arkos 1.3.1-canary → 1.3.2-beta

package/dist/esm/modules/auth/auth.controller.js

@@ -1 +1,222 @@
-"use strict";import i from"../error-handler/utils/catch-async.js";import r from"../error-handler/utils/app-error.js";import p from"./auth.service.js";import{BaseService as T}from"../base/base.service.js";import A from"../../utils/arkos-env.js";import{getArkosConfig as h}from"../../server.js";import{createPrismaWhereClause as O,determineUsernameField as S,getNestedValue as E,toMs as P}from"./utils/helpers/auth.controller.helpers.js";import y from"./utils/services/auth-action.service.js";export const defaultExcludedUserFields={password:!1},authControllerFactory=async(c={})=>{const d=new T("user");return{getMe:i(async(e,n,t)=>{const s=await d.findOne({id:e.user.id},e.prismaQueryOptions||{});if(Object.keys(defaultExcludedUserFields).forEach(o=>{s&&delete s[o]}),c?.afterGetMe)return e.responseData={data:s},e.responseStatus=200,t();n.status(200).json({data:s})}),updateMe:i(async(e,n,t)=>{if("password"in e.body)throw new r("In order to update password use the update-password endpoint.",400,{},"InvalidFieldPassword");const s=await d.updateOne({id:e.user.id},e.body,e.prismaQueryOptions||{});if(Object.keys(defaultExcludedUserFields).forEach(o=>{s&&delete s[o]}),c?.afterUpdateMe)return e.responseData={data:s},e.responseStatus=200,t();n.status(200).json({data:s})}),logout:i(async(e,n,t)=>{if(n.cookie("arkos_access_token","no-token",{expires:new Date(Date.now()+10*1e3),httpOnly:!0}),c?.afterLogout)return e.responseData=null,e.responseStatus=204,t();n.status(204).json()}),login:i(async(e,n,t)=>{const s=h()?.authentication,o=S(e),a=o.split(".")[o.split(".").length-1],w=e.body[a],{password:u}=e.body;if(!w||!u)return t(new r(`Please provide both ${a} and password`,400));let l;if(o?.includes?.(".")){const m=E(e.body,o);if(m===void 0)return t(new r(`Invalid ${o} provided`,400));l=O(o,m)}else l={[o]:w};const f=await d.findOne(l,e.prismaQueryOptions||{});if(!f||!await p.isCorrectPassword(u,f.password))return t(new r(`Incorrect ${a} or password`,401));const g=p.signJwtToken(f.id),k={expires:new Date(Date.now()+Number(P(s?.jwt?.expiresIn||process.env.JWT_EXPIRES_IN||A.JWT_EXPIRES_IN))),httpOnly:s?.jwt?.cookie?.httpOnly||process.env.JWT_COOKIE_HTTP_ONLY==="true"||!0,secure:s?.jwt?.cookie?.secure||process.env.JWT_COOKIE_SECURE==="true"||e.secure||e.headers["x-forwarded-proto"]==="https",sameSite:s?.jwt?.cookie?.sameSite||process.env.JWT_COOKIE_SAME_SITE||(process.env.NODE_ENV==="production"?"none":"lax")};if((s?.login?.sendAccessTokenThrough==="response-only"||s?.login?.sendAccessTokenThrough==="both"||!s?.login?.sendAccessTokenThrough)&&(e.responseData={accessToken:g}),(s?.login?.sendAccessTokenThrough==="cookie-only"||s?.login?.sendAccessTokenThrough==="both"||!s?.login?.sendAccessTokenThrough)&&n.cookie("arkos_access_token",g,k),e.accessToken=g,c?.afterLogin)return e.additionalData={user:f},e.responseStatus=200,t();s?.login?.sendAccessTokenThrough==="response-only"||s?.login?.sendAccessTokenThrough==="both"||!s?.login?.sendAccessTokenThrough?n.status(200).json(e.responseData):(s?.login?.sendAccessTokenThrough==="cookie-only"||s?.login?.sendAccessTokenThrough==="both"||!s?.login?.sendAccessTokenThrough)&&n.status(200).send()}),signup:i(async(e,n,t)=>{const s=await d.createOne(e.body,e.prismaQueryOptions||{});if(c?.afterSignup)return e.responseData={data:s},e.responseStatus=201,t();Object.keys(defaultExcludedUserFields).forEach(o=>{delete s[o]}),n.status(201).json({data:s})}),deleteMe:i(async(e,n,t)=>{const s=e.user.id,o=await d.updateOne({id:s},{deletedSelfAccountAt:new Date().toISOString()},e.prismaQueryOptions||{});if(c?.afterDeleteMe)return e.responseData={data:o},e.responseStatus=200,t();Object.keys(defaultExcludedUserFields).forEach(a=>{delete o[a]}),n.status(200).json({message:"Account deleted successfully"})}),updatePassword:i(async(e,n,t)=>{const{currentPassword:s,newPassword:o}=e.body;if(!s||!o)return t(new r("currentPassword and newPassword are required",400));const a=e.user;if(!a||a?.isActive===!1||a?.deletedSelfAccountAt)return t(new r("User not found!",404));const w=await p.isCorrectPassword(String(s),String(a.password)),u=h(),l=u?.authentication;if(!w)return t(new r("Current password is incorrect.",400));if(!p.isPasswordStrong(String(o))&&!u?.validation)return t(new r(l?.passwordValidation?.message||"The new password must contain at least one uppercase letter, one lowercase letter, and one number",400));if(await d.updateOne({id:a.id},{password:await p.hashPassword(o),passwordChangedAt:new Date(Date.now())}),c?.afterUpdatePassword)return e.additionalData={user:a},e.responseData={status:"success",message:"Password updated successfully!"},e.responseStatus=200,t();n.status(200).json({status:"success",message:"Password updated successfully!"})}),findManyAuthAction:i(async(e,n)=>{const t=h(),s=y.getAll()?.map(o=>(t?.authentication?.mode==="dynamic"&&delete o?.roles,o));n.json({total:s.length,results:s.length,data:s})}),findOneAuthAction:i(async(e,n)=>{const t=h(),s=e.params?.resourceName;if(!s)throw new r("Please provide a resoureName",400);const o=y.getByResource(e.params?.resourceName);if(!o)throw new r(`Auth action with resource name ${s}`,404);t?.authentication?.mode==="dynamic"&&delete o?.roles,n.json({data:o})})}};
+import catchAsync from "../error-handler/utils/catch-async.js";
+import AppError from "../error-handler/utils/app-error.js";
+import authService from "./auth.service.js";
+import { BaseService } from "../base/base.service.js";
+import arkosEnv from "../../utils/arkos-env.js";
+import { getArkosConfig } from "../../server.js";
+import { createPrismaWhereClause, determineUsernameField, getNestedValue, toMs, } from "./utils/helpers/auth.controller.helpers.js";
+import authActionService from "./utils/services/auth-action.service.js";
+export const defaultExcludedUserFields = {
+    password: false,
+};
+export const authControllerFactory = async (interceptors = {}) => {
+    const userService = new BaseService("user");
+    return {
+        getMe: catchAsync(async (req, res, next) => {
+            const user = (await userService.findOne({ id: req.user.id }, req.prismaQueryOptions || {}));
+            Object.keys(defaultExcludedUserFields).forEach((key) => {
+                if (user)
+                    delete user[key];
+            });
+            if (interceptors?.afterGetMe) {
+                req.responseData = { data: user };
+                req.responseStatus = 200;
+                return next();
+            }
+            res.status(200).json({ data: user });
+        }),
+        updateMe: catchAsync(async (req, res, next) => {
+            if ("password" in req.body)
+                throw new AppError("In order to update password use the update-password endpoint.", 400, {}, "InvalidFieldPassword");
+            const user = (await userService.updateOne({ id: req.user.id }, req.body, req.prismaQueryOptions || {}));
+            Object.keys(defaultExcludedUserFields).forEach((key) => {
+                if (user)
+                    delete user[key];
+            });
+            if (interceptors?.afterUpdateMe) {
+                req.responseData = { data: user };
+                req.responseStatus = 200;
+                return next();
+            }
+            res.status(200).json({ data: user });
+        }),
+        logout: catchAsync(async (req, res, next) => {
+            res.cookie("arkos_access_token", "no-token", {
+                expires: new Date(Date.now() + 10 * 1000),
+                httpOnly: true,
+            });
+            if (interceptors?.afterLogout) {
+                req.responseData = null;
+                req.responseStatus = 204;
+                return next();
+            }
+            res.status(204).json();
+        }),
+        login: catchAsync(async (req, res, next) => {
+            const authConfigs = getArkosConfig()?.authentication;
+            const usernameField = determineUsernameField(req);
+            const lastField = usernameField.split(".")[usernameField.split(".").length - 1];
+            const usernameValue = req.body[lastField];
+            const { password } = req.body;
+            if (!usernameValue || !password)
+                return next(new AppError(`Please provide both ${lastField} and password`, 400));
+            let whereClause;
+            if (usernameField?.includes?.(".")) {
+                const valueToFind = getNestedValue(req.body, usernameField);
+                if (valueToFind === undefined) {
+                    return next(new AppError(`Invalid ${usernameField} provided`, 400));
+                }
+                whereClause = createPrismaWhereClause(usernameField, valueToFind);
+            }
+            else {
+                whereClause = { [usernameField]: usernameValue };
+            }
+            const user = (await userService.findOne(whereClause, req.prismaQueryOptions || {}));
+            if (!user ||
+                !(await authService.isCorrectPassword(password, user.password))) {
+                return next(new AppError(`Incorrect ${lastField} or password`, 401));
+            }
+            const token = authService.signJwtToken(user.id);
+            const cookieOptions = {
+                expires: new Date(Date.now() +
+                    Number(toMs(authConfigs?.jwt?.expiresIn ||
+                        process.env.JWT_EXPIRES_IN ||
+                        arkosEnv.JWT_EXPIRES_IN))),
+                httpOnly: authConfigs?.jwt?.cookie?.httpOnly ||
+                    process.env.JWT_COOKIE_HTTP_ONLY === "true" ||
+                    true,
+                secure: authConfigs?.jwt?.cookie?.secure ||
+                    process.env.JWT_COOKIE_SECURE === "true" ||
+                    req.secure ||
+                    req.headers["x-forwarded-proto"] === "https",
+                sameSite: authConfigs?.jwt?.cookie?.sameSite ||
+                    process.env.JWT_COOKIE_SAME_SITE ||
+                    (process.env.NODE_ENV === "production" ? "none" : "lax"),
+            };
+            if (authConfigs?.login?.sendAccessTokenThrough === "response-only" ||
+                authConfigs?.login?.sendAccessTokenThrough === "both" ||
+                !authConfigs?.login?.sendAccessTokenThrough) {
+                req.responseData = { accessToken: token };
+            }
+            if (authConfigs?.login?.sendAccessTokenThrough === "cookie-only" ||
+                authConfigs?.login?.sendAccessTokenThrough === "both" ||
+                !authConfigs?.login?.sendAccessTokenThrough)
+                res.cookie("arkos_access_token", token, cookieOptions);
+            req.accessToken = token;
+            if (interceptors?.afterLogin) {
+                req.additionalData = { user };
+                req.responseStatus = 200;
+                return next();
+            }
+            if (authConfigs?.login?.sendAccessTokenThrough === "response-only" ||
+                authConfigs?.login?.sendAccessTokenThrough === "both" ||
+                !authConfigs?.login?.sendAccessTokenThrough) {
+                res.status(200).json(req.responseData);
+            }
+            else if (authConfigs?.login?.sendAccessTokenThrough === "cookie-only" ||
+                authConfigs?.login?.sendAccessTokenThrough === "both" ||
+                !authConfigs?.login?.sendAccessTokenThrough)
+                res.status(200).send();
+        }),
+        signup: catchAsync(async (req, res, next) => {
+            const user = (await userService.createOne(req.body, req.prismaQueryOptions || {}));
+            if (interceptors?.afterSignup) {
+                req.responseData = { data: user };
+                req.responseStatus = 201;
+                return next();
+            }
+            Object.keys(defaultExcludedUserFields).forEach((key) => {
+                delete user[key];
+            });
+            res.status(201).json({ data: user });
+        }),
+        deleteMe: catchAsync(async (req, res, next) => {
+            const userId = req.user.id;
+            const updatedUser = (await userService.updateOne({ id: userId }, {
+                deletedSelfAccountAt: new Date().toISOString(),
+            }, req.prismaQueryOptions || {}));
+            if (interceptors?.afterDeleteMe) {
+                req.responseData = { data: updatedUser };
+                req.responseStatus = 200;
+                return next();
+            }
+            Object.keys(defaultExcludedUserFields).forEach((key) => {
+                delete updatedUser[key];
+            });
+            res.status(200).json({
+                message: "Account deleted successfully",
+            });
+        }),
+        updatePassword: catchAsync(async (req, res, next) => {
+            const { currentPassword, newPassword } = req.body;
+            if (!currentPassword || !newPassword)
+                return next(new AppError("currentPassword and newPassword are required", 400));
+            const user = req.user;
+            if (!user || user?.isActive === false || user?.deletedSelfAccountAt)
+                return next(new AppError("User not found!", 404));
+            const isPasswordCorrect = await authService.isCorrectPassword(String(currentPassword), String(user.password));
+            const configs = getArkosConfig();
+            const initAuthConfigs = configs?.authentication;
+            if (!isPasswordCorrect)
+                return next(new AppError("Current password is incorrect.", 400));
+            if (!authService.isPasswordStrong(String(newPassword)) &&
+                !configs?.validation) {
+                return next(new AppError(initAuthConfigs?.passwordValidation?.message ||
+                    "The new password must contain at least one uppercase letter, one lowercase letter, and one number", 400));
+            }
+            await userService.updateOne({ id: user.id }, {
+                password: await authService.hashPassword(newPassword),
+                passwordChangedAt: new Date(Date.now()),
+            });
+            if (interceptors?.afterUpdatePassword) {
+                req.additionalData = {
+                    user,
+                };
+                req.responseData = {
+                    status: "success",
+                    message: "Password updated successfully!",
+                };
+                req.responseStatus = 200;
+                return next();
+            }
+            res.status(200).json({
+                status: "success",
+                message: "Password updated successfully!",
+            });
+        }),
+        findManyAuthAction: catchAsync(async (_, res) => {
+            const arkosConfig = getArkosConfig();
+            const authActions = authActionService.getAll()?.map((authAction) => {
+                if (arkosConfig?.authentication?.mode === "dynamic")
+                    delete authAction?.roles;
+                return authAction;
+            });
+            res.json({
+                total: authActions.length,
+                results: authActions.length,
+                data: authActions,
+            });
+        }),
+        findOneAuthAction: catchAsync(async (req, res) => {
+            const arkosConfig = getArkosConfig();
+            const resourceName = req.params?.resourceName;
+            if (!resourceName)
+                throw new AppError(`Please provide a resoureName`, 400);
+            const authActions = authActionService
+                .getByResource(req.params?.resourceName)
+                ?.map((authAction) => {
+                if (arkosConfig?.authentication?.mode === "dynamic")
+                    delete authAction?.roles;
+                return authAction;
+            });
+            if (!authActions)
+                throw new AppError(`No auth action with resource name ${resourceName}`, 404);
+            res.json({
+                total: authActions.length,
+                results: authActions.length,
+                data: authActions,
+            });
+        }),
+    };
+};
+//# sourceMappingURL=auth.controller.js.map

package/dist/esm/modules/auth/auth.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.controller.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,oCAAoC,CAAC;AAC5D,OAAO,QAAQ,MAAM,kCAAkC,CAAC;AAGxD,OAAO,WAAW,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,QAAQ,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,cAAc,EAEd,IAAI,GACL,MAAM,yCAAyC,CAAC;AACjD,OAAO,iBAAiB,MAAM,sCAAsC,CAAC;AAKrE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,KAAK;CAChB,CAAC;AAQF,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,eAAoB,EAAE,EAAE,EAAE;IACpE,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAE5C,OAAO;QAIL,KAAK,EAAE,UAAU,CACf,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,CACrC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,UAAU,EAAE,CAAC;gBAC7B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAKD,QAAQ,EAAE,UAAU,CAClB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,IAAI,UAAU,IAAI,GAAG,CAAC,IAAI;gBACxB,MAAM,IAAI,QAAQ,CAChB,+DAA+D,EAC/D,GAAG,EACH,EAAE,EACF,sBAAsB,CACvB,CAAC;YAEJ,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CACvC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,aAAa,EAAE,CAAC;gBAChC,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAKD,MAAM,EAAE,UAAU,CAChB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,UAAU,EAAE;gBAC3C,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBACzC,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;gBACxB,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC,CACF;QAQD,KAAK,EAAE,UAAU,CACf,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,WAAW,GAAG,cAAc,EAAE,EAAE,cAAc,CAAC;YAErD,MAAM,aAAa,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAGlD,MAAM,SAAS,GACb,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAEhE,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE1C,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAE9B,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ;gBAC7B,OAAO,IAAI,CACT,IAAI,QAAQ,CAAC,uBAAuB,SAAS,eAAe,EAAE,GAAG,CAAC,CACnE,CAAC;YAGJ,IAAI,WAAgC,CAAC;YAErC,IAAI,aAAa,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;gBAEnC,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,WAAW,aAAa,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtE,CAAC;gBACD,WAAW,GAAG,uBAAuB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBAEN,WAAW,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,CAAC;YACnD,CAAC;YAGD,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,CACrC,WAAW,EACX,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IACE,CAAC,IAAI;gBACL,CAAC,CAAC,MAAM,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAC/D,CAAC;gBACD,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,aAAa,SAAS,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,EAAG,CAAC,CAAC;YAEjD,MAAM,aAAa,GAAkB;gBACnC,OAAO,EAAE,IAAI,IAAI,CACf,IAAI,CAAC,GAAG,EAAE;oBACR,MAAM,CACJ,IAAI,CACF,WAAW,EAAE,GAAG,EAAE,SAAS;wBACxB,OAAO,CAAC,GAAG,CAAC,cAA6B;wBACzC,QAAQ,CAAC,cAA6B,CAC1C,CACF,CACJ;gBACD,QAAQ,EACN,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;oBAClC,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM;oBAC3C,IAAI;gBACN,MAAM,EACJ,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM;oBAChC,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM;oBACxC,GAAG,CAAC,MAAM;oBACV,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO;gBAC9C,QAAQ,EACN,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;oBACjC,OAAO,CAAC,GAAG,CAAC,oBAIC;oBACd,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;aAC3D,CAAC;YAEF,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,eAAe;gBAC9D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB,EAC3C,CAAC;gBACD,GAAG,CAAC,YAAY,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YAC5C,CAAC;YAED,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,aAAa;gBAC5D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB;gBAE3C,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YAEzD,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC;YAExB,IAAI,YAAY,EAAE,UAAU,EAAE,CAAC;gBAC7B,GAAG,CAAC,cAAc,GAAG,EAAE,IAAI,EAAE,CAAC;gBAC9B,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,eAAe;gBAC9D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB,EAC3C,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;iBAAM,IACL,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,aAAa;gBAC5D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB;gBAE3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC,CACF;QAKD,MAAM,EAAE,UAAU,CAChB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CACvC,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAID,QAAQ,EAAE,UAAU,CAClB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAK,CAAC,EAAE,CAAC;YAE5B,MAAM,WAAW,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CAC9C,EAAE,EAAE,EAAE,MAAM,EAAE,EACd;gBACE,oBAAoB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC/C,EACD,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IAAI,YAAY,EAAE,aAAa,EAAE,CAAC;gBAChC,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;gBACzC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,OAAO,WAAW,CAAC,GAAiB,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,8BAA8B;aACxC,CAAC,CAAC;QACL,CAAC,CACF;QAKD,cAAc,EAAE,UAAU,CACxB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAElD,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW;gBAClC,OAAO,IAAI,CACT,IAAI,QAAQ,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAClE,CAAC;YAEJ,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAEtB,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,QAAQ,KAAK,KAAK,IAAI,IAAI,EAAE,oBAAoB;gBACjE,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,CAAC;YAGpD,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAC3D,MAAM,CAAC,eAAe,CAAC,EACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CACtB,CAAC;YAEF,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;YACjC,MAAM,eAAe,GAAG,OAAO,EAAE,cAAc,CAAC;YAEhD,IAAI,CAAC,iBAAiB;gBACpB,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC,CAAC;YAGnE,IACE,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAClD,CAAC,OAAO,EAAE,UAAU,EACpB,CAAC;gBACD,OAAO,IAAI,CACT,IAAI,QAAQ,CACV,eAAe,EAAE,kBAAkB,EAAE,OAAO;oBAC1C,mGAAmG,EACrG,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;YAGD,MAAM,WAAW,CAAC,SAAS,CACzB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EACf;gBACE,QAAQ,EAAE,MAAM,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC;gBACrD,iBAAiB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;aACxC,CACF,CAAC;YAEF,IAAI,YAAY,EAAE,mBAAmB,EAAE,CAAC;gBACtC,GAAG,CAAC,cAAc,GAAG;oBACnB,IAAI;iBACL,CAAC;gBACF,GAAG,CAAC,YAAY,GAAG;oBACjB,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,gCAAgC;iBAC1C,CAAC;gBACF,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;QACL,CAAC,CACF;QAED,kBAAkB,EAAE,UAAU,CAC5B,KAAK,EAAE,CAAe,EAAE,GAAkB,EAAE,EAAE;YAC5C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;gBACjE,IAAI,WAAW,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS;oBACjD,OAAQ,UAAkB,EAAE,KAAK,CAAC;gBACpC,OAAO,UAAU,CAAC;YACpB,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,WAAW,CAAC,MAAM;gBACzB,OAAO,EAAE,WAAW,CAAC,MAAM;gBAC3B,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC,CACF;QAED,iBAAiB,EAAE,UAAU,CAC3B,KAAK,EAAE,GAAiB,EAAE,GAAkB,EAAE,EAAE;YAC9C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;YACrC,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC;YAE9C,IAAI,CAAC,YAAY;gBACf,MAAM,IAAI,QAAQ,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;YAE1D,MAAM,UAAU,GAAG,iBAAiB,CAAC,aAAa,CAChD,GAAG,CAAC,MAAM,EAAE,YAAY,CACzB,CAAC;YAEF,IAAI,CAAC,UAAU;gBACb,MAAM,IAAI,QAAQ,CAChB,kCAAkC,YAAY,EAAE,EAChD,GAAG,CACJ,CAAC;YAEJ,IAAI,WAAW,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS;gBACjD,OAAQ,UAAkB,EAAE,KAAK,CAAC;YAEpC,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,UAAU;aACjB,CAAC,CAAC;QACL,CAAC,CACF;KACF,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import catchAsync from \"../error-handler/utils/catch-async\";\nimport AppError from \"../error-handler/utils/app-error\";\nimport { CookieOptions } from \"express\";\nimport { ArkosRequest, ArkosResponse, ArkosNextFunction } from \"../../types\";\nimport authService from \"./auth.service\";\nimport { BaseService } from \"../base/base.service\";\nimport { User } from \"../../types\";\nimport arkosEnv from \"../../utils/arkos-env\";\nimport { getArkosConfig } from \"../../server\";\nimport {\n  createPrismaWhereClause,\n  determineUsernameField,\n  getNestedValue,\n  MsDuration,\n  toMs,\n} from \"./utils/helpers/auth.controller.helpers\";\nimport authActionService from \"./utils/services/auth-action.service\";\n\n/**\n * Default fields to exclude from user object when returning to client\n */\nexport const defaultExcludedUserFields = {\n  password: false,\n};\n\n/**\n * Factory function to create authentication controller with configurable interceptors\n *\n * @param interceptors - Optional middleware functions to execute after controller actions\n * @returns An object containing all authentication controller methods\n */\nexport const authControllerFactory = async (interceptors: any = {}) => {\n  const userService = new BaseService(\"user\");\n\n  return {\n    /**\n     * Retrieves the current authenticated user's information\n     */\n    getMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const user = (await userService.findOne(\n          { id: req.user!.id },\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (user) delete user[key as keyof User];\n        });\n\n        if (interceptors?.afterGetMe) {\n          req.responseData = { data: user };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: user });\n      }\n    ),\n\n    /**\n     * Updates the current authenticated user's information\n     */\n    updateMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        if (\"password\" in req.body)\n          throw new AppError(\n            \"In order to update password use the update-password endpoint.\",\n            400,\n            {},\n            \"InvalidFieldPassword\"\n          );\n\n        const user = (await userService.updateOne(\n          { id: req.user!.id },\n          req.body,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (user) delete user[key as keyof User];\n        });\n\n        if (interceptors?.afterUpdateMe) {\n          req.responseData = { data: user };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: user });\n      }\n    ),\n\n    /**\n     * Logs out the current user by invalidating their access token cookie\n     */\n    logout: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        res.cookie(\"arkos_access_token\", \"no-token\", {\n          expires: new Date(Date.now() + 10 * 1000),\n          httpOnly: true,\n        });\n\n        if (interceptors?.afterLogout) {\n          req.responseData = null;\n          req.responseStatus = 204;\n          return next();\n        }\n\n        res.status(204).json();\n      }\n    ),\n\n    /**\n     * Authenticates a user using configurable username field and password\n     * Username field can be specified in query parameter or config\n     *\n     * Supports nested fields and array queries (e.g., \"profile.nickname\", \"phones.some.number\")\n     */\n    login: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const authConfigs = getArkosConfig()?.authentication;\n\n        const usernameField = determineUsernameField(req);\n\n        // For the error message, we only care about the top-level field name\n        const lastField =\n          usernameField.split(\".\")[usernameField.split(\".\").length - 1];\n\n        const usernameValue = req.body[lastField];\n\n        const { password } = req.body;\n\n        if (!usernameValue || !password)\n          return next(\n            new AppError(`Please provide both ${lastField} and password`, 400)\n          );\n\n        // Create appropriate where clause for the query\n        let whereClause: Record<string, any>;\n\n        if (usernameField?.includes?.(\".\")) {\n          // For nested paths, we need to extract the actual value to search for\n          const valueToFind = getNestedValue(req.body, usernameField);\n          if (valueToFind === undefined) {\n            return next(new AppError(`Invalid ${usernameField} provided`, 400));\n          }\n          whereClause = createPrismaWhereClause(usernameField, valueToFind);\n        } else {\n          // Simple field case\n          whereClause = { [usernameField]: usernameValue };\n        }\n\n        // Use findFirst instead of findUnique for complex queries\n        const user = (await userService.findOne(\n          whereClause,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (\n          !user ||\n          !(await authService.isCorrectPassword(password, user.password))\n        ) {\n          return next(new AppError(`Incorrect ${lastField} or password`, 401));\n        }\n\n        const token = authService.signJwtToken(user.id!);\n\n        const cookieOptions: CookieOptions = {\n          expires: new Date(\n            Date.now() +\n              Number(\n                toMs(\n                  authConfigs?.jwt?.expiresIn ||\n                    (process.env.JWT_EXPIRES_IN as MsDuration) ||\n                    (arkosEnv.JWT_EXPIRES_IN as MsDuration)\n                )\n              )\n          ),\n          httpOnly:\n            authConfigs?.jwt?.cookie?.httpOnly ||\n            process.env.JWT_COOKIE_HTTP_ONLY === \"true\" ||\n            true,\n          secure:\n            authConfigs?.jwt?.cookie?.secure ||\n            process.env.JWT_COOKIE_SECURE === \"true\" ||\n            req.secure ||\n            req.headers[\"x-forwarded-proto\"] === \"https\",\n          sameSite:\n            authConfigs?.jwt?.cookie?.sameSite ||\n            (process.env.JWT_COOKIE_SAME_SITE as\n              | \"none\"\n              | \"lax\"\n              | \"strict\"\n              | undefined) ||\n            (process.env.NODE_ENV === \"production\" ? \"none\" : \"lax\"),\n        };\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"response-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        ) {\n          req.responseData = { accessToken: token };\n        }\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"cookie-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        )\n          res.cookie(\"arkos_access_token\", token, cookieOptions);\n\n        req.accessToken = token;\n\n        if (interceptors?.afterLogin) {\n          req.additionalData = { user };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"response-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        ) {\n          res.status(200).json(req.responseData);\n        } else if (\n          authConfigs?.login?.sendAccessTokenThrough === \"cookie-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        )\n          res.status(200).send();\n      }\n    ),\n\n    /**\n     * Creates a new user account using the userService\n     */\n    signup: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const user = (await userService.createOne(\n          req.body,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (interceptors?.afterSignup) {\n          req.responseData = { data: user };\n          req.responseStatus = 201;\n          return next();\n        }\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          delete user[key as keyof User];\n        });\n\n        res.status(201).json({ data: user });\n      }\n    ),\n    /**\n     * Marks user account as self-deleted by setting deletedSelfAccountAt timestamp\n     */\n    deleteMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const userId = req.user!.id; // Assuming the authenticated user's ID is available in req.user\n\n        const updatedUser = (await userService.updateOne(\n          { id: userId },\n          {\n            deletedSelfAccountAt: new Date().toISOString(),\n          },\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (interceptors?.afterDeleteMe) {\n          req.responseData = { data: updatedUser };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          delete updatedUser[key as keyof User];\n        });\n\n        res.status(200).json({\n          message: \"Account deleted successfully\",\n        });\n      }\n    ),\n\n    /**\n     * Updates the password of the authenticated user\n     */\n    updatePassword: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const { currentPassword, newPassword } = req.body;\n\n        if (!currentPassword || !newPassword)\n          return next(\n            new AppError(\"currentPassword and newPassword are required\", 400)\n          );\n\n        const user = req.user;\n\n        if (!user || user?.isActive === false || user?.deletedSelfAccountAt)\n          return next(new AppError(\"User not found!\", 404));\n\n        // Check if the current password is correct\n        const isPasswordCorrect = await authService.isCorrectPassword(\n          String(currentPassword),\n          String(user.password)\n        );\n\n        const configs = getArkosConfig();\n        const initAuthConfigs = configs?.authentication;\n\n        if (!isPasswordCorrect)\n          return next(new AppError(\"Current password is incorrect.\", 400));\n\n        // Check password strength (optional but recommended)\n        if (\n          !authService.isPasswordStrong(String(newPassword)) &&\n          !configs?.validation\n        ) {\n          return next(\n            new AppError(\n              initAuthConfigs?.passwordValidation?.message ||\n                \"The new password must contain at least one uppercase letter, one lowercase letter, and one number\",\n              400\n            )\n          );\n        }\n\n        // Update the password\n        await userService.updateOne(\n          { id: user.id },\n          {\n            password: await authService.hashPassword(newPassword),\n            passwordChangedAt: new Date(Date.now()),\n          }\n        );\n\n        if (interceptors?.afterUpdatePassword) {\n          req.additionalData = {\n            user,\n          };\n          req.responseData = {\n            status: \"success\",\n            message: \"Password updated successfully!\",\n          };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({\n          status: \"success\",\n          message: \"Password updated successfully!\",\n        });\n      }\n    ),\n\n    findManyAuthAction: catchAsync(\n      async (_: ArkosRequest, res: ArkosResponse) => {\n        const arkosConfig = getArkosConfig();\n        const authActions = authActionService.getAll()?.map((authAction) => {\n          if (arkosConfig?.authentication?.mode === \"dynamic\")\n            delete (authAction as any)?.roles;\n          return authAction;\n        });\n\n        res.json({\n          total: authActions.length,\n          results: authActions.length,\n          data: authActions,\n        });\n      }\n    ),\n\n    findOneAuthAction: catchAsync(\n      async (req: ArkosRequest, res: ArkosResponse) => {\n        const arkosConfig = getArkosConfig();\n        const resourceName = req.params?.resourceName;\n\n        if (!resourceName)\n          throw new AppError(`Please provide a resoureName`, 400);\n\n        const authAction = authActionService.getByResource(\n          req.params?.resourceName\n        );\n\n        if (!authAction)\n          throw new AppError(\n            `Auth action with resource name ${resourceName}`,\n            404\n          );\n\n        if (arkosConfig?.authentication?.mode === \"dynamic\")\n          delete (authAction as any)?.roles;\n\n        res.json({\n          data: authAction,\n        });\n      }\n    ),\n  };\n};\n"]}
+{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.controller.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,oCAAoC,CAAC;AAC5D,OAAO,QAAQ,MAAM,kCAAkC,CAAC;AAGxD,OAAO,WAAW,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,QAAQ,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,cAAc,EAEd,IAAI,GACL,MAAM,yCAAyC,CAAC;AACjD,OAAO,iBAAiB,MAAM,sCAAsC,CAAC;AAKrE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,KAAK;CAChB,CAAC;AAQF,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,eAAoB,EAAE,EAAE,EAAE;IACpE,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAE5C,OAAO;QAIL,KAAK,EAAE,UAAU,CACf,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,CACrC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,UAAU,EAAE,CAAC;gBAC7B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAKD,QAAQ,EAAE,UAAU,CAClB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,IAAI,UAAU,IAAI,GAAG,CAAC,IAAI;gBACxB,MAAM,IAAI,QAAQ,CAChB,+DAA+D,EAC/D,GAAG,EACH,EAAE,EACF,sBAAsB,CACvB,CAAC;YAEJ,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CACvC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,aAAa,EAAE,CAAC;gBAChC,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAKD,MAAM,EAAE,UAAU,CAChB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,UAAU,EAAE;gBAC3C,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBACzC,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;gBACxB,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC,CACF;QAQD,KAAK,EAAE,UAAU,CACf,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,WAAW,GAAG,cAAc,EAAE,EAAE,cAAc,CAAC;YAErD,MAAM,aAAa,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAGlD,MAAM,SAAS,GACb,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAEhE,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE1C,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAE9B,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ;gBAC7B,OAAO,IAAI,CACT,IAAI,QAAQ,CAAC,uBAAuB,SAAS,eAAe,EAAE,GAAG,CAAC,CACnE,CAAC;YAGJ,IAAI,WAAgC,CAAC;YAErC,IAAI,aAAa,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;gBAEnC,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,WAAW,aAAa,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtE,CAAC;gBACD,WAAW,GAAG,uBAAuB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBAEN,WAAW,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,CAAC;YACnD,CAAC;YAGD,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,CACrC,WAAW,EACX,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IACE,CAAC,IAAI;gBACL,CAAC,CAAC,MAAM,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAC/D,CAAC;gBACD,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,aAAa,SAAS,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,EAAG,CAAC,CAAC;YAEjD,MAAM,aAAa,GAAkB;gBACnC,OAAO,EAAE,IAAI,IAAI,CACf,IAAI,CAAC,GAAG,EAAE;oBACR,MAAM,CACJ,IAAI,CACF,WAAW,EAAE,GAAG,EAAE,SAAS;wBACxB,OAAO,CAAC,GAAG,CAAC,cAA6B;wBACzC,QAAQ,CAAC,cAA6B,CAC1C,CACF,CACJ;gBACD,QAAQ,EACN,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;oBAClC,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM;oBAC3C,IAAI;gBACN,MAAM,EACJ,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM;oBAChC,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM;oBACxC,GAAG,CAAC,MAAM;oBACV,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO;gBAC9C,QAAQ,EACN,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;oBACjC,OAAO,CAAC,GAAG,CAAC,oBAIC;oBACd,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;aAC3D,CAAC;YAEF,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,eAAe;gBAC9D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB,EAC3C,CAAC;gBACD,GAAG,CAAC,YAAY,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YAC5C,CAAC;YAED,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,aAAa;gBAC5D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB;gBAE3C,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YAEzD,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC;YAExB,IAAI,YAAY,EAAE,UAAU,EAAE,CAAC;gBAC7B,GAAG,CAAC,cAAc,GAAG,EAAE,IAAI,EAAE,CAAC;gBAC9B,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,eAAe;gBAC9D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB,EAC3C,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;iBAAM,IACL,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,aAAa;gBAC5D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB;gBAE3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC,CACF;QAKD,MAAM,EAAE,UAAU,CAChB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CACvC,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAID,QAAQ,EAAE,UAAU,CAClB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAK,CAAC,EAAE,CAAC;YAE5B,MAAM,WAAW,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CAC9C,EAAE,EAAE,EAAE,MAAM,EAAE,EACd;gBACE,oBAAoB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC/C,EACD,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IAAI,YAAY,EAAE,aAAa,EAAE,CAAC;gBAChC,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;gBACzC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,OAAO,WAAW,CAAC,GAAiB,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,8BAA8B;aACxC,CAAC,CAAC;QACL,CAAC,CACF;QAKD,cAAc,EAAE,UAAU,CACxB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAElD,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW;gBAClC,OAAO,IAAI,CACT,IAAI,QAAQ,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAClE,CAAC;YAEJ,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAEtB,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,QAAQ,KAAK,KAAK,IAAI,IAAI,EAAE,oBAAoB;gBACjE,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,CAAC;YAGpD,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAC3D,MAAM,CAAC,eAAe,CAAC,EACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CACtB,CAAC;YAEF,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;YACjC,MAAM,eAAe,GAAG,OAAO,EAAE,cAAc,CAAC;YAEhD,IAAI,CAAC,iBAAiB;gBACpB,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC,CAAC;YAGnE,IACE,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAClD,CAAC,OAAO,EAAE,UAAU,EACpB,CAAC;gBACD,OAAO,IAAI,CACT,IAAI,QAAQ,CACV,eAAe,EAAE,kBAAkB,EAAE,OAAO;oBAC1C,mGAAmG,EACrG,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;YAGD,MAAM,WAAW,CAAC,SAAS,CACzB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EACf;gBACE,QAAQ,EAAE,MAAM,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC;gBACrD,iBAAiB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;aACxC,CACF,CAAC;YAEF,IAAI,YAAY,EAAE,mBAAmB,EAAE,CAAC;gBACtC,GAAG,CAAC,cAAc,GAAG;oBACnB,IAAI;iBACL,CAAC;gBACF,GAAG,CAAC,YAAY,GAAG;oBACjB,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,gCAAgC;iBAC1C,CAAC;gBACF,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;QACL,CAAC,CACF;QAED,kBAAkB,EAAE,UAAU,CAC5B,KAAK,EAAE,CAAe,EAAE,GAAkB,EAAE,EAAE;YAC5C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;gBACjE,IAAI,WAAW,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS;oBACjD,OAAQ,UAAkB,EAAE,KAAK,CAAC;gBACpC,OAAO,UAAU,CAAC;YACpB,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,WAAW,CAAC,MAAM;gBACzB,OAAO,EAAE,WAAW,CAAC,MAAM;gBAC3B,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC,CACF;QAED,iBAAiB,EAAE,UAAU,CAC3B,KAAK,EAAE,GAAiB,EAAE,GAAkB,EAAE,EAAE;YAC9C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;YACrC,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC;YAE9C,IAAI,CAAC,YAAY;gBACf,MAAM,IAAI,QAAQ,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;YAE1D,MAAM,WAAW,GAAG,iBAAiB;iBAClC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC;gBACxC,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;gBACnB,IAAI,WAAW,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS;oBACjD,OAAQ,UAAkB,EAAE,KAAK,CAAC;gBACpC,OAAO,UAAU,CAAC;YACpB,CAAC,CAAC,CAAC;YAEL,IAAI,CAAC,WAAW;gBACd,MAAM,IAAI,QAAQ,CAChB,qCAAqC,YAAY,EAAE,EACnD,GAAG,CACJ,CAAC;YAEJ,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,WAAW,CAAC,MAAM;gBACzB,OAAO,EAAE,WAAW,CAAC,MAAM;gBAC3B,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC,CACF;KACF,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import catchAsync from \"../error-handler/utils/catch-async\";\nimport AppError from \"../error-handler/utils/app-error\";\nimport { CookieOptions } from \"express\";\nimport { ArkosRequest, ArkosResponse, ArkosNextFunction } from \"../../types\";\nimport authService from \"./auth.service\";\nimport { BaseService } from \"../base/base.service\";\nimport { User } from \"../../types\";\nimport arkosEnv from \"../../utils/arkos-env\";\nimport { getArkosConfig } from \"../../server\";\nimport {\n  createPrismaWhereClause,\n  determineUsernameField,\n  getNestedValue,\n  MsDuration,\n  toMs,\n} from \"./utils/helpers/auth.controller.helpers\";\nimport authActionService from \"./utils/services/auth-action.service\";\n\n/**\n * Default fields to exclude from user object when returning to client\n */\nexport const defaultExcludedUserFields = {\n  password: false,\n};\n\n/**\n * Factory function to create authentication controller with configurable interceptors\n *\n * @param interceptors - Optional middleware functions to execute after controller actions\n * @returns An object containing all authentication controller methods\n */\nexport const authControllerFactory = async (interceptors: any = {}) => {\n  const userService = new BaseService(\"user\");\n\n  return {\n    /**\n     * Retrieves the current authenticated user's information\n     */\n    getMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const user = (await userService.findOne(\n          { id: req.user!.id },\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (user) delete user[key as keyof User];\n        });\n\n        if (interceptors?.afterGetMe) {\n          req.responseData = { data: user };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: user });\n      }\n    ),\n\n    /**\n     * Updates the current authenticated user's information\n     */\n    updateMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        if (\"password\" in req.body)\n          throw new AppError(\n            \"In order to update password use the update-password endpoint.\",\n            400,\n            {},\n            \"InvalidFieldPassword\"\n          );\n\n        const user = (await userService.updateOne(\n          { id: req.user!.id },\n          req.body,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (user) delete user[key as keyof User];\n        });\n\n        if (interceptors?.afterUpdateMe) {\n          req.responseData = { data: user };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: user });\n      }\n    ),\n\n    /**\n     * Logs out the current user by invalidating their access token cookie\n     */\n    logout: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        res.cookie(\"arkos_access_token\", \"no-token\", {\n          expires: new Date(Date.now() + 10 * 1000),\n          httpOnly: true,\n        });\n\n        if (interceptors?.afterLogout) {\n          req.responseData = null;\n          req.responseStatus = 204;\n          return next();\n        }\n\n        res.status(204).json();\n      }\n    ),\n\n    /**\n     * Authenticates a user using configurable username field and password\n     * Username field can be specified in query parameter or config\n     *\n     * Supports nested fields and array queries (e.g., \"profile.nickname\", \"phones.some.number\")\n     */\n    login: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const authConfigs = getArkosConfig()?.authentication;\n\n        const usernameField = determineUsernameField(req);\n\n        // For the error message, we only care about the top-level field name\n        const lastField =\n          usernameField.split(\".\")[usernameField.split(\".\").length - 1];\n\n        const usernameValue = req.body[lastField];\n\n        const { password } = req.body;\n\n        if (!usernameValue || !password)\n          return next(\n            new AppError(`Please provide both ${lastField} and password`, 400)\n          );\n\n        // Create appropriate where clause for the query\n        let whereClause: Record<string, any>;\n\n        if (usernameField?.includes?.(\".\")) {\n          // For nested paths, we need to extract the actual value to search for\n          const valueToFind = getNestedValue(req.body, usernameField);\n          if (valueToFind === undefined) {\n            return next(new AppError(`Invalid ${usernameField} provided`, 400));\n          }\n          whereClause = createPrismaWhereClause(usernameField, valueToFind);\n        } else {\n          // Simple field case\n          whereClause = { [usernameField]: usernameValue };\n        }\n\n        // Use findFirst instead of findUnique for complex queries\n        const user = (await userService.findOne(\n          whereClause,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (\n          !user ||\n          !(await authService.isCorrectPassword(password, user.password))\n        ) {\n          return next(new AppError(`Incorrect ${lastField} or password`, 401));\n        }\n\n        const token = authService.signJwtToken(user.id!);\n\n        const cookieOptions: CookieOptions = {\n          expires: new Date(\n            Date.now() +\n              Number(\n                toMs(\n                  authConfigs?.jwt?.expiresIn ||\n                    (process.env.JWT_EXPIRES_IN as MsDuration) ||\n                    (arkosEnv.JWT_EXPIRES_IN as MsDuration)\n                )\n              )\n          ),\n          httpOnly:\n            authConfigs?.jwt?.cookie?.httpOnly ||\n            process.env.JWT_COOKIE_HTTP_ONLY === \"true\" ||\n            true,\n          secure:\n            authConfigs?.jwt?.cookie?.secure ||\n            process.env.JWT_COOKIE_SECURE === \"true\" ||\n            req.secure ||\n            req.headers[\"x-forwarded-proto\"] === \"https\",\n          sameSite:\n            authConfigs?.jwt?.cookie?.sameSite ||\n            (process.env.JWT_COOKIE_SAME_SITE as\n              | \"none\"\n              | \"lax\"\n              | \"strict\"\n              | undefined) ||\n            (process.env.NODE_ENV === \"production\" ? \"none\" : \"lax\"),\n        };\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"response-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        ) {\n          req.responseData = { accessToken: token };\n        }\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"cookie-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        )\n          res.cookie(\"arkos_access_token\", token, cookieOptions);\n\n        req.accessToken = token;\n\n        if (interceptors?.afterLogin) {\n          req.additionalData = { user };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"response-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        ) {\n          res.status(200).json(req.responseData);\n        } else if (\n          authConfigs?.login?.sendAccessTokenThrough === \"cookie-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        )\n          res.status(200).send();\n      }\n    ),\n\n    /**\n     * Creates a new user account using the userService\n     */\n    signup: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const user = (await userService.createOne(\n          req.body,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (interceptors?.afterSignup) {\n          req.responseData = { data: user };\n          req.responseStatus = 201;\n          return next();\n        }\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          delete user[key as keyof User];\n        });\n\n        res.status(201).json({ data: user });\n      }\n    ),\n    /**\n     * Marks user account as self-deleted by setting deletedSelfAccountAt timestamp\n     */\n    deleteMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const userId = req.user!.id; // Assuming the authenticated user's ID is available in req.user\n\n        const updatedUser = (await userService.updateOne(\n          { id: userId },\n          {\n            deletedSelfAccountAt: new Date().toISOString(),\n          },\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (interceptors?.afterDeleteMe) {\n          req.responseData = { data: updatedUser };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          delete updatedUser[key as keyof User];\n        });\n\n        res.status(200).json({\n          message: \"Account deleted successfully\",\n        });\n      }\n    ),\n\n    /**\n     * Updates the password of the authenticated user\n     */\n    updatePassword: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const { currentPassword, newPassword } = req.body;\n\n        if (!currentPassword || !newPassword)\n          return next(\n            new AppError(\"currentPassword and newPassword are required\", 400)\n          );\n\n        const user = req.user;\n\n        if (!user || user?.isActive === false || user?.deletedSelfAccountAt)\n          return next(new AppError(\"User not found!\", 404));\n\n        // Check if the current password is correct\n        const isPasswordCorrect = await authService.isCorrectPassword(\n          String(currentPassword),\n          String(user.password)\n        );\n\n        const configs = getArkosConfig();\n        const initAuthConfigs = configs?.authentication;\n\n        if (!isPasswordCorrect)\n          return next(new AppError(\"Current password is incorrect.\", 400));\n\n        // Check password strength (optional but recommended)\n        if (\n          !authService.isPasswordStrong(String(newPassword)) &&\n          !configs?.validation\n        ) {\n          return next(\n            new AppError(\n              initAuthConfigs?.passwordValidation?.message ||\n                \"The new password must contain at least one uppercase letter, one lowercase letter, and one number\",\n              400\n            )\n          );\n        }\n\n        // Update the password\n        await userService.updateOne(\n          { id: user.id },\n          {\n            password: await authService.hashPassword(newPassword),\n            passwordChangedAt: new Date(Date.now()),\n          }\n        );\n\n        if (interceptors?.afterUpdatePassword) {\n          req.additionalData = {\n            user,\n          };\n          req.responseData = {\n            status: \"success\",\n            message: \"Password updated successfully!\",\n          };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({\n          status: \"success\",\n          message: \"Password updated successfully!\",\n        });\n      }\n    ),\n\n    findManyAuthAction: catchAsync(\n      async (_: ArkosRequest, res: ArkosResponse) => {\n        const arkosConfig = getArkosConfig();\n        const authActions = authActionService.getAll()?.map((authAction) => {\n          if (arkosConfig?.authentication?.mode === \"dynamic\")\n            delete (authAction as any)?.roles;\n          return authAction;\n        });\n\n        res.json({\n          total: authActions.length,\n          results: authActions.length,\n          data: authActions,\n        });\n      }\n    ),\n\n    findOneAuthAction: catchAsync(\n      async (req: ArkosRequest, res: ArkosResponse) => {\n        const arkosConfig = getArkosConfig();\n        const resourceName = req.params?.resourceName;\n\n        if (!resourceName)\n          throw new AppError(`Please provide a resoureName`, 400);\n\n        const authActions = authActionService\n          .getByResource(req.params?.resourceName)\n          ?.map((authAction) => {\n            if (arkosConfig?.authentication?.mode === \"dynamic\")\n              delete (authAction as any)?.roles;\n            return authAction;\n          });\n\n        if (!authActions)\n          throw new AppError(\n            `No auth action with resource name ${resourceName}`,\n            404\n          );\n\n        res.json({\n          total: authActions.length,\n          results: authActions.length,\n          data: authActions,\n        });\n      }\n    ),\n  };\n};\n"]}

package/dist/esm/modules/auth/auth.router.js

@@ -1 +1,76 @@
-"use strict";import{Router as A}from"express";import{authControllerFactory as y}from"./auth.controller.js";import i from"./auth.service.js";import w from"express-rate-limit";import{getModuleComponents as b}from"../../utils/dynamic-loader.js";import{addPrismaQueryOptionsToRequest as d,handleRequestBodyValidationAndTransformation as l,sendResponse as s}from"../base/base.middlewares.js";import E from"../../utils/helpers/deepmerge.helper.js";import{processMiddleware as t}from"../../utils/helpers/routers.helpers.js";import{isEndpointDisabled as r}from"../base/utils/helpers/base.router.helpers.js";const a=A();export async function getAuthRouter(g){const{interceptors:e,dtos:h,schemas:m,prismaQueryOptions:u,router:M}=b("auth")||{},o=M?.config||{},n=await y(e);if(o?.disable===!0)return a;const p=c=>{const f=g?.validation;if(f?.resolver==="class-validator")return h?.[c];if(f?.resolver==="zod")return m?.[c]};return r(o,"getMe")||a.get("/users/me",i.authenticate,d(u,"getMe"),...t(e?.beforeGetMe),n.getMe,...t(e?.afterGetMe),s,...t(e?.onGetMeError,{type:"error"})),r(o,"updateMe")||a.patch("/users/me",i.authenticate,l(p("updateMe")),d(u,"updateMe"),...t(e?.beforeUpdateMe),n.updateMe,...t(e?.afterUpdateMe),s,...t(e?.onUpdateMeError,{type:"error"})),r(o,"deleteMe")||a.delete("/users/me",i.authenticate,d(u,"deleteMe"),...t(e?.beforeDeleteMe),n.deleteMe,...t(e?.afterDeleteMe),s,...t(e?.onDeleteMeError,{type:"error"})),(!r(o,"login")||!r(o,"logout")||!r(o,"signup")||!r(o,"updatePassword"))&&a.use("/auth",w(E({windowMs:5e3,limit:10,standardHeaders:"draft-7",legacyHeaders:!1,handler:(c,f)=>{f.status(429).json({message:"Too many requests, please try again later"})}},g?.authentication?.requestRateLimitOptions||{}))),r(o,"login")||a.post("/auth/login",l(p("login")),d(u,"login"),...t(e?.beforeLogin),n.login,...t(e?.afterLogin),s,...t(e?.onLoginError,{type:"error"})),r(o,"logout")||a.delete("/auth/logout",i.authenticate,...t(e?.beforeLogout),n.logout,...t(e?.afterLogout),s,...t(e?.onLogoutError,{type:"error"})),r(o,"signup")||a.post("/auth/signup",l(p("signup")),d(u,"signup"),...t(e?.beforeSignup),n.signup,...t(e?.afterSignup),s,...t(e?.onSignupError,{type:"error"})),r(o,"updatePassword")||a.post("/auth/update-password",i.authenticate,l(p("updatePassword")),d(u,"updatePassword"),...t(e?.beforeUpdatePassword),n.updatePassword,...t(e?.afterUpdatePassword),s,...t(e?.onUpdatePasswordError,{type:"error"})),r(o,"findManyAuthAction")||a.get("/auth-actions",i.authenticate,i.handleAccessControl("View","auth-action"),...t(e?.beforeFindManyAuthAction),n.findManyAuthAction,...t(e?.afterFindManyAuthAction),s,...t(e?.onFindManyAuthActionError,{type:"error"})),r(o,"findOneAuthAction")||a.get("/auth-actions",i.authenticate,i.handleAccessControl("View","auth-action"),...t(e?.beforeFindOneAuthAction),n.findManyAuthAction,...t(e?.afterFindOneAuthAction),s,...t(e?.onFindOneAuthActionError,{type:"error"})),a}
+import { Router } from "express";
+import { authControllerFactory } from "./auth.controller.js";
+import authService from "./auth.service.js";
+import rateLimit from "express-rate-limit";
+import { getModuleComponents } from "../../utils/dynamic-loader.js";
+import { addPrismaQueryOptionsToRequest, handleRequestBodyValidationAndTransformation, sendResponse, } from "../base/base.middlewares.js";
+import deepmerge from "../../utils/helpers/deepmerge.helper.js";
+import { processMiddleware } from "../../utils/helpers/routers.helpers.js";
+import { isEndpointDisabled } from "../base/utils/helpers/base.router.helpers.js";
+const router = Router();
+export async function getAuthRouter(arkosConfigs) {
+    const { interceptors, dtos, schemas, prismaQueryOptions, router: customRouterModule, } = getModuleComponents("auth") || {};
+    const routerConfig = customRouterModule?.config || {};
+    const authController = await authControllerFactory(interceptors);
+    if (routerConfig?.disable === true)
+        return router;
+    const getValidationSchemaOrDto = (key) => {
+        const validationConfigs = arkosConfigs?.validation;
+        if (validationConfigs?.resolver === "class-validator") {
+            return dtos?.[key];
+        }
+        else if (validationConfigs?.resolver === "zod") {
+            return schemas?.[key];
+        }
+        return undefined;
+    };
+    if (!isEndpointDisabled(routerConfig, "getMe")) {
+        router.get("/users/me", authService.authenticate, addPrismaQueryOptionsToRequest(prismaQueryOptions, "getMe"), ...processMiddleware(interceptors?.beforeGetMe), authController.getMe, ...processMiddleware(interceptors?.afterGetMe), sendResponse, ...processMiddleware(interceptors?.onGetMeError, { type: "error" }));
+    }
+    if (!isEndpointDisabled(routerConfig, "updateMe")) {
+        router.patch("/users/me", authService.authenticate, handleRequestBodyValidationAndTransformation(getValidationSchemaOrDto("updateMe")), addPrismaQueryOptionsToRequest(prismaQueryOptions, "updateMe"), ...processMiddleware(interceptors?.beforeUpdateMe), authController.updateMe, ...processMiddleware(interceptors?.afterUpdateMe), sendResponse, ...processMiddleware(interceptors?.onUpdateMeError, { type: "error" }));
+    }
+    if (!isEndpointDisabled(routerConfig, "deleteMe")) {
+        router.delete("/users/me", authService.authenticate, addPrismaQueryOptionsToRequest(prismaQueryOptions, "deleteMe"), ...processMiddleware(interceptors?.beforeDeleteMe), authController.deleteMe, ...processMiddleware(interceptors?.afterDeleteMe), sendResponse, ...processMiddleware(interceptors?.onDeleteMeError, { type: "error" }));
+    }
+    if (!isEndpointDisabled(routerConfig, "login") ||
+        !isEndpointDisabled(routerConfig, "logout") ||
+        !isEndpointDisabled(routerConfig, "signup") ||
+        !isEndpointDisabled(routerConfig, "updatePassword")) {
+        router.use("/auth", rateLimit(deepmerge({
+            windowMs: 5000,
+            limit: 10,
+            standardHeaders: "draft-7",
+            legacyHeaders: false,
+            handler: (_, res) => {
+                res.status(429).json({
+                    message: "Too many requests, please try again later",
+                });
+            },
+        }, arkosConfigs?.authentication?.requestRateLimitOptions || {})));
+    }
+    if (!isEndpointDisabled(routerConfig, "login")) {
+        router.post("/auth/login", handleRequestBodyValidationAndTransformation(getValidationSchemaOrDto("login")), addPrismaQueryOptionsToRequest(prismaQueryOptions, "login"), ...processMiddleware(interceptors?.beforeLogin), authController.login, ...processMiddleware(interceptors?.afterLogin), sendResponse, ...processMiddleware(interceptors?.onLoginError, { type: "error" }));
+    }
+    if (!isEndpointDisabled(routerConfig, "logout")) {
+        router.delete("/auth/logout", authService.authenticate, ...processMiddleware(interceptors?.beforeLogout), authController.logout, ...processMiddleware(interceptors?.afterLogout), sendResponse, ...processMiddleware(interceptors?.onLogoutError, { type: "error" }));
+    }
+    if (!isEndpointDisabled(routerConfig, "signup")) {
+        router.post("/auth/signup", handleRequestBodyValidationAndTransformation(getValidationSchemaOrDto("signup")), addPrismaQueryOptionsToRequest(prismaQueryOptions, "signup"), ...processMiddleware(interceptors?.beforeSignup), authController.signup, ...processMiddleware(interceptors?.afterSignup), sendResponse, ...processMiddleware(interceptors?.onSignupError, { type: "error" }));
+    }
+    if (!isEndpointDisabled(routerConfig, "updatePassword")) {
+        router.post("/auth/update-password", authService.authenticate, handleRequestBodyValidationAndTransformation(getValidationSchemaOrDto("updatePassword")), addPrismaQueryOptionsToRequest(prismaQueryOptions, "updatePassword"), ...processMiddleware(interceptors?.beforeUpdatePassword), authController.updatePassword, ...processMiddleware(interceptors?.afterUpdatePassword), sendResponse, ...processMiddleware(interceptors?.onUpdatePasswordError, {
+            type: "error",
+        }));
+    }
+    if (!isEndpointDisabled(routerConfig, "findManyAuthAction"))
+        router.get("/auth-actions", authService.authenticate, authService.handleAccessControl("View", "auth-action"), ...processMiddleware(interceptors?.beforeFindManyAuthAction), authController.findManyAuthAction, ...processMiddleware(interceptors?.afterFindManyAuthAction), sendResponse, ...processMiddleware(interceptors?.onFindManyAuthActionError, {
+            type: "error",
+        }));
+    if (!isEndpointDisabled(routerConfig, "findOneAuthAction"))
+        router.get("/auth-actions/:resourceName", authService.authenticate, authService.handleAccessControl("View", "auth-action"), ...processMiddleware(interceptors?.beforeFindOneAuthAction), authController.findOneAuthAction, ...processMiddleware(interceptors?.afterFindOneAuthAction), sendResponse, ...processMiddleware(interceptors?.onFindOneAuthActionError, {
+            type: "error",
+        }));
+    return router;
+}
+//# sourceMappingURL=auth.router.js.map

package/dist/esm/modules/auth/auth.router.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.router.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,WAAW,MAAM,gBAAgB,CAAC;AACzC,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EACL,8BAA8B,EAC9B,4CAA4C,EAC5C,YAAY,GACb,MAAM,0BAA0B,CAAC;AAElC,OAAO,SAAS,MAAM,sCAAsC,CAAC;AAE7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAE/E,MAAM,MAAM,GAAW,MAAM,EAAE,CAAC;AAEhC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,YAAyB;IAC3D,MAAM,EACJ,YAAY,EACZ,IAAI,EACJ,OAAO,EACP,kBAAkB,EAClB,MAAM,EAAE,kBAAkB,GAC3B,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAEtC,MAAM,YAAY,GAAG,kBAAkB,EAAE,MAAM,IAAI,EAAE,CAAC;IACtD,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAEjE,IAAI,YAAY,EAAE,OAAO,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAElD,MAAM,wBAAwB,GAAG,CAAC,GAAW,EAAE,EAAE;QAC/C,MAAM,iBAAiB,GAAG,YAAY,EAAE,UAAU,CAAC;QACnD,IAAI,iBAAiB,EAAE,QAAQ,KAAK,iBAAiB,EAAE,CAAC;YACtD,OAAO,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,iBAAiB,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;YACjD,OAAO,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,GAAG,CACR,WAAW,EACX,WAAW,CAAC,YAAY,EACxB,8BAA8B,CAC5B,kBAAiD,EACjD,OAAO,CACR,EACD,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,EAC/C,cAAc,CAAC,KAAK,EACpB,GAAG,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,EAC9C,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CACpE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,KAAK,CACV,WAAW,EACX,WAAW,CAAC,YAAY,EACxB,4CAA4C,CAC1C,wBAAwB,CAAC,UAAU,CAAC,CACrC,EACD,8BAA8B,CAC5B,kBAAiD,EACjD,UAAU,CACX,EACD,GAAG,iBAAiB,CAAC,YAAY,EAAE,cAAc,CAAC,EAClD,cAAc,CAAC,QAAQ,EACvB,GAAG,iBAAiB,CAAC,YAAY,EAAE,aAAa,CAAC,EACjD,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CACvE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,MAAM,CACX,WAAW,EACX,WAAW,CAAC,YAAY,EACxB,8BAA8B,CAC5B,kBAAiD,EACjD,UAAU,CACX,EACD,GAAG,iBAAiB,CAAC,YAAY,EAAE,cAAc,CAAC,EAClD,cAAc,CAAC,QAAQ,EACvB,GAAG,iBAAiB,CAAC,YAAY,EAAE,aAAa,CAAC,EACjD,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CACvE,CAAC;IACJ,CAAC;IAED,IACE,CAAC,kBAAkB,CAAS,YAAY,EAAE,OAAO,CAAC;QAClD,CAAC,kBAAkB,CAAS,YAAY,EAAE,QAAQ,CAAC;QACnD,CAAC,kBAAkB,CAAS,YAAY,EAAE,QAAQ,CAAC;QACnD,CAAC,kBAAkB,CAAS,YAAY,EAAE,gBAAgB,CAAC,EAC3D,CAAC;QACD,MAAM,CAAC,GAAG,CACR,OAAO,EACP,SAAS,CACP,SAAS,CACP;YACE,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;YACT,eAAe,EAAE,SAAS;YAC1B,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;gBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,2CAA2C;iBACrD,CAAC,CAAC;YACL,CAAC;SACF,EACD,YAAY,EAAE,cAAc,EAAE,uBAAuB,IAAI,EAAE,CAC5D,CACF,CACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CACT,aAAa,EACb,4CAA4C,CAC1C,wBAAwB,CAAC,OAAO,CAAC,CAClC,EACD,8BAA8B,CAC5B,kBAAiD,EACjD,OAAO,CACR,EACD,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,EAC/C,cAAc,CAAC,KAAK,EACpB,GAAG,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,EAC9C,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CACpE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,MAAM,CACX,cAAc,EACd,WAAW,CAAC,YAAY,EACxB,GAAG,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,EAChD,cAAc,CAAC,MAAM,EACrB,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,EAC/C,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CACT,cAAc,EACd,4CAA4C,CAC1C,wBAAwB,CAAC,QAAQ,CAAC,CACnC,EACD,8BAA8B,CAC5B,kBAAiD,EACjD,QAAQ,CACT,EACD,GAAG,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,EAChD,cAAc,CAAC,MAAM,EACrB,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,EAC/C,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,WAAW,CAAC,YAAY,EACxB,4CAA4C,CAC1C,wBAAwB,CAAC,gBAAgB,CAAC,CAC3C,EACD,8BAA8B,CAC5B,kBAAiD,EACjD,gBAAgB,CACjB,EACD,GAAG,iBAAiB,CAAC,YAAY,EAAE,oBAAoB,CAAC,EACxD,cAAc,CAAC,cAAc,EAC7B,GAAG,iBAAiB,CAAC,YAAY,EAAE,mBAAmB,CAAC,EACvD,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,qBAAqB,EAAE;YACxD,IAAI,EAAE,OAAO;SACd,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,oBAAoB,CAAC;QACjE,MAAM,CAAC,GAAG,CACR,eAAe,EACf,WAAW,CAAC,YAAY,EACxB,WAAW,CAAC,mBAAmB,CAAC,MAAM,EAAE,aAAa,CAAC,EACtD,GAAG,iBAAiB,CAAC,YAAY,EAAE,wBAAwB,CAAC,EAC5D,cAAc,CAAC,kBAAkB,EACjC,GAAG,iBAAiB,CAAC,YAAY,EAAE,uBAAuB,CAAC,EAC3D,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,yBAAyB,EAAE;YAC5D,IAAI,EAAE,OAAO;SACd,CAAC,CACH,CAAC;IAEJ,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,mBAAmB,CAAC;QAChE,MAAM,CAAC,GAAG,CACR,eAAe,EACf,WAAW,CAAC,YAAY,EACxB,WAAW,CAAC,mBAAmB,CAAC,MAAM,EAAE,aAAa,CAAC,EACtD,GAAG,iBAAiB,CAAC,YAAY,EAAE,uBAAuB,CAAC,EAC3D,cAAc,CAAC,kBAAkB,EACjC,GAAG,iBAAiB,CAAC,YAAY,EAAE,sBAAsB,CAAC,EAC1D,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,wBAAwB,EAAE;YAC3D,IAAI,EAAE,OAAO;SACd,CAAC,CACH,CAAC;IAEJ,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { Router } from \"express\";\nimport { authControllerFactory } from \"./auth.controller\";\nimport authService from \"./auth.service\";\nimport rateLimit from \"express-rate-limit\";\nimport { getModuleComponents } from \"../../utils/dynamic-loader\";\nimport {\n  addPrismaQueryOptionsToRequest,\n  handleRequestBodyValidationAndTransformation,\n  sendResponse,\n} from \"../base/base.middlewares\";\nimport { ArkosConfig } from \"../../types/arkos-config\";\nimport deepmerge from \"../../utils/helpers/deepmerge.helper\";\nimport { AuthPrismaQueryOptions } from \"../../types\";\nimport { processMiddleware } from \"../../utils/helpers/routers.helpers\";\nimport { isEndpointDisabled } from \"../base/utils/helpers/base.router.helpers\";\n\nconst router: Router = Router();\n\nexport async function getAuthRouter(arkosConfigs: ArkosConfig) {\n  const {\n    interceptors,\n    dtos,\n    schemas,\n    prismaQueryOptions,\n    router: customRouterModule,\n  } = getModuleComponents(\"auth\") || {};\n\n  const routerConfig = customRouterModule?.config || {};\n  const authController = await authControllerFactory(interceptors);\n\n  if (routerConfig?.disable === true) return router;\n\n  const getValidationSchemaOrDto = (key: string) => {\n    const validationConfigs = arkosConfigs?.validation;\n    if (validationConfigs?.resolver === \"class-validator\") {\n      return dtos?.[key];\n    } else if (validationConfigs?.resolver === \"zod\") {\n      return schemas?.[key];\n    }\n    return undefined;\n  };\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"getMe\")) {\n    router.get(\n      \"/users/me\",\n      authService.authenticate,\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"getMe\"\n      ),\n      ...processMiddleware(interceptors?.beforeGetMe),\n      authController.getMe,\n      ...processMiddleware(interceptors?.afterGetMe),\n      sendResponse,\n      ...processMiddleware(interceptors?.onGetMeError, { type: \"error\" })\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"updateMe\")) {\n    router.patch(\n      \"/users/me\",\n      authService.authenticate,\n      handleRequestBodyValidationAndTransformation(\n        getValidationSchemaOrDto(\"updateMe\")\n      ),\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"updateMe\"\n      ),\n      ...processMiddleware(interceptors?.beforeUpdateMe),\n      authController.updateMe,\n      ...processMiddleware(interceptors?.afterUpdateMe),\n      sendResponse,\n      ...processMiddleware(interceptors?.onUpdateMeError, { type: \"error\" })\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"deleteMe\")) {\n    router.delete(\n      \"/users/me\",\n      authService.authenticate,\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"deleteMe\"\n      ),\n      ...processMiddleware(interceptors?.beforeDeleteMe),\n      authController.deleteMe,\n      ...processMiddleware(interceptors?.afterDeleteMe),\n      sendResponse,\n      ...processMiddleware(interceptors?.onDeleteMeError, { type: \"error\" })\n    );\n  }\n\n  if (\n    !isEndpointDisabled<\"auth\">(routerConfig, \"login\") ||\n    !isEndpointDisabled<\"auth\">(routerConfig, \"logout\") ||\n    !isEndpointDisabled<\"auth\">(routerConfig, \"signup\") ||\n    !isEndpointDisabled<\"auth\">(routerConfig, \"updatePassword\")\n  ) {\n    router.use(\n      \"/auth\",\n      rateLimit(\n        deepmerge(\n          {\n            windowMs: 5000,\n            limit: 10,\n            standardHeaders: \"draft-7\",\n            legacyHeaders: false,\n            handler: (_, res) => {\n              res.status(429).json({\n                message: \"Too many requests, please try again later\",\n              });\n            },\n          },\n          arkosConfigs?.authentication?.requestRateLimitOptions || {}\n        )\n      )\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"login\")) {\n    router.post(\n      \"/auth/login\",\n      handleRequestBodyValidationAndTransformation(\n        getValidationSchemaOrDto(\"login\")\n      ),\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"login\"\n      ),\n      ...processMiddleware(interceptors?.beforeLogin),\n      authController.login,\n      ...processMiddleware(interceptors?.afterLogin),\n      sendResponse,\n      ...processMiddleware(interceptors?.onLoginError, { type: \"error\" })\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"logout\")) {\n    router.delete(\n      \"/auth/logout\",\n      authService.authenticate,\n      ...processMiddleware(interceptors?.beforeLogout),\n      authController.logout,\n      ...processMiddleware(interceptors?.afterLogout),\n      sendResponse,\n      ...processMiddleware(interceptors?.onLogoutError, { type: \"error\" })\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"signup\")) {\n    router.post(\n      \"/auth/signup\",\n      handleRequestBodyValidationAndTransformation(\n        getValidationSchemaOrDto(\"signup\")\n      ),\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"signup\"\n      ),\n      ...processMiddleware(interceptors?.beforeSignup),\n      authController.signup,\n      ...processMiddleware(interceptors?.afterSignup),\n      sendResponse,\n      ...processMiddleware(interceptors?.onSignupError, { type: \"error\" })\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"updatePassword\")) {\n    router.post(\n      \"/auth/update-password\",\n      authService.authenticate,\n      handleRequestBodyValidationAndTransformation(\n        getValidationSchemaOrDto(\"updatePassword\")\n      ),\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"updatePassword\"\n      ),\n      ...processMiddleware(interceptors?.beforeUpdatePassword),\n      authController.updatePassword,\n      ...processMiddleware(interceptors?.afterUpdatePassword),\n      sendResponse,\n      ...processMiddleware(interceptors?.onUpdatePasswordError, {\n        type: \"error\",\n      })\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"findManyAuthAction\"))\n    router.get(\n      \"/auth-actions\",\n      authService.authenticate,\n      authService.handleAccessControl(\"View\", \"auth-action\"),\n      ...processMiddleware(interceptors?.beforeFindManyAuthAction),\n      authController.findManyAuthAction,\n      ...processMiddleware(interceptors?.afterFindManyAuthAction),\n      sendResponse,\n      ...processMiddleware(interceptors?.onFindManyAuthActionError, {\n        type: \"error\",\n      })\n    );\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"findOneAuthAction\"))\n    router.get(\n      \"/auth-actions\",\n      authService.authenticate,\n      authService.handleAccessControl(\"View\", \"auth-action\"),\n      ...processMiddleware(interceptors?.beforeFindOneAuthAction),\n      authController.findManyAuthAction,\n      ...processMiddleware(interceptors?.afterFindOneAuthAction),\n      sendResponse,\n      ...processMiddleware(interceptors?.onFindOneAuthActionError, {\n        type: \"error\",\n      })\n    );\n\n  return router;\n}\n"]}
+{"version":3,"file":"auth.router.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,WAAW,MAAM,gBAAgB,CAAC;AACzC,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EACL,8BAA8B,EAC9B,4CAA4C,EAC5C,YAAY,GACb,MAAM,0BAA0B,CAAC;AAElC,OAAO,SAAS,MAAM,sCAAsC,CAAC;AAE7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAE/E,MAAM,MAAM,GAAW,MAAM,EAAE,CAAC;AAEhC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,YAAyB;IAC3D,MAAM,EACJ,YAAY,EACZ,IAAI,EACJ,OAAO,EACP,kBAAkB,EAClB,MAAM,EAAE,kBAAkB,GAC3B,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAEtC,MAAM,YAAY,GAAG,kBAAkB,EAAE,MAAM,IAAI,EAAE,CAAC;IACtD,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAEjE,IAAI,YAAY,EAAE,OAAO,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAElD,MAAM,wBAAwB,GAAG,CAAC,GAAW,EAAE,EAAE;QAC/C,MAAM,iBAAiB,GAAG,YAAY,EAAE,UAAU,CAAC;QACnD,IAAI,iBAAiB,EAAE,QAAQ,KAAK,iBAAiB,EAAE,CAAC;YACtD,OAAO,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,iBAAiB,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;YACjD,OAAO,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,GAAG,CACR,WAAW,EACX,WAAW,CAAC,YAAY,EACxB,8BAA8B,CAC5B,kBAAiD,EACjD,OAAO,CACR,EACD,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,EAC/C,cAAc,CAAC,KAAK,EACpB,GAAG,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,EAC9C,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CACpE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,KAAK,CACV,WAAW,EACX,WAAW,CAAC,YAAY,EACxB,4CAA4C,CAC1C,wBAAwB,CAAC,UAAU,CAAC,CACrC,EACD,8BAA8B,CAC5B,kBAAiD,EACjD,UAAU,CACX,EACD,GAAG,iBAAiB,CAAC,YAAY,EAAE,cAAc,CAAC,EAClD,cAAc,CAAC,QAAQ,EACvB,GAAG,iBAAiB,CAAC,YAAY,EAAE,aAAa,CAAC,EACjD,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CACvE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,MAAM,CACX,WAAW,EACX,WAAW,CAAC,YAAY,EACxB,8BAA8B,CAC5B,kBAAiD,EACjD,UAAU,CACX,EACD,GAAG,iBAAiB,CAAC,YAAY,EAAE,cAAc,CAAC,EAClD,cAAc,CAAC,QAAQ,EACvB,GAAG,iBAAiB,CAAC,YAAY,EAAE,aAAa,CAAC,EACjD,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CACvE,CAAC;IACJ,CAAC;IAED,IACE,CAAC,kBAAkB,CAAS,YAAY,EAAE,OAAO,CAAC;QAClD,CAAC,kBAAkB,CAAS,YAAY,EAAE,QAAQ,CAAC;QACnD,CAAC,kBAAkB,CAAS,YAAY,EAAE,QAAQ,CAAC;QACnD,CAAC,kBAAkB,CAAS,YAAY,EAAE,gBAAgB,CAAC,EAC3D,CAAC;QACD,MAAM,CAAC,GAAG,CACR,OAAO,EACP,SAAS,CACP,SAAS,CACP;YACE,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;YACT,eAAe,EAAE,SAAS;YAC1B,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;gBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,2CAA2C;iBACrD,CAAC,CAAC;YACL,CAAC;SACF,EACD,YAAY,EAAE,cAAc,EAAE,uBAAuB,IAAI,EAAE,CAC5D,CACF,CACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CACT,aAAa,EACb,4CAA4C,CAC1C,wBAAwB,CAAC,OAAO,CAAC,CAClC,EACD,8BAA8B,CAC5B,kBAAiD,EACjD,OAAO,CACR,EACD,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,EAC/C,cAAc,CAAC,KAAK,EACpB,GAAG,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,EAC9C,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CACpE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,MAAM,CACX,cAAc,EACd,WAAW,CAAC,YAAY,EACxB,GAAG,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,EAChD,cAAc,CAAC,MAAM,EACrB,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,EAC/C,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CACT,cAAc,EACd,4CAA4C,CAC1C,wBAAwB,CAAC,QAAQ,CAAC,CACnC,EACD,8BAA8B,CAC5B,kBAAiD,EACjD,QAAQ,CACT,EACD,GAAG,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,EAChD,cAAc,CAAC,MAAM,EACrB,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,EAC/C,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,WAAW,CAAC,YAAY,EACxB,4CAA4C,CAC1C,wBAAwB,CAAC,gBAAgB,CAAC,CAC3C,EACD,8BAA8B,CAC5B,kBAAiD,EACjD,gBAAgB,CACjB,EACD,GAAG,iBAAiB,CAAC,YAAY,EAAE,oBAAoB,CAAC,EACxD,cAAc,CAAC,cAAc,EAC7B,GAAG,iBAAiB,CAAC,YAAY,EAAE,mBAAmB,CAAC,EACvD,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,qBAAqB,EAAE;YACxD,IAAI,EAAE,OAAO;SACd,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,oBAAoB,CAAC;QACjE,MAAM,CAAC,GAAG,CACR,eAAe,EACf,WAAW,CAAC,YAAY,EACxB,WAAW,CAAC,mBAAmB,CAAC,MAAM,EAAE,aAAa,CAAC,EACtD,GAAG,iBAAiB,CAAC,YAAY,EAAE,wBAAwB,CAAC,EAC5D,cAAc,CAAC,kBAAkB,EACjC,GAAG,iBAAiB,CAAC,YAAY,EAAE,uBAAuB,CAAC,EAC3D,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,yBAAyB,EAAE;YAC5D,IAAI,EAAE,OAAO;SACd,CAAC,CACH,CAAC;IAEJ,IAAI,CAAC,kBAAkB,CAAS,YAAY,EAAE,mBAAmB,CAAC;QAChE,MAAM,CAAC,GAAG,CACR,6BAA6B,EAC7B,WAAW,CAAC,YAAY,EACxB,WAAW,CAAC,mBAAmB,CAAC,MAAM,EAAE,aAAa,CAAC,EACtD,GAAG,iBAAiB,CAAC,YAAY,EAAE,uBAAuB,CAAC,EAC3D,cAAc,CAAC,iBAAiB,EAChC,GAAG,iBAAiB,CAAC,YAAY,EAAE,sBAAsB,CAAC,EAC1D,YAAY,EACZ,GAAG,iBAAiB,CAAC,YAAY,EAAE,wBAAwB,EAAE;YAC3D,IAAI,EAAE,OAAO;SACd,CAAC,CACH,CAAC;IAEJ,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { Router } from \"express\";\nimport { authControllerFactory } from \"./auth.controller\";\nimport authService from \"./auth.service\";\nimport rateLimit from \"express-rate-limit\";\nimport { getModuleComponents } from \"../../utils/dynamic-loader\";\nimport {\n  addPrismaQueryOptionsToRequest,\n  handleRequestBodyValidationAndTransformation,\n  sendResponse,\n} from \"../base/base.middlewares\";\nimport { ArkosConfig } from \"../../types/arkos-config\";\nimport deepmerge from \"../../utils/helpers/deepmerge.helper\";\nimport { AuthPrismaQueryOptions } from \"../../types\";\nimport { processMiddleware } from \"../../utils/helpers/routers.helpers\";\nimport { isEndpointDisabled } from \"../base/utils/helpers/base.router.helpers\";\n\nconst router: Router = Router();\n\nexport async function getAuthRouter(arkosConfigs: ArkosConfig) {\n  const {\n    interceptors,\n    dtos,\n    schemas,\n    prismaQueryOptions,\n    router: customRouterModule,\n  } = getModuleComponents(\"auth\") || {};\n\n  const routerConfig = customRouterModule?.config || {};\n  const authController = await authControllerFactory(interceptors);\n\n  if (routerConfig?.disable === true) return router;\n\n  const getValidationSchemaOrDto = (key: string) => {\n    const validationConfigs = arkosConfigs?.validation;\n    if (validationConfigs?.resolver === \"class-validator\") {\n      return dtos?.[key];\n    } else if (validationConfigs?.resolver === \"zod\") {\n      return schemas?.[key];\n    }\n    return undefined;\n  };\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"getMe\")) {\n    router.get(\n      \"/users/me\",\n      authService.authenticate,\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"getMe\"\n      ),\n      ...processMiddleware(interceptors?.beforeGetMe),\n      authController.getMe,\n      ...processMiddleware(interceptors?.afterGetMe),\n      sendResponse,\n      ...processMiddleware(interceptors?.onGetMeError, { type: \"error\" })\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"updateMe\")) {\n    router.patch(\n      \"/users/me\",\n      authService.authenticate,\n      handleRequestBodyValidationAndTransformation(\n        getValidationSchemaOrDto(\"updateMe\")\n      ),\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"updateMe\"\n      ),\n      ...processMiddleware(interceptors?.beforeUpdateMe),\n      authController.updateMe,\n      ...processMiddleware(interceptors?.afterUpdateMe),\n      sendResponse,\n      ...processMiddleware(interceptors?.onUpdateMeError, { type: \"error\" })\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"deleteMe\")) {\n    router.delete(\n      \"/users/me\",\n      authService.authenticate,\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"deleteMe\"\n      ),\n      ...processMiddleware(interceptors?.beforeDeleteMe),\n      authController.deleteMe,\n      ...processMiddleware(interceptors?.afterDeleteMe),\n      sendResponse,\n      ...processMiddleware(interceptors?.onDeleteMeError, { type: \"error\" })\n    );\n  }\n\n  if (\n    !isEndpointDisabled<\"auth\">(routerConfig, \"login\") ||\n    !isEndpointDisabled<\"auth\">(routerConfig, \"logout\") ||\n    !isEndpointDisabled<\"auth\">(routerConfig, \"signup\") ||\n    !isEndpointDisabled<\"auth\">(routerConfig, \"updatePassword\")\n  ) {\n    router.use(\n      \"/auth\",\n      rateLimit(\n        deepmerge(\n          {\n            windowMs: 5000,\n            limit: 10,\n            standardHeaders: \"draft-7\",\n            legacyHeaders: false,\n            handler: (_, res) => {\n              res.status(429).json({\n                message: \"Too many requests, please try again later\",\n              });\n            },\n          },\n          arkosConfigs?.authentication?.requestRateLimitOptions || {}\n        )\n      )\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"login\")) {\n    router.post(\n      \"/auth/login\",\n      handleRequestBodyValidationAndTransformation(\n        getValidationSchemaOrDto(\"login\")\n      ),\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"login\"\n      ),\n      ...processMiddleware(interceptors?.beforeLogin),\n      authController.login,\n      ...processMiddleware(interceptors?.afterLogin),\n      sendResponse,\n      ...processMiddleware(interceptors?.onLoginError, { type: \"error\" })\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"logout\")) {\n    router.delete(\n      \"/auth/logout\",\n      authService.authenticate,\n      ...processMiddleware(interceptors?.beforeLogout),\n      authController.logout,\n      ...processMiddleware(interceptors?.afterLogout),\n      sendResponse,\n      ...processMiddleware(interceptors?.onLogoutError, { type: \"error\" })\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"signup\")) {\n    router.post(\n      \"/auth/signup\",\n      handleRequestBodyValidationAndTransformation(\n        getValidationSchemaOrDto(\"signup\")\n      ),\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"signup\"\n      ),\n      ...processMiddleware(interceptors?.beforeSignup),\n      authController.signup,\n      ...processMiddleware(interceptors?.afterSignup),\n      sendResponse,\n      ...processMiddleware(interceptors?.onSignupError, { type: \"error\" })\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"updatePassword\")) {\n    router.post(\n      \"/auth/update-password\",\n      authService.authenticate,\n      handleRequestBodyValidationAndTransformation(\n        getValidationSchemaOrDto(\"updatePassword\")\n      ),\n      addPrismaQueryOptionsToRequest<any>(\n        prismaQueryOptions as AuthPrismaQueryOptions<any>,\n        \"updatePassword\"\n      ),\n      ...processMiddleware(interceptors?.beforeUpdatePassword),\n      authController.updatePassword,\n      ...processMiddleware(interceptors?.afterUpdatePassword),\n      sendResponse,\n      ...processMiddleware(interceptors?.onUpdatePasswordError, {\n        type: \"error\",\n      })\n    );\n  }\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"findManyAuthAction\"))\n    router.get(\n      \"/auth-actions\",\n      authService.authenticate,\n      authService.handleAccessControl(\"View\", \"auth-action\"),\n      ...processMiddleware(interceptors?.beforeFindManyAuthAction),\n      authController.findManyAuthAction,\n      ...processMiddleware(interceptors?.afterFindManyAuthAction),\n      sendResponse,\n      ...processMiddleware(interceptors?.onFindManyAuthActionError, {\n        type: \"error\",\n      })\n    );\n\n  if (!isEndpointDisabled<\"auth\">(routerConfig, \"findOneAuthAction\"))\n    router.get(\n      \"/auth-actions/:resourceName\",\n      authService.authenticate,\n      authService.handleAccessControl(\"View\", \"auth-action\"),\n      ...processMiddleware(interceptors?.beforeFindOneAuthAction),\n      authController.findOneAuthAction,\n      ...processMiddleware(interceptors?.afterFindOneAuthAction),\n      sendResponse,\n      ...processMiddleware(interceptors?.onFindOneAuthActionError, {\n        type: \"error\",\n      })\n    );\n\n  return router;\n}\n"]}