arkos 2.0.0-next.2 → 2.0.0-next.21

package/dist/esm/modules/auth/utils/auth-hooks-manager.js

@@ -0,0 +1,148 @@
+import { getArkosConfig } from "../../../utils/helpers/arkos-config.helpers.js";
+import { ForbiddenError } from "../../error-handler/utils/errors.js";
+import authService from "../auth.service.js";
+class AuthHookManager {
+    async runAuthenticate(adapter, getUser, keyName = "user") {
+        const { context, done } = adapter;
+        const hooks = getArkosConfig()?.authentication?.hooks?.authenticate;
+        const before = await this.runHooks(hooks?.before, context);
+        if (before.error) {
+            const onError = await this.runErrorHooks(hooks?.onError, before.error, context);
+            if (onError.skipped) {
+                const after = await this.runAfterHooks(hooks?.after, context);
+                return after.error ? done(after.error) : done();
+            }
+            return done(onError.error);
+        }
+        if (!before.skipped) {
+            try {
+                const user = await getUser(context);
+                context[keyName] = user ?? undefined;
+            }
+            catch (err) {
+                const onError = await this.runErrorHooks(hooks?.onError, err, context);
+                if (onError.skipped) {
+                    const after = await this.runAfterHooks(hooks?.after, context);
+                    return after.error ? done(after.error) : done();
+                }
+                return done(onError.error);
+            }
+        }
+        const after = await this.runAfterHooks(hooks?.after, context);
+        if (after.error)
+            return done(after.error);
+        done();
+    }
+    async runAuthorize(adapter, authAction, keyName = "user") {
+        const { context, done } = adapter;
+        const hooks = getArkosConfig()?.authentication?.hooks?.authorize;
+        const { action, resource, ...rule } = authAction;
+        const hooksMeta = { action, resource, rule };
+        const before = await this.runHooks(hooks?.before, context, hooksMeta);
+        if (before.error) {
+            const onError = await this.runErrorHooks(hooks?.onError, before.error, context, hooksMeta);
+            if (onError.skipped) {
+                const after = await this.runAfterHooks(hooks?.after, context, hooksMeta);
+                return after.error ? done(after.error) : done();
+            }
+            return done(onError.error);
+        }
+        if (!before.skipped) {
+            try {
+                if (context[keyName]) {
+                    const user = context[keyName];
+                    const configs = getArkosConfig();
+                    if (!user.isSuperUser) {
+                        const notEnoughPermissionsError = new ForbiddenError(authAction.errorMessage, "NotEnoughPermissions");
+                        if (configs?.authentication?.mode === "dynamic") {
+                            const hasPermission = await authService.checkDynamicAccessControl(user.id, action, resource);
+                            if (!hasPermission)
+                                throw notEnoughPermissionsError;
+                        }
+                        else if (configs?.authentication?.mode === "static") {
+                            const hasPermission = authService.checkStaticAccessControl(user, action, { [action]: rule });
+                            if (!hasPermission)
+                                throw notEnoughPermissionsError;
+                        }
+                    }
+                }
+            }
+            catch (err) {
+                const onError = await this.runErrorHooks(hooks?.onError, err, context, hooksMeta);
+                if (onError.skipped) {
+                    const after = await this.runAfterHooks(hooks?.after, context, hooksMeta);
+                    return after.error ? done(after.error) : done();
+                }
+                return done(onError.error);
+            }
+        }
+        const after = await this.runAfterHooks(hooks?.after, context, hooksMeta);
+        if (after.error)
+            return done(after.error);
+        done();
+    }
+    async runAfterHooks(hooks, req, ctx) {
+        if (!hooks)
+            return {};
+        const hookArray = Array.isArray(hooks) ? hooks : [hooks];
+        for (const hook of hookArray) {
+            try {
+                await hook({ req, ...ctx });
+            }
+            catch (err) {
+                return { error: err };
+            }
+        }
+        return {};
+    }
+    async runHooks(hooks, req, ctx) {
+        if (!hooks)
+            return { skipped: false };
+        const hookArray = Array.isArray(hooks) ? hooks : [hooks];
+        for (const hook of hookArray) {
+            let skipCalled = false;
+            try {
+                await hook({
+                    req,
+                    skip: () => {
+                        skipCalled = true;
+                    },
+                    ...ctx,
+                });
+            }
+            catch (err) {
+                return { skipped: false, error: err };
+            }
+            if (skipCalled)
+                return { skipped: true };
+        }
+        return { skipped: false };
+    }
+    async runErrorHooks(hooks, error, req, ctx) {
+        if (!hooks)
+            return { skipped: false, error };
+        const hookArray = Array.isArray(hooks) ? hooks : [hooks];
+        for (const hook of hookArray) {
+            let skipCalled = false;
+            try {
+                await hook({
+                    req,
+                    error,
+                    skip: () => {
+                        skipCalled = true;
+                    },
+                    ...ctx,
+                });
+            }
+            catch (err) {
+                return { skipped: false, error: err };
+            }
+            if (skipCalled)
+                return { skipped: true };
+        }
+        return { skipped: false, error };
+    }
+}
+const authHookManager = new AuthHookManager();
+export default authHookManager;
+//# sourceMappingURL=auth-hooks-manager.js.map

package/dist/esm/modules/auth/utils/auth-hooks-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-hooks-manager.js","sourceRoot":"","sources":["../../../../../src/modules/auth/utils/auth-hooks-manager.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,WAAW,MAAM,iBAAiB,CAAC;AAU1C,MAAM,eAAe;IAWnB,KAAK,CAAC,eAAe,CACnB,OAAyC,EACzC,OAAoD,EACpD,UAAkC,MAAM;QAExC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QAClC,MAAM,KAAK,GAAG,cAAc,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,CAAC;QAEpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CACtC,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,KAAK,EACZ,OAAO,CACR,CAAC;YACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC9D,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAClD,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBACnC,OAAe,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;gBACvE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;oBAC9D,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAClD,CAAC;gBACD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,EAAE,CAAC;IACT,CAAC;IAYD,KAAK,CAAC,YAAY,CAChB,OAAyC,EACzC,UAAgC,EAChC,UAAkC,MAAM;QAExC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QAClC,MAAM,KAAK,GAAG,cAAc,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,CAAC;QACjE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC;QACjD,MAAM,SAAS,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAE7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CACtC,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,KAAK,EACZ,OAAO,EACP,SAAS,CACV,CAAC;YACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CACpC,KAAK,EAAE,KAAK,EACZ,OAAO,EACP,SAAS,CACV,CAAC;gBACF,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAClD,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,IAAK,OAAe,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,GAAI,OAAe,CAAC,OAAO,CAAS,CAAC;oBAC/C,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;oBACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;wBACtB,MAAM,yBAAyB,GAAG,IAAI,cAAc,CAClD,UAAU,CAAC,YAAY,EACvB,sBAAsB,CACvB,CAAC;wBACF,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;4BAChD,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,yBAAyB,CAC/D,IAAI,CAAC,EAAE,EACP,MAAM,EACN,QAAQ,CACT,CAAC;4BACF,IAAI,CAAC,aAAa;gCAAE,MAAM,yBAAyB,CAAC;wBACtD,CAAC;6BAAM,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;4BACtD,MAAM,aAAa,GAAG,WAAW,CAAC,wBAAwB,CACxD,IAAI,EACJ,MAAM,EACN,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CACnB,CAAC;4BACF,IAAI,CAAC,aAAa;gCAAE,MAAM,yBAAyB,CAAC;wBACtD,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CACtC,KAAK,EAAE,OAAO,EACd,GAAG,EACH,OAAO,EACP,SAAS,CACV,CAAC;gBACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CACpC,KAAK,EAAE,KAAK,EACZ,OAAO,EACP,SAAS,CACV,CAAC;oBACF,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAClD,CAAC;gBACD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACzE,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,EAAE,CAAC;IACT,CAAC;IAUO,KAAK,CAAC,aAAa,CACzB,KAKa,EACb,GAAqB,EACrB,GAIC;QAED,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QAEtB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAEzD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAO,IAAY,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAWO,KAAK,CAAC,QAAQ,CACpB,KAKa,EACb,GAAqB,EACrB,GAIC;QAED,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAEtC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAEzD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,UAAU,GAAG,KAAK,CAAC;YAEvB,IAAI,CAAC;gBACH,MAAO,IAAY,CAAC;oBAClB,GAAG;oBACH,IAAI,EAAE,GAAG,EAAE;wBACT,UAAU,GAAG,IAAI,CAAC;oBACpB,CAAC;oBACD,GAAG,GAAG;iBACP,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YACxC,CAAC;YAED,IAAI,UAAU;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3C,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAWO,KAAK,CAAC,aAAa,CACzB,KAKa,EACb,KAAc,EACd,GAAqB,EACrB,GAIC;QAED,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAE7C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAEzD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,UAAU,GAAG,KAAK,CAAC;YAEvB,IAAI,CAAC;gBACH,MAAO,IAAY,CAAC;oBAClB,GAAG;oBACH,KAAK;oBACL,IAAI,EAAE,GAAG,EAAE;wBACT,UAAU,GAAG,IAAI,CAAC;oBACpB,CAAC;oBACD,GAAG,GAAG;iBACP,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YACxC,CAAC;YAED,IAAI,UAAU;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3C,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;CACF;AAED,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;AAE9C,eAAe,eAAe,CAAC","sourcesContent":["import { ArkosSocket } from \"../../../components/arkos-gateway/types\";\nimport { ArkosRequest, User } from \"../../../types\";\nimport {\n  AuthenticateAfterHookHandler,\n  AuthenticateErrorHookHandler,\n  AuthenticateHookHandler,\n  AuthorizeAfterHookHandler,\n  AuthorizeErrorHookHandler,\n  AuthorizeHookHandler,\n} from \"../../../types/arkos-config/utils\";\nimport { AccessAction, DetailedAccessControlRule } from \"../../../types/auth\";\nimport { getArkosConfig } from \"../../../utils/helpers/arkos-config.helpers\";\nimport { ForbiddenError } from \"../../error-handler/utils/errors\";\nimport authService from \"../auth.service\";\nimport { AuthAction } from \"./services/auth-action.service\";\n\ntype ArkosBaseContext = ArkosRequest | ArkosSocket;\n\ninterface ArkosMiddlewareAdapter<TContext extends ArkosBaseContext> {\n  context: TContext;\n  done: (error?: unknown | any) => void; // replaces next()\n}\n\nclass AuthHookManager {\n  /**\n   * Runs the full authenticate pipeline — before hooks, core user resolution,\n   * after hooks — and calls `done` when finished.\n   *\n   * Shared by the HTTP authenticate middleware and the WebSocket auth ns.use().\n   *\n   * @param adapter.context - The request or socket being authenticated.\n   * @param adapter.done - Called with no args on success, or with an error to propagate.\n   * @param getUser - Async function that resolves the user from the context.\n   */\n  async runAuthenticate<TContext extends ArkosBaseContext>(\n    adapter: ArkosMiddlewareAdapter<TContext>,\n    getUser: (context: TContext) => Promise<User | null>,\n    keyName: \"user\" | \"currentUser\" = \"user\"\n  ): Promise<void> {\n    const { context, done } = adapter;\n    const hooks = getArkosConfig()?.authentication?.hooks?.authenticate;\n\n    const before = await this.runHooks(hooks?.before, context);\n    if (before.error) {\n      const onError = await this.runErrorHooks(\n        hooks?.onError,\n        before.error,\n        context\n      );\n      if (onError.skipped) {\n        const after = await this.runAfterHooks(hooks?.after, context);\n        return after.error ? done(after.error) : done();\n      }\n      return done(onError.error);\n    }\n\n    if (!before.skipped) {\n      try {\n        const user = await getUser(context);\n        (context as any)[keyName] = user ?? undefined;\n      } catch (err) {\n        const onError = await this.runErrorHooks(hooks?.onError, err, context);\n        if (onError.skipped) {\n          const after = await this.runAfterHooks(hooks?.after, context);\n          return after.error ? done(after.error) : done();\n        }\n        return done(onError.error);\n      }\n    }\n\n    const after = await this.runAfterHooks(hooks?.after, context);\n    if (after.error) return done(after.error);\n    done();\n  }\n\n  /**\n   * Runs the full authorize pipeline — before hooks, core permission check,\n   * after hooks — and calls `done` when finished.\n   *\n   * Shared by the HTTP `authorize()` middleware and WebSocket per-event authorization.\n   *\n   * @param adapter.context - The request or socket being authorized.\n   * @param authAction {AuthAction}\n   * @param keyName {\"user\" | \"currentUser\"}\n   */\n  async runAuthorize<TContext extends ArkosBaseContext>(\n    adapter: ArkosMiddlewareAdapter<TContext>,\n    authAction: Required<AuthAction>,\n    keyName: \"user\" | \"currentUser\" = \"user\"\n  ): Promise<void> {\n    const { context, done } = adapter;\n    const hooks = getArkosConfig()?.authentication?.hooks?.authorize;\n    const { action, resource, ...rule } = authAction;\n    const hooksMeta = { action, resource, rule };\n\n    const before = await this.runHooks(hooks?.before, context, hooksMeta);\n    if (before.error) {\n      const onError = await this.runErrorHooks(\n        hooks?.onError,\n        before.error,\n        context,\n        hooksMeta\n      );\n      if (onError.skipped) {\n        const after = await this.runAfterHooks(\n          hooks?.after,\n          context,\n          hooksMeta\n        );\n        return after.error ? done(after.error) : done();\n      }\n      return done(onError.error);\n    }\n\n    if (!before.skipped) {\n      try {\n        if ((context as any)[keyName]) {\n          const user = (context as any)[keyName] as User;\n          const configs = getArkosConfig();\n          if (!user.isSuperUser) {\n            const notEnoughPermissionsError = new ForbiddenError(\n              authAction.errorMessage,\n              \"NotEnoughPermissions\"\n            );\n            if (configs?.authentication?.mode === \"dynamic\") {\n              const hasPermission = await authService.checkDynamicAccessControl(\n                user.id,\n                action,\n                resource\n              );\n              if (!hasPermission) throw notEnoughPermissionsError;\n            } else if (configs?.authentication?.mode === \"static\") {\n              const hasPermission = authService.checkStaticAccessControl(\n                user,\n                action,\n                { [action]: rule }\n              );\n              if (!hasPermission) throw notEnoughPermissionsError;\n            }\n          }\n        }\n      } catch (err) {\n        const onError = await this.runErrorHooks(\n          hooks?.onError,\n          err,\n          context,\n          hooksMeta\n        );\n        if (onError.skipped) {\n          const after = await this.runAfterHooks(\n            hooks?.after,\n            context,\n            hooksMeta\n          );\n          return after.error ? done(after.error) : done();\n        }\n        return done(onError.error);\n      }\n    }\n\n    const after = await this.runAfterHooks(hooks?.after, context, hooksMeta);\n    if (after.error) return done(after.error);\n    done();\n  }\n\n  /**\n   * Runs a chain of `after` hooks in sequence.\n   *\n   * - If a hook throws — chain aborts, error is forwarded to the global error handler.\n   * - If a hook returns — next hook in chain runs.\n   *\n   * @returns Promise resolving to `{ error? }`\n   */\n  private async runAfterHooks(\n    hooks:\n      | AuthenticateAfterHookHandler\n      | AuthenticateAfterHookHandler[]\n      | AuthorizeAfterHookHandler\n      | AuthorizeAfterHookHandler[]\n      | undefined,\n    req: ArkosBaseContext,\n    ctx?: {\n      action?: AccessAction;\n      resource?: string;\n      rule?: string[] | DetailedAccessControlRule | \"*\";\n    }\n  ): Promise<{ error?: unknown }> {\n    if (!hooks) return {};\n\n    const hookArray = Array.isArray(hooks) ? hooks : [hooks];\n\n    for (const hook of hookArray) {\n      try {\n        await (hook as any)({ req, ...ctx });\n      } catch (err) {\n        return { error: err };\n      }\n    }\n\n    return {};\n  }\n\n  /**\n   * Runs a chain of `before` hooks in sequence.\n   *\n   * - If a hook throws — chain aborts, error is forwarded to `onError` hooks.\n   * - If a hook calls `skip()` — chain stops, core logic is bypassed, jumps to `after` hooks.\n   * - If a hook returns — next hook in chain runs.\n   *\n   * @returns Promise resolving to `{ skipped, error? }`\n   */\n  private async runHooks(\n    hooks:\n      | AuthenticateHookHandler\n      | AuthenticateHookHandler[]\n      | AuthorizeHookHandler\n      | AuthorizeHookHandler[]\n      | undefined,\n    req: ArkosBaseContext,\n    ctx?: {\n      action?: AccessAction;\n      resource?: string;\n      rule?: string[] | DetailedAccessControlRule | \"*\";\n    }\n  ): Promise<{ skipped: boolean; error?: unknown }> {\n    if (!hooks) return { skipped: false };\n\n    const hookArray = Array.isArray(hooks) ? hooks : [hooks];\n\n    for (const hook of hookArray) {\n      let skipCalled = false;\n\n      try {\n        await (hook as any)({\n          req,\n          skip: () => {\n            skipCalled = true;\n          },\n          ...ctx,\n        });\n      } catch (err) {\n        return { skipped: false, error: err };\n      }\n\n      if (skipCalled) return { skipped: true };\n    }\n\n    return { skipped: false };\n  }\n\n  /**\n   * Runs a chain of `onError` hooks in sequence.\n   *\n   * - If a hook throws — chain aborts, error is forwarded to the global error handler.\n   * - If a hook calls `skip()` — suppresses the error and jumps to `after` hooks.\n   * - If a hook returns — next hook in chain runs.\n   *\n   * @returns Promise resolving to `{ skipped, error? }`\n   */\n  private async runErrorHooks(\n    hooks:\n      | AuthenticateErrorHookHandler\n      | AuthenticateErrorHookHandler[]\n      | AuthorizeErrorHookHandler\n      | AuthorizeErrorHookHandler[]\n      | undefined,\n    error: unknown,\n    req: ArkosBaseContext,\n    ctx?: {\n      action?: AccessAction;\n      resource?: string;\n      rule?: string[] | DetailedAccessControlRule | \"*\";\n    }\n  ): Promise<{ skipped: boolean; error?: unknown }> {\n    if (!hooks) return { skipped: false, error };\n\n    const hookArray = Array.isArray(hooks) ? hooks : [hooks];\n\n    for (const hook of hookArray) {\n      let skipCalled = false;\n\n      try {\n        await (hook as any)({\n          req,\n          error,\n          skip: () => {\n            skipCalled = true;\n          },\n          ...ctx,\n        });\n      } catch (err) {\n        return { skipped: false, error: err };\n      }\n\n      if (skipCalled) return { skipped: true };\n    }\n\n    return { skipped: false, error };\n  }\n}\n\nconst authHookManager = new AuthHookManager();\n\nexport default authHookManager;\n"]}

package/dist/esm/modules/auth/utils/auth-openapi-generator.js

@@ -0,0 +1,367 @@
+import authPrismaJsonSchemaGenerator from "./auth-prisma-json-schema-generator.js";
+import { getArkosConfig } from "../../../utils/helpers/arkos-config.helpers.js";
+class AuthOpenAPIGenerator {
+    getOpenApiConfig(endpointRouterConfig = {}, endpoint) {
+        const existingOpenApi = endpointRouterConfig?.experimental?.openapi || {};
+        const hasBodyValidation = typeof endpointRouterConfig?.validation !== "boolean" &&
+            !!endpointRouterConfig?.validation?.body;
+        switch (endpoint) {
+            case "login":
+                return {
+                    ...existingOpenApi,
+                    tags: ["Authentication", ...(existingOpenApi?.tags || [])].filter((tag) => tag !== "Defaults"),
+                    summary: existingOpenApi?.summary || "Login to the system",
+                    description: existingOpenApi?.description ||
+                        "Authenticates a user and returns an access token",
+                    operationId: existingOpenApi?.operationId || "login",
+                    ...(!hasBodyValidation && {
+                        requestBody: existingOpenApi?.requestBody || {
+                            required: true,
+                            content: {
+                                "application/json": {
+                                    schema: authPrismaJsonSchemaGenerator.generateLoginSchema(),
+                                },
+                            },
+                        },
+                    }),
+                    responses: {
+                        ...(existingOpenApi?.responses || {}),
+                        "200": existingOpenApi?.responses?.["200"] || {
+                            description: "Login successful",
+                            content: {
+                                "application/json": {
+                                    schema: {
+                                        type: "object",
+                                        properties: {
+                                            accessToken: {
+                                                type: "string",
+                                                description: "JWT access token",
+                                            },
+                                        },
+                                    },
+                                },
+                            },
+                        },
+                        "400": existingOpenApi?.responses?.["400"] || {
+                            description: "Invalid input data",
+                        },
+                        "401": existingOpenApi?.responses?.["401"] || {
+                            description: "Invalid credentials",
+                        },
+                    },
+                };
+            case "logout":
+                return {
+                    ...existingOpenApi,
+                    tags: ["Authentication", ...(existingOpenApi?.tags || [])].filter((tag) => tag !== "Defaults"),
+                    summary: existingOpenApi?.summary || "Logout from the system",
+                    description: existingOpenApi?.description ||
+                        "Invalidates the current user's JWT token",
+                    operationId: existingOpenApi?.operationId || "logout",
+                    security: existingOpenApi?.security || [{ BearerAuth: [] }],
+                    responses: {
+                        ...(existingOpenApi?.responses || {}),
+                        "204": existingOpenApi?.responses?.["204"] || {
+                            description: "Logout successful",
+                        },
+                        "401": existingOpenApi?.responses?.["401"] || {
+                            description: "Authentication required",
+                        },
+                    },
+                };
+            case "signup":
+                return {
+                    ...existingOpenApi,
+                    tags: ["Authentication", ...(existingOpenApi?.tags || [])].filter((tag) => tag !== "Defaults"),
+                    summary: existingOpenApi?.summary || "Register a new user",
+                    description: existingOpenApi?.description || "Creates a new user account",
+                    operationId: existingOpenApi?.operationId || "signup",
+                    ...(!hasBodyValidation && {
+                        requestBody: existingOpenApi?.requestBody || {
+                            description: "User registration data",
+                            required: true,
+                            content: {
+                                "application/json": {
+                                    schema: authPrismaJsonSchemaGenerator.generateSignupSchema(),
+                                },
+                            },
+                        },
+                    }),
+                    responses: {
+                        ...(existingOpenApi?.responses || {}),
+                        "201": existingOpenApi?.responses?.["201"] || {
+                            description: "User created successfully",
+                            content: {
+                                "application/json": {
+                                    schema: authPrismaJsonSchemaGenerator.generateGetMeResponse(),
+                                },
+                            },
+                        },
+                        "400": existingOpenApi?.responses?.["400"] || {
+                            description: "Invalid input data",
+                        },
+                        "409": existingOpenApi?.responses?.["409"] || {
+                            description: "User already exists",
+                        },
+                    },
+                };
+            case "updatePassword":
+                return {
+                    ...existingOpenApi,
+                    tags: ["Authentication", ...(existingOpenApi?.tags || [])].filter((tag) => tag !== "Defaults"),
+                    summary: existingOpenApi?.summary || "Update user password",
+                    description: existingOpenApi?.description ||
+                        "Changes the password for the authenticated user",
+                    operationId: existingOpenApi?.operationId || "updatePassword",
+                    security: existingOpenApi?.security || [{ BearerAuth: [] }],
+                    ...(!hasBodyValidation && {
+                        requestBody: existingOpenApi?.requestBody || {
+                            required: true,
+                            content: {
+                                "application/json": {
+                                    schema: authPrismaJsonSchemaGenerator.generateUpdatePasswordSchema(),
+                                },
+                            },
+                        },
+                    }),
+                    responses: {
+                        ...(existingOpenApi?.responses || {}),
+                        "200": existingOpenApi?.responses?.["200"] || {
+                            description: "Password updated successfully",
+                            content: {
+                                "application/json": {
+                                    schema: {
+                                        type: "object",
+                                        properties: {
+                                            status: { type: "string", example: "success" },
+                                            message: {
+                                                type: "string",
+                                                example: "Password updated successfully!",
+                                            },
+                                        },
+                                    },
+                                },
+                            },
+                        },
+                        "400": existingOpenApi?.responses?.["400"] || {
+                            description: "Invalid input data or current password incorrect",
+                        },
+                        "401": existingOpenApi?.responses?.["401"] || {
+                            description: "Authentication required",
+                        },
+                    },
+                };
+            case "getMe":
+                return {
+                    ...existingOpenApi,
+                    tags: ["Authentication", ...(existingOpenApi?.tags || [])].filter((tag) => tag !== "Defaults"),
+                    summary: existingOpenApi?.summary || "Get current user information",
+                    description: existingOpenApi?.description ||
+                        "Retrieves information about the currently authenticated user",
+                    operationId: existingOpenApi?.operationId || "getMe",
+                    security: existingOpenApi?.security || [{ BearerAuth: [] }],
+                    responses: {
+                        ...(existingOpenApi?.responses || {}),
+                        "200": existingOpenApi?.responses?.["200"] || {
+                            description: "User information retrieved successfully",
+                            content: {
+                                "application/json": {
+                                    schema: authPrismaJsonSchemaGenerator.generateGetMeResponse(),
+                                },
+                            },
+                        },
+                        "401": existingOpenApi?.responses?.["401"] || {
+                            description: "Authentication required",
+                        },
+                    },
+                };
+            case "updateMe":
+                return {
+                    ...existingOpenApi,
+                    tags: ["Authentication", ...(existingOpenApi?.tags || [])].filter((tag) => tag !== "Defaults"),
+                    summary: existingOpenApi?.summary || "Update current user information",
+                    description: existingOpenApi?.description ||
+                        "Updates information for the currently authenticated user",
+                    operationId: existingOpenApi?.operationId || "updateMe",
+                    security: existingOpenApi?.security || [{ BearerAuth: [] }],
+                    ...(!hasBodyValidation && {
+                        requestBody: existingOpenApi?.requestBody || {
+                            description: "User data to update",
+                            required: true,
+                            content: {
+                                "application/json": {
+                                    schema: authPrismaJsonSchemaGenerator.generateUpdateMeSchema(),
+                                },
+                            },
+                        },
+                    }),
+                    responses: {
+                        ...(existingOpenApi?.responses || {}),
+                        "200": existingOpenApi?.responses?.["200"] || {
+                            description: "User updated successfully",
+                            content: {
+                                "application/json": {
+                                    schema: authPrismaJsonSchemaGenerator.generateGetMeResponse(),
+                                },
+                            },
+                        },
+                        "400": existingOpenApi?.responses?.["400"] || {
+                            description: "Invalid input data",
+                        },
+                        "401": existingOpenApi?.responses?.["401"] || {
+                            description: "Authentication required",
+                        },
+                    },
+                };
+            case "deleteMe":
+                return {
+                    ...existingOpenApi,
+                    tags: ["Authentication", ...(existingOpenApi?.tags || [])].filter((tag) => tag !== "Defaults"),
+                    summary: existingOpenApi?.summary || "Delete current user account",
+                    description: existingOpenApi?.description ||
+                        "Marks the current user's account as deleted",
+                    operationId: existingOpenApi?.operationId || "deleteMe",
+                    security: existingOpenApi?.security || [{ BearerAuth: [] }],
+                    responses: {
+                        ...(existingOpenApi?.responses || {}),
+                        "200": existingOpenApi?.responses?.["200"] || {
+                            description: "Account deleted successfully",
+                            content: {
+                                "application/json": {
+                                    schema: {
+                                        type: "object",
+                                        properties: {
+                                            message: {
+                                                type: "string",
+                                                example: "Account deleted successfully",
+                                            },
+                                        },
+                                    },
+                                },
+                            },
+                        },
+                        "401": existingOpenApi?.responses?.["401"] || {
+                            description: "Authentication required",
+                        },
+                    },
+                };
+            case "findManyAuthAction":
+                return {
+                    ...existingOpenApi,
+                    tags: ["Authentication", ...(existingOpenApi?.tags || [])].filter((tag) => tag !== "Defaults"),
+                    summary: existingOpenApi?.summary || "Get all authentication actions",
+                    description: existingOpenApi?.description ||
+                        "Retrieves a list of all available authentication actions and permissions",
+                    operationId: existingOpenApi?.operationId || "findManyAuthAction",
+                    security: existingOpenApi?.security || [{ BearerAuth: [] }],
+                    responses: {
+                        ...(existingOpenApi?.responses || {}),
+                        "200": existingOpenApi?.responses?.["200"] || {
+                            description: "Auth actions retrieved successfully",
+                            content: {
+                                "application/json": {
+                                    schema: this.getAuthActionSchema(),
+                                },
+                            },
+                        },
+                        "401": existingOpenApi?.responses?.["401"] || {
+                            description: "Authentication required",
+                        },
+                        "403": existingOpenApi?.responses?.["403"] || {
+                            description: "Insufficient permissions",
+                        },
+                    },
+                };
+            case "findOneAuthAction":
+                return {
+                    ...existingOpenApi,
+                    tags: ["Authentication", ...(existingOpenApi?.tags || [])].filter((tag) => tag !== "Defaults"),
+                    summary: existingOpenApi?.summary ||
+                        "Get authentication actions by resource",
+                    description: existingOpenApi?.description ||
+                        "Retrieves all authentication actions for a specific resource",
+                    operationId: existingOpenApi?.operationId || "findOneAuthAction",
+                    security: existingOpenApi?.security || [{ BearerAuth: [] }],
+                    parameters: [
+                        ...(existingOpenApi?.parameters || []),
+                        ...[
+                            {
+                                name: "resourceName",
+                                in: "path",
+                                required: true,
+                                schema: { type: "string" },
+                                description: "Name of the resource to retrieve auth actions for",
+                            },
+                        ].filter((p) => !(existingOpenApi?.parameters || []).find((ep) => ep.name === p.name && ep.in === p.in)),
+                    ],
+                    responses: {
+                        ...(existingOpenApi?.responses || {}),
+                        "200": existingOpenApi?.responses?.["200"] || {
+                            description: "Auth actions for resource retrieved successfully",
+                            content: {
+                                "application/json": {
+                                    schema: this.getAuthActionSchema(),
+                                },
+                            },
+                        },
+                        "401": existingOpenApi?.responses?.["401"] || {
+                            description: "Authentication required",
+                        },
+                        "403": existingOpenApi?.responses?.["403"] || {
+                            description: "Insufficient permissions",
+                        },
+                        "404": existingOpenApi?.responses?.["404"] || {
+                            description: "Resource not found",
+                        },
+                    },
+                };
+            default:
+                return {};
+        }
+    }
+    getAuthActionSchema() {
+        const arkosConfig = getArkosConfig();
+        const isDynamicMode = arkosConfig?.authentication?.mode === "dynamic";
+        const properties = {
+            action: {
+                type: "string",
+                description: "Action name, e.g Create, View, Update, Download, Cancel",
+            },
+            resource: {
+                type: "string",
+                description: "Resource name, e.g user, user-role, product, author",
+            },
+            name: {
+                type: "string",
+                description: "Human-readable name for this permission",
+                nullable: true,
+            },
+            description: {
+                type: "string",
+                description: "Detailed description of what this permission allows",
+                nullable: true,
+            },
+            errorMessage: {
+                type: "string",
+                description: "Error message returned on forbidden response",
+                nullable: true,
+            },
+        };
+        if (!isDynamicMode) {
+            properties.roles = {
+                type: "array",
+                description: "Role names that have this permission, e.g Admin, Manager",
+                items: { type: "string" },
+            };
+        }
+        return {
+            type: "object",
+            properties,
+            required: ["action", "resource"],
+            additionalProperties: false,
+        };
+    }
+}
+const authOpenAPIGenerator = new AuthOpenAPIGenerator();
+export default authOpenAPIGenerator;
+//# sourceMappingURL=auth-openapi-generator.js.map

package/dist/esm/modules/auth/utils/auth-openapi-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-openapi-generator.js","sourceRoot":"","sources":["../../../../../src/modules/auth/utils/auth-openapi-generator.ts"],"names":[],"mappings":"AAIA,OAAO,6BAA6B,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAE7E,MAAM,oBAAoB;IACxB,gBAAgB,CACd,uBAAuD,EAAE,EACzD,QAA4B;QAE5B,MAAM,eAAe,GAAG,oBAAoB,EAAE,YAAY,EAAE,OAAO,IAAI,EAAE,CAAC;QAC1E,MAAM,iBAAiB,GACrB,OAAO,oBAAoB,EAAE,UAAU,KAAK,SAAS;YACrD,CAAC,CAAC,oBAAoB,EAAE,UAAU,EAAE,IAAI,CAAC;QAE3C,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,OAAO;gBACV,OAAO;oBACL,GAAG,eAAe;oBAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;oBACD,OAAO,EAAE,eAAe,EAAE,OAAO,IAAI,qBAAqB;oBAC1D,WAAW,EACT,eAAe,EAAE,WAAW;wBAC5B,kDAAkD;oBACpD,WAAW,EAAE,eAAe,EAAE,WAAW,IAAI,OAAO;oBACpD,GAAG,CAAC,CAAC,iBAAiB,IAAI;wBACxB,WAAW,EAAE,eAAe,EAAE,WAAW,IAAI;4BAC3C,QAAQ,EAAE,IAAI;4BACd,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE,6BAA6B,CAAC,mBAAmB,EAAE;iCAC5D;6BACF;yBACF;qBACF,CAAC;oBACF,SAAS,EAAE;wBACT,GAAG,CAAC,eAAe,EAAE,SAAS,IAAI,EAAE,CAAC;wBACrC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,kBAAkB;4BAC/B,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,UAAU,EAAE;4CACV,WAAW,EAAE;gDACX,IAAI,EAAE,QAAQ;gDACd,WAAW,EAAE,kBAAkB;6CAChC;yCACF;qCACF;iCACF;6BACF;yBACF;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,oBAAoB;yBAClC;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,qBAAqB;yBACnC;qBACF;iBACF,CAAC;YAEJ,KAAK,QAAQ;gBACX,OAAO;oBACL,GAAG,eAAe;oBAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;oBACD,OAAO,EAAE,eAAe,EAAE,OAAO,IAAI,wBAAwB;oBAC7D,WAAW,EACT,eAAe,EAAE,WAAW;wBAC5B,0CAA0C;oBAC5C,WAAW,EAAE,eAAe,EAAE,WAAW,IAAI,QAAQ;oBACrD,QAAQ,EAAE,eAAe,EAAE,QAAQ,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;oBAC3D,SAAS,EAAE;wBACT,GAAG,CAAC,eAAe,EAAE,SAAS,IAAI,EAAE,CAAC;wBACrC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,mBAAmB;yBACjC;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,yBAAyB;yBACvC;qBACF;iBACF,CAAC;YAEJ,KAAK,QAAQ;gBACX,OAAO;oBACL,GAAG,eAAe;oBAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;oBACD,OAAO,EAAE,eAAe,EAAE,OAAO,IAAI,qBAAqB;oBAC1D,WAAW,EACT,eAAe,EAAE,WAAW,IAAI,4BAA4B;oBAC9D,WAAW,EAAE,eAAe,EAAE,WAAW,IAAI,QAAQ;oBACrD,GAAG,CAAC,CAAC,iBAAiB,IAAI;wBACxB,WAAW,EAAE,eAAe,EAAE,WAAW,IAAI;4BAC3C,WAAW,EAAE,wBAAwB;4BACrC,QAAQ,EAAE,IAAI;4BACd,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE,6BAA6B,CAAC,oBAAoB,EAAE;iCAC7D;6BACF;yBACF;qBACF,CAAC;oBACF,SAAS,EAAE;wBACT,GAAG,CAAC,eAAe,EAAE,SAAS,IAAI,EAAE,CAAC;wBACrC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,2BAA2B;4BACxC,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE,6BAA6B,CAAC,qBAAqB,EAAE;iCAC9D;6BACF;yBACF;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,oBAAoB;yBAClC;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,qBAAqB;yBACnC;qBACF;iBACF,CAAC;YAEJ,KAAK,gBAAgB;gBACnB,OAAO;oBACL,GAAG,eAAe;oBAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;oBACD,OAAO,EAAE,eAAe,EAAE,OAAO,IAAI,sBAAsB;oBAC3D,WAAW,EACT,eAAe,EAAE,WAAW;wBAC5B,iDAAiD;oBACnD,WAAW,EAAE,eAAe,EAAE,WAAW,IAAI,gBAAgB;oBAC7D,QAAQ,EAAE,eAAe,EAAE,QAAQ,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;oBAC3D,GAAG,CAAC,CAAC,iBAAiB,IAAI;wBACxB,WAAW,EAAE,eAAe,EAAE,WAAW,IAAI;4BAC3C,QAAQ,EAAE,IAAI;4BACd,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EACJ,6BAA6B,CAAC,4BAA4B,EAAE;iCAC/D;6BACF;yBACF;qBACF,CAAC;oBACF,SAAS,EAAE;wBACT,GAAG,CAAC,eAAe,EAAE,SAAS,IAAI,EAAE,CAAC;wBACrC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,+BAA+B;4BAC5C,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,UAAU,EAAE;4CACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;4CAC9C,OAAO,EAAE;gDACP,IAAI,EAAE,QAAQ;gDACd,OAAO,EAAE,gCAAgC;6CAC1C;yCACF;qCACF;iCACF;6BACF;yBACF;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,kDAAkD;yBAChE;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,yBAAyB;yBACvC;qBACF;iBACF,CAAC;YAEJ,KAAK,OAAO;gBACV,OAAO;oBACL,GAAG,eAAe;oBAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;oBACD,OAAO,EAAE,eAAe,EAAE,OAAO,IAAI,8BAA8B;oBACnE,WAAW,EACT,eAAe,EAAE,WAAW;wBAC5B,8DAA8D;oBAChE,WAAW,EAAE,eAAe,EAAE,WAAW,IAAI,OAAO;oBACpD,QAAQ,EAAE,eAAe,EAAE,QAAQ,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;oBAC3D,SAAS,EAAE;wBACT,GAAG,CAAC,eAAe,EAAE,SAAS,IAAI,EAAE,CAAC;wBACrC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,yCAAyC;4BACtD,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE,6BAA6B,CAAC,qBAAqB,EAAE;iCAC9D;6BACF;yBACF;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,yBAAyB;yBACvC;qBACF;iBACF,CAAC;YAEJ,KAAK,UAAU;gBACb,OAAO;oBACL,GAAG,eAAe;oBAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;oBACD,OAAO,EACL,eAAe,EAAE,OAAO,IAAI,iCAAiC;oBAC/D,WAAW,EACT,eAAe,EAAE,WAAW;wBAC5B,0DAA0D;oBAC5D,WAAW,EAAE,eAAe,EAAE,WAAW,IAAI,UAAU;oBACvD,QAAQ,EAAE,eAAe,EAAE,QAAQ,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;oBAC3D,GAAG,CAAC,CAAC,iBAAiB,IAAI;wBACxB,WAAW,EAAE,eAAe,EAAE,WAAW,IAAI;4BAC3C,WAAW,EAAE,qBAAqB;4BAClC,QAAQ,EAAE,IAAI;4BACd,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EACJ,6BAA6B,CAAC,sBAAsB,EAAE;iCACzD;6BACF;yBACF;qBACF,CAAC;oBACF,SAAS,EAAE;wBACT,GAAG,CAAC,eAAe,EAAE,SAAS,IAAI,EAAE,CAAC;wBACrC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,2BAA2B;4BACxC,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE,6BAA6B,CAAC,qBAAqB,EAAE;iCAC9D;6BACF;yBACF;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,oBAAoB;yBAClC;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,yBAAyB;yBACvC;qBACF;iBACF,CAAC;YAEJ,KAAK,UAAU;gBACb,OAAO;oBACL,GAAG,eAAe;oBAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;oBACD,OAAO,EAAE,eAAe,EAAE,OAAO,IAAI,6BAA6B;oBAClE,WAAW,EACT,eAAe,EAAE,WAAW;wBAC5B,6CAA6C;oBAC/C,WAAW,EAAE,eAAe,EAAE,WAAW,IAAI,UAAU;oBACvD,QAAQ,EAAE,eAAe,EAAE,QAAQ,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;oBAC3D,SAAS,EAAE;wBACT,GAAG,CAAC,eAAe,EAAE,SAAS,IAAI,EAAE,CAAC;wBACrC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,8BAA8B;4BAC3C,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,UAAU,EAAE;4CACV,OAAO,EAAE;gDACP,IAAI,EAAE,QAAQ;gDACd,OAAO,EAAE,8BAA8B;6CACxC;yCACF;qCACF;iCACF;6BACF;yBACF;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,yBAAyB;yBACvC;qBACF;iBACF,CAAC;YAEJ,KAAK,oBAAoB;gBACvB,OAAO;oBACL,GAAG,eAAe;oBAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;oBACD,OAAO,EAAE,eAAe,EAAE,OAAO,IAAI,gCAAgC;oBACrE,WAAW,EACT,eAAe,EAAE,WAAW;wBAC5B,0EAA0E;oBAC5E,WAAW,EAAE,eAAe,EAAE,WAAW,IAAI,oBAAoB;oBACjE,QAAQ,EAAE,eAAe,EAAE,QAAQ,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;oBAC3D,SAAS,EAAE;wBACT,GAAG,CAAC,eAAe,EAAE,SAAS,IAAI,EAAE,CAAC;wBACrC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,qCAAqC;4BAClD,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE;iCACnC;6BACF;yBACF;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,yBAAyB;yBACvC;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,0BAA0B;yBACxC;qBACF;iBACF,CAAC;YAEJ,KAAK,mBAAmB;gBACtB,OAAO;oBACL,GAAG,eAAe;oBAClB,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAC5B;oBACD,OAAO,EACL,eAAe,EAAE,OAAO;wBACxB,wCAAwC;oBAC1C,WAAW,EACT,eAAe,EAAE,WAAW;wBAC5B,8DAA8D;oBAChE,WAAW,EAAE,eAAe,EAAE,WAAW,IAAI,mBAAmB;oBAChE,QAAQ,EAAE,eAAe,EAAE,QAAQ,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;oBAC3D,UAAU,EAAE;wBACV,GAAG,CAAC,eAAe,EAAE,UAAU,IAAI,EAAE,CAAC;wBACtC,GACE;4BACE;gCACE,IAAI,EAAE,cAAc;gCACpB,EAAE,EAAE,MAAM;gCACV,QAAQ,EAAE,IAAI;gCACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gCAC1B,WAAW,EACT,mDAAmD;6BACtD;yBAEJ,CAAC,MAAM,CACN,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,eAAe,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CACvC,CAAC,EAAO,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAClD,CACJ;qBACF;oBACD,SAAS,EAAE;wBACT,GAAG,CAAC,eAAe,EAAE,SAAS,IAAI,EAAE,CAAC;wBACrC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,kDAAkD;4BAC/D,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE;iCACnC;6BACF;yBACF;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,yBAAyB;yBACvC;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,0BAA0B;yBACxC;wBACD,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI;4BAC5C,WAAW,EAAE,oBAAoB;yBAClC;qBACF;iBACF,CAAC;YAEJ;gBACE,OAAO,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAEO,mBAAmB;QACzB,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,MAAM,aAAa,GAAG,WAAW,EAAE,cAAc,EAAE,IAAI,KAAK,SAAS,CAAC;QAEtE,MAAM,UAAU,GAAwB;YACtC,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,yDAAyD;aACvE;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,qDAAqD;aACnE;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,yCAAyC;gBACtD,QAAQ,EAAE,IAAI;aACf;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,qDAAqD;gBAClE,QAAQ,EAAE,IAAI;aACf;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,8CAA8C;gBAC3D,QAAQ,EAAE,IAAI;aACf;SACF,CAAC;QAEF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,UAAU,CAAC,KAAK,GAAG;gBACjB,IAAI,EAAE,OAAO;gBACb,WAAW,EAAE,0DAA0D;gBACvE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC1B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,UAAU;YACV,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;YAChC,oBAAoB,EAAE,KAAK;SAC5B,CAAC;IACJ,CAAC;CACF;AAED,MAAM,oBAAoB,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAExD,eAAe,oBAAoB,CAAC","sourcesContent":["import { AuthRouterEndpoint } from \"../../../types/router-config\";\nimport { ArkosRouteConfig } from \"../../../exports\";\nimport { ExtendedOperationObject } from \"../../../utils/arkos-router/types/openapi-config\";\nimport { OpenAPIV3 } from \"openapi-types\";\nimport authPrismaJsonSchemaGenerator from \"./auth-prisma-json-schema-generator\";\nimport { getArkosConfig } from \"../../../utils/helpers/arkos-config.helpers\";\n\nclass AuthOpenAPIGenerator {\n  getOpenApiConfig(\n    endpointRouterConfig: Omit<ArkosRouteConfig, \"path\"> = {},\n    endpoint: AuthRouterEndpoint\n  ): Partial<ExtendedOperationObject> {\n    const existingOpenApi = endpointRouterConfig?.experimental?.openapi || {};\n    const hasBodyValidation =\n      typeof endpointRouterConfig?.validation !== \"boolean\" &&\n      !!endpointRouterConfig?.validation?.body;\n\n    switch (endpoint) {\n      case \"login\":\n        return {\n          ...existingOpenApi,\n          tags: [\"Authentication\", ...(existingOpenApi?.tags || [])].filter(\n            (tag) => tag !== \"Defaults\"\n          ),\n          summary: existingOpenApi?.summary || \"Login to the system\",\n          description:\n            existingOpenApi?.description ||\n            \"Authenticates a user and returns an access token\",\n          operationId: existingOpenApi?.operationId || \"login\",\n          ...(!hasBodyValidation && {\n            requestBody: existingOpenApi?.requestBody || {\n              required: true,\n              content: {\n                \"application/json\": {\n                  schema: authPrismaJsonSchemaGenerator.generateLoginSchema(),\n                },\n              },\n            },\n          }),\n          responses: {\n            ...(existingOpenApi?.responses || {}),\n            \"200\": existingOpenApi?.responses?.[\"200\"] || {\n              description: \"Login successful\",\n              content: {\n                \"application/json\": {\n                  schema: {\n                    type: \"object\",\n                    properties: {\n                      accessToken: {\n                        type: \"string\",\n                        description: \"JWT access token\",\n                      },\n                    },\n                  },\n                },\n              },\n            },\n            \"400\": existingOpenApi?.responses?.[\"400\"] || {\n              description: \"Invalid input data\",\n            },\n            \"401\": existingOpenApi?.responses?.[\"401\"] || {\n              description: \"Invalid credentials\",\n            },\n          },\n        };\n\n      case \"logout\":\n        return {\n          ...existingOpenApi,\n          tags: [\"Authentication\", ...(existingOpenApi?.tags || [])].filter(\n            (tag) => tag !== \"Defaults\"\n          ),\n          summary: existingOpenApi?.summary || \"Logout from the system\",\n          description:\n            existingOpenApi?.description ||\n            \"Invalidates the current user's JWT token\",\n          operationId: existingOpenApi?.operationId || \"logout\",\n          security: existingOpenApi?.security || [{ BearerAuth: [] }],\n          responses: {\n            ...(existingOpenApi?.responses || {}),\n            \"204\": existingOpenApi?.responses?.[\"204\"] || {\n              description: \"Logout successful\",\n            },\n            \"401\": existingOpenApi?.responses?.[\"401\"] || {\n              description: \"Authentication required\",\n            },\n          },\n        };\n\n      case \"signup\":\n        return {\n          ...existingOpenApi,\n          tags: [\"Authentication\", ...(existingOpenApi?.tags || [])].filter(\n            (tag) => tag !== \"Defaults\"\n          ),\n          summary: existingOpenApi?.summary || \"Register a new user\",\n          description:\n            existingOpenApi?.description || \"Creates a new user account\",\n          operationId: existingOpenApi?.operationId || \"signup\",\n          ...(!hasBodyValidation && {\n            requestBody: existingOpenApi?.requestBody || {\n              description: \"User registration data\",\n              required: true,\n              content: {\n                \"application/json\": {\n                  schema: authPrismaJsonSchemaGenerator.generateSignupSchema(),\n                },\n              },\n            },\n          }),\n          responses: {\n            ...(existingOpenApi?.responses || {}),\n            \"201\": existingOpenApi?.responses?.[\"201\"] || {\n              description: \"User created successfully\",\n              content: {\n                \"application/json\": {\n                  schema: authPrismaJsonSchemaGenerator.generateGetMeResponse(),\n                },\n              },\n            },\n            \"400\": existingOpenApi?.responses?.[\"400\"] || {\n              description: \"Invalid input data\",\n            },\n            \"409\": existingOpenApi?.responses?.[\"409\"] || {\n              description: \"User already exists\",\n            },\n          },\n        };\n\n      case \"updatePassword\":\n        return {\n          ...existingOpenApi,\n          tags: [\"Authentication\", ...(existingOpenApi?.tags || [])].filter(\n            (tag) => tag !== \"Defaults\"\n          ),\n          summary: existingOpenApi?.summary || \"Update user password\",\n          description:\n            existingOpenApi?.description ||\n            \"Changes the password for the authenticated user\",\n          operationId: existingOpenApi?.operationId || \"updatePassword\",\n          security: existingOpenApi?.security || [{ BearerAuth: [] }],\n          ...(!hasBodyValidation && {\n            requestBody: existingOpenApi?.requestBody || {\n              required: true,\n              content: {\n                \"application/json\": {\n                  schema:\n                    authPrismaJsonSchemaGenerator.generateUpdatePasswordSchema(),\n                },\n              },\n            },\n          }),\n          responses: {\n            ...(existingOpenApi?.responses || {}),\n            \"200\": existingOpenApi?.responses?.[\"200\"] || {\n              description: \"Password updated successfully\",\n              content: {\n                \"application/json\": {\n                  schema: {\n                    type: \"object\",\n                    properties: {\n                      status: { type: \"string\", example: \"success\" },\n                      message: {\n                        type: \"string\",\n                        example: \"Password updated successfully!\",\n                      },\n                    },\n                  },\n                },\n              },\n            },\n            \"400\": existingOpenApi?.responses?.[\"400\"] || {\n              description: \"Invalid input data or current password incorrect\",\n            },\n            \"401\": existingOpenApi?.responses?.[\"401\"] || {\n              description: \"Authentication required\",\n            },\n          },\n        };\n\n      case \"getMe\":\n        return {\n          ...existingOpenApi,\n          tags: [\"Authentication\", ...(existingOpenApi?.tags || [])].filter(\n            (tag) => tag !== \"Defaults\"\n          ),\n          summary: existingOpenApi?.summary || \"Get current user information\",\n          description:\n            existingOpenApi?.description ||\n            \"Retrieves information about the currently authenticated user\",\n          operationId: existingOpenApi?.operationId || \"getMe\",\n          security: existingOpenApi?.security || [{ BearerAuth: [] }],\n          responses: {\n            ...(existingOpenApi?.responses || {}),\n            \"200\": existingOpenApi?.responses?.[\"200\"] || {\n              description: \"User information retrieved successfully\",\n              content: {\n                \"application/json\": {\n                  schema: authPrismaJsonSchemaGenerator.generateGetMeResponse(),\n                },\n              },\n            },\n            \"401\": existingOpenApi?.responses?.[\"401\"] || {\n              description: \"Authentication required\",\n            },\n          },\n        };\n\n      case \"updateMe\":\n        return {\n          ...existingOpenApi,\n          tags: [\"Authentication\", ...(existingOpenApi?.tags || [])].filter(\n            (tag) => tag !== \"Defaults\"\n          ),\n          summary:\n            existingOpenApi?.summary || \"Update current user information\",\n          description:\n            existingOpenApi?.description ||\n            \"Updates information for the currently authenticated user\",\n          operationId: existingOpenApi?.operationId || \"updateMe\",\n          security: existingOpenApi?.security || [{ BearerAuth: [] }],\n          ...(!hasBodyValidation && {\n            requestBody: existingOpenApi?.requestBody || {\n              description: \"User data to update\",\n              required: true,\n              content: {\n                \"application/json\": {\n                  schema:\n                    authPrismaJsonSchemaGenerator.generateUpdateMeSchema(),\n                },\n              },\n            },\n          }),\n          responses: {\n            ...(existingOpenApi?.responses || {}),\n            \"200\": existingOpenApi?.responses?.[\"200\"] || {\n              description: \"User updated successfully\",\n              content: {\n                \"application/json\": {\n                  schema: authPrismaJsonSchemaGenerator.generateGetMeResponse(),\n                },\n              },\n            },\n            \"400\": existingOpenApi?.responses?.[\"400\"] || {\n              description: \"Invalid input data\",\n            },\n            \"401\": existingOpenApi?.responses?.[\"401\"] || {\n              description: \"Authentication required\",\n            },\n          },\n        };\n\n      case \"deleteMe\":\n        return {\n          ...existingOpenApi,\n          tags: [\"Authentication\", ...(existingOpenApi?.tags || [])].filter(\n            (tag) => tag !== \"Defaults\"\n          ),\n          summary: existingOpenApi?.summary || \"Delete current user account\",\n          description:\n            existingOpenApi?.description ||\n            \"Marks the current user's account as deleted\",\n          operationId: existingOpenApi?.operationId || \"deleteMe\",\n          security: existingOpenApi?.security || [{ BearerAuth: [] }],\n          responses: {\n            ...(existingOpenApi?.responses || {}),\n            \"200\": existingOpenApi?.responses?.[\"200\"] || {\n              description: \"Account deleted successfully\",\n              content: {\n                \"application/json\": {\n                  schema: {\n                    type: \"object\",\n                    properties: {\n                      message: {\n                        type: \"string\",\n                        example: \"Account deleted successfully\",\n                      },\n                    },\n                  },\n                },\n              },\n            },\n            \"401\": existingOpenApi?.responses?.[\"401\"] || {\n              description: \"Authentication required\",\n            },\n          },\n        };\n\n      case \"findManyAuthAction\":\n        return {\n          ...existingOpenApi,\n          tags: [\"Authentication\", ...(existingOpenApi?.tags || [])].filter(\n            (tag) => tag !== \"Defaults\"\n          ),\n          summary: existingOpenApi?.summary || \"Get all authentication actions\",\n          description:\n            existingOpenApi?.description ||\n            \"Retrieves a list of all available authentication actions and permissions\",\n          operationId: existingOpenApi?.operationId || \"findManyAuthAction\",\n          security: existingOpenApi?.security || [{ BearerAuth: [] }],\n          responses: {\n            ...(existingOpenApi?.responses || {}),\n            \"200\": existingOpenApi?.responses?.[\"200\"] || {\n              description: \"Auth actions retrieved successfully\",\n              content: {\n                \"application/json\": {\n                  schema: this.getAuthActionSchema(),\n                },\n              },\n            },\n            \"401\": existingOpenApi?.responses?.[\"401\"] || {\n              description: \"Authentication required\",\n            },\n            \"403\": existingOpenApi?.responses?.[\"403\"] || {\n              description: \"Insufficient permissions\",\n            },\n          },\n        };\n\n      case \"findOneAuthAction\":\n        return {\n          ...existingOpenApi,\n          tags: [\"Authentication\", ...(existingOpenApi?.tags || [])].filter(\n            (tag) => tag !== \"Defaults\"\n          ),\n          summary:\n            existingOpenApi?.summary ||\n            \"Get authentication actions by resource\",\n          description:\n            existingOpenApi?.description ||\n            \"Retrieves all authentication actions for a specific resource\",\n          operationId: existingOpenApi?.operationId || \"findOneAuthAction\",\n          security: existingOpenApi?.security || [{ BearerAuth: [] }],\n          parameters: [\n            ...(existingOpenApi?.parameters || []),\n            ...(\n              [\n                {\n                  name: \"resourceName\",\n                  in: \"path\",\n                  required: true,\n                  schema: { type: \"string\" },\n                  description:\n                    \"Name of the resource to retrieve auth actions for\",\n                },\n              ] as OpenAPIV3.ParameterObject[]\n            ).filter(\n              (p) =>\n                !(existingOpenApi?.parameters || []).find(\n                  (ep: any) => ep.name === p.name && ep.in === p.in\n                )\n            ),\n          ],\n          responses: {\n            ...(existingOpenApi?.responses || {}),\n            \"200\": existingOpenApi?.responses?.[\"200\"] || {\n              description: \"Auth actions for resource retrieved successfully\",\n              content: {\n                \"application/json\": {\n                  schema: this.getAuthActionSchema(),\n                },\n              },\n            },\n            \"401\": existingOpenApi?.responses?.[\"401\"] || {\n              description: \"Authentication required\",\n            },\n            \"403\": existingOpenApi?.responses?.[\"403\"] || {\n              description: \"Insufficient permissions\",\n            },\n            \"404\": existingOpenApi?.responses?.[\"404\"] || {\n              description: \"Resource not found\",\n            },\n          },\n        };\n\n      default:\n        return {};\n    }\n  }\n\n  private getAuthActionSchema() {\n    const arkosConfig = getArkosConfig();\n    const isDynamicMode = arkosConfig?.authentication?.mode === \"dynamic\";\n\n    const properties: Record<string, any> = {\n      action: {\n        type: \"string\",\n        description: \"Action name, e.g Create, View, Update, Download, Cancel\",\n      },\n      resource: {\n        type: \"string\",\n        description: \"Resource name, e.g user, user-role, product, author\",\n      },\n      name: {\n        type: \"string\",\n        description: \"Human-readable name for this permission\",\n        nullable: true,\n      },\n      description: {\n        type: \"string\",\n        description: \"Detailed description of what this permission allows\",\n        nullable: true,\n      },\n      errorMessage: {\n        type: \"string\",\n        description: \"Error message returned on forbidden response\",\n        nullable: true,\n      },\n    };\n\n    if (!isDynamicMode) {\n      properties.roles = {\n        type: \"array\",\n        description: \"Role names that have this permission, e.g Admin, Manager\",\n        items: { type: \"string\" },\n      };\n    }\n\n    return {\n      type: \"object\",\n      properties,\n      required: [\"action\", \"resource\"],\n      additionalProperties: false,\n    };\n  }\n}\n\nconst authOpenAPIGenerator = new AuthOpenAPIGenerator();\n\nexport default authOpenAPIGenerator;\n"]}