arkos 1.4.1-canary.7 → 1.4.2-beta

package/dist/cjs/modules/auth/auth.service.js

@@ -180,10 +180,12 @@ class AuthService {
         const prisma = (0, prisma_helpers_1.getPrismaInstance)();
         let token;
         if (req?.headers?.authorization &&
-            req?.headers?.authorization.startsWith("Bearer")) {
+            req?.headers?.authorization.startsWith("Bearer") &&
+            req?.headers?.authorization.split?.(" ")?.[1])
             token = req?.headers?.authorization.split(" ")[1];
-        }
-        else if (req?.cookies?.arkos_access_token !== "no-token" && req.cookies) {
+        if (!token &&
+            req?.cookies?.arkos_access_token !== "no-token" &&
+            req.cookies) {
             token = req?.cookies?.arkos_access_token;
         }
         if (!token)

package/dist/cjs/modules/auth/auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.service.ts"],"names":[],"mappings":";;;;;;AAAA,gEAAgD;AAChD,wDAA8B;AAE9B,qFAA4D;AAC5D,iFAAwD;AACxD,+DAAoD;AACpD,yCAA8C;AAC9C,sEAA6C;AAC7C,uEAAuE;AAavE,qFAA2E;AAC3E,+DAA6E;AAC7E,+CAAgD;AAChD,mEAGoC;AACpC,+FAAqE;AACrE,mFAGkD;AAKlD,MAAa,WAAW;IAAxB;QAIE,uBAAkB,GAAgC,EAAE,CAAC;QA8arD,iBAAY,GAAG,IAAA,qBAAU,EACvB,KAAK,EAAE,GAAiB,EAAE,CAAgB,EAAE,IAAuB,EAAE,EAAE;YACrE,IAAI,IAAA,8CAAuB,GAAE;gBAC3B,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAS,CAAC;YAC5D,IAAI,EAAE,CAAC;QACT,CAAC,CACF,CAAC;IAsFJ,CAAC;IAhgBC,YAAY,CACV,EAAmB,EACnB,SAA+B,EAC/B,MAAe;QAEf,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,IAAA,uBAAc,GAAE,CAAC;QAErD,IACE,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM;YAClC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU;YACvB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;YAErB,MAAM,IAAI,mBAAQ,CAChB,mCAAmC,EACnC,GAAG,EACH,wBAAwB,CACzB,CAAC;QAEJ,MAAM;YACJ,MAAM;gBACN,OAAO,EAAE,GAAG,EAAE,MAAM;gBACpB,OAAO,CAAC,GAAG,CAAC,UAAU;gBACtB,mBAAQ,CAAC,UAAU,CAAC;QAEtB,SAAS,GAAG,CAAC,SAAS;YACpB,OAAO,EAAE,GAAG,EAAE,SAAS;YACvB,OAAO,CAAC,GAAG,CAAC,cAAc;YAC1B,mBAAQ,CAAC,cAAc,CAAmC,CAAC;QAE7D,OAAO,sBAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YAC9B,SAAS,EAAE,SAAuB;SACnC,CAAC,CAAC;IACL,CAAC;IAoBD,mBAAmB,CAAC,GAAiB;QACnC,MAAM,WAAW,GAAG,IAAA,uBAAc,GAAE,CAAC;QACrC,MAAM,WAAW,GAAG,WAAW,EAAE,cAAc,CAAC;QAEhD,IAAI,CAAC,GAAG;YACN,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAExE,MAAM,QAAQ,GACZ,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;YACjC,OAAO,CAAC,GAAG,CAAC,oBAIC;YACd,KAAK,CAAC;QAER,OAAO;YACL,OAAO,EAAE,IAAI,IAAI,CACf,IAAI,CAAC,GAAG,EAAE;gBACR,MAAM,CACJ,IAAA,8BAAI,EACF,WAAW,EAAE,GAAG,EAAE,SAAS;oBACxB,OAAO,CAAC,GAAG,CAAC,cAA6B;oBACzC,mBAAQ,CAAC,cAA6B,CAC1C,CACF,CACJ;YACD,QAAQ,EACN,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;gBAClC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,SAAS;oBAC7C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM;oBAC7C,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI;YACN,MAAM,EACJ,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM;gBAChC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM;oBACvC,GAAG,CAAC,MAAM;oBACV,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO;oBAC5C,QAAQ,KAAK,MAAM,CAAC;YACxB,QAAQ;SACT,CAAC;IACJ,CAAC;IAaD,gBAAgB,CAAC,QAAgB;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC;IASD,KAAK,CAAC,iBAAiB,CACrB,iBAAyB,EACzB,YAAoB;QAEpB,OAAO,MAAM,kBAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAC/D,CAAC;IAQD,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,OAAO,MAAM,kBAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAmBM,gBAAgB,CAAC,QAAgB;QACtC,MAAM,eAAe,GAAG,IAAA,uBAAc,GAAE,EAAE,cAAc,CAAC;QAEzD,MAAM,mBAAmB,GACvB,eAAe,EAAE,kBAAkB,EAAE,KAAK;YAC1C,oCAAoC,CAAC;QACvC,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IASD,wBAAwB,CAAC,IAAU,EAAE,YAAoB;QACvD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,kBAAkB,GAAG,QAAQ,CACjC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAC/C,EAAE,CACH,CAAC;YAEF,OAAO,YAAY,GAAG,kBAAkB,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAUD,KAAK,CAAC,cAAc,CAClB,KAAa,EACb,MAAe;QAEf,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,IAAA,uBAAc,GAAE,CAAC;QAErD,IACE,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM;YAClC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU;YACvB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;YAErB,MAAM,IAAI,mBAAQ,CAChB,kCAAkC,EAClC,GAAG,EACH,8BAA8B,CAC/B,CAAC;QAEJ,MAAM;YACJ,MAAM;gBACN,OAAO,EAAE,GAAG,EAAE,MAAM;gBACpB,OAAO,CAAC,GAAG,CAAC,UAAU;gBACtB,mBAAQ,CAAC,UAAU,CAAC;QAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBACzC,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,OAAyB,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAYS,wBAAwB,CAChC,IAAU,EACV,MAAc,EACd,aAAkC;QAElC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;YAC5B,MAAM,KAAK,CACT,qHAAqH,CACtH,CAAC;QAEJ,IAAI,eAAe,GAAa,EAAE,CAAC;QAEnC,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;YAAE,eAAe,GAAG,aAAa,CAAC;aAC7D,IAAI,aAAa,CAAC,MAAM,CAAC;YAC5B,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;gBACpD,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;gBACvB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAExC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAExE,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;IAWS,KAAK,CAAC,yBAAyB,CACvC,MAAc,EACd,MAAc,EACd,QAAgB;QAEhB,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;QACnC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YACxC,KAAK,EAAE;gBACL,MAAM;gBACN,IAAI,EAAE;oBACJ,WAAW,EAAE;wBACX,IAAI,EAAE;4BACJ,QAAQ;4BACR,MAAM;yBACP;qBACF;iBACF;aACF;YACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC,CAAC;IACN,CAAC;IAUD,mBAAmB,CACjB,MAAoB,EACpB,QAAgB,EAChB,aAAmC;QAEnC,IACE,CAAC,aAAa;YACd,2BAAU,CAAC,IAAI,CACb,CAAC,SAAS,EAAE,EAAE,CAAC,IAAA,iBAAS,EAAC,SAAS,CAAC,KAAK,IAAA,iBAAS,EAAC,QAAQ,CAAC,CAC5D;YAED,aAAa,GAAG,IAAA,oCAAmB,EAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC;QAE5E,6BAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEvD,OAAO,IAAA,qBAAU,EACf,KAAK,EAAE,GAAiB,EAAE,CAAgB,EAAE,IAAuB,EAAE,EAAE;YACrE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,GAAG,CAAC,IAAY,CAAC;gBAC9B,MAAM,OAAO,GAAG,IAAA,uBAAc,GAAE,CAAC;gBAEjC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,IAAI,EAAE,CAAC;oBACP,OAAO;gBACT,CAAC;gBAED,MAAM,yBAAyB,GAAG,IAAI,mBAAQ,CAC5C,kDAAkD,EAClD,GAAG,EACH,EAAE,EACF,sBAAsB,CACvB,CAAC;gBAEF,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;oBAChD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,yBAAyB,CACxD,IAAI,CAAC,EAAE,EACP,MAAM,EACN,QAAQ,CACT,CAAC;oBAEF,IAAI,CAAC,aAAa;wBAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAC7D,CAAC;qBAAM,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtD,IAAI,CAAC,aAAa;wBAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;oBAE3D,MAAM,aAAa,GAAG,IAAI,CAAC,wBAAwB,CACjD,IAAI,EACJ,MAAM,EACN,aAAa,CACd,CAAC;oBAEF,IAAI,CAAC,aAAa;wBAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC,CACF,CAAC;IACJ,CAAC;IAQD,KAAK,CAAC,oBAAoB,CAAC,GAAiB;QAC1C,IAAI,CAAC,IAAA,8CAAuB,GAAE;YAC5B,MAAM,KAAK,CACT,wFAAwF,CACzF,CAAC;QAEJ,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;QAEnC,IAAI,KAAyB,CAAC;QAE9B,IACE,GAAG,EAAE,OAAO,EAAE,aAAa;YAC3B,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,EAChD,CAAC;YACD,KAAK,GAAG,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,GAAG,EAAE,OAAO,EAAE,kBAAkB,KAAK,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC1E,KAAK,GAAG,GAAG,EAAE,OAAO,EAAE,kBAAkB,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC,KAAK;YAAE,MAAM,uCAAkB,CAAC;QAErC,IAAI,OAAmC,CAAC;QAExC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,yCAAoB,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,EAAE;YAAE,MAAM,yCAAoB,CAAC;QAC7C,MAAM,IAAI,GAAe,MAAO,MAAc,CAAC,IAAI,CAAC,UAAU,CAAC;YAC7D,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,mBAAQ,CAChB,wDAAwD,EACxD,GAAG,EACH,EAAE,EACF,oBAAoB,CACrB,CAAC;QAEJ,IACE,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAI,CAAC;YACjD,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC;YAE/B,MAAM,IAAI,mBAAQ,CAChB,sDAAsD,EACtD,GAAG,EACH,EAAE,EACF,iBAAiB,CAClB,CAAC;QAEJ,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAyBD,2BAA2B,CACzB,MAAoB,EACpB,qBAA+D;QAE/D,IAAI,qBAAqB,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;YACvE,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,KAAK;gBAAE,OAAO,2BAAQ,CAAC;iBACxD,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAC5E,CAAC;;YAAM,OAAO,IAAI,CAAC,YAAY,CAAC;QAEhC,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAyBD,UAAU,CACR,MAAc,EACd,QAAgB,EAChB,aAAmC;QAGnC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,KAAK,CAAC;QAEhC,IAAI,KAAK,EAAE,QAAQ,CAAC,0CAA0C,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;QAEJ,6BAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEvD,OAAO,KAAK,EAAE,IAAqC,EAAoB,EAAE;YAEvE,MAAM,OAAO,GAAG,IAAA,uBAAc,GAAE,CAAC;YAEjC,IAAI,CAAC,IAAA,4CAAqB,GAAE;gBAC1B,MAAM,KAAK,CACT,2FAA2F,CAC5F,CAAC;YAEJ,IAAI,CAAC,IAAI;gBAAE,MAAM,uCAAkB,CAAC;YACpC,IAAI,IAAI,CAAC,WAAW;gBAAE,OAAO,IAAI,CAAC;YAElC,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBAChD,OAAO,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC1E,CAAC;iBAAM,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtD,IAAI,CAAC,aAAa,IAAI,2BAAU,CAAC,QAAQ,CAAC,IAAA,iBAAS,EAAC,QAAQ,CAAC,CAAC;oBAC5D,aAAa,GAAG,IAAA,oCAAmB,EAAC,IAAA,iBAAS,EAAC,QAAQ,CAAC,CAAC,EAAE,WAAW;wBACnE,EAAE,aAAa,CAAC;gBAEpB,OAAO,CACL,CAAC,CAAC,aAAa;oBACf,IAAI,CAAC,wBAAwB,CAAC,IAAW,EAAE,MAAM,EAAE,aAAa,CAAC,CAClE,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;IACJ,CAAC;CACF;AA9gBD,kCA8gBC;AAKD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,kBAAe,WAAW,CAAC","sourcesContent":["import jwt, { SignOptions } from \"jsonwebtoken\";\nimport bcrypt from \"bcryptjs\";\nimport { User } from \"../../types\";\nimport catchAsync from \"../error-handler/utils/catch-async\";\nimport AppError from \"../error-handler/utils/app-error\";\nimport { callNext } from \"../base/base.middlewares\";\nimport { getArkosConfig } from \"../../server\";\nimport arkosEnv from \"../../utils/arkos-env\";\nimport { getPrismaInstance } from \"../../utils/helpers/prisma.helpers\";\nimport {\n  ArkosRequest,\n  ArkosResponse,\n  ArkosNextFunction,\n  ArkosRequestHandler,\n} from \"../../types\";\nimport {\n  AuthJwtPayload,\n  AccessAction,\n  AccessControlConfig,\n  AuthenticationControlConfig,\n} from \"../../types/auth\";\nimport { MsDuration, toMs } from \"./utils/helpers/auth.controller.helpers\";\nimport { appModules, getModuleComponents } from \"../../utils/dynamic-loader\";\nimport { kebabCase } from \"../../exports/utils\";\nimport {\n  invaliAuthTokenError,\n  loginRequiredError,\n} from \"./utils/auth-error-objects\";\nimport authActionService from \"./utils/services/auth-action.service\";\nimport {\n  isAuthenticationEnabled,\n  isUsingAuthentication,\n} from \"../../utils/helpers/arkos-config.helpers\";\n\n/**\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\n */\nexport class AuthService {\n  /**\n   * Object containing a combination of actions per resource, tracked by each set of calls of `authService.handleAccessControl`, this can be accessed through the `authService` object or through the endpoint\n   */\n  actionsPerResource: Record<string, Set<string>> = {};\n\n  /**\n   * Signs a JWT token for the user.\n   *\n   * @param {number | string} id - The unique identifier of the user to generate the token for.\n   * @param {string | number} [expiresIn] - The expiration time for the token. Defaults to environment variable `JWT_EXPIRES_IN`.\n   * @param {string} [secret] - The secret key used to sign the token. Defaults to environment variable `JWT_SECRET`.\n   * @returns {string} The signed JWT token.\n   */\n  signJwtToken(\n    id: number | string,\n    expiresIn?: MsDuration | number,\n    secret?: string\n  ): string {\n    const { authentication: configs } = getArkosConfig();\n\n    if (\n      process.env.ARKOS_BUILD === \"true\" &&\n      !process.env.JWT_SECRET &&\n      !configs?.jwt?.secret\n    )\n      throw new AppError(\n        \"Missing JWT secret on production!\",\n        500,\n        \"MissingJWTOnProduction\"\n      );\n\n    secret =\n      secret ||\n      configs?.jwt?.secret ||\n      process.env.JWT_SECRET ||\n      arkosEnv.JWT_SECRET;\n\n    expiresIn = (expiresIn ||\n      configs?.jwt?.expiresIn ||\n      process.env.JWT_EXPIRES_IN ||\n      arkosEnv.JWT_EXPIRES_IN) as keyof SignOptions[\"expiresIn\"];\n\n    return jwt.sign({ id }, secret, {\n      expiresIn: expiresIn as MsDuration,\n    });\n  }\n\n  /**\n   * Retrieves cookie configuration options for JWT authentication.\n   *\n   * Merges configuration from multiple sources in order of precedence:\n   * 1. Arkos configuration file\n   * 2. Environment variables\n   * 3. Request properties (for secure flag)\n   * 4. Default fallback values\n   *\n   * @param req - ArkosRequest object used to determine if the connection is secure\n   * @returns Cookie options object with expires, httpOnly, secure, and sameSite properties\n   *\n   * @example\n   * ```typescript\n   * const cookieOptions = authService.getJwtCookieOptions(req);\n   * res.cookie('jwt', token, cookieOptions);\n   * ```\n   */\n  getJwtCookieOptions(req: ArkosRequest) {\n    const arkosConfig = getArkosConfig();\n    const authConfigs = arkosConfig?.authentication;\n\n    if (!req)\n      throw new Error(\"Missing req object in order get jwt cookie options\");\n\n    const sameSite =\n      authConfigs?.jwt?.cookie?.sameSite ||\n      (process.env.JWT_COOKIE_SAME_SITE as\n        | \"none\"\n        | \"lax\"\n        | \"strict\"\n        | undefined) ||\n      \"lax\";\n\n    return {\n      expires: new Date(\n        Date.now() +\n          Number(\n            toMs(\n              authConfigs?.jwt?.expiresIn ||\n                (process.env.JWT_EXPIRES_IN as MsDuration) ||\n                (arkosEnv.JWT_EXPIRES_IN as MsDuration)\n            )\n          )\n      ),\n      httpOnly:\n        authConfigs?.jwt?.cookie?.httpOnly ??\n        (process.env.JWT_COOKIE_HTTP_ONLY !== undefined\n          ? process.env.JWT_COOKIE_HTTP_ONLY === \"true\"\n          : undefined) ??\n        true,\n      secure:\n        authConfigs?.jwt?.cookie?.secure ??\n        (process.env.JWT_COOKIE_SECURE === \"true\" ||\n          req.secure ||\n          req.headers[\"x-forwarded-proto\"] === \"https\" ||\n          sameSite === \"none\"),\n      sameSite,\n    };\n  }\n\n  /**\n   * Is used by default internally by Arkos under `BaseService` class to check if the password is already hashed.\n   *\n   * This was just added to prevent unwanted errors when someone just forgets that the `BaseService` class will automatically hash the password field using `authService.hashPassword` by default.\n   *\n   * So now before `BaseService` hashes it will test it.\n   *\n   *\n   * @param password The password to be tested if is hashed\n   * @returns\n   */\n  isPasswordHashed(password: string) {\n    return !Number.isNaN(bcrypt.getRounds(password) * 1);\n  }\n\n  /**\n   * Compares a candidate password with the stored user password to check if they match.\n   *\n   * @param {string} candidatePassword - The password provided by the user during login.\n   * @param {string} userPassword - The password stored in the database.\n   * @returns {Promise<boolean>} Returns true if the passwords match, otherwise false.\n   */\n  async isCorrectPassword(\n    candidatePassword: string,\n    userPassword: string\n  ): Promise<boolean> {\n    return await bcrypt.compare(candidatePassword, userPassword);\n  }\n\n  /**\n   * Hashes a plain text password using bcrypt.\n   *\n   * @param {string} password - The password to be hashed.\n   * @returns {Promise<string>} Returns the hashed password.\n   */\n  async hashPassword(password: string): Promise<string> {\n    return await bcrypt.hash(password, 12);\n  }\n\n  /**\n   * Checks if a password is strong, requiring uppercase, lowercase, and numeric characters as the default.\n   *\n   * **NB**: You must pay attention when using custom validation with zod or class-validator, try to use the same regex always.\n   *\n   * **Note**: You can define it when calling arkos.init()\n   * ```ts\n   * arkos.init({\n   *  authentication: {\n   *    passwordValidation:{ regex: /your-desired-regex/, message: 'password must contain...'}\n   *  }\n   * })\n   * ```\n   *\n   * @param {string} password - The password to check.\n   * @returns {boolean} Returns true if the password meets the strength criteria, otherwise false.\n   */\n  public isPasswordStrong(password: string): boolean {\n    const initAuthConfigs = getArkosConfig()?.authentication;\n\n    const strongPasswordRegex =\n      initAuthConfigs?.passwordValidation?.regex ||\n      /^(?=.*[A-Z])(?=.*[a-z])(?=.*\\d).+$/;\n    return strongPasswordRegex.test(password);\n  }\n\n  /**\n   * Checks if a user has changed their password after the JWT was issued.\n   *\n   * @param {User} user - The user object containing the passwordChangedAt field.\n   * @param {number} JWTTimestamp - The timestamp when the JWT was issued.\n   * @returns {boolean} Returns true if the user changed their password after the JWT was issued, otherwise false.\n   */\n  userChangedPasswordAfter(user: User, JWTTimestamp: number): boolean {\n    if (user.passwordChangedAt) {\n      const convertedTimestamp = parseInt(\n        String(user.passwordChangedAt.getTime() / 1000),\n        10\n      );\n\n      return JWTTimestamp < convertedTimestamp;\n    }\n    return false;\n  }\n\n  /**\n   * Verifies the authenticity of a JWT token.\n   *\n   * @param {string} token - The JWT token to verify.\n   * @param {string} [secret] - The secret key used to verify the token. Defaults to environment variable `JWT_SECRET`.\n   * @returns {Promise<AuthJwtPayload>} Returns the decoded JWT payload if the token is valid.\n   * @throws {Error} Throws an error if the token is invalid or expired.\n   */\n  async verifyJwtToken(\n    token: string,\n    secret?: string\n  ): Promise<AuthJwtPayload> {\n    const { authentication: configs } = getArkosConfig();\n\n    if (\n      process.env.ARKOS_BUILD === \"true\" &&\n      !process.env.JWT_SECRET &&\n      !configs?.jwt?.secret\n    )\n      throw new AppError(\n        \"Missing JWT secret in production\",\n        500,\n        \"MissingJWTSecretInProduction\"\n      );\n\n    secret =\n      secret ||\n      configs?.jwt?.secret ||\n      process.env.JWT_SECRET ||\n      arkosEnv.JWT_SECRET;\n\n    return new Promise((resolve, reject) => {\n      jwt.verify(token, secret, (err, decoded) => {\n        if (err) reject(err);\n        else resolve(decoded as AuthJwtPayload);\n      });\n    });\n  }\n\n  /**\n   * Checks if a user has permission for a specific action using static access control rules.\n   * Validates user roles against predefined access control configuration.\n   *\n   * @param user - The user object containing role or roles field\n   * @param action - The action being performed\n   * @param accessControl - Access control configuration (array of roles or object with action-role mappings)\n   * @returns True if user has permission, false otherwise\n   * @throws Error if user doesn't have role/roles field\n   */\n  protected checkStaticAccessControl(\n    user: User,\n    action: string,\n    accessControl: AccessControlConfig\n  ) {\n    if (!user?.role && !user.roles)\n      throw Error(\n        \"Validation Error: In order to use static authentication user needs at least role field or roles for multiple roles.\"\n      );\n\n    let authorizedRoles: string[] = [];\n\n    if (Array.isArray(accessControl)) authorizedRoles = accessControl;\n    else if (accessControl[action])\n      authorizedRoles = Array.isArray(accessControl[action])\n        ? accessControl[action]\n        : accessControl[action].roles || [];\n\n    const userRoles = Array.isArray(user?.roles) ? user.roles : [user.role];\n\n    return !!userRoles.some((role: string) => authorizedRoles.includes(role));\n  }\n\n  /**\n   * Checks if a user has permission for a specific action and resource using dynamic access control.\n   * Queries the database to verify user's role permissions.\n   *\n   * @param userId - The unique identifier of the user\n   * @param action - The action being performed\n   * @param resource - The resource being accessed\n   * @returns Promise resolving to true if user has permission, false otherwise\n   */\n  protected async checkDynamicAccessControl(\n    userId: string,\n    action: string,\n    resource: string\n  ) {\n    const prisma = getPrismaInstance();\n    return !!(await prisma.userRole.findFirst({\n      where: {\n        userId,\n        role: {\n          permissions: {\n            some: {\n              resource,\n              action,\n            },\n          },\n        },\n      },\n      select: { id: true },\n    }));\n  }\n\n  /**\n   * Middleware function to handle access control based on user roles and permissions.\n   *\n   * @param {AccessAction} action - The action being performed (e.g., create, update, delete, view).\n   * @param {string} resource - The resource name that the action is being performed on (e.g., \"User\", \"Post\").\n   * @param {AccessControlConfig} accessControl - The access control configuration.\n   * @returns {ArkosRequestHandler} The middleware function that checks if the user has permission to perform the action.\n   */\n  handleAccessControl(\n    action: AccessAction,\n    resource: string,\n    accessControl?: AccessControlConfig\n  ): ArkosRequestHandler {\n    if (\n      !accessControl &&\n      appModules.some(\n        (appModule) => kebabCase(appModule) === kebabCase(resource)\n      )\n    )\n      accessControl = getModuleComponents(resource)?.authConfigs?.accessControl;\n\n    authActionService.add(action, resource, accessControl);\n\n    return catchAsync(\n      async (req: ArkosRequest, _: ArkosResponse, next: ArkosNextFunction) => {\n        if (req.user) {\n          const user = req.user as User;\n          const configs = getArkosConfig();\n\n          if (user.isSuperUser) {\n            next();\n            return;\n          }\n\n          const notEnoughPermissionsError = new AppError(\n            \"You do not have permission to perfom this action\",\n            403,\n            {},\n            \"NotEnoughPermissions\"\n          );\n\n          if (configs?.authentication?.mode === \"dynamic\") {\n            const hasPermission = await this.checkDynamicAccessControl(\n              user.id,\n              action,\n              resource\n            );\n\n            if (!hasPermission) return next(notEnoughPermissionsError);\n          } else if (configs?.authentication?.mode === \"static\") {\n            if (!accessControl) return next(notEnoughPermissionsError);\n\n            const hasPermission = this.checkStaticAccessControl(\n              user,\n              action,\n              accessControl\n            );\n\n            if (!hasPermission) return next(notEnoughPermissionsError);\n          }\n        }\n\n        next();\n      }\n    );\n  }\n\n  /**\n   * Processes the cookies or authoriation token and returns the user.\n   * @param req\n   * @returns {Promise<User | null>} - if authentication is turned off in arkosConfig it returns null\n   * @throws {AppError} Throws an error if the token is invalid or the user is not logged in.\n   */\n  async getAuthenticatedUser(req: ArkosRequest): Promise<User | null> {\n    if (!isAuthenticationEnabled())\n      throw Error(\n        \"ValidationError: Trying to call getAuthenticatedUser without setting up authentication\"\n      );\n\n    const prisma = getPrismaInstance();\n\n    let token: string | undefined;\n\n    if (\n      req?.headers?.authorization &&\n      req?.headers?.authorization.startsWith(\"Bearer\")\n    ) {\n      token = req?.headers?.authorization.split(\" \")[1];\n    } else if (req?.cookies?.arkos_access_token !== \"no-token\" && req.cookies) {\n      token = req?.cookies?.arkos_access_token;\n    }\n\n    if (!token) throw loginRequiredError;\n\n    let decoded: AuthJwtPayload | undefined;\n\n    try {\n      decoded = await this.verifyJwtToken(token);\n    } catch (err) {\n      throw invaliAuthTokenError;\n    }\n\n    if (!decoded?.id) throw invaliAuthTokenError;\n    const user: any | null = await (prisma as any).user.findUnique({\n      where: { id: String(decoded.id) },\n    });\n\n    if (!user)\n      throw new AppError(\n        \"The user belonging to this token does no longer exists\",\n        401,\n        {},\n        \"UserNoLongerExists\"\n      );\n\n    if (\n      this.userChangedPasswordAfter(user, decoded.iat!) &&\n      !req.path?.includes?.(\"logout\")\n    )\n      throw new AppError(\n        \"User recently changed password! Please log in again.\",\n        401,\n        {},\n        \"PasswordChanged\"\n      );\n\n    req.accessToken = token;\n    return user;\n  }\n\n  /**\n   * Middleware function to authenticate the user based on the JWT token.\n   *\n   * @param {ArkosRequest} req - The request object.\n   * @param {ArkosResponse} res - The response object.\n   * @param {ArkosNextFunction} next - The next middleware function to be called.\n   * @returns {void}\n   */\n  authenticate = catchAsync(\n    async (req: ArkosRequest, _: ArkosResponse, next: ArkosNextFunction) => {\n      if (isAuthenticationEnabled())\n        req.user = (await this.getAuthenticatedUser(req)) as User;\n      next();\n    }\n  );\n\n  /**\n   * Handles authentication control by checking the `authenticationControl` configuration in the `authConfigs`.\n   *\n   * @param {ControllerActions} action - The action being performed (e.g., create, update, delete, view).\n   * @param {AuthenticationControlConfig} authenticationControl - The authentication configuration object.\n   * @returns {ArkosRequestHandler} The middleware function that checks if authentication is required.\n   */\n  handleAuthenticationControl(\n    action: AccessAction,\n    authenticationControl?: AuthenticationControlConfig | undefined\n  ): ArkosRequestHandler {\n    if (authenticationControl && typeof authenticationControl === \"object\") {\n      if (authenticationControl[action] === false) return callNext;\n      else if (authenticationControl[action] === true) return this.authenticate;\n    } else return this.authenticate;\n\n    return this.authenticate;\n  }\n\n  /**\n   * Creates a permission checker function for a specific action and resource.\n   *\n   * PS: This method should be called during application initialization to build permission validators.\n   *\n   * @see {@link https://www.arkosjs.com/docs/advanced-guide/fine-grained-access-control}\n   *\n   * @param action - The action to check permission for (e.g., 'View', 'Create', 'Delete')\n   * @param resource - The resource being accessed, must be in kebabCase (e.g., 'user', 'cart-item', 'order')\n   * @param accessControl - Access control rules (required for static authentication mode), and it is automatically loaded for known modules such as all prisma models, auth and file-upload.\n   * @returns A function that takes a user object and returns a boolean indicating permission status\n   *\n   * @example\n   * ```typescript\n   * const hasViewProductPermission = await authService.permission('View', 'product');\n   *\n   * // Later in handler:\n   * const canAccess = await hasViewProductPermission(user);\n   * if (canAccess) {\n   *   // User has permission\n   * }\n   * ```\n   */\n  permission(\n    action: string,\n    resource: string,\n    accessControl?: AccessControlConfig\n  ) {\n    // Check if called during request handling (deep call stack indicates handler execution)\n    const stack = new Error().stack;\n\n    if (stack?.includes(\"node_modules/express/lib/router/index.js\"))\n      throw new Error(\n        \"authService.permission() should be called during application initialization level.\"\n      );\n\n    authActionService.add(action, resource, accessControl);\n\n    return async (user: Record<string, any> | undefined): Promise<boolean> => {\n      // getArkosConfig must not be called the same time as arkos.init()\n      const configs = getArkosConfig();\n\n      if (!isUsingAuthentication())\n        throw Error(\n          \"Validation Error: Trying to use authService.permission without setting up authentication.\"\n        );\n\n      if (!user) throw loginRequiredError;\n      if (user.isSuperUser) return true;\n\n      if (configs?.authentication?.mode === \"dynamic\") {\n        return await this.checkDynamicAccessControl(user?.id, action, resource);\n      } else if (configs?.authentication?.mode === \"static\") {\n        if (!accessControl && appModules.includes(kebabCase(resource)))\n          accessControl = getModuleComponents(kebabCase(resource))?.authConfigs\n            ?.accessControl;\n\n        return (\n          !!accessControl &&\n          this.checkStaticAccessControl(user as any, action, accessControl)\n        );\n      }\n      return false;\n    };\n  }\n}\n\n/**\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\n */\nconst authService = new AuthService();\n\nexport default authService;\n"]}
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth.service.ts"],"names":[],"mappings":";;;;;;AAAA,gEAAgD;AAChD,wDAA8B;AAE9B,qFAA4D;AAC5D,iFAAwD;AACxD,+DAAoD;AACpD,yCAA8C;AAC9C,sEAA6C;AAC7C,uEAAuE;AAavE,qFAA2E;AAC3E,+DAA6E;AAC7E,+CAAgD;AAChD,mEAGoC;AACpC,+FAAqE;AACrE,mFAGkD;AAKlD,MAAa,WAAW;IAAxB;QAIE,uBAAkB,GAAgC,EAAE,CAAC;QAobrD,iBAAY,GAAG,IAAA,qBAAU,EACvB,KAAK,EAAE,GAAiB,EAAE,CAAgB,EAAE,IAAuB,EAAE,EAAE;YACrE,IAAI,IAAA,8CAAuB,GAAE;gBAC3B,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAS,CAAC;YAC5D,IAAI,EAAE,CAAC;QACT,CAAC,CACF,CAAC;IAsFJ,CAAC;IAtgBC,YAAY,CACV,EAAmB,EACnB,SAA+B,EAC/B,MAAe;QAEf,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,IAAA,uBAAc,GAAE,CAAC;QAErD,IACE,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM;YAClC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU;YACvB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;YAErB,MAAM,IAAI,mBAAQ,CAChB,mCAAmC,EACnC,GAAG,EACH,wBAAwB,CACzB,CAAC;QAEJ,MAAM;YACJ,MAAM;gBACN,OAAO,EAAE,GAAG,EAAE,MAAM;gBACpB,OAAO,CAAC,GAAG,CAAC,UAAU;gBACtB,mBAAQ,CAAC,UAAU,CAAC;QAEtB,SAAS,GAAG,CAAC,SAAS;YACpB,OAAO,EAAE,GAAG,EAAE,SAAS;YACvB,OAAO,CAAC,GAAG,CAAC,cAAc;YAC1B,mBAAQ,CAAC,cAAc,CAAmC,CAAC;QAE7D,OAAO,sBAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YAC9B,SAAS,EAAE,SAAuB;SACnC,CAAC,CAAC;IACL,CAAC;IAoBD,mBAAmB,CAAC,GAAiB;QACnC,MAAM,WAAW,GAAG,IAAA,uBAAc,GAAE,CAAC;QACrC,MAAM,WAAW,GAAG,WAAW,EAAE,cAAc,CAAC;QAEhD,IAAI,CAAC,GAAG;YACN,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAExE,MAAM,QAAQ,GACZ,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;YACjC,OAAO,CAAC,GAAG,CAAC,oBAIC;YACd,KAAK,CAAC;QAER,OAAO;YACL,OAAO,EAAE,IAAI,IAAI,CACf,IAAI,CAAC,GAAG,EAAE;gBACR,MAAM,CACJ,IAAA,8BAAI,EACF,WAAW,EAAE,GAAG,EAAE,SAAS;oBACxB,OAAO,CAAC,GAAG,CAAC,cAA6B;oBACzC,mBAAQ,CAAC,cAA6B,CAC1C,CACF,CACJ;YACD,QAAQ,EACN,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ;gBAClC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,SAAS;oBAC7C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM;oBAC7C,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI;YACN,MAAM,EACJ,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM;gBAChC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM;oBACvC,GAAG,CAAC,MAAM;oBACV,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO;oBAC5C,QAAQ,KAAK,MAAM,CAAC;YACxB,QAAQ;SACT,CAAC;IACJ,CAAC;IAaD,gBAAgB,CAAC,QAAgB;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC;IASD,KAAK,CAAC,iBAAiB,CACrB,iBAAyB,EACzB,YAAoB;QAEpB,OAAO,MAAM,kBAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAC/D,CAAC;IAQD,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,OAAO,MAAM,kBAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAmBM,gBAAgB,CAAC,QAAgB;QACtC,MAAM,eAAe,GAAG,IAAA,uBAAc,GAAE,EAAE,cAAc,CAAC;QAEzD,MAAM,mBAAmB,GACvB,eAAe,EAAE,kBAAkB,EAAE,KAAK;YAC1C,oCAAoC,CAAC;QACvC,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IASD,wBAAwB,CAAC,IAAU,EAAE,YAAoB;QACvD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,kBAAkB,GAAG,QAAQ,CACjC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAC/C,EAAE,CACH,CAAC;YAEF,OAAO,YAAY,GAAG,kBAAkB,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAUD,KAAK,CAAC,cAAc,CAClB,KAAa,EACb,MAAe;QAEf,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,IAAA,uBAAc,GAAE,CAAC;QAErD,IACE,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM;YAClC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU;YACvB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;YAErB,MAAM,IAAI,mBAAQ,CAChB,kCAAkC,EAClC,GAAG,EACH,8BAA8B,CAC/B,CAAC;QAEJ,MAAM;YACJ,MAAM;gBACN,OAAO,EAAE,GAAG,EAAE,MAAM;gBACpB,OAAO,CAAC,GAAG,CAAC,UAAU;gBACtB,mBAAQ,CAAC,UAAU,CAAC;QAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBACzC,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,OAAyB,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAYS,wBAAwB,CAChC,IAAU,EACV,MAAc,EACd,aAAkC;QAElC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;YAC5B,MAAM,KAAK,CACT,qHAAqH,CACtH,CAAC;QAEJ,IAAI,eAAe,GAAa,EAAE,CAAC;QAEnC,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;YAAE,eAAe,GAAG,aAAa,CAAC;aAC7D,IAAI,aAAa,CAAC,MAAM,CAAC;YAC5B,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;gBACpD,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;gBACvB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAExC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAExE,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;IAWS,KAAK,CAAC,yBAAyB,CACvC,MAAc,EACd,MAAc,EACd,QAAgB;QAEhB,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;QACnC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YACxC,KAAK,EAAE;gBACL,MAAM;gBACN,IAAI,EAAE;oBACJ,WAAW,EAAE;wBACX,IAAI,EAAE;4BACJ,QAAQ;4BACR,MAAM;yBACP;qBACF;iBACF;aACF;YACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC,CAAC;IACN,CAAC;IAUD,mBAAmB,CACjB,MAAoB,EACpB,QAAgB,EAChB,aAAmC;QAEnC,IACE,CAAC,aAAa;YACd,2BAAU,CAAC,IAAI,CACb,CAAC,SAAS,EAAE,EAAE,CAAC,IAAA,iBAAS,EAAC,SAAS,CAAC,KAAK,IAAA,iBAAS,EAAC,QAAQ,CAAC,CAC5D;YAED,aAAa,GAAG,IAAA,oCAAmB,EAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC;QAE5E,6BAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEvD,OAAO,IAAA,qBAAU,EACf,KAAK,EAAE,GAAiB,EAAE,CAAgB,EAAE,IAAuB,EAAE,EAAE;YACrE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,GAAG,CAAC,IAAY,CAAC;gBAC9B,MAAM,OAAO,GAAG,IAAA,uBAAc,GAAE,CAAC;gBAEjC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,IAAI,EAAE,CAAC;oBACP,OAAO;gBACT,CAAC;gBAED,MAAM,yBAAyB,GAAG,IAAI,mBAAQ,CAC5C,kDAAkD,EAClD,GAAG,EACH,EAAE,EACF,sBAAsB,CACvB,CAAC;gBAEF,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;oBAChD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,yBAAyB,CACxD,IAAI,CAAC,EAAE,EACP,MAAM,EACN,QAAQ,CACT,CAAC;oBAEF,IAAI,CAAC,aAAa;wBAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAC7D,CAAC;qBAAM,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtD,IAAI,CAAC,aAAa;wBAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;oBAE3D,MAAM,aAAa,GAAG,IAAI,CAAC,wBAAwB,CACjD,IAAI,EACJ,MAAM,EACN,aAAa,CACd,CAAC;oBAEF,IAAI,CAAC,aAAa;wBAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC,CACF,CAAC;IACJ,CAAC;IAQD,KAAK,CAAC,oBAAoB,CAAC,GAAiB;QAC1C,IAAI,CAAC,IAAA,8CAAuB,GAAE;YAC5B,MAAM,KAAK,CACT,wFAAwF,CACzF,CAAC;QAEJ,MAAM,MAAM,GAAG,IAAA,kCAAiB,GAAE,CAAC;QAEnC,IAAI,KAAyB,CAAC;QAE9B,IACE,GAAG,EAAE,OAAO,EAAE,aAAa;YAC3B,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC;YAChD,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAE7C,KAAK,GAAG,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpD,IACE,CAAC,KAAK;YACN,GAAG,EAAE,OAAO,EAAE,kBAAkB,KAAK,UAAU;YAC/C,GAAG,CAAC,OAAO,EACX,CAAC;YACD,KAAK,GAAG,GAAG,EAAE,OAAO,EAAE,kBAAkB,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC,KAAK;YAAE,MAAM,uCAAkB,CAAC;QAErC,IAAI,OAAmC,CAAC;QAExC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,yCAAoB,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,EAAE;YAAE,MAAM,yCAAoB,CAAC;QAC7C,MAAM,IAAI,GAAe,MAAO,MAAc,CAAC,IAAI,CAAC,UAAU,CAAC;YAC7D,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,mBAAQ,CAChB,wDAAwD,EACxD,GAAG,EACH,EAAE,EACF,oBAAoB,CACrB,CAAC;QAEJ,IACE,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAI,CAAC;YACjD,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC;YAE/B,MAAM,IAAI,mBAAQ,CAChB,sDAAsD,EACtD,GAAG,EACH,EAAE,EACF,iBAAiB,CAClB,CAAC;QAEJ,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAyBD,2BAA2B,CACzB,MAAoB,EACpB,qBAA+D;QAE/D,IAAI,qBAAqB,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;YACvE,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,KAAK;gBAAE,OAAO,2BAAQ,CAAC;iBACxD,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAC5E,CAAC;;YAAM,OAAO,IAAI,CAAC,YAAY,CAAC;QAEhC,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAyBD,UAAU,CACR,MAAc,EACd,QAAgB,EAChB,aAAmC;QAGnC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,KAAK,CAAC;QAEhC,IAAI,KAAK,EAAE,QAAQ,CAAC,0CAA0C,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;QAEJ,6BAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEvD,OAAO,KAAK,EAAE,IAAqC,EAAoB,EAAE;YAEvE,MAAM,OAAO,GAAG,IAAA,uBAAc,GAAE,CAAC;YAEjC,IAAI,CAAC,IAAA,4CAAqB,GAAE;gBAC1B,MAAM,KAAK,CACT,2FAA2F,CAC5F,CAAC;YAEJ,IAAI,CAAC,IAAI;gBAAE,MAAM,uCAAkB,CAAC;YACpC,IAAI,IAAI,CAAC,WAAW;gBAAE,OAAO,IAAI,CAAC;YAElC,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBAChD,OAAO,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC1E,CAAC;iBAAM,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtD,IAAI,CAAC,aAAa,IAAI,2BAAU,CAAC,QAAQ,CAAC,IAAA,iBAAS,EAAC,QAAQ,CAAC,CAAC;oBAC5D,aAAa,GAAG,IAAA,oCAAmB,EAAC,IAAA,iBAAS,EAAC,QAAQ,CAAC,CAAC,EAAE,WAAW;wBACnE,EAAE,aAAa,CAAC;gBAEpB,OAAO,CACL,CAAC,CAAC,aAAa;oBACf,IAAI,CAAC,wBAAwB,CAAC,IAAW,EAAE,MAAM,EAAE,aAAa,CAAC,CAClE,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;IACJ,CAAC;CACF;AAphBD,kCAohBC;AAKD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,kBAAe,WAAW,CAAC","sourcesContent":["import jwt, { SignOptions } from \"jsonwebtoken\";\nimport bcrypt from \"bcryptjs\";\nimport { User } from \"../../types\";\nimport catchAsync from \"../error-handler/utils/catch-async\";\nimport AppError from \"../error-handler/utils/app-error\";\nimport { callNext } from \"../base/base.middlewares\";\nimport { getArkosConfig } from \"../../server\";\nimport arkosEnv from \"../../utils/arkos-env\";\nimport { getPrismaInstance } from \"../../utils/helpers/prisma.helpers\";\nimport {\n  ArkosRequest,\n  ArkosResponse,\n  ArkosNextFunction,\n  ArkosRequestHandler,\n} from \"../../types\";\nimport {\n  AuthJwtPayload,\n  AccessAction,\n  AccessControlConfig,\n  AuthenticationControlConfig,\n} from \"../../types/auth\";\nimport { MsDuration, toMs } from \"./utils/helpers/auth.controller.helpers\";\nimport { appModules, getModuleComponents } from \"../../utils/dynamic-loader\";\nimport { kebabCase } from \"../../exports/utils\";\nimport {\n  invaliAuthTokenError,\n  loginRequiredError,\n} from \"./utils/auth-error-objects\";\nimport authActionService from \"./utils/services/auth-action.service\";\nimport {\n  isAuthenticationEnabled,\n  isUsingAuthentication,\n} from \"../../utils/helpers/arkos-config.helpers\";\n\n/**\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\n */\nexport class AuthService {\n  /**\n   * Object containing a combination of actions per resource, tracked by each set of calls of `authService.handleAccessControl`, this can be accessed through the `authService` object or through the endpoint\n   */\n  actionsPerResource: Record<string, Set<string>> = {};\n\n  /**\n   * Signs a JWT token for the user.\n   *\n   * @param {number | string} id - The unique identifier of the user to generate the token for.\n   * @param {string | number} [expiresIn] - The expiration time for the token. Defaults to environment variable `JWT_EXPIRES_IN`.\n   * @param {string} [secret] - The secret key used to sign the token. Defaults to environment variable `JWT_SECRET`.\n   * @returns {string} The signed JWT token.\n   */\n  signJwtToken(\n    id: number | string,\n    expiresIn?: MsDuration | number,\n    secret?: string\n  ): string {\n    const { authentication: configs } = getArkosConfig();\n\n    if (\n      process.env.ARKOS_BUILD === \"true\" &&\n      !process.env.JWT_SECRET &&\n      !configs?.jwt?.secret\n    )\n      throw new AppError(\n        \"Missing JWT secret on production!\",\n        500,\n        \"MissingJWTOnProduction\"\n      );\n\n    secret =\n      secret ||\n      configs?.jwt?.secret ||\n      process.env.JWT_SECRET ||\n      arkosEnv.JWT_SECRET;\n\n    expiresIn = (expiresIn ||\n      configs?.jwt?.expiresIn ||\n      process.env.JWT_EXPIRES_IN ||\n      arkosEnv.JWT_EXPIRES_IN) as keyof SignOptions[\"expiresIn\"];\n\n    return jwt.sign({ id }, secret, {\n      expiresIn: expiresIn as MsDuration,\n    });\n  }\n\n  /**\n   * Retrieves cookie configuration options for JWT authentication.\n   *\n   * Merges configuration from multiple sources in order of precedence:\n   * 1. Arkos configuration file\n   * 2. Environment variables\n   * 3. Request properties (for secure flag)\n   * 4. Default fallback values\n   *\n   * @param req - ArkosRequest object used to determine if the connection is secure\n   * @returns Cookie options object with expires, httpOnly, secure, and sameSite properties\n   *\n   * @example\n   * ```typescript\n   * const cookieOptions = authService.getJwtCookieOptions(req);\n   * res.cookie('jwt', token, cookieOptions);\n   * ```\n   */\n  getJwtCookieOptions(req: ArkosRequest) {\n    const arkosConfig = getArkosConfig();\n    const authConfigs = arkosConfig?.authentication;\n\n    if (!req)\n      throw new Error(\"Missing req object in order get jwt cookie options\");\n\n    const sameSite =\n      authConfigs?.jwt?.cookie?.sameSite ||\n      (process.env.JWT_COOKIE_SAME_SITE as\n        | \"none\"\n        | \"lax\"\n        | \"strict\"\n        | undefined) ||\n      \"lax\";\n\n    return {\n      expires: new Date(\n        Date.now() +\n          Number(\n            toMs(\n              authConfigs?.jwt?.expiresIn ||\n                (process.env.JWT_EXPIRES_IN as MsDuration) ||\n                (arkosEnv.JWT_EXPIRES_IN as MsDuration)\n            )\n          )\n      ),\n      httpOnly:\n        authConfigs?.jwt?.cookie?.httpOnly ??\n        (process.env.JWT_COOKIE_HTTP_ONLY !== undefined\n          ? process.env.JWT_COOKIE_HTTP_ONLY === \"true\"\n          : undefined) ??\n        true,\n      secure:\n        authConfigs?.jwt?.cookie?.secure ??\n        (process.env.JWT_COOKIE_SECURE === \"true\" ||\n          req.secure ||\n          req.headers[\"x-forwarded-proto\"] === \"https\" ||\n          sameSite === \"none\"),\n      sameSite,\n    };\n  }\n\n  /**\n   * Is used by default internally by Arkos under `BaseService` class to check if the password is already hashed.\n   *\n   * This was just added to prevent unwanted errors when someone just forgets that the `BaseService` class will automatically hash the password field using `authService.hashPassword` by default.\n   *\n   * So now before `BaseService` hashes it will test it.\n   *\n   *\n   * @param password The password to be tested if is hashed\n   * @returns\n   */\n  isPasswordHashed(password: string) {\n    return !Number.isNaN(bcrypt.getRounds(password) * 1);\n  }\n\n  /**\n   * Compares a candidate password with the stored user password to check if they match.\n   *\n   * @param {string} candidatePassword - The password provided by the user during login.\n   * @param {string} userPassword - The password stored in the database.\n   * @returns {Promise<boolean>} Returns true if the passwords match, otherwise false.\n   */\n  async isCorrectPassword(\n    candidatePassword: string,\n    userPassword: string\n  ): Promise<boolean> {\n    return await bcrypt.compare(candidatePassword, userPassword);\n  }\n\n  /**\n   * Hashes a plain text password using bcrypt.\n   *\n   * @param {string} password - The password to be hashed.\n   * @returns {Promise<string>} Returns the hashed password.\n   */\n  async hashPassword(password: string): Promise<string> {\n    return await bcrypt.hash(password, 12);\n  }\n\n  /**\n   * Checks if a password is strong, requiring uppercase, lowercase, and numeric characters as the default.\n   *\n   * **NB**: You must pay attention when using custom validation with zod or class-validator, try to use the same regex always.\n   *\n   * **Note**: You can define it when calling arkos.init()\n   * ```ts\n   * arkos.init({\n   *  authentication: {\n   *    passwordValidation:{ regex: /your-desired-regex/, message: 'password must contain...'}\n   *  }\n   * })\n   * ```\n   *\n   * @param {string} password - The password to check.\n   * @returns {boolean} Returns true if the password meets the strength criteria, otherwise false.\n   */\n  public isPasswordStrong(password: string): boolean {\n    const initAuthConfigs = getArkosConfig()?.authentication;\n\n    const strongPasswordRegex =\n      initAuthConfigs?.passwordValidation?.regex ||\n      /^(?=.*[A-Z])(?=.*[a-z])(?=.*\\d).+$/;\n    return strongPasswordRegex.test(password);\n  }\n\n  /**\n   * Checks if a user has changed their password after the JWT was issued.\n   *\n   * @param {User} user - The user object containing the passwordChangedAt field.\n   * @param {number} JWTTimestamp - The timestamp when the JWT was issued.\n   * @returns {boolean} Returns true if the user changed their password after the JWT was issued, otherwise false.\n   */\n  userChangedPasswordAfter(user: User, JWTTimestamp: number): boolean {\n    if (user.passwordChangedAt) {\n      const convertedTimestamp = parseInt(\n        String(user.passwordChangedAt.getTime() / 1000),\n        10\n      );\n\n      return JWTTimestamp < convertedTimestamp;\n    }\n    return false;\n  }\n\n  /**\n   * Verifies the authenticity of a JWT token.\n   *\n   * @param {string} token - The JWT token to verify.\n   * @param {string} [secret] - The secret key used to verify the token. Defaults to environment variable `JWT_SECRET`.\n   * @returns {Promise<AuthJwtPayload>} Returns the decoded JWT payload if the token is valid.\n   * @throws {Error} Throws an error if the token is invalid or expired.\n   */\n  async verifyJwtToken(\n    token: string,\n    secret?: string\n  ): Promise<AuthJwtPayload> {\n    const { authentication: configs } = getArkosConfig();\n\n    if (\n      process.env.ARKOS_BUILD === \"true\" &&\n      !process.env.JWT_SECRET &&\n      !configs?.jwt?.secret\n    )\n      throw new AppError(\n        \"Missing JWT secret in production\",\n        500,\n        \"MissingJWTSecretInProduction\"\n      );\n\n    secret =\n      secret ||\n      configs?.jwt?.secret ||\n      process.env.JWT_SECRET ||\n      arkosEnv.JWT_SECRET;\n\n    return new Promise((resolve, reject) => {\n      jwt.verify(token, secret, (err, decoded) => {\n        if (err) reject(err);\n        else resolve(decoded as AuthJwtPayload);\n      });\n    });\n  }\n\n  /**\n   * Checks if a user has permission for a specific action using static access control rules.\n   * Validates user roles against predefined access control configuration.\n   *\n   * @param user - The user object containing role or roles field\n   * @param action - The action being performed\n   * @param accessControl - Access control configuration (array of roles or object with action-role mappings)\n   * @returns True if user has permission, false otherwise\n   * @throws Error if user doesn't have role/roles field\n   */\n  protected checkStaticAccessControl(\n    user: User,\n    action: string,\n    accessControl: AccessControlConfig\n  ) {\n    if (!user?.role && !user.roles)\n      throw Error(\n        \"Validation Error: In order to use static authentication user needs at least role field or roles for multiple roles.\"\n      );\n\n    let authorizedRoles: string[] = [];\n\n    if (Array.isArray(accessControl)) authorizedRoles = accessControl;\n    else if (accessControl[action])\n      authorizedRoles = Array.isArray(accessControl[action])\n        ? accessControl[action]\n        : accessControl[action].roles || [];\n\n    const userRoles = Array.isArray(user?.roles) ? user.roles : [user.role];\n\n    return !!userRoles.some((role: string) => authorizedRoles.includes(role));\n  }\n\n  /**\n   * Checks if a user has permission for a specific action and resource using dynamic access control.\n   * Queries the database to verify user's role permissions.\n   *\n   * @param userId - The unique identifier of the user\n   * @param action - The action being performed\n   * @param resource - The resource being accessed\n   * @returns Promise resolving to true if user has permission, false otherwise\n   */\n  protected async checkDynamicAccessControl(\n    userId: string,\n    action: string,\n    resource: string\n  ) {\n    const prisma = getPrismaInstance();\n    return !!(await prisma.userRole.findFirst({\n      where: {\n        userId,\n        role: {\n          permissions: {\n            some: {\n              resource,\n              action,\n            },\n          },\n        },\n      },\n      select: { id: true },\n    }));\n  }\n\n  /**\n   * Middleware function to handle access control based on user roles and permissions.\n   *\n   * @param {AccessAction} action - The action being performed (e.g., create, update, delete, view).\n   * @param {string} resource - The resource name that the action is being performed on (e.g., \"User\", \"Post\").\n   * @param {AccessControlConfig} accessControl - The access control configuration.\n   * @returns {ArkosRequestHandler} The middleware function that checks if the user has permission to perform the action.\n   */\n  handleAccessControl(\n    action: AccessAction,\n    resource: string,\n    accessControl?: AccessControlConfig\n  ): ArkosRequestHandler {\n    if (\n      !accessControl &&\n      appModules.some(\n        (appModule) => kebabCase(appModule) === kebabCase(resource)\n      )\n    )\n      accessControl = getModuleComponents(resource)?.authConfigs?.accessControl;\n\n    authActionService.add(action, resource, accessControl);\n\n    return catchAsync(\n      async (req: ArkosRequest, _: ArkosResponse, next: ArkosNextFunction) => {\n        if (req.user) {\n          const user = req.user as User;\n          const configs = getArkosConfig();\n\n          if (user.isSuperUser) {\n            next();\n            return;\n          }\n\n          const notEnoughPermissionsError = new AppError(\n            \"You do not have permission to perfom this action\",\n            403,\n            {},\n            \"NotEnoughPermissions\"\n          );\n\n          if (configs?.authentication?.mode === \"dynamic\") {\n            const hasPermission = await this.checkDynamicAccessControl(\n              user.id,\n              action,\n              resource\n            );\n\n            if (!hasPermission) return next(notEnoughPermissionsError);\n          } else if (configs?.authentication?.mode === \"static\") {\n            if (!accessControl) return next(notEnoughPermissionsError);\n\n            const hasPermission = this.checkStaticAccessControl(\n              user,\n              action,\n              accessControl\n            );\n\n            if (!hasPermission) return next(notEnoughPermissionsError);\n          }\n        }\n\n        next();\n      }\n    );\n  }\n\n  /**\n   * Processes the cookies or authoriation token and returns the user.\n   * @param req\n   * @returns {Promise<User | null>} - if authentication is turned off in arkosConfig it returns null\n   * @throws {AppError} Throws an error if the token is invalid or the user is not logged in.\n   */\n  async getAuthenticatedUser(req: ArkosRequest): Promise<User | null> {\n    if (!isAuthenticationEnabled())\n      throw Error(\n        \"ValidationError: Trying to call getAuthenticatedUser without setting up authentication\"\n      );\n\n    const prisma = getPrismaInstance();\n\n    let token: string | undefined;\n\n    if (\n      req?.headers?.authorization &&\n      req?.headers?.authorization.startsWith(\"Bearer\") &&\n      req?.headers?.authorization.split?.(\" \")?.[1]\n    )\n      token = req?.headers?.authorization.split(\" \")[1];\n\n    if (\n      !token &&\n      req?.cookies?.arkos_access_token !== \"no-token\" &&\n      req.cookies\n    ) {\n      token = req?.cookies?.arkos_access_token;\n    }\n\n    if (!token) throw loginRequiredError;\n\n    let decoded: AuthJwtPayload | undefined;\n\n    try {\n      decoded = await this.verifyJwtToken(token);\n    } catch (err) {\n      throw invaliAuthTokenError;\n    }\n\n    if (!decoded?.id) throw invaliAuthTokenError;\n    const user: any | null = await (prisma as any).user.findUnique({\n      where: { id: String(decoded.id) },\n    });\n\n    if (!user)\n      throw new AppError(\n        \"The user belonging to this token does no longer exists\",\n        401,\n        {},\n        \"UserNoLongerExists\"\n      );\n\n    if (\n      this.userChangedPasswordAfter(user, decoded.iat!) &&\n      !req.path?.includes?.(\"logout\")\n    )\n      throw new AppError(\n        \"User recently changed password! Please log in again.\",\n        401,\n        {},\n        \"PasswordChanged\"\n      );\n\n    req.accessToken = token;\n    return user;\n  }\n\n  /**\n   * Middleware function to authenticate the user based on the JWT token.\n   *\n   * @param {ArkosRequest} req - The request object.\n   * @param {ArkosResponse} res - The response object.\n   * @param {ArkosNextFunction} next - The next middleware function to be called.\n   * @returns {void}\n   */\n  authenticate = catchAsync(\n    async (req: ArkosRequest, _: ArkosResponse, next: ArkosNextFunction) => {\n      if (isAuthenticationEnabled())\n        req.user = (await this.getAuthenticatedUser(req)) as User;\n      next();\n    }\n  );\n\n  /**\n   * Handles authentication control by checking the `authenticationControl` configuration in the `authConfigs`.\n   *\n   * @param {ControllerActions} action - The action being performed (e.g., create, update, delete, view).\n   * @param {AuthenticationControlConfig} authenticationControl - The authentication configuration object.\n   * @returns {ArkosRequestHandler} The middleware function that checks if authentication is required.\n   */\n  handleAuthenticationControl(\n    action: AccessAction,\n    authenticationControl?: AuthenticationControlConfig | undefined\n  ): ArkosRequestHandler {\n    if (authenticationControl && typeof authenticationControl === \"object\") {\n      if (authenticationControl[action] === false) return callNext;\n      else if (authenticationControl[action] === true) return this.authenticate;\n    } else return this.authenticate;\n\n    return this.authenticate;\n  }\n\n  /**\n   * Creates a permission checker function for a specific action and resource.\n   *\n   * PS: This method should be called during application initialization to build permission validators.\n   *\n   * @see {@link https://www.arkosjs.com/docs/advanced-guide/fine-grained-access-control}\n   *\n   * @param action - The action to check permission for (e.g., 'View', 'Create', 'Delete')\n   * @param resource - The resource being accessed, must be in kebabCase (e.g., 'user', 'cart-item', 'order')\n   * @param accessControl - Access control rules (required for static authentication mode), and it is automatically loaded for known modules such as all prisma models, auth and file-upload.\n   * @returns A function that takes a user object and returns a boolean indicating permission status\n   *\n   * @example\n   * ```typescript\n   * const hasViewProductPermission = await authService.permission('View', 'product');\n   *\n   * // Later in handler:\n   * const canAccess = await hasViewProductPermission(user);\n   * if (canAccess) {\n   *   // User has permission\n   * }\n   * ```\n   */\n  permission(\n    action: string,\n    resource: string,\n    accessControl?: AccessControlConfig\n  ) {\n    // Check if called during request handling (deep call stack indicates handler execution)\n    const stack = new Error().stack;\n\n    if (stack?.includes(\"node_modules/express/lib/router/index.js\"))\n      throw new Error(\n        \"authService.permission() should be called during application initialization level.\"\n      );\n\n    authActionService.add(action, resource, accessControl);\n\n    return async (user: Record<string, any> | undefined): Promise<boolean> => {\n      // getArkosConfig must not be called the same time as arkos.init()\n      const configs = getArkosConfig();\n\n      if (!isUsingAuthentication())\n        throw Error(\n          \"Validation Error: Trying to use authService.permission without setting up authentication.\"\n        );\n\n      if (!user) throw loginRequiredError;\n      if (user.isSuperUser) return true;\n\n      if (configs?.authentication?.mode === \"dynamic\") {\n        return await this.checkDynamicAccessControl(user?.id, action, resource);\n      } else if (configs?.authentication?.mode === \"static\") {\n        if (!accessControl && appModules.includes(kebabCase(resource)))\n          accessControl = getModuleComponents(kebabCase(resource))?.authConfigs\n            ?.accessControl;\n\n        return (\n          !!accessControl &&\n          this.checkStaticAccessControl(user as any, action, accessControl)\n        );\n      }\n      return false;\n    };\n  }\n}\n\n/**\n * Handles various authentication-related tasks such as JWT signing, password hashing, and verifying user credentials.\n */\nconst authService = new AuthService();\n\nexport default authService;\n"]}

package/dist/cjs/modules/swagger/utils/helpers/get-authentication-json-schema-paths.js

@@ -44,7 +44,9 @@ function getAuthenticationJsonSchemaPaths(arkosConfig, existingPaths) {
                 : currentPath?.summary,
             description: currentPath?.description ||
                 "Authenticates a user and returns an access token",
-            operationId: currentPath?.operationId || "login",
+            operationId: currentPath?.operationId?.includes(pathname)
+                ? "login"
+                : currentPath?.operationId,
             requestBody: currentPath?.requestBody || {
                 description: "User credentials",
                 required: true,
@@ -95,7 +97,9 @@ function getAuthenticationJsonSchemaPaths(arkosConfig, existingPaths) {
                 ? "Logout from the system"
                 : currentPath?.summary,
             description: currentPath?.description || "Invalidates the current user's JWT token",
-            operationId: currentPath?.operationId || "logout",
+            operationId: currentPath?.operationId?.includes(pathname)
+                ? "logout"
+                : currentPath?.operationId,
             security: [{ BearerAuth: [] }],
             responses: {
                 ...(currentPath?.responses || {}),
@@ -122,7 +126,9 @@ function getAuthenticationJsonSchemaPaths(arkosConfig, existingPaths) {
                 ? "Register a new user"
                 : currentPath?.summary,
             description: currentPath?.description || "Creates a new user account",
-            operationId: currentPath?.operationId || "signup",
+            operationId: currentPath?.operationId?.includes(pathname)
+                ? "signup"
+                : currentPath?.operationId,
             requestBody: currentPath?.requestBody || {
                 description: "User registration data",
                 required: true,
@@ -169,7 +175,9 @@ function getAuthenticationJsonSchemaPaths(arkosConfig, existingPaths) {
                 : currentPath?.summary,
             description: currentPath?.description ||
                 "Changes the password for the authenticated user",
-            operationId: currentPath?.operationId || "updatePassword",
+            operationId: currentPath?.operationId?.includes(pathname)
+                ? "updatePassword"
+                : currentPath?.operationId,
             security: [{ BearerAuth: [] }],
             requestBody: currentPath?.requestBody || {
                 description: "Current and new password",
@@ -227,7 +235,9 @@ function getAuthenticationJsonSchemaPaths(arkosConfig, existingPaths) {
                 : currentPath?.summary,
             description: currentPath?.description ||
                 "Retrieves information about the currently authenticated user",
-            operationId: currentPath?.operationId || "getMe",
+            operationId: currentPath?.operationId?.includes(pathname)
+                ? "getMe"
+                : currentPath?.operationId,
             security: [{ BearerAuth: [] }],
             responses: {
                 ...(currentPath?.responses || {}),
@@ -262,7 +272,9 @@ function getAuthenticationJsonSchemaPaths(arkosConfig, existingPaths) {
                 : currentPath?.summary,
             description: currentPath?.description ||
                 "Updates information for the currently authenticated user",
-            operationId: currentPath?.operationId || "updateMe",
+            operationId: currentPath?.operationId?.includes(pathname)
+                ? "updateMe"
+                : currentPath?.operationId,
             security: [{ BearerAuth: [] }],
             requestBody: currentPath?.requestBody || {
                 description: "User data to update",
@@ -309,7 +321,9 @@ function getAuthenticationJsonSchemaPaths(arkosConfig, existingPaths) {
                 : currentPath?.summary,
             description: currentPath?.description ||
                 "Marks the current user's account as deleted",
-            operationId: currentPath?.operationId || "deleteMe",
+            operationId: currentPath?.operationId?.includes(pathname)
+                ? "deleteMe"
+                : currentPath?.operationId,
             security: [{ BearerAuth: [] }],
             responses: {
                 ...(currentPath?.responses || {}),
@@ -348,7 +362,9 @@ function getAuthenticationJsonSchemaPaths(arkosConfig, existingPaths) {
                 : currentPath?.summary,
             description: currentPath?.description ||
                 "Retrieves a list of all available authentication actions and permissions",
-            operationId: currentPath?.operationId || "findManyAuthAction",
+            operationId: currentPath?.operationId?.includes(pathname)
+                ? "findManyAuthAction"
+                : currentPath?.operationId,
             security: [{ BearerAuth: [] }],
             responses: {
                 ...(currentPath?.responses || {}),
@@ -415,7 +431,9 @@ function getAuthenticationJsonSchemaPaths(arkosConfig, existingPaths) {
                 : currentPath?.summary,
             description: currentPath?.description ||
                 "Retrieves all authentication actions for a specific resource",
-            operationId: currentPath?.operationId || "findOneAuthAction",
+            operationId: currentPath?.operationId?.includes(pathname)
+                ? "findOneAuthAction"
+                : currentPath?.operationId,
             security: [{ BearerAuth: [] }],
             parameters: mergedParameters,
             responses: {

package/dist/cjs/modules/swagger/utils/helpers/get-authentication-json-schema-paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-authentication-json-schema-paths.js","sourceRoot":"","sources":["../../../../../../src/modules/swagger/utils/helpers/get-authentication-json-schema-paths.ts"],"names":[],"mappings":";;;AA8BA,mDAqgBC;AAliBD,qEAGkC;AAElC,qEAAuE;AACvE,yFAAqF;AAE9E,MAAM,aAAa,GAAG,CAC3B,MAAc,EACd,WAAwB,EACc,EAAE;IACxC,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC;IAC9C,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC;IAE7C,IAAI,CAAC,WAAW;QAAE,OAAO,QAAQ,CAAC;IAClC,IAAI,QAAQ;QAAE,OAAO,WAAW,CAAC;IAEjC,MAAM,SAAS,GAAG,MAAa,CAAC;IAChC,MAAM,eAAe,GAAG,IAAA,iDAAwB,EAC9C,SAAS,EACT,MAAM,EACN,WAAW,CACZ,CAAC;IAEF,IAAI,CAAC,eAAe;QAAE,OAAO,QAAQ,CAAC;IACtC,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAnBW,QAAA,aAAa,iBAmBxB;AAEF,SAAwB,gCAAgC,CACtD,WAAwB,EACxB,aAAoC;IAEpC,MAAM,KAAK,GAA0B,EAAE,GAAG,aAAa,EAAE,CAAC;IAE1D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI;QAAE,OAAO,KAAK,CAAC;IAE7C,MAAM,oBAAoB,GAAG,IAAA,oCAAmB,EAAC,MAAM,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,oBAAoB,EAAE,MAAM;QAC/C,EAAE,MAA8B,CAAC;IAEnC,IAAI,YAAY,EAAE,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEjD,MAAM,sBAAsB,GAAG,CAAC,QAAgB,EAAW,EAAE;QAC3D,OAAO,IAAA,wCAAkB,EAAC,YAAY,EAAE,QAAe,CAAC,CAAC;IAC3D,CAAC,CAAC;IAGF,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAA,qBAAa,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC;QAE1C,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,kDAAkD;YACpD,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI,OAAO;YAChD,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI;gBACvC,WAAW,EAAE,kBAAkB;gBAC/B,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE;4BACN,IAAI,EAAE,IAAA,qCAAY,EAAC,OAAO,EAAE,SAAS,CAAC;yBACvC;qBACF;iBACF;aACF;YACD,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,kBAAkB;oBAC/B,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,WAAW,EAAE;wCACX,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,kBAAkB;qCAChC;iCACF;6BACF;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,oBAAoB;iBAClC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,qBAAqB;iBACnC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACrE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,kBAAkB,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,MAAM,CAAC;QAE5C,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW,IAAI,0CAA0C;YACxE,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI,QAAQ;YACjD,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,mBAAmB;iBACjC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACvE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,kBAAkB,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAA,qBAAa,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAA,qBAAa,EAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC;QAE1C,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI,4BAA4B;YACrE,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI,QAAQ;YACjD,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI;gBACvC,WAAW,EAAE,wBAAwB;gBACrC,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE;4BACN,IAAI,EAAE,IAAA,qCAAY,EAAC,QAAQ,EAAE,UAAU,CAAC;yBACzC;qBACF;iBACF;aACF;YACD,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,2BAA2B;oBACxC,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,IAAA,qCAAY,EAAC,MAAM,EAAE,QAAQ,CAAC;6BACrC;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,oBAAoB;iBAClC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,qBAAqB;iBACnC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACrE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,2BAA2B,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,kBAAkB,GAAG,IAAA,qBAAa,EAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC;QAE1C,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,sBAAsB;gBACxB,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,iDAAiD;YACnD,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI,gBAAgB;YACzD,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI;gBACvC,WAAW,EAAE,0BAA0B;gBACvC,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE;4BACN,IAAI,EAAE,IAAA,qCAAY,EAAC,gBAAgB,EAAE,kBAAkB,CAAC;yBACzD;qBACF;iBACF;aACF;YACD,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,+BAA+B;oBAC5C,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,OAAO,EAAE,SAAS;qCACnB;oCACD,OAAO,EAAE;wCACP,IAAI,EAAE,QAAQ;wCACd,OAAO,EAAE,gCAAgC;qCAC1C;iCACF;6BACF;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,kDAAkD;iBAChE;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACrE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAA,qBAAa,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,GAAG,CAAC;QAEzC,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,8BAA8B;gBAChC,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,8DAA8D;YAChE,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI,OAAO;YAChD,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yCAAyC;oBACtD,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,IAAA,qCAAY,EAAC,OAAO,EAAE,UAAU,CAAC;6BACxC;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACpE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAA,qBAAa,EAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAA,qBAAa,EAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,KAAK,CAAC;QAE3C,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,iCAAiC;gBACnC,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,0DAA0D;YAC5D,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI,UAAU;YACnD,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI;gBACvC,WAAW,EAAE,qBAAqB;gBAClC,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE;4BACN,IAAI,EAAE,IAAA,qCAAY,EAAC,UAAU,EAAE,YAAY,CAAC;yBAC7C;qBACF;iBACF;aACF;YACD,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,2BAA2B;oBACxC,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,IAAA,qCAAY,EAAC,MAAM,EAAE,QAAQ,CAAC;6BACrC;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,oBAAoB;iBAClC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,KAAK,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACtE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,MAAM,CAAC;QAE5C,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,6BAA6B;gBAC/B,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,6CAA6C;YAC/C,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI,UAAU;YACnD,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,8BAA8B;oBAC3C,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,OAAO,EAAE;wCACP,IAAI,EAAE,QAAQ;wCACd,OAAO,EAAE,8BAA8B;qCACxC;iCACF;6BACF;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACvE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,GAAG,CAAC;QAEzC,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,gCAAgC;gBAClC,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,0EAA0E;YAC5E,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI,oBAAoB;YAC7D,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,qCAAqC;oBAClD,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,KAAK,EAAE;wCACL,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,8BAA8B;qCAC5C;oCACD,OAAO,EAAE;wCACP,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,iCAAiC;qCAC/C;oCACD,IAAI,EAAE;wCACJ,IAAI,EAAE,OAAO;wCACb,KAAK,EAAE;4CACL,IAAI,EAAE,qDAAqD;yCAC5D;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,0BAA0B;iBACxC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACpE,CAAC;IAED,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,kCAAkC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,GAAG,CAAC;QAEzC,MAAM,iBAAiB,GAAgC;YACrD;gBACE,IAAI,EAAE,cAAc;gBACpB,EAAE,EAAE,MAAM;gBACV,WAAW,EAAE,mDAAmD;gBAChE,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC3B;SACF,CAAC;QAEF,MAAM,cAAc,GACjB,WAAW,EAAE,UAA0C,IAAI,EAAE,CAAC;QACjE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAC/C,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,GAAG,cAAc;YACjB,GAAG,iBAAiB,CAAC,MAAM,CACzB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CACnD;SACF,CAAC;QAEF,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,wCAAwC;gBAC1C,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,8DAA8D;YAChE,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI,mBAAmB;YAC5D,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,UAAU,EAAE,gBAAgB;YAC5B,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,kDAAkD;oBAC/D,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,KAAK,EAAE;wCACL,IAAI,EAAE,QAAQ;wCACd,WAAW,EACT,gDAAgD;qCACnD;oCACD,OAAO,EAAE;wCACP,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,iCAAiC;qCAC/C;oCACD,IAAI,EAAE;wCACJ,IAAI,EAAE,OAAO;wCACb,KAAK,EAAE;4CACL,IAAI,EAAE,qDAAqD;yCAC5D;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,0BAA0B;iBACxC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,oBAAoB;iBAClC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACpE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { OpenAPIV3 } from \"openapi-types\";\nimport {\n  getSchemaRef,\n  localValidatorFileExists,\n} from \"./swagger.router.helpers\";\nimport { ArkosConfig, RouterConfig } from \"../../../../exports\";\nimport { getModuleComponents } from \"../../../../utils/dynamic-loader\";\nimport { isEndpointDisabled } from \"../../../base/utils/helpers/base.router.helpers\";\n\nexport const getSchemaMode = (\n  action: string,\n  arkosConfig: ArkosConfig\n): \"prisma\" | \"zod\" | \"class-validator\" => {\n  const swaggerMode = arkosConfig.swagger?.mode;\n  const isStrict = arkosConfig.swagger?.strict;\n\n  if (!swaggerMode) return \"prisma\";\n  if (isStrict) return swaggerMode;\n\n  const actionKey = action as any;\n  const localFileExists = localValidatorFileExists(\n    actionKey,\n    \"auth\",\n    arkosConfig\n  );\n\n  if (!localFileExists) return \"prisma\";\n  return swaggerMode;\n};\n\nexport default function getAuthenticationJsonSchemaPaths(\n  arkosConfig: ArkosConfig,\n  existingPaths: OpenAPIV3.PathsObject\n) {\n  const paths: OpenAPIV3.PathsObject = { ...existingPaths };\n\n  if (!arkosConfig.swagger?.mode) return paths;\n\n  const AuthModuleComponents = getModuleComponents(\"auth\");\n  const routerConfig = AuthModuleComponents?.router\n    ?.config as RouterConfig<\"auth\">;\n\n  if (routerConfig?.disable === true) return paths;\n\n  const isAuthEndpointDisabled = (endpoint: string): boolean => {\n    return isEndpointDisabled(routerConfig, endpoint as any);\n  };\n\n  // Login\n  if (!isAuthEndpointDisabled(\"login\")) {\n    const pathname = \"/api/auth/login\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const loginMode = getSchemaMode(\"login\", arkosConfig);\n    const currentPath = paths[pathname]!.post;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Login to the system\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Authenticates a user and returns an access token\",\n      operationId: currentPath?.operationId || \"login\",\n      requestBody: currentPath?.requestBody || {\n        description: \"User credentials\",\n        required: true,\n        content: {\n          \"application/json\": {\n            schema: {\n              $ref: getSchemaRef(\"Login\", loginMode),\n            },\n          },\n        },\n      },\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"Login successful\",\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                properties: {\n                  accessToken: {\n                    type: \"string\",\n                    description: \"JWT access token\",\n                  },\n                },\n              },\n            },\n          },\n        },\n        \"400\": currentPath?.responses?.[\"400\"] || {\n          description: \"Invalid input data\",\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Invalid credentials\",\n        },\n      },\n    };\n\n    paths[pathname]!.post = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Logout\n  if (!isAuthEndpointDisabled(\"logout\")) {\n    const pathname = \"/api/auth/logout\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const currentPath = paths[pathname]!.delete;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Logout from the system\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description || \"Invalidates the current user's JWT token\",\n      operationId: currentPath?.operationId || \"logout\",\n      security: [{ BearerAuth: [] }],\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"204\": currentPath?.responses?.[\"204\"] || {\n          description: \"Logout successful\",\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n      },\n    };\n\n    paths[pathname]!.delete = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Signup\n  if (!isAuthEndpointDisabled(\"signup\")) {\n    const pathname = \"/api/auth/signup\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const signupMode = getSchemaMode(\"signup\", arkosConfig);\n    const userMode = getSchemaMode(\"user\", arkosConfig);\n    const currentPath = paths[pathname]!.post;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Register a new user\"\n          : currentPath?.summary,\n      description: currentPath?.description || \"Creates a new user account\",\n      operationId: currentPath?.operationId || \"signup\",\n      requestBody: currentPath?.requestBody || {\n        description: \"User registration data\",\n        required: true,\n        content: {\n          \"application/json\": {\n            schema: {\n              $ref: getSchemaRef(\"Signup\", signupMode),\n            },\n          },\n        },\n      },\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"201\": currentPath?.responses?.[\"201\"] || {\n          description: \"User created successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                $ref: getSchemaRef(\"User\", userMode),\n              },\n            },\n          },\n        },\n        \"400\": currentPath?.responses?.[\"400\"] || {\n          description: \"Invalid input data\",\n        },\n        \"409\": currentPath?.responses?.[\"409\"] || {\n          description: \"User already exists\",\n        },\n      },\n    };\n\n    paths[pathname]!.post = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Update Password\n  if (!isAuthEndpointDisabled(\"updatePassword\")) {\n    const pathname = \"/api/auth/update-password\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const updatePasswordMode = getSchemaMode(\"updatePassword\", arkosConfig);\n    const currentPath = paths[pathname]!.post;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Update user password\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Changes the password for the authenticated user\",\n      operationId: currentPath?.operationId || \"updatePassword\",\n      security: [{ BearerAuth: [] }],\n      requestBody: currentPath?.requestBody || {\n        description: \"Current and new password\",\n        required: true,\n        content: {\n          \"application/json\": {\n            schema: {\n              $ref: getSchemaRef(\"UpdatePassword\", updatePasswordMode),\n            },\n          },\n        },\n      },\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"Password updated successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                properties: {\n                  status: {\n                    type: \"string\",\n                    example: \"success\",\n                  },\n                  message: {\n                    type: \"string\",\n                    example: \"Password updated successfully!\",\n                  },\n                },\n              },\n            },\n          },\n        },\n        \"400\": currentPath?.responses?.[\"400\"] || {\n          description: \"Invalid input data or current password incorrect\",\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n      },\n    };\n\n    paths[pathname]!.post = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Get Me\n  if (!isAuthEndpointDisabled(\"getMe\")) {\n    const pathname = \"/api/users/me\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const findMeMode = getSchemaMode(\"getMe\", arkosConfig);\n    const currentPath = paths[pathname]!.get;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Get current user information\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Retrieves information about the currently authenticated user\",\n      operationId: currentPath?.operationId || \"getMe\",\n      security: [{ BearerAuth: [] }],\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"User information retrieved successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                $ref: getSchemaRef(\"GetMe\", findMeMode),\n              },\n            },\n          },\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n      },\n    };\n\n    paths[pathname]!.get = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Update Me\n  if (!isAuthEndpointDisabled(\"updateMe\")) {\n    const pathname = \"/api/users/me\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const updateMeMode = getSchemaMode(\"updateMe\", arkosConfig);\n    const userMode = getSchemaMode(\"user\", arkosConfig);\n    const currentPath = paths[pathname]!.patch;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Update current user information\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Updates information for the currently authenticated user\",\n      operationId: currentPath?.operationId || \"updateMe\",\n      security: [{ BearerAuth: [] }],\n      requestBody: currentPath?.requestBody || {\n        description: \"User data to update\",\n        required: true,\n        content: {\n          \"application/json\": {\n            schema: {\n              $ref: getSchemaRef(\"UpdateMe\", updateMeMode),\n            },\n          },\n        },\n      },\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"User updated successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                $ref: getSchemaRef(\"User\", userMode),\n              },\n            },\n          },\n        },\n        \"400\": currentPath?.responses?.[\"400\"] || {\n          description: \"Invalid input data\",\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n      },\n    };\n\n    paths[pathname]!.patch = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Delete Me\n  if (!isAuthEndpointDisabled(\"deleteMe\")) {\n    const pathname = \"/api/users/me\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const currentPath = paths[pathname]!.delete;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Delete current user account\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Marks the current user's account as deleted\",\n      operationId: currentPath?.operationId || \"deleteMe\",\n      security: [{ BearerAuth: [] }],\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"Account deleted successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                properties: {\n                  message: {\n                    type: \"string\",\n                    example: \"Account deleted successfully\",\n                  },\n                },\n              },\n            },\n          },\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n      },\n    };\n\n    paths[pathname]!.delete = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Find Many Auth Action\n  if (!isAuthEndpointDisabled(\"findManyAuthAction\")) {\n    const pathname = \"/api/auth-actions\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const currentPath = paths[pathname]!.get;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Get all authentication actions\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Retrieves a list of all available authentication actions and permissions\",\n      operationId: currentPath?.operationId || \"findManyAuthAction\",\n      security: [{ BearerAuth: [] }],\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"Auth actions retrieved successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                properties: {\n                  total: {\n                    type: \"number\",\n                    description: \"Total number of auth actions\",\n                  },\n                  results: {\n                    type: \"number\",\n                    description: \"Number of auth actions returned\",\n                  },\n                  data: {\n                    type: \"array\",\n                    items: {\n                      $ref: \"#/components/schemas/FindManyAuthActionSystemSchema\",\n                    },\n                  },\n                },\n              },\n            },\n          },\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n        \"403\": currentPath?.responses?.[\"403\"] || {\n          description: \"Insufficient permissions\",\n        },\n      },\n    };\n\n    paths[pathname]!.get = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  if (!isAuthEndpointDisabled(\"findOneAuthAction\")) {\n    const pathname = \"/api/auth-actions/{resourceName}\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const currentPath = paths[pathname]!.get;\n\n    const defaultParameters: OpenAPIV3.ParameterObject[] = [\n      {\n        name: \"resourceName\",\n        in: \"path\",\n        description: \"Name of the resource to retrieve auth actions for\",\n        required: true,\n        schema: { type: \"string\" },\n      },\n    ];\n\n    const existingParams =\n      (currentPath?.parameters as OpenAPIV3.ParameterObject[]) || [];\n    const existingParamKeys = new Set(\n      existingParams.map((p) => `${p.in}-${p.name}`)\n    );\n\n    const mergedParameters = [\n      ...existingParams,\n      ...defaultParameters.filter(\n        (p) => !existingParamKeys.has(`${p.in}-${p.name}`)\n      ),\n    ];\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Get authentication actions by resource\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Retrieves all authentication actions for a specific resource\",\n      operationId: currentPath?.operationId || \"findOneAuthAction\",\n      security: [{ BearerAuth: [] }],\n      parameters: mergedParameters,\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"Auth actions for resource retrieved successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                properties: {\n                  total: {\n                    type: \"number\",\n                    description:\n                      \"Total number of auth actions for this resource\",\n                  },\n                  results: {\n                    type: \"number\",\n                    description: \"Number of auth actions returned\",\n                  },\n                  data: {\n                    type: \"array\",\n                    items: {\n                      $ref: \"#/components/schemas/FindManyAuthActionSystemSchema\",\n                    },\n                  },\n                },\n              },\n            },\n          },\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n        \"403\": currentPath?.responses?.[\"403\"] || {\n          description: \"Insufficient permissions\",\n        },\n        \"404\": currentPath?.responses?.[\"404\"] || {\n          description: \"Resource not found\",\n        },\n      },\n    };\n\n    paths[pathname]!.get = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  return paths;\n}\n"]}
+{"version":3,"file":"get-authentication-json-schema-paths.js","sourceRoot":"","sources":["../../../../../../src/modules/swagger/utils/helpers/get-authentication-json-schema-paths.ts"],"names":[],"mappings":";;;AA8BA,mDAuhBC;AApjBD,qEAGkC;AAElC,qEAAuE;AACvE,yFAAqF;AAE9E,MAAM,aAAa,GAAG,CAC3B,MAAc,EACd,WAAwB,EACc,EAAE;IACxC,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC;IAC9C,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC;IAE7C,IAAI,CAAC,WAAW;QAAE,OAAO,QAAQ,CAAC;IAClC,IAAI,QAAQ;QAAE,OAAO,WAAW,CAAC;IAEjC,MAAM,SAAS,GAAG,MAAa,CAAC;IAChC,MAAM,eAAe,GAAG,IAAA,iDAAwB,EAC9C,SAAS,EACT,MAAM,EACN,WAAW,CACZ,CAAC;IAEF,IAAI,CAAC,eAAe;QAAE,OAAO,QAAQ,CAAC;IACtC,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAnBW,QAAA,aAAa,iBAmBxB;AAEF,SAAwB,gCAAgC,CACtD,WAAwB,EACxB,aAAoC;IAEpC,MAAM,KAAK,GAA0B,EAAE,GAAG,aAAa,EAAE,CAAC;IAE1D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI;QAAE,OAAO,KAAK,CAAC;IAE7C,MAAM,oBAAoB,GAAG,IAAA,oCAAmB,EAAC,MAAM,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,oBAAoB,EAAE,MAAM;QAC/C,EAAE,MAA8B,CAAC;IAEnC,IAAI,YAAY,EAAE,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEjD,MAAM,sBAAsB,GAAG,CAAC,QAAgB,EAAW,EAAE;QAC3D,OAAO,IAAA,wCAAkB,EAAC,YAAY,EAAE,QAAe,CAAC,CAAC;IAC3D,CAAC,CAAC;IAGF,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAA,qBAAa,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC;QAE1C,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,kDAAkD;YACpD,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBACvD,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,WAAW,EAAE,WAAW;YAC5B,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI;gBACvC,WAAW,EAAE,kBAAkB;gBAC/B,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE;4BACN,IAAI,EAAE,IAAA,qCAAY,EAAC,OAAO,EAAE,SAAS,CAAC;yBACvC;qBACF;iBACF;aACF;YACD,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,kBAAkB;oBAC/B,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,WAAW,EAAE;wCACX,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,kBAAkB;qCAChC;iCACF;6BACF;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,oBAAoB;iBAClC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,qBAAqB;iBACnC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACrE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,kBAAkB,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,MAAM,CAAC;QAE5C,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW,IAAI,0CAA0C;YACxE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBACvD,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,WAAW,EAAE,WAAW;YAC5B,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,mBAAmB;iBACjC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACvE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,kBAAkB,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAA,qBAAa,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAA,qBAAa,EAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC;QAE1C,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI,4BAA4B;YACrE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBACvD,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,WAAW,EAAE,WAAW;YAC5B,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI;gBACvC,WAAW,EAAE,wBAAwB;gBACrC,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE;4BACN,IAAI,EAAE,IAAA,qCAAY,EAAC,QAAQ,EAAE,UAAU,CAAC;yBACzC;qBACF;iBACF;aACF;YACD,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,2BAA2B;oBACxC,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,IAAA,qCAAY,EAAC,MAAM,EAAE,QAAQ,CAAC;6BACrC;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,oBAAoB;iBAClC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,qBAAqB;iBACnC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACrE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,2BAA2B,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,kBAAkB,GAAG,IAAA,qBAAa,EAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC;QAE1C,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,sBAAsB;gBACxB,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,iDAAiD;YACnD,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBACvD,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,WAAW,EAAE,WAAW;YAC5B,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI;gBACvC,WAAW,EAAE,0BAA0B;gBACvC,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE;4BACN,IAAI,EAAE,IAAA,qCAAY,EAAC,gBAAgB,EAAE,kBAAkB,CAAC;yBACzD;qBACF;iBACF;aACF;YACD,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,+BAA+B;oBAC5C,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,OAAO,EAAE,SAAS;qCACnB;oCACD,OAAO,EAAE;wCACP,IAAI,EAAE,QAAQ;wCACd,OAAO,EAAE,gCAAgC;qCAC1C;iCACF;6BACF;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,kDAAkD;iBAChE;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACrE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAA,qBAAa,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,GAAG,CAAC;QAEzC,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,8BAA8B;gBAChC,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,8DAA8D;YAChE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBACvD,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,WAAW,EAAE,WAAW;YAC5B,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yCAAyC;oBACtD,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,IAAA,qCAAY,EAAC,OAAO,EAAE,UAAU,CAAC;6BACxC;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACpE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAA,qBAAa,EAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAA,qBAAa,EAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,KAAK,CAAC;QAE3C,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,iCAAiC;gBACnC,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,0DAA0D;YAC5D,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBACvD,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,WAAW,EAAE,WAAW;YAC5B,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI;gBACvC,WAAW,EAAE,qBAAqB;gBAClC,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE;4BACN,IAAI,EAAE,IAAA,qCAAY,EAAC,UAAU,EAAE,YAAY,CAAC;yBAC7C;qBACF;iBACF;aACF;YACD,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,2BAA2B;oBACxC,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,IAAA,qCAAY,EAAC,MAAM,EAAE,QAAQ,CAAC;6BACrC;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,oBAAoB;iBAClC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,KAAK,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACtE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,MAAM,CAAC;QAE5C,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,6BAA6B;gBAC/B,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,6CAA6C;YAC/C,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBACvD,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,WAAW,EAAE,WAAW;YAC5B,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,8BAA8B;oBAC3C,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,OAAO,EAAE;wCACP,IAAI,EAAE,QAAQ;wCACd,OAAO,EAAE,8BAA8B;qCACxC;iCACF;6BACF;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACvE,CAAC;IAGD,IAAI,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,GAAG,CAAC;QAEzC,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,gCAAgC;gBAClC,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,0EAA0E;YAC5E,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBACvD,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,WAAW,EAAE,WAAW;YAC5B,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,qCAAqC;oBAClD,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,KAAK,EAAE;wCACL,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,8BAA8B;qCAC5C;oCACD,OAAO,EAAE;wCACP,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,iCAAiC;qCAC/C;oCACD,IAAI,EAAE;wCACJ,IAAI,EAAE,OAAO;wCACb,KAAK,EAAE;4CACL,IAAI,EAAE,qDAAqD;yCAC5D;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,0BAA0B;iBACxC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACpE,CAAC;IAED,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,kCAAkC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAE,CAAC,GAAG,CAAC;QAEzC,MAAM,iBAAiB,GAAgC;YACrD;gBACE,IAAI,EAAE,cAAc;gBACpB,EAAE,EAAE,MAAM;gBACV,WAAW,EAAE,mDAAmD;gBAChE,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC3B;SACF,CAAC;QAEF,MAAM,cAAc,GACjB,WAAW,EAAE,UAA0C,IAAI,EAAE,CAAC;QACjE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAC/C,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,GAAG,cAAc;YACjB,GAAG,iBAAiB,CAAC,MAAM,CACzB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CACnD;SACF,CAAC;QAEF,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;YACD,OAAO,EACL,WAAW,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO;gBACxD,CAAC,CAAC,wCAAwC;gBAC1C,CAAC,CAAC,WAAW,EAAE,OAAO;YAC1B,WAAW,EACT,WAAW,EAAE,WAAW;gBACxB,8DAA8D;YAChE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBACvD,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,WAAW,EAAE,WAAW;YAC5B,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9B,UAAU,EAAE,gBAAgB;YAC5B,SAAS,EAAE;gBACT,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;gBACjC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,kDAAkD;oBAC/D,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,KAAK,EAAE;wCACL,IAAI,EAAE,QAAQ;wCACd,WAAW,EACT,gDAAgD;qCACnD;oCACD,OAAO,EAAE;wCACP,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,iCAAiC;qCAC/C;oCACD,IAAI,EAAE;wCACJ,IAAI,EAAE,OAAO;wCACb,KAAK,EAAE;4CACL,IAAI,EAAE,qDAAqD;yCAC5D;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,0BAA0B;iBACxC;gBACD,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;oBACxC,WAAW,EAAE,oBAAoB;iBAClC;aACF;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAE,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IACpE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { OpenAPIV3 } from \"openapi-types\";\nimport {\n  getSchemaRef,\n  localValidatorFileExists,\n} from \"./swagger.router.helpers\";\nimport { ArkosConfig, RouterConfig } from \"../../../../exports\";\nimport { getModuleComponents } from \"../../../../utils/dynamic-loader\";\nimport { isEndpointDisabled } from \"../../../base/utils/helpers/base.router.helpers\";\n\nexport const getSchemaMode = (\n  action: string,\n  arkosConfig: ArkosConfig\n): \"prisma\" | \"zod\" | \"class-validator\" => {\n  const swaggerMode = arkosConfig.swagger?.mode;\n  const isStrict = arkosConfig.swagger?.strict;\n\n  if (!swaggerMode) return \"prisma\";\n  if (isStrict) return swaggerMode;\n\n  const actionKey = action as any;\n  const localFileExists = localValidatorFileExists(\n    actionKey,\n    \"auth\",\n    arkosConfig\n  );\n\n  if (!localFileExists) return \"prisma\";\n  return swaggerMode;\n};\n\nexport default function getAuthenticationJsonSchemaPaths(\n  arkosConfig: ArkosConfig,\n  existingPaths: OpenAPIV3.PathsObject\n) {\n  const paths: OpenAPIV3.PathsObject = { ...existingPaths };\n\n  if (!arkosConfig.swagger?.mode) return paths;\n\n  const AuthModuleComponents = getModuleComponents(\"auth\");\n  const routerConfig = AuthModuleComponents?.router\n    ?.config as RouterConfig<\"auth\">;\n\n  if (routerConfig?.disable === true) return paths;\n\n  const isAuthEndpointDisabled = (endpoint: string): boolean => {\n    return isEndpointDisabled(routerConfig, endpoint as any);\n  };\n\n  // Login\n  if (!isAuthEndpointDisabled(\"login\")) {\n    const pathname = \"/api/auth/login\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const loginMode = getSchemaMode(\"login\", arkosConfig);\n    const currentPath = paths[pathname]!.post;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Login to the system\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Authenticates a user and returns an access token\",\n      operationId: currentPath?.operationId?.includes(pathname)\n        ? \"login\"\n        : currentPath?.operationId,\n      requestBody: currentPath?.requestBody || {\n        description: \"User credentials\",\n        required: true,\n        content: {\n          \"application/json\": {\n            schema: {\n              $ref: getSchemaRef(\"Login\", loginMode),\n            },\n          },\n        },\n      },\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"Login successful\",\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                properties: {\n                  accessToken: {\n                    type: \"string\",\n                    description: \"JWT access token\",\n                  },\n                },\n              },\n            },\n          },\n        },\n        \"400\": currentPath?.responses?.[\"400\"] || {\n          description: \"Invalid input data\",\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Invalid credentials\",\n        },\n      },\n    };\n\n    paths[pathname]!.post = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Logout\n  if (!isAuthEndpointDisabled(\"logout\")) {\n    const pathname = \"/api/auth/logout\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const currentPath = paths[pathname]!.delete;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Logout from the system\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description || \"Invalidates the current user's JWT token\",\n      operationId: currentPath?.operationId?.includes(pathname)\n        ? \"logout\"\n        : currentPath?.operationId,\n      security: [{ BearerAuth: [] }],\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"204\": currentPath?.responses?.[\"204\"] || {\n          description: \"Logout successful\",\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n      },\n    };\n\n    paths[pathname]!.delete = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Signup\n  if (!isAuthEndpointDisabled(\"signup\")) {\n    const pathname = \"/api/auth/signup\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const signupMode = getSchemaMode(\"signup\", arkosConfig);\n    const userMode = getSchemaMode(\"user\", arkosConfig);\n    const currentPath = paths[pathname]!.post;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Register a new user\"\n          : currentPath?.summary,\n      description: currentPath?.description || \"Creates a new user account\",\n      operationId: currentPath?.operationId?.includes(pathname)\n        ? \"signup\"\n        : currentPath?.operationId,\n      requestBody: currentPath?.requestBody || {\n        description: \"User registration data\",\n        required: true,\n        content: {\n          \"application/json\": {\n            schema: {\n              $ref: getSchemaRef(\"Signup\", signupMode),\n            },\n          },\n        },\n      },\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"201\": currentPath?.responses?.[\"201\"] || {\n          description: \"User created successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                $ref: getSchemaRef(\"User\", userMode),\n              },\n            },\n          },\n        },\n        \"400\": currentPath?.responses?.[\"400\"] || {\n          description: \"Invalid input data\",\n        },\n        \"409\": currentPath?.responses?.[\"409\"] || {\n          description: \"User already exists\",\n        },\n      },\n    };\n\n    paths[pathname]!.post = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Update Password\n  if (!isAuthEndpointDisabled(\"updatePassword\")) {\n    const pathname = \"/api/auth/update-password\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const updatePasswordMode = getSchemaMode(\"updatePassword\", arkosConfig);\n    const currentPath = paths[pathname]!.post;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Update user password\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Changes the password for the authenticated user\",\n      operationId: currentPath?.operationId?.includes(pathname)\n        ? \"updatePassword\"\n        : currentPath?.operationId,\n      security: [{ BearerAuth: [] }],\n      requestBody: currentPath?.requestBody || {\n        description: \"Current and new password\",\n        required: true,\n        content: {\n          \"application/json\": {\n            schema: {\n              $ref: getSchemaRef(\"UpdatePassword\", updatePasswordMode),\n            },\n          },\n        },\n      },\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"Password updated successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                properties: {\n                  status: {\n                    type: \"string\",\n                    example: \"success\",\n                  },\n                  message: {\n                    type: \"string\",\n                    example: \"Password updated successfully!\",\n                  },\n                },\n              },\n            },\n          },\n        },\n        \"400\": currentPath?.responses?.[\"400\"] || {\n          description: \"Invalid input data or current password incorrect\",\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n      },\n    };\n\n    paths[pathname]!.post = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Get Me\n  if (!isAuthEndpointDisabled(\"getMe\")) {\n    const pathname = \"/api/users/me\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const findMeMode = getSchemaMode(\"getMe\", arkosConfig);\n    const currentPath = paths[pathname]!.get;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Get current user information\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Retrieves information about the currently authenticated user\",\n      operationId: currentPath?.operationId?.includes(pathname)\n        ? \"getMe\"\n        : currentPath?.operationId,\n      security: [{ BearerAuth: [] }],\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"User information retrieved successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                $ref: getSchemaRef(\"GetMe\", findMeMode),\n              },\n            },\n          },\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n      },\n    };\n\n    paths[pathname]!.get = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Update Me\n  if (!isAuthEndpointDisabled(\"updateMe\")) {\n    const pathname = \"/api/users/me\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const updateMeMode = getSchemaMode(\"updateMe\", arkosConfig);\n    const userMode = getSchemaMode(\"user\", arkosConfig);\n    const currentPath = paths[pathname]!.patch;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Update current user information\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Updates information for the currently authenticated user\",\n      operationId: currentPath?.operationId?.includes(pathname)\n        ? \"updateMe\"\n        : currentPath?.operationId,\n      security: [{ BearerAuth: [] }],\n      requestBody: currentPath?.requestBody || {\n        description: \"User data to update\",\n        required: true,\n        content: {\n          \"application/json\": {\n            schema: {\n              $ref: getSchemaRef(\"UpdateMe\", updateMeMode),\n            },\n          },\n        },\n      },\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"User updated successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                $ref: getSchemaRef(\"User\", userMode),\n              },\n            },\n          },\n        },\n        \"400\": currentPath?.responses?.[\"400\"] || {\n          description: \"Invalid input data\",\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n      },\n    };\n\n    paths[pathname]!.patch = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Delete Me\n  if (!isAuthEndpointDisabled(\"deleteMe\")) {\n    const pathname = \"/api/users/me\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const currentPath = paths[pathname]!.delete;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Delete current user account\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Marks the current user's account as deleted\",\n      operationId: currentPath?.operationId?.includes(pathname)\n        ? \"deleteMe\"\n        : currentPath?.operationId,\n      security: [{ BearerAuth: [] }],\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"Account deleted successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                properties: {\n                  message: {\n                    type: \"string\",\n                    example: \"Account deleted successfully\",\n                  },\n                },\n              },\n            },\n          },\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n      },\n    };\n\n    paths[pathname]!.delete = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  // Find Many Auth Action\n  if (!isAuthEndpointDisabled(\"findManyAuthAction\")) {\n    const pathname = \"/api/auth-actions\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const currentPath = paths[pathname]!.get;\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Get all authentication actions\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Retrieves a list of all available authentication actions and permissions\",\n      operationId: currentPath?.operationId?.includes(pathname)\n        ? \"findManyAuthAction\"\n        : currentPath?.operationId,\n      security: [{ BearerAuth: [] }],\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"Auth actions retrieved successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                properties: {\n                  total: {\n                    type: \"number\",\n                    description: \"Total number of auth actions\",\n                  },\n                  results: {\n                    type: \"number\",\n                    description: \"Number of auth actions returned\",\n                  },\n                  data: {\n                    type: \"array\",\n                    items: {\n                      $ref: \"#/components/schemas/FindManyAuthActionSystemSchema\",\n                    },\n                  },\n                },\n              },\n            },\n          },\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n        \"403\": currentPath?.responses?.[\"403\"] || {\n          description: \"Insufficient permissions\",\n        },\n      },\n    };\n\n    paths[pathname]!.get = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  if (!isAuthEndpointDisabled(\"findOneAuthAction\")) {\n    const pathname = \"/api/auth-actions/{resourceName}\";\n    if (!paths[pathname]) paths[pathname] = {};\n    const currentPath = paths[pathname]!.get;\n\n    const defaultParameters: OpenAPIV3.ParameterObject[] = [\n      {\n        name: \"resourceName\",\n        in: \"path\",\n        description: \"Name of the resource to retrieve auth actions for\",\n        required: true,\n        schema: { type: \"string\" },\n      },\n    ];\n\n    const existingParams =\n      (currentPath?.parameters as OpenAPIV3.ParameterObject[]) || [];\n    const existingParamKeys = new Set(\n      existingParams.map((p) => `${p.in}-${p.name}`)\n    );\n\n    const mergedParameters = [\n      ...existingParams,\n      ...defaultParameters.filter(\n        (p) => !existingParamKeys.has(`${p.in}-${p.name}`)\n      ),\n    ];\n\n    const defaultSpec = {\n      tags: [\"Authentication\", ...(currentPath?.tags || [])].filter(\n        (tag) => tag !== \"Defaults\"\n      ),\n      summary:\n        currentPath?.summary === pathname || !currentPath?.summary\n          ? \"Get authentication actions by resource\"\n          : currentPath?.summary,\n      description:\n        currentPath?.description ||\n        \"Retrieves all authentication actions for a specific resource\",\n      operationId: currentPath?.operationId?.includes(pathname)\n        ? \"findOneAuthAction\"\n        : currentPath?.operationId,\n      security: [{ BearerAuth: [] }],\n      parameters: mergedParameters,\n      responses: {\n        ...(currentPath?.responses || {}),\n        \"200\": currentPath?.responses?.[\"200\"] || {\n          description: \"Auth actions for resource retrieved successfully\",\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                properties: {\n                  total: {\n                    type: \"number\",\n                    description:\n                      \"Total number of auth actions for this resource\",\n                  },\n                  results: {\n                    type: \"number\",\n                    description: \"Number of auth actions returned\",\n                  },\n                  data: {\n                    type: \"array\",\n                    items: {\n                      $ref: \"#/components/schemas/FindManyAuthActionSystemSchema\",\n                    },\n                  },\n                },\n              },\n            },\n          },\n        },\n        \"401\": currentPath?.responses?.[\"401\"] || {\n          description: \"Authentication required\",\n        },\n        \"403\": currentPath?.responses?.[\"403\"] || {\n          description: \"Insufficient permissions\",\n        },\n        \"404\": currentPath?.responses?.[\"404\"] || {\n          description: \"Resource not found\",\n        },\n      },\n    };\n\n    paths[pathname]!.get = { ...(currentPath || {}), ...defaultSpec };\n  }\n\n  return paths;\n}\n"]}

package/dist/cjs/modules/swagger/utils/helpers/get-file-upload-json-schema-paths.js

@@ -84,9 +84,13 @@ function getFileUploadJsonSchemaPaths(arkosConfig, existingPaths) {
             summary: currentPath?.summary === pathname || !currentPath?.summary
                 ? "Retrieve uploaded file"
                 : currentPath?.summary,
-            description: currentPath?.description ||
-                `Serves static files from the upload directory (${baseUploadDir}). This endpoint uses wildcard path matching to serve files from any subdirectory.`,
-            operationId: currentPath?.operationId || "findFile",
+            description: currentPath?.description === pathname || !currentPath?.description
+                ? `Serves static files from the upload directory (${baseUploadDir}). This endpoint uses wildcard path matching to serve files from any subdirectory.`
+                : currentPath?.description,
+            operationId: currentPath?.operationId?.includes(pathname) ||
+                !currentPath?.operationId
+                ? "findFile"
+                : currentPath?.operationId,
             ...(shouldIncludeSecurity("View") && {
                 security: [{ BearerAuth: [] }],
             }),
@@ -184,9 +188,13 @@ function getFileUploadJsonSchemaPaths(arkosConfig, existingPaths) {
             summary: currentPath?.summary === pathname || !currentPath?.summary
                 ? "Upload file(s)"
                 : currentPath?.summary,
-            description: currentPath?.description ||
-                "Upload one or multiple files. Supports image processing options for image uploads.",
-            operationId: currentPath?.operationId || "uploadFile",
+            description: currentPath?.description === pathname || !currentPath?.description
+                ? "Upload one or multiple files. Supports image processing options for image uploads."
+                : currentPath?.description,
+            operationId: currentPath?.operationId?.includes(pathname) ||
+                !currentPath?.operationId
+                ? "uploadFile"
+                : currentPath?.operationId,
             ...(shouldIncludeSecurity("Create") && {
                 security: [{ BearerAuth: [] }],
             }),
@@ -336,9 +344,13 @@ function getFileUploadJsonSchemaPaths(arkosConfig, existingPaths) {
             summary: currentPath?.summary === pathname || !currentPath?.summary
                 ? "Update existing file"
                 : currentPath?.summary,
-            description: currentPath?.description ||
-                "Replace an existing file with a new one. Deletes the old file and uploads the new one.",
-            operationId: currentPath?.operationId || "updateFile",
+            description: currentPath?.description === pathname || !currentPath?.description
+                ? "Replace an existing file with a new one. Deletes the old file and uploads the new one."
+                : currentPath?.description,
+            operationId: currentPath?.operationId?.includes(pathname) ||
+                !currentPath?.operationId
+                ? "updateFile"
+                : currentPath?.operationId,
             ...(shouldIncludeSecurity("Update") && {
                 security: [{ BearerAuth: [] }],
             }),
@@ -457,8 +469,13 @@ function getFileUploadJsonSchemaPaths(arkosConfig, existingPaths) {
             summary: currentPath?.summary === pathname || !currentPath?.summary
                 ? "Delete file"
                 : currentPath?.summary,
-            description: currentPath?.description || "Delete an uploaded file from the server",
-            operationId: currentPath?.operationId || "deleteFile",
+            description: currentPath?.description === pathname || !currentPath?.description
+                ? "Delete an uploaded file from the server"
+                : currentPath?.description,
+            operationId: currentPath?.operationId?.includes(pathname) ||
+                !currentPath?.operationId
+                ? "deleteFile"
+                : currentPath?.operationId,
             ...(shouldIncludeSecurity("Delete") && {
                 security: [{ BearerAuth: [] }],
             }),