arkos 1.0.13 → 1.0.15

package/dist/cjs/app.js

@@ -1 +1 @@
-"use strict";var __createBinding=this&&this.__createBinding||(Object.create?function(e,t,i,r){r===void 0&&(r=i);var l=Object.getOwnPropertyDescriptor(t,i);(!l||("get"in l?!t.__esModule:l.writable||l.configurable))&&(l={enumerable:!0,get:function(){return t[i]}}),Object.defineProperty(e,r,l)}:function(e,t,i,r){r===void 0&&(r=i),e[r]=t[i]}),__setModuleDefault=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),__importStar=this&&this.__importStar||function(){var e=function(t){return e=Object.getOwnPropertyNames||function(i){var r=[];for(var l in i)Object.prototype.hasOwnProperty.call(i,l)&&(r[r.length]=l);return r},e(t)};return function(t){if(t&&t.__esModule)return t;var i={};if(t!=null)for(var r=e(t),l=0;l<r.length;l++)r[l]!=="default"&&__createBinding(i,t,r[l]);return __setModuleDefault(i,t),i}}(),__awaiter=this&&this.__awaiter||function(e,t,i,r){function l(u){return u instanceof i?u:new i(function(o){o(u)})}return new(i||(i=Promise))(function(u,o){function d(s){try{a(r.next(s))}catch(n){o(n)}}function p(s){try{a(r.throw(s))}catch(n){o(n)}}function a(s){s.done?u(s.value):l(s.value).then(d,p)}a((r=r.apply(e,t||[])).next())})},__importDefault=this&&this.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(exports,"__esModule",{value:!0}),exports.app=void 0,exports.bootstrap=bootstrap;const express_1=__importDefault(require("express")),cors_1=__importDefault(require("cors")),cookie_parser_1=__importDefault(require("cookie-parser")),auth_router_1=require("./modules/auth/auth.router"),base_router_1=require("./modules/base/base.router"),error_handler_controller_1=__importDefault(require("./modules/error-handler/error-handler.controller")),express_rate_limit_1=require("express-rate-limit"),path_1=__importDefault(require("path")),dotenv=__importStar(require("dotenv")),compression_1=__importDefault(require("compression")),base_middlewares_1=require("./modules/base/base.middlewares"),prisma_helpers_1=require("./utils/helpers/prisma.helpers"),file_uploader_router_1=require("./modules/file-uploader/file-uploader.router"),query_parser_helpers_1=require("./utils/helpers/query-parser.helpers"),deepmerge_helper_1=__importDefault(require("./utils/helpers/deepmerge.helper")),ENV=process.env.NODE_ENV;let envPath=".env";ENV==="production"?envPath=path_1.default.resolve(process.cwd(),".env.production"):ENV==="staging"?envPath=path_1.default.resolve(process.cwd(),".env.staging"):ENV==="development"?envPath=path_1.default.resolve(process.cwd(),".env.development"):ENV==="local"?envPath=path_1.default.resolve(process.cwd(),".env.local"):ENV==="test"?envPath=path_1.default.resolve(process.cwd(),".env.test"):ENV==="qa"&&(envPath=path_1.default.resolve(process.cwd(),".env.qa")),dotenv.config({path:envPath}),exports.app=(0,express_1.default)();function bootstrap(e){return __awaiter(this,void 0,void 0,function*(){var t,i,r;yield(0,prisma_helpers_1.loadPrismaModule)(),e.configureApp&&(yield e.configureApp(exports.app));const l=e?.middlewares,u=l?.disable||[],o=l?.replace||{};u.includes("compression")||exports.app.use(o.compression||(0,compression_1.default)(e?.compressionOptions)),u.includes("global-rate-limit")||exports.app.use(o.globalRateLimit||(0,express_rate_limit_1.rateLimit)((0,deepmerge_helper_1.default)({windowMs:60*1e3,limit:1e3,standardHeaders:"draft-7",legacyHeaders:!1},e?.globalRequestRateLimitOptions||{}))),u.includes("cors")||exports.app.use(o.cors||(0,cors_1.default)(!((t=e?.cors)===null||t===void 0)&&t.customHandler?e.cors.customHandler:(0,deepmerge_helper_1.default)({origin:(s,n)=>{var v;const c=(v=e?.cors)===null||v===void 0?void 0:v.allowedOrigins;c==="*"?n(null,!0):Array.isArray(c)?n(null,!s||c.includes(s)):typeof c=="string"?n(null,!s||c===s):n(null,!1)},methods:["GET","POST","PUT","DELETE","PATCH","OPTIONS"],allowedHeaders:["Content-Type","Authorization","Connection"],credentials:!0},((i=e?.cors)===null||i===void 0?void 0:i.options)||{}))),u.includes("express-json")||exports.app.use(o.expressJson||express_1.default.json(e?.jsonBodyParserOptions)),u.includes("cookie-parser")||exports.app.use(o.cookieParser||(0,cookie_parser_1.default)(...e?.cookieParserParameters||[])),u.includes("query-parser")||exports.app.use(o.queryParser||(0,query_parser_helpers_1.queryParser)((0,deepmerge_helper_1.default)({parseNull:!0,parseUndefined:!0,parseBoolean:!0},e?.queryParserOptions||{}))),u.includes("database-connection")||exports.app.use(o.databaseConnection||prisma_helpers_1.checkDatabaseConnection),u.includes("request-logger")||exports.app.use(o.requestLogger||base_middlewares_1.handleRequestLogs),!((r=e?.middlewares)===null||r===void 0)&&r.additionals&&e.middlewares.additionals.forEach(s=>{exports.app.use(s)});const d=e?.routers,p=d?.disable||[],a=d?.replace||{};if(p.includes("welcome-endpoint")||exports.app.get("/api",a.welcomeEndpoint||((s,n)=>{n.status(200).json({message:e.welcomeMessage})})),!p.includes("file-uploader")){const s=a.fileUploader?yield a.fileUploader(e):yield(0,file_uploader_router_1.getFileUploaderRouter)(e);exports.app.use(s)}if(!p.includes("auth-router")&&e.authentication){const s=a.authRouter?yield a.authRouter(e):yield(0,auth_router_1.getAuthRouter)(e);exports.app.use("/api",s)}if(!p.includes("prisma-models-router")){const s=a.prismaModelsRouter?yield a.prismaModelsRouter(e):yield(0,base_router_1.getPrismaModelsRouter)();exports.app.use("/api",s)}return exports.app.use("/api",(0,base_router_1.getAvailableResourcesAndRoutesRouter)()),d?.additionals&&d.additionals.forEach(s=>{exports.app.use(s)}),u.includes("global-error-handler")||exports.app.use(o.globalErrorHandler||error_handler_controller_1.default),exports.app})}
+"use strict";var __createBinding=this&&this.__createBinding||(Object.create?function(e,t,i,r){r===void 0&&(r=i);var l=Object.getOwnPropertyDescriptor(t,i);(!l||("get"in l?!t.__esModule:l.writable||l.configurable))&&(l={enumerable:!0,get:function(){return t[i]}}),Object.defineProperty(e,r,l)}:function(e,t,i,r){r===void 0&&(r=i),e[r]=t[i]}),__setModuleDefault=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),__importStar=this&&this.__importStar||function(){var e=function(t){return e=Object.getOwnPropertyNames||function(i){var r=[];for(var l in i)Object.prototype.hasOwnProperty.call(i,l)&&(r[r.length]=l);return r},e(t)};return function(t){if(t&&t.__esModule)return t;var i={};if(t!=null)for(var r=e(t),l=0;l<r.length;l++)r[l]!=="default"&&__createBinding(i,t,r[l]);return __setModuleDefault(i,t),i}}(),__awaiter=this&&this.__awaiter||function(e,t,i,r){function l(u){return u instanceof i?u:new i(function(o){o(u)})}return new(i||(i=Promise))(function(u,o){function d(s){try{a(r.next(s))}catch(n){o(n)}}function p(s){try{a(r.throw(s))}catch(n){o(n)}}function a(s){s.done?u(s.value):l(s.value).then(d,p)}a((r=r.apply(e,t||[])).next())})},__importDefault=this&&this.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(exports,"__esModule",{value:!0}),exports.app=void 0,exports.bootstrap=bootstrap;const express_1=__importDefault(require("express")),cors_1=__importDefault(require("cors")),cookie_parser_1=__importDefault(require("cookie-parser")),auth_router_1=require("./modules/auth/auth.router"),base_router_1=require("./modules/base/base.router"),error_handler_controller_1=__importDefault(require("./modules/error-handler/error-handler.controller")),express_rate_limit_1=require("express-rate-limit"),path_1=__importDefault(require("path")),dotenv=__importStar(require("dotenv")),compression_1=__importDefault(require("compression")),base_middlewares_1=require("./modules/base/base.middlewares"),prisma_helpers_1=require("./utils/helpers/prisma.helpers"),file_uploader_router_1=require("./modules/file-uploader/file-uploader.router"),query_parser_helpers_1=require("./utils/helpers/query-parser.helpers"),deepmerge_helper_1=__importDefault(require("./utils/helpers/deepmerge.helper")),ENV=process.env.NODE_ENV;let envPath=".env";ENV==="production"?envPath=path_1.default.resolve(process.cwd(),".env.production"):ENV==="staging"?envPath=path_1.default.resolve(process.cwd(),".env.staging"):ENV==="development"?envPath=path_1.default.resolve(process.cwd(),".env.development"):ENV==="local"?envPath=path_1.default.resolve(process.cwd(),".env.local"):ENV==="test"?envPath=path_1.default.resolve(process.cwd(),".env.test"):ENV==="qa"&&(envPath=path_1.default.resolve(process.cwd(),".env.qa")),dotenv.config({path:envPath}),exports.app=(0,express_1.default)();function bootstrap(e){return __awaiter(this,void 0,void 0,function*(){var t,i,r;yield(0,prisma_helpers_1.loadPrismaModule)(),e.configureApp&&(yield e.configureApp(exports.app));const l=e?.middlewares,u=l?.disable||[],o=l?.replace||{};u.includes("compression")||exports.app.use(o.compression||(0,compression_1.default)(e?.compressionOptions)),u.includes("global-rate-limit")||exports.app.use(o.globalRateLimit||(0,express_rate_limit_1.rateLimit)((0,deepmerge_helper_1.default)({windowMs:60*1e3,limit:1e3,standardHeaders:"draft-7",legacyHeaders:!1},e?.globalRequestRateLimitOptions||{}))),u.includes("cors")||exports.app.use(o.cors||(0,cors_1.default)(!((t=e?.cors)===null||t===void 0)&&t.customHandler?e.cors.customHandler:(0,deepmerge_helper_1.default)({origin:(s,n)=>{var v;const c=(v=e?.cors)===null||v===void 0?void 0:v.allowedOrigins;c==="*"?n(null,!0):Array.isArray(c)?n(null,!s||c.includes(s)):typeof c=="string"?n(null,!s||c===s):n(null,!1)},methods:["GET","POST","PUT","DELETE","PATCH","OPTIONS"],allowedHeaders:["Content-Type","Authorization","Connection"],credentials:!0},((i=e?.cors)===null||i===void 0?void 0:i.options)||{}))),u.includes("express-json")||exports.app.use(o.expressJson||express_1.default.json(e?.jsonBodyParserOptions)),u.includes("cookie-parser")||exports.app.use(o.cookieParser||(0,cookie_parser_1.default)(...e?.cookieParserParameters||[])),u.includes("query-parser")||exports.app.use(o.queryParser||(0,query_parser_helpers_1.queryParser)((0,deepmerge_helper_1.default)({parseNull:!0,parseUndefined:!0,parseBoolean:!0},e?.queryParserOptions||{}))),u.includes("database-connection")||exports.app.use(o.databaseConnection||prisma_helpers_1.checkDatabaseConnection),u.includes("request-logger")||exports.app.use(o.requestLogger||base_middlewares_1.handleRequestLogs),!((r=e?.middlewares)===null||r===void 0)&&r.additional&&e.middlewares.additional.forEach(s=>{exports.app.use(s)});const d=e?.routers,p=d?.disable||[],a=d?.replace||{};if(p.includes("welcome-endpoint")||exports.app.get("/api",a.welcomeEndpoint||((s,n)=>{n.status(200).json({message:e.welcomeMessage})})),!p.includes("file-uploader")){const s=a.fileUploader?yield a.fileUploader(e):yield(0,file_uploader_router_1.getFileUploaderRouter)(e);exports.app.use(s)}if(!p.includes("auth-router")&&e.authentication){const s=a.authRouter?yield a.authRouter(e):yield(0,auth_router_1.getAuthRouter)(e);exports.app.use("/api",s)}if(!p.includes("prisma-models-router")){const s=a.prismaModelsRouter?yield a.prismaModelsRouter(e):yield(0,base_router_1.getPrismaModelsRouter)(e);exports.app.use("/api",s)}return exports.app.use("/api",(0,base_router_1.getAvailableResourcesAndRoutesRouter)()),d?.additional&&d.additional.forEach(s=>{exports.app.use(s)}),u.includes("global-error-handler")||exports.app.use(o.globalErrorHandler||error_handler_controller_1.default),exports.app})}

package/dist/cjs/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/app.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,8BA0KC;AA3ND,sDAA8B;AAC9B,gDAAwB;AACxB,kEAAyC;AACzC,4DAA2D;AAC3D,4DAGoC;AACpC,gHAA4E;AAC5E,2DAA+C;AAC/C,gDAAwB;AACxB,+CAAiC;AACjC,8DAAsC;AACtC,sEAAoE;AACpE,mEAGwC;AACxC,uFAAqF;AAErF,+EAAmE;AACnE,wFAAyD;AAEzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AACjC,IAAI,OAAO,GAAG,MAAM,CAAC;AAGrB,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;IACzB,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAC3D,CAAC;KAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;IAC7B,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;AACxD,CAAC;KAAM,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;IACjC,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAC5D,CAAC;KAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IAE3B,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;AACtD,CAAC;KAGI,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;IACxB,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;AACrD,CAAC;KAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IACxB,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAEpB,QAAA,GAAG,GAAoB,IAAA,iBAAO,GAAE,CAAC;AAE9C,SAAsB,SAAS,CAC7B,WAAwB;;;QAExB,MAAM,IAAA,iCAAgB,GAAE,CAAC;QAEzB,IAAI,WAAW,CAAC,YAAY;YAAE,MAAM,WAAW,CAAC,YAAY,CAAC,WAAG,CAAC,CAAC;QAElE,MAAM,iBAAiB,GAAG,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,CAAC;QACnD,MAAM,mBAAmB,GAAG,CAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,OAAO,KAAI,EAAE,CAAC;QAC7D,MAAM,mBAAmB,GAAG,CAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,OAAO,KAAI,EAAE,CAAC;QAG7D,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC9C,WAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,WAAW;gBAC7B,IAAA,qBAAW,EAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,kBAAkB,CAAC,CAC/C,CAAC;QAGJ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YACpD,WAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,eAAe;gBACjC,IAAA,8BAAS,EACP,IAAA,0BAAS,EACP;oBACE,QAAQ,EAAE,EAAE,GAAG,IAAI;oBACnB,KAAK,EAAE,IAAI;oBACX,eAAe,EAAE,SAAS;oBAC1B,aAAa,EAAE,KAAK;iBACrB,EACD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,6BAA6B,KAAI,EAAE,CACjD,CACF,CACJ,CAAC;QAGJ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC;YACvC,WAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,IAAI;gBACtB,IAAA,cAAI,EACF,CAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,IAAI,0CAAE,aAAa;oBAC9B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa;oBAChC,CAAC,CAAC,IAAA,0BAAS,EACP;wBACE,MAAM,EAAE,CACN,MAAc,EACd,EAAgD,EAChD,EAAE;;4BACF,MAAM,OAAO,GAAG,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,IAAI,0CAAE,cAAc,CAAC;4BAElD,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;gCACpB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;4BACjB,CAAC;iCAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gCAClC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;4BAChD,CAAC;iCAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gCACvC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC;4BAC1C,CAAC;iCAAM,CAAC;gCACN,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;4BAClB,CAAC;wBACH,CAAC;wBACD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;wBAC7D,cAAc,EAAE;4BACd,cAAc;4BACd,eAAe;4BACf,YAAY;yBACb;wBACD,WAAW,EAAE,IAAI;qBAClB,EACD,CAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,IAAI,0CAAE,OAAO,KAAI,EAAE,CACjC,CACN,CACJ,CAAC;QAGJ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC/C,WAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,WAAW;gBAC7B,iBAAO,CAAC,IAAI,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,qBAAqB,CAAC,CACnD,CAAC;QAGJ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,eAAe,CAAC;YAChD,WAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,YAAY;gBAC9B,IAAA,uBAAY,EAAC,GAAG,CAAC,GAAG,CAAC,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,sBAAsB,KAAI,EAAE,CAAC,CAAC,CAAC,CACpE,CAAC;QAGJ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC/C,WAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,WAAW;gBAC7B,IAAA,kCAAW,EACT,IAAA,0BAAS,EACP;oBACE,SAAS,EAAE,IAAI;oBACf,cAAc,EAAE,IAAI;oBACpB,YAAY,EAAE,IAAI;iBACnB,EACD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,kBAAkB,KAAI,EAAE,CACtC,CACF,CACJ,CAAC;QAGJ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YACtD,WAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,kBAAkB,IAAI,wCAAuB,CAAC,CAAC;QAG7E,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACjD,WAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,IAAI,oCAAiB,CAAC,CAAC;QAGlE,IAAI,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,0CAAE,WAAW;YACvC,WAAW,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;gBACzD,WAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;QAGL,MAAM,aAAa,GAAG,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,OAAO,CAAC;QAC3C,MAAM,eAAe,GAAG,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,OAAO,KAAI,EAAE,CAAC;QACrD,MAAM,eAAe,GAAG,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,OAAO,KAAI,EAAE,CAAC;QAGrD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC/C,WAAG,CAAC,GAAG,CACL,MAAM,EACN,eAAe,CAAC,eAAe;gBAC7B,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;oBACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC;gBAChE,CAAC,CAAC,CACL,CAAC;QAGJ,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/C,MAAM,kBAAkB,GAAG,eAAe,CAAC,YAAY;gBACrD,CAAC,CAAC,MAAM,eAAe,CAAC,YAAY,CAAC,WAAW,CAAC;gBACjD,CAAC,CAAC,MAAM,IAAA,4CAAqB,EAAC,WAAW,CAAC,CAAC;YAC7C,WAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC9B,CAAC;QAGD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;YAC3E,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU;gBAC3C,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC;gBAC/C,CAAC,CAAC,MAAM,IAAA,2BAAa,EAAC,WAAW,CAAC,CAAC;YACrC,WAAG,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC9B,CAAC;QAGD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACtD,MAAM,YAAY,GAAG,eAAe,CAAC,kBAAkB;gBACrD,CAAC,CAAC,MAAM,eAAe,CAAC,kBAAkB,CAAC,WAAW,CAAC;gBACvD,CAAC,CAAC,MAAM,IAAA,mCAAqB,GAAE,CAAC;YAClC,WAAG,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAChC,CAAC;QAED,WAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAA,kDAAoC,GAAE,CAAC,CAAC;QAGxD,IAAI,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,EAAE,CAAC;YAC/B,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC3C,WAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC;QAGD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YACvD,WAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,kBAAkB,IAAI,kCAAY,CAAC,CAAC;QAElE,OAAO,WAAG,CAAC;IACb,CAAC;CAAA","sourcesContent":["import express from \"express\";\nimport cors from \"cors\";\nimport cookieParser from \"cookie-parser\";\nimport { getAuthRouter } from \"./modules/auth/auth.router\";\nimport {\n  getPrismaModelsRouter,\n  getAvailableResourcesAndRoutesRouter,\n} from \"./modules/base/base.router\";\nimport errorHandler from \"./modules/error-handler/error-handler.controller\";\nimport { rateLimit } from \"express-rate-limit\";\nimport path from \"path\";\nimport * as dotenv from \"dotenv\";\nimport compression from \"compression\";\nimport { handleRequestLogs } from \"./modules/base/base.middlewares\";\nimport {\n  checkDatabaseConnection,\n  loadPrismaModule,\n} from \"./utils/helpers/prisma.helpers\";\nimport { getFileUploaderRouter } from \"./modules/file-uploader/file-uploader.router\";\nimport { ArkosConfig } from \"./types/arkos-config\";\nimport { queryParser } from \"./utils/helpers/query-parser.helpers\";\nimport deepmerge from \"./utils/helpers/deepmerge.helper\";\n\nconst ENV = process.env.NODE_ENV;\nlet envPath = \".env\";\n\n// Default to `.env.local` if available in any environment\nif (ENV === \"production\") {\n  envPath = path.resolve(process.cwd(), \".env.production\");\n} else if (ENV === \"staging\") {\n  envPath = path.resolve(process.cwd(), \".env.staging\");\n} else if (ENV === \"development\") {\n  envPath = path.resolve(process.cwd(), \".env.development\");\n} else if (ENV === \"local\") {\n  // For local development, .env.local can be used\n  envPath = path.resolve(process.cwd(), \".env.local\");\n}\n\n// Optionally, add support for `.env.test`, `.env.qa`, or other environments if required\nelse if (ENV === \"test\") {\n  envPath = path.resolve(process.cwd(), \".env.test\");\n} else if (ENV === \"qa\") {\n  envPath = path.resolve(process.cwd(), \".env.qa\");\n}\n\ndotenv.config({ path: envPath });\n\nexport const app: express.Express = express();\n\nexport async function bootstrap(\n  arkosConfig: ArkosConfig\n): Promise<express.Express> {\n  await loadPrismaModule();\n\n  if (arkosConfig.configureApp) await arkosConfig.configureApp(app);\n\n  const middlewaresConfig = arkosConfig?.middlewares;\n  const disabledMiddlewares = middlewaresConfig?.disable || [];\n  const replacedMiddlewares = middlewaresConfig?.replace || {};\n\n  // Compression middleware\n  if (!disabledMiddlewares.includes(\"compression\"))\n    app.use(\n      replacedMiddlewares.compression ||\n        compression(arkosConfig?.compressionOptions)\n    );\n\n  // Global rate limit middleware\n  if (!disabledMiddlewares.includes(\"global-rate-limit\"))\n    app.use(\n      replacedMiddlewares.globalRateLimit ||\n        rateLimit(\n          deepmerge(\n            {\n              windowMs: 60 * 1000,\n              limit: 1000,\n              standardHeaders: \"draft-7\",\n              legacyHeaders: false,\n            },\n            arkosConfig?.globalRequestRateLimitOptions || {}\n          )\n        )\n    );\n\n  // CORS middleware\n  if (!disabledMiddlewares.includes(\"cors\"))\n    app.use(\n      replacedMiddlewares.cors ||\n        cors(\n          arkosConfig?.cors?.customHandler\n            ? arkosConfig.cors.customHandler\n            : deepmerge(\n                {\n                  origin: (\n                    origin: string,\n                    cb: (err: Error | null, allow?: boolean) => void\n                  ) => {\n                    const allowed = arkosConfig?.cors?.allowedOrigins;\n\n                    if (allowed === \"*\") {\n                      cb(null, true);\n                    } else if (Array.isArray(allowed)) {\n                      cb(null, !origin || allowed.includes(origin));\n                    } else if (typeof allowed === \"string\") {\n                      cb(null, !origin || allowed === origin);\n                    } else {\n                      cb(null, false);\n                    }\n                  },\n                  methods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"PATCH\", \"OPTIONS\"],\n                  allowedHeaders: [\n                    \"Content-Type\",\n                    \"Authorization\",\n                    \"Connection\",\n                  ],\n                  credentials: true,\n                },\n                arkosConfig?.cors?.options || {}\n              )\n        )\n    );\n\n  // JSON body parser middleware\n  if (!disabledMiddlewares.includes(\"express-json\"))\n    app.use(\n      replacedMiddlewares.expressJson ||\n        express.json(arkosConfig?.jsonBodyParserOptions)\n    );\n\n  // Cookie parser middleware\n  if (!disabledMiddlewares.includes(\"cookie-parser\"))\n    app.use(\n      replacedMiddlewares.cookieParser ||\n        cookieParser(...[...(arkosConfig?.cookieParserParameters || [])])\n    );\n\n  // Query parser middleware\n  if (!disabledMiddlewares.includes(\"query-parser\"))\n    app.use(\n      replacedMiddlewares.queryParser ||\n        queryParser(\n          deepmerge(\n            {\n              parseNull: true,\n              parseUndefined: true,\n              parseBoolean: true,\n            },\n            arkosConfig?.queryParserOptions || {}\n          )\n        )\n    );\n\n  // Database connection check middleware\n  if (!disabledMiddlewares.includes(\"database-connection\"))\n    app.use(replacedMiddlewares.databaseConnection || checkDatabaseConnection);\n\n  // Request logger middleware\n  if (!disabledMiddlewares.includes(\"request-logger\"))\n    app.use(replacedMiddlewares.requestLogger || handleRequestLogs);\n\n  // Additional custom middlewares\n  if (arkosConfig?.middlewares?.additionals)\n    arkosConfig.middlewares.additionals.forEach((middleware) => {\n      app.use(middleware);\n    });\n\n  // Configure routers\n  const routersConfig = arkosConfig?.routers;\n  const disabledRouters = routersConfig?.disable || [];\n  const replacedRouters = routersConfig?.replace || {};\n\n  // Welcome endpoint\n  if (!disabledRouters.includes(\"welcome-endpoint\"))\n    app.get(\n      \"/api\",\n      replacedRouters.welcomeEndpoint ||\n        ((req, res) => {\n          res.status(200).json({ message: arkosConfig.welcomeMessage });\n        })\n    );\n\n  // File uploader router\n  if (!disabledRouters.includes(\"file-uploader\")) {\n    const fileUploaderRouter = replacedRouters.fileUploader\n      ? await replacedRouters.fileUploader(arkosConfig)\n      : await getFileUploaderRouter(arkosConfig);\n    app.use(fileUploaderRouter);\n  }\n\n  // Auth router\n  if (!disabledRouters.includes(\"auth-router\") && arkosConfig.authentication) {\n    const authRouter = replacedRouters.authRouter\n      ? await replacedRouters.authRouter(arkosConfig)\n      : await getAuthRouter(arkosConfig);\n    app.use(\"/api\", authRouter);\n  }\n\n  // Prisma models router\n  if (!disabledRouters.includes(\"prisma-models-router\")) {\n    const modelsRouter = replacedRouters.prismaModelsRouter\n      ? await replacedRouters.prismaModelsRouter(arkosConfig)\n      : await getPrismaModelsRouter();\n    app.use(\"/api\", modelsRouter);\n  }\n\n  app.use(\"/api\", getAvailableResourcesAndRoutesRouter());\n\n  // Additional custom routers\n  if (routersConfig?.additionals) {\n    routersConfig.additionals.forEach((router) => {\n      app.use(router);\n    });\n  }\n\n  // Global error handler middleware (must be last)\n  if (!disabledMiddlewares.includes(\"global-error-handler\"))\n    app.use(replacedMiddlewares.globalErrorHandler || errorHandler);\n\n  return app;\n}\n"]}
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/app.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,8BA0KC;AA3ND,sDAA8B;AAC9B,gDAAwB;AACxB,kEAAyC;AACzC,4DAA2D;AAC3D,4DAGoC;AACpC,gHAA4E;AAC5E,2DAA+C;AAC/C,gDAAwB;AACxB,+CAAiC;AACjC,8DAAsC;AACtC,sEAAoE;AACpE,mEAGwC;AACxC,uFAAqF;AAErF,+EAAmE;AACnE,wFAAyD;AAEzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AACjC,IAAI,OAAO,GAAG,MAAM,CAAC;AAGrB,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;IACzB,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAC3D,CAAC;KAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;IAC7B,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;AACxD,CAAC;KAAM,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;IACjC,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAC5D,CAAC;KAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IAE3B,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;AACtD,CAAC;KAGI,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;IACxB,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;AACrD,CAAC;KAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IACxB,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAEpB,QAAA,GAAG,GAAoB,IAAA,iBAAO,GAAE,CAAC;AAE9C,SAAsB,SAAS,CAC7B,WAAwB;;;QAExB,MAAM,IAAA,iCAAgB,GAAE,CAAC;QAEzB,IAAI,WAAW,CAAC,YAAY;YAAE,MAAM,WAAW,CAAC,YAAY,CAAC,WAAG,CAAC,CAAC;QAElE,MAAM,iBAAiB,GAAG,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,CAAC;QACnD,MAAM,mBAAmB,GAAG,CAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,OAAO,KAAI,EAAE,CAAC;QAC7D,MAAM,mBAAmB,GAAG,CAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,OAAO,KAAI,EAAE,CAAC;QAG7D,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC9C,WAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,WAAW;gBAC7B,IAAA,qBAAW,EAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,kBAAkB,CAAC,CAC/C,CAAC;QAGJ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YACpD,WAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,eAAe;gBACjC,IAAA,8BAAS,EACP,IAAA,0BAAS,EACP;oBACE,QAAQ,EAAE,EAAE,GAAG,IAAI;oBACnB,KAAK,EAAE,IAAI;oBACX,eAAe,EAAE,SAAS;oBAC1B,aAAa,EAAE,KAAK;iBACrB,EACD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,6BAA6B,KAAI,EAAE,CACjD,CACF,CACJ,CAAC;QAGJ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC;YACvC,WAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,IAAI;gBACtB,IAAA,cAAI,EACF,CAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,IAAI,0CAAE,aAAa;oBAC9B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa;oBAChC,CAAC,CAAC,IAAA,0BAAS,EACP;wBACE,MAAM,EAAE,CACN,MAAc,EACd,EAAgD,EAChD,EAAE;;4BACF,MAAM,OAAO,GAAG,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,IAAI,0CAAE,cAAc,CAAC;4BAElD,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;gCACpB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;4BACjB,CAAC;iCAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gCAClC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;4BAChD,CAAC;iCAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gCACvC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC;4BAC1C,CAAC;iCAAM,CAAC;gCACN,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;4BAClB,CAAC;wBACH,CAAC;wBACD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;wBAC7D,cAAc,EAAE;4BACd,cAAc;4BACd,eAAe;4BACf,YAAY;yBACb;wBACD,WAAW,EAAE,IAAI;qBAClB,EACD,CAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,IAAI,0CAAE,OAAO,KAAI,EAAE,CACjC,CACN,CACJ,CAAC;QAGJ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC/C,WAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,WAAW;gBAC7B,iBAAO,CAAC,IAAI,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,qBAAqB,CAAC,CACnD,CAAC;QAGJ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,eAAe,CAAC;YAChD,WAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,YAAY;gBAC9B,IAAA,uBAAY,EAAC,GAAG,CAAC,GAAG,CAAC,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,sBAAsB,KAAI,EAAE,CAAC,CAAC,CAAC,CACpE,CAAC;QAGJ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC/C,WAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,WAAW;gBAC7B,IAAA,kCAAW,EACT,IAAA,0BAAS,EACP;oBACE,SAAS,EAAE,IAAI;oBACf,cAAc,EAAE,IAAI;oBACpB,YAAY,EAAE,IAAI;iBACnB,EACD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,kBAAkB,KAAI,EAAE,CACtC,CACF,CACJ,CAAC;QAGJ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YACtD,WAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,kBAAkB,IAAI,wCAAuB,CAAC,CAAC;QAG7E,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACjD,WAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,IAAI,oCAAiB,CAAC,CAAC;QAGlE,IAAI,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,0CAAE,UAAU;YACtC,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;gBACxD,WAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;QAGL,MAAM,aAAa,GAAG,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,OAAO,CAAC;QAC3C,MAAM,eAAe,GAAG,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,OAAO,KAAI,EAAE,CAAC;QACrD,MAAM,eAAe,GAAG,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,OAAO,KAAI,EAAE,CAAC;QAGrD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC/C,WAAG,CAAC,GAAG,CACL,MAAM,EACN,eAAe,CAAC,eAAe;gBAC7B,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;oBACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC;gBAChE,CAAC,CAAC,CACL,CAAC;QAGJ,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/C,MAAM,kBAAkB,GAAG,eAAe,CAAC,YAAY;gBACrD,CAAC,CAAC,MAAM,eAAe,CAAC,YAAY,CAAC,WAAW,CAAC;gBACjD,CAAC,CAAC,MAAM,IAAA,4CAAqB,EAAC,WAAW,CAAC,CAAC;YAC7C,WAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC9B,CAAC;QAGD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;YAC3E,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU;gBAC3C,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC;gBAC/C,CAAC,CAAC,MAAM,IAAA,2BAAa,EAAC,WAAW,CAAC,CAAC;YACrC,WAAG,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC9B,CAAC;QAGD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACtD,MAAM,YAAY,GAAG,eAAe,CAAC,kBAAkB;gBACrD,CAAC,CAAC,MAAM,eAAe,CAAC,kBAAkB,CAAC,WAAW,CAAC;gBACvD,CAAC,CAAC,MAAM,IAAA,mCAAqB,EAAC,WAAW,CAAC,CAAC;YAC7C,WAAG,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAChC,CAAC;QAED,WAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAA,kDAAoC,GAAE,CAAC,CAAC;QAGxD,IAAI,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,UAAU,EAAE,CAAC;YAC9B,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC1C,WAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC;QAGD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YACvD,WAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,kBAAkB,IAAI,kCAAY,CAAC,CAAC;QAElE,OAAO,WAAG,CAAC;IACb,CAAC;CAAA","sourcesContent":["import express from \"express\";\nimport cors from \"cors\";\nimport cookieParser from \"cookie-parser\";\nimport { getAuthRouter } from \"./modules/auth/auth.router\";\nimport {\n  getPrismaModelsRouter,\n  getAvailableResourcesAndRoutesRouter,\n} from \"./modules/base/base.router\";\nimport errorHandler from \"./modules/error-handler/error-handler.controller\";\nimport { rateLimit } from \"express-rate-limit\";\nimport path from \"path\";\nimport * as dotenv from \"dotenv\";\nimport compression from \"compression\";\nimport { handleRequestLogs } from \"./modules/base/base.middlewares\";\nimport {\n  checkDatabaseConnection,\n  loadPrismaModule,\n} from \"./utils/helpers/prisma.helpers\";\nimport { getFileUploaderRouter } from \"./modules/file-uploader/file-uploader.router\";\nimport { ArkosConfig } from \"./types/arkos-config\";\nimport { queryParser } from \"./utils/helpers/query-parser.helpers\";\nimport deepmerge from \"./utils/helpers/deepmerge.helper\";\n\nconst ENV = process.env.NODE_ENV;\nlet envPath = \".env\";\n\n// Default to `.env.local` if available in any environment\nif (ENV === \"production\") {\n  envPath = path.resolve(process.cwd(), \".env.production\");\n} else if (ENV === \"staging\") {\n  envPath = path.resolve(process.cwd(), \".env.staging\");\n} else if (ENV === \"development\") {\n  envPath = path.resolve(process.cwd(), \".env.development\");\n} else if (ENV === \"local\") {\n  // For local development, .env.local can be used\n  envPath = path.resolve(process.cwd(), \".env.local\");\n}\n\n// Optionally, add support for `.env.test`, `.env.qa`, or other environments if required\nelse if (ENV === \"test\") {\n  envPath = path.resolve(process.cwd(), \".env.test\");\n} else if (ENV === \"qa\") {\n  envPath = path.resolve(process.cwd(), \".env.qa\");\n}\n\ndotenv.config({ path: envPath });\n\nexport const app: express.Express = express();\n\nexport async function bootstrap(\n  arkosConfig: ArkosConfig\n): Promise<express.Express> {\n  await loadPrismaModule();\n\n  if (arkosConfig.configureApp) await arkosConfig.configureApp(app);\n\n  const middlewaresConfig = arkosConfig?.middlewares;\n  const disabledMiddlewares = middlewaresConfig?.disable || [];\n  const replacedMiddlewares = middlewaresConfig?.replace || {};\n\n  // Compression middleware\n  if (!disabledMiddlewares.includes(\"compression\"))\n    app.use(\n      replacedMiddlewares.compression ||\n        compression(arkosConfig?.compressionOptions)\n    );\n\n  // Global rate limit middleware\n  if (!disabledMiddlewares.includes(\"global-rate-limit\"))\n    app.use(\n      replacedMiddlewares.globalRateLimit ||\n        rateLimit(\n          deepmerge(\n            {\n              windowMs: 60 * 1000,\n              limit: 1000,\n              standardHeaders: \"draft-7\",\n              legacyHeaders: false,\n            },\n            arkosConfig?.globalRequestRateLimitOptions || {}\n          )\n        )\n    );\n\n  // CORS middleware\n  if (!disabledMiddlewares.includes(\"cors\"))\n    app.use(\n      replacedMiddlewares.cors ||\n        cors(\n          arkosConfig?.cors?.customHandler\n            ? arkosConfig.cors.customHandler\n            : deepmerge(\n                {\n                  origin: (\n                    origin: string,\n                    cb: (err: Error | null, allow?: boolean) => void\n                  ) => {\n                    const allowed = arkosConfig?.cors?.allowedOrigins;\n\n                    if (allowed === \"*\") {\n                      cb(null, true);\n                    } else if (Array.isArray(allowed)) {\n                      cb(null, !origin || allowed.includes(origin));\n                    } else if (typeof allowed === \"string\") {\n                      cb(null, !origin || allowed === origin);\n                    } else {\n                      cb(null, false);\n                    }\n                  },\n                  methods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"PATCH\", \"OPTIONS\"],\n                  allowedHeaders: [\n                    \"Content-Type\",\n                    \"Authorization\",\n                    \"Connection\",\n                  ],\n                  credentials: true,\n                },\n                arkosConfig?.cors?.options || {}\n              )\n        )\n    );\n\n  // JSON body parser middleware\n  if (!disabledMiddlewares.includes(\"express-json\"))\n    app.use(\n      replacedMiddlewares.expressJson ||\n        express.json(arkosConfig?.jsonBodyParserOptions)\n    );\n\n  // Cookie parser middleware\n  if (!disabledMiddlewares.includes(\"cookie-parser\"))\n    app.use(\n      replacedMiddlewares.cookieParser ||\n        cookieParser(...[...(arkosConfig?.cookieParserParameters || [])])\n    );\n\n  // Query parser middleware\n  if (!disabledMiddlewares.includes(\"query-parser\"))\n    app.use(\n      replacedMiddlewares.queryParser ||\n        queryParser(\n          deepmerge(\n            {\n              parseNull: true,\n              parseUndefined: true,\n              parseBoolean: true,\n            },\n            arkosConfig?.queryParserOptions || {}\n          )\n        )\n    );\n\n  // Database connection check middleware\n  if (!disabledMiddlewares.includes(\"database-connection\"))\n    app.use(replacedMiddlewares.databaseConnection || checkDatabaseConnection);\n\n  // Request logger middleware\n  if (!disabledMiddlewares.includes(\"request-logger\"))\n    app.use(replacedMiddlewares.requestLogger || handleRequestLogs);\n\n  // Additional custom middlewares\n  if (arkosConfig?.middlewares?.additional)\n    arkosConfig.middlewares.additional.forEach((middleware) => {\n      app.use(middleware);\n    });\n\n  // Configure routers\n  const routersConfig = arkosConfig?.routers;\n  const disabledRouters = routersConfig?.disable || [];\n  const replacedRouters = routersConfig?.replace || {};\n\n  // Welcome endpoint\n  if (!disabledRouters.includes(\"welcome-endpoint\"))\n    app.get(\n      \"/api\",\n      replacedRouters.welcomeEndpoint ||\n        ((req, res) => {\n          res.status(200).json({ message: arkosConfig.welcomeMessage });\n        })\n    );\n\n  // File uploader router\n  if (!disabledRouters.includes(\"file-uploader\")) {\n    const fileUploaderRouter = replacedRouters.fileUploader\n      ? await replacedRouters.fileUploader(arkosConfig)\n      : await getFileUploaderRouter(arkosConfig);\n    app.use(fileUploaderRouter);\n  }\n\n  // Auth router\n  if (!disabledRouters.includes(\"auth-router\") && arkosConfig.authentication) {\n    const authRouter = replacedRouters.authRouter\n      ? await replacedRouters.authRouter(arkosConfig)\n      : await getAuthRouter(arkosConfig);\n    app.use(\"/api\", authRouter);\n  }\n\n  // Prisma models router\n  if (!disabledRouters.includes(\"prisma-models-router\")) {\n    const modelsRouter = replacedRouters.prismaModelsRouter\n      ? await replacedRouters.prismaModelsRouter(arkosConfig)\n      : await getPrismaModelsRouter(arkosConfig);\n    app.use(\"/api\", modelsRouter);\n  }\n\n  app.use(\"/api\", getAvailableResourcesAndRoutesRouter());\n\n  // Additional custom routers\n  if (routersConfig?.additional) {\n    routersConfig.additional.forEach((router) => {\n      app.use(router);\n    });\n  }\n\n  // Global error handler middleware (must be last)\n  if (!disabledMiddlewares.includes(\"global-error-handler\"))\n    app.use(replacedMiddlewares.globalErrorHandler || errorHandler);\n\n  return app;\n}\n"]}

package/dist/cjs/exports/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/exports/index.ts"],"names":[],"mappings":";;;AACA,uEAAmE;AAyBjE,+FAzBO,gCAAc,OAyBP;AAxBhB,sCAAoC;AAepC,MAAM,KAAK,GAAG;IACZ,IAAI,EAAE,gBAAO;CACd,CAAC;AAiBF,kBAAe,KAAK,CAAC","sourcesContent":["import { PrismaModelRouterConfig } from \"../types/prisma-model-router-config\";\nimport { BaseController } from \"./../modules/base/base.controller\";\nimport { initApp } from \"../server\";\nimport {\n  ArkosRequest,\n  ArkosResponse,\n  ArkosNextFunction,\n  ArkosRequestHandler,\n} from \"../types\";\nimport { ArkosConfig } from \"../types/arkos-config\";\n\n/**\n * Initializes the Arkos application.\n *\n * @module arkos\n * @property {Function} init - Function to initialize the app.\n */\nconst arkos = {\n  init: initApp,\n};\n\nexport {\n  ArkosRequest,\n  ArkosResponse,\n  ArkosNextFunction,\n  ArkosRequestHandler,\n  BaseController,\n  ArkosConfig,\n  PrismaModelRouterConfig,\n};\n\n/**\n * Main entry point for the Arkos module.\n *\n * @module arkos\n */\nexport default arkos;\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/exports/index.ts"],"names":[],"mappings":";;;AACA,uEAAmE;AAyBjE,+FAzBO,gCAAc,OAyBP;AAxBhB,sCAAoC;AAepC,MAAM,KAAK,GAAG;IACZ,IAAI,EAAE,gBAAO;CACd,CAAC;AAiBF,kBAAe,KAAK,CAAC","sourcesContent":["import { RouterConfig } from \"../types/router-config\";\nimport { BaseController } from \"./../modules/base/base.controller\";\nimport { initApp } from \"../server\";\nimport {\n  ArkosRequest,\n  ArkosResponse,\n  ArkosNextFunction,\n  ArkosRequestHandler,\n} from \"../types\";\nimport { ArkosConfig } from \"../types/arkos-config\";\n\n/**\n * Initializes the Arkos application.\n *\n * @module arkos\n * @property {Function} init - Function to initialize the app.\n */\nconst arkos = {\n  init: initApp,\n};\n\nexport {\n  ArkosRequest,\n  ArkosResponse,\n  ArkosNextFunction,\n  ArkosRequestHandler,\n  BaseController,\n  ArkosConfig,\n  RouterConfig,\n};\n\n/**\n * Main entry point for the Arkos module.\n *\n * @module arkos\n */\nexport default arkos;\n"]}

package/dist/cjs/modules/auth/auth.controller.js

@@ -22,7 +22,7 @@ const models_helpers_1 = require("../../utils/helpers/models.helpers");
 const deepmerge_helper_1 = __importDefault(require("../../utils/helpers/deepmerge.helper"));
 const arkos_env_1 = __importDefault(require("../../utils/arkos-env"));
 const server_1 = require("../../server");
-const auth_helpers_1 = require("./utils/helpers/auth.helpers");
+const auth_controller_helpers_1 = require("./utils/helpers/auth.controller.helpers");
 exports.defaultExcludedUserFields = {
     password: false,
 };
@@ -41,11 +41,11 @@ const authControllerFactory = (...args_1) => __awaiter(void 0, [...args_1], void
                     delete req.user[key];
             });
             if (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe) {
-                req.responseData = user;
+                req.responseData = { data: user };
                 req.responseStatus = 200;
                 return next();
             }
-            res.status(200).json({ data: req.user });
+            res.status(200).json({ data: user });
         })),
         updateMe: (0, catch_async_1.default)((req, res, next) => __awaiter(void 0, void 0, void 0, function* () {
             if ("password" in req.body)
@@ -75,52 +75,65 @@ const authControllerFactory = (...args_1) => __awaiter(void 0, [...args_1], void
             res.status(204).json();
         })),
         login: (0, catch_async_1.default)((req, res, next) => __awaiter(void 0, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f;
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
             const authConfigs = (_a = (0, server_1.getArkosConfig)()) === null || _a === void 0 ? void 0 : _a.authentication;
-            const usernameField = (0, auth_helpers_1.determineUsernameField)(req);
-            const usernameValue = req.body[usernameField];
+            const usernameField = (0, auth_controller_helpers_1.determineUsernameField)(req);
+            const topLevelField = usernameField.split(".")[0];
+            const usernameValue = req.body[topLevelField];
             const { password } = req.body;
             if (!usernameValue || !password) {
-                return next(new app_error_1.default(`Please provide ${usernameField} and password`, 400));
+                return next(new app_error_1.default(`Please provide ${topLevelField} and password`, 400));
             }
             const prisma = (0, prisma_helpers_1.getPrismaInstance)();
-            const whereClause = {};
-            whereClause[usernameField] = usernameValue;
-            const user = yield prisma.user.findUnique({
+            let whereClause;
+            if (usernameField.includes(".")) {
+                const valueToFind = (0, auth_controller_helpers_1.getNestedValue)(req.body, usernameField);
+                if (valueToFind === undefined) {
+                    return next(new app_error_1.default(`Invalid ${usernameField} provided`, 400));
+                }
+                whereClause = (0, auth_controller_helpers_1.createPrismaWhereClause)(usernameField, valueToFind);
+            }
+            else {
+                whereClause = { [usernameField]: usernameValue };
+            }
+            const user = yield prisma.user.findFirst({
                 where: whereClause,
             });
             if (!user ||
                 !(yield auth_service_1.default.isCorrectPassword(password, user.password))) {
-                return next(new app_error_1.default(`Incorrect ${usernameField} or password`, 401));
+                return next(new app_error_1.default(`Incorrect ${topLevelField.toLowerCase()} or password`, 401));
             }
             const token = auth_service_1.default.signJwtToken(user.id);
             const cookieOptions = {
                 expires: new Date(Date.now() +
-                    Number(((_b = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.jwt) === null || _b === void 0 ? void 0 : _b.cookieExpiresIn) ||
-                        process.env.JWT_COOKIE_EXPIRES_IN ||
-                        arkos_env_1.default.JWT_COOKIE_EXPIRES_IN) *
+                    Number((0, auth_controller_helpers_1.toMs)(((_b = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.jwt) === null || _b === void 0 ? void 0 : _b.expiresIn) ||
+                        arkos_env_1.default.JWT_EXPIRES_IN)) *
                         24 *
                         60 *
                         60 *
                         1000),
-                httpOnly: true,
-                secure: req.secure || req.headers["x-forwarded-proto"] === "https",
-                sameSite: ((_c = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.jwt) === null || _c === void 0 ? void 0 : _c.secret) || process.env.JWT_SECURE !== "false"
-                    ? "lax"
-                    : "none",
+                httpOnly: ((_d = (_c = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.jwt) === null || _c === void 0 ? void 0 : _c.cookie) === null || _d === void 0 ? void 0 : _d.httpOnly) ||
+                    process.env.JWT_COOKIE_HTTP_ONLY === "true" ||
+                    true,
+                secure: ((_f = (_e = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.jwt) === null || _e === void 0 ? void 0 : _e.cookie) === null || _f === void 0 ? void 0 : _f.secure) ||
+                    process.env.JWT_COOKIE_SECURE === "true" ||
+                    req.secure ||
+                    req.headers["x-forwarded-proto"] === "https",
+                sameSite: ((_h = (_g = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.jwt) === null || _g === void 0 ? void 0 : _g.cookie) === null || _h === void 0 ? void 0 : _h.sameSite) ||
+                    process.env.JWT_COOKIE_SAME_SITE ||
+                    process.env.NODE_ENV === "production"
+                    ? "none"
+                    : "lax",
             };
-            if (process.env.NODE_ENV === "production" &&
-                (((_d = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.jwt) === null || _d === void 0 ? void 0 : _d.secret) || process.env.JWT_SECURE !== "false"))
-                cookieOptions.secure = true;
             if (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterLogin) {
                 req.responseData = { accessToken: token };
                 req.responseStatus = 200;
                 return next();
             }
-            if (((_e = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.login) === null || _e === void 0 ? void 0 : _e.sendAccessTokenThrough) === "response-only") {
+            if (((_j = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.login) === null || _j === void 0 ? void 0 : _j.sendAccessTokenThrough) === "response-only") {
                 res.status(200).json({ accessToken: token });
             }
-            else if (((_f = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.login) === null || _f === void 0 ? void 0 : _f.sendAccessTokenThrough) === "cookie-only") {
+            else if (((_k = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.login) === null || _k === void 0 ? void 0 : _k.sendAccessTokenThrough) === "cookie-only") {
                 res.cookie("arkos_access_token", token, cookieOptions);
                 res.status(200).send();
             }

package/dist/cjs/modules/auth/auth.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,qFAA4D;AAC5D,iFAAwD;AAGxD,kEAAyC;AACzC,uDAAuD;AAEvD,uEAAuE;AACvE,uEAA8E;AAC9E,4FAA6D;AAC7D,sEAA6C;AAC7C,yCAA8C;AAC9C,+DAAsE;AAKzD,QAAA,yBAAyB,GAAG;IACvC,QAAQ,EAAE,KAAK;CAChB,CAAC;AAQK,MAAM,qBAAqB,GAAG,YAA8B,EAAE,mDAAzB,cAAmB,EAAE;IAC/D,MAAM,YAAY,GAAG,IAAA,8BAAe,GAAE,CAAC;IACvC,IAAI,kBAAkB,GAAwB,EAAE,CAAC;IAEjD,MAAM,WAAW,GAAG,MAAM,IAAA,yCAAwB,EAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,WAAW;QAAE,kBAAkB,GAAG,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,kBAAkB,KAAI,EAAE,CAAC;IAE5E,MAAM,uBAAuB,GAAG,IAAI,CAAC,SAAS,CAC5C,IAAA,0BAAS,EACP,CAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,YAAY,KAAI,EAAE,EACtC,CAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,OAAO,KAAI,EAAE,CAClC,IAAI,EAAE,CACR,CAAC;IAEF,OAAO;QAIL,KAAK,EAAE,IAAA,qBAAU,EACf,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,CAC7C,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,uBAAuB,CACxB,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,iCAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,GAAG,CAAC,IAAI;oBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,GAAiB,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;YAEH,IAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,EAAE,CAAC;gBAC5B,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;gBACxB,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC,CAAA,CACF;QAKD,QAAQ,EAAE,IAAA,qBAAU,EAClB,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,IAAI,UAAU,IAAI,GAAG,CAAC,IAAI;gBACxB,MAAM,IAAI,mBAAQ,CAChB,+DAA+D,EAC/D,GAAG,CACJ,CAAC;YAEJ,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC,SAAS,CAC/C,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,GAAG,CAAC,IAAI,EACR,uBAAuB,CACxB,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,iCAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,GAAG,CAAC,IAAI;oBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,GAAiB,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;YAEH,IAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,EAAE,CAAC;gBAC5B,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;gBACxB,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC,CAAA,CACF;QAKD,MAAM,EAAE,IAAA,qBAAU,EAChB,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,UAAU,EAAE;gBAC3C,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBACzC,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,IAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,EAAE,CAAC;gBAC7B,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;gBACxB,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC,CAAA,CACF;QAMD,KAAK,EAAE,IAAA,qBAAU,EACf,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;;YACF,MAAM,WAAW,GAAG,MAAA,IAAA,uBAAc,GAAE,0CAAE,cAAc,CAAC;YACrD,MAAM,aAAa,GAAG,IAAA,qCAAsB,EAAC,GAAG,CAAC,CAAC;YAElD,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC9C,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAE9B,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChC,OAAO,IAAI,CACT,IAAI,mBAAQ,CAAC,kBAAkB,aAAa,eAAe,EAAE,GAAG,CAAC,CAClE,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;YAGnC,MAAM,WAAW,GAAQ,EAAE,CAAC;YAC5B,WAAW,CAAC,aAAa,CAAC,GAAG,aAAa,CAAC;YAE3C,MAAM,IAAI,GAAG,MAAO,MAAc,CAAC,IAAI,CAAC,UAAU,CAAC;gBACjD,KAAK,EAAE,WAAW;aACnB,CAAC,CAAC;YAEH,IACE,CAAC,IAAI;gBACL,CAAC,CAAC,MAAM,sBAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAC/D,CAAC;gBACD,OAAO,IAAI,CACT,IAAI,mBAAQ,CAAC,aAAa,aAAa,cAAc,EAAE,GAAG,CAAC,CAC5D,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,sBAAW,CAAC,YAAY,CAAC,IAAI,CAAC,EAAG,CAAC,CAAC;YAEjD,MAAM,aAAa,GAAkB;gBACnC,OAAO,EAAE,IAAI,IAAI,CACf,IAAI,CAAC,GAAG,EAAE;oBACR,MAAM,CACJ,CAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,GAAG,0CAAE,eAAe;wBAC/B,OAAO,CAAC,GAAG,CAAC,qBAAqB;wBACjC,mBAAQ,CAAC,qBAAqB,CACjC;wBACC,EAAE;wBACF,EAAE;wBACF,EAAE;wBACF,IAAI,CACT;gBACD,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO;gBAClE,QAAQ,EACN,CAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,GAAG,0CAAE,MAAM,KAAI,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,OAAO;oBAC5D,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,MAAM;aACb,CAAC;YAEF,IACE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBACrC,CAAC,CAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,GAAG,0CAAE,MAAM,KAAI,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,OAAO,CAAC;gBAEhE,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC;YAE9B,IAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,EAAE,CAAC;gBAC5B,GAAG,CAAC,YAAY,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;gBAC1C,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,IAAI,CAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,KAAK,0CAAE,sBAAsB,MAAK,eAAe,EAAE,CAAC;gBACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/C,CAAC;iBAAM,IACL,CAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,KAAK,0CAAE,sBAAsB,MAAK,aAAa,EAC5D,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;gBACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;gBACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC,CAAA,CACF;QAKD,MAAM,EAAE,IAAA,qBAAU,EAChB,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAEzC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,SAAS,CACtC,GAAG,CAAC,IAAI,EACR,uBAAuB,CACxB,CAAC;YAEF,IAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,EAAE,CAAC;gBAC7B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,iCAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CAAA,CACF;QAKD,cAAc,EAAE,IAAA,qBAAU,EACxB,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;;YACF,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAElD,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW;gBAClC,OAAO,IAAI,CACT,IAAI,mBAAQ,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAClE,CAAC;YAEJ,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAEtB,IAAI,CAAC,IAAI,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,MAAK,KAAK,KAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,oBAAoB,CAAA;gBACjE,OAAO,IAAI,CAAC,IAAI,mBAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,CAAC;YAGpD,MAAM,iBAAiB,GAAG,MAAM,sBAAW,CAAC,iBAAiB,CAC3D,MAAM,CAAC,eAAe,CAAC,EACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CACtB,CAAC;YAEF,IAAI,CAAC,iBAAiB;gBACpB,OAAO,IAAI,CAAC,IAAI,mBAAQ,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC,CAAC;YAGnE,IAAI,CAAC,sBAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBACvD,MAAM,eAAe,GAAG,MAAA,IAAA,uBAAc,GAAE,0CAAE,cAAc,CAAC;gBAEzD,OAAO,IAAI,CACT,IAAI,mBAAQ,CACV,CAAA,MAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,kBAAkB,0CAAE,OAAO;oBAC1C,2FAA2F,EAC7F,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;YAGnC,MAAO,MAAc,CAAC,IAAI,CAAC,MAAM,CAAC;gBAChC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;gBACtB,IAAI,EAAE;oBACJ,QAAQ,EAAE,MAAM,sBAAW,CAAC,YAAY,CAAC,WAAW,CAAC;oBACrD,iBAAiB,EAAE,IAAI,IAAI,EAAE;iBAC9B;aACF,CAAC,CAAC;YAEH,IAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,mBAAmB,EAAE,CAAC;gBACpC,GAAW,CAAC,cAAc,GAAG;oBAC5B,IAAI;iBACL,CAAC;gBACF,GAAG,CAAC,YAAY,GAAG;oBACjB,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,gCAAgC;iBAC1C,CAAC;gBACF,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;QACL,CAAC,CAAA,CACF;KACF,CAAC;AACJ,CAAC,CAAA,CAAC;AAvSW,QAAA,qBAAqB,yBAuShC","sourcesContent":["import catchAsync from \"../error-handler/utils/catch-async\";\nimport AppError from \"../error-handler/utils/app-error\";\nimport { CookieOptions } from \"express\";\nimport { ArkosRequest, ArkosResponse, ArkosNextFunction } from \"../../types\";\nimport authService from \"./auth.service\";\nimport { getBaseServices } from \"../base/base.service\";\nimport { User } from \"../../types\";\nimport { getPrismaInstance } from \"../../utils/helpers/prisma.helpers\";\nimport { importPrismaModelModules } from \"../../utils/helpers/models.helpers\";\nimport deepmerge from \"../../utils/helpers/deepmerge.helper\";\nimport arkosEnv from \"../../utils/arkos-env\";\nimport { getArkosConfig } from \"../../server\";\nimport { determineUsernameField } from \"./utils/helpers/auth.helpers\";\n\n/**\n * Default fields to exclude from user object when returning to client\n */\nexport const defaultExcludedUserFields = {\n  password: false,\n};\n\n/**\n * Factory function to create authentication controller with configurable middlewares\n *\n * @param middlewares - Optional middleware functions to execute after controller actions\n * @returns An object containing all authentication controller methods\n */\nexport const authControllerFactory = async (middlewares: any = {}) => {\n  const baseServices = getBaseServices();\n  let prismaQueryOptions: Record<string, any> = {};\n\n  const userModules = await importPrismaModelModules(\"user\");\n  if (userModules) prismaQueryOptions = userModules?.prismaQueryOptions || {};\n\n  const stringifiedQueryOptions = JSON.stringify(\n    deepmerge(\n      prismaQueryOptions?.queryOptions || {},\n      prismaQueryOptions?.findOne || {}\n    ) || {}\n  );\n\n  return {\n    /**\n     * Retrieves the current authenticated user's information\n     */\n    getMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const user = await baseServices[\"user\"].findOne(\n          { id: req.user!.id },\n          stringifiedQueryOptions\n        );\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (req.user) delete req.user[key as keyof User];\n        });\n\n        if (middlewares?.afterGetMe) {\n          req.responseData = user;\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: req.user });\n      }\n    ),\n\n    /**\n     * Updates the current authenticated user's information\n     */\n    updateMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        if (\"password\" in req.body)\n          throw new AppError(\n            \"In order to update password use the update-password endpoint.\",\n            400\n          );\n\n        const user = await baseServices[\"user\"].updateOne(\n          { id: req.user!.id },\n          req.body,\n          stringifiedQueryOptions\n        );\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (req.user) delete req.user[key as keyof User];\n        });\n\n        if (middlewares?.afterGetMe) {\n          req.responseData = user;\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: req.user });\n      }\n    ),\n\n    /**\n     * Logs out the current user by invalidating their access token cookie\n     */\n    logout: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        res.cookie(\"arkos_access_token\", \"no-token\", {\n          expires: new Date(Date.now() + 10 * 1000),\n          httpOnly: true,\n        });\n\n        if (middlewares?.afterLogout) {\n          req.responseData = null;\n          req.responseStatus = 204;\n          return next();\n        }\n\n        res.status(204).json();\n      }\n    ),\n\n    /**\n     * Authenticates a user using configurable username field and password\n     * Username field can be specified in query parameter or config\n     */\n    login: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const authConfigs = getArkosConfig()?.authentication;\n        const usernameField = determineUsernameField(req);\n\n        const usernameValue = req.body[usernameField];\n        const { password } = req.body;\n\n        if (!usernameValue || !password) {\n          return next(\n            new AppError(`Please provide ${usernameField} and password`, 400)\n          );\n        }\n\n        const prisma = getPrismaInstance();\n\n        // Create dynamic where clause based on username field\n        const whereClause: any = {};\n        whereClause[usernameField] = usernameValue;\n\n        const user = await (prisma as any).user.findUnique({\n          where: whereClause,\n        });\n\n        if (\n          !user ||\n          !(await authService.isCorrectPassword(password, user.password))\n        ) {\n          return next(\n            new AppError(`Incorrect ${usernameField} or password`, 401)\n          );\n        }\n\n        const token = authService.signJwtToken(user.id!);\n\n        const cookieOptions: CookieOptions = {\n          expires: new Date(\n            Date.now() +\n              Number(\n                authConfigs?.jwt?.cookieExpiresIn ||\n                  process.env.JWT_COOKIE_EXPIRES_IN ||\n                  arkosEnv.JWT_COOKIE_EXPIRES_IN\n              ) *\n                24 *\n                60 *\n                60 *\n                1000\n          ),\n          httpOnly: true,\n          secure: req.secure || req.headers[\"x-forwarded-proto\"] === \"https\",\n          sameSite:\n            authConfigs?.jwt?.secret || process.env.JWT_SECURE !== \"false\"\n              ? \"lax\"\n              : \"none\",\n        };\n\n        if (\n          process.env.NODE_ENV === \"production\" &&\n          (authConfigs?.jwt?.secret || process.env.JWT_SECURE !== \"false\")\n        )\n          cookieOptions.secure = true;\n\n        if (middlewares?.afterLogin) {\n          req.responseData = { accessToken: token };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        if (authConfigs?.login?.sendAccessTokenThrough === \"response-only\") {\n          res.status(200).json({ accessToken: token });\n        } else if (\n          authConfigs?.login?.sendAccessTokenThrough === \"cookie-only\"\n        ) {\n          res.cookie(\"arkos_access_token\", token, cookieOptions);\n          res.status(200).send();\n        } else {\n          res.cookie(\"arkos_access_token\", token, cookieOptions);\n          res.status(200).json({ accessToken: token });\n        }\n      }\n    ),\n\n    /**\n     * Creates a new user account\n     */\n    signup: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const userService = baseServices[\"user\"];\n\n        const user = await userService.createOne(\n          req.body,\n          stringifiedQueryOptions\n        );\n\n        if (middlewares?.afterSignup) {\n          req.responseData = { data: user };\n          req.responseStatus = 201;\n          return next();\n        }\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          delete user[key as keyof User];\n        });\n\n        res.status(201).json({ data: user });\n      }\n    ),\n\n    /**\n     * Updates the password of the authenticated user\n     */\n    updatePassword: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const { currentPassword, newPassword } = req.body;\n\n        if (!currentPassword || !newPassword)\n          return next(\n            new AppError(\"currentPassword and newPassword are required\", 400)\n          );\n\n        const user = req.user;\n\n        if (!user || user?.isActive === false || user?.deletedSelfAccountAt)\n          return next(new AppError(\"User not found!\", 404));\n\n        // Check if the current password is correct\n        const isPasswordCorrect = await authService.isCorrectPassword(\n          String(currentPassword),\n          String(user.password)\n        );\n\n        if (!isPasswordCorrect)\n          return next(new AppError(\"Current password is incorrect.\", 400));\n\n        // Check password strength (optional but recommended)\n        if (!authService.isPasswordStrong(String(newPassword))) {\n          const initAuthConfigs = getArkosConfig()?.authentication;\n\n          return next(\n            new AppError(\n              initAuthConfigs?.passwordValidation?.message ||\n                \"Password must contain at least one uppercase letter, one lowercase letter, and one number\",\n              400\n            )\n          );\n        }\n\n        const prisma = getPrismaInstance();\n\n        // Update the password\n        await (prisma as any).user.update({\n          where: { id: user.id },\n          data: {\n            password: await authService.hashPassword(newPassword),\n            passwordChangedAt: new Date(),\n          },\n        });\n\n        if (middlewares?.afterUpdatePassword) {\n          (req as any).additionalData = {\n            user,\n          };\n          req.responseData = {\n            status: \"success\",\n            message: \"Password updated successfully!\",\n          };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({\n          status: \"success\",\n          message: \"Password updated successfully!\",\n        });\n      }\n    ),\n  };\n};\n"]}
+{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,qFAA4D;AAC5D,iFAAwD;AAGxD,kEAAyC;AACzC,uDAAuD;AAEvD,uEAAuE;AACvE,uEAA8E;AAC9E,4FAA6D;AAC7D,sEAA6C;AAC7C,yCAA8C;AAC9C,qFAMiD;AAKpC,QAAA,yBAAyB,GAAG;IACvC,QAAQ,EAAE,KAAK;CAChB,CAAC;AAQK,MAAM,qBAAqB,GAAG,YAA8B,EAAE,mDAAzB,cAAmB,EAAE;IAC/D,MAAM,YAAY,GAAG,IAAA,8BAAe,GAAE,CAAC;IACvC,IAAI,kBAAkB,GAAwB,EAAE,CAAC;IAEjD,MAAM,WAAW,GAAG,MAAM,IAAA,yCAAwB,EAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,WAAW;QAAE,kBAAkB,GAAG,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,kBAAkB,KAAI,EAAE,CAAC;IAE5E,MAAM,uBAAuB,GAAG,IAAI,CAAC,SAAS,CAC5C,IAAA,0BAAS,EACP,CAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,YAAY,KAAI,EAAE,EACtC,CAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,OAAO,KAAI,EAAE,CAClC,IAAI,EAAE,CACR,CAAC;IAEF,OAAO;QAIL,KAAK,EAAE,IAAA,qBAAU,EACf,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,CAC7C,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,uBAAuB,CACxB,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,iCAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,GAAG,CAAC,IAAI;oBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,GAAiB,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;YAEH,IAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,EAAE,CAAC;gBAC5B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CAAA,CACF;QAKD,QAAQ,EAAE,IAAA,qBAAU,EAClB,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,IAAI,UAAU,IAAI,GAAG,CAAC,IAAI;gBACxB,MAAM,IAAI,mBAAQ,CAChB,+DAA+D,EAC/D,GAAG,CACJ,CAAC;YAEJ,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC,SAAS,CAC/C,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,GAAG,CAAC,IAAI,EACR,uBAAuB,CACxB,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,iCAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,GAAG,CAAC,IAAI;oBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,GAAiB,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;YAEH,IAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,EAAE,CAAC;gBAC5B,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;gBACxB,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC,CAAA,CACF;QAKD,MAAM,EAAE,IAAA,qBAAU,EAChB,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,UAAU,EAAE;gBAC3C,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBACzC,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,IAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,EAAE,CAAC;gBAC7B,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;gBACxB,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC,CAAA,CACF;QAOD,KAAK,EAAE,IAAA,qBAAU,EACf,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;;YACF,MAAM,WAAW,GAAG,MAAA,IAAA,uBAAc,GAAE,0CAAE,cAAc,CAAC;YAErD,MAAM,aAAa,GAAG,IAAA,gDAAsB,EAAC,GAAG,CAAC,CAAC;YAGlD,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC9C,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAE9B,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChC,OAAO,IAAI,CACT,IAAI,mBAAQ,CAAC,kBAAkB,aAAa,eAAe,EAAE,GAAG,CAAC,CAClE,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;YAGnC,IAAI,WAAgC,CAAC;YAErC,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAEhC,MAAM,WAAW,GAAG,IAAA,wCAAc,EAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,OAAO,IAAI,CAAC,IAAI,mBAAQ,CAAC,WAAW,aAAa,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtE,CAAC;gBACD,WAAW,GAAG,IAAA,iDAAuB,EAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBAEN,WAAW,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,CAAC;YACnD,CAAC;YAGD,MAAM,IAAI,GAAG,MAAO,MAAc,CAAC,IAAI,CAAC,SAAS,CAAC;gBAChD,KAAK,EAAE,WAAW;aACnB,CAAC,CAAC;YAEH,IACE,CAAC,IAAI;gBACL,CAAC,CAAC,MAAM,sBAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAC/D,CAAC;gBACD,OAAO,IAAI,CACT,IAAI,mBAAQ,CACV,aAAa,aAAa,CAAC,WAAW,EAAE,cAAc,EACtD,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,sBAAW,CAAC,YAAY,CAAC,IAAI,CAAC,EAAG,CAAC,CAAC;YAEjD,MAAM,aAAa,GAAkB;gBACnC,OAAO,EAAE,IAAI,IAAI,CACf,IAAI,CAAC,GAAG,EAAE;oBACR,MAAM,CACJ,IAAA,8BAAI,EACF,CAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,GAAG,0CAAE,SAAS;wBACxB,mBAAQ,CAAC,cAA6B,CAC1C,CACF;wBACC,EAAE;wBACF,EAAE;wBACF,EAAE;wBACF,IAAI,CACT;gBACD,QAAQ,EACN,CAAA,MAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,GAAG,0CAAE,MAAM,0CAAE,QAAQ;oBAClC,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM;oBAC3C,IAAI;gBACN,MAAM,EACJ,CAAA,MAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,GAAG,0CAAE,MAAM,0CAAE,MAAM;oBAChC,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM;oBACxC,GAAG,CAAC,MAAM;oBACV,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO;gBAC9C,QAAQ,EACN,CAAA,MAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,GAAG,0CAAE,MAAM,0CAAE,QAAQ;oBAClC,OAAO,CAAC,GAAG,CAAC,oBAAoB;oBAChC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;oBACnC,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,KAAK;aACZ,CAAC;YAEF,IAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,EAAE,CAAC;gBAC5B,GAAG,CAAC,YAAY,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;gBAC1C,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,IAAI,CAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,KAAK,0CAAE,sBAAsB,MAAK,eAAe,EAAE,CAAC;gBACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/C,CAAC;iBAAM,IACL,CAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,KAAK,0CAAE,sBAAsB,MAAK,aAAa,EAC5D,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;gBACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;gBACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC,CAAA,CACF;QAKD,MAAM,EAAE,IAAA,qBAAU,EAChB,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAEzC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,SAAS,CACtC,GAAG,CAAC,IAAI,EACR,uBAAuB,CACxB,CAAC;YAEF,IAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,EAAE,CAAC;gBAC7B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,iCAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CAAA,CACF;QAKD,cAAc,EAAE,IAAA,qBAAU,EACxB,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;;YACF,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAElD,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW;gBAClC,OAAO,IAAI,CACT,IAAI,mBAAQ,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAClE,CAAC;YAEJ,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAEtB,IAAI,CAAC,IAAI,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,MAAK,KAAK,KAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,oBAAoB,CAAA;gBACjE,OAAO,IAAI,CAAC,IAAI,mBAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,CAAC;YAGpD,MAAM,iBAAiB,GAAG,MAAM,sBAAW,CAAC,iBAAiB,CAC3D,MAAM,CAAC,eAAe,CAAC,EACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CACtB,CAAC;YAEF,IAAI,CAAC,iBAAiB;gBACpB,OAAO,IAAI,CAAC,IAAI,mBAAQ,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC,CAAC;YAGnE,IAAI,CAAC,sBAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBACvD,MAAM,eAAe,GAAG,MAAA,IAAA,uBAAc,GAAE,0CAAE,cAAc,CAAC;gBAEzD,OAAO,IAAI,CACT,IAAI,mBAAQ,CACV,CAAA,MAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,kBAAkB,0CAAE,OAAO;oBAC1C,2FAA2F,EAC7F,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;YAGnC,MAAO,MAAc,CAAC,IAAI,CAAC,MAAM,CAAC;gBAChC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;gBACtB,IAAI,EAAE;oBACJ,QAAQ,EAAE,MAAM,sBAAW,CAAC,YAAY,CAAC,WAAW,CAAC;oBACrD,iBAAiB,EAAE,IAAI,IAAI,EAAE;iBAC9B;aACF,CAAC,CAAC;YAEH,IAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,mBAAmB,EAAE,CAAC;gBACpC,GAAW,CAAC,cAAc,GAAG;oBAC5B,IAAI;iBACL,CAAC;gBACF,GAAG,CAAC,YAAY,GAAG;oBACjB,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,gCAAgC;iBAC1C,CAAC;gBACF,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;QACL,CAAC,CAAA,CACF;KACF,CAAC;AACJ,CAAC,CAAA,CAAC;AA9TW,QAAA,qBAAqB,yBA8ThC","sourcesContent":["import catchAsync from \"../error-handler/utils/catch-async\";\nimport AppError from \"../error-handler/utils/app-error\";\nimport { CookieOptions } from \"express\";\nimport { ArkosRequest, ArkosResponse, ArkosNextFunction } from \"../../types\";\nimport authService from \"./auth.service\";\nimport { getBaseServices } from \"../base/base.service\";\nimport { User } from \"../../types\";\nimport { getPrismaInstance } from \"../../utils/helpers/prisma.helpers\";\nimport { importPrismaModelModules } from \"../../utils/helpers/models.helpers\";\nimport deepmerge from \"../../utils/helpers/deepmerge.helper\";\nimport arkosEnv from \"../../utils/arkos-env\";\nimport { getArkosConfig } from \"../../server\";\nimport {\n  createPrismaWhereClause,\n  determineUsernameField,\n  getNestedValue,\n  MsDuration,\n  toMs,\n} from \"./utils/helpers/auth.controller.helpers\";\n\n/**\n * Default fields to exclude from user object when returning to client\n */\nexport const defaultExcludedUserFields = {\n  password: false,\n};\n\n/**\n * Factory function to create authentication controller with configurable middlewares\n *\n * @param middlewares - Optional middleware functions to execute after controller actions\n * @returns An object containing all authentication controller methods\n */\nexport const authControllerFactory = async (middlewares: any = {}) => {\n  const baseServices = getBaseServices();\n  let prismaQueryOptions: Record<string, any> = {};\n\n  const userModules = await importPrismaModelModules(\"user\");\n  if (userModules) prismaQueryOptions = userModules?.prismaQueryOptions || {};\n\n  const stringifiedQueryOptions = JSON.stringify(\n    deepmerge(\n      prismaQueryOptions?.queryOptions || {},\n      prismaQueryOptions?.findOne || {}\n    ) || {}\n  );\n\n  return {\n    /**\n     * Retrieves the current authenticated user's information\n     */\n    getMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const user = await baseServices[\"user\"].findOne(\n          { id: req.user!.id },\n          stringifiedQueryOptions\n        );\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (req.user) delete req.user[key as keyof User];\n        });\n\n        if (middlewares?.afterGetMe) {\n          req.responseData = { data: user };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: user });\n      }\n    ),\n\n    /**\n     * Updates the current authenticated user's information\n     */\n    updateMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        if (\"password\" in req.body)\n          throw new AppError(\n            \"In order to update password use the update-password endpoint.\",\n            400\n          );\n\n        const user = await baseServices[\"user\"].updateOne(\n          { id: req.user!.id },\n          req.body,\n          stringifiedQueryOptions\n        );\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (req.user) delete req.user[key as keyof User];\n        });\n\n        if (middlewares?.afterGetMe) {\n          req.responseData = user;\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: req.user });\n      }\n    ),\n\n    /**\n     * Logs out the current user by invalidating their access token cookie\n     */\n    logout: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        res.cookie(\"arkos_access_token\", \"no-token\", {\n          expires: new Date(Date.now() + 10 * 1000),\n          httpOnly: true,\n        });\n\n        if (middlewares?.afterLogout) {\n          req.responseData = null;\n          req.responseStatus = 204;\n          return next();\n        }\n\n        res.status(204).json();\n      }\n    ),\n\n    /**\n     * Authenticates a user using configurable username field and password\n     * Username field can be specified in query parameter or config\n     * Supports nested fields and array queries (e.g., \"profile.nickname\", \"phones.some.number\")\n     */\n    login: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const authConfigs = getArkosConfig()?.authentication;\n\n        const usernameField = determineUsernameField(req);\n\n        // For the error message, we only care about the top-level field name\n        const topLevelField = usernameField.split(\".\")[0];\n        const usernameValue = req.body[topLevelField];\n        const { password } = req.body;\n\n        if (!usernameValue || !password) {\n          return next(\n            new AppError(`Please provide ${topLevelField} and password`, 400)\n          );\n        }\n\n        const prisma = getPrismaInstance();\n\n        // Create appropriate where clause for the query\n        let whereClause: Record<string, any>;\n\n        if (usernameField.includes(\".\")) {\n          // For nested paths, we need to extract the actual value to search for\n          const valueToFind = getNestedValue(req.body, usernameField);\n          if (valueToFind === undefined) {\n            return next(new AppError(`Invalid ${usernameField} provided`, 400));\n          }\n          whereClause = createPrismaWhereClause(usernameField, valueToFind);\n        } else {\n          // Simple field case\n          whereClause = { [usernameField]: usernameValue };\n        }\n\n        // Use findFirst instead of findUnique for complex queries\n        const user = await (prisma as any).user.findFirst({\n          where: whereClause,\n        });\n\n        if (\n          !user ||\n          !(await authService.isCorrectPassword(password, user.password))\n        ) {\n          return next(\n            new AppError(\n              `Incorrect ${topLevelField.toLowerCase()} or password`,\n              401\n            )\n          );\n        }\n\n        const token = authService.signJwtToken(user.id!);\n\n        const cookieOptions: CookieOptions = {\n          expires: new Date(\n            Date.now() +\n              Number(\n                toMs(\n                  authConfigs?.jwt?.expiresIn ||\n                    (arkosEnv.JWT_EXPIRES_IN as MsDuration)\n                )\n              ) *\n                24 *\n                60 *\n                60 *\n                1000\n          ),\n          httpOnly:\n            authConfigs?.jwt?.cookie?.httpOnly ||\n            process.env.JWT_COOKIE_HTTP_ONLY === \"true\" ||\n            true,\n          secure:\n            authConfigs?.jwt?.cookie?.secure ||\n            process.env.JWT_COOKIE_SECURE === \"true\" ||\n            req.secure ||\n            req.headers[\"x-forwarded-proto\"] === \"https\",\n          sameSite:\n            authConfigs?.jwt?.cookie?.sameSite ||\n            process.env.JWT_COOKIE_SAME_SITE ||\n            process.env.NODE_ENV === \"production\"\n              ? \"none\"\n              : \"lax\",\n        };\n\n        if (middlewares?.afterLogin) {\n          req.responseData = { accessToken: token };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        if (authConfigs?.login?.sendAccessTokenThrough === \"response-only\") {\n          res.status(200).json({ accessToken: token });\n        } else if (\n          authConfigs?.login?.sendAccessTokenThrough === \"cookie-only\"\n        ) {\n          res.cookie(\"arkos_access_token\", token, cookieOptions);\n          res.status(200).send();\n        } else {\n          res.cookie(\"arkos_access_token\", token, cookieOptions);\n          res.status(200).json({ accessToken: token });\n        }\n      }\n    ),\n\n    /**\n     * Creates a new user account\n     */\n    signup: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const userService = baseServices[\"user\"];\n\n        const user = await userService.createOne(\n          req.body,\n          stringifiedQueryOptions\n        );\n\n        if (middlewares?.afterSignup) {\n          req.responseData = { data: user };\n          req.responseStatus = 201;\n          return next();\n        }\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          delete user[key as keyof User];\n        });\n\n        res.status(201).json({ data: user });\n      }\n    ),\n\n    /**\n     * Updates the password of the authenticated user\n     */\n    updatePassword: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const { currentPassword, newPassword } = req.body;\n\n        if (!currentPassword || !newPassword)\n          return next(\n            new AppError(\"currentPassword and newPassword are required\", 400)\n          );\n\n        const user = req.user;\n\n        if (!user || user?.isActive === false || user?.deletedSelfAccountAt)\n          return next(new AppError(\"User not found!\", 404));\n\n        // Check if the current password is correct\n        const isPasswordCorrect = await authService.isCorrectPassword(\n          String(currentPassword),\n          String(user.password)\n        );\n\n        if (!isPasswordCorrect)\n          return next(new AppError(\"Current password is incorrect.\", 400));\n\n        // Check password strength (optional but recommended)\n        if (!authService.isPasswordStrong(String(newPassword))) {\n          const initAuthConfigs = getArkosConfig()?.authentication;\n\n          return next(\n            new AppError(\n              initAuthConfigs?.passwordValidation?.message ||\n                \"Password must contain at least one uppercase letter, one lowercase letter, and one number\",\n              400\n            )\n          );\n        }\n\n        const prisma = getPrismaInstance();\n\n        // Update the password\n        await (prisma as any).user.update({\n          where: { id: user.id },\n          data: {\n            password: await authService.hashPassword(newPassword),\n            passwordChangedAt: new Date(),\n          },\n        });\n\n        if (middlewares?.afterUpdatePassword) {\n          (req as any).additionalData = {\n            user,\n          };\n          req.responseData = {\n            status: \"success\",\n            message: \"Password updated successfully!\",\n          };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({\n          status: \"success\",\n          message: \"Password updated successfully!\",\n        });\n      }\n    ),\n  };\n};\n"]}

package/dist/cjs/modules/auth/auth.router.js

@@ -20,6 +20,7 @@ const express_rate_limit_1 = __importDefault(require("express-rate-limit"));
 const models_helpers_1 = require("../../utils/helpers/models.helpers");
 const base_middlewares_1 = require("../base/base.middlewares");
 const deepmerge_helper_1 = __importDefault(require("../../utils/helpers/deepmerge.helper"));
+const base_controller_helpers_1 = require("../../utils/helpers/base.controller.helpers");
 const router = (0, express_1.Router)();
 function getAuthRouter(arkosConfigs) {
     return __awaiter(this, void 0, void 0, function* () {
@@ -32,7 +33,7 @@ function getAuthRouter(arkosConfigs) {
             : (_b = middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe) !== null && _b !== void 0 ? _b : base_middlewares_1.sendResponse, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe) && (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe)
             ? middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe
             : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse)
-            .patch("/users/me", auth_service_1.default.authenticate, (_c = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe) !== null && _c !== void 0 ? _c : authController.getMe, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe)
+            .patch("/users/me", auth_service_1.default.authenticate, (0, base_controller_helpers_1.handleRequestBodyValidationAndTransformation)("auth", "updateMe"), (_c = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe) !== null && _c !== void 0 ? _c : authController.getMe, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe)
             ? authController.getMe
             : (_d = middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe) !== null && _d !== void 0 ? _d : base_middlewares_1.sendResponse, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeGetMe) && (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe)
             ? middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterGetMe
@@ -48,7 +49,7 @@ function getAuthRouter(arkosConfigs) {
             standardHeaders: "draft-7",
             legacyHeaders: false,
         }, ((_g = arkosConfigs === null || arkosConfigs === void 0 ? void 0 : arkosConfigs.authentication) === null || _g === void 0 ? void 0 : _g.requestRateLimitOptions) || {})));
-        router.post("/auth/login", (_h = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeLogin) !== null && _h !== void 0 ? _h : authController.login, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeLogin)
+        router.post("/auth/login", (0, base_controller_helpers_1.handleRequestBodyValidationAndTransformation)("auth", "login"), (_h = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeLogin) !== null && _h !== void 0 ? _h : authController.login, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeLogin)
             ? authController.login
             : (_j = middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterLogin) !== null && _j !== void 0 ? _j : base_middlewares_1.sendResponse, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeLogin) && (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterLogin)
             ? middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterLogin
@@ -58,12 +59,12 @@ function getAuthRouter(arkosConfigs) {
             : (_l = middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterLogout) !== null && _l !== void 0 ? _l : base_middlewares_1.sendResponse, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeLogout) && (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterLogout)
             ? middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterLogout
             : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
-        router.post("/auth/signup", (_m = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeSignup) !== null && _m !== void 0 ? _m : authController.signup, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeSignup)
+        router.post("/auth/signup", (0, base_controller_helpers_1.handleRequestBodyValidationAndTransformation)("auth", "signup"), (_m = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeSignup) !== null && _m !== void 0 ? _m : authController.signup, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeSignup)
             ? authController.signup
             : (_o = middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterSignup) !== null && _o !== void 0 ? _o : base_middlewares_1.sendResponse, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeSignup) && (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterSignup)
             ? middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterSignup
             : base_middlewares_1.sendResponse, base_middlewares_1.sendResponse);
-        router.post("/auth/update-password", auth_service_1.default.authenticate, (_p = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeUpdatePassword) !== null && _p !== void 0 ? _p : authController.updatePassword, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeUpdatePassword)
+        router.post("/auth/update-password", auth_service_1.default.authenticate, (0, base_controller_helpers_1.handleRequestBodyValidationAndTransformation)("auth", "updatePassword"), (_p = middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeUpdatePassword) !== null && _p !== void 0 ? _p : authController.updatePassword, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeUpdatePassword)
             ? authController.updatePassword
             : (_q = middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterUpdatePassword) !== null && _q !== void 0 ? _q : base_middlewares_1.sendResponse, (middlewares === null || middlewares === void 0 ? void 0 : middlewares.beforeUpdatePassword) && (middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterUpdatePassword)
             ? middlewares === null || middlewares === void 0 ? void 0 : middlewares.afterUpdatePassword

package/dist/cjs/modules/auth/auth.router.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.router.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.router.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAWA,sCA2GC;AAtHD,qCAAiC;AACjC,uDAA0D;AAC1D,kEAAyC;AACzC,4EAA2C;AAC3C,uEAA8E;AAC9E,+DAAwD;AAExD,4FAA6D;AAE7D,MAAM,MAAM,GAAW,IAAA,gBAAM,GAAE,CAAC;AAEhC,SAAsB,aAAa,CAAC,YAAyB;;;QAC3D,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAA,yCAAwB,EAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,MAAM,IAAA,uCAAqB,EAAC,WAAW,CAAC,CAAC;QAEhE,MAAM;aACH,GAAG,CACF,WAAW,EACX,sBAAW,CAAC,YAAY,EACxB,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,cAAc,CAAC,KAAK,EAChD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YACtB,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,mCAAI,+BAAY,EAC3C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,CAAA;YACjD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU;YACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb;aACA,KAAK,CACJ,WAAW,EACX,sBAAW,CAAC,YAAY,EACxB,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,cAAc,CAAC,KAAK,EAChD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YACtB,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,mCAAI,+BAAY,EAC3C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,CAAA;YACjD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU;YACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb;aACA,MAAM,CACL,WAAW,EACX,sBAAW,CAAC,YAAY,EACxB,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,cAAc,CAAC,KAAK,EAChD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YACtB,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,mCAAI,+BAAY,EAC3C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,CAAA;YACjD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU;YACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEJ,MAAM,CAAC,GAAG,CACR,IAAA,4BAAS,EACP,IAAA,0BAAS,EACP;YACE,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;YACT,eAAe,EAAE,SAAS;YAC1B,aAAa,EAAE,KAAK;SACrB,EACD,CAAA,MAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,cAAc,0CAAE,uBAAuB,KAAI,EAAE,CAC5D,CACF,CACF,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,aAAa,EACb,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,cAAc,CAAC,KAAK,EAChD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YACtB,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,mCAAI,+BAAY,EAC3C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,CAAA;YACjD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU;YACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEF,MAAM,CAAC,MAAM,CACX,cAAc,EACd,sBAAW,CAAC,YAAY,EACxB,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY,mCAAI,cAAc,CAAC,MAAM,EAClD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY;YACvB,CAAC,CAAC,cAAc,CAAC,MAAM;YACvB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,+BAAY,EAC5C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,CAAA;YACnD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YAC1B,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,cAAc,EACd,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY,mCAAI,cAAc,CAAC,MAAM,EAClD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY;YACvB,CAAC,CAAC,cAAc,CAAC,MAAM;YACvB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,+BAAY,EAC5C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,CAAA;YACnD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YAC1B,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,sBAAW,CAAC,YAAY,EACxB,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,oBAAoB,mCAAI,cAAc,CAAC,cAAc,EAClE,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,oBAAoB;YAC/B,CAAC,CAAC,cAAc,CAAC,cAAc;YAC/B,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,mBAAmB,mCAAI,+BAAY,EACpD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,oBAAoB,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,mBAAmB,CAAA;YACnE,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,mBAAmB;YAClC,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;CAAA","sourcesContent":["import { Router } from \"express\";\nimport { authControllerFactory } from \"./auth.controller\";\nimport authService from \"./auth.service\";\nimport rateLimit from \"express-rate-limit\";\nimport { importPrismaModelModules } from \"../../utils/helpers/models.helpers\";\nimport { sendResponse } from \"../base/base.middlewares\";\nimport { ArkosConfig } from \"../../types/arkos-config\";\nimport deepmerge from \"../../utils/helpers/deepmerge.helper\";\n\nconst router: Router = Router();\n\nexport async function getAuthRouter(arkosConfigs: ArkosConfig) {\n  const { middlewares } = await importPrismaModelModules(\"auth\");\n  const authController = await authControllerFactory(middlewares);\n\n  router\n    .get(\n      \"/users/me\",\n      authService.authenticate,\n      middlewares?.beforeGetMe ?? authController.getMe,\n      middlewares?.beforeGetMe\n        ? authController.getMe\n        : middlewares?.afterGetMe ?? sendResponse,\n      middlewares?.beforeGetMe && middlewares?.afterGetMe\n        ? middlewares?.afterGetMe\n        : sendResponse,\n      sendResponse\n    )\n    .patch(\n      \"/users/me\",\n      authService.authenticate,\n      middlewares?.beforeGetMe ?? authController.getMe,\n      middlewares?.beforeGetMe\n        ? authController.getMe\n        : middlewares?.afterGetMe ?? sendResponse,\n      middlewares?.beforeGetMe && middlewares?.afterGetMe\n        ? middlewares?.afterGetMe\n        : sendResponse,\n      sendResponse\n    )\n    .delete(\n      \"/users/me\",\n      authService.authenticate,\n      middlewares?.beforeGetMe ?? authController.getMe,\n      middlewares?.beforeGetMe\n        ? authController.getMe\n        : middlewares?.afterGetMe ?? sendResponse,\n      middlewares?.beforeGetMe && middlewares?.afterGetMe\n        ? middlewares?.afterGetMe\n        : sendResponse,\n      sendResponse\n    );\n\n  router.use(\n    rateLimit(\n      deepmerge(\n        {\n          windowMs: 5000,\n          limit: 10,\n          standardHeaders: \"draft-7\",\n          legacyHeaders: false,\n        },\n        arkosConfigs?.authentication?.requestRateLimitOptions || {}\n      )\n    )\n  );\n\n  router.post(\n    \"/auth/login\",\n    middlewares?.beforeLogin ?? authController.login,\n    middlewares?.beforeLogin\n      ? authController.login\n      : middlewares?.afterLogin ?? sendResponse,\n    middlewares?.beforeLogin && middlewares?.afterLogin\n      ? middlewares?.afterLogin\n      : sendResponse,\n    sendResponse\n  );\n\n  router.delete(\n    \"/auth/logout\",\n    authService.authenticate,\n    middlewares?.beforeLogout ?? authController.logout,\n    middlewares?.beforeLogout\n      ? authController.logout\n      : middlewares?.afterLogout ?? sendResponse,\n    middlewares?.beforeLogout && middlewares?.afterLogout\n      ? middlewares?.afterLogout\n      : sendResponse,\n    sendResponse\n  );\n\n  router.post(\n    \"/auth/signup\",\n    middlewares?.beforeSignup ?? authController.signup,\n    middlewares?.beforeSignup\n      ? authController.signup\n      : middlewares?.afterSignup ?? sendResponse,\n    middlewares?.beforeSignup && middlewares?.afterSignup\n      ? middlewares?.afterSignup\n      : sendResponse,\n    sendResponse\n  );\n\n  router.post(\n    \"/auth/update-password\",\n    authService.authenticate,\n    middlewares?.beforeUpdatePassword ?? authController.updatePassword,\n    middlewares?.beforeUpdatePassword\n      ? authController.updatePassword\n      : middlewares?.afterUpdatePassword ?? sendResponse,\n    middlewares?.beforeUpdatePassword && middlewares?.afterUpdatePassword\n      ? middlewares?.afterUpdatePassword\n      : sendResponse,\n    sendResponse\n  );\n\n  return router;\n}\n"]}
+{"version":3,"file":"auth.router.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.router.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAYA,sCA+GC;AA3HD,qCAAiC;AACjC,uDAA0D;AAC1D,kEAAyC;AACzC,4EAA2C;AAC3C,uEAA8E;AAC9E,+DAAwD;AAExD,4FAA6D;AAC7D,yFAA2G;AAE3G,MAAM,MAAM,GAAW,IAAA,gBAAM,GAAE,CAAC;AAEhC,SAAsB,aAAa,CAAC,YAAyB;;;QAC3D,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAA,yCAAwB,EAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,MAAM,IAAA,uCAAqB,EAAC,WAAW,CAAC,CAAC;QAEhE,MAAM;aACH,GAAG,CACF,WAAW,EACX,sBAAW,CAAC,YAAY,EACxB,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,cAAc,CAAC,KAAK,EAChD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YACtB,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,mCAAI,+BAAY,EAC3C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,CAAA;YACjD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU;YACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb;aACA,KAAK,CACJ,WAAW,EACX,sBAAW,CAAC,YAAY,EACxB,IAAA,sEAA4C,EAAC,MAAM,EAAE,UAAU,CAAC,EAChE,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,cAAc,CAAC,KAAK,EAChD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YACtB,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,mCAAI,+BAAY,EAC3C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,CAAA;YACjD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU;YACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb;aACA,MAAM,CACL,WAAW,EACX,sBAAW,CAAC,YAAY,EACxB,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,cAAc,CAAC,KAAK,EAChD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YACtB,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,mCAAI,+BAAY,EAC3C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,CAAA;YACjD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU;YACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEJ,MAAM,CAAC,GAAG,CACR,IAAA,4BAAS,EACP,IAAA,0BAAS,EACP;YACE,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;YACT,eAAe,EAAE,SAAS;YAC1B,aAAa,EAAE,KAAK;SACrB,EACD,CAAA,MAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,cAAc,0CAAE,uBAAuB,KAAI,EAAE,CAC5D,CACF,CACF,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,aAAa,EACb,IAAA,sEAA4C,EAAC,MAAM,EAAE,OAAO,CAAC,EAC7D,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,cAAc,CAAC,KAAK,EAChD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YACtB,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,mCAAI,+BAAY,EAC3C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU,CAAA;YACjD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,UAAU;YACzB,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEF,MAAM,CAAC,MAAM,CACX,cAAc,EACd,sBAAW,CAAC,YAAY,EACxB,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY,mCAAI,cAAc,CAAC,MAAM,EAClD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY;YACvB,CAAC,CAAC,cAAc,CAAC,MAAM;YACvB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,+BAAY,EAC5C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,CAAA;YACnD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YAC1B,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,cAAc,EACd,IAAA,sEAA4C,EAAC,MAAM,EAAE,QAAQ,CAAC,EAC9D,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY,mCAAI,cAAc,CAAC,MAAM,EAClD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY;YACvB,CAAC,CAAC,cAAc,CAAC,MAAM;YACvB,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,mCAAI,+BAAY,EAC5C,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,YAAY,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,CAAA;YACnD,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW;YAC1B,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,sBAAW,CAAC,YAAY,EACxB,IAAA,sEAA4C,EAAC,MAAM,EAAE,gBAAgB,CAAC,EACtE,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,oBAAoB,mCAAI,cAAc,CAAC,cAAc,EAClE,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,oBAAoB;YAC/B,CAAC,CAAC,cAAc,CAAC,cAAc;YAC/B,CAAC,CAAC,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,mBAAmB,mCAAI,+BAAY,EACpD,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,oBAAoB,MAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,mBAAmB,CAAA;YACnE,CAAC,CAAC,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,mBAAmB;YAClC,CAAC,CAAC,+BAAY,EAChB,+BAAY,CACb,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;CAAA","sourcesContent":["import { Router } from \"express\";\nimport { authControllerFactory } from \"./auth.controller\";\nimport authService from \"./auth.service\";\nimport rateLimit from \"express-rate-limit\";\nimport { importPrismaModelModules } from \"../../utils/helpers/models.helpers\";\nimport { sendResponse } from \"../base/base.middlewares\";\nimport { ArkosConfig } from \"../../types/arkos-config\";\nimport deepmerge from \"../../utils/helpers/deepmerge.helper\";\nimport { handleRequestBodyValidationAndTransformation } from \"../../utils/helpers/base.controller.helpers\";\n\nconst router: Router = Router();\n\nexport async function getAuthRouter(arkosConfigs: ArkosConfig) {\n  const { middlewares } = await importPrismaModelModules(\"auth\");\n  const authController = await authControllerFactory(middlewares);\n\n  router\n    .get(\n      \"/users/me\",\n      authService.authenticate,\n      middlewares?.beforeGetMe ?? authController.getMe,\n      middlewares?.beforeGetMe\n        ? authController.getMe\n        : middlewares?.afterGetMe ?? sendResponse,\n      middlewares?.beforeGetMe && middlewares?.afterGetMe\n        ? middlewares?.afterGetMe\n        : sendResponse,\n      sendResponse\n    )\n    .patch(\n      \"/users/me\",\n      authService.authenticate,\n      handleRequestBodyValidationAndTransformation(\"auth\", \"updateMe\"),\n      middlewares?.beforeGetMe ?? authController.getMe,\n      middlewares?.beforeGetMe\n        ? authController.getMe\n        : middlewares?.afterGetMe ?? sendResponse,\n      middlewares?.beforeGetMe && middlewares?.afterGetMe\n        ? middlewares?.afterGetMe\n        : sendResponse,\n      sendResponse\n    )\n    .delete(\n      \"/users/me\",\n      authService.authenticate,\n      middlewares?.beforeGetMe ?? authController.getMe,\n      middlewares?.beforeGetMe\n        ? authController.getMe\n        : middlewares?.afterGetMe ?? sendResponse,\n      middlewares?.beforeGetMe && middlewares?.afterGetMe\n        ? middlewares?.afterGetMe\n        : sendResponse,\n      sendResponse\n    );\n\n  router.use(\n    rateLimit(\n      deepmerge(\n        {\n          windowMs: 5000,\n          limit: 10,\n          standardHeaders: \"draft-7\",\n          legacyHeaders: false,\n        },\n        arkosConfigs?.authentication?.requestRateLimitOptions || {}\n      )\n    )\n  );\n\n  router.post(\n    \"/auth/login\",\n    handleRequestBodyValidationAndTransformation(\"auth\", \"login\"),\n    middlewares?.beforeLogin ?? authController.login,\n    middlewares?.beforeLogin\n      ? authController.login\n      : middlewares?.afterLogin ?? sendResponse,\n    middlewares?.beforeLogin && middlewares?.afterLogin\n      ? middlewares?.afterLogin\n      : sendResponse,\n    sendResponse\n  );\n\n  router.delete(\n    \"/auth/logout\",\n    authService.authenticate,\n    middlewares?.beforeLogout ?? authController.logout,\n    middlewares?.beforeLogout\n      ? authController.logout\n      : middlewares?.afterLogout ?? sendResponse,\n    middlewares?.beforeLogout && middlewares?.afterLogout\n      ? middlewares?.afterLogout\n      : sendResponse,\n    sendResponse\n  );\n\n  router.post(\n    \"/auth/signup\",\n    handleRequestBodyValidationAndTransformation(\"auth\", \"signup\"),\n    middlewares?.beforeSignup ?? authController.signup,\n    middlewares?.beforeSignup\n      ? authController.signup\n      : middlewares?.afterSignup ?? sendResponse,\n    middlewares?.beforeSignup && middlewares?.afterSignup\n      ? middlewares?.afterSignup\n      : sendResponse,\n    sendResponse\n  );\n\n  router.post(\n    \"/auth/update-password\",\n    authService.authenticate,\n    handleRequestBodyValidationAndTransformation(\"auth\", \"updatePassword\"),\n    middlewares?.beforeUpdatePassword ?? authController.updatePassword,\n    middlewares?.beforeUpdatePassword\n      ? authController.updatePassword\n      : middlewares?.afterUpdatePassword ?? sendResponse,\n    middlewares?.beforeUpdatePassword && middlewares?.afterUpdatePassword\n      ? middlewares?.afterUpdatePassword\n      : sendResponse,\n    sendResponse\n  );\n\n  return router;\n}\n"]}

package/dist/cjs/modules/auth/auth.service.js

@@ -40,7 +40,7 @@ class AuthService {
         if (process.env.NODE_ENV === "production" &&
             !process.env.JWT_SECRET &&
             !((_a = configs === null || configs === void 0 ? void 0 : configs.jwt) === null || _a === void 0 ? void 0 : _a.secret))
-            throw new app_error_1.default("Missing JWT secret!", 500);
+            throw new app_error_1.default("Missing JWT secret on production!", 500);
         secret =
             secret ||
                 ((_b = configs === null || configs === void 0 ? void 0 : configs.jwt) === null || _b === void 0 ? void 0 : _b.secret) ||
@@ -189,7 +189,7 @@ class AuthService {
             return user;
         });
     }
-    handleAuthenticationControl(authConfigs, action, modelName) {
+    handleAuthenticationControl(authConfigs, action) {
         const authenticationControl = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.authenticationControl;
         if (authenticationControl && typeof authenticationControl === "object") {
             if (authenticationControl[action] === false)

package/dist/cjs/modules/auth/auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,gEAAgD;AAChD,wDAA8B;AAE9B,qFAA4D;AAC5D,iFAAwD;AACxD,+DAAoD;AACpD,yCAA8C;AAC9C,sEAA6C;AAC7C,uEAAuE;AAYvE,iFAAoE;AACpE,yCAAqC;AAKrC,MAAM,WAAW;IAAjB;QAgTE,iBAAY,GAAG,IAAA,qBAAU,EACvB,CAAO,GAAiB,EAAE,GAAkB,EAAE,IAAuB,EAAE,EAAE;YACvE,MAAM,WAAW,GAAG,IAAA,uBAAc,GAAE,CAAC;YACrC,IAAI,CAAC,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,cAAc,CAAA,EAAE,CAAC;gBACjC,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YAED,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAS,CAAC;YAC1D,IAAI,EAAE,CAAC;QACT,CAAC,CAAA,CACF,CAAC;IAwBJ,CAAC;IA1UC,YAAY,CACV,EAAmB,EACnB,SAAoC,EACpC,MAAe;;QAEf,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,IAAA,uBAAc,GAAE,CAAC;QAErD,IACE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YACrC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU;YACvB,CAAC,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,MAAM,CAAA;YAErB,MAAM,IAAI,mBAAQ,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAEjD,MAAM;YACJ,MAAM;iBACN,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,MAAM,CAAA;gBACpB,OAAO,CAAC,GAAG,CAAC,UAAU;gBACtB,mBAAQ,CAAC,UAAU,CAAC;QAEtB,SAAS,GAAG,CAAC,SAAS;aACpB,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,SAAS,CAAA;YACvB,OAAO,CAAC,GAAG,CAAC,cAAc;YAC1B,mBAAQ,CAAC,cAAc,CAAmC,CAAC;QAE7D,OAAO,sBAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YAC9B,SAAS,EAAE,SAAgB;SAC5B,CAAC,CAAC;IACL,CAAC;IASK,iBAAiB,CACrB,iBAAyB,EACzB,YAAoB;;YAEpB,OAAO,MAAM,kBAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAC/D,CAAC;KAAA;IAQK,YAAY,CAAC,QAAgB;;YACjC,OAAO,MAAM,kBAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC;KAAA;IAiBD,gBAAgB,CAAC,QAAgB;;QAC/B,MAAM,eAAe,GAAG,MAAA,IAAA,uBAAc,GAAE,0CAAE,cAAc,CAAC;QAEzD,MAAM,mBAAmB,GACvB,CAAA,MAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,kBAAkB,0CAAE,KAAK;YAC1C,oCAAoC,CAAC;QACvC,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IASD,wBAAwB,CAAC,IAAU,EAAE,YAAoB;QACvD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,kBAAkB,GAAG,QAAQ,CACjC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAC/C,EAAE,CACH,CAAC;YAEF,OAAO,YAAY,GAAG,kBAAkB,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAUK,cAAc,CAClB,KAAa,EACb,MAAe;;;YAEf,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,IAAA,uBAAc,GAAE,CAAC;YAErD,IACE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBACrC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU;gBACvB,CAAC,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,MAAM,CAAA;gBAErB,MAAM,IAAI,mBAAQ,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;YAEjD,MAAM;gBACJ,MAAM;qBACN,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,MAAM,CAAA;oBACpB,OAAO,CAAC,GAAG,CAAC,UAAU;oBACtB,mBAAQ,CAAC,UAAU,CAAC;YAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;oBACzC,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;wBAChB,OAAO,CAAC,OAAyB,CAAC,CAAC;gBAC1C,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KAAA;IAUD,yBAAyB,CACvB,WAAwB,EACxB,MAAyB,EACzB,SAAiB;QAEjB,OAAO,IAAA,qBAAU,EACf,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;;YACF,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,GAAG,CAAC,IAAW,CAAC;gBAC7B,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;gBACnC,MAAM,OAAO,GAAG,IAAA,uBAAc,GAAE,CAAC;gBAEjC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,IAAI,EAAE,CAAC;oBACP,OAAO;gBACT,CAAC;gBAED,IAAI,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,IAAI,MAAK,SAAS,EAAE,CAAC;oBAChD,MAAM,WAAW,GAAG,MAAO,MAAc,CAAC,cAAc,CAAC,KAAK,CAAC;wBAC7D,KAAK,EAAE;4BACL,QAAQ,EAAE,IAAA,+BAAS,EAAC,IAAA,oBAAQ,EAAC,SAAS,CAAC,CAAC;4BACxC,MAAM;4BACN,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;yBAChE;qBACF,CAAC,CAAC;oBAEH,IAAI,CAAC,WAAW;wBACd,OAAO,IAAI,CACT,IAAI,mBAAQ,CACV,kDAAkD,EAClD,GAAG,CACJ,CACF,CAAC;gBACN,CAAC;qBAAM,IAAI,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,IAAI,MAAK,QAAQ,EAAE,CAAC;oBACtD,MAAM,aAAa,GAAG,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,aAAa,CAAC;oBACjD,IAAI,eAAe,GAAU,EAAE,CAAC;oBAEhC,IAAI,aAAa,EAAE,CAAC;wBAClB,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;4BAAE,eAAe,GAAG,aAAa,CAAC;6BAC7D,IAAI,aAAa,CAAC,MAAM,CAAC;4BAC5B,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;wBAG1C,IACE,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAA,GAAG,CAAC,IAAI,0CAAE,IAAI,CAAC;4BACzC,CAAC,CAAC,MAAA,GAAG,CAAC,IAAI,0CAAE,KAAe,CAAA,CAAC,MAAM,GAAG,CAAC;gCACpC,CAAC,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,WAC9B,OAAA,CAAC,MAAA,GAAG,CAAC,IAAI,0CAAE,KAAe,CAAA,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA,EAAA,CAC1C,CAAA,CAAC;4BAEJ,OAAO,IAAI,CACT,IAAI,mBAAQ,CACV,kDAAkD,EAClD,GAAG,CACJ,CACF,CAAC;oBACN,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC,CAAA,CACF,CAAC;IACJ,CAAC;IAQK,oBAAoB,CAAC,GAAiB;;;YAC1C,MAAM,WAAW,GAAG,IAAA,uBAAc,GAAE,CAAC;YACrC,IAAI,CAAC,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,cAAc,CAAA;gBAAE,OAAO,IAAI,CAAC;YAE9C,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;YAEnC,IAAI,KAAyB,CAAC;YAE9B,IACE,CAAA,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,aAAa;iBAC3B,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA,EAChD,CAAC;gBACD,KAAK,GAAG,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,CAAA,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,kBAAkB,MAAK,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAC1E,KAAK,GAAG,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,kBAAkB,CAAC;YAC3C,CAAC;YAED,IAAI,CAAC,KAAK;gBACR,MAAM,IAAI,mBAAQ,CAChB,oDAAoD,EACpD,GAAG,CACJ,CAAC;YAEJ,IAAI,OAAmC,CAAC;YACxC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,mBAAQ,CAChB,iDAAiD,EACjD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,CAAA;gBACd,MAAM,IAAI,mBAAQ,CAChB,iDAAiD,EACjD,GAAG,CACJ,CAAC;YAEJ,MAAM,IAAI,GAAe,MAAO,MAAc,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC7D,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;gBACjC,OAAO,EAAE;oBACP,KAAK,EAAE;wBACL,OAAO,EAAE;4BACP,IAAI,EAAE;gCACJ,OAAO,EAAE;oCACP,WAAW,EAAE,IAAI;iCAClB;6BACF;yBACF;qBACF;iBACF;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI;gBACP,MAAM,IAAI,mBAAQ,CAChB,wDAAwD,EACxD,GAAG,CACJ,CAAC;YAEJ,IACE,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAI,CAAC;gBACjD,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAE5B,MAAM,IAAI,mBAAQ,CAChB,sDAAsD,EACtD,GAAG,CACJ,CAAC;YAEJ,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;IA+BD,2BAA2B,CACzB,WAAoC,EACpC,MAAyB,EACzB,SAAiB;QAEjB,MAAM,qBAAqB,GAAG,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,qBAAqB,CAAC;QAEjE,IAAI,qBAAqB,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;YACvE,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,KAAK;gBAAE,OAAO,2BAAQ,CAAC;iBACxD,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAC5E,CAAC;;YAAM,OAAO,IAAI,CAAC,YAAY,CAAC;QAEhC,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CACF;AAKD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,kBAAe,WAAW,CAAC","sourcesContent":["import jwt, { SignOptions } from \"jsonwebtoken\";\nimport bcrypt from \"bcryptjs\";\nimport { User, UserRole } from \"../../types\";\nimport catchAsync from \"../error-handler/utils/catch-async\";\nimport AppError from \"../error-handler/utils/app-error\";\nimport { callNext } from \"../base/base.middlewares\";\nimport { getArkosConfig } from \"../../server\";\nimport arkosEnv from \"../../utils/arkos-env\";\nimport { getPrismaInstance } from \"../../utils/helpers/prisma.helpers\";\nimport {\n  ArkosRequest,\n  ArkosResponse,\n  ArkosNextFunction,\n  ArkosRequestHandler,\n} from \"../../types\";\nimport {\n  AuthConfigs,\n  AuthJwtPayload,\n  ControllerActions,\n} from \"../../types/auth\";\nimport { kebabCase } from \"../../utils/helpers/change-case.helpers\";\nimport { singular } from \"pluralize\";\n\n/**\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\n */\nclass AuthService {\n  /**\n   * Signs a JWT token for the user.\n   *\n   * @param {number | string} id - The unique identifier of the user to generate the token for.\n   * @param {string | number} [expiresIn] - The expiration time for the token. Defaults to environment variable `JWT_EXPIRES_IN`.\n   * @param {string} [secret] - The secret key used to sign the token. Defaults to environment variable `JWT_SECRET`.\n   * @returns {string} The signed JWT token.\n   */\n  signJwtToken(\n    id: number | string,\n    expiresIn?: SignOptions[\"expiresIn\"],\n    secret?: string\n  ): string {\n    const { authentication: configs } = getArkosConfig();\n\n    if (\n      process.env.NODE_ENV === \"production\" &&\n      !process.env.JWT_SECRET &&\n      !configs?.jwt?.secret\n    )\n      throw new AppError(\"Missing JWT secret!\", 500);\n\n    secret =\n      secret ||\n      configs?.jwt?.secret ||\n      process.env.JWT_SECRET ||\n      arkosEnv.JWT_SECRET;\n\n    expiresIn = (expiresIn ||\n      configs?.jwt?.expiresIn ||\n      process.env.JWT_EXPIRES_IN ||\n      arkosEnv.JWT_EXPIRES_IN) as keyof SignOptions[\"expiresIn\"];\n\n    return jwt.sign({ id }, secret, {\n      expiresIn: expiresIn as any,\n    });\n  }\n\n  /**\n   * Compares a candidate password with the stored user password to check if they match.\n   *\n   * @param {string} candidatePassword - The password provided by the user during login.\n   * @param {string} userPassword - The password stored in the database.\n   * @returns {Promise<boolean>} Returns true if the passwords match, otherwise false.\n   */\n  async isCorrectPassword(\n    candidatePassword: string,\n    userPassword: string\n  ): Promise<boolean> {\n    return await bcrypt.compare(candidatePassword, userPassword);\n  }\n\n  /**\n   * Hashes a plain text password using bcrypt.\n   *\n   * @param {string} password - The password to be hashed.\n   * @returns {Promise<string>} Returns the hashed password.\n   */\n  async hashPassword(password: string): Promise<string> {\n    return await bcrypt.hash(password, 12);\n  }\n\n  /**\n   * Checks if a password is strong, requiring uppercase, lowercase, and numeric characters as the default.\n   *\n   * **Note**: You can define it when calling arkos.init()\n   * ```ts\n   * arkos.init({\n   *  authentication: {\n   *    passwordValidation:{ regex: /your-desired-regex/, message: 'password must contain...'}\n   *  }\n   * })\n   * ```\n   *\n   * @param {string} password - The password to check.\n   * @returns {boolean} Returns true if the password meets the strength criteria, otherwise false.\n   */\n  isPasswordStrong(password: string): boolean {\n    const initAuthConfigs = getArkosConfig()?.authentication;\n\n    const strongPasswordRegex =\n      initAuthConfigs?.passwordValidation?.regex ||\n      /^(?=.*[A-Z])(?=.*[a-z])(?=.*\\d).+$/;\n    return strongPasswordRegex.test(password);\n  }\n\n  /**\n   * Checks if a user has changed their password after the JWT was issued.\n   *\n   * @param {User} user - The user object containing the passwordChangedAt field.\n   * @param {number} JWTTimestamp - The timestamp when the JWT was issued.\n   * @returns {boolean} Returns true if the user changed their password after the JWT was issued, otherwise false.\n   */\n  userChangedPasswordAfter(user: User, JWTTimestamp: number): boolean {\n    if (user.passwordChangedAt) {\n      const convertedTimestamp = parseInt(\n        String(user.passwordChangedAt.getTime() / 1000),\n        10\n      );\n\n      return JWTTimestamp < convertedTimestamp;\n    }\n    return false;\n  }\n\n  /**\n   * Verifies the authenticity of a JWT token.\n   *\n   * @param {string} token - The JWT token to verify.\n   * @param {string} [secret] - The secret key used to verify the token. Defaults to environment variable `JWT_SECRET`.\n   * @returns {Promise<AuthJwtPayload>} Returns the decoded JWT payload if the token is valid.\n   * @throws {Error} Throws an error if the token is invalid or expired.\n   */\n  async verifyJwtToken(\n    token: string,\n    secret?: string\n  ): Promise<AuthJwtPayload> {\n    const { authentication: configs } = getArkosConfig();\n\n    if (\n      process.env.NODE_ENV === \"production\" &&\n      !process.env.JWT_SECRET &&\n      !configs?.jwt?.secret\n    )\n      throw new AppError(\"Missing JWT secret!\", 500);\n\n    secret =\n      secret ||\n      configs?.jwt?.secret ||\n      process.env.JWT_SECRET ||\n      arkosEnv.JWT_SECRET;\n\n    return new Promise((resolve, reject) => {\n      jwt.verify(token, secret, (err, decoded) => {\n        if (err) reject(err);\n        else resolve(decoded as AuthJwtPayload);\n      });\n    });\n  }\n\n  /**\n   * Middleware function to handle access control based on user roles and permissions.\n   *\n   * @param {AuthConfigs} authConfigs - The configuration object for authentication and access control.\n   * @param {ControllerActions} action - The action being performed (e.g., create, update, delete, view).\n   * @param {string} modelName - The model name that the action is being performed on (e.g., \"User\", \"Post\").\n   * @returns {ArkosRequestHandler} The middleware function that checks if the user has permission to perform the action.\n   */\n  handleActionAccessControl(\n    authConfigs: AuthConfigs,\n    action: ControllerActions,\n    modelName: string\n  ): ArkosRequestHandler {\n    return catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        if (req.user) {\n          const user = req.user as any;\n          const prisma = getPrismaInstance();\n          const configs = getArkosConfig();\n\n          if (user.isSuperUser) {\n            next();\n            return;\n          }\n\n          if (configs?.authentication?.mode === \"dynamic\") {\n            const permissions = await (prisma as any).authPermission.count({\n              where: {\n                resource: kebabCase(singular(modelName)),\n                action,\n                roleId: { in: user.roles.map((role: UserRole) => role.roleId) },\n              },\n            });\n\n            if (!permissions)\n              return next(\n                new AppError(\n                  \"You do not have permission to perfom this action\",\n                  403\n                )\n              );\n          } else if (configs?.authentication?.mode === \"static\") {\n            const accessControl = authConfigs?.accessControl;\n            let authorizedRoles: any[] = [];\n\n            if (accessControl) {\n              if (Array.isArray(accessControl)) authorizedRoles = accessControl;\n              else if (accessControl[action])\n                authorizedRoles = accessControl[action];\n\n              // Checks for both cases if using single role or multiple roles\n              if (\n                !authorizedRoles.includes(req.user?.role) ||\n                ((req.user?.roles as any[]).length > 0 &&\n                  !authorizedRoles?.some((role) =>\n                    (req.user?.roles as any[]).includes(role)\n                  ))\n              )\n                return next(\n                  new AppError(\n                    \"You do not have permission to perfom this action\",\n                    403\n                  )\n                );\n            }\n          }\n        }\n\n        next();\n      }\n    );\n  }\n\n  /**\n   * Processes the cookies or authoriation token and returns the user.\n   * @param req\n   * @returns {Promise<User | null>} - if authentication is turned off in arkosConfig it returns null\n   * @throws {AppError} Throws an error if the token is invalid or the user is not logged in.\n   */\n  async getAuthenticatedUser(req: ArkosRequest): Promise<User | null> {\n    const arkosConfig = getArkosConfig();\n    if (!arkosConfig?.authentication) return null;\n\n    const prisma = getPrismaInstance();\n\n    let token: string | undefined;\n\n    if (\n      req?.headers?.authorization &&\n      req?.headers?.authorization.startsWith(\"Bearer\")\n    ) {\n      token = req?.headers?.authorization.split(\" \")[1];\n    } else if (req?.cookies?.arkos_access_token !== \"no-token\" && req.cookies) {\n      token = req?.cookies?.arkos_access_token;\n    }\n\n    if (!token)\n      throw new AppError(\n        \"You are not logged in! please log in to get access\",\n        401\n      );\n\n    let decoded: AuthJwtPayload | undefined;\n    try {\n      decoded = await this.verifyJwtToken(token);\n    } catch (err) {\n      throw new AppError(\n        \"Your auth token is invalid, please login again.\",\n        401\n      );\n    }\n\n    if (!decoded?.id)\n      throw new AppError(\n        \"Your auth token is invalid, please login again.\",\n        401\n      );\n\n    const user: any | null = await (prisma as any).user.findUnique({\n      where: { id: String(decoded.id) },\n      include: {\n        roles: {\n          include: {\n            role: {\n              include: {\n                permissions: true,\n              },\n            },\n          },\n        },\n      },\n    });\n\n    if (!user)\n      throw new AppError(\n        \"The user belonging to this token does no longer exists\",\n        401\n      );\n\n    if (\n      this.userChangedPasswordAfter(user, decoded.iat!) &&\n      !req.path.includes(\"logout\")\n    )\n      throw new AppError(\n        \"User recently changed password! Please log in again.\",\n        401\n      );\n\n    return user;\n  }\n\n  /**\n   * Middleware function to authenticate the user based on the JWT token.\n   *\n   * @param {ArkosRequest} req - The request object.\n   * @param {ArkosResponse} res - The response object.\n   * @param {ArkosNextFunction} next - The next middleware function to be called.\n   * @returns {void}\n   */\n  authenticate = catchAsync(\n    async (req: ArkosRequest, res: ArkosResponse, next: ArkosNextFunction) => {\n      const arkosConfig = getArkosConfig();\n      if (!arkosConfig?.authentication) {\n        next();\n        return;\n      }\n\n      req.user = (await this.getAuthenticatedUser(req)) as User;\n      next();\n    }\n  );\n\n  /**\n   * Handles authentication control by checking the `authenticationControl` configuration in the `authConfigs`.\n   *\n   * @param {AuthConfigs | undefined} authConfigs - The authentication configuration object.\n   * @param {ControllerActions} action - The action being performed (e.g., create, update, delete, view).\n   * @param {string} modelName - The model name being affected by the action.\n   * @returns {ArkosRequestHandler} The middleware function that checks if authentication is required.\n   */\n  handleAuthenticationControl(\n    authConfigs: AuthConfigs | undefined,\n    action: ControllerActions,\n    modelName: string\n  ): ArkosRequestHandler {\n    const authenticationControl = authConfigs?.authenticationControl;\n\n    if (authenticationControl && typeof authenticationControl === \"object\") {\n      if (authenticationControl[action] === false) return callNext;\n      else if (authenticationControl[action] === true) return this.authenticate;\n    } else return this.authenticate;\n\n    return this.authenticate;\n  }\n}\n\n/**\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\n */\nconst authService = new AuthService();\n\nexport default authService;\n"]}
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,gEAAgD;AAChD,wDAA8B;AAE9B,qFAA4D;AAC5D,iFAAwD;AACxD,+DAAoD;AACpD,yCAA8C;AAC9C,sEAA6C;AAC7C,uEAAuE;AAYvE,iFAAoE;AACpE,yCAAqC;AAMrC,MAAM,WAAW;IAAjB;QAkTE,iBAAY,GAAG,IAAA,qBAAU,EACvB,CAAO,GAAiB,EAAE,GAAkB,EAAE,IAAuB,EAAE,EAAE;YACvE,MAAM,WAAW,GAAG,IAAA,uBAAc,GAAE,CAAC;YACrC,IAAI,CAAC,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,cAAc,CAAA,EAAE,CAAC;gBACjC,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YAED,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAS,CAAC;YAC1D,IAAI,EAAE,CAAC;QACT,CAAC,CAAA,CACF,CAAC;IAsBJ,CAAC;IA1UC,YAAY,CACV,EAAmB,EACnB,SAA+B,EAC/B,MAAe;;QAEf,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,IAAA,uBAAc,GAAE,CAAC;QAErD,IACE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YACrC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU;YACvB,CAAC,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,MAAM,CAAA;YAErB,MAAM,IAAI,mBAAQ,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;QAE/D,MAAM;YACJ,MAAM;iBACN,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,MAAM,CAAA;gBACpB,OAAO,CAAC,GAAG,CAAC,UAAU;gBACtB,mBAAQ,CAAC,UAAU,CAAC;QAEtB,SAAS,GAAG,CAAC,SAAS;aACpB,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,SAAS,CAAA;YACvB,OAAO,CAAC,GAAG,CAAC,cAAc;YAC1B,mBAAQ,CAAC,cAAc,CAAmC,CAAC;QAE7D,OAAO,sBAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YAC9B,SAAS,EAAE,SAAgB;SAC5B,CAAC,CAAC;IACL,CAAC;IASK,iBAAiB,CACrB,iBAAyB,EACzB,YAAoB;;YAEpB,OAAO,MAAM,kBAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAC/D,CAAC;KAAA;IAQK,YAAY,CAAC,QAAgB;;YACjC,OAAO,MAAM,kBAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC;KAAA;IAmBM,gBAAgB,CAAC,QAAgB;;QACtC,MAAM,eAAe,GAAG,MAAA,IAAA,uBAAc,GAAE,0CAAE,cAAc,CAAC;QAEzD,MAAM,mBAAmB,GACvB,CAAA,MAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,kBAAkB,0CAAE,KAAK;YAC1C,oCAAoC,CAAC;QACvC,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IASD,wBAAwB,CAAC,IAAU,EAAE,YAAoB;QACvD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,kBAAkB,GAAG,QAAQ,CACjC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAC/C,EAAE,CACH,CAAC;YAEF,OAAO,YAAY,GAAG,kBAAkB,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAUK,cAAc,CAClB,KAAa,EACb,MAAe;;;YAEf,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,IAAA,uBAAc,GAAE,CAAC;YAErD,IACE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBACrC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU;gBACvB,CAAC,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,MAAM,CAAA;gBAErB,MAAM,IAAI,mBAAQ,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;YAEjD,MAAM;gBACJ,MAAM;qBACN,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,MAAM,CAAA;oBACpB,OAAO,CAAC,GAAG,CAAC,UAAU;oBACtB,mBAAQ,CAAC,UAAU,CAAC;YAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;oBACzC,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;wBAChB,OAAO,CAAC,OAAyB,CAAC,CAAC;gBAC1C,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KAAA;IAUD,yBAAyB,CACvB,WAAwB,EACxB,MAAyB,EACzB,SAAiB;QAEjB,OAAO,IAAA,qBAAU,EACf,CACE,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;;YACF,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,GAAG,CAAC,IAAW,CAAC;gBAC7B,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;gBACnC,MAAM,OAAO,GAAG,IAAA,uBAAc,GAAE,CAAC;gBAEjC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,IAAI,EAAE,CAAC;oBACP,OAAO;gBACT,CAAC;gBAED,IAAI,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,IAAI,MAAK,SAAS,EAAE,CAAC;oBAChD,MAAM,WAAW,GAAG,MAAO,MAAc,CAAC,cAAc,CAAC,KAAK,CAAC;wBAC7D,KAAK,EAAE;4BACL,QAAQ,EAAE,IAAA,+BAAS,EAAC,IAAA,oBAAQ,EAAC,SAAS,CAAC,CAAC;4BACxC,MAAM;4BACN,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;yBAChE;qBACF,CAAC,CAAC;oBAEH,IAAI,CAAC,WAAW;wBACd,OAAO,IAAI,CACT,IAAI,mBAAQ,CACV,kDAAkD,EAClD,GAAG,CACJ,CACF,CAAC;gBACN,CAAC;qBAAM,IAAI,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,IAAI,MAAK,QAAQ,EAAE,CAAC;oBACtD,MAAM,aAAa,GAAG,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,aAAa,CAAC;oBACjD,IAAI,eAAe,GAAU,EAAE,CAAC;oBAEhC,IAAI,aAAa,EAAE,CAAC;wBAClB,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;4BAAE,eAAe,GAAG,aAAa,CAAC;6BAC7D,IAAI,aAAa,CAAC,MAAM,CAAC;4BAC5B,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;wBAG1C,IACE,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAA,GAAG,CAAC,IAAI,0CAAE,IAAI,CAAC;4BACzC,CAAC,CAAC,MAAA,GAAG,CAAC,IAAI,0CAAE,KAAe,CAAA,CAAC,MAAM,GAAG,CAAC;gCACpC,CAAC,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,WAC9B,OAAA,CAAC,MAAA,GAAG,CAAC,IAAI,0CAAE,KAAe,CAAA,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA,EAAA,CAC1C,CAAA,CAAC;4BAEJ,OAAO,IAAI,CACT,IAAI,mBAAQ,CACV,kDAAkD,EAClD,GAAG,CACJ,CACF,CAAC;oBACN,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC,CAAA,CACF,CAAC;IACJ,CAAC;IAQK,oBAAoB,CAAC,GAAiB;;;YAC1C,MAAM,WAAW,GAAG,IAAA,uBAAc,GAAE,CAAC;YACrC,IAAI,CAAC,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,cAAc,CAAA;gBAAE,OAAO,IAAI,CAAC;YAE9C,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;YAEnC,IAAI,KAAyB,CAAC;YAE9B,IACE,CAAA,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,aAAa;iBAC3B,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA,EAChD,CAAC;gBACD,KAAK,GAAG,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,CAAA,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,kBAAkB,MAAK,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAC1E,KAAK,GAAG,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,0CAAE,kBAAkB,CAAC;YAC3C,CAAC;YAED,IAAI,CAAC,KAAK;gBACR,MAAM,IAAI,mBAAQ,CAChB,oDAAoD,EACpD,GAAG,CACJ,CAAC;YAEJ,IAAI,OAAmC,CAAC;YACxC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,mBAAQ,CAChB,iDAAiD,EACjD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,CAAA;gBACd,MAAM,IAAI,mBAAQ,CAChB,iDAAiD,EACjD,GAAG,CACJ,CAAC;YAEJ,MAAM,IAAI,GAAe,MAAO,MAAc,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC7D,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;gBACjC,OAAO,EAAE;oBACP,KAAK,EAAE;wBACL,OAAO,EAAE;4BACP,IAAI,EAAE;gCACJ,OAAO,EAAE;oCACP,WAAW,EAAE,IAAI;iCAClB;6BACF;yBACF;qBACF;iBACF;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI;gBACP,MAAM,IAAI,mBAAQ,CAChB,wDAAwD,EACxD,GAAG,CACJ,CAAC;YAEJ,IACE,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAI,CAAC;gBACjD,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAE5B,MAAM,IAAI,mBAAQ,CAChB,sDAAsD,EACtD,GAAG,CACJ,CAAC;YAEJ,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;IA8BD,2BAA2B,CACzB,WAAoC,EACpC,MAAyB;QAEzB,MAAM,qBAAqB,GAAG,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,qBAAqB,CAAC;QAEjE,IAAI,qBAAqB,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;YACvE,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,KAAK;gBAAE,OAAO,2BAAQ,CAAC;iBACxD,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAC5E,CAAC;;YAAM,OAAO,IAAI,CAAC,YAAY,CAAC;QAEhC,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CACF;AAKD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,kBAAe,WAAW,CAAC","sourcesContent":["import jwt, { SignOptions } from \"jsonwebtoken\";\nimport bcrypt from \"bcryptjs\";\nimport { User, UserRole } from \"../../types\";\nimport catchAsync from \"../error-handler/utils/catch-async\";\nimport AppError from \"../error-handler/utils/app-error\";\nimport { callNext } from \"../base/base.middlewares\";\nimport { getArkosConfig } from \"../../server\";\nimport arkosEnv from \"../../utils/arkos-env\";\nimport { getPrismaInstance } from \"../../utils/helpers/prisma.helpers\";\nimport {\n  ArkosRequest,\n  ArkosResponse,\n  ArkosNextFunction,\n  ArkosRequestHandler,\n} from \"../../types\";\nimport {\n  AuthConfigs,\n  AuthJwtPayload,\n  ControllerActions,\n} from \"../../types/auth\";\nimport { kebabCase } from \"../../utils/helpers/change-case.helpers\";\nimport { singular } from \"pluralize\";\nimport { MsDuration } from \"./utils/helpers/auth.controller.helpers\";\n\n/**\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\n */\nclass AuthService {\n  /**\n   * Signs a JWT token for the user.\n   *\n   * @param {number | string} id - The unique identifier of the user to generate the token for.\n   * @param {string | number} [expiresIn] - The expiration time for the token. Defaults to environment variable `JWT_EXPIRES_IN`.\n   * @param {string} [secret] - The secret key used to sign the token. Defaults to environment variable `JWT_SECRET`.\n   * @returns {string} The signed JWT token.\n   */\n  signJwtToken(\n    id: number | string,\n    expiresIn?: MsDuration | number,\n    secret?: string\n  ): string {\n    const { authentication: configs } = getArkosConfig();\n\n    if (\n      process.env.NODE_ENV === \"production\" &&\n      !process.env.JWT_SECRET &&\n      !configs?.jwt?.secret\n    )\n      throw new AppError(\"Missing JWT secret on production!\", 500);\n\n    secret =\n      secret ||\n      configs?.jwt?.secret ||\n      process.env.JWT_SECRET ||\n      arkosEnv.JWT_SECRET;\n\n    expiresIn = (expiresIn ||\n      configs?.jwt?.expiresIn ||\n      process.env.JWT_EXPIRES_IN ||\n      arkosEnv.JWT_EXPIRES_IN) as keyof SignOptions[\"expiresIn\"];\n\n    return jwt.sign({ id }, secret, {\n      expiresIn: expiresIn as any,\n    });\n  }\n\n  /**\n   * Compares a candidate password with the stored user password to check if they match.\n   *\n   * @param {string} candidatePassword - The password provided by the user during login.\n   * @param {string} userPassword - The password stored in the database.\n   * @returns {Promise<boolean>} Returns true if the passwords match, otherwise false.\n   */\n  async isCorrectPassword(\n    candidatePassword: string,\n    userPassword: string\n  ): Promise<boolean> {\n    return await bcrypt.compare(candidatePassword, userPassword);\n  }\n\n  /**\n   * Hashes a plain text password using bcrypt.\n   *\n   * @param {string} password - The password to be hashed.\n   * @returns {Promise<string>} Returns the hashed password.\n   */\n  async hashPassword(password: string): Promise<string> {\n    return await bcrypt.hash(password, 12);\n  }\n\n  /**\n   * Checks if a password is strong, requiring uppercase, lowercase, and numeric characters as the default.\n   *\n   * **NB**: You must pay attention when using custom validation with zod or class-validator, try to use the same regex always.\n   *\n   * **Note**: You can define it when calling arkos.init()\n   * ```ts\n   * arkos.init({\n   *  authentication: {\n   *    passwordValidation:{ regex: /your-desired-regex/, message: 'password must contain...'}\n   *  }\n   * })\n   * ```\n   *\n   * @param {string} password - The password to check.\n   * @returns {boolean} Returns true if the password meets the strength criteria, otherwise false.\n   */\n  public isPasswordStrong(password: string): boolean {\n    const initAuthConfigs = getArkosConfig()?.authentication;\n\n    const strongPasswordRegex =\n      initAuthConfigs?.passwordValidation?.regex ||\n      /^(?=.*[A-Z])(?=.*[a-z])(?=.*\\d).+$/;\n    return strongPasswordRegex.test(password);\n  }\n\n  /**\n   * Checks if a user has changed their password after the JWT was issued.\n   *\n   * @param {User} user - The user object containing the passwordChangedAt field.\n   * @param {number} JWTTimestamp - The timestamp when the JWT was issued.\n   * @returns {boolean} Returns true if the user changed their password after the JWT was issued, otherwise false.\n   */\n  userChangedPasswordAfter(user: User, JWTTimestamp: number): boolean {\n    if (user.passwordChangedAt) {\n      const convertedTimestamp = parseInt(\n        String(user.passwordChangedAt.getTime() / 1000),\n        10\n      );\n\n      return JWTTimestamp < convertedTimestamp;\n    }\n    return false;\n  }\n\n  /**\n   * Verifies the authenticity of a JWT token.\n   *\n   * @param {string} token - The JWT token to verify.\n   * @param {string} [secret] - The secret key used to verify the token. Defaults to environment variable `JWT_SECRET`.\n   * @returns {Promise<AuthJwtPayload>} Returns the decoded JWT payload if the token is valid.\n   * @throws {Error} Throws an error if the token is invalid or expired.\n   */\n  async verifyJwtToken(\n    token: string,\n    secret?: string\n  ): Promise<AuthJwtPayload> {\n    const { authentication: configs } = getArkosConfig();\n\n    if (\n      process.env.NODE_ENV === \"production\" &&\n      !process.env.JWT_SECRET &&\n      !configs?.jwt?.secret\n    )\n      throw new AppError(\"Missing JWT secret!\", 500);\n\n    secret =\n      secret ||\n      configs?.jwt?.secret ||\n      process.env.JWT_SECRET ||\n      arkosEnv.JWT_SECRET;\n\n    return new Promise((resolve, reject) => {\n      jwt.verify(token, secret, (err, decoded) => {\n        if (err) reject(err);\n        else resolve(decoded as AuthJwtPayload);\n      });\n    });\n  }\n\n  /**\n   * Middleware function to handle access control based on user roles and permissions.\n   *\n   * @param {AuthConfigs} authConfigs - The configuration object for authentication and access control.\n   * @param {ControllerActions} action - The action being performed (e.g., create, update, delete, view).\n   * @param {string} modelName - The model name that the action is being performed on (e.g., \"User\", \"Post\").\n   * @returns {ArkosRequestHandler} The middleware function that checks if the user has permission to perform the action.\n   */\n  handleActionAccessControl(\n    authConfigs: AuthConfigs,\n    action: ControllerActions,\n    modelName: string\n  ): ArkosRequestHandler {\n    return catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        if (req.user) {\n          const user = req.user as any;\n          const prisma = getPrismaInstance();\n          const configs = getArkosConfig();\n\n          if (user.isSuperUser) {\n            next();\n            return;\n          }\n\n          if (configs?.authentication?.mode === \"dynamic\") {\n            const permissions = await (prisma as any).authPermission.count({\n              where: {\n                resource: kebabCase(singular(modelName)),\n                action,\n                roleId: { in: user.roles.map((role: UserRole) => role.roleId) },\n              },\n            });\n\n            if (!permissions)\n              return next(\n                new AppError(\n                  \"You do not have permission to perfom this action\",\n                  403\n                )\n              );\n          } else if (configs?.authentication?.mode === \"static\") {\n            const accessControl = authConfigs?.accessControl;\n            let authorizedRoles: any[] = [];\n\n            if (accessControl) {\n              if (Array.isArray(accessControl)) authorizedRoles = accessControl;\n              else if (accessControl[action])\n                authorizedRoles = accessControl[action];\n\n              // Checks for both cases if using single role or multiple roles\n              if (\n                !authorizedRoles.includes(req.user?.role) ||\n                ((req.user?.roles as any[]).length > 0 &&\n                  !authorizedRoles?.some((role) =>\n                    (req.user?.roles as any[]).includes(role)\n                  ))\n              )\n                return next(\n                  new AppError(\n                    \"You do not have permission to perfom this action\",\n                    403\n                  )\n                );\n            }\n          }\n        }\n\n        next();\n      }\n    );\n  }\n\n  /**\n   * Processes the cookies or authoriation token and returns the user.\n   * @param req\n   * @returns {Promise<User | null>} - if authentication is turned off in arkosConfig it returns null\n   * @throws {AppError} Throws an error if the token is invalid or the user is not logged in.\n   */\n  async getAuthenticatedUser(req: ArkosRequest): Promise<User | null> {\n    const arkosConfig = getArkosConfig();\n    if (!arkosConfig?.authentication) return null;\n\n    const prisma = getPrismaInstance();\n\n    let token: string | undefined;\n\n    if (\n      req?.headers?.authorization &&\n      req?.headers?.authorization.startsWith(\"Bearer\")\n    ) {\n      token = req?.headers?.authorization.split(\" \")[1];\n    } else if (req?.cookies?.arkos_access_token !== \"no-token\" && req.cookies) {\n      token = req?.cookies?.arkos_access_token;\n    }\n\n    if (!token)\n      throw new AppError(\n        \"You are not logged in! please log in to get access\",\n        401\n      );\n\n    let decoded: AuthJwtPayload | undefined;\n    try {\n      decoded = await this.verifyJwtToken(token);\n    } catch (err) {\n      throw new AppError(\n        \"Your auth token is invalid, please login again.\",\n        401\n      );\n    }\n\n    if (!decoded?.id)\n      throw new AppError(\n        \"Your auth token is invalid, please login again.\",\n        401\n      );\n\n    const user: any | null = await (prisma as any).user.findUnique({\n      where: { id: String(decoded.id) },\n      include: {\n        roles: {\n          include: {\n            role: {\n              include: {\n                permissions: true,\n              },\n            },\n          },\n        },\n      },\n    });\n\n    if (!user)\n      throw new AppError(\n        \"The user belonging to this token does no longer exists\",\n        401\n      );\n\n    if (\n      this.userChangedPasswordAfter(user, decoded.iat!) &&\n      !req.path.includes(\"logout\")\n    )\n      throw new AppError(\n        \"User recently changed password! Please log in again.\",\n        401\n      );\n\n    return user;\n  }\n\n  /**\n   * Middleware function to authenticate the user based on the JWT token.\n   *\n   * @param {ArkosRequest} req - The request object.\n   * @param {ArkosResponse} res - The response object.\n   * @param {ArkosNextFunction} next - The next middleware function to be called.\n   * @returns {void}\n   */\n  authenticate = catchAsync(\n    async (req: ArkosRequest, res: ArkosResponse, next: ArkosNextFunction) => {\n      const arkosConfig = getArkosConfig();\n      if (!arkosConfig?.authentication) {\n        next();\n        return;\n      }\n\n      req.user = (await this.getAuthenticatedUser(req)) as User;\n      next();\n    }\n  );\n\n  /**\n   * Handles authentication control by checking the `authenticationControl` configuration in the `authConfigs`.\n   *\n   * @param {AuthConfigs | undefined} authConfigs - The authentication configuration object.\n   * @param {ControllerActions} action - The action being performed (e.g., create, update, delete, view).\n   * @returns {ArkosRequestHandler} The middleware function that checks if authentication is required.\n   */\n  handleAuthenticationControl(\n    authConfigs: AuthConfigs | undefined,\n    action: ControllerActions\n  ): ArkosRequestHandler {\n    const authenticationControl = authConfigs?.authenticationControl;\n\n    if (authenticationControl && typeof authenticationControl === \"object\") {\n      if (authenticationControl[action] === false) return callNext;\n      else if (authenticationControl[action] === true) return this.authenticate;\n    } else return this.authenticate;\n\n    return this.authenticate;\n  }\n}\n\n/**\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\n */\nconst authService = new AuthService();\n\nexport default authService;\n"]}

package/dist/cjs/modules/auth/utils/helpers/auth.controller.helpers.js

@@ -0,0 +1,88 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getNestedValue = exports.createPrismaWhereClause = exports.determineUsernameField = void 0;
+exports.toMs = toMs;
+const server_1 = require("../../../../server");
+const app_error_1 = __importDefault(require("../../../error-handler/utils/app-error"));
+const determineUsernameField = (req) => {
+    var _a, _b, _c, _d, _e, _f, _g, _h;
+    const authConfigs = (_a = (0, server_1.getArkosConfig)()) === null || _a === void 0 ? void 0 : _a.authentication;
+    if (((_b = req.query) === null || _b === void 0 ? void 0 : _b.usernameField) &&
+        typeof ((_c = req.query) === null || _c === void 0 ? void 0 : _c.usernameField) === "string" &&
+        ((_e = (_d = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.login) === null || _d === void 0 ? void 0 : _d.allowedUsernames) === null || _e === void 0 ? void 0 : _e.includes(req.query.usernameField)))
+        return req.query.usernameField;
+    else if ((_f = req.query) === null || _f === void 0 ? void 0 : _f.usernameField)
+        throw new app_error_1.default("Invalid usernameField parameter, it is not allowed!", 400);
+    return ((_h = (_g = authConfigs === null || authConfigs === void 0 ? void 0 : authConfigs.login) === null || _g === void 0 ? void 0 : _g.allowedUsernames) === null || _h === void 0 ? void 0 : _h[0]) || "username";
+};
+exports.determineUsernameField = determineUsernameField;
+const createPrismaWhereClause = (path, value) => {
+    if (!path)
+        return {};
+    const parts = path.split(".");
+    const whereClause = {};
+    if (parts.length === 1) {
+        whereClause[parts[0]] = value;
+        return whereClause;
+    }
+    let current = whereClause;
+    for (let i = 0; i < parts.length - 1; i++) {
+        const part = parts[i];
+        current[part] = {};
+        current = current[part];
+    }
+    current[parts[parts.length - 1]] = value;
+    return whereClause;
+};
+exports.createPrismaWhereClause = createPrismaWhereClause;
+const getNestedValue = (obj, path) => {
+    if (!obj || !path)
+        return undefined;
+    const properties = path.split(".");
+    let value = obj;
+    for (const prop of properties) {
+        if (value === null || value === undefined)
+            return undefined;
+        if (prop !== "some") {
+            value = value[prop];
+        }
+    }
+    return value;
+};
+exports.getNestedValue = getNestedValue;
+function normalizeDuration(input) {
+    return input
+        .toLowerCase()
+        .replace(/years?|yr|year/g, "y")
+        .replace(/minutes?|min/g, "m")
+        .replace(/seconds?|sec|secs/g, "s")
+        .replace(/hours?|hr/g, "h")
+        .replace(/days?/g, "d")
+        .replace(/weeks?/g, "w")
+        .replace(/milliseconds?/g, "ms");
+}
+function toMs(input) {
+    if (typeof input === "number")
+        return input * 1000;
+    const normalizedInput = normalizeDuration(input.trim());
+    const regex = /^(\d+(?:\.\d+)?)(ms|s|m|h|d|w|y)$/i;
+    const match = normalizedInput.match(regex);
+    if (!match)
+        throw new Error(`Invalid time format: ${input}`);
+    const value = parseFloat(match[1]);
+    const unit = match[2].toLowerCase();
+    const multipliers = {
+        ms: 1,
+        s: 1000,
+        m: 60000,
+        h: 3600000,
+        d: 86400000,
+        w: 604800000,
+        y: 31557600000,
+    };
+    return value * multipliers[unit];
+}
+//# sourceMappingURL=auth.controller.helpers.js.map