hi-secure 1.0.15 → 1.0.16

package/dist/logging/winstonSetup.js

@@ -1,15 +1,73 @@
 "use strict";
+// // import winston from "winston";
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.logError = exports.logWarn = exports.logInfo = exports.logger = void 0;
+// // export const logger = winston.createLogger({
+// //     level: "info",
+// //     format: winston.format.combine(
+// //         winston.format.timestamp(),
+// //         winston.format.json()
+// //     ),
+// //     transports: [
+// //         new winston.transports.Console()
+// //     ]
+// // });
+// // // Shortcut helpers
+// // export const logInfo = (msg: string, meta: any = {}) => logger.info(msg, meta);
+// // export const logWarn = (msg: string, meta: any = {}) => logger.warn(msg, meta);
+// // export const logError = (msg: string, meta: any = {}) => logger.error(msg, meta);
+// import winston from "winston";
+// const { combine, timestamp, printf, colorize, errors } = winston.format;
+// const logFormat = printf(({ level, message, timestamp, ...meta }) => {
+//     const metaString =
+//         Object.keys(meta).length > 0 ? ` | ${JSON.stringify(meta)}` : "";
+//     return `${timestamp} ${level}: ${message}${metaString}`;
+// });
+// export const logger = winston.createLogger({
+//     level: "info",
+//     format: combine(
+//         errors({ stack: true }),
+//         timestamp({ format: "HH:mm:ss" })
+//     ),
+//     transports: [
+//         new winston.transports.Console({
+//             format: combine(
+//                 colorize({ all: true }),
+//                 logFormat
+//             )
+//         })
+//     ]
+// });
+// // Shortcut helpers
+// export const logInfo = (msg: string, meta: any = {}) =>
+//     logger.info(msg, meta);
+// export const logWarn = (msg: string, meta: any = {}) =>
+//     logger.warn(msg, meta);
+// export const logError = (msg: string, meta: any = {}) =>
+//     logger.error(msg, meta);
 const winston_1 = __importDefault(require("winston"));
+const { combine, timestamp, printf, colorize, errors } = winston_1.default.format;
+// Explicit colors (best practice)
+winston_1.default.addColors({
+    error: "red",
+    warn: "yellow",
+    info: "green",
+    http: "cyan"
+});
+const logFormat = printf(({ level, message, timestamp, ...meta }) => {
+    const metaString = Object.keys(meta).length > 0 ? ` | ${JSON.stringify(meta)}` : "";
+    return `${timestamp} ${level}: ${message}${metaString}`;
+});
 exports.logger = winston_1.default.createLogger({
-    level: "info",
-    format: winston_1.default.format.combine(winston_1.default.format.timestamp(), winston_1.default.format.json()),
+    level: "http", // 🔴 MOST IMPORTANT FIX
+    format: combine(errors({ stack: true }), timestamp({ format: "HH:mm:ss" })),
     transports: [
-        new winston_1.default.transports.Console()
+        new winston_1.default.transports.Console({
+            format: combine(colorize({ all: true }), logFormat)
+        })
     ]
 });
 // Shortcut helpers

package/dist/logging/winstonSetup.js.map

@@ -1 +1 @@
-{"version":3,"file":"winstonSetup.js","sourceRoot":"","sources":["../../src/logging/winstonSetup.ts"],"names":[],"mappings":";;;;;;AAAA,sDAA8B;AAEjB,QAAA,MAAM,GAAG,iBAAO,CAAC,YAAY,CAAC;IACvC,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,iBAAO,CAAC,MAAM,CAAC,OAAO,CAC1B,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAC1B,iBAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CACxB;IACD,UAAU,EAAE;QACR,IAAI,iBAAO,CAAC,UAAU,CAAC,OAAO,EAAE;KACnC;CACJ,CAAC,CAAC;AAEH,mBAAmB;AACZ,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,OAAY,EAAE,EAAE,EAAE,CAAC,cAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAAlE,QAAA,OAAO,WAA2D;AACxE,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,OAAY,EAAE,EAAE,EAAE,CAAC,cAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAAlE,QAAA,OAAO,WAA2D;AACxE,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,OAAY,EAAE,EAAE,EAAE,CAAC,cAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAApE,QAAA,QAAQ,YAA4D","sourcesContent":["import winston from \"winston\";\r\n\r\nexport const logger = winston.createLogger({\r\n    level: \"info\",\r\n    format: winston.format.combine(\r\n        winston.format.timestamp(),\r\n        winston.format.json()\r\n    ),\r\n    transports: [\r\n        new winston.transports.Console()\r\n    ]\r\n});\r\n\r\n// Shortcut helpers\r\nexport const logInfo = (msg: string, meta: any = {}) => logger.info(msg, meta);\r\nexport const logWarn = (msg: string, meta: any = {}) => logger.warn(msg, meta);\r\nexport const logError = (msg: string, meta: any = {}) => logger.error(msg, meta);\r\n"]}
+{"version":3,"file":"winstonSetup.js","sourceRoot":"","sources":["../../src/logging/winstonSetup.ts"],"names":[],"mappings":";AAAA,oCAAoC;;;;;;AAEpC,kDAAkD;AAClD,wBAAwB;AACxB,yCAAyC;AACzC,yCAAyC;AACzC,mCAAmC;AACnC,YAAY;AACZ,uBAAuB;AACvB,8CAA8C;AAC9C,WAAW;AACX,SAAS;AAET,yBAAyB;AACzB,qFAAqF;AACrF,qFAAqF;AACrF,uFAAuF;AAKvF,iCAAiC;AAEjC,2EAA2E;AAE3E,yEAAyE;AACzE,yBAAyB;AACzB,4EAA4E;AAE5E,+DAA+D;AAC/D,MAAM;AAEN,+CAA+C;AAC/C,qBAAqB;AACrB,uBAAuB;AACvB,mCAAmC;AACnC,4CAA4C;AAC5C,SAAS;AACT,oBAAoB;AACpB,2CAA2C;AAC3C,+BAA+B;AAC/B,2CAA2C;AAC3C,4BAA4B;AAC5B,gBAAgB;AAChB,aAAa;AACb,QAAQ;AACR,MAAM;AAEN,sBAAsB;AACtB,0DAA0D;AAC1D,8BAA8B;AAE9B,0DAA0D;AAC1D,8BAA8B;AAE9B,2DAA2D;AAC3D,+BAA+B;AAM/B,sDAA8B;AAE9B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,iBAAO,CAAC,MAAM,CAAC;AAExE,kCAAkC;AAClC,iBAAO,CAAC,SAAS,CAAC;IACd,KAAK,EAAE,KAAK;IACZ,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,MAAM;CACf,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE;IAChE,MAAM,UAAU,GACZ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAErE,OAAO,GAAG,SAAS,IAAI,KAAK,KAAK,OAAO,GAAG,UAAU,EAAE,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEU,QAAA,MAAM,GAAG,iBAAO,CAAC,YAAY,CAAC;IACvC,KAAK,EAAE,MAAM,EAAE,wBAAwB;IACvC,MAAM,EAAE,OAAO,CACX,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EACvB,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CACpC;IACD,UAAU,EAAE;QACR,IAAI,iBAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAC3B,MAAM,EAAE,OAAO,CACX,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EACvB,SAAS,CACZ;SACJ,CAAC;KACL;CACJ,CAAC,CAAC;AAEH,mBAAmB;AACZ,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,OAAY,EAAE,EAAE,EAAE,CACnD,cAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AADd,QAAA,OAAO,WACO;AAEpB,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,OAAY,EAAE,EAAE,EAAE,CACnD,cAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AADd,QAAA,OAAO,WACO;AAEpB,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,OAAY,EAAE,EAAE,EAAE,CACpD,cAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AADf,QAAA,QAAQ,YACO","sourcesContent":["// // import winston from \"winston\";\r\n\r\n// // export const logger = winston.createLogger({\r\n// //     level: \"info\",\r\n// //     format: winston.format.combine(\r\n// //         winston.format.timestamp(),\r\n// //         winston.format.json()\r\n// //     ),\r\n// //     transports: [\r\n// //         new winston.transports.Console()\r\n// //     ]\r\n// // });\r\n\r\n// // // Shortcut helpers\r\n// // export const logInfo = (msg: string, meta: any = {}) => logger.info(msg, meta);\r\n// // export const logWarn = (msg: string, meta: any = {}) => logger.warn(msg, meta);\r\n// // export const logError = (msg: string, meta: any = {}) => logger.error(msg, meta);\r\n\r\n\r\n\r\n\r\n// import winston from \"winston\";\r\n\r\n// const { combine, timestamp, printf, colorize, errors } = winston.format;\r\n\r\n// const logFormat = printf(({ level, message, timestamp, ...meta }) => {\r\n//     const metaString =\r\n//         Object.keys(meta).length > 0 ? ` | ${JSON.stringify(meta)}` : \"\";\r\n\r\n//     return `${timestamp} ${level}: ${message}${metaString}`;\r\n// });\r\n\r\n// export const logger = winston.createLogger({\r\n//     level: \"info\",\r\n//     format: combine(\r\n//         errors({ stack: true }),\r\n//         timestamp({ format: \"HH:mm:ss\" })\r\n//     ),\r\n//     transports: [\r\n//         new winston.transports.Console({\r\n//             format: combine(\r\n//                 colorize({ all: true }),\r\n//                 logFormat\r\n//             )\r\n//         })\r\n//     ]\r\n// });\r\n\r\n// // Shortcut helpers\r\n// export const logInfo = (msg: string, meta: any = {}) =>\r\n//     logger.info(msg, meta);\r\n\r\n// export const logWarn = (msg: string, meta: any = {}) =>\r\n//     logger.warn(msg, meta);\r\n\r\n// export const logError = (msg: string, meta: any = {}) =>\r\n//     logger.error(msg, meta);\r\n\r\n\r\n\r\n\r\n\r\nimport winston from \"winston\";\r\n\r\nconst { combine, timestamp, printf, colorize, errors } = winston.format;\r\n\r\n// Explicit colors (best practice)\r\nwinston.addColors({\r\n    error: \"red\",\r\n    warn: \"yellow\",\r\n    info: \"green\",\r\n    http: \"cyan\"\r\n});\r\n\r\nconst logFormat = printf(({ level, message, timestamp, ...meta }) => {\r\n    const metaString =\r\n        Object.keys(meta).length > 0 ? ` | ${JSON.stringify(meta)}` : \"\";\r\n\r\n    return `${timestamp} ${level}: ${message}${metaString}`;\r\n});\r\n\r\nexport const logger = winston.createLogger({\r\n    level: \"http\", // 🔴 MOST IMPORTANT FIX\r\n    format: combine(\r\n        errors({ stack: true }),\r\n        timestamp({ format: \"HH:mm:ss\" })\r\n    ),\r\n    transports: [\r\n        new winston.transports.Console({\r\n            format: combine(\r\n                colorize({ all: true }),\r\n                logFormat\r\n            )\r\n        })\r\n    ]\r\n});\r\n\r\n// Shortcut helpers\r\nexport const logInfo = (msg: string, meta: any = {}) =>\r\n    logger.info(msg, meta);\r\n\r\nexport const logWarn = (msg: string, meta: any = {}) =>\r\n    logger.warn(msg, meta);\r\n\r\nexport const logError = (msg: string, meta: any = {}) =>\r\n    logger.error(msg, meta);\r\n"]}

package/dist/managers/AuthManager.d.ts

@@ -17,7 +17,7 @@ export declare class AuthManager {
         jti?: string;
     }): string;
     verify(token: string): string | import("jsonwebtoken").Jwt | import("jsonwebtoken").JwtPayload;
-    verifyGoogleIdToken(idToken: string): Promise<import("../adapters/GoogleAdapter.js").GoogleTokenPayload>;
-    protect(options?: ProtectOptions): (req: Request, res: Response, next: NextFunction) => void;
+    verifyGoogleIdToken(idToken: string): Promise<import("../adapters/GoogleAdapter").GoogleTokenPayload>;
+    protect(options?: ProtectOptions): (req: Request, _res: Response, next: NextFunction) => void;
 }
 //# sourceMappingURL=AuthManager.d.ts.map

package/dist/managers/AuthManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthManager.d.ts","sourceRoot":"","sources":["../../src/managers/AuthManager.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAI1D,MAAM,WAAW,WAAW;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,qBAAa,WAAW;IACpB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,aAAa,CAAC,CAAgB;gBAE1B,IAAI,EAAE,WAAW;IAsB7B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE;IAK7E,MAAM,CAAC,KAAK,EAAE,MAAM;IAKd,mBAAmB,CAAC,OAAO,EAAE,MAAM;IAezC,OAAO,CAAC,OAAO,CAAC,EAAE,cAAc,IAIpB,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY;CA4D9D"}
+{"version":3,"file":"AuthManager.d.ts","sourceRoot":"","sources":["../../src/managers/AuthManager.ts"],"names":[],"mappings":"AAiJA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG1D,MAAM,WAAW,WAAW;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,qBAAa,WAAW;IACpB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,aAAa,CAAC,CAAgB;gBAE1B,IAAI,EAAE,WAAW;IAgC7B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE;IAS7E,MAAM,CAAC,KAAK,EAAE,MAAM;IASd,mBAAmB,CAAC,OAAO,EAAE,MAAM;IAuBzC,OAAO,CAAC,OAAO,CAAC,EAAE,cAAc,IAIpB,KAAK,OAAO,EAAE,MAAM,QAAQ,EAAE,MAAM,YAAY;CAiE/D"}

package/dist/managers/AuthManager.js

@@ -1,100 +1,236 @@
 "use strict";
+// import { JWTAdapter } from "../adapters/JWTAdapter.js";
+// import { GoogleAdapter } from "../adapters/GoogleAdapter.js";
+// import { AdapterError } from "../core/errors/AdapterError.js";
+// import { HttpError } from "../core/errors/HttpError.js";
+// import { Request, Response, NextFunction } from "express";
+// import { logger } from "../logging";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthManager = void 0;
-const JWTAdapter_js_1 = require("../adapters/JWTAdapter.js");
-const GoogleAdapter_js_1 = require("../adapters/GoogleAdapter.js");
-const AdapterError_js_1 = require("../core/errors/AdapterError.js");
-const HttpError_js_1 = require("../core/errors/HttpError.js");
+// export interface AuthOptions {
+//     jwtSecret: string;
+//     jwtExpiresIn?: string | number;
+//     googleClientId?: string;
+// }
+// export interface ProtectOptions {
+//     required?: boolean;
+//     roles?: string[];
+// }
+// export class AuthManager {
+//     private jwtAdapter: JWTAdapter;
+//     private googleAdapter?: GoogleAdapter;
+//     constructor(opts: AuthOptions) {
+//         if (!opts.jwtSecret) {
+//             throw new AdapterError("jwtSecret required in AuthOptions");
+//         }
+//         if (opts.jwtSecret.length < 32) {
+//             logger.warn(" JWT secret is less than 32 characters - consider using a stronger secret");
+//         }
+//         logger.info("AuthManager initialized");
+//         this.jwtAdapter = new JWTAdapter({
+//             secret: opts.jwtSecret,
+//             expiresIn: opts.jwtExpiresIn ?? "1d",
+//         });
+//         if (opts.googleClientId) {
+//             this.googleAdapter = new GoogleAdapter(opts.googleClientId);
+//             logger.info("GoogleAdapter enabled");
+//         }
+//     }
+//     sign(payload: object, options?: { expiresIn?: string | number, jti?: string }) {
+//         logger.info("JWT Sign called");
+//         return this.jwtAdapter.sign(payload, options);
+//     }
+//     verify(token: string) {
+//         logger.info("JWT Verify called");
+//         return this.jwtAdapter.verify(token);
+//     }
+//     async verifyGoogleIdToken(idToken: string) {
+//         if (!this.googleAdapter) {
+//             throw new AdapterError("GoogleAdapter not configured.");
+//         }
+//         logger.info("Google ID Token verify called");
+//         try {
+//             return await this.googleAdapter.verifyIdToken(idToken);
+//         } catch (err: any) {
+//             logger.error("Google ID Token verification failed", { error: err?.message });
+//             throw HttpError.Unauthorized("Invalid Google ID token");
+//         }
+//     }
+//     protect(options?: ProtectOptions) {
+//         const required = options?.required ?? true;
+//         const roles = options?.roles;
+//         return (req: Request, res: Response, next: NextFunction) => {
+//             const header = req.headers["authorization"];
+//             if (!required && !header) {
+//                 return next();
+//             }
+//             if (!header) {
+//                 logger.warn("Missing Authorization header", {
+//                     path: req.path,
+//                     method: req.method
+//                 });
+//                 return next(HttpError.Unauthorized("Missing Authorization header"));
+//             }
+//             const [type, token] = String(header).split(" ");
+//             if (type !== "Bearer" || !token) {
+//                 logger.warn("Invalid Authorization header", {
+//                     path: req.path,
+//                     method: req.method
+//                 });
+//                 return next(HttpError.Unauthorized("Invalid Authorization header"));
+//             }
+//             try {
+//                 // Verify JWT
+//                 const decoded = this.verify(token);
+//                 // Attach to request
+//                 (req as any).auth = decoded;
+//                 (req as any).user = decoded; 
+//                 // Role-based authorization - role added Middleware
+//                 if (roles && roles.length > 0) {
+//                     const userRole = (decoded as any).role || (decoded as any).roles?.[0];
+//                     if (!userRole || !roles.includes(userRole)) {
+//                         logger.warn("Insufficient permissions", {
+//                             path: req.path,
+//                             requiredRoles: roles,
+//                             userRole
+//                         });
+//                         return next(HttpError.Forbidden("Insufficient permissions"));
+//                     }
+//                 }
+//                 return next();
+//             } catch (err: any) {
+//                 logger.error("JWT verify failed", {
+//                     error: err?.message,
+//                     path: req.path,
+//                     method: req.method
+//                 });
+//                 return next(HttpError.Unauthorized("Invalid or expired token"));
+//             }
+//         };
+//     }
+// }
+const JWTAdapter_1 = require("../adapters/JWTAdapter");
+const GoogleAdapter_1 = require("../adapters/GoogleAdapter");
+const AdapterError_1 = require("../core/errors/AdapterError");
+const HttpError_1 = require("../core/errors/HttpError");
 const logging_1 = require("../logging");
 class AuthManager {
     constructor(opts) {
         if (!opts.jwtSecret) {
-            throw new AdapterError_js_1.AdapterError("jwtSecret required in AuthOptions");
+            throw new AdapterError_1.AdapterError("jwtSecret required in AuthOptions");
         }
         if (opts.jwtSecret.length < 32) {
-            logging_1.logger.warn(" JWT secret is less than 32 characters - consider using a stronger secret");
+            logging_1.logger.warn("Weak JWT secret detected", {
+                layer: "auth-manager",
+                operation: "init",
+                secretLength: opts.jwtSecret.length
+            });
         }
-        logging_1.logger.info("AuthManager initialized");
-        this.jwtAdapter = new JWTAdapter_js_1.JWTAdapter({
+        logging_1.logger.info("AuthManager initialized", {
+            layer: "auth-manager",
+            jwtExpiresIn: opts.jwtExpiresIn ?? "1d",
+            googleEnabled: !!opts.googleClientId
+        });
+        this.jwtAdapter = new JWTAdapter_1.JWTAdapter({
             secret: opts.jwtSecret,
-            expiresIn: opts.jwtExpiresIn ?? "1d",
+            expiresIn: opts.jwtExpiresIn ?? "1d"
         });
         if (opts.googleClientId) {
-            this.googleAdapter = new GoogleAdapter_js_1.GoogleAdapter(opts.googleClientId);
-            logging_1.logger.info("GoogleAdapter enabled");
+            this.googleAdapter = new GoogleAdapter_1.GoogleAdapter(opts.googleClientId);
+            logging_1.logger.info("Google authentication enabled", {
+                layer: "auth-manager"
+            });
         }
     }
     sign(payload, options) {
-        logging_1.logger.info("JWT Sign called");
+        logging_1.logger.info("JWT sign requested", {
+            layer: "auth-manager",
+            operation: "sign"
+        });
         return this.jwtAdapter.sign(payload, options);
     }
     verify(token) {
-        logging_1.logger.info("JWT Verify called");
+        logging_1.logger.info("JWT verify requested", {
+            layer: "auth-manager",
+            operation: "verify"
+        });
         return this.jwtAdapter.verify(token);
     }
     async verifyGoogleIdToken(idToken) {
         if (!this.googleAdapter) {
-            throw new AdapterError_js_1.AdapterError("GoogleAdapter not configured.");
+            throw new AdapterError_1.AdapterError("GoogleAdapter not configured.");
         }
-        logging_1.logger.info("Google ID Token verify called");
+        logging_1.logger.info("Google ID token verification requested", {
+            layer: "auth-manager",
+            operation: "google-verify"
+        });
         try {
             return await this.googleAdapter.verifyIdToken(idToken);
         }
         catch (err) {
-            logging_1.logger.error("Google ID Token verification failed", { error: err?.message });
-            throw HttpError_js_1.HttpError.Unauthorized("Invalid Google ID token");
+            logging_1.logger.error("Google ID token verification failed", {
+                layer: "auth-manager",
+                operation: "google-verify",
+                reason: err?.message
+            });
+            throw HttpError_1.HttpError.Unauthorized("Invalid Google ID token");
         }
     }
     protect(options) {
         const required = options?.required ?? true;
         const roles = options?.roles;
-        return (req, res, next) => {
+        return (req, _res, next) => {
             const header = req.headers["authorization"];
             if (!required && !header) {
                 return next();
             }
             if (!header) {
-                logging_1.logger.warn("Missing Authorization header", {
+                logging_1.logger.warn("Authorization header missing", {
+                    layer: "auth-manager",
+                    operation: "protect",
                     path: req.path,
                     method: req.method
                 });
-                return next(HttpError_js_1.HttpError.Unauthorized("Missing Authorization header"));
+                return next(HttpError_1.HttpError.Unauthorized("Missing Authorization header"));
             }
             const [type, token] = String(header).split(" ");
             if (type !== "Bearer" || !token) {
-                logging_1.logger.warn("Invalid Authorization header", {
+                logging_1.logger.warn("Invalid Authorization header format", {
+                    layer: "auth-manager",
+                    operation: "protect",
                     path: req.path,
                     method: req.method
                 });
-                return next(HttpError_js_1.HttpError.Unauthorized("Invalid Authorization header"));
+                return next(HttpError_1.HttpError.Unauthorized("Invalid Authorization header"));
             }
             try {
-                // Verify JWT
                 const decoded = this.verify(token);
-                // Attach to request
                 req.auth = decoded;
                 req.user = decoded;
-                // Role-based authorization - role added Middleware
                 if (roles && roles.length > 0) {
                     const userRole = decoded.role || decoded.roles?.[0];
                     if (!userRole || !roles.includes(userRole)) {
-                        logging_1.logger.warn("Insufficient permissions", {
+                        logging_1.logger.warn("Access denied: insufficient role", {
+                            layer: "auth-manager",
+                            operation: "authorize",
                             path: req.path,
                             requiredRoles: roles,
                             userRole
                         });
-                        return next(HttpError_js_1.HttpError.Forbidden("Insufficient permissions"));
+                        return next(HttpError_1.HttpError.Forbidden("Insufficient permissions"));
                     }
                 }
                 return next();
             }
             catch (err) {
-                logging_1.logger.error("JWT verify failed", {
-                    error: err?.message,
+                logging_1.logger.error("JWT authentication failed", {
+                    layer: "auth-manager",
+                    operation: "protect",
                     path: req.path,
-                    method: req.method
+                    method: req.method,
+                    reason: err?.message
                 });
-                return next(HttpError_js_1.HttpError.Unauthorized("Invalid or expired token"));
+                return next(HttpError_1.HttpError.Unauthorized("Invalid or expired token"));
             }
         };
     }

package/dist/managers/AuthManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthManager.js","sourceRoot":"","sources":["../../src/managers/AuthManager.ts"],"names":[],"mappings":";;;AAAA,6DAAuD;AACvD,mEAA6D;AAC7D,oEAA8D;AAC9D,8DAAwD;AAExD,wCAAoC;AAcpC,MAAa,WAAW;IAIpB,YAAY,IAAiB;QACzB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAY,CAAC,mCAAmC,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,gBAAM,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QAC7F,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAEvC,IAAI,CAAC,UAAU,GAAG,IAAI,0BAAU,CAAC;YAC7B,MAAM,EAAE,IAAI,CAAC,SAAS;YACtB,SAAS,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;SACvC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,GAAG,IAAI,gCAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5D,gBAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAuD;QACzE,gBAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,KAAa;QAChB,gBAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACrC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,8BAAY,CAAC,+BAA+B,CAAC,CAAC;QAC5D,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAE7C,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7E,MAAM,wBAAS,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;IAED,OAAO,CAAC,OAAwB;QAC5B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAE7B,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACvD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAG5C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvB,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YAGD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,gBAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACxC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACxE,CAAC;YAGD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,gBAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACxC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,CAAC;gBAED,aAAa;gBACb,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAEnC,oBAAoB;gBACnB,GAAW,CAAC,IAAI,GAAG,OAAO,CAAC;gBAC3B,GAAW,CAAC,IAAI,GAAG,OAAO,CAAC;gBAE5B,mDAAmD;gBACnD,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAI,OAAe,CAAC,IAAI,IAAK,OAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;oBACtE,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACzC,gBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;4BACpC,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,aAAa,EAAE,KAAK;4BACpB,QAAQ;yBACX,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC,CAAC;oBACjE,CAAC;gBACL,CAAC;gBAED,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,gBAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;oBAC9B,KAAK,EAAE,GAAG,EAAE,OAAO;oBACnB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACpE,CAAC;QACL,CAAC,CAAC;IACN,CAAC;CACJ;AAnHD,kCAmHC","sourcesContent":["import { JWTAdapter } from \"../adapters/JWTAdapter.js\";\r\nimport { GoogleAdapter } from \"../adapters/GoogleAdapter.js\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { HttpError } from \"../core/errors/HttpError.js\";\r\nimport { Request, Response, NextFunction } from \"express\";\r\nimport { logger } from \"../logging\";\r\n\r\n\r\nexport interface AuthOptions {\r\n    jwtSecret: string;\r\n    jwtExpiresIn?: string | number;\r\n    googleClientId?: string;\r\n}\r\n\r\nexport interface ProtectOptions {\r\n    required?: boolean;\r\n    roles?: string[];\r\n}\r\n\r\nexport class AuthManager {\r\n    private jwtAdapter: JWTAdapter;\r\n    private googleAdapter?: GoogleAdapter;\r\n\r\n    constructor(opts: AuthOptions) {\r\n        if (!opts.jwtSecret) {\r\n            throw new AdapterError(\"jwtSecret required in AuthOptions\");\r\n        }\r\n\r\n        if (opts.jwtSecret.length < 32) {\r\n            logger.warn(\" JWT secret is less than 32 characters - consider using a stronger secret\");\r\n        }\r\n\r\n        logger.info(\"AuthManager initialized\");\r\n\r\n        this.jwtAdapter = new JWTAdapter({\r\n            secret: opts.jwtSecret,\r\n            expiresIn: opts.jwtExpiresIn ?? \"1d\",\r\n        });\r\n\r\n        if (opts.googleClientId) {\r\n            this.googleAdapter = new GoogleAdapter(opts.googleClientId);\r\n            logger.info(\"GoogleAdapter enabled\");\r\n        }\r\n    }\r\n\r\n    sign(payload: object, options?: { expiresIn?: string | number, jti?: string }) {\r\n        logger.info(\"JWT Sign called\");\r\n        return this.jwtAdapter.sign(payload, options);\r\n    }\r\n\r\n    verify(token: string) {\r\n        logger.info(\"JWT Verify called\");\r\n        return this.jwtAdapter.verify(token);\r\n    }\r\n\r\n    async verifyGoogleIdToken(idToken: string) {\r\n        if (!this.googleAdapter) {\r\n            throw new AdapterError(\"GoogleAdapter not configured.\");\r\n        }\r\n\r\n        logger.info(\"Google ID Token verify called\");\r\n\r\n        try {\r\n            return await this.googleAdapter.verifyIdToken(idToken);\r\n        } catch (err: any) {\r\n            logger.error(\"Google ID Token verification failed\", { error: err?.message });\r\n            throw HttpError.Unauthorized(\"Invalid Google ID token\");\r\n        }\r\n    }\r\n\r\n    protect(options?: ProtectOptions) {\r\n        const required = options?.required ?? true;\r\n        const roles = options?.roles;\r\n\r\n        return (req: Request, res: Response, next: NextFunction) => {\r\n            const header = req.headers[\"authorization\"];\r\n\r\n            \r\n            if (!required && !header) {\r\n                return next();\r\n            }\r\n\r\n           \r\n            if (!header) {\r\n                logger.warn(\"Missing Authorization header\", {\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Missing Authorization header\"));\r\n            }\r\n\r\n          \r\n            const [type, token] = String(header).split(\" \");\r\n            if (type !== \"Bearer\" || !token) {\r\n                logger.warn(\"Invalid Authorization header\", {\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Invalid Authorization header\"));\r\n            }\r\n\r\n            try {\r\n\r\n                // Verify JWT\r\n                const decoded = this.verify(token);\r\n                \r\n                // Attach to request\r\n                (req as any).auth = decoded;\r\n                (req as any).user = decoded; \r\n                \r\n                // Role-based authorization - role added Middleware\r\n                if (roles && roles.length > 0) {\r\n                    const userRole = (decoded as any).role || (decoded as any).roles?.[0];\r\n                    if (!userRole || !roles.includes(userRole)) {\r\n                        logger.warn(\"Insufficient permissions\", {\r\n                            path: req.path,\r\n                            requiredRoles: roles,\r\n                            userRole\r\n                        });\r\n                        return next(HttpError.Forbidden(\"Insufficient permissions\"));\r\n                    }\r\n                }\r\n                \r\n                return next();\r\n            } catch (err: any) {\r\n                logger.error(\"JWT verify failed\", {\r\n                    error: err?.message,\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Invalid or expired token\"));\r\n            }\r\n        };\r\n    }\r\n}"]}
+{"version":3,"file":"AuthManager.js","sourceRoot":"","sources":["../../src/managers/AuthManager.ts"],"names":[],"mappings":";AAAA,0DAA0D;AAC1D,gEAAgE;AAChE,iEAAiE;AACjE,2DAA2D;AAC3D,6DAA6D;AAC7D,uCAAuC;;;AAGvC,iCAAiC;AACjC,yBAAyB;AACzB,sCAAsC;AACtC,+BAA+B;AAC/B,IAAI;AAEJ,oCAAoC;AACpC,0BAA0B;AAC1B,wBAAwB;AACxB,IAAI;AAEJ,6BAA6B;AAC7B,sCAAsC;AACtC,6CAA6C;AAE7C,uCAAuC;AACvC,iCAAiC;AACjC,2EAA2E;AAC3E,YAAY;AAEZ,4CAA4C;AAC5C,wGAAwG;AACxG,YAAY;AAEZ,kDAAkD;AAElD,6CAA6C;AAC7C,sCAAsC;AACtC,oDAAoD;AACpD,cAAc;AAEd,qCAAqC;AACrC,2EAA2E;AAC3E,oDAAoD;AACpD,YAAY;AACZ,QAAQ;AAER,uFAAuF;AACvF,0CAA0C;AAC1C,yDAAyD;AACzD,QAAQ;AAER,8BAA8B;AAC9B,4CAA4C;AAC5C,gDAAgD;AAChD,QAAQ;AAER,mDAAmD;AACnD,qCAAqC;AACrC,uEAAuE;AACvE,YAAY;AAEZ,wDAAwD;AAExD,gBAAgB;AAChB,sEAAsE;AACtE,+BAA+B;AAC/B,4FAA4F;AAC5F,uEAAuE;AACvE,YAAY;AACZ,QAAQ;AAER,0CAA0C;AAC1C,sDAAsD;AACtD,wCAAwC;AAExC,wEAAwE;AACxE,2DAA2D;AAG3D,0CAA0C;AAC1C,iCAAiC;AACjC,gBAAgB;AAGhB,6BAA6B;AAC7B,gEAAgE;AAChE,sCAAsC;AACtC,yCAAyC;AACzC,sBAAsB;AACtB,uFAAuF;AACvF,gBAAgB;AAGhB,+DAA+D;AAC/D,iDAAiD;AACjD,gEAAgE;AAChE,sCAAsC;AACtC,yCAAyC;AACzC,sBAAsB;AACtB,uFAAuF;AACvF,gBAAgB;AAEhB,oBAAoB;AAEpB,gCAAgC;AAChC,sDAAsD;AAEtD,uCAAuC;AACvC,+CAA+C;AAC/C,gDAAgD;AAEhD,sEAAsE;AACtE,mDAAmD;AACnD,6FAA6F;AAC7F,oEAAoE;AACpE,oEAAoE;AACpE,8CAA8C;AAC9C,oDAAoD;AACpD,uCAAuC;AACvC,8BAA8B;AAC9B,wFAAwF;AACxF,wBAAwB;AACxB,oBAAoB;AAEpB,iCAAiC;AACjC,mCAAmC;AACnC,sDAAsD;AACtD,2CAA2C;AAC3C,sCAAsC;AACtC,yCAAyC;AACzC,sBAAsB;AACtB,mFAAmF;AACnF,gBAAgB;AAChB,aAAa;AACb,QAAQ;AACR,IAAI;AAOJ,uDAAoD;AACpD,6DAA0D;AAC1D,8DAA2D;AAC3D,wDAAqD;AAErD,wCAAoC;AAapC,MAAa,WAAW;IAIpB,YAAY,IAAiB;QACzB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,2BAAY,CAAC,mCAAmC,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,gBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBACpC,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,MAAM;gBACjB,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;aACtC,CAAC,CAAC;QACP,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YACnC,KAAK,EAAE,cAAc;YACrB,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;YACvC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc;SACvC,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,GAAG,IAAI,uBAAU,CAAC;YAC7B,MAAM,EAAE,IAAI,CAAC,SAAS;YACtB,SAAS,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;SACvC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,GAAG,IAAI,6BAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5D,gBAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBACzC,KAAK,EAAE,cAAc;aACxB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAuD;QACzE,gBAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC9B,KAAK,EAAE,cAAc;YACrB,SAAS,EAAE,MAAM;SACpB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,KAAa;QAChB,gBAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;YAChC,KAAK,EAAE,cAAc;YACrB,SAAS,EAAE,QAAQ;SACtB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACrC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,2BAAY,CAAC,+BAA+B,CAAC,CAAC;QAC5D,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;YAClD,KAAK,EAAE,cAAc;YACrB,SAAS,EAAE,eAAe;SAC7B,CAAC,CAAC;QAEH,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;gBAChD,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,eAAe;gBAC1B,MAAM,EAAE,GAAG,EAAE,OAAO;aACvB,CAAC,CAAC;YAEH,MAAM,qBAAS,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;IAED,OAAO,CAAC,OAAwB;QAC5B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAE7B,OAAO,CAAC,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;YACxD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAE5C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvB,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YAED,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,gBAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACxC,KAAK,EAAE,cAAc;oBACrB,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,qBAAS,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,gBAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;oBAC/C,KAAK,EAAE,cAAc;oBACrB,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,qBAAS,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAElC,GAAW,CAAC,IAAI,GAAG,OAAO,CAAC;gBAC3B,GAAW,CAAC,IAAI,GAAG,OAAO,CAAC;gBAE5B,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GACT,OAAe,CAAC,IAAI,IAAK,OAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;oBAEzD,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACzC,gBAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;4BAC5C,KAAK,EAAE,cAAc;4BACrB,SAAS,EAAE,WAAW;4BACtB,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,aAAa,EAAE,KAAK;4BACpB,QAAQ;yBACX,CAAC,CAAC;wBAEH,OAAO,IAAI,CAAC,qBAAS,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC,CAAC;oBACjE,CAAC;gBACL,CAAC;gBAED,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,gBAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;oBACtC,KAAK,EAAE,cAAc;oBACrB,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,MAAM,EAAE,GAAG,EAAE,OAAO;iBACvB,CAAC,CAAC;gBAEH,OAAO,IAAI,CAAC,qBAAS,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACpE,CAAC;QACL,CAAC,CAAC;IACN,CAAC;CACJ;AAlJD,kCAkJC","sourcesContent":["// import { JWTAdapter } from \"../adapters/JWTAdapter.js\";\r\n// import { GoogleAdapter } from \"../adapters/GoogleAdapter.js\";\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { HttpError } from \"../core/errors/HttpError.js\";\r\n// import { Request, Response, NextFunction } from \"express\";\r\n// import { logger } from \"../logging\";\r\n\r\n\r\n// export interface AuthOptions {\r\n//     jwtSecret: string;\r\n//     jwtExpiresIn?: string | number;\r\n//     googleClientId?: string;\r\n// }\r\n\r\n// export interface ProtectOptions {\r\n//     required?: boolean;\r\n//     roles?: string[];\r\n// }\r\n\r\n// export class AuthManager {\r\n//     private jwtAdapter: JWTAdapter;\r\n//     private googleAdapter?: GoogleAdapter;\r\n\r\n//     constructor(opts: AuthOptions) {\r\n//         if (!opts.jwtSecret) {\r\n//             throw new AdapterError(\"jwtSecret required in AuthOptions\");\r\n//         }\r\n\r\n//         if (opts.jwtSecret.length < 32) {\r\n//             logger.warn(\" JWT secret is less than 32 characters - consider using a stronger secret\");\r\n//         }\r\n\r\n//         logger.info(\"AuthManager initialized\");\r\n\r\n//         this.jwtAdapter = new JWTAdapter({\r\n//             secret: opts.jwtSecret,\r\n//             expiresIn: opts.jwtExpiresIn ?? \"1d\",\r\n//         });\r\n\r\n//         if (opts.googleClientId) {\r\n//             this.googleAdapter = new GoogleAdapter(opts.googleClientId);\r\n//             logger.info(\"GoogleAdapter enabled\");\r\n//         }\r\n//     }\r\n\r\n//     sign(payload: object, options?: { expiresIn?: string | number, jti?: string }) {\r\n//         logger.info(\"JWT Sign called\");\r\n//         return this.jwtAdapter.sign(payload, options);\r\n//     }\r\n\r\n//     verify(token: string) {\r\n//         logger.info(\"JWT Verify called\");\r\n//         return this.jwtAdapter.verify(token);\r\n//     }\r\n\r\n//     async verifyGoogleIdToken(idToken: string) {\r\n//         if (!this.googleAdapter) {\r\n//             throw new AdapterError(\"GoogleAdapter not configured.\");\r\n//         }\r\n\r\n//         logger.info(\"Google ID Token verify called\");\r\n\r\n//         try {\r\n//             return await this.googleAdapter.verifyIdToken(idToken);\r\n//         } catch (err: any) {\r\n//             logger.error(\"Google ID Token verification failed\", { error: err?.message });\r\n//             throw HttpError.Unauthorized(\"Invalid Google ID token\");\r\n//         }\r\n//     }\r\n\r\n//     protect(options?: ProtectOptions) {\r\n//         const required = options?.required ?? true;\r\n//         const roles = options?.roles;\r\n\r\n//         return (req: Request, res: Response, next: NextFunction) => {\r\n//             const header = req.headers[\"authorization\"];\r\n\r\n            \r\n//             if (!required && !header) {\r\n//                 return next();\r\n//             }\r\n\r\n           \r\n//             if (!header) {\r\n//                 logger.warn(\"Missing Authorization header\", {\r\n//                     path: req.path,\r\n//                     method: req.method\r\n//                 });\r\n//                 return next(HttpError.Unauthorized(\"Missing Authorization header\"));\r\n//             }\r\n\r\n          \r\n//             const [type, token] = String(header).split(\" \");\r\n//             if (type !== \"Bearer\" || !token) {\r\n//                 logger.warn(\"Invalid Authorization header\", {\r\n//                     path: req.path,\r\n//                     method: req.method\r\n//                 });\r\n//                 return next(HttpError.Unauthorized(\"Invalid Authorization header\"));\r\n//             }\r\n\r\n//             try {\r\n\r\n//                 // Verify JWT\r\n//                 const decoded = this.verify(token);\r\n                \r\n//                 // Attach to request\r\n//                 (req as any).auth = decoded;\r\n//                 (req as any).user = decoded; \r\n                \r\n//                 // Role-based authorization - role added Middleware\r\n//                 if (roles && roles.length > 0) {\r\n//                     const userRole = (decoded as any).role || (decoded as any).roles?.[0];\r\n//                     if (!userRole || !roles.includes(userRole)) {\r\n//                         logger.warn(\"Insufficient permissions\", {\r\n//                             path: req.path,\r\n//                             requiredRoles: roles,\r\n//                             userRole\r\n//                         });\r\n//                         return next(HttpError.Forbidden(\"Insufficient permissions\"));\r\n//                     }\r\n//                 }\r\n                \r\n//                 return next();\r\n//             } catch (err: any) {\r\n//                 logger.error(\"JWT verify failed\", {\r\n//                     error: err?.message,\r\n//                     path: req.path,\r\n//                     method: req.method\r\n//                 });\r\n//                 return next(HttpError.Unauthorized(\"Invalid or expired token\"));\r\n//             }\r\n//         };\r\n//     }\r\n// }\r\n\r\n\r\n\r\n\r\n\r\n\r\nimport { JWTAdapter } from \"../adapters/JWTAdapter\";\r\nimport { GoogleAdapter } from \"../adapters/GoogleAdapter\";\r\nimport { AdapterError } from \"../core/errors/AdapterError\";\r\nimport { HttpError } from \"../core/errors/HttpError\";\r\nimport { Request, Response, NextFunction } from \"express\";\r\nimport { logger } from \"../logging\";\r\n\r\nexport interface AuthOptions {\r\n    jwtSecret: string;\r\n    jwtExpiresIn?: string | number;\r\n    googleClientId?: string;\r\n}\r\n\r\nexport interface ProtectOptions {\r\n    required?: boolean;\r\n    roles?: string[];\r\n}\r\n\r\nexport class AuthManager {\r\n    private jwtAdapter: JWTAdapter;\r\n    private googleAdapter?: GoogleAdapter;\r\n\r\n    constructor(opts: AuthOptions) {\r\n        if (!opts.jwtSecret) {\r\n            throw new AdapterError(\"jwtSecret required in AuthOptions\");\r\n        }\r\n\r\n        if (opts.jwtSecret.length < 32) {\r\n            logger.warn(\"Weak JWT secret detected\", {\r\n                layer: \"auth-manager\",\r\n                operation: \"init\",\r\n                secretLength: opts.jwtSecret.length\r\n            });\r\n        }\r\n\r\n        logger.info(\"AuthManager initialized\", {\r\n            layer: \"auth-manager\",\r\n            jwtExpiresIn: opts.jwtExpiresIn ?? \"1d\",\r\n            googleEnabled: !!opts.googleClientId\r\n        });\r\n\r\n        this.jwtAdapter = new JWTAdapter({\r\n            secret: opts.jwtSecret,\r\n            expiresIn: opts.jwtExpiresIn ?? \"1d\"\r\n        });\r\n\r\n        if (opts.googleClientId) {\r\n            this.googleAdapter = new GoogleAdapter(opts.googleClientId);\r\n            logger.info(\"Google authentication enabled\", {\r\n                layer: \"auth-manager\"\r\n            });\r\n        }\r\n    }\r\n\r\n    sign(payload: object, options?: { expiresIn?: string | number; jti?: string }) {\r\n        logger.info(\"JWT sign requested\", {\r\n            layer: \"auth-manager\",\r\n            operation: \"sign\"\r\n        });\r\n\r\n        return this.jwtAdapter.sign(payload, options);\r\n    }\r\n\r\n    verify(token: string) {\r\n        logger.info(\"JWT verify requested\", {\r\n            layer: \"auth-manager\",\r\n            operation: \"verify\"\r\n        });\r\n\r\n        return this.jwtAdapter.verify(token);\r\n    }\r\n\r\n    async verifyGoogleIdToken(idToken: string) {\r\n        if (!this.googleAdapter) {\r\n            throw new AdapterError(\"GoogleAdapter not configured.\");\r\n        }\r\n\r\n        logger.info(\"Google ID token verification requested\", {\r\n            layer: \"auth-manager\",\r\n            operation: \"google-verify\"\r\n        });\r\n\r\n        try {\r\n            return await this.googleAdapter.verifyIdToken(idToken);\r\n        } catch (err: any) {\r\n            logger.error(\"Google ID token verification failed\", {\r\n                layer: \"auth-manager\",\r\n                operation: \"google-verify\",\r\n                reason: err?.message\r\n            });\r\n\r\n            throw HttpError.Unauthorized(\"Invalid Google ID token\");\r\n        }\r\n    }\r\n\r\n    protect(options?: ProtectOptions) {\r\n        const required = options?.required ?? true;\r\n        const roles = options?.roles;\r\n\r\n        return (req: Request, _res: Response, next: NextFunction) => {\r\n            const header = req.headers[\"authorization\"];\r\n\r\n            if (!required && !header) {\r\n                return next();\r\n            }\r\n\r\n            if (!header) {\r\n                logger.warn(\"Authorization header missing\", {\r\n                    layer: \"auth-manager\",\r\n                    operation: \"protect\",\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Missing Authorization header\"));\r\n            }\r\n\r\n            const [type, token] = String(header).split(\" \");\r\n            if (type !== \"Bearer\" || !token) {\r\n                logger.warn(\"Invalid Authorization header format\", {\r\n                    layer: \"auth-manager\",\r\n                    operation: \"protect\",\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Invalid Authorization header\"));\r\n            }\r\n\r\n            try {\r\n                const decoded = this.verify(token);\r\n\r\n                (req as any).auth = decoded;\r\n                (req as any).user = decoded;\r\n\r\n                if (roles && roles.length > 0) {\r\n                    const userRole =\r\n                        (decoded as any).role || (decoded as any).roles?.[0];\r\n\r\n                    if (!userRole || !roles.includes(userRole)) {\r\n                        logger.warn(\"Access denied: insufficient role\", {\r\n                            layer: \"auth-manager\",\r\n                            operation: \"authorize\",\r\n                            path: req.path,\r\n                            requiredRoles: roles,\r\n                            userRole\r\n                        });\r\n\r\n                        return next(HttpError.Forbidden(\"Insufficient permissions\"));\r\n                    }\r\n                }\r\n\r\n                return next();\r\n            } catch (err: any) {\r\n                logger.error(\"JWT authentication failed\", {\r\n                    layer: \"auth-manager\",\r\n                    operation: \"protect\",\r\n                    path: req.path,\r\n                    method: req.method,\r\n                    reason: err?.message\r\n                });\r\n\r\n                return next(HttpError.Unauthorized(\"Invalid or expired token\"));\r\n            }\r\n        };\r\n    }\r\n}\r\n"]}

package/dist/managers/CorsManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CorsManager.d.ts","sourceRoot":"","sources":["../../src/managers/CorsManager.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAIxB,qBAAa,WAAW;IAEpB,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG;kBA2BiP,CAAC;;;iBAAmH,CAAC;CAAjY"}
+{"version":3,"file":"CorsManager.d.ts","sourceRoot":"","sources":["../../src/managers/CorsManager.ts"],"names":[],"mappings":"AAwCA,OAAO,IAAI,MAAM,MAAM,CAAC;AAIxB,qBAAa,WAAW;IACpB,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG;kBAAb,CAAC;;;iBAIA,CAAA;CA+Bf"}

package/dist/managers/CorsManager.js

@@ -1,35 +1,70 @@
 "use strict";
+// import cors from "cors";
+// import { logger } from "../logging";
+// import { AdapterError } from "../core/errors/AdapterError.js";
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CorsManager = void 0;
+// export class CorsManager {
+//     middleware(options?: any) {
+//         try {
+//             const defaultOptions = {
+//                 origin: '*',
+//                 methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
+//                 allowedHeaders: ['Content-Type', 'Authorization'],
+//                 credentials: false,
+//                 maxAge: 86400
+//             };
+//             const finalOptions = options ? { ...defaultOptions, ...options } : defaultOptions;
+//             logger.debug("CORS configured", {
+//                 origin: finalOptions.origin,
+//                 methods: finalOptions.methods
+//             });
+//             return cors(finalOptions);
+//         } catch (err: any) {
+//             logger.error(" CORS Manager: failed to create CORS middleware", {
+//                 error: err?.message || err,
+//                 options
+//             });
+//             throw new AdapterError("CORS middleware initialization failed.");
+//         }
+//     }
+// }
 const cors_1 = __importDefault(require("cors"));
 const logging_1 = require("../logging");
-const AdapterError_js_1 = require("../core/errors/AdapterError.js");
+const AdapterError_1 = require("../core/errors/AdapterError");
 class CorsManager {
     middleware(options) {
         try {
             const defaultOptions = {
-                origin: '*',
-                methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
-                allowedHeaders: ['Content-Type', 'Authorization'],
+                origin: "*",
+                methods: ["GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS"],
+                allowedHeaders: ["Content-Type", "Authorization"],
                 credentials: false,
                 maxAge: 86400
             };
-            const finalOptions = options ? { ...defaultOptions, ...options } : defaultOptions;
-            logging_1.logger.debug("CORS configured", {
+            const finalOptions = options
+                ? { ...defaultOptions, ...options }
+                : defaultOptions;
+            // ✅ visible + clean log
+            logging_1.logger.info("CORS middleware configured", {
+                layer: "cors-manager",
+                operation: "init",
                 origin: finalOptions.origin,
-                methods: finalOptions.methods
+                methods: finalOptions.methods,
+                credentials: finalOptions.credentials
             });
             return (0, cors_1.default)(finalOptions);
         }
         catch (err) {
-            logging_1.logger.error(" CORS Manager: failed to create CORS middleware", {
-                error: err?.message || err,
-                options
+            logging_1.logger.error("CORS middleware initialization failed", {
+                layer: "cors-manager",
+                operation: "init",
+                reason: err?.message
             });
-            throw new AdapterError_js_1.AdapterError("CORS middleware initialization failed.");
+            throw new AdapterError_1.AdapterError("CORS middleware initialization failed.");
         }
     }
 }

package/dist/managers/CorsManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"CorsManager.js","sourceRoot":"","sources":["../../src/managers/CorsManager.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AACxB,wCAAoC;AACpC,oEAA8D;AAE9D,MAAa,WAAW;IAEpB,UAAU,CAAC,OAAa;QACpB,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;gBAC7D,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;gBACjD,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,KAAK;aAChB,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;YAElF,gBAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE;gBAC5B,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,YAAY,CAAC,OAAO;aAChC,CAAC,CAAC;YAEH,OAAO,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC;QAE9B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE;gBAC5D,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG;gBAC1B,OAAO;aACV,CAAC,CAAC;YACH,MAAM,IAAI,8BAAY,CAAC,wCAAwC,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;CACJ;AA7BD,kCA6BC","sourcesContent":["import cors from \"cors\";\r\nimport { logger } from \"../logging\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\nexport class CorsManager {\r\n    \r\n    middleware(options?: any) {\r\n        try {\r\n            const defaultOptions = {\r\n                origin: '*',\r\n                methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],\r\n                allowedHeaders: ['Content-Type', 'Authorization'],\r\n                credentials: false,\r\n                maxAge: 86400\r\n            };\r\n            \r\n            const finalOptions = options ? { ...defaultOptions, ...options } : defaultOptions;\r\n            \r\n            logger.debug(\"CORS configured\", {\r\n                origin: finalOptions.origin,\r\n                methods: finalOptions.methods\r\n            });\r\n            \r\n            return cors(finalOptions);\r\n            \r\n        } catch (err: any) {\r\n            logger.error(\" CORS Manager: failed to create CORS middleware\", {\r\n                error: err?.message || err,\r\n                options\r\n            });\r\n            throw new AdapterError(\"CORS middleware initialization failed.\");\r\n        }\r\n    }\r\n}"]}
+{"version":3,"file":"CorsManager.js","sourceRoot":"","sources":["../../src/managers/CorsManager.ts"],"names":[],"mappings":";AAAA,2BAA2B;AAC3B,uCAAuC;AACvC,iEAAiE;;;;;;AAEjE,6BAA6B;AAE7B,kCAAkC;AAClC,gBAAgB;AAChB,uCAAuC;AACvC,+BAA+B;AAC/B,iFAAiF;AACjF,qEAAqE;AACrE,sCAAsC;AACtC,gCAAgC;AAChC,iBAAiB;AAEjB,iGAAiG;AAEjG,gDAAgD;AAChD,+CAA+C;AAC/C,gDAAgD;AAChD,kBAAkB;AAElB,yCAAyC;AAEzC,+BAA+B;AAC/B,gFAAgF;AAChF,8CAA8C;AAC9C,0BAA0B;AAC1B,kBAAkB;AAClB,gFAAgF;AAChF,YAAY;AACZ,QAAQ;AACR,IAAI;AAOJ,gDAAwB;AACxB,wCAAoC;AACpC,8DAA2D;AAE3D,MAAa,WAAW;IACpB,UAAU,CAAC,OAAa;QACpB,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;gBAC7D,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;gBACjD,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,KAAK;aAChB,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO;gBACxB,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE;gBACnC,CAAC,CAAC,cAAc,CAAC;YAErB,wBAAwB;YACxB,gBAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;gBACtC,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,WAAW,EAAE,YAAY,CAAC,WAAW;aACxC,CAAC,CAAC;YAEH,OAAO,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC;QAE9B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;gBAClD,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,GAAG,EAAE,OAAO;aACvB,CAAC,CAAC;YAEH,MAAM,IAAI,2BAAY,CAAC,wCAAwC,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;CACJ;AApCD,kCAoCC","sourcesContent":["// import cors from \"cors\";\r\n// import { logger } from \"../logging\";\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\n// export class CorsManager {\r\n    \r\n//     middleware(options?: any) {\r\n//         try {\r\n//             const defaultOptions = {\r\n//                 origin: '*',\r\n//                 methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],\r\n//                 allowedHeaders: ['Content-Type', 'Authorization'],\r\n//                 credentials: false,\r\n//                 maxAge: 86400\r\n//             };\r\n            \r\n//             const finalOptions = options ? { ...defaultOptions, ...options } : defaultOptions;\r\n            \r\n//             logger.debug(\"CORS configured\", {\r\n//                 origin: finalOptions.origin,\r\n//                 methods: finalOptions.methods\r\n//             });\r\n            \r\n//             return cors(finalOptions);\r\n            \r\n//         } catch (err: any) {\r\n//             logger.error(\" CORS Manager: failed to create CORS middleware\", {\r\n//                 error: err?.message || err,\r\n//                 options\r\n//             });\r\n//             throw new AdapterError(\"CORS middleware initialization failed.\");\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n\r\n\r\n\r\n\r\nimport cors from \"cors\";\r\nimport { logger } from \"../logging\";\r\nimport { AdapterError } from \"../core/errors/AdapterError\";\r\n\r\nexport class CorsManager {\r\n    middleware(options?: any) {\r\n        try {\r\n            const defaultOptions = {\r\n                origin: \"*\",\r\n                methods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"PATCH\", \"OPTIONS\"],\r\n                allowedHeaders: [\"Content-Type\", \"Authorization\"],\r\n                credentials: false,\r\n                maxAge: 86400\r\n            };\r\n\r\n            const finalOptions = options\r\n                ? { ...defaultOptions, ...options }\r\n                : defaultOptions;\r\n\r\n            // ✅ visible + clean log\r\n            logger.info(\"CORS middleware configured\", {\r\n                layer: \"cors-manager\",\r\n                operation: \"init\",\r\n                origin: finalOptions.origin,\r\n                methods: finalOptions.methods,\r\n                credentials: finalOptions.credentials\r\n            });\r\n\r\n            return cors(finalOptions);\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"CORS middleware initialization failed\", {\r\n                layer: \"cors-manager\",\r\n                operation: \"init\",\r\n                reason: err?.message\r\n            });\r\n\r\n            throw new AdapterError(\"CORS middleware initialization failed.\");\r\n        }\r\n    }\r\n}\r\n"]}

package/dist/managers/HashManager.d.ts

@@ -1,4 +1,4 @@
-import { HiSecureConfig } from "../core/types/HiSecureConfig.js";
+import { HiSecureConfig } from "../core/types/HiSecureConfig";
 interface HashAdapter {
     hash(value: string): Promise<string>;
     verify(value: string, hashed: string): Promise<boolean>;

package/dist/managers/HashManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"HashManager.d.ts","sourceRoot":"","sources":["../../src/managers/HashManager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAGjE,UAAU,WAAW;IACjB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,UAAU;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;CACzB;AAED,qBAAa,WAAW;IACpB,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,cAAc,CAAc;IACpC,OAAO,CAAC,eAAe,CAAqB;gBAGxC,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,EACjC,cAAc,EAAE,WAAW,EAC3B,eAAe,EAAE,WAAW,GAAG,IAAI;IAOjC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IA6C/E,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CA4BhE"}
+{"version":3,"file":"HashManager.d.ts","sourceRoot":"","sources":["../../src/managers/HashManager.ts"],"names":[],"mappings":"AA6GA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAG9D,UAAU,WAAW;IACjB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,UAAU;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;CACzB;AAED,qBAAa,WAAW;IACpB,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,cAAc,CAAc;IACpC,OAAO,CAAC,eAAe,CAAqB;gBAGxC,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,EACjC,cAAc,EAAE,WAAW,EAC3B,eAAe,EAAE,WAAW,GAAG,IAAI;IAajC,IAAI,CACN,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GACtC,OAAO,CAAC,UAAU,CAAC;IAyDhB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAoChE"}