arkos 1.3.2-canary.3 → 1.3.3-beta

package/dist/esm/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,YAAY,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EACL,qBAAqB,EACrB,oCAAoC,GACrC,MAAM,4BAA4B,CAAC;AACpC,OAAO,YAAY,MAAM,kDAAkD,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,WAAW,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAE/E,OAAO,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AACnE,OAAO,SAAS,MAAM,kCAAkC,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,MAAM,CAAC,MAAM,GAAG,GAAoB,OAAO,EAAE,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,WAAwB;IAExB,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,gBAAgB,EAAE;QAClB,uBAAuB,CAAC,WAAW,CAAC;QACpC,WAAW,EAAE,YAAY,IAAI,CAAC,MAAM,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;KACpE,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,WAAW,EAAE,WAAW,CAAC;IACnD,MAAM,mBAAmB,GAAG,iBAAiB,EAAE,OAAO,IAAI,EAAE,CAAC;IAC7D,MAAM,mBAAmB,GAAG,iBAAiB,EAAE,OAAO,IAAI,EAAE,CAAC;IAG7D,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC;QACjD,GAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,WAAW;YAC7B,WAAW,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAC/C,CAAC;IAGJ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,mBAAmB,CAAC;QACvD,GAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,eAAe;YACjC,SAAS,CACP,SAAS,CACP;gBACE,QAAQ,EAAE,EAAE,GAAG,IAAI;gBACnB,KAAK,EAAE,GAAG;gBACV,eAAe,EAAE,SAAS;gBAC1B,aAAa,EAAE,KAAK;gBACpB,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;oBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,OAAO,EAAE,2CAA2C;qBACrD,CAAC,CAAC;gBACL,CAAC;aACF,EACD,WAAW,EAAE,6BAA6B,IAAI,EAAE,CACjD,CACF,CACJ,CAAC;IAGJ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC;QAC1C,GAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,IAAI;YACtB,IAAI,CACF,WAAW,EAAE,IAAI,EAAE,aAAa;gBAC9B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa;gBAChC,CAAC,CAAC,SAAS,CACP;oBACE,MAAM,EAAE,CACN,MAAc,EACd,EAAgD,EAChD,EAAE;wBACF,MAAM,OAAO,GAAG,WAAW,EAAE,IAAI,EAAE,cAAc,CAAC;wBAElD,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;4BACpB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;wBACjB,CAAC;6BAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;4BAClC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;wBACnD,CAAC;6BAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;4BACvC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC;wBAC1C,CAAC;6BAAM,CAAC;4BACN,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBAClB,CAAC;oBACH,CAAC;oBACD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;oBAC7D,cAAc,EAAE;wBACd,cAAc;wBACd,eAAe;wBACf,YAAY;qBACb;oBACD,WAAW,EAAE,IAAI;iBAClB,EACD,WAAW,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,CACjC,CACN,CACJ,CAAC;IAGJ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,cAAc,CAAC;QAClD,GAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,WAAW;YAC7B,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CACnD,CAAC;IAGJ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,eAAe,CAAC;QACnD,GAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,YAAY;YAC9B,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAC,CACpE,CAAC;IAGJ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,cAAc,CAAC;QAClD,GAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,WAAW;YAC7B,WAAW,CACT,SAAS,CACP;gBACE,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,IAAI;gBACpB,YAAY,EAAE,IAAI;aACnB,EACD,WAAW,EAAE,kBAAkB,IAAI,EAAE,CACtC,CACF,CACJ,CAAC;IAGJ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,gBAAgB,CAAC;QACpD,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,IAAI,iBAAiB,CAAC,CAAC;IAGlE,IAAI,WAAW,EAAE,WAAW,EAAE,UAAU;QACtC,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;YACxD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IAGL,MAAM,aAAa,GAAG,WAAW,EAAE,OAAO,CAAC;IAC3C,MAAM,eAAe,GAAG,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC;IACrD,MAAM,eAAe,GAAG,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC;IAGrD,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC;QAClD,GAAG,CAAC,GAAG,CACL,MAAM,EACN,eAAe,CAAC,eAAe;YAC7B,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;gBACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC;YAChE,CAAC,CAAC,CACL,CAAC;IAGJ,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QAChD,MAAM,gBAAgB,GAAG,eAAe,CAAC,UAAU;YACjD,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC;YAC/C,CAAC,CAAC,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC5B,CAAC;IAGD,IACE,CAAC,eAAe,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC;QAC3C,WAAW,CAAC,cAAc,EAC1B,CAAC;QACD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU;YAC3C,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC;YAC/C,CAAC,CAAC,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;QACrC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9B,CAAC;IAGD,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACzD,MAAM,YAAY,GAAG,eAAe,CAAC,kBAAkB;YACrD,CAAC,CAAC,MAAM,eAAe,CAAC,kBAAkB,CAAC,WAAW,CAAC;YACvD,CAAC,CAAC,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAC7C,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAChC,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,oCAAoC,EAAE,CAAC,CAAC;IAExD,IACE,WAAW,CAAC,OAAO;QACnB,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM;YACjC,WAAW,CAAC,OAAO,CAAC,gBAAgB,KAAK,IAAI,CAAC;QAEhD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC;IAGvD,IAAI,aAAa,EAAE,UAAU;QAC3B,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YAC1C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IAGL,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,sBAAsB,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,kBAAkB,IAAI,YAAY,CAAC,CAAC;IAElE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import express from \"express\";\nimport cors from \"cors\";\nimport cookieParser from \"cookie-parser\";\nimport { getAuthRouter } from \"./modules/auth/auth.router\";\nimport {\n  getPrismaModelsRouter,\n  getAvailableResourcesAndRoutesRouter,\n} from \"./modules/base/base.router\";\nimport errorHandler from \"./modules/error-handler/error-handler.controller\";\nimport { rateLimit } from \"express-rate-limit\";\nimport compression from \"compression\";\nimport { handleRequestLogs } from \"./modules/base/base.middlewares\";\nimport { loadPrismaModule } from \"./utils/helpers/prisma.helpers\";\nimport { getFileUploadRouter } from \"./modules/file-upload/file-upload.router\";\nimport { ArkosConfig } from \"./types/arkos-config\";\nimport { queryParser } from \"./utils/helpers/query-parser.helpers\";\nimport deepmerge from \"./utils/helpers/deepmerge.helper\";\nimport { getSwaggerRouter } from \"./modules/swagger/swagger.router\";\nimport { loadAllModuleComponents } from \"./utils/dynamic-loader\";\n\nexport const app: express.Express = express();\n\nexport async function bootstrap(\n  arkosConfig: ArkosConfig\n): Promise<express.Express> {\n  await Promise.all([\n    loadPrismaModule(),\n    loadAllModuleComponents(arkosConfig),\n    arkosConfig?.configureApp && (await arkosConfig?.configureApp(app)),\n  ]);\n\n  const middlewaresConfig = arkosConfig?.middlewares;\n  const disabledMiddlewares = middlewaresConfig?.disable || [];\n  const replacedMiddlewares = middlewaresConfig?.replace || {};\n\n  // Compression middleware\n  if (!disabledMiddlewares?.includes?.(\"compression\"))\n    app.use(\n      replacedMiddlewares.compression ||\n        compression(arkosConfig?.compressionOptions)\n    );\n\n  // Global rate limit middleware\n  if (!disabledMiddlewares?.includes?.(\"global-rate-limit\"))\n    app.use(\n      replacedMiddlewares.globalRateLimit ||\n        rateLimit(\n          deepmerge(\n            {\n              windowMs: 60 * 1000,\n              limit: 500,\n              standardHeaders: \"draft-7\",\n              legacyHeaders: false,\n              handler: (_, res) => {\n                res.status(429).json({\n                  message: \"Too many requests, please try again later\",\n                });\n              },\n            },\n            arkosConfig?.globalRequestRateLimitOptions || {}\n          )\n        )\n    );\n\n  // CORS middleware\n  if (!disabledMiddlewares?.includes?.(\"cors\"))\n    app.use(\n      replacedMiddlewares.cors ||\n        cors(\n          arkosConfig?.cors?.customHandler\n            ? arkosConfig.cors.customHandler\n            : deepmerge(\n                {\n                  origin: (\n                    origin: string,\n                    cb: (err: Error | null, allow?: boolean) => void\n                  ) => {\n                    const allowed = arkosConfig?.cors?.allowedOrigins;\n\n                    if (allowed === \"*\") {\n                      cb(null, true);\n                    } else if (Array.isArray(allowed)) {\n                      cb(null, !origin || allowed?.includes?.(origin));\n                    } else if (typeof allowed === \"string\") {\n                      cb(null, !origin || allowed === origin);\n                    } else {\n                      cb(null, false);\n                    }\n                  },\n                  methods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"PATCH\", \"OPTIONS\"],\n                  allowedHeaders: [\n                    \"Content-Type\",\n                    \"Authorization\",\n                    \"Connection\",\n                  ],\n                  credentials: true,\n                },\n                arkosConfig?.cors?.options || {}\n              )\n        )\n    );\n\n  // JSON body parser middleware\n  if (!disabledMiddlewares?.includes?.(\"express-json\"))\n    app.use(\n      replacedMiddlewares.expressJson ||\n        express.json(arkosConfig?.jsonBodyParserOptions)\n    );\n\n  // Cookie parser middleware\n  if (!disabledMiddlewares?.includes?.(\"cookie-parser\"))\n    app.use(\n      replacedMiddlewares.cookieParser ||\n        cookieParser(...[...(arkosConfig?.cookieParserParameters || [])])\n    );\n\n  // Query parser middleware\n  if (!disabledMiddlewares?.includes?.(\"query-parser\"))\n    app.use(\n      replacedMiddlewares.queryParser ||\n        queryParser(\n          deepmerge(\n            {\n              parseNull: true,\n              parseUndefined: true,\n              parseBoolean: true,\n            },\n            arkosConfig?.queryParserOptions || {}\n          )\n        )\n    );\n\n  // Request logger middleware\n  if (!disabledMiddlewares?.includes?.(\"request-logger\"))\n    app.use(replacedMiddlewares.requestLogger || handleRequestLogs);\n\n  // Additional custom middlewares\n  if (arkosConfig?.middlewares?.additional)\n    arkosConfig.middlewares.additional.forEach((middleware) => {\n      app.use(middleware);\n    });\n\n  // Configure routers\n  const routersConfig = arkosConfig?.routers;\n  const disabledRouters = routersConfig?.disable || [];\n  const replacedRouters = routersConfig?.replace || {};\n\n  // Welcome endpoint\n  if (!disabledRouters?.includes?.(\"welcome-endpoint\"))\n    app.get(\n      \"/api\",\n      replacedRouters.welcomeEndpoint ||\n        ((_, res) => {\n          res.status(200).json({ message: arkosConfig.welcomeMessage });\n        })\n    );\n\n  // File upload router\n  if (!disabledRouters?.includes?.(\"file-upload\")) {\n    const fileUploadRouter = replacedRouters.fileUpload\n      ? await replacedRouters.fileUpload(arkosConfig)\n      : await getFileUploadRouter(arkosConfig);\n    app.use(fileUploadRouter);\n  }\n\n  // Auth router\n  if (\n    !disabledRouters?.includes?.(\"auth-router\") &&\n    arkosConfig.authentication\n  ) {\n    const authRouter = replacedRouters.authRouter\n      ? await replacedRouters.authRouter(arkosConfig)\n      : await getAuthRouter(arkosConfig);\n    app.use(\"/api\", authRouter);\n  }\n\n  // Prisma models router\n  if (!disabledRouters?.includes?.(\"prisma-models-router\")) {\n    const modelsRouter = replacedRouters.prismaModelsRouter\n      ? await replacedRouters.prismaModelsRouter(arkosConfig)\n      : await getPrismaModelsRouter(arkosConfig);\n    app.use(\"/api\", modelsRouter);\n  }\n\n  app.use(\"/api\", getAvailableResourcesAndRoutesRouter());\n\n  if (\n    arkosConfig.swagger &&\n    (process.env.ARKOS_BUILD !== \"true\" ||\n      arkosConfig.swagger.enableAfterBuild === true)\n  )\n    app.use(\"/api\", await getSwaggerRouter(arkosConfig));\n\n  // Additional custom routers\n  if (routersConfig?.additional)\n    routersConfig.additional.forEach((router) => {\n      app.use(router);\n    });\n\n  // Global error handler middleware (must be last)\n  if (!disabledMiddlewares?.includes?.(\"global-error-handler\"))\n    app.use(replacedMiddlewares.globalErrorHandler || errorHandler);\n\n  app.use(\"*\", (_, res) => {\n    res.status(404).json({ message: \"Route not found!\" });\n  });\n\n  return app;\n}\n"]}
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,YAAY,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EACL,qBAAqB,EACrB,oCAAoC,GACrC,MAAM,4BAA4B,CAAC;AACpC,OAAO,YAAY,MAAM,kDAAkD,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,WAAW,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAE/E,OAAO,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AACnE,OAAO,SAAS,MAAM,kCAAkC,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,MAAM,CAAC,MAAM,GAAG,GAAoB,OAAO,EAAE,CAAC;AAC9C,MAAM,iBAAiB,GAAG,MAAM,EAAE,CAAC;AAEnC,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,WAAwB;IAExB,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,gBAAgB,EAAE;QAClB,uBAAuB,CAAC,WAAW,CAAC;QACpC,WAAW,EAAE,YAAY,IAAI,CAAC,MAAM,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;KACpE,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,WAAW,EAAE,WAAW,CAAC;IACnD,MAAM,mBAAmB,GAAG,iBAAiB,EAAE,OAAO,IAAI,EAAE,CAAC;IAC7D,MAAM,mBAAmB,GAAG,iBAAiB,EAAE,OAAO,IAAI,EAAE,CAAC;IAE7D,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC;QACjD,GAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,WAAW;YAC7B,WAAW,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAC/C,CAAC;IAEJ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,mBAAmB,CAAC;QACvD,GAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,eAAe;YACjC,SAAS,CACP,SAAS,CACP;gBACE,QAAQ,EAAE,EAAE,GAAG,IAAI;gBACnB,KAAK,EAAE,GAAG;gBACV,eAAe,EAAE,SAAS;gBAC1B,aAAa,EAAE,KAAK;gBACpB,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;oBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,OAAO,EAAE,2CAA2C;qBACrD,CAAC,CAAC;gBACL,CAAC;aACF,EACD,WAAW,EAAE,6BAA6B,IAAI,EAAE,CACjD,CACF,CACJ,CAAC;IAEJ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC;QAC1C,GAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,IAAI;YACtB,IAAI,CACF,WAAW,EAAE,IAAI,EAAE,aAAa;gBAC9B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa;gBAChC,CAAC,CAAC,SAAS,CACP;oBACE,MAAM,EAAE,CACN,MAAc,EACd,EAAgD,EAChD,EAAE;wBACF,MAAM,OAAO,GAAG,WAAW,EAAE,IAAI,EAAE,cAAc,CAAC;wBAElD,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;4BACpB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;wBACjB,CAAC;6BAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;4BAClC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;wBACnD,CAAC;6BAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;4BACvC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC;wBAC1C,CAAC;6BAAM,CAAC;4BACN,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBAClB,CAAC;oBACH,CAAC;oBACD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;oBAC7D,cAAc,EAAE;wBACd,cAAc;wBACd,eAAe;wBACf,YAAY;qBACb;oBACD,WAAW,EAAE,IAAI;iBAClB,EACD,WAAW,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,CACjC,CACN,CACJ,CAAC;IAEJ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,cAAc,CAAC;QAClD,GAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,WAAW;YAC7B,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CACnD,CAAC;IAEJ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,eAAe,CAAC;QACnD,GAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,YAAY;YAC9B,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAC,CACpE,CAAC;IAEJ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,cAAc,CAAC;QAClD,GAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,WAAW;YAC7B,WAAW,CACT,SAAS,CACP;gBACE,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,IAAI;gBACpB,YAAY,EAAE,IAAI;aACnB,EACD,WAAW,EAAE,kBAAkB,IAAI,EAAE,CACtC,CACF,CACJ,CAAC;IAEJ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,gBAAgB,CAAC;QACpD,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,IAAI,iBAAiB,CAAC,CAAC;IAElE,IAAI,WAAW,EAAE,WAAW,EAAE,UAAU;QACtC,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;YACxD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IAEL,MAAM,aAAa,GAAG,WAAW,EAAE,OAAO,CAAC;IAC3C,MAAM,eAAe,GAAG,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC;IACrD,MAAM,eAAe,GAAG,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC;IAErD,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC;QAClD,GAAG,CAAC,GAAG,CACL,MAAM,EACN,eAAe,CAAC,eAAe;YAC7B,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;gBACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC;YAChE,CAAC,CAAC,CACL,CAAC;IAEJ,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QAChD,MAAM,gBAAgB,GAAG,eAAe,CAAC,UAAU;YACjD,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC;YAC/C,CAAC,CAAC,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC3C,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC1C,CAAC;IAED,IACE,CAAC,eAAe,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC;QAC3C,WAAW,CAAC,cAAc,EAC1B,CAAC;QACD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU;YAC3C,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC;YAC/C,CAAC,CAAC,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;QACrC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACzD,MAAM,YAAY,GAAG,eAAe,CAAC,kBAAkB;YACrD,CAAC,CAAC,MAAM,eAAe,CAAC,kBAAkB,CAAC,WAAW,CAAC;YACvD,CAAC,CAAC,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAC7C,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC9C,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3B,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,oCAAoC,EAAE,CAAC,CAAC;IAExD,IACE,WAAW,CAAC,OAAO;QACnB,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM;YACjC,WAAW,CAAC,OAAO,CAAC,gBAAgB,KAAK,IAAI,CAAC;QAEhD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC;IAEvD,IAAI,aAAa,EAAE,UAAU;QAC3B,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YAC1C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IAEL,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,sBAAsB,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,kBAAkB,IAAI,YAAY,CAAC,CAAC;IAElE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import express, { Router } from \"express\";\nimport cors from \"cors\";\nimport cookieParser from \"cookie-parser\";\nimport { getAuthRouter } from \"./modules/auth/auth.router\";\nimport {\n  getPrismaModelsRouter,\n  getAvailableResourcesAndRoutesRouter,\n} from \"./modules/base/base.router\";\nimport errorHandler from \"./modules/error-handler/error-handler.controller\";\nimport { rateLimit } from \"express-rate-limit\";\nimport compression from \"compression\";\nimport { handleRequestLogs } from \"./modules/base/base.middlewares\";\nimport { loadPrismaModule } from \"./utils/helpers/prisma.helpers\";\nimport { getFileUploadRouter } from \"./modules/file-upload/file-upload.router\";\nimport { ArkosConfig } from \"./types/arkos-config\";\nimport { queryParser } from \"./utils/helpers/query-parser.helpers\";\nimport deepmerge from \"./utils/helpers/deepmerge.helper\";\nimport { getSwaggerRouter } from \"./modules/swagger/swagger.router\";\nimport { loadAllModuleComponents } from \"./utils/dynamic-loader\";\n\nexport const app: express.Express = express();\nconst knowModulesRouter = Router();\n\nexport async function bootstrap(\n  arkosConfig: ArkosConfig\n): Promise<express.Express> {\n  await Promise.all([\n    loadPrismaModule(),\n    loadAllModuleComponents(arkosConfig),\n    arkosConfig?.configureApp && (await arkosConfig?.configureApp(app)),\n  ]);\n\n  const middlewaresConfig = arkosConfig?.middlewares;\n  const disabledMiddlewares = middlewaresConfig?.disable || [];\n  const replacedMiddlewares = middlewaresConfig?.replace || {};\n\n  if (!disabledMiddlewares?.includes?.(\"compression\"))\n    app.use(\n      replacedMiddlewares.compression ||\n        compression(arkosConfig?.compressionOptions)\n    );\n\n  if (!disabledMiddlewares?.includes?.(\"global-rate-limit\"))\n    app.use(\n      replacedMiddlewares.globalRateLimit ||\n        rateLimit(\n          deepmerge(\n            {\n              windowMs: 60 * 1000,\n              limit: 500,\n              standardHeaders: \"draft-7\",\n              legacyHeaders: false,\n              handler: (_, res) => {\n                res.status(429).json({\n                  message: \"Too many requests, please try again later\",\n                });\n              },\n            },\n            arkosConfig?.globalRequestRateLimitOptions || {}\n          )\n        )\n    );\n\n  if (!disabledMiddlewares?.includes?.(\"cors\"))\n    app.use(\n      replacedMiddlewares.cors ||\n        cors(\n          arkosConfig?.cors?.customHandler\n            ? arkosConfig.cors.customHandler\n            : deepmerge(\n                {\n                  origin: (\n                    origin: string,\n                    cb: (err: Error | null, allow?: boolean) => void\n                  ) => {\n                    const allowed = arkosConfig?.cors?.allowedOrigins;\n\n                    if (allowed === \"*\") {\n                      cb(null, true);\n                    } else if (Array.isArray(allowed)) {\n                      cb(null, !origin || allowed?.includes?.(origin));\n                    } else if (typeof allowed === \"string\") {\n                      cb(null, !origin || allowed === origin);\n                    } else {\n                      cb(null, false);\n                    }\n                  },\n                  methods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"PATCH\", \"OPTIONS\"],\n                  allowedHeaders: [\n                    \"Content-Type\",\n                    \"Authorization\",\n                    \"Connection\",\n                  ],\n                  credentials: true,\n                },\n                arkosConfig?.cors?.options || {}\n              )\n        )\n    );\n\n  if (!disabledMiddlewares?.includes?.(\"express-json\"))\n    app.use(\n      replacedMiddlewares.expressJson ||\n        express.json(arkosConfig?.jsonBodyParserOptions)\n    );\n\n  if (!disabledMiddlewares?.includes?.(\"cookie-parser\"))\n    app.use(\n      replacedMiddlewares.cookieParser ||\n        cookieParser(...[...(arkosConfig?.cookieParserParameters || [])])\n    );\n\n  if (!disabledMiddlewares?.includes?.(\"query-parser\"))\n    app.use(\n      replacedMiddlewares.queryParser ||\n        queryParser(\n          deepmerge(\n            {\n              parseNull: true,\n              parseUndefined: true,\n              parseBoolean: true,\n            },\n            arkosConfig?.queryParserOptions || {}\n          )\n        )\n    );\n\n  if (!disabledMiddlewares?.includes?.(\"request-logger\"))\n    app.use(replacedMiddlewares.requestLogger || handleRequestLogs);\n\n  if (arkosConfig?.middlewares?.additional)\n    arkosConfig.middlewares.additional.forEach((middleware) => {\n      app.use(middleware);\n    });\n\n  const routersConfig = arkosConfig?.routers;\n  const disabledRouters = routersConfig?.disable || [];\n  const replacedRouters = routersConfig?.replace || {};\n\n  if (!disabledRouters?.includes?.(\"welcome-endpoint\"))\n    app.get(\n      \"/api\",\n      replacedRouters.welcomeEndpoint ||\n        ((_, res) => {\n          res.status(200).json({ message: arkosConfig.welcomeMessage });\n        })\n    );\n\n  if (!disabledRouters?.includes?.(\"file-upload\")) {\n    const fileUploadRouter = replacedRouters.fileUpload\n      ? await replacedRouters.fileUpload(arkosConfig)\n      : await getFileUploadRouter(arkosConfig);\n    knowModulesRouter.use(fileUploadRouter);\n  }\n\n  if (\n    !disabledRouters?.includes?.(\"auth-router\") &&\n    arkosConfig.authentication\n  ) {\n    const authRouter = replacedRouters.authRouter\n      ? await replacedRouters.authRouter(arkosConfig)\n      : await getAuthRouter(arkosConfig);\n    knowModulesRouter.use(\"/api\", authRouter);\n  }\n\n  if (!disabledRouters?.includes?.(\"prisma-models-router\")) {\n    const modelsRouter = replacedRouters.prismaModelsRouter\n      ? await replacedRouters.prismaModelsRouter(arkosConfig)\n      : await getPrismaModelsRouter(arkosConfig);\n    knowModulesRouter.use(\"/api\", modelsRouter);\n  }\n\n  app.use(knowModulesRouter);\n  app.use(\"/api\", getAvailableResourcesAndRoutesRouter());\n\n  if (\n    arkosConfig.swagger &&\n    (process.env.ARKOS_BUILD !== \"true\" ||\n      arkosConfig.swagger.enableAfterBuild === true)\n  )\n    app.use(\"/api\", await getSwaggerRouter(arkosConfig));\n\n  if (routersConfig?.additional)\n    routersConfig.additional.forEach((router) => {\n      app.use(router);\n    });\n\n  if (!disabledMiddlewares?.includes?.(\"global-error-handler\"))\n    app.use(replacedMiddlewares.globalErrorHandler || errorHandler);\n\n  app.use(\"*\", (_, res) => {\n    res.status(404).json({ message: \"Route not found!\" });\n  });\n\n  return app;\n}\n"]}

package/dist/esm/exports/auth/index.js

@@ -1 +1,2 @@
-"use strict";export{defaultExcludedUserFields}from"./../../modules/auth/auth.controller.js";
+export { defaultExcludedUserFields } from "./../../modules/auth/auth.controller.js";
+//# sourceMappingURL=index.js.map

package/dist/esm/exports/controllers/index.js

@@ -1 +1,4 @@
-"use strict";import{BaseController as o}from"./../../modules/base/base.controller.js";import r from"../../modules/file-upload/file-upload.controller.js";export{r as fileUploadController,o as BaseController};
+import { BaseController } from "./../../modules/base/base.controller.js";
+import fileUploadController from "../../modules/file-upload/file-upload.controller.js";
+export { fileUploadController, BaseController };
+//# sourceMappingURL=index.js.map

package/dist/esm/exports/error-handler/index.js

@@ -1 +1,4 @@
-"use strict";import r from"../../modules/error-handler/utils/catch-async.js";import o from"../../modules/error-handler/utils/app-error.js";export{r as catchAsync,o as AppError};
+import catchAsync from "../../modules/error-handler/utils/catch-async.js";
+import AppError from "../../modules/error-handler/utils/app-error.js";
+export { catchAsync, AppError };
+//# sourceMappingURL=index.js.map

package/dist/esm/exports/index.js

@@ -1 +1,8 @@
-"use strict";import{BaseController as o}from"./../modules/base/base.controller.js";import{initApp as r,getArkosConfig as t}from"../server.js";const i={init:r};export{o as BaseController,t as getArkosConfig};export default i;
+import { BaseController } from "./../modules/base/base.controller.js";
+import { initApp, getArkosConfig } from "../server.js";
+const arkos = {
+    init: initApp,
+};
+export { BaseController, getArkosConfig, };
+export default arkos;
+//# sourceMappingURL=index.js.map

package/dist/esm/exports/middlewares/index.js

@@ -1 +1,2 @@
-"use strict";export{addPrismaQueryOptionsToRequest,handleRequestBodyValidationAndTransformation}from"../../modules/base/base.middlewares.js";
+export { addPrismaQueryOptionsToRequest, handleRequestBodyValidationAndTransformation, } from "../../modules/base/base.middlewares.js";
+//# sourceMappingURL=index.js.map

package/dist/esm/exports/prisma/index.js

@@ -1 +1,6 @@
-"use strict";import r from"../../utils/prisma/prisma-schema-parser.js";export function getPrismaModels(){return r.models.map(({name:e})=>e)}export{r as prismaSchemaParser};
+import prismaSchemaParser from "../../utils/prisma/prisma-schema-parser.js";
+export function getPrismaModels() {
+    return prismaSchemaParser.models.map(({ name }) => name);
+}
+export { prismaSchemaParser };
+//# sourceMappingURL=index.js.map

package/dist/esm/exports/services/index.js

@@ -1 +1,9 @@
-"use strict";import{getFileUploadServices as e,FileUploadService as r}from"../../modules/file-upload/file-upload.service.js";import i,{AuthService as o}from"../../modules/auth/auth.service.js";import t,{EmailService as m}from"../../modules/email/email.service.js";import{BaseService as p}from"../../modules/base/base.service.js";export{i as authService,o as AuthService};export{p as BaseService};export{t as emailService,m as EmailService};export{e as getFileUploadServices,r as FileUploadService};
+import { getFileUploadServices, FileUploadService, } from "../../modules/file-upload/file-upload.service.js";
+import authService, { AuthService } from "../../modules/auth/auth.service.js";
+import emailService, { EmailService } from "../../modules/email/email.service.js";
+import { BaseService } from "../../modules/base/base.service.js";
+export { authService, AuthService };
+export { BaseService, };
+export { emailService, EmailService };
+export { getFileUploadServices, FileUploadService };
+//# sourceMappingURL=index.js.map

package/dist/esm/exports/utils/index.js

@@ -1 +1,4 @@
-"use strict";export*from"../../utils/helpers/change-case.helpers.js";import r,{apiFeatures as e}from"../../utils/features/api.features.js";export{r as APIFeatures,e as apiFeatures};
+export * from "../../utils/helpers/change-case.helpers.js";
+import APIFeatures from "../../utils/features/api.features.js";
+export { APIFeatures };
+//# sourceMappingURL=index.js.map

package/dist/esm/exports/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/exports/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,yCAAyC,CAAC;AAExD,OAAO,WAAW,EAAE,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC","sourcesContent":["export * from \"../../utils/helpers/change-case.helpers\";\nexport { MsDuration } from \"../../modules/auth/utils/helpers/auth.controller.helpers\";\nimport APIFeatures, { apiFeatures } from \"../../utils/features/api.features\";\n\nexport { APIFeatures, apiFeatures };\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/exports/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,yCAAyC,CAAC;AAExD,OAAO,WAAW,MAAM,mCAAmC,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,CAAC","sourcesContent":["export * from \"../../utils/helpers/change-case.helpers\";\nexport { MsDuration } from \"../../modules/auth/utils/helpers/auth.controller.helpers\";\nimport APIFeatures from \"../../utils/features/api.features\";\n\nexport { APIFeatures };\n"]}

package/dist/esm/exports/validation/index.js

@@ -1 +1,4 @@
-"use strict";import o from"../../utils/validate-dto.js";import t from"../../utils/validate-schema.js";export{o as validateDto,t as validateSchema};
+import validateDto from "../../utils/validate-dto.js";
+import validateSchema from "../../utils/validate-schema.js";
+export { validateDto, validateSchema };
+//# sourceMappingURL=index.js.map

package/dist/esm/modules/auth/auth.controller.js

@@ -1 +1,240 @@
-"use strict";import i from"../error-handler/utils/catch-async.js";import r from"../error-handler/utils/app-error.js";import p from"./auth.service.js";import{BaseService as T}from"../base/base.service.js";import A from"../../utils/arkos-env.js";import{getArkosConfig as f}from"../../server.js";import{createPrismaWhereClause as O,determineUsernameField as S,getNestedValue as E,toMs as P}from"./utils/helpers/auth.controller.helpers.js";import y from"./utils/services/auth-action.service.js";export const defaultExcludedUserFields={password:!1},authControllerFactory=async(c={})=>{const d=new T("user");return{getMe:i(async(e,n,o)=>{const s=await d.findOne({id:e.user.id},e.prismaQueryOptions||{});if(Object.keys(defaultExcludedUserFields).forEach(t=>{s&&delete s[t]}),c?.afterGetMe)return e.responseData={data:s},e.responseStatus=200,o();n.status(200).json({data:s})}),updateMe:i(async(e,n,o)=>{if("password"in e.body)throw new r("In order to update password use the update-password endpoint.",400,{},"InvalidFieldPassword");const s=await d.updateOne({id:e.user.id},e.body,e.prismaQueryOptions||{});if(Object.keys(defaultExcludedUserFields).forEach(t=>{s&&delete s[t]}),c?.afterUpdateMe)return e.responseData={data:s},e.responseStatus=200,o();n.status(200).json({data:s})}),logout:i(async(e,n,o)=>{if(n.cookie("arkos_access_token","no-token",{expires:new Date(Date.now()+10*1e3),httpOnly:!0}),c?.afterLogout)return e.responseData=null,e.responseStatus=204,o();n.status(204).json()}),login:i(async(e,n,o)=>{const s=f()?.authentication,t=S(e),a=t.split(".")[t.split(".").length-1],w=e.body[a],{password:u}=e.body;if(!w||!u)return o(new r(`Please provide both ${a} and password`,400));let l;if(t?.includes?.(".")){const m=E(e.body,t);if(m===void 0)return o(new r(`Invalid ${t} provided`,400));l=O(t,m)}else l={[t]:w};const h=await d.findOne(l,e.prismaQueryOptions||{});if(!h||!await p.isCorrectPassword(u,h.password))return o(new r(`Incorrect ${a} or password`,401));const g=p.signJwtToken(h.id),k={expires:new Date(Date.now()+Number(P(s?.jwt?.expiresIn||process.env.JWT_EXPIRES_IN||A.JWT_EXPIRES_IN))),httpOnly:s?.jwt?.cookie?.httpOnly||process.env.JWT_COOKIE_HTTP_ONLY==="true"||!0,secure:s?.jwt?.cookie?.secure||process.env.JWT_COOKIE_SECURE==="true"||e.secure||e.headers["x-forwarded-proto"]==="https",sameSite:s?.jwt?.cookie?.sameSite||process.env.JWT_COOKIE_SAME_SITE||(process.env.NODE_ENV==="production"?"none":"lax")};if((s?.login?.sendAccessTokenThrough==="response-only"||s?.login?.sendAccessTokenThrough==="both"||!s?.login?.sendAccessTokenThrough)&&(e.responseData={accessToken:g}),(s?.login?.sendAccessTokenThrough==="cookie-only"||s?.login?.sendAccessTokenThrough==="both"||!s?.login?.sendAccessTokenThrough)&&n.cookie("arkos_access_token",g,k),e.accessToken=g,c?.afterLogin)return e.additionalData={user:h},e.responseStatus=200,o();s?.login?.sendAccessTokenThrough==="response-only"||s?.login?.sendAccessTokenThrough==="both"||!s?.login?.sendAccessTokenThrough?n.status(200).json(e.responseData):(s?.login?.sendAccessTokenThrough==="cookie-only"||s?.login?.sendAccessTokenThrough==="both"||!s?.login?.sendAccessTokenThrough)&&n.status(200).send()}),signup:i(async(e,n,o)=>{const s=await d.createOne(e.body,e.prismaQueryOptions||{});if(c?.afterSignup)return e.responseData={data:s},e.responseStatus=201,o();Object.keys(defaultExcludedUserFields).forEach(t=>{delete s[t]}),n.status(201).json({data:s})}),deleteMe:i(async(e,n,o)=>{const s=e.user.id,t=await d.updateOne({id:s},{deletedSelfAccountAt:new Date().toISOString()},e.prismaQueryOptions||{});if(c?.afterDeleteMe)return e.responseData={data:t},e.responseStatus=200,o();Object.keys(defaultExcludedUserFields).forEach(a=>{delete t[a]}),n.status(200).json({message:"Account deleted successfully"})}),updatePassword:i(async(e,n,o)=>{const{currentPassword:s,newPassword:t}=e.body;if(!s||!t)return o(new r("currentPassword and newPassword are required",400));const a=e.user;if(!a||a?.isActive===!1||a?.deletedSelfAccountAt)return o(new r("User not found!",404));const w=await p.isCorrectPassword(String(s),String(a.password)),u=f(),l=u?.authentication;if(!w)return o(new r("Current password is incorrect.",400));if(!p.isPasswordStrong(String(t))&&!u?.validation)return o(new r(l?.passwordValidation?.message||"The new password must contain at least one uppercase letter, one lowercase letter, and one number",400));if(await d.updateOne({id:a.id},{password:await p.hashPassword(t),passwordChangedAt:new Date(Date.now())}),c?.afterUpdatePassword)return e.additionalData={user:a},e.responseData={status:"success",message:"Password updated successfully!"},e.responseStatus=200,o();n.status(200).json({status:"success",message:"Password updated successfully!"})}),findManyAuthAction:i(async(e,n)=>{const o=f(),s=y.getAll()?.map(t=>(o?.authentication?.mode==="dynamic"&&delete t?.roles,t));n.json({total:s.length,results:s.length,data:s})}),findOneAuthAction:i(async(e,n)=>{const o=f(),s=e.params?.resourceName;if(!s)throw new r("Please provide a resoureName",400);const t=y.getByResource(e.params?.resourceName)?.map(a=>(o?.authentication?.mode==="dynamic"&&delete a?.roles,a));if(!t)throw new r(`No auth action with resource name ${s}`,404);n.json({total:t.length,results:t.length,data:t})})}};
+import catchAsync from "../error-handler/utils/catch-async.js";
+import AppError from "../error-handler/utils/app-error.js";
+import authService from "./auth.service.js";
+import { BaseService } from "../base/base.service.js";
+import arkosEnv from "../../utils/arkos-env.js";
+import { getArkosConfig } from "../../server.js";
+import { createPrismaWhereClause, determineUsernameField, getNestedValue, toMs, } from "./utils/helpers/auth.controller.helpers.js";
+import authActionService from "./utils/services/auth-action.service.js";
+export const defaultExcludedUserFields = {
+    password: false,
+};
+export const authControllerFactory = async (interceptors = {}) => {
+    const userService = new BaseService("user");
+    return {
+        getMe: catchAsync(async (req, res, next) => {
+            const user = (await userService.findOne({ id: req.user.id }, req.prismaQueryOptions || {}));
+            Object.keys(defaultExcludedUserFields).forEach((key) => {
+                if (user)
+                    delete user[key];
+            });
+            if (interceptors?.afterGetMe) {
+                req.responseData = { data: user };
+                res.locals.data = { data: user };
+                req.responseStatus = 200;
+                res.locals.status = 200;
+                return next();
+            }
+            res.status(200).json({ data: user });
+        }),
+        updateMe: catchAsync(async (req, res, next) => {
+            if ("password" in req.body)
+                throw new AppError("In order to update password use the update-password endpoint.", 400, {}, "InvalidFieldPassword");
+            const user = (await userService.updateOne({ id: req.user.id }, req.body, req.prismaQueryOptions || {}));
+            Object.keys(defaultExcludedUserFields).forEach((key) => {
+                if (user)
+                    delete user[key];
+            });
+            if (interceptors?.afterUpdateMe) {
+                req.responseData = { data: user };
+                res.locals.data = { data: user };
+                req.responseStatus = 200;
+                res.locals.status = 200;
+                return next();
+            }
+            res.status(200).json({ data: user });
+        }),
+        logout: catchAsync(async (req, res, next) => {
+            res.cookie("arkos_access_token", "no-token", {
+                expires: new Date(Date.now() + 10 * 1000),
+                httpOnly: true,
+            });
+            if (interceptors?.afterLogout) {
+                req.responseData = null;
+                res.locals.data = null;
+                req.responseStatus = 204;
+                res.locals.status = 204;
+                return next();
+            }
+            res.status(204).json();
+        }),
+        login: catchAsync(async (req, res, next) => {
+            const authConfigs = getArkosConfig()?.authentication;
+            const usernameField = determineUsernameField(req);
+            const lastField = usernameField.split(".")[usernameField.split(".").length - 1];
+            const usernameValue = req.body[lastField];
+            const { password } = req.body;
+            if (!usernameValue || !password)
+                return next(new AppError(`Please provide both ${lastField} and password`, 400));
+            let whereClause;
+            if (usernameField?.includes?.(".")) {
+                const valueToFind = getNestedValue(req.body, usernameField);
+                if (valueToFind === undefined) {
+                    return next(new AppError(`Invalid ${usernameField} provided`, 400));
+                }
+                whereClause = createPrismaWhereClause(usernameField, valueToFind);
+            }
+            else {
+                whereClause = { [usernameField]: usernameValue };
+            }
+            const user = (await userService.findOne(whereClause, req.prismaQueryOptions || {}));
+            if (!user ||
+                !(await authService.isCorrectPassword(password, user.password))) {
+                return next(new AppError(`Incorrect ${lastField} or password`, 401));
+            }
+            const token = authService.signJwtToken(user.id);
+            const cookieOptions = {
+                expires: new Date(Date.now() +
+                    Number(toMs(authConfigs?.jwt?.expiresIn ||
+                        process.env.JWT_EXPIRES_IN ||
+                        arkosEnv.JWT_EXPIRES_IN))),
+                httpOnly: authConfigs?.jwt?.cookie?.httpOnly ||
+                    process.env.JWT_COOKIE_HTTP_ONLY === "true" ||
+                    true,
+                secure: authConfigs?.jwt?.cookie?.secure ||
+                    process.env.JWT_COOKIE_SECURE === "true" ||
+                    req.secure ||
+                    req.headers["x-forwarded-proto"] === "https",
+                sameSite: authConfigs?.jwt?.cookie?.sameSite ||
+                    process.env.JWT_COOKIE_SAME_SITE ||
+                    (process.env.NODE_ENV === "production" ? "none" : "lax"),
+            };
+            if (authConfigs?.login?.sendAccessTokenThrough === "response-only" ||
+                authConfigs?.login?.sendAccessTokenThrough === "both" ||
+                !authConfigs?.login?.sendAccessTokenThrough) {
+                req.responseData = { accessToken: token };
+                res.locals.data = { accessToken: token };
+            }
+            if (authConfigs?.login?.sendAccessTokenThrough === "cookie-only" ||
+                authConfigs?.login?.sendAccessTokenThrough === "both" ||
+                !authConfigs?.login?.sendAccessTokenThrough)
+                res.cookie("arkos_access_token", token, cookieOptions);
+            req.accessToken = token;
+            if (interceptors?.afterLogin) {
+                req.additionalData = { user };
+                res.locals.additional = { user };
+                req.responseStatus = 200;
+                res.locals.status = 200;
+                return next();
+            }
+            if (authConfigs?.login?.sendAccessTokenThrough === "response-only" ||
+                authConfigs?.login?.sendAccessTokenThrough === "both" ||
+                !authConfigs?.login?.sendAccessTokenThrough) {
+                res.status(200).json(req.responseData);
+            }
+            else if (authConfigs?.login?.sendAccessTokenThrough === "cookie-only" ||
+                authConfigs?.login?.sendAccessTokenThrough === "both" ||
+                !authConfigs?.login?.sendAccessTokenThrough)
+                res.status(200).send();
+        }),
+        signup: catchAsync(async (req, res, next) => {
+            const user = (await userService.createOne(req.body, req.prismaQueryOptions || {}));
+            if (interceptors?.afterSignup) {
+                req.responseData = { data: user };
+                res.locals.data = { data: user };
+                req.responseStatus = 201;
+                res.locals.status = 201;
+                return next();
+            }
+            Object.keys(defaultExcludedUserFields).forEach((key) => {
+                delete user[key];
+            });
+            res.status(201).json({ data: user });
+        }),
+        deleteMe: catchAsync(async (req, res, next) => {
+            const userId = req.user.id;
+            const updatedUser = (await userService.updateOne({ id: userId }, {
+                deletedSelfAccountAt: new Date().toISOString(),
+            }, req.prismaQueryOptions || {}));
+            if (interceptors?.afterDeleteMe) {
+                req.responseData = { data: updatedUser };
+                res.locals.data = { data: updatedUser };
+                req.responseStatus = 200;
+                res.locals.status = 200;
+                return next();
+            }
+            Object.keys(defaultExcludedUserFields).forEach((key) => {
+                delete updatedUser[key];
+            });
+            res.status(200).json({
+                message: "Account deleted successfully",
+            });
+        }),
+        updatePassword: catchAsync(async (req, res, next) => {
+            const { currentPassword, newPassword } = req.body;
+            if (!currentPassword || !newPassword)
+                return next(new AppError("currentPassword and newPassword are required", 400));
+            const user = req.user;
+            if (!user || user?.isActive === false || user?.deletedSelfAccountAt)
+                return next(new AppError("User not found!", 404));
+            const isPasswordCorrect = await authService.isCorrectPassword(String(currentPassword), String(user.password));
+            const configs = getArkosConfig();
+            const initAuthConfigs = configs?.authentication;
+            if (!isPasswordCorrect)
+                return next(new AppError("Current password is incorrect.", 400));
+            if (!authService.isPasswordStrong(String(newPassword)) &&
+                !configs?.validation) {
+                return next(new AppError(initAuthConfigs?.passwordValidation?.message ||
+                    "The new password must contain at least one uppercase letter, one lowercase letter, and one number", 400));
+            }
+            await userService.updateOne({ id: user.id }, {
+                password: await authService.hashPassword(newPassword),
+                passwordChangedAt: new Date(Date.now()),
+            });
+            if (interceptors?.afterUpdatePassword) {
+                req.additionalData = {
+                    user,
+                };
+                req.responseData = {
+                    status: "success",
+                    message: "Password updated successfully!",
+                };
+                res.locals.data = {
+                    status: "success",
+                    message: "Password updated successfully!",
+                };
+                req.responseStatus = 200;
+                res.locals.status = 200;
+                return next();
+            }
+            res.status(200).json({
+                status: "success",
+                message: "Password updated successfully!",
+            });
+        }),
+        findManyAuthAction: catchAsync(async (_, res) => {
+            const arkosConfig = getArkosConfig();
+            const authActions = authActionService.getAll()?.map((authAction) => {
+                if (arkosConfig?.authentication?.mode === "dynamic")
+                    delete authAction?.roles;
+                return authAction;
+            });
+            res.json({
+                total: authActions.length,
+                results: authActions.length,
+                data: authActions,
+            });
+        }),
+        findOneAuthAction: catchAsync(async (req, res) => {
+            const arkosConfig = getArkosConfig();
+            const resourceName = req.params?.resourceName;
+            if (!resourceName)
+                throw new AppError(`Please provide a resoureName`, 400);
+            const authActions = authActionService
+                .getByResource(req.params?.resourceName)
+                ?.map((authAction) => {
+                if (arkosConfig?.authentication?.mode === "dynamic")
+                    delete authAction?.roles;
+                return authAction;
+            });
+            if (!authActions)
+                throw new AppError(`No auth action with resource name ${resourceName}`, 404);
+            res.json({
+                total: authActions.length,
+                results: authActions.length,
+                data: authActions,
+            });
+        }),
+    };
+};
+//# sourceMappingURL=auth.controller.js.map

package/dist/esm/modules/auth/auth.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.controller.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,oCAAoC,CAAC;AAC5D,OAAO,QAAQ,MAAM,kCAAkC,CAAC;AAGxD,OAAO,WAAW,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,QAAQ,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,cAAc,EAEd,IAAI,GACL,MAAM,yCAAyC,CAAC;AACjD,OAAO,iBAAiB,MAAM,sCAAsC,CAAC;AAKrE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,KAAK;CAChB,CAAC;AAQF,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,eAAoB,EAAE,EAAE,EAAE;IACpE,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAE5C,OAAO;QAIL,KAAK,EAAE,UAAU,CACf,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,CACrC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,UAAU,EAAE,CAAC;gBAC7B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAKD,QAAQ,EAAE,UAAU,CAClB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,IAAI,UAAU,IAAI,GAAG,CAAC,IAAI;gBACxB,MAAM,IAAI,QAAQ,CAChB,+DAA+D,EAC/D,GAAG,EACH,EAAE,EACF,sBAAsB,CACvB,CAAC;YAEJ,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CACvC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,aAAa,EAAE,CAAC;gBAChC,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAKD,MAAM,EAAE,UAAU,CAChB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,UAAU,EAAE;gBAC3C,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBACzC,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;gBACxB,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC,CACF;QAQD,KAAK,EAAE,UAAU,CACf,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,WAAW,GAAG,cAAc,EAAE,EAAE,cAAc,CAAC;YAErD,MAAM,aAAa,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAGlD,MAAM,SAAS,GACb,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAEhE,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE1C,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAE9B,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ;gBAC7B,OAAO,IAAI,CACT,IAAI,QAAQ,CAAC,uBAAuB,SAAS,eAAe,EAAE,GAAG,CAAC,CACnE,CAAC;YAGJ,IAAI,WAAgC,CAAC;YAErC,IAAI,aAAa,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;gBAEnC,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,WAAW,aAAa,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtE,CAAC;gBACD,WAAW,GAAG,uBAAuB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBAEN,WAAW,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,CAAC;YACnD,CAAC;YAGD,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,CACrC,WAAW,EACX,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IACE,CAAC,IAAI;gBACL,CAAC,CAAC,MAAM,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAC/D,CAAC;gBACD,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,aAAa,SAAS,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,EAAG,CAAC,CAAC;YAEjD,MAAM,aAAa,GAAkB;gBACnC,OAAO,EAAE,IAAI,IAAI,CACf,IAAI,CAAC,GAAG,EAAE;oBACR,MAAM,CACJ,IAAI,CACF,WAAW,EAAE,GAAG,EAAE,SAAS;wBACxB,OAAO,CAAC,GAAG,CAAC,cAA6B;wBACzC,QAAQ,CAAC,cAA6B,CAC1C,CACF,CACJ;gBACD,QAAQ,EACN,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;oBAClC,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM;oBAC3C,IAAI;gBACN,MAAM,EACJ,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM;oBAChC,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM;oBACxC,GAAG,CAAC,MAAM;oBACV,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO;gBAC9C,QAAQ,EACN,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;oBACjC,OAAO,CAAC,GAAG,CAAC,oBAIC;oBACd,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;aAC3D,CAAC;YAEF,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,eAAe;gBAC9D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB,EAC3C,CAAC;gBACD,GAAG,CAAC,YAAY,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YAC5C,CAAC;YAED,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,aAAa;gBAC5D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB;gBAE3C,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YAEzD,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC;YAExB,IAAI,YAAY,EAAE,UAAU,EAAE,CAAC;gBAC7B,GAAG,CAAC,cAAc,GAAG,EAAE,IAAI,EAAE,CAAC;gBAC9B,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,eAAe;gBAC9D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB,EAC3C,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;iBAAM,IACL,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,aAAa;gBAC5D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB;gBAE3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC,CACF;QAKD,MAAM,EAAE,UAAU,CAChB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CACvC,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAID,QAAQ,EAAE,UAAU,CAClB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAK,CAAC,EAAE,CAAC;YAE5B,MAAM,WAAW,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CAC9C,EAAE,EAAE,EAAE,MAAM,EAAE,EACd;gBACE,oBAAoB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC/C,EACD,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IAAI,YAAY,EAAE,aAAa,EAAE,CAAC;gBAChC,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;gBACzC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,OAAO,WAAW,CAAC,GAAiB,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,8BAA8B;aACxC,CAAC,CAAC;QACL,CAAC,CACF;QAKD,cAAc,EAAE,UAAU,CACxB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAElD,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW;gBAClC,OAAO,IAAI,CACT,IAAI,QAAQ,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAClE,CAAC;YAEJ,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAEtB,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,QAAQ,KAAK,KAAK,IAAI,IAAI,EAAE,oBAAoB;gBACjE,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,CAAC;YAGpD,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAC3D,MAAM,CAAC,eAAe,CAAC,EACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CACtB,CAAC;YAEF,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;YACjC,MAAM,eAAe,GAAG,OAAO,EAAE,cAAc,CAAC;YAEhD,IAAI,CAAC,iBAAiB;gBACpB,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC,CAAC;YAGnE,IACE,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAClD,CAAC,OAAO,EAAE,UAAU,EACpB,CAAC;gBACD,OAAO,IAAI,CACT,IAAI,QAAQ,CACV,eAAe,EAAE,kBAAkB,EAAE,OAAO;oBAC1C,mGAAmG,EACrG,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;YAGD,MAAM,WAAW,CAAC,SAAS,CACzB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EACf;gBACE,QAAQ,EAAE,MAAM,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC;gBACrD,iBAAiB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;aACxC,CACF,CAAC;YAEF,IAAI,YAAY,EAAE,mBAAmB,EAAE,CAAC;gBACtC,GAAG,CAAC,cAAc,GAAG;oBACnB,IAAI;iBACL,CAAC;gBACF,GAAG,CAAC,YAAY,GAAG;oBACjB,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,gCAAgC;iBAC1C,CAAC;gBACF,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;QACL,CAAC,CACF;QAED,kBAAkB,EAAE,UAAU,CAC5B,KAAK,EAAE,CAAe,EAAE,GAAkB,EAAE,EAAE;YAC5C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;gBACjE,IAAI,WAAW,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS;oBACjD,OAAQ,UAAkB,EAAE,KAAK,CAAC;gBACpC,OAAO,UAAU,CAAC;YACpB,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,WAAW,CAAC,MAAM;gBACzB,OAAO,EAAE,WAAW,CAAC,MAAM;gBAC3B,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC,CACF;QAED,iBAAiB,EAAE,UAAU,CAC3B,KAAK,EAAE,GAAiB,EAAE,GAAkB,EAAE,EAAE;YAC9C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;YACrC,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC;YAE9C,IAAI,CAAC,YAAY;gBACf,MAAM,IAAI,QAAQ,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;YAE1D,MAAM,WAAW,GAAG,iBAAiB;iBAClC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC;gBACxC,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;gBACnB,IAAI,WAAW,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS;oBACjD,OAAQ,UAAkB,EAAE,KAAK,CAAC;gBACpC,OAAO,UAAU,CAAC;YACpB,CAAC,CAAC,CAAC;YAEL,IAAI,CAAC,WAAW;gBACd,MAAM,IAAI,QAAQ,CAChB,qCAAqC,YAAY,EAAE,EACnD,GAAG,CACJ,CAAC;YAEJ,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,WAAW,CAAC,MAAM;gBACzB,OAAO,EAAE,WAAW,CAAC,MAAM;gBAC3B,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC,CACF;KACF,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import catchAsync from \"../error-handler/utils/catch-async\";\nimport AppError from \"../error-handler/utils/app-error\";\nimport { CookieOptions } from \"express\";\nimport { ArkosRequest, ArkosResponse, ArkosNextFunction } from \"../../types\";\nimport authService from \"./auth.service\";\nimport { BaseService } from \"../base/base.service\";\nimport { User } from \"../../types\";\nimport arkosEnv from \"../../utils/arkos-env\";\nimport { getArkosConfig } from \"../../server\";\nimport {\n  createPrismaWhereClause,\n  determineUsernameField,\n  getNestedValue,\n  MsDuration,\n  toMs,\n} from \"./utils/helpers/auth.controller.helpers\";\nimport authActionService from \"./utils/services/auth-action.service\";\n\n/**\n * Default fields to exclude from user object when returning to client\n */\nexport const defaultExcludedUserFields = {\n  password: false,\n};\n\n/**\n * Factory function to create authentication controller with configurable interceptors\n *\n * @param interceptors - Optional middleware functions to execute after controller actions\n * @returns An object containing all authentication controller methods\n */\nexport const authControllerFactory = async (interceptors: any = {}) => {\n  const userService = new BaseService(\"user\");\n\n  return {\n    /**\n     * Retrieves the current authenticated user's information\n     */\n    getMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const user = (await userService.findOne(\n          { id: req.user!.id },\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (user) delete user[key as keyof User];\n        });\n\n        if (interceptors?.afterGetMe) {\n          req.responseData = { data: user };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: user });\n      }\n    ),\n\n    /**\n     * Updates the current authenticated user's information\n     */\n    updateMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        if (\"password\" in req.body)\n          throw new AppError(\n            \"In order to update password use the update-password endpoint.\",\n            400,\n            {},\n            \"InvalidFieldPassword\"\n          );\n\n        const user = (await userService.updateOne(\n          { id: req.user!.id },\n          req.body,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (user) delete user[key as keyof User];\n        });\n\n        if (interceptors?.afterUpdateMe) {\n          req.responseData = { data: user };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: user });\n      }\n    ),\n\n    /**\n     * Logs out the current user by invalidating their access token cookie\n     */\n    logout: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        res.cookie(\"arkos_access_token\", \"no-token\", {\n          expires: new Date(Date.now() + 10 * 1000),\n          httpOnly: true,\n        });\n\n        if (interceptors?.afterLogout) {\n          req.responseData = null;\n          req.responseStatus = 204;\n          return next();\n        }\n\n        res.status(204).json();\n      }\n    ),\n\n    /**\n     * Authenticates a user using configurable username field and password\n     * Username field can be specified in query parameter or config\n     *\n     * Supports nested fields and array queries (e.g., \"profile.nickname\", \"phones.some.number\")\n     */\n    login: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const authConfigs = getArkosConfig()?.authentication;\n\n        const usernameField = determineUsernameField(req);\n\n        // For the error message, we only care about the top-level field name\n        const lastField =\n          usernameField.split(\".\")[usernameField.split(\".\").length - 1];\n\n        const usernameValue = req.body[lastField];\n\n        const { password } = req.body;\n\n        if (!usernameValue || !password)\n          return next(\n            new AppError(`Please provide both ${lastField} and password`, 400)\n          );\n\n        // Create appropriate where clause for the query\n        let whereClause: Record<string, any>;\n\n        if (usernameField?.includes?.(\".\")) {\n          // For nested paths, we need to extract the actual value to search for\n          const valueToFind = getNestedValue(req.body, usernameField);\n          if (valueToFind === undefined) {\n            return next(new AppError(`Invalid ${usernameField} provided`, 400));\n          }\n          whereClause = createPrismaWhereClause(usernameField, valueToFind);\n        } else {\n          // Simple field case\n          whereClause = { [usernameField]: usernameValue };\n        }\n\n        // Use findFirst instead of findUnique for complex queries\n        const user = (await userService.findOne(\n          whereClause,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (\n          !user ||\n          !(await authService.isCorrectPassword(password, user.password))\n        ) {\n          return next(new AppError(`Incorrect ${lastField} or password`, 401));\n        }\n\n        const token = authService.signJwtToken(user.id!);\n\n        const cookieOptions: CookieOptions = {\n          expires: new Date(\n            Date.now() +\n              Number(\n                toMs(\n                  authConfigs?.jwt?.expiresIn ||\n                    (process.env.JWT_EXPIRES_IN as MsDuration) ||\n                    (arkosEnv.JWT_EXPIRES_IN as MsDuration)\n                )\n              )\n          ),\n          httpOnly:\n            authConfigs?.jwt?.cookie?.httpOnly ||\n            process.env.JWT_COOKIE_HTTP_ONLY === \"true\" ||\n            true,\n          secure:\n            authConfigs?.jwt?.cookie?.secure ||\n            process.env.JWT_COOKIE_SECURE === \"true\" ||\n            req.secure ||\n            req.headers[\"x-forwarded-proto\"] === \"https\",\n          sameSite:\n            authConfigs?.jwt?.cookie?.sameSite ||\n            (process.env.JWT_COOKIE_SAME_SITE as\n              | \"none\"\n              | \"lax\"\n              | \"strict\"\n              | undefined) ||\n            (process.env.NODE_ENV === \"production\" ? \"none\" : \"lax\"),\n        };\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"response-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        ) {\n          req.responseData = { accessToken: token };\n        }\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"cookie-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        )\n          res.cookie(\"arkos_access_token\", token, cookieOptions);\n\n        req.accessToken = token;\n\n        if (interceptors?.afterLogin) {\n          req.additionalData = { user };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"response-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        ) {\n          res.status(200).json(req.responseData);\n        } else if (\n          authConfigs?.login?.sendAccessTokenThrough === \"cookie-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        )\n          res.status(200).send();\n      }\n    ),\n\n    /**\n     * Creates a new user account using the userService\n     */\n    signup: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const user = (await userService.createOne(\n          req.body,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (interceptors?.afterSignup) {\n          req.responseData = { data: user };\n          req.responseStatus = 201;\n          return next();\n        }\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          delete user[key as keyof User];\n        });\n\n        res.status(201).json({ data: user });\n      }\n    ),\n    /**\n     * Marks user account as self-deleted by setting deletedSelfAccountAt timestamp\n     */\n    deleteMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const userId = req.user!.id; // Assuming the authenticated user's ID is available in req.user\n\n        const updatedUser = (await userService.updateOne(\n          { id: userId },\n          {\n            deletedSelfAccountAt: new Date().toISOString(),\n          },\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (interceptors?.afterDeleteMe) {\n          req.responseData = { data: updatedUser };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          delete updatedUser[key as keyof User];\n        });\n\n        res.status(200).json({\n          message: \"Account deleted successfully\",\n        });\n      }\n    ),\n\n    /**\n     * Updates the password of the authenticated user\n     */\n    updatePassword: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const { currentPassword, newPassword } = req.body;\n\n        if (!currentPassword || !newPassword)\n          return next(\n            new AppError(\"currentPassword and newPassword are required\", 400)\n          );\n\n        const user = req.user;\n\n        if (!user || user?.isActive === false || user?.deletedSelfAccountAt)\n          return next(new AppError(\"User not found!\", 404));\n\n        // Check if the current password is correct\n        const isPasswordCorrect = await authService.isCorrectPassword(\n          String(currentPassword),\n          String(user.password)\n        );\n\n        const configs = getArkosConfig();\n        const initAuthConfigs = configs?.authentication;\n\n        if (!isPasswordCorrect)\n          return next(new AppError(\"Current password is incorrect.\", 400));\n\n        // Check password strength (optional but recommended)\n        if (\n          !authService.isPasswordStrong(String(newPassword)) &&\n          !configs?.validation\n        ) {\n          return next(\n            new AppError(\n              initAuthConfigs?.passwordValidation?.message ||\n                \"The new password must contain at least one uppercase letter, one lowercase letter, and one number\",\n              400\n            )\n          );\n        }\n\n        // Update the password\n        await userService.updateOne(\n          { id: user.id },\n          {\n            password: await authService.hashPassword(newPassword),\n            passwordChangedAt: new Date(Date.now()),\n          }\n        );\n\n        if (interceptors?.afterUpdatePassword) {\n          req.additionalData = {\n            user,\n          };\n          req.responseData = {\n            status: \"success\",\n            message: \"Password updated successfully!\",\n          };\n          req.responseStatus = 200;\n          return next();\n        }\n\n        res.status(200).json({\n          status: \"success\",\n          message: \"Password updated successfully!\",\n        });\n      }\n    ),\n\n    findManyAuthAction: catchAsync(\n      async (_: ArkosRequest, res: ArkosResponse) => {\n        const arkosConfig = getArkosConfig();\n        const authActions = authActionService.getAll()?.map((authAction) => {\n          if (arkosConfig?.authentication?.mode === \"dynamic\")\n            delete (authAction as any)?.roles;\n          return authAction;\n        });\n\n        res.json({\n          total: authActions.length,\n          results: authActions.length,\n          data: authActions,\n        });\n      }\n    ),\n\n    findOneAuthAction: catchAsync(\n      async (req: ArkosRequest, res: ArkosResponse) => {\n        const arkosConfig = getArkosConfig();\n        const resourceName = req.params?.resourceName;\n\n        if (!resourceName)\n          throw new AppError(`Please provide a resoureName`, 400);\n\n        const authActions = authActionService\n          .getByResource(req.params?.resourceName)\n          ?.map((authAction) => {\n            if (arkosConfig?.authentication?.mode === \"dynamic\")\n              delete (authAction as any)?.roles;\n            return authAction;\n          });\n\n        if (!authActions)\n          throw new AppError(\n            `No auth action with resource name ${resourceName}`,\n            404\n          );\n\n        res.json({\n          total: authActions.length,\n          results: authActions.length,\n          data: authActions,\n        });\n      }\n    ),\n  };\n};\n"]}
+{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.controller.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,oCAAoC,CAAC;AAC5D,OAAO,QAAQ,MAAM,kCAAkC,CAAC;AAGxD,OAAO,WAAW,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,QAAQ,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,cAAc,EAEd,IAAI,GACL,MAAM,yCAAyC,CAAC;AACjD,OAAO,iBAAiB,MAAM,sCAAsC,CAAC;AAKrE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,KAAK;CAChB,CAAC;AAQF,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,eAAoB,EAAE,EAAE,EAAE;IACpE,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAE5C,OAAO;QAIL,KAAK,EAAE,UAAU,CACf,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,CACrC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,UAAU,EAAE,CAAC;gBAC7B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACjC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;gBACxB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAKD,QAAQ,EAAE,UAAU,CAClB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,IAAI,UAAU,IAAI,GAAG,CAAC,IAAI;gBACxB,MAAM,IAAI,QAAQ,CAChB,+DAA+D,EAC/D,GAAG,EACH,EAAE,EACF,sBAAsB,CACvB,CAAC;YAEJ,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CACvC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,EACpB,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,aAAa,EAAE,CAAC;gBAChC,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACjC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;gBACxB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAKD,MAAM,EAAE,UAAU,CAChB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,UAAU,EAAE;gBAC3C,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBACzC,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;gBACxB,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;gBACvB,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;gBACxB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC,CACF;QAQD,KAAK,EAAE,UAAU,CACf,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,WAAW,GAAG,cAAc,EAAE,EAAE,cAAc,CAAC;YAErD,MAAM,aAAa,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAGlD,MAAM,SAAS,GACb,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAEhE,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE1C,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAE9B,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ;gBAC7B,OAAO,IAAI,CACT,IAAI,QAAQ,CAAC,uBAAuB,SAAS,eAAe,EAAE,GAAG,CAAC,CACnE,CAAC;YAGJ,IAAI,WAAgC,CAAC;YAErC,IAAI,aAAa,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;gBAEnC,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,WAAW,aAAa,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtE,CAAC;gBACD,WAAW,GAAG,uBAAuB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBAEN,WAAW,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,CAAC;YACnD,CAAC;YAGD,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,CACrC,WAAW,EACX,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IACE,CAAC,IAAI;gBACL,CAAC,CAAC,MAAM,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAC/D,CAAC;gBACD,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,aAAa,SAAS,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,EAAG,CAAC,CAAC;YAEjD,MAAM,aAAa,GAAkB;gBACnC,OAAO,EAAE,IAAI,IAAI,CACf,IAAI,CAAC,GAAG,EAAE;oBACR,MAAM,CACJ,IAAI,CACF,WAAW,EAAE,GAAG,EAAE,SAAS;wBACxB,OAAO,CAAC,GAAG,CAAC,cAA6B;wBACzC,QAAQ,CAAC,cAA6B,CAC1C,CACF,CACJ;gBACD,QAAQ,EACN,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;oBAClC,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM;oBAC3C,IAAI;gBACN,MAAM,EACJ,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM;oBAChC,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM;oBACxC,GAAG,CAAC,MAAM;oBACV,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO;gBAC9C,QAAQ,EACN,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;oBACjC,OAAO,CAAC,GAAG,CAAC,oBAIC;oBACd,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;aAC3D,CAAC;YAEF,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,eAAe;gBAC9D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB,EAC3C,CAAC;gBACD,GAAG,CAAC,YAAY,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;gBAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YAC3C,CAAC;YAED,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,aAAa;gBAC5D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB;gBAE3C,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YAEzD,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC;YAExB,IAAI,YAAY,EAAE,UAAU,EAAE,CAAC;gBAC7B,GAAG,CAAC,cAAc,GAAG,EAAE,IAAI,EAAE,CAAC;gBAC9B,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,EAAE,IAAI,EAAE,CAAC;gBACjC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;gBACxB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,IACE,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,eAAe;gBAC9D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB,EAC3C,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;iBAAM,IACL,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,aAAa;gBAC5D,WAAW,EAAE,KAAK,EAAE,sBAAsB,KAAK,MAAM;gBACrD,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB;gBAE3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC,CACF;QAKD,MAAM,EAAE,UAAU,CAChB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CACvC,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACjC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;gBACxB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,OAAO,IAAI,CAAC,GAAiB,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CACF;QAID,QAAQ,EAAE,UAAU,CAClB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAK,CAAC,EAAE,CAAC;YAE5B,MAAM,WAAW,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,CAC9C,EAAE,EAAE,EAAE,MAAM,EAAE,EACd;gBACE,oBAAoB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC/C,EACD,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAC7B,CAAwB,CAAC;YAE1B,IAAI,YAAY,EAAE,aAAa,EAAE,CAAC;gBAChC,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;gBACzC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;gBACxC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;gBACxB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrD,OAAO,WAAW,CAAC,GAAiB,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,8BAA8B;aACxC,CAAC,CAAC;QACL,CAAC,CACF;QAKD,cAAc,EAAE,UAAU,CACxB,KAAK,EACH,GAAiB,EACjB,GAAkB,EAClB,IAAuB,EACvB,EAAE;YACF,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAElD,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW;gBAClC,OAAO,IAAI,CACT,IAAI,QAAQ,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAClE,CAAC;YAEJ,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAEtB,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,QAAQ,KAAK,KAAK,IAAI,IAAI,EAAE,oBAAoB;gBACjE,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,CAAC;YAGpD,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAC3D,MAAM,CAAC,eAAe,CAAC,EACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CACtB,CAAC;YAEF,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;YACjC,MAAM,eAAe,GAAG,OAAO,EAAE,cAAc,CAAC;YAEhD,IAAI,CAAC,iBAAiB;gBACpB,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC,CAAC;YAGnE,IACE,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAClD,CAAC,OAAO,EAAE,UAAU,EACpB,CAAC;gBACD,OAAO,IAAI,CACT,IAAI,QAAQ,CACV,eAAe,EAAE,kBAAkB,EAAE,OAAO;oBAC1C,mGAAmG,EACrG,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;YAGD,MAAM,WAAW,CAAC,SAAS,CACzB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EACf;gBACE,QAAQ,EAAE,MAAM,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC;gBACrD,iBAAiB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;aACxC,CACF,CAAC;YAEF,IAAI,YAAY,EAAE,mBAAmB,EAAE,CAAC;gBACtC,GAAG,CAAC,cAAc,GAAG;oBACnB,IAAI;iBACL,CAAC;gBACF,GAAG,CAAC,YAAY,GAAG;oBACjB,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,gCAAgC;iBAC1C,CAAC;gBACF,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG;oBAChB,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,gCAAgC;iBAC1C,CAAC;gBACF,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;gBACxB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;QACL,CAAC,CACF;QAED,kBAAkB,EAAE,UAAU,CAC5B,KAAK,EAAE,CAAe,EAAE,GAAkB,EAAE,EAAE;YAC5C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;gBACjE,IAAI,WAAW,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS;oBACjD,OAAQ,UAAkB,EAAE,KAAK,CAAC;gBACpC,OAAO,UAAU,CAAC;YACpB,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,WAAW,CAAC,MAAM;gBACzB,OAAO,EAAE,WAAW,CAAC,MAAM;gBAC3B,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC,CACF;QAED,iBAAiB,EAAE,UAAU,CAC3B,KAAK,EAAE,GAAiB,EAAE,GAAkB,EAAE,EAAE;YAC9C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;YACrC,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC;YAE9C,IAAI,CAAC,YAAY;gBACf,MAAM,IAAI,QAAQ,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;YAE1D,MAAM,WAAW,GAAG,iBAAiB;iBAClC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC;gBACxC,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;gBACnB,IAAI,WAAW,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS;oBACjD,OAAQ,UAAkB,EAAE,KAAK,CAAC;gBACpC,OAAO,UAAU,CAAC;YACpB,CAAC,CAAC,CAAC;YAEL,IAAI,CAAC,WAAW;gBACd,MAAM,IAAI,QAAQ,CAChB,qCAAqC,YAAY,EAAE,EACnD,GAAG,CACJ,CAAC;YAEJ,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,WAAW,CAAC,MAAM;gBACzB,OAAO,EAAE,WAAW,CAAC,MAAM;gBAC3B,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC,CACF;KACF,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import catchAsync from \"../error-handler/utils/catch-async\";\nimport AppError from \"../error-handler/utils/app-error\";\nimport { CookieOptions } from \"express\";\nimport { ArkosRequest, ArkosResponse, ArkosNextFunction } from \"../../types\";\nimport authService from \"./auth.service\";\nimport { BaseService } from \"../base/base.service\";\nimport { User } from \"../../types\";\nimport arkosEnv from \"../../utils/arkos-env\";\nimport { getArkosConfig } from \"../../server\";\nimport {\n  createPrismaWhereClause,\n  determineUsernameField,\n  getNestedValue,\n  MsDuration,\n  toMs,\n} from \"./utils/helpers/auth.controller.helpers\";\nimport authActionService from \"./utils/services/auth-action.service\";\n\n/**\n * Default fields to exclude from user object when returning to client\n */\nexport const defaultExcludedUserFields = {\n  password: false,\n};\n\n/**\n * Factory function to create authentication controller with configurable interceptors\n *\n * @param interceptors - Optional middleware functions to execute after controller actions\n * @returns An object containing all authentication controller methods\n */\nexport const authControllerFactory = async (interceptors: any = {}) => {\n  const userService = new BaseService(\"user\");\n\n  return {\n    /**\n     * Retrieves the current authenticated user's information\n     */\n    getMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const user = (await userService.findOne(\n          { id: req.user!.id },\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (user) delete user[key as keyof User];\n        });\n\n        if (interceptors?.afterGetMe) {\n          req.responseData = { data: user };\n          res.locals.data = { data: user };\n          req.responseStatus = 200;\n          res.locals.status = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: user });\n      }\n    ),\n\n    /**\n     * Updates the current authenticated user's information\n     */\n    updateMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        if (\"password\" in req.body)\n          throw new AppError(\n            \"In order to update password use the update-password endpoint.\",\n            400,\n            {},\n            \"InvalidFieldPassword\"\n          );\n\n        const user = (await userService.updateOne(\n          { id: req.user!.id },\n          req.body,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          if (user) delete user[key as keyof User];\n        });\n\n        if (interceptors?.afterUpdateMe) {\n          req.responseData = { data: user };\n          res.locals.data = { data: user };\n          req.responseStatus = 200;\n          res.locals.status = 200;\n          return next();\n        }\n\n        res.status(200).json({ data: user });\n      }\n    ),\n\n    /**\n     * Logs out the current user by invalidating their access token cookie\n     */\n    logout: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        res.cookie(\"arkos_access_token\", \"no-token\", {\n          expires: new Date(Date.now() + 10 * 1000),\n          httpOnly: true,\n        });\n\n        if (interceptors?.afterLogout) {\n          req.responseData = null;\n          res.locals.data = null;\n          req.responseStatus = 204;\n          res.locals.status = 204;\n          return next();\n        }\n\n        res.status(204).json();\n      }\n    ),\n\n    /**\n     * Authenticates a user using configurable username field and password\n     * Username field can be specified in query parameter or config\n     *\n     * Supports nested fields and array queries (e.g., \"profile.nickname\", \"phones.some.number\")\n     */\n    login: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const authConfigs = getArkosConfig()?.authentication;\n\n        const usernameField = determineUsernameField(req);\n\n        // For the error message, we only care about the top-level field name\n        const lastField =\n          usernameField.split(\".\")[usernameField.split(\".\").length - 1];\n\n        const usernameValue = req.body[lastField];\n\n        const { password } = req.body;\n\n        if (!usernameValue || !password)\n          return next(\n            new AppError(`Please provide both ${lastField} and password`, 400)\n          );\n\n        // Create appropriate where clause for the query\n        let whereClause: Record<string, any>;\n\n        if (usernameField?.includes?.(\".\")) {\n          // For nested paths, we need to extract the actual value to search for\n          const valueToFind = getNestedValue(req.body, usernameField);\n          if (valueToFind === undefined) {\n            return next(new AppError(`Invalid ${usernameField} provided`, 400));\n          }\n          whereClause = createPrismaWhereClause(usernameField, valueToFind);\n        } else {\n          // Simple field case\n          whereClause = { [usernameField]: usernameValue };\n        }\n\n        // Use findFirst instead of findUnique for complex queries\n        const user = (await userService.findOne(\n          whereClause,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (\n          !user ||\n          !(await authService.isCorrectPassword(password, user.password))\n        ) {\n          return next(new AppError(`Incorrect ${lastField} or password`, 401));\n        }\n\n        const token = authService.signJwtToken(user.id!);\n\n        const cookieOptions: CookieOptions = {\n          expires: new Date(\n            Date.now() +\n              Number(\n                toMs(\n                  authConfigs?.jwt?.expiresIn ||\n                    (process.env.JWT_EXPIRES_IN as MsDuration) ||\n                    (arkosEnv.JWT_EXPIRES_IN as MsDuration)\n                )\n              )\n          ),\n          httpOnly:\n            authConfigs?.jwt?.cookie?.httpOnly ||\n            process.env.JWT_COOKIE_HTTP_ONLY === \"true\" ||\n            true,\n          secure:\n            authConfigs?.jwt?.cookie?.secure ||\n            process.env.JWT_COOKIE_SECURE === \"true\" ||\n            req.secure ||\n            req.headers[\"x-forwarded-proto\"] === \"https\",\n          sameSite:\n            authConfigs?.jwt?.cookie?.sameSite ||\n            (process.env.JWT_COOKIE_SAME_SITE as\n              | \"none\"\n              | \"lax\"\n              | \"strict\"\n              | undefined) ||\n            (process.env.NODE_ENV === \"production\" ? \"none\" : \"lax\"),\n        };\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"response-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        ) {\n          req.responseData = { accessToken: token };\n          res.locals.data = { accessToken: token };\n        }\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"cookie-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        )\n          res.cookie(\"arkos_access_token\", token, cookieOptions);\n\n        req.accessToken = token;\n\n        if (interceptors?.afterLogin) {\n          req.additionalData = { user };\n          res.locals.additional = { user };\n          req.responseStatus = 200;\n          res.locals.status = 200;\n          return next();\n        }\n\n        if (\n          authConfigs?.login?.sendAccessTokenThrough === \"response-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        ) {\n          res.status(200).json(req.responseData);\n        } else if (\n          authConfigs?.login?.sendAccessTokenThrough === \"cookie-only\" ||\n          authConfigs?.login?.sendAccessTokenThrough === \"both\" ||\n          !authConfigs?.login?.sendAccessTokenThrough\n        )\n          res.status(200).send();\n      }\n    ),\n\n    /**\n     * Creates a new user account using the userService\n     */\n    signup: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const user = (await userService.createOne(\n          req.body,\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (interceptors?.afterSignup) {\n          req.responseData = { data: user };\n          res.locals.data = { data: user };\n          req.responseStatus = 201;\n          res.locals.status = 201;\n          return next();\n        }\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          delete user[key as keyof User];\n        });\n\n        res.status(201).json({ data: user });\n      }\n    ),\n    /**\n     * Marks user account as self-deleted by setting deletedSelfAccountAt timestamp\n     */\n    deleteMe: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const userId = req.user!.id; // Assuming the authenticated user's ID is available in req.user\n\n        const updatedUser = (await userService.updateOne(\n          { id: userId },\n          {\n            deletedSelfAccountAt: new Date().toISOString(),\n          },\n          req.prismaQueryOptions || {}\n        )) as Record<string, any>;\n\n        if (interceptors?.afterDeleteMe) {\n          req.responseData = { data: updatedUser };\n          res.locals.data = { data: updatedUser };\n          req.responseStatus = 200;\n          res.locals.status = 200;\n          return next();\n        }\n\n        Object.keys(defaultExcludedUserFields).forEach((key) => {\n          delete updatedUser[key as keyof User];\n        });\n\n        res.status(200).json({\n          message: \"Account deleted successfully\",\n        });\n      }\n    ),\n\n    /**\n     * Updates the password of the authenticated user\n     */\n    updatePassword: catchAsync(\n      async (\n        req: ArkosRequest,\n        res: ArkosResponse,\n        next: ArkosNextFunction\n      ) => {\n        const { currentPassword, newPassword } = req.body;\n\n        if (!currentPassword || !newPassword)\n          return next(\n            new AppError(\"currentPassword and newPassword are required\", 400)\n          );\n\n        const user = req.user;\n\n        if (!user || user?.isActive === false || user?.deletedSelfAccountAt)\n          return next(new AppError(\"User not found!\", 404));\n\n        // Check if the current password is correct\n        const isPasswordCorrect = await authService.isCorrectPassword(\n          String(currentPassword),\n          String(user.password)\n        );\n\n        const configs = getArkosConfig();\n        const initAuthConfigs = configs?.authentication;\n\n        if (!isPasswordCorrect)\n          return next(new AppError(\"Current password is incorrect.\", 400));\n\n        // Check password strength (optional but recommended)\n        if (\n          !authService.isPasswordStrong(String(newPassword)) &&\n          !configs?.validation\n        ) {\n          return next(\n            new AppError(\n              initAuthConfigs?.passwordValidation?.message ||\n                \"The new password must contain at least one uppercase letter, one lowercase letter, and one number\",\n              400\n            )\n          );\n        }\n\n        // Update the password\n        await userService.updateOne(\n          { id: user.id },\n          {\n            password: await authService.hashPassword(newPassword),\n            passwordChangedAt: new Date(Date.now()),\n          }\n        );\n\n        if (interceptors?.afterUpdatePassword) {\n          req.additionalData = {\n            user,\n          };\n          req.responseData = {\n            status: \"success\",\n            message: \"Password updated successfully!\",\n          };\n          res.locals.data = {\n            status: \"success\",\n            message: \"Password updated successfully!\",\n          };\n          req.responseStatus = 200;\n          res.locals.status = 200;\n          return next();\n        }\n\n        res.status(200).json({\n          status: \"success\",\n          message: \"Password updated successfully!\",\n        });\n      }\n    ),\n\n    findManyAuthAction: catchAsync(\n      async (_: ArkosRequest, res: ArkosResponse) => {\n        const arkosConfig = getArkosConfig();\n        const authActions = authActionService.getAll()?.map((authAction) => {\n          if (arkosConfig?.authentication?.mode === \"dynamic\")\n            delete (authAction as any)?.roles;\n          return authAction;\n        });\n\n        res.json({\n          total: authActions.length,\n          results: authActions.length,\n          data: authActions,\n        });\n      }\n    ),\n\n    findOneAuthAction: catchAsync(\n      async (req: ArkosRequest, res: ArkosResponse) => {\n        const arkosConfig = getArkosConfig();\n        const resourceName = req.params?.resourceName;\n\n        if (!resourceName)\n          throw new AppError(`Please provide a resoureName`, 400);\n\n        const authActions = authActionService\n          .getByResource(req.params?.resourceName)\n          ?.map((authAction) => {\n            if (arkosConfig?.authentication?.mode === \"dynamic\")\n              delete (authAction as any)?.roles;\n            return authAction;\n          });\n\n        if (!authActions)\n          throw new AppError(\n            `No auth action with resource name ${resourceName}`,\n            404\n          );\n\n        res.json({\n          total: authActions.length,\n          results: authActions.length,\n          data: authActions,\n        });\n      }\n    ),\n  };\n};\n"]}

package/dist/esm/modules/auth/auth.router.js

@@ -1 +1,76 @@
-"use strict";import{Router as A}from"express";import{authControllerFactory as y}from"./auth.controller.js";import i from"./auth.service.js";import w from"express-rate-limit";import{getModuleComponents as b}from"../../utils/dynamic-loader.js";import{addPrismaQueryOptionsToRequest as d,handleRequestBodyValidationAndTransformation as l,sendResponse as s}from"../base/base.middlewares.js";import E from"../../utils/helpers/deepmerge.helper.js";import{processMiddleware as t}from"../../utils/helpers/routers.helpers.js";import{isEndpointDisabled as r}from"../base/utils/helpers/base.router.helpers.js";const a=A();export async function getAuthRouter(g){const{interceptors:e,dtos:h,schemas:m,prismaQueryOptions:u,router:M}=b("auth")||{},o=M?.config||{},n=await y(e);if(o?.disable===!0)return a;const p=c=>{const f=g?.validation;if(f?.resolver==="class-validator")return h?.[c];if(f?.resolver==="zod")return m?.[c]};return r(o,"getMe")||a.get("/users/me",i.authenticate,d(u,"getMe"),...t(e?.beforeGetMe),n.getMe,...t(e?.afterGetMe),s,...t(e?.onGetMeError,{type:"error"})),r(o,"updateMe")||a.patch("/users/me",i.authenticate,l(p("updateMe")),d(u,"updateMe"),...t(e?.beforeUpdateMe),n.updateMe,...t(e?.afterUpdateMe),s,...t(e?.onUpdateMeError,{type:"error"})),r(o,"deleteMe")||a.delete("/users/me",i.authenticate,d(u,"deleteMe"),...t(e?.beforeDeleteMe),n.deleteMe,...t(e?.afterDeleteMe),s,...t(e?.onDeleteMeError,{type:"error"})),(!r(o,"login")||!r(o,"logout")||!r(o,"signup")||!r(o,"updatePassword"))&&a.use("/auth",w(E({windowMs:5e3,limit:10,standardHeaders:"draft-7",legacyHeaders:!1,handler:(c,f)=>{f.status(429).json({message:"Too many requests, please try again later"})}},g?.authentication?.requestRateLimitOptions||{}))),r(o,"login")||a.post("/auth/login",l(p("login")),d(u,"login"),...t(e?.beforeLogin),n.login,...t(e?.afterLogin),s,...t(e?.onLoginError,{type:"error"})),r(o,"logout")||a.delete("/auth/logout",i.authenticate,...t(e?.beforeLogout),n.logout,...t(e?.afterLogout),s,...t(e?.onLogoutError,{type:"error"})),r(o,"signup")||a.post("/auth/signup",l(p("signup")),d(u,"signup"),...t(e?.beforeSignup),n.signup,...t(e?.afterSignup),s,...t(e?.onSignupError,{type:"error"})),r(o,"updatePassword")||a.post("/auth/update-password",i.authenticate,l(p("updatePassword")),d(u,"updatePassword"),...t(e?.beforeUpdatePassword),n.updatePassword,...t(e?.afterUpdatePassword),s,...t(e?.onUpdatePasswordError,{type:"error"})),r(o,"findManyAuthAction")||a.get("/auth-actions",i.authenticate,i.handleAccessControl("View","auth-action"),...t(e?.beforeFindManyAuthAction),n.findManyAuthAction,...t(e?.afterFindManyAuthAction),s,...t(e?.onFindManyAuthActionError,{type:"error"})),r(o,"findOneAuthAction")||a.get("/auth-actions/:resourceName",i.authenticate,i.handleAccessControl("View","auth-action"),...t(e?.beforeFindOneAuthAction),n.findOneAuthAction,...t(e?.afterFindOneAuthAction),s,...t(e?.onFindOneAuthActionError,{type:"error"})),a}
+import { Router } from "express";
+import { authControllerFactory } from "./auth.controller.js";
+import authService from "./auth.service.js";
+import rateLimit from "express-rate-limit";
+import { getModuleComponents } from "../../utils/dynamic-loader.js";
+import { addPrismaQueryOptionsToRequest, handleRequestBodyValidationAndTransformation, sendResponse, } from "../base/base.middlewares.js";
+import deepmerge from "../../utils/helpers/deepmerge.helper.js";
+import { processMiddleware } from "../../utils/helpers/routers.helpers.js";
+import { isEndpointDisabled } from "../base/utils/helpers/base.router.helpers.js";
+const router = Router();
+export async function getAuthRouter(arkosConfigs) {
+    const { interceptors, dtos, schemas, prismaQueryOptions, router: customRouterModule, } = getModuleComponents("auth") || {};
+    const routerConfig = customRouterModule?.config || {};
+    const authController = await authControllerFactory(interceptors);
+    if (routerConfig?.disable === true)
+        return router;
+    const getValidationSchemaOrDto = (key) => {
+        const validationConfigs = arkosConfigs?.validation;
+        if (validationConfigs?.resolver === "class-validator") {
+            return dtos?.[key];
+        }
+        else if (validationConfigs?.resolver === "zod") {
+            return schemas?.[key];
+        }
+        return undefined;
+    };
+    if (!isEndpointDisabled(routerConfig, "getMe")) {
+        router.get("/users/me", authService.authenticate, addPrismaQueryOptionsToRequest(prismaQueryOptions, "getMe"), ...processMiddleware(interceptors?.beforeGetMe), authController.getMe, ...processMiddleware(interceptors?.afterGetMe), sendResponse, ...processMiddleware(interceptors?.onGetMeError, { type: "error" }));
+    }
+    if (!isEndpointDisabled(routerConfig, "updateMe")) {
+        router.patch("/users/me", authService.authenticate, handleRequestBodyValidationAndTransformation(getValidationSchemaOrDto("updateMe")), addPrismaQueryOptionsToRequest(prismaQueryOptions, "updateMe"), ...processMiddleware(interceptors?.beforeUpdateMe), authController.updateMe, ...processMiddleware(interceptors?.afterUpdateMe), sendResponse, ...processMiddleware(interceptors?.onUpdateMeError, { type: "error" }));
+    }
+    if (!isEndpointDisabled(routerConfig, "deleteMe")) {
+        router.delete("/users/me", authService.authenticate, addPrismaQueryOptionsToRequest(prismaQueryOptions, "deleteMe"), ...processMiddleware(interceptors?.beforeDeleteMe), authController.deleteMe, ...processMiddleware(interceptors?.afterDeleteMe), sendResponse, ...processMiddleware(interceptors?.onDeleteMeError, { type: "error" }));
+    }
+    if (!isEndpointDisabled(routerConfig, "login") ||
+        !isEndpointDisabled(routerConfig, "logout") ||
+        !isEndpointDisabled(routerConfig, "signup") ||
+        !isEndpointDisabled(routerConfig, "updatePassword")) {
+        router.use("/auth", rateLimit(deepmerge({
+            windowMs: 5000,
+            limit: 10,
+            standardHeaders: "draft-7",
+            legacyHeaders: false,
+            handler: (_, res) => {
+                res.status(429).json({
+                    message: "Too many requests, please try again later",
+                });
+            },
+        }, arkosConfigs?.authentication?.requestRateLimitOptions || {})));
+    }
+    if (!isEndpointDisabled(routerConfig, "login")) {
+        router.post("/auth/login", handleRequestBodyValidationAndTransformation(getValidationSchemaOrDto("login")), addPrismaQueryOptionsToRequest(prismaQueryOptions, "login"), ...processMiddleware(interceptors?.beforeLogin), authController.login, ...processMiddleware(interceptors?.afterLogin), sendResponse, ...processMiddleware(interceptors?.onLoginError, { type: "error" }));
+    }
+    if (!isEndpointDisabled(routerConfig, "logout")) {
+        router.delete("/auth/logout", authService.authenticate, ...processMiddleware(interceptors?.beforeLogout), authController.logout, ...processMiddleware(interceptors?.afterLogout), sendResponse, ...processMiddleware(interceptors?.onLogoutError, { type: "error" }));
+    }
+    if (!isEndpointDisabled(routerConfig, "signup")) {
+        router.post("/auth/signup", handleRequestBodyValidationAndTransformation(getValidationSchemaOrDto("signup")), addPrismaQueryOptionsToRequest(prismaQueryOptions, "signup"), ...processMiddleware(interceptors?.beforeSignup), authController.signup, ...processMiddleware(interceptors?.afterSignup), sendResponse, ...processMiddleware(interceptors?.onSignupError, { type: "error" }));
+    }
+    if (!isEndpointDisabled(routerConfig, "updatePassword")) {
+        router.post("/auth/update-password", authService.authenticate, handleRequestBodyValidationAndTransformation(getValidationSchemaOrDto("updatePassword")), addPrismaQueryOptionsToRequest(prismaQueryOptions, "updatePassword"), ...processMiddleware(interceptors?.beforeUpdatePassword), authController.updatePassword, ...processMiddleware(interceptors?.afterUpdatePassword), sendResponse, ...processMiddleware(interceptors?.onUpdatePasswordError, {
+            type: "error",
+        }));
+    }
+    if (!isEndpointDisabled(routerConfig, "findManyAuthAction"))
+        router.get("/auth-actions", authService.authenticate, authService.handleAccessControl("View", "auth-action"), ...processMiddleware(interceptors?.beforeFindManyAuthAction), authController.findManyAuthAction, ...processMiddleware(interceptors?.afterFindManyAuthAction), sendResponse, ...processMiddleware(interceptors?.onFindManyAuthActionError, {
+            type: "error",
+        }));
+    if (!isEndpointDisabled(routerConfig, "findOneAuthAction"))
+        router.get("/auth-actions/:resourceName", authService.authenticate, authService.handleAccessControl("View", "auth-action"), ...processMiddleware(interceptors?.beforeFindOneAuthAction), authController.findOneAuthAction, ...processMiddleware(interceptors?.afterFindOneAuthAction), sendResponse, ...processMiddleware(interceptors?.onFindOneAuthActionError, {
+            type: "error",
+        }));
+    return router;
+}
+//# sourceMappingURL=auth.router.js.map