arkos 1.2.13-beta → 1.2.13-test.1

package/dist/esm/modules/auth/auth.controller.js

@@ -1,187 +0,0 @@
-import catchAsync from "../error-handler/utils/catch-async.js";
-import AppError from "../error-handler/utils/app-error.js";
-import authService from "./auth.service.js";
-import { getBaseServices } from "../base/base.service.js";
-import arkosEnv from "../../utils/arkos-env.js";
-import { getArkosConfig } from "../../server.js";
-import { createPrismaWhereClause, determineUsernameField, getNestedValue, toMs, } from "./utils/helpers/auth.controller.helpers.js";
-export const defaultExcludedUserFields = {
-    password: false,
-};
-export const authControllerFactory = async (middlewares = {}) => {
-    const userService = getBaseServices()["user"];
-    return {
-        getMe: catchAsync(async (req, res, next) => {
-            const user = (await userService.findOne({ id: req.user.id }, req.prismaQueryOptions || {}));
-            Object.keys(defaultExcludedUserFields).forEach((key) => {
-                if (user)
-                    delete user[key];
-            });
-            if (middlewares?.afterGetMe) {
-                req.responseData = { data: user };
-                req.responseStatus = 200;
-                return next();
-            }
-            res.status(200).json({ data: user });
-        }),
-        updateMe: catchAsync(async (req, res, next) => {
-            if ("password" in req.body)
-                throw new AppError("In order to update password use the update-password endpoint.", 400, {}, "InvalidFieldPassword");
-            const user = (await userService.updateOne({ id: req.user.id }, req.body, req.prismaQueryOptions || {}));
-            Object.keys(defaultExcludedUserFields).forEach((key) => {
-                if (user)
-                    delete user[key];
-            });
-            if (middlewares?.afterUpdateMe) {
-                req.responseData = { data: user };
-                req.responseStatus = 200;
-                return next();
-            }
-            res.status(200).json({ data: user });
-        }),
-        logout: catchAsync(async (req, res, next) => {
-            res.cookie("arkos_access_token", "no-token", {
-                expires: new Date(Date.now() + 10 * 1000),
-                httpOnly: true,
-            });
-            if (middlewares?.afterLogout) {
-                req.responseData = null;
-                req.responseStatus = 204;
-                return next();
-            }
-            res.status(204).json();
-        }),
-        login: catchAsync(async (req, res, next) => {
-            const authConfigs = getArkosConfig()?.authentication;
-            const usernameField = determineUsernameField(req);
-            const lastField = usernameField.split(".")[usernameField.split(".").length - 1];
-            const usernameValue = req.body[lastField];
-            const { password } = req.body;
-            if (!usernameValue || !password)
-                return next(new AppError(`Please provide both ${lastField} and password`, 400));
-            let whereClause;
-            if (usernameField?.includes?.(".")) {
-                const valueToFind = getNestedValue(req.body, usernameField);
-                if (valueToFind === undefined) {
-                    return next(new AppError(`Invalid ${usernameField} provided`, 400));
-                }
-                whereClause = createPrismaWhereClause(usernameField, valueToFind);
-            }
-            else {
-                whereClause = { [usernameField]: usernameValue };
-            }
-            const user = (await userService.findOne(whereClause, req.prismaQueryOptions || {}));
-            if (!user ||
-                !(await authService.isCorrectPassword(password, user.password))) {
-                return next(new AppError(`Incorrect ${lastField} or password`, 401));
-            }
-            const token = authService.signJwtToken(user.id);
-            const cookieOptions = {
-                expires: new Date(Date.now() +
-                    Number(toMs(authConfigs?.jwt?.expiresIn ||
-                        process.env.JWT_EXPIRES_IN ||
-                        arkosEnv.JWT_EXPIRES_IN))),
-                httpOnly: authConfigs?.jwt?.cookie?.httpOnly ||
-                    process.env.JWT_COOKIE_HTTP_ONLY === "true" ||
-                    true,
-                secure: authConfigs?.jwt?.cookie?.secure ||
-                    process.env.JWT_COOKIE_SECURE === "true" ||
-                    req.secure ||
-                    req.headers["x-forwarded-proto"] === "https",
-                sameSite: authConfigs?.jwt?.cookie?.sameSite ||
-                    process.env.JWT_COOKIE_SAME_SITE ||
-                    (process.env.NODE_ENV === "production" ? "none" : "lax"),
-            };
-            if (authConfigs?.login?.sendAccessTokenThrough === "response-only" ||
-                authConfigs?.login?.sendAccessTokenThrough === "both" ||
-                !authConfigs?.login?.sendAccessTokenThrough) {
-                req.responseData = { accessToken: token };
-            }
-            if (authConfigs?.login?.sendAccessTokenThrough === "cookie-only" ||
-                authConfigs?.login?.sendAccessTokenThrough === "both" ||
-                !authConfigs?.login?.sendAccessTokenThrough)
-                res.cookie("arkos_access_token", token, cookieOptions);
-            if (middlewares?.afterLogin) {
-                req.additionalData = { user };
-                req.responseStatus = 200;
-                return next();
-            }
-            if (authConfigs?.login?.sendAccessTokenThrough === "response-only" ||
-                authConfigs?.login?.sendAccessTokenThrough === "both" ||
-                !authConfigs?.login?.sendAccessTokenThrough) {
-                res.status(200).json(req.responseData);
-            }
-            else if (authConfigs?.login?.sendAccessTokenThrough === "cookie-only" ||
-                authConfigs?.login?.sendAccessTokenThrough === "both" ||
-                !authConfigs?.login?.sendAccessTokenThrough)
-                res.status(200).send();
-        }),
-        signup: catchAsync(async (req, res, next) => {
-            const user = (await userService.createOne(req.body, req.prismaQueryOptions || {}));
-            if (middlewares?.afterSignup) {
-                req.responseData = { data: user };
-                req.responseStatus = 201;
-                return next();
-            }
-            Object.keys(defaultExcludedUserFields).forEach((key) => {
-                delete user[key];
-            });
-            res.status(201).json({ data: user });
-        }),
-        deleteMe: catchAsync(async (req, res, next) => {
-            const userId = req.user.id;
-            const updatedUser = (await userService.updateOne({ id: userId }, {
-                deletedSelfAccountAt: new Date().toISOString(),
-            }, req.prismaQueryOptions || {}));
-            if (middlewares?.afterDeleteMe) {
-                req.responseData = { data: updatedUser };
-                req.responseStatus = 200;
-                return next();
-            }
-            Object.keys(defaultExcludedUserFields).forEach((key) => {
-                delete updatedUser[key];
-            });
-            res.status(200).json({
-                message: "Account deleted successfully",
-            });
-        }),
-        updatePassword: catchAsync(async (req, res, next) => {
-            const { currentPassword, newPassword } = req.body;
-            if (!currentPassword || !newPassword)
-                return next(new AppError("currentPassword and newPassword are required", 400));
-            const user = req.user;
-            if (!user || user?.isActive === false || user?.deletedSelfAccountAt)
-                return next(new AppError("User not found!", 404));
-            const isPasswordCorrect = await authService.isCorrectPassword(String(currentPassword), String(user.password));
-            const configs = getArkosConfig();
-            const initAuthConfigs = configs?.authentication;
-            if (!isPasswordCorrect)
-                return next(new AppError("Current password is incorrect.", 400));
-            if (!authService.isPasswordStrong(String(newPassword)) &&
-                !configs?.validation) {
-                return next(new AppError(initAuthConfigs?.passwordValidation?.message ||
-                    "The new password must contain at least one uppercase letter, one lowercase letter, and one number", 400));
-            }
-            await userService.updateOne({ id: user.id }, {
-                password: await authService.hashPassword(newPassword),
-                passwordChangedAt: new Date(Date.now()),
-            });
-            if (middlewares?.afterUpdatePassword) {
-                req.additionalData = {
-                    user,
-                };
-                req.responseData = {
-                    status: "success",
-                    message: "Password updated successfully!",
-                };
-                req.responseStatus = 200;
-                return next();
-            }
-            res.status(200).json({
-                status: "success",
-                message: "Password updated successfully!",
-            });
-        }),
-    };
-};
-//# sourceMappingURL=auth.controller.js.map

package/dist/esm/modules/auth/auth.controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.controller.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,oCAAoC,CAAC;AAC5D,OAAO,QAAQ,MAAM,kCAAkC,CAAC;AAGxD,OAAO,WAAW,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,QAAQ,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,cAAc,EAEd,IAAI,GACL,MAAM,yCAAyC,CAAC;AAKjD,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,KAAK;CAChB,CAAC;AAQF,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,cAAmB,EAAE,EAAE,EAAE;IACnE,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC;IAE9C,OAAO;QAIL,KAAK,EAAE,UAAU,CACf,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,CACrC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,IAAI,WAAW,EAAE,UAAU,EAAE,CAAC;gBAC5B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAKD,QAAQ,EAAE,UAAU,CAClB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,IAAI,UAAU,IAAI,GAAG,CAAC,IAAI;gBACxB,MAAM,IAAI,QAAQ,CAChB,+DAA+D,EAC/D,GAAG,EACH,EAAE,EACF,sBAAsB,CACvB,CAAC;YAEJ,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CACvC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,IAAI,WAAW,EAAE,aAAa,EAAE,CAAC;gBAC/B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAKD,MAAM,EAAE,UAAU,CAChB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,UAAU,EAAE;gBAC3C,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBACzC,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,IAAI,WAAW,EAAE,WAAW,EAAE,CAAC;gBAC7B,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;gBACxB,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC,CACF;QAQD,KAAK,EAAE,UAAU,CACf,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,WAAW,GAAG,cAAc,EAAE,EAAE,cAAc,CAAC;YAErD,MAAM,aAAa,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAGlD,MAAM,SAAS,GACb,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAEhE,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE1C,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAE9B,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ;gBAC7B,OAAO,IAAI,CACT,IAAI,QAAQ,CAAC,uBAAuB,SAAS,eAAe,EAAE,GAAG,CAAC,CACnE,CAAC;YAGJ,IAAI,WAAgC,CAAC;YAErC,IAAI,aAAa,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;gBAEnC,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,WAAW,aAAa,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtE,CAAC;gBACD,WAAW,GAAG,uBAAuB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBAEN,WAAW,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,CAAC;YACnD,CAAC;YAGD,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,CACrC,WAAW,EACX,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IACE,CAAC,IAAI;gBACL,CAAC,CAAC,MAAM,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAC/D,CAAC;gBACD,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,aAAa,SAAS,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,EAAG,CAAC,CAAC;YAEjD,MAAM,aAAa,GAAkB;gBACnC,OAAO,EAAE,IAAI,IAAI,CACf,IAAI,CAAC,GAAG,EAAE;oBACR,MAAM,CACJ,IAAI,CACF,WAAW,EAAE,GAAG,EAAE,SAAS;wBACxB,OAAO,CAAC,GAAG,CAAC,cAA6B;wBACzC,QAAQ,CAAC,cAA6B,CAC1C,CACF,CACJ;gBACD,QAAQ,EACN,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;oBAClC,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM;oBAC3C,IAAI;gBACN,MAAM,EACJ,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM;oBAChC,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM;oBACxC,GAAG,CAAC,MAAM;oBACV,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO;gBAC9C,QAAQ,EACN,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;oBACjC,OAAO,CAAC,GAAG,CAAC,oBAIC;oBACd,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;aAC3D,CAAC;YAEF,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,eAAe;gBAC9D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB,EAC3C,CAAC;gBACD,GAAG,CAAC,YAAY,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YAC5C,CAAC;YAED,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,aAAa;gBAC5D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB;gBAE3C,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YAEzD,IAAI,WAAW,EAAE,UAAU,EAAE,CAAC;gBAC5B,GAAG,CAAC,cAAc,GAAG,EAAE,IAAI,EAAE,CAAC;gBAC9B,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,eAAe;gBAC9D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB,EAC3C,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;iBAAM,IACL,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,aAAa;gBAC5D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB;gBAE3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC,CACF;QAKD,MAAM,EAAE,UAAU,CAChB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CACvC,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IAAI,WAAW,EAAE,WAAW,EAAE,CAAC;gBAC7B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAID,QAAQ,EAAE,UAAU,CAClB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAK,CAAC,EAAE,CAAC;YAE5B,MAAM,WAAW,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CAC9C,EAAE,EAAE,EAAE,MAAM,EAAE,EACd;gBACE,oBAAoB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC/C,EACD,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IAAI,WAAW,EAAE,aAAa,EAAE,CAAC;gBAC/B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;gBACzC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,OAAO,WAAW,CAAC,GAAiB,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,8BAA8B;aACxC,CAAC,CAAC;QACL,CAAC,CACF;QAKD,cAAc,EAAE,UAAU,CACxB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAElD,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW;gBAClC,OAAO,IAAI,CACT,IAAI,QAAQ,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAClE,CAAC;YAEJ,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAEtB,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,QAAQ,KAAK,KAAK,IAAI,IAAI,EAAE,oBAAoB;gBACjE,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,CAAC;YAGpD,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAC3D,MAAM,CAAC,eAAe,CAAC,EACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CACtB,CAAC;YAEF,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;YACjC,MAAM,eAAe,GAAG,OAAO,EAAE,cAAc,CAAC;YAGhD,IAAI,CAAC,iBAAiB;gBACpB,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC,CAAC;YAGnE,IACE,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAClD,CAAC,OAAO,EAAE,UAAU,EACpB,CAAC;gBACD,OAAO,IAAI,CACT,IAAI,QAAQ,CACV,eAAe,EAAE,kBAAkB,EAAE,OAAO;oBAC1C,mGAAmG,EACrG,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;YAGD,MAAM,WAAW,CAAC,SAAS,CACzB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EACf;gBACE,QAAQ,EAAE,MAAM,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC;gBACrD,iBAAiB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;aACxC,CACF,CAAC;YAEF,IAAI,WAAW,EAAE,mBAAmB,EAAE,CAAC;gBACrC,GAAG,CAAC,cAAc,GAAG;oBACnB,IAAI;iBACL,CAAC;gBACF,GAAG,CAAC,YAAY,GAAG;oBACjB,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,gCAAgC;iBAC1C,CAAC;gBACF,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;QACL,CAAC,CACF;KACF,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import catchAsync from \"../error-handler/utils/catch-async\";\nimport AppError from \"../error-handler/utils/app-error\";\nimport { CookieOptions } from \"express\";\nimport { ArkosRequest, ArkosResponse, ArkosNextFunction } from \"../../types\";\nimport authService from \"./auth.service\";\nimport { getBaseServices } from \"../base/base.service\";\nimport { User } from \"../../types\";\nimport arkosEnv from \"../../utils/arkos-env\";\nimport { getArkosConfig } from \"../../server\";\nimport {\n  createPrismaWhereClause,\n  determineUsernameField,\n  getNestedValue,\n  MsDuration,\n  toMs,\n} from \"./utils/helpers/auth.controller.helpers\";\n\n/**\n * Default fields to exclude from user object when returning to client\n */\nexport const defaultExcludedUserFields = {\n  password: false,\n};\n\n/**\n * Factory function to create authentication controller with configurable middlewares\n *\n * @param middlewares - Optional middleware functions to execute after controller actions\n * @returns An object containing all authentication controller methods\n */\nexport const authControllerFactory = async (middlewares: any = {}) => {\n  const userService = getBaseServices()[\"user\"];\n\n  return {\n    /**\n     * Retrieves the current authenticated user's information\n     */\n    getMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const user = (await userService.findOne(\n          { id: req.user!.id },\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (user) delete user[key as keyof User];\n        });\n\n        if (middlewares?.afterGetMe) {\n          req.responseData = { data: user };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: user });\n      }\n    ),\n\n    /**\n     * Updates the current authenticated user's information\n     */\n    updateMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        if (\"password\" in req.body)\n          throw new AppError(\n            \"In order to update password use the update-password endpoint.\",\n            400,\n            {},\n            \"InvalidFieldPassword\"\n          );\n\n        const user = (await userService.updateOne(\n          { id: req.user!.id },\n          req.body,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (user) delete user[key as keyof User];\n        });\n\n        if (middlewares?.afterUpdateMe) {\n          req.responseData = { data: user };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: user });\n      }\n    ),\n\n    /**\n     * Logs out the current user by invalidating their access token cookie\n     */\n    logout: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        res.cookie(\"arkos_access_token\", \"no-token\", {\n          expires: new Date(Date.now() + 10 * 1000),\n          httpOnly: true,\n        });\n\n        if (middlewares?.afterLogout) {\n          req.responseData = null;\n          req.responseStatus = 204;\n          return next();\n        }\n\n        res.status(204).json();\n      }\n    ),\n\n    /**\n     * Authenticates a user using configurable username field and password\n     * Username field can be specified in query parameter or config\n     *\n     * Supports nested fields and array queries (e.g., \"profile.nickname\", \"phones.some.number\")\n     */\n    login: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const authConfigs = getArkosConfig()?.authentication;\n\n        const usernameField = determineUsernameField(req);\n\n        // For the error message, we only care about the top-level field name\n        const lastField =\n          usernameField.split(\".\")[usernameField.split(\".\").length - 1];\n\n        const usernameValue = req.body[lastField];\n\n        const { password } = req.body;\n\n        if (!usernameValue || !password)\n          return next(\n            new AppError(`Please provide both ${lastField} and password`, 400)\n          );\n\n        // Create appropriate where clause for the query\n        let whereClause: Record<string, any>;\n\n        if (usernameField?.includes?.(\".\")) {\n          // For nested paths, we need to extract the actual value to search for\n          const valueToFind = getNestedValue(req.body, usernameField);\n          if (valueToFind === undefined) {\n            return next(new AppError(`Invalid ${usernameField} provided`, 400));\n          }\n          whereClause = createPrismaWhereClause(usernameField, valueToFind);\n        } else {\n          // Simple field case\n          whereClause = { [usernameField]: usernameValue };\n        }\n\n        // Use findFirst instead of findUnique for complex queries\n        const user = (await userService.findOne(\n          whereClause,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (\n          !user ||\n          !(await authService.isCorrectPassword(password, user.password))\n        ) {\n          return next(new AppError(`Incorrect ${lastField} or password`, 401));\n        }\n\n        const token = authService.signJwtToken(user.id!);\n\n        const cookieOptions: CookieOptions = {\n          expires: new Date(\n            Date.now() +\n              Number(\n                toMs(\n                  authConfigs?.jwt?.expiresIn ||\n                    (process.env.JWT_EXPIRES_IN as MsDuration) ||\n                    (arkosEnv.JWT_EXPIRES_IN as MsDuration)\n                )\n              )\n          ),\n          httpOnly:\n            authConfigs?.jwt?.cookie?.httpOnly ||\n            process.env.JWT_COOKIE_HTTP_ONLY === \"true\" ||\n            true,\n          secure:\n            authConfigs?.jwt?.cookie?.secure ||\n            process.env.JWT_COOKIE_SECURE === \"true\" ||\n            req.secure ||\n            req.headers[\"x-forwarded-proto\"] === \"https\",\n          sameSite:\n            authConfigs?.jwt?.cookie?.sameSite ||\n            (process.env.JWT_COOKIE_SAME_SITE as\n              | \"none\"\n              | \"lax\"\n              | \"strict\"\n              | undefined) ||\n            (process.env.NODE_ENV === \"production\" ? \"none\" : \"lax\"),\n        };\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"response-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        ) {\n          req.responseData = { accessToken: token };\n        }\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"cookie-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        )\n          res.cookie(\"arkos_access_token\", token, cookieOptions);\n\n        if (middlewares?.afterLogin) {\n          req.additionalData = { user };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"response-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        ) {\n          res.status(200).json(req.responseData);\n        } else if (\n          authConfigs?.login?.sendAccessTokenThrough === \"cookie-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        )\n          res.status(200).send();\n      }\n    ),\n\n    /**\n     * Creates a new user account using the userService\n     */\n    signup: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const user = (await userService.createOne(\n          req.body,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (middlewares?.afterSignup) {\n          req.responseData = { data: user };\n          req.responseStatus = 201;\n          return next();\n        }\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          delete user[key as keyof User];\n        });\n\n        res.status(201).json({ data: user });\n      }\n    ),\n    /**\n     * Marks user account as self-deleted by setting deletedSelfAccountAt timestamp\n     */\n    deleteMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const userId = req.user!.id; // Assuming the authenticated user's ID is available in req.user\n\n        const updatedUser = (await userService.updateOne(\n          { id: userId },\n          {\n            deletedSelfAccountAt: new Date().toISOString(),\n          },\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (middlewares?.afterDeleteMe) {\n          req.responseData = { data: updatedUser };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          delete updatedUser[key as keyof User];\n        });\n\n        res.status(200).json({\n          message: \"Account deleted successfully\",\n        });\n      }\n    ),\n\n    /**\n     * Updates the password of the authenticated user\n     */\n    updatePassword: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const { currentPassword, newPassword } = req.body;\n\n        if (!currentPassword || !newPassword)\n          return next(\n            new AppError(\"currentPassword and newPassword are required\", 400)\n          );\n\n        const user = req.user;\n\n        if (!user || user?.isActive === false || user?.deletedSelfAccountAt)\n          return next(new AppError(\"User not found!\", 404));\n\n        // Check if the current password is correct\n        const isPasswordCorrect = await authService.isCorrectPassword(\n          String(currentPassword),\n          String(user.password)\n        );\n\n        const configs = getArkosConfig();\n        const initAuthConfigs = configs?.authentication;\n        // const modules = getModelModules(\"auth\");\n\n        if (!isPasswordCorrect)\n          return next(new AppError(\"Current password is incorrect.\", 400));\n\n        // Check password strength (optional but recommended)\n        if (\n          !authService.isPasswordStrong(String(newPassword)) &&\n          !configs?.validation\n        ) {\n          return next(\n            new AppError(\n              initAuthConfigs?.passwordValidation?.message ||\n                \"The new password must contain at least one uppercase letter, one lowercase letter, and one number\",\n              400\n            )\n          );\n        }\n\n        // Update the password\n        await userService.updateOne(\n          { id: user.id },\n          {\n            password: await authService.hashPassword(newPassword),\n            passwordChangedAt: new Date(Date.now()),\n          }\n        );\n\n        if (middlewares?.afterUpdatePassword) {\n          req.additionalData = {\n            user,\n          };\n          req.responseData = {\n            status: \"success\",\n            message: \"Password updated successfully!\",\n          };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({\n          status: \"success\",\n          message: \"Password updated successfully!\",\n        });\n      }\n    ),\n  };\n};\n"]}

package/dist/esm/modules/auth/auth.router.js

@@ -1,44 +0,0 @@
-import { Router } from "express";
-import { authControllerFactory } from "./auth.controller.js";
-import authService from "./auth.service.js";
-import rateLimit from "express-rate-limit";
-import { importPrismaModelModules } from "../../utils/helpers/models.helpers.js";
-import { addPrismaQueryOptionsToRequest, handleRequestBodyValidationAndTransformation, sendResponse, } from "../base/base.middlewares.js";
-import deepmerge from "../../utils/helpers/deepmerge.helper.js";
-import { processMiddleware } from "../../utils/helpers/routers.helpers.js";
-const router = Router();
-export async function getAuthRouter(arkosConfigs) {
-    const { middlewares, dtos, schemas, prismaQueryOptions } = await importPrismaModelModules("auth", arkosConfigs);
-    const authController = await authControllerFactory(middlewares);
-    const getValidationSchemaOrDto = (key) => {
-        const validationConfigs = arkosConfigs?.validation;
-        if (validationConfigs?.resolver === "class-validator") {
-            return dtos?.[key];
-        }
-        else if (validationConfigs?.resolver === "zod") {
-            return schemas?.[key];
-        }
-        return undefined;
-    };
-    router
-        .get("/users/me", authService.authenticate, addPrismaQueryOptionsToRequest(prismaQueryOptions, "getMe"), ...processMiddleware(middlewares?.beforeGetMe), authController.getMe, ...processMiddleware(middlewares?.afterGetMe), sendResponse)
-        .patch("/users/me", authService.authenticate, handleRequestBodyValidationAndTransformation(getValidationSchemaOrDto("updateMe")), addPrismaQueryOptionsToRequest(prismaQueryOptions, "updateMe"), ...processMiddleware(middlewares?.beforeUpdateMe), authController.updateMe, ...processMiddleware(middlewares?.afterUpdateMe), sendResponse)
-        .delete("/users/me", authService.authenticate, addPrismaQueryOptionsToRequest(prismaQueryOptions, "deleteMe"), ...processMiddleware(middlewares?.beforeDeleteMe), authController.deleteMe, ...processMiddleware(middlewares?.afterDeleteMe), sendResponse);
-    router.use("/auth", rateLimit(deepmerge({
-        windowMs: 5000,
-        limit: 10,
-        standardHeaders: "draft-7",
-        legacyHeaders: false,
-        handler: (req, res) => {
-            res.status(429).json({
-                message: "Too many requests, please try again later",
-            });
-        },
-    }, arkosConfigs?.authentication?.requestRateLimitOptions || {})));
-    router.post("/auth/login", handleRequestBodyValidationAndTransformation(getValidationSchemaOrDto("login")), addPrismaQueryOptionsToRequest(prismaQueryOptions, "login"), ...processMiddleware(middlewares?.beforeLogin), authController.login, ...processMiddleware(middlewares?.afterLogin), sendResponse);
-    router.delete("/auth/logout", authService.authenticate, ...processMiddleware(middlewares?.beforeLogout), authController.logout, ...processMiddleware(middlewares?.afterLogout), sendResponse);
-    router.post("/auth/signup", handleRequestBodyValidationAndTransformation(getValidationSchemaOrDto("signup")), addPrismaQueryOptionsToRequest(prismaQueryOptions, "signup"), ...processMiddleware(middlewares?.beforeSignup), authController.signup, ...processMiddleware(middlewares?.afterSignup), sendResponse);
-    router.post("/auth/update-password", authService.authenticate, handleRequestBodyValidationAndTransformation(getValidationSchemaOrDto("updatePassword")), addPrismaQueryOptionsToRequest(prismaQueryOptions, "updatePassword"), ...processMiddleware(middlewares?.beforeUpdatePassword), authController.updatePassword, ...processMiddleware(middlewares?.afterUpdatePassword), sendResponse);
-    return router;
-}
-//# sourceMappingURL=auth.router.js.map

package/dist/esm/modules/auth/auth.router.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.router.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,WAAW,MAAM,gBAAgB,CAAC;AACzC,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EACL,8BAA8B,EAC9B,4CAA4C,EAC5C,YAAY,GACb,MAAM,0BAA0B,CAAC;AAElC,OAAO,SAAS,MAAM,sCAAsC,CAAC;AAE7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAExE,MAAM,MAAM,GAAW,MAAM,EAAE,CAAC;AAEhC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,YAAyB;IAC3D,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,GACtD,MAAM,wBAAwB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAGhE,MAAM,wBAAwB,GAAG,CAAC,GAAW,EAAE,EAAE;QAC/C,MAAM,iBAAiB,GAAG,YAAY,EAAE,UAAU,CAAC;QACnD,IAAI,iBAAiB,EAAE,QAAQ,KAAK,iBAAiB,EAAE,CAAC;YACtD,OAAO,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,iBAAiB,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;YACjD,OAAO,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM;SACH,GAAG,CACF,WAAW,EACX,WAAW,CAAC,YAAY,EACxB,8BAA8B,CAC5B,kBAAiD,EACjD,OAAO,CACR,EACD,GAAG,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,EAC9C,cAAc,CAAC,KAAK,EACpB,GAAG,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC,EAC7C,YAAY,CACb;SACA,KAAK,CACJ,WAAW,EACX,WAAW,CAAC,YAAY,EACxB,4CAA4C,CAC1C,wBAAwB,CAAC,UAAU,CAAC,CACrC,EACD,8BAA8B,CAC5B,kBAAiD,EACjD,UAAU,CACX,EACD,GAAG,iBAAiB,CAAC,WAAW,EAAE,cAAc,CAAC,EACjD,cAAc,CAAC,QAAQ,EACvB,GAAG,iBAAiB,CAAC,WAAW,EAAE,aAAa,CAAC,EAChD,YAAY,CACb;SACA,MAAM,CACL,WAAW,EACX,WAAW,CAAC,YAAY,EACxB,8BAA8B,CAC5B,kBAAiD,EACjD,UAAU,CACX,EACD,GAAG,iBAAiB,CAAC,WAAW,EAAE,cAAc,CAAC,EACjD,cAAc,CAAC,QAAQ,EACvB,GAAG,iBAAiB,CAAC,WAAW,EAAE,aAAa,CAAC,EAChD,YAAY,CACb,CAAC;IAEJ,MAAM,CAAC,GAAG,CACR,OAAO,EACP,SAAS,CACP,SAAS,CACP;QACE,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,EAAE;QACT,eAAe,EAAE,SAAS;QAC1B,aAAa,EAAE,KAAK;QACpB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,2CAA2C;aACrD,CAAC,CAAC;QACL,CAAC;KACF,EACD,YAAY,EAAE,cAAc,EAAE,uBAAuB,IAAI,EAAE,CAC5D,CACF,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,aAAa,EACb,4CAA4C,CAC1C,wBAAwB,CAAC,OAAO,CAAC,CAClC,EACD,8BAA8B,CAC5B,kBAAiD,EACjD,OAAO,CACR,EACD,GAAG,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,EAC9C,cAAc,CAAC,KAAK,EACpB,GAAG,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC,EAC7C,YAAY,CACb,CAAC;IAEF,MAAM,CAAC,MAAM,CACX,cAAc,EACd,WAAW,CAAC,YAAY,EACxB,GAAG,iBAAiB,CAAC,WAAW,EAAE,YAAY,CAAC,EAC/C,cAAc,CAAC,MAAM,EACrB,GAAG,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,EAC9C,YAAY,CACb,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,cAAc,EACd,4CAA4C,CAC1C,wBAAwB,CAAC,QAAQ,CAAC,CACnC,EACD,8BAA8B,CAC5B,kBAAiD,EACjD,QAAQ,CACT,EACD,GAAG,iBAAiB,CAAC,WAAW,EAAE,YAAY,CAAC,EAC/C,cAAc,CAAC,MAAM,EACrB,GAAG,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,EAC9C,YAAY,CACb,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,WAAW,CAAC,YAAY,EACxB,4CAA4C,CAC1C,wBAAwB,CAAC,gBAAgB,CAAC,CAC3C,EACD,8BAA8B,CAC5B,kBAAiD,EACjD,gBAAgB,CACjB,EACD,GAAG,iBAAiB,CAAC,WAAW,EAAE,oBAAoB,CAAC,EACvD,cAAc,CAAC,cAAc,EAC7B,GAAG,iBAAiB,CAAC,WAAW,EAAE,mBAAmB,CAAC,EACtD,YAAY,CACb,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { Router } from \"express\";\nimport { authControllerFactory } from \"./auth.controller\";\nimport authService from \"./auth.service\";\nimport rateLimit from \"express-rate-limit\";\nimport { importPrismaModelModules } from \"../../utils/helpers/models.helpers\";\nimport {\n  addPrismaQueryOptionsToRequest,\n  handleRequestBodyValidationAndTransformation,\n  sendResponse,\n} from \"../base/base.middlewares\";\nimport { ArkosConfig } from \"../../types/arkos-config\";\nimport deepmerge from \"../../utils/helpers/deepmerge.helper\";\nimport { AuthPrismaQueryOptions } from \"../../types\";\nimport { processMiddleware } from \"../../utils/helpers/routers.helpers\";\n\nconst router: Router = Router();\n\nexport async function getAuthRouter(arkosConfigs: ArkosConfig) {\n  const { middlewares, dtos, schemas, prismaQueryOptions } =\n    await importPrismaModelModules(\"auth\", arkosConfigs);\n  const authController = await authControllerFactory(middlewares);\n\n  // Helper to get the correct schema or DTO based on Arkos Config\n  const getValidationSchemaOrDto = (key: string) => {\n    const validationConfigs = arkosConfigs?.validation;\n    if (validationConfigs?.resolver === \"class-validator\") {\n      return dtos?.[key];\n    } else if (validationConfigs?.resolver === \"zod\") {\n      return schemas?.[key];\n    }\n    return undefined;\n  };\n\n  router\n    .get(\n      \"/users/me\",\n      authService.authenticate,\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"getMe\"\n      ),\n      ...processMiddleware(middlewares?.beforeGetMe),\n      authController.getMe,\n      ...processMiddleware(middlewares?.afterGetMe),\n      sendResponse\n    )\n    .patch(\n      \"/users/me\",\n      authService.authenticate,\n      handleRequestBodyValidationAndTransformation(\n        getValidationSchemaOrDto(\"updateMe\")\n      ),\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"updateMe\"\n      ),\n      ...processMiddleware(middlewares?.beforeUpdateMe),\n      authController.updateMe,\n      ...processMiddleware(middlewares?.afterUpdateMe),\n      sendResponse\n    )\n    .delete(\n      \"/users/me\",\n      authService.authenticate,\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"deleteMe\"\n      ),\n      ...processMiddleware(middlewares?.beforeDeleteMe),\n      authController.deleteMe,\n      ...processMiddleware(middlewares?.afterDeleteMe),\n      sendResponse\n    );\n\n  router.use(\n    \"/auth\",\n    rateLimit(\n      deepmerge(\n        {\n          windowMs: 5000,\n          limit: 10,\n          standardHeaders: \"draft-7\",\n          legacyHeaders: false,\n          handler: (req, res) => {\n            res.status(429).json({\n              message: \"Too many requests, please try again later\",\n            });\n          },\n        },\n        arkosConfigs?.authentication?.requestRateLimitOptions || {}\n      )\n    )\n  );\n\n  router.post(\n    \"/auth/login\",\n    handleRequestBodyValidationAndTransformation(\n      getValidationSchemaOrDto(\"login\")\n    ),\n    addPrismaQueryOptionsToRequest<any>(\n      prismaQueryOptions as AuthPrismaQueryOptions<any>,\n      \"login\"\n    ),\n    ...processMiddleware(middlewares?.beforeLogin),\n    authController.login,\n    ...processMiddleware(middlewares?.afterLogin),\n    sendResponse\n  );\n\n  router.delete(\n    \"/auth/logout\",\n    authService.authenticate,\n    ...processMiddleware(middlewares?.beforeLogout),\n    authController.logout,\n    ...processMiddleware(middlewares?.afterLogout),\n    sendResponse\n  );\n\n  router.post(\n    \"/auth/signup\",\n    handleRequestBodyValidationAndTransformation(\n      getValidationSchemaOrDto(\"signup\")\n    ),\n    addPrismaQueryOptionsToRequest<any>(\n      prismaQueryOptions as AuthPrismaQueryOptions<any>,\n      \"signup\"\n    ),\n    ...processMiddleware(middlewares?.beforeSignup),\n    authController.signup,\n    ...processMiddleware(middlewares?.afterSignup),\n    sendResponse\n  );\n\n  router.post(\n    \"/auth/update-password\",\n    authService.authenticate,\n    handleRequestBodyValidationAndTransformation(\n      getValidationSchemaOrDto(\"updatePassword\")\n    ),\n    addPrismaQueryOptionsToRequest<any>(\n      prismaQueryOptions as AuthPrismaQueryOptions<any>,\n      \"updatePassword\"\n    ),\n    ...processMiddleware(middlewares?.beforeUpdatePassword),\n    authController.updatePassword,\n    ...processMiddleware(middlewares?.afterUpdatePassword),\n    sendResponse\n  );\n\n  return router;\n}\n"]}

package/dist/esm/modules/auth/auth.service.js

@@ -1,178 +0,0 @@
-import jwt from "jsonwebtoken";
-import bcrypt from "bcryptjs";
-import catchAsync from "../error-handler/utils/catch-async.js";
-import AppError from "../error-handler/utils/app-error.js";
-import { callNext } from "../base/base.middlewares.js";
-import { getArkosConfig } from "../../server.js";
-import arkosEnv from "../../utils/arkos-env.js";
-import { getPrismaInstance } from "../../utils/helpers/prisma.helpers.js";
-export class AuthService {
-    constructor() {
-        this.authenticate = catchAsync(async (req, res, next) => {
-            const arkosConfig = getArkosConfig();
-            if (!arkosConfig?.authentication) {
-                next();
-                return;
-            }
-            req.user = (await this.getAuthenticatedUser(req));
-            next();
-        });
-    }
-    signJwtToken(id, expiresIn, secret) {
-        const { authentication: configs } = getArkosConfig();
-        if (process.env.NODE_ENV === "production" &&
-            !process.env.JWT_SECRET &&
-            !configs?.jwt?.secret)
-            throw new AppError("Missing JWT secret on production!", 500, {}, "MissingJWTOnProduction");
-        secret =
-            secret ||
-                configs?.jwt?.secret ||
-                process.env.JWT_SECRET ||
-                arkosEnv.JWT_SECRET;
-        expiresIn = (expiresIn ||
-            configs?.jwt?.expiresIn ||
-            process.env.JWT_EXPIRES_IN ||
-            arkosEnv.JWT_EXPIRES_IN);
-        return jwt.sign({ id }, secret, {
-            expiresIn: expiresIn,
-        });
-    }
-    isPasswordHashed(password) {
-        return !Number.isNaN(bcrypt.getRounds(password) * 1);
-    }
-    async isCorrectPassword(candidatePassword, userPassword) {
-        return await bcrypt.compare(candidatePassword, userPassword);
-    }
-    async hashPassword(password) {
-        return await bcrypt.hash(password, 12);
-    }
-    isPasswordStrong(password) {
-        const initAuthConfigs = getArkosConfig()?.authentication;
-        const strongPasswordRegex = initAuthConfigs?.passwordValidation?.regex ||
-            /^(?=.*[A-Z])(?=.*[a-z])(?=.*\d).+$/;
-        return strongPasswordRegex.test(password);
-    }
-    userChangedPasswordAfter(user, JWTTimestamp) {
-        if (user.passwordChangedAt) {
-            const convertedTimestamp = parseInt(String(user.passwordChangedAt.getTime() / 1000), 10);
-            return JWTTimestamp < convertedTimestamp;
-        }
-        return false;
-    }
-    async verifyJwtToken(token, secret) {
-        const { authentication: configs } = getArkosConfig();
-        if (process.env.NODE_ENV === "production" &&
-            !process.env.JWT_SECRET &&
-            !configs?.jwt?.secret)
-            throw new AppError("Missing JWT secret!", 500);
-        secret =
-            secret ||
-                configs?.jwt?.secret ||
-                process.env.JWT_SECRET ||
-                arkosEnv.JWT_SECRET;
-        return new Promise((resolve, reject) => {
-            jwt.verify(token, secret, (err, decoded) => {
-                if (err)
-                    reject(err);
-                else
-                    resolve(decoded);
-            });
-        });
-    }
-    handleAccessControl(action, resourceName, accessControl) {
-        return catchAsync(async (req, res, next) => {
-            if (req.user) {
-                const user = req.user;
-                const prisma = getPrismaInstance();
-                const configs = getArkosConfig();
-                if (user.isSuperUser) {
-                    next();
-                    return;
-                }
-                if (configs?.authentication?.mode === "dynamic") {
-                    const matchingRole = await prisma.userRole.findFirst({
-                        where: {
-                            userId: req.user.id,
-                            role: {
-                                permissions: {
-                                    some: {
-                                        resource: resourceName,
-                                        action: action,
-                                    },
-                                },
-                            },
-                        },
-                        select: { id: true },
-                    });
-                    if (!matchingRole)
-                        return next(new AppError("You do not have permission to perfom this action", 403));
-                }
-                else if (configs?.authentication?.mode === "static") {
-                    let authorizedRoles = [];
-                    if (!accessControl)
-                        return next(new AppError("You do not have permission to perform this action", 403));
-                    if (Array.isArray(accessControl))
-                        authorizedRoles = accessControl;
-                    else if (accessControl[action])
-                        authorizedRoles = accessControl[action] || [];
-                    const userRoles = Array.isArray(user?.roles)
-                        ? user.roles
-                        : [user.role];
-                    const hasPermission = userRoles.some((role) => authorizedRoles.includes(role));
-                    if (!hasPermission) {
-                        return next(new AppError("You do not have permission to perform this action", 403));
-                    }
-                }
-            }
-            next();
-        });
-    }
-    async getAuthenticatedUser(req) {
-        const arkosConfig = getArkosConfig();
-        if (!arkosConfig?.authentication)
-            return null;
-        const prisma = getPrismaInstance();
-        let token;
-        if (req?.headers?.authorization &&
-            req?.headers?.authorization.startsWith("Bearer")) {
-            token = req?.headers?.authorization.split(" ")[1];
-        }
-        else if (req?.cookies?.arkos_access_token !== "no-token" && req.cookies) {
-            token = req?.cookies?.arkos_access_token;
-        }
-        if (!token)
-            throw new AppError("You are not logged in! please log in to get access", 401, {}, "LoginRequired");
-        let decoded;
-        try {
-            decoded = await this.verifyJwtToken(token);
-        }
-        catch (err) {
-            throw new AppError("Your auth token is invalid, please login again.", 401, {}, "InvalidAuthToken");
-        }
-        if (!decoded?.id)
-            throw new AppError("Your auth token is invalid, please login again.", 401, {}, "InvalidAuthToken");
-        const user = await prisma.user.findUnique({
-            where: { id: String(decoded.id) },
-        });
-        if (!user)
-            throw new AppError("The user belonging to this token does no longer exists", 401);
-        if (this.userChangedPasswordAfter(user, decoded.iat) &&
-            !req.path?.includes?.("logout"))
-            throw new AppError("User recently changed password! Please log in again.", 401, {}, "PasswordChanged");
-        return user;
-    }
-    handleAuthenticationControl(action, authenticationControl) {
-        if (authenticationControl && typeof authenticationControl === "object") {
-            if (authenticationControl[action] === false)
-                return callNext;
-            else if (authenticationControl[action] === true)
-                return this.authenticate;
-        }
-        else
-            return this.authenticate;
-        return this.authenticate;
-    }
-}
-const authService = new AuthService();
-export default authService;
-//# sourceMappingURL=auth.service.js.map

package/dist/esm/modules/auth/auth.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,GAAoB,MAAM,cAAc,CAAC;AAChD,OAAO,MAAM,MAAM,UAAU,CAAC;AAE9B,OAAO,UAAU,MAAM,oCAAoC,CAAC;AAC5D,OAAO,QAAQ,MAAM,kCAAkC,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,QAAQ,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAkBvE,MAAM,OAAO,WAAW;IAAxB;QAgVE,iBAAY,GAAG,UAAU,CACvB,KAAK,EAAE,GAAiB,EAAE,GAAkB,EAAE,IAAuB,EAAE,EAAE;YACvE,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC;gBACjC,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YAED,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAS,CAAC;YAC1D,IAAI,EAAE,CAAC;QACT,CAAC,CACF,CAAC;IAoBJ,CAAC;IAtWC,YAAY,CACV,EAAmB,EACnB,SAA+B,EAC/B,MAAe;QAEf,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;QAErD,IACE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YACrC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU;YACvB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;YAErB,MAAM,IAAI,QAAQ,CAChB,mCAAmC,EACnC,GAAG,EACH,EAAE,EACF,wBAAwB,CACzB,CAAC;QAEJ,MAAM;YACJ,MAAM;gBACN,OAAO,EAAE,GAAG,EAAE,MAAM;gBACpB,OAAO,CAAC,GAAG,CAAC,UAAU;gBACtB,QAAQ,CAAC,UAAU,CAAC;QAEtB,SAAS,GAAG,CAAC,SAAS;YACpB,OAAO,EAAE,GAAG,EAAE,SAAS;YACvB,OAAO,CAAC,GAAG,CAAC,cAAc;YAC1B,QAAQ,CAAC,cAAc,CAAmC,CAAC;QAE7D,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YAC9B,SAAS,EAAE,SAAuB;SACnC,CAAC,CAAC;IACL,CAAC;IAaD,gBAAgB,CAAC,QAAgB;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC;IASD,KAAK,CAAC,iBAAiB,CACrB,iBAAyB,EACzB,YAAoB;QAEpB,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAC/D,CAAC;IAQD,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAmBM,gBAAgB,CAAC,QAAgB;QACtC,MAAM,eAAe,GAAG,cAAc,EAAE,EAAE,cAAc,CAAC;QAEzD,MAAM,mBAAmB,GACvB,eAAe,EAAE,kBAAkB,EAAE,KAAK;YAC1C,oCAAoC,CAAC;QACvC,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IASD,wBAAwB,CAAC,IAAU,EAAE,YAAoB;QACvD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,kBAAkB,GAAG,QAAQ,CACjC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAC/C,EAAE,CACH,CAAC;YAEF,OAAO,YAAY,GAAG,kBAAkB,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAUD,KAAK,CAAC,cAAc,CAClB,KAAa,EACb,MAAe;QAEf,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;QAErD,IACE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YACrC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU;YACvB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;YAErB,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAEjD,MAAM;YACJ,MAAM;gBACN,OAAO,EAAE,GAAG,EAAE,MAAM;gBACpB,OAAO,CAAC,GAAG,CAAC,UAAU;gBACtB,QAAQ,CAAC,UAAU,CAAC;QAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBACzC,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,OAAyB,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAUD,mBAAmB,CACjB,MAAoB,EACpB,YAAoB,EACpB,aAAmC;QAEnC,OAAO,UAAU,CACf,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,GAAG,CAAC,IAAW,CAAC;gBAC7B,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBACnC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;gBAEjC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,IAAI,EAAE,CAAC;oBACP,OAAO;gBACT,CAAC;gBAED,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;oBAChD,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;wBACnD,KAAK,EAAE;4BACL,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;4BACnB,IAAI,EAAE;gCACJ,WAAW,EAAE;oCACX,IAAI,EAAE;wCACJ,QAAQ,EAAE,YAAY;wCACtB,MAAM,EAAE,MAAM;qCACf;iCACF;6BACF;yBACF;wBACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;qBACrB,CAAC,CAAC;oBAEH,IAAI,CAAC,YAAY;wBACf,OAAO,IAAI,CACT,IAAI,QAAQ,CACV,kDAAkD,EAClD,GAAG,CACJ,CACF,CAAC;gBACN,CAAC;qBAAM,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtD,IAAI,eAAe,GAAa,EAAE,CAAC;oBAEnC,IAAI,CAAC,aAAa;wBAChB,OAAO,IAAI,CACT,IAAI,QAAQ,CACV,mDAAmD,EACnD,GAAG,CACJ,CACF,CAAC;oBAEJ,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;wBAAE,eAAe,GAAG,aAAa,CAAC;yBAC7D,IAAI,aAAa,CAAC,MAAM,CAAC;wBAC5B,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBAEhD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;wBAC1C,CAAC,CAAC,IAAI,CAAC,KAAK;wBACZ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChB,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CACpD,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC/B,CAAC;oBAEF,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,OAAO,IAAI,CACT,IAAI,QAAQ,CACV,mDAAmD,EACnD,GAAG,CACJ,CACF,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC,CACF,CAAC;IACJ,CAAC;IAQD,KAAK,CAAC,oBAAoB,CAAC,GAAiB;QAC1C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,EAAE,cAAc;YAAE,OAAO,IAAI,CAAC;QAE9C,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QAEnC,IAAI,KAAyB,CAAC;QAE9B,IACE,GAAG,EAAE,OAAO,EAAE,aAAa;YAC3B,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,EAChD,CAAC;YACD,KAAK,GAAG,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,GAAG,EAAE,OAAO,EAAE,kBAAkB,KAAK,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC1E,KAAK,GAAG,GAAG,EAAE,OAAO,EAAE,kBAAkB,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC,KAAK;YACR,MAAM,IAAI,QAAQ,CAChB,oDAAoD,EACpD,GAAG,EACH,EAAE,EACF,eAAe,CAChB,CAAC;QAEJ,IAAI,OAAmC,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,QAAQ,CAChB,iDAAiD,EACjD,GAAG,EACH,EAAE,EACF,kBAAkB,CACnB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,EAAE;YACd,MAAM,IAAI,QAAQ,CAChB,iDAAiD,EACjD,GAAG,EACH,EAAE,EACF,kBAAkB,CACnB,CAAC;QAEJ,MAAM,IAAI,GAAe,MAAO,MAAc,CAAC,IAAI,CAAC,UAAU,CAAC;YAC7D,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,QAAQ,CAChB,wDAAwD,EACxD,GAAG,CACJ,CAAC;QAEJ,IACE,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAI,CAAC;YACjD,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC;YAE/B,MAAM,IAAI,QAAQ,CAChB,sDAAsD,EACtD,GAAG,EACH,EAAE,EACF,iBAAiB,CAClB,CAAC;QAEJ,OAAO,IAAI,CAAC;IACd,CAAC;IA8BD,2BAA2B,CACzB,MAAoB,EACpB,qBAA+D;QAE/D,IAAI,qBAAqB,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;YACvE,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,KAAK;gBAAE,OAAO,QAAQ,CAAC;iBACxD,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAC5E,CAAC;;YAAM,OAAO,IAAI,CAAC,YAAY,CAAC;QAEhC,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CACF;AAKD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,eAAe,WAAW,CAAC","sourcesContent":["import jwt, { SignOptions } from \"jsonwebtoken\";\nimport bcrypt from \"bcryptjs\";\nimport { User } from \"../../types\";\nimport catchAsync from \"../error-handler/utils/catch-async\";\nimport AppError from \"../error-handler/utils/app-error\";\nimport { callNext } from \"../base/base.middlewares\";\nimport { getArkosConfig } from \"../../server\";\nimport arkosEnv from \"../../utils/arkos-env\";\nimport { getPrismaInstance } from \"../../utils/helpers/prisma.helpers\";\nimport {\n  ArkosRequest,\n  ArkosResponse,\n  ArkosNextFunction,\n  ArkosRequestHandler,\n} from \"../../types\";\nimport {\n  AuthJwtPayload,\n  AccessAction,\n  AccessControlConfig,\n  AuthenticationControlConfig,\n} from \"../../types/auth\";\nimport { MsDuration } from \"./utils/helpers/auth.controller.helpers\";\n\n/**\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\n */\nexport class AuthService {\n  /**\n   * Signs a JWT token for the user.\n   *\n   * @param {number | string} id - The unique identifier of the user to generate the token for.\n   * @param {string | number} [expiresIn] - The expiration time for the token. Defaults to environment variable `JWT_EXPIRES_IN`.\n   * @param {string} [secret] - The secret key used to sign the token. Defaults to environment variable `JWT_SECRET`.\n   * @returns {string} The signed JWT token.\n   */\n  signJwtToken(\n    id: number | string,\n    expiresIn?: MsDuration | number,\n    secret?: string\n  ): string {\n    const { authentication: configs } = getArkosConfig();\n\n    if (\n      process.env.NODE_ENV === \"production\" &&\n      !process.env.JWT_SECRET &&\n      !configs?.jwt?.secret\n    )\n      throw new AppError(\n        \"Missing JWT secret on production!\",\n        500,\n        {},\n        \"MissingJWTOnProduction\"\n      );\n\n    secret =\n      secret ||\n      configs?.jwt?.secret ||\n      process.env.JWT_SECRET ||\n      arkosEnv.JWT_SECRET;\n\n    expiresIn = (expiresIn ||\n      configs?.jwt?.expiresIn ||\n      process.env.JWT_EXPIRES_IN ||\n      arkosEnv.JWT_EXPIRES_IN) as keyof SignOptions[\"expiresIn\"];\n\n    return jwt.sign({ id }, secret, {\n      expiresIn: expiresIn as MsDuration,\n    });\n  }\n\n  /**\n   * Is used by default internally by Arkos under `BaseService` class to check if the password is already hashed.\n   *\n   * This was just added to prevent unwanted errors when someone just forgets that the `BaseService` class will automatically hash the password field using `authService.hashPassword` by default.\n   *\n   * So now before `BaseService` hashes it will test it.\n   *\n   *\n   * @param password The password to be tested if is hashed\n   * @returns\n   */\n  isPasswordHashed(password: string) {\n    return !Number.isNaN(bcrypt.getRounds(password) * 1);\n  }\n\n  /**\n   * Compares a candidate password with the stored user password to check if they match.\n   *\n   * @param {string} candidatePassword - The password provided by the user during login.\n   * @param {string} userPassword - The password stored in the database.\n   * @returns {Promise<boolean>} Returns true if the passwords match, otherwise false.\n   */\n  async isCorrectPassword(\n    candidatePassword: string,\n    userPassword: string\n  ): Promise<boolean> {\n    return await bcrypt.compare(candidatePassword, userPassword);\n  }\n\n  /**\n   * Hashes a plain text password using bcrypt.\n   *\n   * @param {string} password - The password to be hashed.\n   * @returns {Promise<string>} Returns the hashed password.\n   */\n  async hashPassword(password: string): Promise<string> {\n    return await bcrypt.hash(password, 12);\n  }\n\n  /**\n   * Checks if a password is strong, requiring uppercase, lowercase, and numeric characters as the default.\n   *\n   * **NB**: You must pay attention when using custom validation with zod or class-validator, try to use the same regex always.\n   *\n   * **Note**: You can define it when calling arkos.init()\n   * ```ts\n   * arkos.init({\n   *  authentication: {\n   *    passwordValidation:{ regex: /your-desired-regex/, message: 'password must contain...'}\n   *  }\n   * })\n   * ```\n   *\n   * @param {string} password - The password to check.\n   * @returns {boolean} Returns true if the password meets the strength criteria, otherwise false.\n   */\n  public isPasswordStrong(password: string): boolean {\n    const initAuthConfigs = getArkosConfig()?.authentication;\n\n    const strongPasswordRegex =\n      initAuthConfigs?.passwordValidation?.regex ||\n      /^(?=.*[A-Z])(?=.*[a-z])(?=.*\\d).+$/;\n    return strongPasswordRegex.test(password);\n  }\n\n  /**\n   * Checks if a user has changed their password after the JWT was issued.\n   *\n   * @param {User} user - The user object containing the passwordChangedAt field.\n   * @param {number} JWTTimestamp - The timestamp when the JWT was issued.\n   * @returns {boolean} Returns true if the user changed their password after the JWT was issued, otherwise false.\n   */\n  userChangedPasswordAfter(user: User, JWTTimestamp: number): boolean {\n    if (user.passwordChangedAt) {\n      const convertedTimestamp = parseInt(\n        String(user.passwordChangedAt.getTime() / 1000),\n        10\n      );\n\n      return JWTTimestamp < convertedTimestamp;\n    }\n    return false;\n  }\n\n  /**\n   * Verifies the authenticity of a JWT token.\n   *\n   * @param {string} token - The JWT token to verify.\n   * @param {string} [secret] - The secret key used to verify the token. Defaults to environment variable `JWT_SECRET`.\n   * @returns {Promise<AuthJwtPayload>} Returns the decoded JWT payload if the token is valid.\n   * @throws {Error} Throws an error if the token is invalid or expired.\n   */\n  async verifyJwtToken(\n    token: string,\n    secret?: string\n  ): Promise<AuthJwtPayload> {\n    const { authentication: configs } = getArkosConfig();\n\n    if (\n      process.env.NODE_ENV === \"production\" &&\n      !process.env.JWT_SECRET &&\n      !configs?.jwt?.secret\n    )\n      throw new AppError(\"Missing JWT secret!\", 500);\n\n    secret =\n      secret ||\n      configs?.jwt?.secret ||\n      process.env.JWT_SECRET ||\n      arkosEnv.JWT_SECRET;\n\n    return new Promise((resolve, reject) => {\n      jwt.verify(token, secret, (err, decoded) => {\n        if (err) reject(err);\n        else resolve(decoded as AuthJwtPayload);\n      });\n    });\n  }\n\n  /**\n   * Middleware function to handle access control based on user roles and permissions.\n   *\n   * @param {AccessAction} action - The action being performed (e.g., create, update, delete, view).\n   * @param {string} resourceName - The resource name that the action is being performed on (e.g., \"User\", \"Post\").\n   * @param {AccessControlConfig} accessControl - The access control configuration.\n   * @returns {ArkosRequestHandler} The middleware function that checks if the user has permission to perform the action.\n   */\n  handleAccessControl(\n    action: AccessAction,\n    resourceName: string,\n    accessControl?: AccessControlConfig\n  ): ArkosRequestHandler {\n    return catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        if (req.user) {\n          const user = req.user as any;\n          const prisma = getPrismaInstance();\n          const configs = getArkosConfig();\n\n          if (user.isSuperUser) {\n            next();\n            return;\n          }\n\n          if (configs?.authentication?.mode === \"dynamic\") {\n            const matchingRole = await prisma.userRole.findFirst({\n              where: {\n                userId: req.user.id,\n                role: {\n                  permissions: {\n                    some: {\n                      resource: resourceName,\n                      action: action,\n                    },\n                  },\n                },\n              },\n              select: { id: true },\n            });\n\n            if (!matchingRole)\n              return next(\n                new AppError(\n                  \"You do not have permission to perfom this action\",\n                  403\n                )\n              );\n          } else if (configs?.authentication?.mode === \"static\") {\n            let authorizedRoles: string[] = [];\n\n            if (!accessControl)\n              return next(\n                new AppError(\n                  \"You do not have permission to perform this action\",\n                  403\n                )\n              );\n\n            if (Array.isArray(accessControl)) authorizedRoles = accessControl;\n            else if (accessControl[action])\n              authorizedRoles = accessControl[action] || [];\n\n            const userRoles = Array.isArray(user?.roles)\n              ? user.roles\n              : [user.role];\n            const hasPermission = userRoles.some((role: string) =>\n              authorizedRoles.includes(role)\n            );\n\n            if (!hasPermission) {\n              return next(\n                new AppError(\n                  \"You do not have permission to perform this action\",\n                  403\n                )\n              );\n            }\n          }\n        }\n\n        next();\n      }\n    );\n  }\n\n  /**\n   * Processes the cookies or authoriation token and returns the user.\n   * @param req\n   * @returns {Promise<User | null>} - if authentication is turned off in arkosConfig it returns null\n   * @throws {AppError} Throws an error if the token is invalid or the user is not logged in.\n   */\n  async getAuthenticatedUser(req: ArkosRequest): Promise<User | null> {\n    const arkosConfig = getArkosConfig();\n    if (!arkosConfig?.authentication) return null;\n\n    const prisma = getPrismaInstance();\n\n    let token: string | undefined;\n\n    if (\n      req?.headers?.authorization &&\n      req?.headers?.authorization.startsWith(\"Bearer\")\n    ) {\n      token = req?.headers?.authorization.split(\" \")[1];\n    } else if (req?.cookies?.arkos_access_token !== \"no-token\" && req.cookies) {\n      token = req?.cookies?.arkos_access_token;\n    }\n\n    if (!token)\n      throw new AppError(\n        \"You are not logged in! please log in to get access\",\n        401,\n        {},\n        \"LoginRequired\"\n      );\n\n    let decoded: AuthJwtPayload | undefined;\n    try {\n      decoded = await this.verifyJwtToken(token);\n    } catch (err) {\n      throw new AppError(\n        \"Your auth token is invalid, please login again.\",\n        401,\n        {},\n        \"InvalidAuthToken\"\n      );\n    }\n\n    if (!decoded?.id)\n      throw new AppError(\n        \"Your auth token is invalid, please login again.\",\n        401,\n        {},\n        \"InvalidAuthToken\"\n      );\n\n    const user: any | null = await (prisma as any).user.findUnique({\n      where: { id: String(decoded.id) },\n    });\n\n    if (!user)\n      throw new AppError(\n        \"The user belonging to this token does no longer exists\",\n        401\n      );\n\n    if (\n      this.userChangedPasswordAfter(user, decoded.iat!) &&\n      !req.path?.includes?.(\"logout\")\n    )\n      throw new AppError(\n        \"User recently changed password! Please log in again.\",\n        401,\n        {},\n        \"PasswordChanged\"\n      );\n\n    return user;\n  }\n\n  /**\n   * Middleware function to authenticate the user based on the JWT token.\n   *\n   * @param {ArkosRequest} req - The request object.\n   * @param {ArkosResponse} res - The response object.\n   * @param {ArkosNextFunction} next - The next middleware function to be called.\n   * @returns {void}\n   */\n  authenticate = catchAsync(\n    async (req: ArkosRequest, res: ArkosResponse, next: ArkosNextFunction) => {\n      const arkosConfig = getArkosConfig();\n      if (!arkosConfig?.authentication) {\n        next();\n        return;\n      }\n\n      req.user = (await this.getAuthenticatedUser(req)) as User;\n      next();\n    }\n  );\n\n  /**\n   * Handles authentication control by checking the `authenticationControl` configuration in the `authConfigs`.\n   *\n   * @param {ControllerActions} action - The action being performed (e.g., create, update, delete, view).\n   * @param {AuthenticationControlConfig} authenticationControl - The authentication configuration object.\n   * @returns {ArkosRequestHandler} The middleware function that checks if authentication is required.\n   */\n  handleAuthenticationControl(\n    action: AccessAction,\n    authenticationControl?: AuthenticationControlConfig | undefined\n  ): ArkosRequestHandler {\n    if (authenticationControl && typeof authenticationControl === \"object\") {\n      if (authenticationControl[action] === false) return callNext;\n      else if (authenticationControl[action] === true) return this.authenticate;\n    } else return this.authenticate;\n\n    return this.authenticate;\n  }\n}\n\n/**\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\n */\nconst authService = new AuthService();\n\nexport default authService;\n"]}

package/dist/esm/modules/auth/utils/helpers/auth.controller.helpers.js

@@ -1,73 +0,0 @@
-import { getArkosConfig } from "../../../../server.js";
-import AppError from "../../../error-handler/utils/app-error.js";
-export const determineUsernameField = (req) => {
-    const authConfigs = getArkosConfig()?.authentication;
-    if (req.query?.usernameField &&
-        typeof req.query?.usernameField === "string" &&
-        authConfigs?.login?.allowedUsernames?.includes?.(req.query.usernameField))
-        return req.query.usernameField;
-    else if (req.query?.usernameField)
-        throw new AppError("Invalid usernameField parameter, it is not allowed!", 400);
-    return authConfigs?.login?.allowedUsernames?.[0] || "username";
-};
-export const createPrismaWhereClause = (path, value) => {
-    if (!path)
-        return {};
-    const parts = path.split(".");
-    const whereClause = {};
-    if (parts.length === 1) {
-        whereClause[parts[0]] = value;
-        return whereClause;
-    }
-    let current = whereClause;
-    for (let i = 0; i < parts.length - 1; i++) {
-        const part = parts[i];
-        current[part] = {};
-        current = current[part];
-    }
-    current[parts[parts.length - 1]] = value;
-    return whereClause;
-};
-export const getNestedValue = (obj, path) => {
-    if (!obj || !path)
-        return undefined;
-    const properties = path.split(".");
-    const lastProperty = properties[properties.length - 1];
-    if (lastProperty in obj) {
-        return obj[lastProperty];
-    }
-    return undefined;
-};
-function normalizeDuration(input) {
-    return input
-        .toLowerCase()
-        .replace(/years?|yr|year/g, "y")
-        .replace(/minutes?|min/g, "m")
-        .replace(/seconds?|sec|secs/g, "s")
-        .replace(/hours?|hr/g, "h")
-        .replace(/days?/g, "d")
-        .replace(/weeks?/g, "w")
-        .replace(/milliseconds?/g, "ms");
-}
-export function toMs(input) {
-    if (typeof input === "number")
-        return input * 1000;
-    const normalizedInput = normalizeDuration(input.trim());
-    const regex = /^(\d+(?:\.\d+)?)(ms|s|m|h|d|w|y)$/i;
-    const match = normalizedInput.match(regex);
-    if (!match)
-        throw new Error(`Invalid time format: ${input}`);
-    const value = parseFloat(match[1]);
-    const unit = match[2].toLowerCase();
-    const multipliers = {
-        ms: 1,
-        s: 1000,
-        m: 60000,
-        h: 3600000,
-        d: 86400000,
-        w: 604800000,
-        y: 31557600000,
-    };
-    return value * multipliers[unit];
-}
-//# sourceMappingURL=auth.controller.helpers.js.map

package/dist/esm/modules/auth/utils/helpers/auth.controller.helpers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.controller.helpers.js","sourceRoot":"","sources":["../../../../../../src/modules/auth/utils/helpers/auth.controller.helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,QAAQ,MAAM,wCAAwC,CAAC;AAc9D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAiB,EAAU,EAAE;IAClE,MAAM,WAAW,GAAG,cAAc,EAAE,EAAE,cAAc,CAAC;IAErD,IACE,GAAG,CAAC,KAAK,EAAE,aAAa;QACxB,OAAO,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,QAAQ;QAC5C,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;QAEzE,OAAO,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;SAC5B,IAAI,GAAG,CAAC,KAAK,EAAE,aAAa;QAC/B,MAAM,IAAI,QAAQ,CAChB,qDAAqD,EACrD,GAAG,CACJ,CAAC;IAEJ,OAAO,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;AACjE,CAAC,CAAC;AAWF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,IAAY,EACZ,KAAU,EACW,EAAE;IACvB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,WAAW,GAAwB,EAAE,CAAC;IAG5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;QAC9B,OAAO,WAAW,CAAC;IACrB,CAAC;IAGD,IAAI,OAAO,GAAG,WAAW,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACnB,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IAEzC,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAWF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAQ,EAAE,IAAY,EAAO,EAAE;IAC5D,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAEpC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAGvD,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;QACxB,OAAO,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAeF,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC;SAC/B,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC;SAClC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC;SAC1B,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,KAA0B;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,GAAG,IAAI,CAAC;IAGnD,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAGxD,MAAM,KAAK,GAAG,oCAAoC,CAAC;IACnD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAE3C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;IAE7D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAO1B,CAAC;IAER,MAAM,WAAW,GACf;QACE,EAAE,EAAE,CAAC;QACL,CAAC,EAAE,IAAI;QACP,CAAC,EAAE,KAAK;QACR,CAAC,EAAE,OAAO;QACV,CAAC,EAAE,QAAQ;QACX,CAAC,EAAE,SAAS;QACZ,CAAC,EAAE,WAAW;KACf,CAAC;IAEJ,OAAO,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC","sourcesContent":["import { getArkosConfig } from \"../../../../server\";\nimport { ArkosRequest } from \"../../../../types\";\nimport AppError from \"../../../error-handler/utils/app-error\";\n\n/**\n * Determines the username field to use for authentication and supports nested paths\n * Priority:\n * 1. req.query.usernameField\n * 2. config setting\n * 3. default \"username\"\n *\n * Supports dot notation for nested fields and array queries (e.g., \"profile.nickname\", \"phones.some.number\")\n *\n * @param req - The request object\n * @returns The field name to use for username identification\n */\nexport const determineUsernameField = (req: ArkosRequest): string => {\n  const authConfigs = getArkosConfig()?.authentication;\n\n  if (\n    req.query?.usernameField &&\n    typeof req.query?.usernameField === \"string\" &&\n    authConfigs?.login?.allowedUsernames?.includes?.(req.query.usernameField)\n  )\n    return req.query.usernameField;\n  else if (req.query?.usernameField)\n    throw new AppError(\n      \"Invalid usernameField parameter, it is not allowed!\",\n      400\n    );\n\n  return authConfigs?.login?.allowedUsernames?.[0] || \"username\";\n};\n\n/**\n * Creates a Prisma-compatible where clause from a path using dot notation\n * Handles nested objects and array queries with \"some\" operator\n * Example: createPrismaWhereClause(\"profile.nickname\", \"john\") or createPrismaWhereClause(\"phones.some.number\", \"1234567890\")\n *\n * @param path - The dot notation path (e.g., \"profile.nickname\" or \"phones.some.number\")\n * @param value - The value to search for\n * @returns A nested object suitable for Prisma's where clause\n */\nexport const createPrismaWhereClause = (\n  path: string,\n  value: any\n): Record<string, any> => {\n  if (!path) return {};\n\n  const parts = path.split(\".\");\n  const whereClause: Record<string, any> = {};\n\n  // Handle simple field case\n  if (parts.length === 1) {\n    whereClause[parts[0]] = value;\n    return whereClause;\n  }\n\n  // Handle nested fields\n  let current = whereClause;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i];\n    current[part] = {};\n    current = current[part];\n  }\n\n  current[parts[parts.length - 1]] = value;\n\n  return whereClause;\n};\n\n/**\n * Access a value from a simple object based on a dot notation path\n * The object will only contain a single property that matches the last part of the path\n * Example: getNestedValue({nickname: \"john\"}, \"profile.nickname\") => \"john\"\n *\n * @param obj - The object containing the value (simple key-value pair)\n * @param path - The dot notation path (only the last part is used to access the object)\n * @returns The value from the object if the key matches the last part of the path, or undefined\n */\nexport const getNestedValue = (obj: any, path: string): any => {\n  if (!obj || !path) return undefined;\n\n  const properties = path.split(\".\");\n  const lastProperty = properties[properties.length - 1];\n\n  // If the last property exists in the object, return its value\n  if (lastProperty in obj) {\n    return obj[lastProperty];\n  }\n\n  return undefined;\n};\n\n/**\n * MsDuration type allows specific units for durations\n *\n * **For example**: 90d, 10ms, 50s.\n *\n * **Available metrics**: ms, s, m, h, d, w, y.\n * */\nexport type MsDuration =\n  | number\n  | `${number}`\n  | `${number}${\"ms\" | \"s\" | \"m\" | \"h\" | \"d\" | \"w\" | \"y\"}`; // Short format (e.g., \"1y\")\n\n// Normalize function to convert long units to short ones\nfunction normalizeDuration(input: string): string {\n  return input\n    .toLowerCase()\n    .replace(/years?|yr|year/g, \"y\")\n    .replace(/minutes?|min/g, \"m\")\n    .replace(/seconds?|sec|secs/g, \"s\")\n    .replace(/hours?|hr/g, \"h\")\n    .replace(/days?/g, \"d\")\n    .replace(/weeks?/g, \"w\")\n    .replace(/milliseconds?/g, \"ms\");\n}\n\nexport function toMs(input: number | MsDuration): number {\n  if (typeof input === \"number\") return input * 1000; // If it's a number, assume it's in seconds\n\n  // Normalize the string input\n  const normalizedInput = normalizeDuration(input.trim());\n\n  // Type assertion: we assert that normalizedInput will now match the MsDuration format\n  const regex = /^(\\d+(?:\\.\\d+)?)(ms|s|m|h|d|w|y)$/i;\n  const match = normalizedInput.match(regex);\n\n  if (!match) throw new Error(`Invalid time format: ${input}`);\n\n  const value = parseFloat(match[1]);\n  const unit = match[2].toLowerCase() as\n    | \"ms\"\n    | \"s\"\n    | \"m\"\n    | \"h\"\n    | \"d\"\n    | \"w\"\n    | \"y\";\n\n  const multipliers: Record<\"ms\" | \"s\" | \"m\" | \"h\" | \"d\" | \"w\" | \"y\", number> =\n    {\n      ms: 1,\n      s: 1000,\n      m: 60000,\n      h: 3600000,\n      d: 86400000,\n      w: 604800000,\n      y: 31557600000, // 365.25 days in ms\n    };\n\n  return value * multipliers[unit];\n}\n"]}