ecrs-auth-core 1.0.69 → 1.0.71

package/dist/auth.controller.js

@@ -1,206 +1,207 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthController = void 0;
-const common_1 = require("@nestjs/common");
-const auth_service_1 = require("./auth.service");
-const login_dto_1 = require("./dtos/login.dto");
-const login_response_dto_1 = require("./dtos/login-response.dto");
-const swagger_1 = require("@nestjs/swagger");
-let AuthController = class AuthController {
-    constructor(authService) {
-        this.authService = authService;
-    }
-    async login(request, body) {
-        // Get client IP from socket/request
-        const clientIp = this.getClientIp(request);
-        const userAgent = request.get('user-agent') || 'Unknown';
-        // Extract additional client data
-        const additionalData = this.extractClientData(request, userAgent);
-        console.log(`📍 Login attempt from IP: ${clientIp}, User-Agent: ${userAgent}`);
-        // Validate user with IP restriction check
-        const user = await this.authService.validateUser(body.email, body.password, clientIp);
-        if (!user) {
-            // Save failed login attempt
-            await this.authService.saveLastLogin({ email: body.email }, clientIp, 'failed', 'Invalid credentials or IP not allowed', additionalData).catch(() => { }); // Ignore errors
-            throw new common_1.UnauthorizedException('Login failed: email or password not matched or IP not allowed');
-        }
-        const requestedModuleId = Number(body.moduleId);
-        if (!Number.isFinite(requestedModuleId)) {
-            throw new common_1.UnauthorizedException('You are not authorized to access this module');
-        }
-        const allowedDb = await this.authService.hasModuleAccess(user.id, requestedModuleId);
-        if (!allowedDb) {
-            throw new common_1.UnauthorizedException('You are not authorized to access this module');
-        }
-        const perms = await this.authService.getPermissions(user.id);
-        if (!Array.isArray(perms.modules) || !perms.modules.includes(requestedModuleId)) {
-            throw new common_1.UnauthorizedException('You are not authorized to access this module');
-        }
-        const loginResponse = await this.authService.login(user, requestedModuleId);
-        // Save successful login details with additional client data
-        await this.authService.saveLastLogin(user, clientIp, 'success', undefined, {
-            ...additionalData,
-            moduleId: requestedModuleId,
-        }).catch(() => { }); // Ignore errors - don't block login
-        return loginResponse;
-    }
-    /**
-     * Extract additional client data from request and user-agent
-     */
-    extractClientData(request, userAgent) {
-        const { browser, os, deviceType } = this.parseUserAgent(userAgent);
-        const ipAddressName = request.get('x-forwarded-host') || request.get('host') || 'Unknown';
-        const location = request.get('cf-ipcountry') || 'Unknown'; // Cloudflare header
-        return {
-            browser,
-            deviceType,
-            operatingSystem: os,
-            userAgent,
-            location,
-            ipAddressName,
-        };
-    }
-    /**
-     * Parse user-agent string to extract browser, OS, and device type
-     */
-    parseUserAgent(userAgent) {
-        const ua = userAgent.toLowerCase();
-        // Detect browser
-        let browser = 'Unknown';
-        if (ua.includes('chrome'))
-            browser = 'Chrome';
-        else if (ua.includes('firefox'))
-            browser = 'Firefox';
-        else if (ua.includes('safari'))
-            browser = 'Safari';
-        else if (ua.includes('edg/'))
-            browser = 'Edge';
-        else if (ua.includes('opera') || ua.includes('opr/'))
-            browser = 'Opera';
-        else if (ua.includes('trident'))
-            browser = 'Internet Explorer';
-        // Detect OS
-        let os = 'Unknown';
-        if (ua.includes('windows'))
-            os = 'Windows';
-        else if (ua.includes('mac'))
-            os = 'macOS';
-        else if (ua.includes('linux'))
-            os = 'Linux';
-        else if (ua.includes('iphone') || ua.includes('ipad'))
-            os = 'iOS';
-        else if (ua.includes('android'))
-            os = 'Android';
-        // Detect device type
-        let deviceType = 'Desktop';
-        if (ua.includes('mobile') || ua.includes('android') || ua.includes('iphone'))
-            deviceType = 'Mobile';
-        else if (ua.includes('tablet') || ua.includes('ipad'))
-            deviceType = 'Tablet';
-        return { browser, os, deviceType };
-    }
-    /**
-     * Extract client IP from request
-     * Priority:
-     * 1. X-Forwarded-For header (proxy)
-     * 2. X-Real-IP header (nginx)
-     * 3. CF-Connecting-IP (Cloudflare)
-     * 4. request.ip (Express native)
-     * 5. socket.remoteAddress (direct connection)
-     */
-    getClientIp(request) {
-        // Check X-Forwarded-For header (most common with proxies)
-        const xForwardedFor = request.headers['x-forwarded-for'];
-        if (xForwardedFor) {
-            const ips = Array.isArray(xForwardedFor)
-                ? xForwardedFor
-                : xForwardedFor.split(',');
-            return ips[0].trim();
-        }
-        // Check X-Real-IP header (nginx)
-        const xRealIp = request.headers['x-real-ip'];
-        if (xRealIp) {
-            return Array.isArray(xRealIp) ? xRealIp[0] : xRealIp;
-        }
-        // Check CF-Connecting-IP (Cloudflare)
-        const cfIp = request.headers['cf-connecting-ip'];
-        if (cfIp) {
-            return Array.isArray(cfIp) ? cfIp[0] : cfIp;
-        }
-        // Use Express native request.ip (handles proxies if trust proxy is set)
-        if (request.ip) {
-            return request.ip;
-        }
-        // Fallback to socket remote address
-        const socketIp = (request.socket.remoteAddress || '').replace(/^.*:/, '');
-        return socketIp || 'unknown';
-    }
-};
-exports.AuthController = AuthController;
-__decorate([
-    (0, common_1.Post)('login'),
-    (0, common_1.HttpCode)(200),
-    (0, swagger_1.ApiBody)({
-        required: true,
-        description: 'Credentials required for authentication',
-        schema: {
-            $ref: (0, swagger_1.getSchemaPath)(login_dto_1.LoginDto),
-            example: { email: 'user@example.com', password: 'StrongP@ssw0rd', moduleId: '3' },
-        },
-    }),
-    (0, swagger_1.ApiOperation)({
-        summary: 'User login',
-        description: 'Authenticate user and return access token'
-    }),
-    (0, swagger_1.ApiOkResponse)({
-        description: 'Login successful',
-        schema: {
-            $ref: (0, swagger_1.getSchemaPath)(login_response_dto_1.LoginResponseDto),
-            example: {
-                status: true,
-                message: 'Login successful',
-                data: {
-                    user: {
-                        id: 1,
-                        email: 'user@example.com',
-                        roleId: 2,
-                        roleName: 'Admin',
-                        moduleId: 3,
-                        name: 'John Doe',
-                        firstName: 'John',
-                        lastName: 'Doe',
-                        mobileNo: 9876543210,
-                        userImage: 'https://cdn.example.com/avatar.png',
-                        employeeId: 1001
-                    }
-                },
-                access_token: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...'
-            }
-        }
-    }),
-    (0, swagger_1.ApiUnauthorizedResponse)({ description: 'Invalid credentials or IP not allowed' }),
-    __param(0, (0, common_1.Req)()),
-    __param(1, (0, common_1.Body)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, login_dto_1.LoginDto]),
-    __metadata("design:returntype", Promise)
-], AuthController.prototype, "login", null);
-exports.AuthController = AuthController = __decorate([
-    (0, swagger_1.ApiTags)('auth'),
-    (0, swagger_1.ApiBearerAuth)(),
-    (0, swagger_1.ApiExtraModels)(login_dto_1.LoginDto, login_response_dto_1.LoginResponseDto),
-    (0, common_1.Controller)('auth'),
-    __metadata("design:paramtypes", [auth_service_1.AuthService])
-], AuthController);
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthController = void 0;
+const common_1 = require("@nestjs/common");
+const auth_service_1 = require("./auth.service");
+const login_dto_1 = require("./dtos/login.dto");
+const login_response_dto_1 = require("./dtos/login-response.dto");
+const swagger_1 = require("@nestjs/swagger");
+let AuthController = class AuthController {
+    constructor(authService) {
+        this.authService = authService;
+    }
+    async login(request, body) {
+        // Get client IP from socket/request
+        const clientIp = this.getClientIp(request);
+        const userAgent = request.get('user-agent') || 'Unknown';
+        // Extract additional client data
+        const additionalData = this.extractClientData(request, userAgent);
+        console.log(`📍 Login attempt from IP: ${clientIp}, User-Agent: ${userAgent}`);
+        // Validate user with IP restriction check
+        const user = await this.authService.validateUser(body.email, body.password, clientIp);
+        console.log(`🔐 User validation result for ${body.email}: ${user ? 'Success' : 'Failed'}`);
+        if (!user) {
+            // Save failed login attempt
+            await this.authService.saveLastLogin({ email: body.email }, clientIp, 'failed', 'Invalid credentials or IP not allowed', additionalData).catch(() => { }); // Ignore errors
+            throw new common_1.UnauthorizedException('Login failed: email or password not matched or IP not allowed');
+        }
+        const requestedModuleId = Number(body.moduleId);
+        if (!Number.isFinite(requestedModuleId)) {
+            throw new common_1.UnauthorizedException('You are not authorized to access this module');
+        }
+        const allowedDb = await this.authService.hasModuleAccess(user.id, requestedModuleId);
+        if (!allowedDb) {
+            throw new common_1.UnauthorizedException('You are not authorized to access this module');
+        }
+        const perms = await this.authService.getPermissions(user.id);
+        if (!Array.isArray(perms.modules) || !perms.modules.includes(requestedModuleId)) {
+            throw new common_1.UnauthorizedException('You are not authorized to access this module');
+        }
+        const loginResponse = await this.authService.login(user, requestedModuleId);
+        // Save successful login details with additional client data
+        await this.authService.saveLastLogin(user, clientIp, 'success', undefined, {
+            ...additionalData,
+            moduleId: requestedModuleId,
+        }).catch(() => { }); // Ignore errors - don't block login
+        return loginResponse;
+    }
+    /**
+     * Extract additional client data from request and user-agent
+     */
+    extractClientData(request, userAgent) {
+        const { browser, os, deviceType } = this.parseUserAgent(userAgent);
+        const ipAddressName = request.get('x-forwarded-host') || request.get('host') || 'Unknown';
+        const location = request.get('cf-ipcountry') || 'Unknown'; // Cloudflare header
+        return {
+            browser,
+            deviceType,
+            operatingSystem: os,
+            userAgent,
+            location,
+            ipAddressName,
+        };
+    }
+    /**
+     * Parse user-agent string to extract browser, OS, and device type
+     */
+    parseUserAgent(userAgent) {
+        const ua = userAgent.toLowerCase();
+        // Detect browser
+        let browser = 'Unknown';
+        if (ua.includes('chrome'))
+            browser = 'Chrome';
+        else if (ua.includes('firefox'))
+            browser = 'Firefox';
+        else if (ua.includes('safari'))
+            browser = 'Safari';
+        else if (ua.includes('edg/'))
+            browser = 'Edge';
+        else if (ua.includes('opera') || ua.includes('opr/'))
+            browser = 'Opera';
+        else if (ua.includes('trident'))
+            browser = 'Internet Explorer';
+        // Detect OS
+        let os = 'Unknown';
+        if (ua.includes('windows'))
+            os = 'Windows';
+        else if (ua.includes('mac'))
+            os = 'macOS';
+        else if (ua.includes('linux'))
+            os = 'Linux';
+        else if (ua.includes('iphone') || ua.includes('ipad'))
+            os = 'iOS';
+        else if (ua.includes('android'))
+            os = 'Android';
+        // Detect device type
+        let deviceType = 'Desktop';
+        if (ua.includes('mobile') || ua.includes('android') || ua.includes('iphone'))
+            deviceType = 'Mobile';
+        else if (ua.includes('tablet') || ua.includes('ipad'))
+            deviceType = 'Tablet';
+        return { browser, os, deviceType };
+    }
+    /**
+     * Extract client IP from request
+     * Priority:
+     * 1. X-Forwarded-For header (proxy)
+     * 2. X-Real-IP header (nginx)
+     * 3. CF-Connecting-IP (Cloudflare)
+     * 4. request.ip (Express native)
+     * 5. socket.remoteAddress (direct connection)
+     */
+    getClientIp(request) {
+        // Check X-Forwarded-For header (most common with proxies)
+        const xForwardedFor = request.headers['x-forwarded-for'];
+        if (xForwardedFor) {
+            const ips = Array.isArray(xForwardedFor)
+                ? xForwardedFor
+                : xForwardedFor.split(',');
+            return ips[0].trim();
+        }
+        // Check X-Real-IP header (nginx)
+        const xRealIp = request.headers['x-real-ip'];
+        if (xRealIp) {
+            return Array.isArray(xRealIp) ? xRealIp[0] : xRealIp;
+        }
+        // Check CF-Connecting-IP (Cloudflare)
+        const cfIp = request.headers['cf-connecting-ip'];
+        if (cfIp) {
+            return Array.isArray(cfIp) ? cfIp[0] : cfIp;
+        }
+        // Use Express native request.ip (handles proxies if trust proxy is set)
+        if (request.ip) {
+            return request.ip;
+        }
+        // Fallback to socket remote address
+        const socketIp = (request.socket.remoteAddress || '').replace(/^.*:/, '');
+        return socketIp || 'unknown';
+    }
+};
+exports.AuthController = AuthController;
+__decorate([
+    (0, common_1.Post)('login'),
+    (0, common_1.HttpCode)(200),
+    (0, swagger_1.ApiBody)({
+        required: true,
+        description: 'Credentials required for authentication',
+        schema: {
+            $ref: (0, swagger_1.getSchemaPath)(login_dto_1.LoginDto),
+            example: { email: 'user@example.com', password: 'StrongP@ssw0rd', moduleId: '3' },
+        },
+    }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'User login',
+        description: 'Authenticate user and return access token'
+    }),
+    (0, swagger_1.ApiOkResponse)({
+        description: 'Login successful',
+        schema: {
+            $ref: (0, swagger_1.getSchemaPath)(login_response_dto_1.LoginResponseDto),
+            example: {
+                status: true,
+                message: 'Login successful',
+                data: {
+                    user: {
+                        id: 1,
+                        email: 'user@example.com',
+                        roleId: 2,
+                        roleName: 'Admin',
+                        moduleId: 3,
+                        name: 'John Doe',
+                        firstName: 'John',
+                        lastName: 'Doe',
+                        mobileNo: 9876543210,
+                        userImage: 'https://cdn.example.com/avatar.png',
+                        employeeId: 1001
+                    }
+                },
+                access_token: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...'
+            }
+        }
+    }),
+    (0, swagger_1.ApiUnauthorizedResponse)({ description: 'Invalid credentials or IP not allowed' }),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, login_dto_1.LoginDto]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "login", null);
+exports.AuthController = AuthController = __decorate([
+    (0, swagger_1.ApiTags)('auth'),
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, swagger_1.ApiExtraModels)(login_dto_1.LoginDto, login_response_dto_1.LoginResponseDto),
+    (0, common_1.Controller)('auth'),
+    __metadata("design:paramtypes", [auth_service_1.AuthService])
+], AuthController);