigs | undefined} authConfigs - The authentication configuration object.\r\n   * @param {ControllerActions} action - The action being performed (e.g., create, update, delete, view).\r\n   * @param {string} modelName - The model name being affected by the action.\r\n   * @returns {RequestHandler} The middleware function that checks if authentication is required.\r\n   */\r\n  handleAuthenticationControl(\r\n    authConfigs: AuthConfigs | undefined,\r\n    action: ControllerActions,\r\n    modelName: string\r\n  ): RequestHandler {\r\n    const authenticationControl = authConfigs?.authenticationControl;\r\n\r\n    if (authenticationControl && typeof authenticationControl === \"object\") {\r\n      if (authenticationControl[action] === false) return callNext;\r\n      else if (authenticationControl[action] === true) return this.authenticate;\r\n    } else return this.authenticate;\r\n\r\n    return this.authenticate;\r\n  }\r\n}\r\n\r\n/**\r\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\r\n */\r\nconst authService = new AuthService();\r\n\r\nexport default authService;\r\n"]}
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,gEAA+B;AAC/B,wDAA8B;AAE9B,qFAA4D;AAC5D,iFAAwD;AACxD,+DAAoD;AACpD,yCAA8C;AAC9C,sEAA6C;AAC7C,uEAAuE;AAiBvE,MAAM,WAAW;IAAjB;QAqPE,iBAAY,GAAG,IAAA,qBAAU,EACvB,CAAO,GAAiB,EAAE,GAAkB,EAAE,IAAuB,EAAE,EAAE;YACvE,MAAM,WAAW,GAAG,IAAA,uBAAc,GAAE,CAAC;YACrC,IAAI,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,cAAc,MAAK,KAAK;gBAAE,OAAO,IAAI,EAAE,CAAC;YAEzD,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAS,CAAC;YAC1D,IAAI,EAAE,CAAC;QACT,CAAC,CAAA,CACF,CAAC;IAwBJ,CAAC;IA5QC,YAAY,CACV,EAAmB,EACnB,YAA6B,OAAO,CAAC,GAAG,CAAC,cAAc;QACrD,mBAAQ,CAAC,cAAc,EACzB,SAAiB,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,mBAAQ,CAAC,UAAU;QAE9D,OAAO,sBAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YAC9B,SAAS,EAAE,SAAgB;SAC5B,CAAC,CAAC;IACL,CAAC;IASK,iBAAiB,CACrB,iBAAyB,EACzB,YAAoB;;YAEpB,OAAO,MAAM,kBAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAC/D,CAAC;KAAA;IAQK,YAAY,CAAC,QAAgB;;YACjC,OAAO,MAAM,kBAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC;KAAA;IAiBD,gBAAgB,CAAC,QAAgB;;QAC/B,MAAM,eAAe,GAAG,MAAA,IAAA,uBAAc,GAAE,0CACpC,cAAkD,CAAC;QAEvD,MAAM,mBAAmB,GACvB,eAAe,CAAC,aAAa,IAAI,oCAAoC,CAAC;QACxE,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IASD,wBAAwB,CAAC,IAAU,EAAE,YAAoB;QACvD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,kBAAkB,GAAG,QAAQ,CACjC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAC/C,EAAE,CACH,CAAC;YAEF,OAAO,YAAY,GAAG,kBAAkB,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAUK,cAAc;6DAClB,KAAa,EACb,SAAiB,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,mBAAQ,CAAC,UAAU;YAE9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;oBACzC,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;wBAChB,OAAO,CAAC,OAAyB,CAAC,CAAC;gBAC1C,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KAAA;IAUD,yBAAyB,CACvB,WAAwB,EACxB,MAAyB,EACzB,SAAiB;QAEjB,OAAO,IAAA,qBAAU,EACf,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,GAAG,CAAC,IAAW,CAAC;gBAC7B,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;gBAEnC,MAAM,WAAW,GAAG,MAAO,MAAc,CAAC,cAAc,CAAC,KAAK,CAAC;oBAC7D,KAAK,EAAE;wBACL,QAAQ,EAAE;4BACR,MAAM,EAAE,SAAS;4BACjB,IAAI,EAAE,aAAa;yBACpB;wBACD,MAAM,EAAE;4BACN,MAAM,EAAE,MAAM;4BACd,IAAI,EAAE,aAAa;yBACpB;wBACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;qBAChE;iBACF,CAAC,CAAC;gBAEH,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,OAAO,IAAI,CACT,IAAI,mBAAQ,CACV,kDAAkD,EAClD,GAAG,CACJ,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC,CAAA,CACF,CAAC;IACJ,CAAC;IAQK,oBAAoB,CAAC,GAAiB;;;YAC1C,MAAM,WAAW,GAAG,IAAA,uBAAc,GAAE,CAAC;YACrC,IAAI,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,cAAc,MAAK,KAAK;gBAAE,OAAO,IAAI,CAAC;YAEvD,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;YAEnC,IAAI,KAAyB,CAAC;YAE9B,IACE,CAAA,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,aAAa;iBAC3B,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA,EAChD,CAAC;gBACD,KAAK,GAAG,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,CAAA,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,kBAAkB,MAAK,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAC1E,KAAK,GAAG,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,kBAAkB,CAAC;YAC3C,CAAC;YAED,IAAI,CAAC,KAAK;gBACR,MAAM,IAAI,mBAAQ,CAChB,oDAAoD,EACpD,GAAG,CACJ,CAAC;YAEJ,IAAI,OAAmC,CAAC;YACxC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,mBAAQ,CAChB,iDAAiD,EACjD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,CAAA;gBACd,MAAM,IAAI,mBAAQ,CAChB,iDAAiD,EACjD,GAAG,CACJ,CAAC;YAEJ,MAAM,IAAI,GAAe,MAAO,MAAc,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC7D,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;gBACjC,OAAO,EAAE;oBACP,KAAK,EAAE;wBACL,OAAO,EAAE;4BACP,IAAI,EAAE;gCACJ,OAAO,EAAE;oCACP,WAAW,EAAE,IAAI;iCAClB;6BACF;yBACF;qBACF;iBACF;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI;gBACP,MAAM,IAAI,mBAAQ,CAChB,wDAAwD,EACxD,GAAG,CACJ,CAAC;YAEJ,IACE,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAI,CAAC;gBACjD,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAE5B,MAAM,IAAI,mBAAQ,CAChB,sDAAsD,EACtD,GAAG,CACJ,CAAC;YAEJ,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;IA4BD,2BAA2B,CACzB,WAAoC,EACpC,MAAyB,EACzB,SAAiB;QAEjB,MAAM,qBAAqB,GAAG,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,qBAAqB,CAAC;QAEjE,IAAI,qBAAqB,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;YACvE,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,KAAK;gBAAE,OAAO,2BAAQ,CAAC;iBACxD,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAC5E,CAAC;;YAAM,OAAO,IAAI,CAAC,YAAY,CAAC;QAEhC,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CACF;AAKD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,kBAAe,WAAW,CAAC","sourcesContent":["import jwt from \"jsonwebtoken\";\nimport bcrypt from \"bcryptjs\";\nimport { User, UserRole } from \"../../types\";\nimport catchAsync from \"../error-handler/utils/catch-async\";\nimport AppError from \"../error-handler/utils/app-error\";\nimport { callNext } from \"../base/base.middlewares\";\nimport { getInitConfigs } from \"../../server\";\nimport arkosEnv from \"../../utils/arkos-env\";\nimport { getPrismaInstance } from \"../../utils/helpers/prisma.helpers\";\nimport {\n  ArkosRequest,\n  ArkosResponse,\n  ArkosNextFunction,\n  ArkosRequestHandler,\n} from \"../../types\";\nimport {\n  AuthConfigs,\n  AuthJwtPayload,\n  ControllerActions,\n} from \"../../types/auth\";\nimport { InitConfigsAuthenticationOptions } from \"../../types/app\";\n\n/**\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\n */\nclass AuthService {\n  /**\n   * Signs a JWT token for the user.\n   *\n   * @param {number | string} id - The unique identifier of the user to generate the token for.\n   * @param {string | number} [expiresIn] - The expiration time for the token. Defaults to environment variable `JWT_EXPIRES_IN`.\n   * @param {string} [secret] - The secret key used to sign the token. Defaults to environment variable `JWT_SECRET`.\n   * @returns {string} The signed JWT token.\n   */\n  signJwtToken(\n    id: number | string,\n    expiresIn: string | number = process.env.JWT_EXPIRES_IN ||\n      arkosEnv.JWT_EXPIRES_IN,\n    secret: string = process.env.JWT_SECRET || arkosEnv.JWT_SECRET\n  ): string {\n    return jwt.sign({ id }, secret, {\n      expiresIn: expiresIn as any,\n    });\n  }\n\n  /**\n   * Compares a candidate password with the stored user password to check if they match.\n   *\n   * @param {string} candidatePassword - The password provided by the user during login.\n   * @param {string} userPassword - The password stored in the database.\n   * @returns {Promise<boolean>} Returns true if the passwords match, otherwise false.\n   */\n  async isCorrectPassword(\n    candidatePassword: string,\n    userPassword: string\n  ): Promise<boolean> {\n    return await bcrypt.compare(candidatePassword, userPassword);\n  }\n\n  /**\n   * Hashes a plain text password using bcrypt.\n   *\n   * @param {string} password - The password to be hashed.\n   * @returns {Promise<string>} Returns the hashed password.\n   */\n  async hashPassword(password: string): Promise<string> {\n    return await bcrypt.hash(password, 12);\n  }\n\n  /**\n   * Checks if a password is strong, requiring uppercase, lowercase, and numeric characters as the default.\n   *\n   * **Note**: You can define it when calling arkos.init()\n   * ```ts\n   * arkos.init(app, {\n   *  authentication: {\n   *    passwordRegex: /your-desired-regex/\n   *  }\n   * })\n   * ```\n   *\n   * @param {string} password - The password to check.\n   * @returns {boolean} Returns true if the password meets the strength criteria, otherwise false.\n   */\n  isPasswordStrong(password: string): boolean {\n    const initAuthConfigs = getInitConfigs()\n      ?.authentication as InitConfigsAuthenticationOptions;\n\n    const strongPasswordRegex =\n      initAuthConfigs.passwordRegex || /^(?=.*[A-Z])(?=.*[a-z])(?=.*\\d).+$/;\n    return strongPasswordRegex.test(password);\n  }\n\n  /**\n   * Checks if a user has changed their password after the JWT was issued.\n   *\n   * @param {User} user - The user object containing the passwordChangedAt field.\n   * @param {number} JWTTimestamp - The timestamp when the JWT was issued.\n   * @returns {boolean} Returns true if the user changed their password after the JWT was issued, otherwise false.\n   */\n  userChangedPasswordAfter(user: User, JWTTimestamp: number): boolean {\n    if (user.passwordChangedAt) {\n      const convertedTimestamp = parseInt(\n        String(user.passwordChangedAt.getTime() / 1000),\n        10\n      );\n\n      return JWTTimestamp < convertedTimestamp;\n    }\n    return false;\n  }\n\n  /**\n   * Verifies the authenticity of a JWT token.\n   *\n   * @param {string} token - The JWT token to verify.\n   * @param {string} [secret] - The secret key used to verify the token. Defaults to environment variable `JWT_SECRET`.\n   * @returns {Promise<AuthJwtPayload>} Returns the decoded JWT payload if the token is valid.\n   * @throws {Error} Throws an error if the token is invalid or expired.\n   */\n  async verifyJwtToken(\n    token: string,\n    secret: string = process.env.JWT_SECRET || arkosEnv.JWT_SECRET\n  ): Promise<AuthJwtPayload> {\n    return new Promise((resolve, reject) => {\n      jwt.verify(token, secret, (err, decoded) => {\n        if (err) reject(err);\n        else resolve(decoded as AuthJwtPayload);\n      });\n    });\n  }\n\n  /**\n   * Middleware function to handle access control based on user roles and permissions.\n   *\n   * @param {AuthConfigs} authConfigs - The configuration object for authentication and access control.\n   * @param {ControllerActions} action - The action being performed (e.g., create, update, delete, view).\n   * @param {string} modelName - The model name that the action is being performed on (e.g., \"User\", \"Post\").\n   * @returns {ArkosRequestHandler} The middleware function that checks if the user has permission to perform the action.\n   */\n  handleActionAccessControl(\n    authConfigs: AuthConfigs,\n    action: ControllerActions,\n    modelName: string\n  ): ArkosRequestHandler {\n    return catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        if (req.user) {\n          const user = req.user as any;\n          const prisma = getPrismaInstance();\n\n          const permissions = await (prisma as any).authPermission.count({\n            where: {\n              resource: {\n                equals: modelName,\n                mode: \"insensitive\",\n              },\n              action: {\n                equals: action,\n                mode: \"insensitive\",\n              },\n              roleId: { in: user.roles.map((role: UserRole) => role.roleId) },\n            },\n          });\n\n          if (!permissions) {\n            return next(\n              new AppError(\n                \"You do not have permission to perfom this action\",\n                403\n              )\n            );\n          }\n        }\n\n        next();\n      }\n    );\n  }\n\n  /**\n   * Processes the cookies or authoriation token and returns the user.\n   * @param req\n   * @returns {Promise<User | null>} - if authentication is turned off in initConfigs it returns null\n   * @throws {AppError} Throws an error if the token is invalid or the user is not logged in.\n   */\n  async getAuthenticatedUser(req: ArkosRequest): Promise<User | null> {\n    const initConfigs = getInitConfigs();\n    if (initConfigs?.authentication === false) return null;\n\n    const prisma = getPrismaInstance();\n\n    let token: string | undefined;\n\n    if (\n      req?.headers?.authorization &&\n      req?.headers?.authorization.startsWith(\"Bearer\")\n    ) {\n      token = req?.headers?.authorization.split(\" \")[1];\n    } else if (req?.cookies?.arkos_access_token !== \"no-token\" && req.cookies) {\n      token = req?.cookies?.arkos_access_token;\n    }\n\n    if (!token)\n      throw new AppError(\n        \"You are not logged in! please log in to get access\",\n        401\n      );\n\n    let decoded: AuthJwtPayload | undefined;\n    try {\n      decoded = await this.verifyJwtToken(token);\n    } catch (err) {\n      throw new AppError(\n        \"Your auth token is invalid, please login again.\",\n        401\n      );\n    }\n\n    if (!decoded?.id)\n      throw new AppError(\n        \"Your auth token is invalid, please login again.\",\n        401\n      );\n\n    const user: any | null = await (prisma as any).user.findUnique({\n      where: { id: String(decoded.id) },\n      include: {\n        roles: {\n          include: {\n            role: {\n              include: {\n                permissions: true,\n              },\n            },\n          },\n        },\n      },\n    });\n\n    if (!user)\n      throw new AppError(\n        \"The user belonging to this token does no longer exists\",\n        401\n      );\n\n    if (\n      this.userChangedPasswordAfter(user, decoded.iat!) &&\n      !req.path.includes(\"logout\")\n    )\n      throw new AppError(\n        \"User recently changed password! Please log in again.\",\n        401\n      );\n\n    return user;\n  }\n\n  /**\n   * Middleware function to authenticate the user based on the JWT token.\n   *\n   * @param {ArkosRequest} req - The request object.\n   * @param {ArkosResponse} res - The response object.\n   * @param {ArkosNextFunction} next - The next middleware function to be called.\n   * @returns {void}\n   */\n  authenticate = catchAsync(\n    async (req: ArkosRequest, res: ArkosResponse, next: ArkosNextFunction) => {\n      const initConfigs = getInitConfigs();\n      if (initConfigs?.authentication === false) return next();\n\n      req.user = (await this.getAuthenticatedUser(req)) as User;\n      next();\n    }\n  );\n\n  /**\n   * Handles authentication control by checking the `authenticationControl` configuration in the `authConfigs`.\n   *\n   * @param {AuthConfigs | undefined} authConfigs - The authentication configuration object.\n   * @param {ControllerActions} action - The action being performed (e.g., create, update, delete, view).\n   * @param {string} modelName - The model name being affected by the action.\n   * @returns {ArkosRequestHandler} The middleware function that checks if authentication is required.\n   */\n  handleAuthenticationControl(\n    authConfigs: AuthConfigs | undefined,\n    action: ControllerActions,\n    modelName: string\n  ): ArkosRequestHandler {\n    const authenticationControl = authConfigs?.authenticationControl;\n\n    if (authenticationControl && typeof authenticationControl === \"object\") {\n      if (authenticationControl[action] === false) return callNext;\n      else if (authenticationControl[action] === true) return this.authenticate;\n    } else return this.authenticate;\n\n    return this.authenticate;\n  }\n}\n\n/**\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\n */\nconst authService = new AuthService();\n\nexport default authService;\n"]}

package/dist/cjs/modules/auth/utils/helpers/__tests__/auth.helpers.test.js

@@ -0,0 +1,45 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const server_1 = require("../../../../../server");
+const vitest_2 = require("vitest");
+const auth_helpers_1 = require("../auth.helpers");
+vitest_1.vi.mock("../../../../../server", () => ({
+    getInitConfigs: vitest_1.vi.fn(),
+    close: vitest_1.vi.fn(),
+}));
+vitest_1.vi.mock("fs", () => ({
+    default: Object.assign(Object.assign({}, vitest_1.vi.importActual("fs")), { readdirSync: vitest_1.vi.fn(() => ["test.prisma"]), statSync: vitest_1.vi.fn(() => ({
+            isFile: vitest_1.vi.fn(),
+        })), existsSync: vitest_1.vi.fn(() => false), mkdirSync: vitest_1.vi.fn(), unlink: vitest_1.vi.fn(), access: vitest_1.vi.fn() }),
+}));
+(0, vitest_2.describe)("determineUsernameField", () => {
+    (0, vitest_2.it)("should use query parameter usernameField when provided", () => __awaiter(void 0, void 0, void 0, function* () {
+        const testReq = {
+            query: { usernameField: "email" },
+        };
+        (0, vitest_1.expect)((0, auth_helpers_1.determineUsernameField)(testReq)).toBe("email");
+    }));
+    (0, vitest_2.it)("should use configuration value when query parameter is not provided", () => __awaiter(void 0, void 0, void 0, function* () {
+        const testReq = { query: {} };
+        server_1.getInitConfigs.mockReturnValueOnce({
+            authentication: {
+                usernameField: "phoneNumber",
+            },
+        });
+        (0, vitest_1.expect)((0, auth_helpers_1.determineUsernameField)(testReq)).toBe("phoneNumber");
+    }));
+    (0, vitest_2.it)('should default to "username" when neither query nor config specify a field', () => __awaiter(void 0, void 0, void 0, function* () {
+        (0, vitest_1.expect)((0, auth_helpers_1.determineUsernameField)({ query: {} })).toBe("username");
+    }));
+});
+//# sourceMappingURL=auth.helpers.test.js.map

package/dist/cjs/modules/auth/utils/helpers/__tests__/auth.helpers.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.helpers.test.js","sourceRoot":"","sources":["../../../../../../../src/modules/auth/utils/helpers/__tests__/auth.helpers.test.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,mCAAoC;AACpC,kDAAuD;AACvD,mCAAsC;AACtC,kDAAyD;AAEzD,WAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,cAAc,EAAE,WAAE,CAAC,EAAE,EAAE;IACvB,KAAK,EAAE,WAAE,CAAC,EAAE,EAAE;CACf,CAAC,CAAC,CAAC;AAEJ,WAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACnB,OAAO,kCACF,WAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KACxB,WAAW,EAAE,WAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,EACzC,QAAQ,EAAE,WAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;YACrB,MAAM,EAAE,WAAE,CAAC,EAAE,EAAE;SAChB,CAAC,CAAC,EACH,UAAU,EAAE,WAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAC9B,SAAS,EAAE,WAAE,CAAC,EAAE,EAAE,EAClB,MAAM,EAAE,WAAE,CAAC,EAAE,EAAE,EACf,MAAM,EAAE,WAAE,CAAC,EAAE,EAAE,GAChB;CACF,CAAC,CAAC,CAAC;AAEJ,IAAA,iBAAQ,EAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,IAAA,WAAE,EAAC,wDAAwD,EAAE,GAAS,EAAE;QACtE,MAAM,OAAO,GAAG;YACd,KAAK,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE;SAClC,CAAC;QAEF,IAAA,eAAM,EAAC,IAAA,qCAAsB,EAAC,OAAc,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC,CAAA,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,qEAAqE,EAAE,GAAS,EAAE;QACnF,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAE7B,uBAAsB,CAAC,mBAAmB,CAAC;YAC1C,cAAc,EAAE;gBACd,aAAa,EAAE,aAAa;aAC7B;SACF,CAAC,CAAC;QAEH,IAAA,eAAM,EAAC,IAAA,qCAAsB,EAAC,OAAc,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrE,CAAC,CAAA,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4EAA4E,EAAE,GAAS,EAAE;QAC1F,IAAA,eAAM,EAAC,IAAA,qCAAsB,EAAC,EAAE,KAAK,EAAE,EAAE,EAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC,CAAA,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { expect, vi } from \"vitest\";\nimport { getInitConfigs } from \"../../../../../server\";\nimport { describe, it } from \"vitest\";\nimport { determineUsernameField } from \"../auth.helpers\";\n\nvi.mock(\"../../../../../server\", () => ({\n  getInitConfigs: vi.fn(),\n  close: vi.fn(),\n}));\n\nvi.mock(\"fs\", () => ({\n  default: {\n    ...vi.importActual(\"fs\"),\n    readdirSync: vi.fn(() => [\"test.prisma\"]),\n    statSync: vi.fn(() => ({\n      isFile: vi.fn(),\n    })),\n    existsSync: vi.fn(() => false),\n    mkdirSync: vi.fn(),\n    unlink: vi.fn(),\n    access: vi.fn(),\n  },\n}));\n\ndescribe(\"determineUsernameField\", () => {\n  it(\"should use query parameter usernameField when provided\", async () => {\n    const testReq = {\n      query: { usernameField: \"email\" },\n    };\n\n    expect(determineUsernameField(testReq as any)).toBe(\"email\");\n  });\n\n  it(\"should use configuration value when query parameter is not provided\", async () => {\n    const testReq = { query: {} };\n\n    (getInitConfigs as any).mockReturnValueOnce({\n      authentication: {\n        usernameField: \"phoneNumber\",\n      },\n    });\n\n    expect(determineUsernameField(testReq as any)).toBe(\"phoneNumber\");\n  });\n\n  it('should default to \"username\" when neither query nor config specify a field', async () => {\n    expect(determineUsernameField({ query: {} } as any)).toBe(\"username\");\n  });\n});\n"]}

package/dist/cjs/modules/auth/utils/helpers/auth.helpers.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.determineUsernameField = void 0;
+const server_1 = require("../../../../server");
+const determineUsernameField = (req) => {
+    var _a, _b, _c;
+    if (((_a = req.query) === null || _a === void 0 ? void 0 : _a.usernameField) && typeof ((_b = req.query) === null || _b === void 0 ? void 0 : _b.usernameField) === "string")
+        return req.query.usernameField;
+    const initAuthConfigs = (_c = (0, server_1.getInitConfigs)()) === null || _c === void 0 ? void 0 : _c.authentication;
+    return (initAuthConfigs === null || initAuthConfigs === void 0 ? void 0 : initAuthConfigs.usernameField) || "username";
+};
+exports.determineUsernameField = determineUsernameField;
+//# sourceMappingURL=auth.helpers.js.map

package/dist/cjs/modules/auth/utils/helpers/auth.helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.helpers.js","sourceRoot":"","sources":["../../../../../../src/modules/auth/utils/helpers/auth.helpers.ts"],"names":[],"mappings":";;;AAAA,+CAAoD;AAW7C,MAAM,sBAAsB,GAAG,CAAC,GAAiB,EAAU,EAAE;;IAClE,IAAI,CAAA,MAAA,GAAG,CAAC,KAAK,0CAAE,aAAa,KAAI,OAAO,CAAA,MAAA,GAAG,CAAC,KAAK,0CAAE,aAAa,CAAA,KAAK,QAAQ;QAC1E,OAAO,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;IAEjC,MAAM,eAAe,GAAG,MAAA,IAAA,uBAAc,GAAE,0CACpC,cAAkD,CAAC;IACvD,OAAO,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,aAAa,KAAI,UAAU,CAAC;AACtD,CAAC,CAAC;AAPW,QAAA,sBAAsB,0BAOjC","sourcesContent":["import { getInitConfigs } from \"../../../../server\";\nimport { ArkosRequest } from \"../../../../types\";\nimport { InitConfigsAuthenticationOptions } from \"../../../../types/app\";\n\n/**\n * Determines the username field to use for authentication\n * Priority: 1. req.query.usernameField 2. config setting 3. default \"username\"\n *\n * @param req - The request object\n * @returns The field name to use for username identification\n */\nexport const determineUsernameField = (req: ArkosRequest): string => {\n  if (req.query?.usernameField && typeof req.query?.usernameField === \"string\")\n    return req.query.usernameField;\n\n  const initAuthConfigs = getInitConfigs()\n    ?.authentication as InitConfigsAuthenticationOptions;\n  return initAuthConfigs?.usernameField || \"username\";\n};\n"]}