axiodb 9.7.9 → 11.9.12

package/lib/server/config/keys.d.ts

@@ -9,7 +9,7 @@ export declare enum ServerKeys {
     DEFAULT_KEY_ROUNDS = 1
 }
 export declare const CORS_CONFIG: {
-    ORIGIN: string;
+    ORIGIN: string[];
     METHODS: string[];
     ALLOWED_HEADERS: string[];
     EXPOSED_HEADERS: string[];
@@ -18,7 +18,7 @@ export declare const CORS_CONFIG: {
 };
 export declare const staticPath: string;
 interface MainRoutesInterface {
-    method: "GET" | "POST" | "PUT" | "DELETE";
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
     path: string;
     description: string;
     payload?: Record<string, any>;

package/lib/server/config/keys.js

@@ -18,8 +18,12 @@ var ServerKeys;
     ServerKeys[ServerKeys["DEFAULT_KEY_ROUNDS"] = 1] = "DEFAULT_KEY_ROUNDS";
 })(ServerKeys || (exports.ServerKeys = ServerKeys = {}));
 // Config for CORS
+// NOTE: ORIGIN cannot be "*" while ALLOW_CREDENTIALS is true - browsers reject
+// wildcard origins on credentialed (cookie-bearing) requests. 5173 is the GUI's
+// Vite dev server; 27018 is where the built GUI is served from in production
+// (same-origin there, so CORS doesn't matter for that case).
 exports.CORS_CONFIG = {
-    ORIGIN: "*",
+    ORIGIN: ["http://localhost:5173", "http://localhost:27018"],
     METHODS: ["GET", "HEAD", "PUT", "PATCH", "POST", "DELETE"],
     ALLOWED_HEADERS: ["Content-Type", "Authorization"],
     EXPOSED_HEADERS: ["Content-Length", "X-Requested-With"],
@@ -117,6 +121,32 @@ exports.AvailableRoutes = [
             },
         ],
     },
+    {
+        groupName: "Index",
+        description: "Index Management Endpoints",
+        Paths: [
+            {
+                method: "GET",
+                path: "/api/index/list/?dbName&collectionName",
+                description: "List all indexes registered on a collection",
+            },
+            {
+                method: "POST",
+                path: "/api/index/create/",
+                description: "Create one or more indexes on a collection",
+                payload: {
+                    dbName: "string",
+                    collectionName: "string",
+                    fieldNames: "array",
+                },
+            },
+            {
+                method: "DELETE",
+                path: "/api/index/delete/?dbName&collectionName&indexName",
+                description: "Delete an index from a collection",
+            },
+        ],
+    },
     {
         groupName: "CRUD Operations",
         description: "CRUD Operations Endpoints",
@@ -195,6 +225,84 @@ exports.AvailableRoutes = [
             },
         ],
     },
+    {
+        groupName: "Authentication",
+        description: "Login, session, and self-service password endpoints",
+        Paths: [
+            {
+                method: "POST",
+                path: "/api/auth/login",
+                description: "Authenticate with username/password and start a session",
+                payload: { username: "string", password: "string" },
+            },
+            {
+                method: "POST",
+                path: "/api/auth/logout",
+                description: "End the current session",
+            },
+            {
+                method: "GET",
+                path: "/api/auth/me",
+                description: "Get the currently authenticated user's role and permissions",
+            },
+            {
+                method: "PATCH",
+                path: "/api/auth/change-password",
+                description: "Change the current user's own password",
+                payload: { currentPassword: "string", newPassword: "string" },
+            },
+        ],
+    },
+    {
+        groupName: "User & Role Management",
+        description: "Super Admin-only endpoints for managing users and roles",
+        Paths: [
+            {
+                method: "GET",
+                path: "/api/auth/users",
+                description: "List all users",
+            },
+            {
+                method: "POST",
+                path: "/api/auth/users",
+                description: "Create a new user",
+                payload: { username: "string", password: "string", role: "string" },
+            },
+            {
+                method: "PATCH",
+                path: "/api/auth/users/:username/role",
+                description: "Change a user's assigned role",
+                payload: { role: "string" },
+            },
+            {
+                method: "PATCH",
+                path: "/api/auth/users/:username/reset-password",
+                description: "Reset a user's password (forces change on next login)",
+                payload: { newPassword: "string" },
+            },
+            {
+                method: "DELETE",
+                path: "/api/auth/users/:username",
+                description: "Delete a user",
+            },
+            {
+                method: "GET",
+                path: "/api/auth/roles",
+                description: "List all roles",
+            },
+            {
+                method: "POST",
+                path: "/api/auth/roles",
+                description: "Create a new role from the predefined permission catalogue",
+                payload: { roleName: "string", permissions: "array" },
+            },
+            {
+                method: "GET",
+                path: "/api/auth/roles/permissions",
+                description: "List the full predefined permission catalogue",
+            },
+        ],
+    },
 ];
 exports.AuthorInfo = {
     name: "Ankan Saha",

package/lib/server/config/keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../source/server/config/keys.ts"],"names":[],"mappings":";;;;;;AAAA,uDAAuD;AACvD,gDAAwB;AAExB,IAAY,UASX;AATD,WAAY,UAAU;IACpB,+CAAY,CAAA;IACZ,mCAAqB,CAAA;IACrB,wCAA0B,CAAA;IAC1B,kDAAoC,CAAA;IACpC,oDAAsC,CAAA;IACtC,uEAAyD,CAAA;IACzD,iDAAwB,IAAI,CAAC,GAAG,EAAE,2BAAA,CAAA;IAClC,uEAAsB,CAAA;AACxB,CAAC,EATW,UAAU,aAAV,UAAU,GAAV,UAAU,QASrB;AAED,kBAAkB;AACL,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,GAAG;IACX,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;IAC1D,eAAe,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;IAClD,eAAe,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;IACvD,OAAO,EAAE,KAAK,EAAE,sBAAsB;IACtC,iBAAiB,EAAE,IAAI;CACxB,CAAC;AAEW,QAAA,UAAU,GAAW,cAAI,CAAC,OAAO,CAC5C,SAAS,EACT,uBAAuB,CACxB,CAAC;AAcF,SAAS;AACI,QAAA,eAAe,GAA0B;IACpD;QACE,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,uBAAuB;QACpC,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,2CAA2C;aACzD;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,+CAA+C;aAC7D;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,+BAA+B;aAC7C;SACF;KACF;IACD;QACE,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,+BAA+B;QAC5C,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,oBAAoB;gBAC1B,WAAW,EAAE,6BAA6B;aAC3C;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,uBAAuB;gBACpC,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;iBACf;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,mBAAmB;gBAChC,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;iBACf;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,iCAAiC;gBACvC,WAAW,EAAE,wCAAwC;aACtD;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,0CAA0C;gBACvD,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;iBACb;aACF;SACF;KACF;IACD;QACE,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,iCAAiC;QAC9C,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,mCAAmC;gBACzC,WAAW,EAAE,+BAA+B;aAC7C;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,oCAAoC;gBAC1C,WAAW,EAAE,yBAAyB;gBACtC,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,cAAc,EAAE,QAAQ;oBACxB,MAAM,EAAE,SAAS;oBACjB,GAAG,EAAE,QAAQ;iBACd;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,0DAA0D;gBAChE,WAAW,EAAE,qBAAqB;aACnC;SACF;KACF;IACD;QACE,SAAS,EAAE,iBAAiB;QAC5B,WAAW,EAAE,2BAA2B;QACxC,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,qCAAqC;gBAClD,IAAI,EAAE,gDAAgD;aACvD;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,8CAA8C;gBAC3D,IAAI,EAAE,yDAAyD;gBAC/D,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;iBAChB;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,gDAAgD;gBAC7D,IAAI,EAAE,4DAA4D;aACnE;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,uCAAuC;gBACpD,IAAI,EAAE,8CAA8C;gBACpD,OAAO,EAAE;oBACP,QAAQ,EAAE,iCAAiC;iBAC5C;aACF;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,uCAAuC;gBACpD,IAAI,EAAE,mDAAmD;gBACzD,OAAO,EAAE;oBACP,SAAS,EAAE,0CAA0C;iBACtD;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,mDAAmD;gBAChE,IAAI,EAAE,+DAA+D;gBACrE,OAAO,EAAE;oBACP,QAAQ,EAAE,iCAAiC;iBAC5C;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,sDAAsD;gBACnE,IAAI,EAAE,8DAA8D;gBACpE,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE,QAAQ;iBACjB;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,mDAAmD;gBAChE,IAAI,EAAE,+DAA+D;aACtE;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,sDAAsD;gBACnE,IAAI,EAAE,yEAAyE;gBAC/E,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;iBAChB;aACF;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EACT,gFAAgF;gBAClF,IAAI,EAAE,iDAAiD;gBACvD,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO;iBACrB;aACF;SACF;KACF;CACF,CAAC;AAWW,QAAA,UAAU,GAAmB;IACxC,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,mBAAmB;IAChC,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,6BAA6B;IACpC,QAAQ,EAAE,2CAA2C;IACrD,MAAM,EAAE,8BAA8B;CACvC,CAAC"}
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../source/server/config/keys.ts"],"names":[],"mappings":";;;;;;AAAA,uDAAuD;AACvD,gDAAwB;AAExB,IAAY,UASX;AATD,WAAY,UAAU;IACpB,+CAAY,CAAA;IACZ,mCAAqB,CAAA;IACrB,wCAA0B,CAAA;IAC1B,kDAAoC,CAAA;IACpC,oDAAsC,CAAA;IACtC,uEAAyD,CAAA;IACzD,iDAAwB,IAAI,CAAC,GAAG,EAAE,2BAAA,CAAA;IAClC,uEAAsB,CAAA;AACxB,CAAC,EATW,UAAU,aAAV,UAAU,GAAV,UAAU,QASrB;AAED,kBAAkB;AAClB,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,6DAA6D;AAChD,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,CAAC,uBAAuB,EAAE,wBAAwB,CAAC;IAC3D,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;IAC1D,eAAe,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;IAClD,eAAe,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;IACvD,OAAO,EAAE,KAAK,EAAE,sBAAsB;IACtC,iBAAiB,EAAE,IAAI;CACxB,CAAC;AAEW,QAAA,UAAU,GAAW,cAAI,CAAC,OAAO,CAC5C,SAAS,EACT,uBAAuB,CACxB,CAAC;AAcF,SAAS;AACI,QAAA,eAAe,GAA0B;IACpD;QACE,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,uBAAuB;QACpC,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,2CAA2C;aACzD;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,+CAA+C;aAC7D;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,+BAA+B;aAC7C;SACF;KACF;IACD;QACE,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,+BAA+B;QAC5C,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,oBAAoB;gBAC1B,WAAW,EAAE,6BAA6B;aAC3C;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,uBAAuB;gBACpC,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;iBACf;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,mBAAmB;gBAChC,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;iBACf;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,iCAAiC;gBACvC,WAAW,EAAE,wCAAwC;aACtD;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,0CAA0C;gBACvD,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;iBACb;aACF;SACF;KACF;IACD;QACE,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,iCAAiC;QAC9C,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,mCAAmC;gBACzC,WAAW,EAAE,+BAA+B;aAC7C;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,oCAAoC;gBAC1C,WAAW,EAAE,yBAAyB;gBACtC,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,cAAc,EAAE,QAAQ;oBACxB,MAAM,EAAE,SAAS;oBACjB,GAAG,EAAE,QAAQ;iBACd;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,0DAA0D;gBAChE,WAAW,EAAE,qBAAqB;aACnC;SACF;KACF;IACD;QACE,SAAS,EAAE,OAAO;QAClB,WAAW,EAAE,4BAA4B;QACzC,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,wCAAwC;gBAC9C,WAAW,EAAE,6CAA6C;aAC3D;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,oBAAoB;gBAC1B,WAAW,EAAE,4CAA4C;gBACzD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,cAAc,EAAE,QAAQ;oBACxB,UAAU,EAAE,OAAO;iBACpB;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,oDAAoD;gBAC1D,WAAW,EAAE,mCAAmC;aACjD;SACF;KACF;IACD;QACE,SAAS,EAAE,iBAAiB;QAC5B,WAAW,EAAE,2BAA2B;QACxC,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,qCAAqC;gBAClD,IAAI,EAAE,gDAAgD;aACvD;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,8CAA8C;gBAC3D,IAAI,EAAE,yDAAyD;gBAC/D,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;iBAChB;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,gDAAgD;gBAC7D,IAAI,EAAE,4DAA4D;aACnE;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,uCAAuC;gBACpD,IAAI,EAAE,8CAA8C;gBACpD,OAAO,EAAE;oBACP,QAAQ,EAAE,iCAAiC;iBAC5C;aACF;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,uCAAuC;gBACpD,IAAI,EAAE,mDAAmD;gBACzD,OAAO,EAAE;oBACP,SAAS,EAAE,0CAA0C;iBACtD;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,mDAAmD;gBAChE,IAAI,EAAE,+DAA+D;gBACrE,OAAO,EAAE;oBACP,QAAQ,EAAE,iCAAiC;iBAC5C;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,sDAAsD;gBACnE,IAAI,EAAE,8DAA8D;gBACpE,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE,QAAQ;iBACjB;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,mDAAmD;gBAChE,IAAI,EAAE,+DAA+D;aACtE;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,sDAAsD;gBACnE,IAAI,EAAE,yEAAyE;gBAC/E,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;iBAChB;aACF;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EACT,gFAAgF;gBAClF,IAAI,EAAE,iDAAiD;gBACvD,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO;iBACrB;aACF;SACF;KACF;IACD;QACE,SAAS,EAAE,gBAAgB;QAC3B,WAAW,EAAE,qDAAqD;QAClE,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,yDAAyD;gBACtE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE;aACpD;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,kBAAkB;gBACxB,WAAW,EAAE,yBAAyB;aACvC;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,cAAc;gBACpB,WAAW,EAAE,6DAA6D;aAC3E;YACD;gBACE,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,2BAA2B;gBACjC,WAAW,EAAE,wCAAwC;gBACrD,OAAO,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;aAC9D;SACF;KACF;IACD;QACE,SAAS,EAAE,wBAAwB;QACnC,WAAW,EAAE,yDAAyD;QACtE,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,gBAAgB;aAC9B;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,mBAAmB;gBAChC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;aACpE;YACD;gBACE,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,gCAAgC;gBACtC,WAAW,EAAE,+BAA+B;gBAC5C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC5B;YACD;gBACE,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,0CAA0C;gBAChD,WAAW,EAAE,uDAAuD;gBACpE,OAAO,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE;aACnC;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,2BAA2B;gBACjC,WAAW,EAAE,eAAe;aAC7B;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,gBAAgB;aAC9B;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,4DAA4D;gBACzE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE;aACtD;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,6BAA6B;gBACnC,WAAW,EAAE,+CAA+C;aAC7D;SACF;KACF;CACF,CAAC;AAWW,QAAA,UAAU,GAAmB;IACxC,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,mBAAmB;IAChC,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,6BAA6B;IACpC,QAAQ,EAAE,2CAA2C;IACrD,MAAM,EAAE,8BAA8B;CACvC,CAAC"}

package/lib/server/config/server.js

@@ -17,11 +17,13 @@ exports.default = createAxioDBControlServer;
 const fastify_1 = __importDefault(require("fastify"));
 const cors_1 = __importDefault(require("@fastify/cors"));
 const static_1 = __importDefault(require("@fastify/static"));
+const cookie_1 = __importDefault(require("@fastify/cookie"));
 const path_1 = __importDefault(require("path"));
 const fs_1 = __importDefault(require("fs"));
 const keys_1 = require("./keys");
 const PortFreeChecker_1 = __importDefault(require("./PortFreeChecker"));
 const Router_1 = __importDefault(require("../router/Router"));
+const SessionStore_service_1 = __importDefault(require("../../Services/Auth/SessionStore.service"));
 function createAxioDBControlServer(AxioDBInstance) {
     return __awaiter(this, void 0, void 0, function* () {
         yield (0, PortFreeChecker_1.default)(keys_1.ServerKeys.PORT);
@@ -39,6 +41,9 @@ function createAxioDBControlServer(AxioDBInstance) {
             exposedHeaders: keys_1.CORS_CONFIG.EXPOSED_HEADERS, // Expose specific headers
             maxAge: keys_1.CORS_CONFIG.MAX_AGE, // Cache preflight response for 24 hours
         });
+        // Cookie support for session-based authentication (no signing secret needed -
+        // the cookie value is meaningless without a matching entry in SessionStore's map)
+        yield AxioDBControlServer.register(cookie_1.default);
         // Configure JSON parsing
         AxioDBControlServer.addContentTypeParser("application/json", { parseAs: "string", bodyLimit: 52428800 }, (req, body, done) => {
             try {
@@ -71,6 +76,7 @@ function createAxioDBControlServer(AxioDBInstance) {
                 port: Number(keys_1.ServerKeys.PORT),
                 host: "0.0.0.0",
             });
+            SessionStore_service_1.default.startCleanupSweep();
             console.log(`AxioDB Control Server is running on http://localhost:${keys_1.ServerKeys.PORT}`);
         }
         catch (err) {

package/lib/server/config/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../source/server/config/server.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,sDAAsD;AACtD,sDAA8B;AAC9B,yDAAwC;AACxC,6DAA4C;AAC5C,gDAAwB;AACxB,4CAAoB;AACpB,iCAA6D;AAC7D,wEAAmD;AAEnD,8DAAsC;AAEtC,mCACE,cAAsB;;QAEtB,MAAM,IAAA,yBAAkB,EAAC,iBAAU,CAAC,IAAI,CAAC,CAAC;QAE1C,MAAM,mBAAmB,GAAG,IAAA,iBAAO,EAAC;YAClC,MAAM,EAAE,KAAK,EAAE,0BAA0B;YACzC,UAAU,EAAE,IAAI,EAAE,kCAAkC;YACpD,SAAS,EAAE,QAAQ,EAAE,yBAAyB;SAC/C,CAAC,CAAC;QAEH,qBAAqB;QACrB,MAAM,mBAAmB,CAAC,QAAQ,CAAC,cAAW,EAAE;YAC9C,MAAM,EAAE,kBAAW,CAAC,MAAM,EAAE,oBAAoB;YAChD,OAAO,EAAE,kBAAW,CAAC,OAAO,EAAE,yBAAyB;YACvD,cAAc,EAAE,kBAAW,CAAC,eAAe,EAAE,yBAAyB;YACtE,WAAW,EAAE,kBAAW,CAAC,iBAAiB,EAAE,oBAAoB;YAChE,cAAc,EAAE,kBAAW,CAAC,eAAe,EAAE,0BAA0B;YACvE,MAAM,EAAE,kBAAW,CAAC,OAAO,EAAE,wCAAwC;SACtE,CAAC,CAAC;QAEH,yBAAyB;QACzB,mBAAmB,CAAC,oBAAoB,CACtC,kBAAkB,EAClB,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,EAC1C,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAClB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAc,CAAC,CAAC;gBACxC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAY,EAAE,SAAS,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CACF,CAAC;QAEF,6CAA6C;QAC7C,MAAM,mBAAmB,CAAC,QAAQ,CAAC,gBAAa,EAAE;YAChD,IAAI,EAAE,iBAAU;YAChB,MAAM,EAAE,GAAG;YACX,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QAEH,uDAAuD;QACvD,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAO,OAAO,EAAE,KAAK,EAAE,EAAE;YACpD,MAAM,SAAS,GAAG,cAAI,CAAC,IAAI,CAAC,iBAAU,EAAE,YAAY,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,YAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC,CAAA,CAAC,CAAC;QAEH,4CAA4C;QAC5C,mBAAmB,CAAC,QAAQ,CAAC,gBAAM,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,cAAc,EAAE,yCAAyC;SAC1D,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,mBAAmB,CAAC,MAAM,CAAC;gBAC/B,IAAI,EAAE,MAAM,CAAC,iBAAU,CAAC,IAAI,CAAC;gBAC7B,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CACT,wDAAwD,iBAAU,CAAC,IAAI,EAAE,CAC1E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;CAAA"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../source/server/config/server.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,sDAAsD;AACtD,sDAA8B;AAC9B,yDAAwC;AACxC,6DAA4C;AAC5C,6DAA4C;AAC5C,gDAAwB;AACxB,4CAAoB;AACpB,iCAA6D;AAC7D,wEAAmD;AAEnD,8DAAsC;AACtC,oGAAoE;AAEpE,mCACE,cAAsB;;QAEtB,MAAM,IAAA,yBAAkB,EAAC,iBAAU,CAAC,IAAI,CAAC,CAAC;QAE1C,MAAM,mBAAmB,GAAG,IAAA,iBAAO,EAAC;YAClC,MAAM,EAAE,KAAK,EAAE,0BAA0B;YACzC,UAAU,EAAE,IAAI,EAAE,kCAAkC;YACpD,SAAS,EAAE,QAAQ,EAAE,yBAAyB;SAC/C,CAAC,CAAC;QAEH,qBAAqB;QACrB,MAAM,mBAAmB,CAAC,QAAQ,CAAC,cAAW,EAAE;YAC9C,MAAM,EAAE,kBAAW,CAAC,MAAM,EAAE,oBAAoB;YAChD,OAAO,EAAE,kBAAW,CAAC,OAAO,EAAE,yBAAyB;YACvD,cAAc,EAAE,kBAAW,CAAC,eAAe,EAAE,yBAAyB;YACtE,WAAW,EAAE,kBAAW,CAAC,iBAAiB,EAAE,oBAAoB;YAChE,cAAc,EAAE,kBAAW,CAAC,eAAe,EAAE,0BAA0B;YACvE,MAAM,EAAE,kBAAW,CAAC,OAAO,EAAE,wCAAwC;SACtE,CAAC,CAAC;QAEH,8EAA8E;QAC9E,kFAAkF;QAClF,MAAM,mBAAmB,CAAC,QAAQ,CAAC,gBAAa,CAAC,CAAC;QAElD,yBAAyB;QACzB,mBAAmB,CAAC,oBAAoB,CACtC,kBAAkB,EAClB,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,EAC1C,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAClB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAc,CAAC,CAAC;gBACxC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAY,EAAE,SAAS,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CACF,CAAC;QAEF,6CAA6C;QAC7C,MAAM,mBAAmB,CAAC,QAAQ,CAAC,gBAAa,EAAE;YAChD,IAAI,EAAE,iBAAU;YAChB,MAAM,EAAE,GAAG;YACX,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QAEH,uDAAuD;QACvD,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAO,OAAO,EAAE,KAAK,EAAE,EAAE;YACpD,MAAM,SAAS,GAAG,cAAI,CAAC,IAAI,CAAC,iBAAU,EAAE,YAAY,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,YAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC,CAAA,CAAC,CAAC;QAEH,4CAA4C;QAC5C,mBAAmB,CAAC,QAAQ,CAAC,gBAAM,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,cAAc,EAAE,yCAAyC;SAC1D,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,mBAAmB,CAAC,MAAM,CAAC;gBAC/B,IAAI,EAAE,MAAM,CAAC,iBAAU,CAAC,IAAI,CAAC;gBAC7B,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;YACH,8BAAY,CAAC,iBAAiB,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CACT,wDAAwD,iBAAU,CAAC,IAAI,EAAE,CAC1E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;CAAA"}

package/lib/server/controller/Auth/Auth.controller.d.ts

@@ -0,0 +1,12 @@
+import { FastifyReply, FastifyRequest } from "fastify";
+import { ResponseBuilder } from "../../helper/responseBuilder.helper";
+export default class AuthController {
+    private readonly authService;
+    constructor();
+    login(request: FastifyRequest, reply: FastifyReply): Promise<ResponseBuilder>;
+    logout(request: FastifyRequest, reply: FastifyReply): Promise<ResponseBuilder>;
+    me(request: FastifyRequest, reply: FastifyReply): Promise<ResponseBuilder>;
+    changePassword(request: FastifyRequest, reply: FastifyReply): Promise<ResponseBuilder>;
+    private setSessionCookie;
+    private extractSid;
+}

package/lib/server/controller/Auth/Auth.controller.js

@@ -0,0 +1,162 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const StatusCode_1 = require("../../../config/Keys/StatusCode");
+const responseBuilder_helper_1 = __importStar(require("../../helper/responseBuilder.helper"));
+const AuthService_service_1 = __importDefault(require("../../../Services/Auth/AuthService.service"));
+const SessionStore_service_1 = __importDefault(require("../../../Services/Auth/SessionStore.service"));
+const CookieCodec_helper_1 = __importDefault(require("../../../Services/Auth/CookieCodec.helper"));
+const PermissionChecker_helper_1 = __importDefault(require("../../../Services/Auth/PermissionChecker.helper"));
+const AuthEvents_service_1 = __importDefault(require("../../../Services/Auth/AuthEvents.service"));
+const LoginRateLimiter_service_1 = __importDefault(require("../../../Services/Auth/LoginRateLimiter.service"));
+const Permissions_1 = require("../../../config/Keys/Permissions");
+const MIN_PASSWORD_LENGTH = 4;
+class AuthController {
+    constructor() {
+        this.authService = new AuthService_service_1.default();
+    }
+    login(request, reply) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { username, password } = request.body;
+            if (!username || typeof username !== "string") {
+                return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.BAD_REQUEST, "Username is required"));
+            }
+            if (!password || typeof password !== "string") {
+                return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.BAD_REQUEST, "Password is required"));
+            }
+            const cooldownRemaining = LoginRateLimiter_service_1.default.getCooldownRemaining(request.ip);
+            if (cooldownRemaining > 0) {
+                return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.TOO_MANY_REQUESTS, `Too many failed login attempts. Try again in ${Math.ceil(cooldownRemaining / 1000)}s.`));
+            }
+            const result = yield this.authService.login(username, password);
+            if (!result.success || !result.user) {
+                LoginRateLimiter_service_1.default.recordFailure(request.ip);
+                return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.UNAUTHORIZED, result.message));
+            }
+            LoginRateLimiter_service_1.default.recordSuccess(request.ip);
+            const session = SessionStore_service_1.default.createSession(result.user.username, result.user.role, result.user.mustChangePassword);
+            this.setSessionCookie(reply, session.sid);
+            return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.OK, "Login successful", {
+                username: result.user.username,
+                role: result.user.role,
+                permissions: PermissionChecker_helper_1.default.getPermissionsForRole(result.user.role),
+                mustChangePassword: result.user.mustChangePassword,
+            }));
+        });
+    }
+    logout(request, reply) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const sid = this.extractSid(request);
+            if (sid) {
+                SessionStore_service_1.default.revokeSession(sid);
+            }
+            reply.clearCookie(Permissions_1.SESSION_COOKIE_NAME, { path: "/" });
+            return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.OK, "Logged out successfully"));
+        });
+    }
+    me(request, reply) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const authUser = request.authUser;
+            if (!authUser) {
+                return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.UNAUTHORIZED, "Not authenticated"));
+            }
+            return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.OK, "OK", {
+                username: authUser.username,
+                role: authUser.role,
+                mustChangePassword: authUser.mustChangePassword,
+                permissions: PermissionChecker_helper_1.default.getPermissionsForRole(authUser.role),
+            }));
+        });
+    }
+    changePassword(request, reply) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const authUser = request.authUser;
+            if (!authUser) {
+                return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.UNAUTHORIZED, "Not authenticated"));
+            }
+            const { currentPassword, newPassword } = request.body;
+            if (!currentPassword || typeof currentPassword !== "string") {
+                return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.BAD_REQUEST, "Current password is required"));
+            }
+            if (!newPassword || typeof newPassword !== "string" || newPassword.length < MIN_PASSWORD_LENGTH) {
+                return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.BAD_REQUEST, `New password must be at least ${MIN_PASSWORD_LENGTH} characters`));
+            }
+            const result = yield this.authService.changeOwnPassword(authUser.username, currentPassword, newPassword);
+            if (!result.success) {
+                return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.BAD_REQUEST, result.message));
+            }
+            // Rotate the session so a still-live cookie can't keep referencing the old password state.
+            SessionStore_service_1.default.revokeSessionsForUser(authUser.username);
+            AuthEvents_service_1.default.emit("user-revoked", authUser.username);
+            const session = SessionStore_service_1.default.createSession(authUser.username, authUser.role, false);
+            this.setSessionCookie(reply, session.sid);
+            return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.OK, "Password changed successfully", {
+                username: authUser.username,
+                role: authUser.role,
+                permissions: PermissionChecker_helper_1.default.getPermissionsForRole(authUser.role),
+                mustChangePassword: false,
+            }));
+        });
+    }
+    setSessionCookie(reply, sid) {
+        const cookieValue = CookieCodec_helper_1.default.encode({ sid, iat: Date.now() });
+        reply.setCookie(Permissions_1.SESSION_COOKIE_NAME, cookieValue, {
+            httpOnly: true,
+            sameSite: "lax",
+            secure: "auto",
+            path: "/",
+            maxAge: Permissions_1.SESSION_TTL_MS / 1000,
+        });
+    }
+    extractSid(request) {
+        const rawCookie = request.cookies[Permissions_1.SESSION_COOKIE_NAME];
+        const payload = rawCookie ? CookieCodec_helper_1.default.decode(rawCookie) : null;
+        return payload ? payload.sid : null;
+    }
+}
+exports.default = AuthController;
+//# sourceMappingURL=Auth.controller.js.map

package/lib/server/controller/Auth/Auth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Auth.controller.js","sourceRoot":"","sources":["../../../../source/server/controller/Auth/Auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,gEAA8D;AAC9D,8FAAmG;AACnG,qGAAqE;AACrE,uGAAuE;AACvE,mGAAoE;AACpE,+GAAgF;AAChF,mGAAmE;AACnE,+GAA+E;AAC/E,kEAAuF;AAMvF,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B;IAGE;QACE,IAAI,CAAC,WAAW,GAAG,IAAI,6BAAW,EAAE,CAAC;IACvC,CAAC;IAEY,KAAK,CAAC,OAAuB,EAAE,KAAmB;;YAC7D,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,IAAwB,CAAC;YAEhE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9C,OAAO,IAAA,qCAAY,EAAC,KAAK,EAAE,IAAA,gCAAa,EAAC,wBAAW,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;YAC7F,CAAC;YACD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9C,OAAO,IAAA,qCAAY,EAAC,KAAK,EAAE,IAAA,gCAAa,EAAC,wBAAW,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;YAC7F,CAAC;YAED,MAAM,iBAAiB,GAAG,kCAAgB,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5E,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO,IAAA,qCAAY,EACjB,KAAK,EACL,IAAA,gCAAa,EACX,wBAAW,CAAC,iBAAiB,EAC7B,gDAAgD,IAAI,CAAC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,IAAI,CACxF,CACF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpC,kCAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC3C,OAAO,IAAA,qCAAY,EAAC,KAAK,EAAE,IAAA,gCAAa,EAAC,wBAAW,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACtF,CAAC;YACD,kCAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAE3C,MAAM,OAAO,GAAG,8BAAY,CAAC,aAAa,CACxC,MAAM,CAAC,IAAI,CAAC,QAAQ,EACpB,MAAM,CAAC,IAAI,CAAC,IAAI,EAChB,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAC/B,CAAC;YACF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAE1C,OAAO,IAAA,qCAAY,EACjB,KAAK,EACL,IAAA,gCAAa,EAAC,wBAAW,CAAC,EAAE,EAAE,kBAAkB,EAAE;gBAChD,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;gBAC9B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;gBACtB,WAAW,EAAE,kCAAiB,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtE,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB;aACnD,CAAC,CACH,CAAC;QACJ,CAAC;KAAA;IAEY,MAAM,CAAC,OAAuB,EAAE,KAAmB;;YAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,GAAG,EAAE,CAAC;gBACR,8BAAY,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;YACD,KAAK,CAAC,WAAW,CAAC,iCAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACtD,OAAO,IAAA,qCAAY,EAAC,KAAK,EAAE,IAAA,gCAAa,EAAC,wBAAW,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACvF,CAAC;KAAA;IAEY,EAAE,CAAC,OAAuB,EAAE,KAAmB;;YAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAA,qCAAY,EAAC,KAAK,EAAE,IAAA,gCAAa,EAAC,wBAAW,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,IAAA,qCAAY,EACjB,KAAK,EACL,IAAA,gCAAa,EAAC,wBAAW,CAAC,EAAE,EAAE,IAAI,EAAE;gBAClC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;gBAC/C,WAAW,EAAE,kCAAiB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC;aACpE,CAAC,CACH,CAAC;QACJ,CAAC;KAAA;IAEY,cAAc,CACzB,OAAuB,EACvB,KAAmB;;YAEnB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAA,qCAAY,EAAC,KAAK,EAAE,IAAA,gCAAa,EAAC,wBAAW,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC,CAAC;YAC3F,CAAC;YAED,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,IAAiC,CAAC;YACnF,IAAI,CAAC,eAAe,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;gBAC5D,OAAO,IAAA,qCAAY,EACjB,KAAK,EACL,IAAA,gCAAa,EAAC,wBAAW,CAAC,WAAW,EAAE,8BAA8B,CAAC,CACvE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;gBAChG,OAAO,IAAA,qCAAY,EACjB,KAAK,EACL,IAAA,gCAAa,EACX,wBAAW,CAAC,WAAW,EACvB,iCAAiC,mBAAmB,aAAa,CAClE,CACF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CACrD,QAAQ,CAAC,QAAQ,EACjB,eAAe,EACf,WAAW,CACZ,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,IAAA,qCAAY,EAAC,KAAK,EAAE,IAAA,gCAAa,EAAC,wBAAW,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACrF,CAAC;YAED,2FAA2F;YAC3F,8BAAY,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtD,4BAAU,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,8BAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACpF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAE1C,OAAO,IAAA,qCAAY,EACjB,KAAK,EACL,IAAA,gCAAa,EAAC,wBAAW,CAAC,EAAE,EAAE,+BAA+B,EAAE;gBAC7D,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,kCAAiB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnE,kBAAkB,EAAE,KAAK;aAC1B,CAAC,CACH,CAAC;QACJ,CAAC;KAAA;IAEO,gBAAgB,CAAC,KAAmB,EAAE,GAAW;QACvD,MAAM,WAAW,GAAG,4BAAW,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACjE,KAAK,CAAC,SAAS,CAAC,iCAAmB,EAAE,WAAW,EAAE;YAChD,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,4BAAc,GAAG,IAAI;SAC9B,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,OAAuB;QACxC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,iCAAmB,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,4BAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACtC,CAAC;CACF"}

package/lib/server/controller/Auth/RoleManagement.controller.d.ts

@@ -0,0 +1,9 @@
+import { FastifyReply, FastifyRequest } from "fastify";
+import { ResponseBuilder } from "../../helper/responseBuilder.helper";
+export default class RoleManagementController {
+    private readonly authService;
+    constructor();
+    listRoles(request: FastifyRequest, reply: FastifyReply): Promise<ResponseBuilder>;
+    createRole(request: FastifyRequest, reply: FastifyReply): Promise<ResponseBuilder>;
+    listPermissions(request: FastifyRequest, reply: FastifyReply): Promise<ResponseBuilder>;
+}

package/lib/server/controller/Auth/RoleManagement.controller.js

@@ -0,0 +1,89 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const StatusCode_1 = require("../../../config/Keys/StatusCode");
+const responseBuilder_helper_1 = __importStar(require("../../helper/responseBuilder.helper"));
+const AuthService_service_1 = __importDefault(require("../../../Services/Auth/AuthService.service"));
+const Permissions_1 = require("../../../config/Keys/Permissions");
+class RoleManagementController {
+    constructor() {
+        this.authService = new AuthService_service_1.default();
+    }
+    listRoles(request, reply) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const roles = yield this.authService.listRoles();
+            return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.OK, "List of Roles", roles));
+        });
+    }
+    createRole(request, reply) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { roleName, permissions } = request.body;
+            if (!roleName || typeof roleName !== "string" || roleName.trim() === "") {
+                return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.BAD_REQUEST, "Role name is required"));
+            }
+            if (!Array.isArray(permissions) || permissions.length === 0) {
+                return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.BAD_REQUEST, "At least one permission is required"));
+            }
+            if (!permissions.every((key) => typeof key === "string")) {
+                return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.BAD_REQUEST, "Permissions must be an array of strings"));
+            }
+            const result = yield this.authService.createRole(roleName, permissions);
+            if (!result.success) {
+                const statusCode = result.conflict ? StatusCode_1.StatusCodes.CONFLICT : StatusCode_1.StatusCodes.BAD_REQUEST;
+                return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(statusCode, result.message));
+            }
+            return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.CREATED, result.message, { roleName, permissions }));
+        });
+    }
+    listPermissions(request, reply) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return (0, responseBuilder_helper_1.sendResponse)(reply, (0, responseBuilder_helper_1.default)(StatusCode_1.StatusCodes.OK, "Permission catalogue", Permissions_1.PERMISSION_CATALOGUE));
+        });
+    }
+}
+exports.default = RoleManagementController;
+//# sourceMappingURL=RoleManagement.controller.js.map

package/lib/server/controller/Auth/RoleManagement.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleManagement.controller.js","sourceRoot":"","sources":["../../../../source/server/controller/Auth/RoleManagement.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,gEAA8D;AAC9D,8FAAmG;AACnG,qGAAqE;AAErE,kEAAwE;AAExE;IAGE;QACE,IAAI,CAAC,WAAW,GAAG,IAAI,6BAAW,EAAE,CAAC;IACvC,CAAC;IAEY,SAAS,CAAC,OAAuB,EAAE,KAAmB;;YACjE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;YACjD,OAAO,IAAA,qCAAY,EAAC,KAAK,EAAE,IAAA,gCAAa,EAAC,wBAAW,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;QACpF,CAAC;KAAA;IAEY,UAAU,CAAC,OAAuB,EAAE,KAAmB;;YAClE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,IAA6B,CAAC;YAExE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACxE,OAAO,IAAA,qCAAY,EAAC,KAAK,EAAE,IAAA,gCAAa,EAAC,wBAAW,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5D,OAAO,IAAA,qCAAY,EACjB,KAAK,EACL,IAAA,gCAAa,EAAC,wBAAW,CAAC,WAAW,EAAE,qCAAqC,CAAC,CAC9E,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACzD,OAAO,IAAA,qCAAY,EACjB,KAAK,EACL,IAAA,gCAAa,EAAC,wBAAW,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAClF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACxE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,wBAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,wBAAW,CAAC,WAAW,CAAC;gBACpF,OAAO,IAAA,qCAAY,EAAC,KAAK,EAAE,IAAA,gCAAa,EAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,IAAA,qCAAY,EACjB,KAAK,EACL,IAAA,gCAAa,EAAC,wBAAW,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAC9E,CAAC;QACJ,CAAC;KAAA;IAEY,eAAe,CAC1B,OAAuB,EACvB,KAAmB;;YAEnB,OAAO,IAAA,qCAAY,EACjB,KAAK,EACL,IAAA,gCAAa,EAAC,wBAAW,CAAC,EAAE,EAAE,sBAAsB,EAAE,kCAAoB,CAAC,CAC5E,CAAC;QACJ,CAAC;KAAA;CACF"}

package/lib/server/controller/Auth/UserManagement.controller.d.ts

@@ -0,0 +1,11 @@
+import { FastifyReply, FastifyRequest } from "fastify";
+import { ResponseBuilder } from "../../helper/responseBuilder.helper";
+export default class UserManagementController {
+    private readonly authService;
+    constructor();
+    listUsers(request: FastifyRequest, reply: FastifyReply): Promise<ResponseBuilder>;
+    createUser(request: FastifyRequest, reply: FastifyReply): Promise<ResponseBuilder>;
+    resetUserPassword(request: FastifyRequest, reply: FastifyReply): Promise<ResponseBuilder>;
+    updateUserRole(request: FastifyRequest, reply: FastifyReply): Promise<ResponseBuilder>;
+    deleteUser(request: FastifyRequest, reply: FastifyReply): Promise<ResponseBuilder>;
+}