win-portal-auth-sdk 1.2.1 → 1.3.0

package/dist/client/auth-client.js

@@ -13,10 +13,27 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthClient = void 0;
 const axios_1 = __importDefault(require("axios"));
 const api_1 = require("./api");
+const token_utils_1 = require("../utils/token-utils");
 class AuthClient {
     constructor(config) {
         this.token = null;
         this.authType = 'hybrid'; // Default to hybrid
+        // Automatic refresh configuration
+        this.refreshTokenCallbacks = null;
+        this.jwtConfigPromise = null;
+        this.refreshThresholdMinutes = null;
+        this.automaticRefreshEnabled = null;
+        this.lastRefreshAttempt = 0;
+        this.refreshPromise = null;
+        this.REFRESH_COOLDOWN_MS = 30 * 1000; // 30 seconds cooldown
+        // Session expiration monitoring
+        this.sessionExpirationCallbacks = null;
+        this.sessionManagementConfig = null;
+        this.sessionManagementConfigPromise = null;
+        this.sessionExpirationCheckInterval = null;
+        this.sessionExpirationCheckIntervalSeconds = 30;
+        this.lastWarningTime = 0;
+        this.WARNING_COOLDOWN_MS = 60 * 1000; // 1 minute cooldown between warnings
         this.apiKey = config.apiKey;
         this.apiKeyHeader = config.apiKeyHeader || 'X-API-Key';
         console.log('[AuthClient] Initializing with config:', {
@@ -31,8 +48,8 @@ class AuthClient {
                 'Content-Type': 'application/json',
             },
         });
-        // Add request interceptor to inject API key
-        this.client.interceptors.request.use((requestConfig) => {
+        // Add request interceptor to inject API key and handle automatic refresh
+        this.client.interceptors.request.use(async (requestConfig) => {
             if (requestConfig.headers) {
                 requestConfig.headers[this.apiKeyHeader] = this.apiKey;
                 // Inject JWT token if available
@@ -40,14 +57,89 @@ class AuthClient {
                     requestConfig.headers['Authorization'] = `Bearer ${this.token}`;
                     // ✅ Inject X-Auth-Type header for better performance
                     requestConfig.headers['X-Auth-Type'] = this.authType;
+                    // ✅ Automatic token refresh: ตรวจสอบและ refresh token ก่อนหมดอายุ
+                    if (this.refreshTokenCallbacks &&
+                        (0, token_utils_1.isTokenValid)(this.token) &&
+                        this.refreshThresholdMinutes !== null &&
+                        this.automaticRefreshEnabled === true) {
+                        if ((0, token_utils_1.isTokenNearExpiration)(this.token, this.refreshThresholdMinutes)) {
+                            const remainingMinutes = (0, token_utils_1.getTokenExpirationMinutes)(this.token);
+                            const isCritical = remainingMinutes !== null && remainingMinutes <= 1;
+                            const now = Date.now();
+                            const timeSinceLastRefresh = now - this.lastRefreshAttempt;
+                            if (timeSinceLastRefresh >= this.REFRESH_COOLDOWN_MS &&
+                                !this.refreshPromise) {
+                                console.log(`[AuthClient] Token near expiration (${remainingMinutes} min remaining), refreshing...`);
+                                this.lastRefreshAttempt = now;
+                                if (isCritical) {
+                                    // Critical: await refresh
+                                    try {
+                                        const newToken = await Promise.race([
+                                            this.performRefresh(),
+                                            new Promise((_, reject) => setTimeout(() => reject(new Error('Refresh timeout')), 5000)),
+                                        ]);
+                                        this.token = newToken;
+                                        requestConfig.headers['Authorization'] = `Bearer ${newToken}`;
+                                        console.log('[AuthClient] Token refreshed successfully (critical)');
+                                    }
+                                    catch (error) {
+                                        console.error('[AuthClient] Critical token refresh failed:', error);
+                                    }
+                                }
+                                else {
+                                    // Background refresh
+                                    this.performRefresh().catch((error) => {
+                                        console.error('[AuthClient] Background token refresh failed:', error);
+                                    });
+                                }
+                            }
+                        }
+                    }
                 }
             }
             return requestConfig;
         }, (error) => {
             return Promise.reject(error);
         });
-        // Add response interceptor for error handling
-        this.client.interceptors.response.use((response) => response, (error) => {
+        // Add response interceptor for error handling and token refresh on 401
+        this.client.interceptors.response.use((response) => response, async (error) => {
+            const originalRequest = error.config;
+            // Handle 401 errors - try refresh token before failing
+            if (error.response?.status === 401 && originalRequest && this.refreshTokenCallbacks) {
+                if (originalRequest._retry) {
+                    console.warn('[AuthClient] 401 Unauthorized after retry - refresh failed');
+                    if (this.refreshTokenCallbacks.onRefreshFailure) {
+                        await this.refreshTokenCallbacks.onRefreshFailure();
+                    }
+                    return Promise.reject(error);
+                }
+                // Skip refresh for refresh endpoint itself
+                if (originalRequest.url?.includes('/auth/refresh') || originalRequest.url?.includes('/auth/refresh-token')) {
+                    console.error('[AuthClient] Refresh endpoint failed - session expired');
+                    if (this.refreshTokenCallbacks.onRefreshFailure) {
+                        await this.refreshTokenCallbacks.onRefreshFailure();
+                    }
+                    return Promise.reject(error);
+                }
+                // Try to refresh token
+                try {
+                    originalRequest._retry = true;
+                    console.log('[AuthClient] 401 detected, attempting token refresh...');
+                    const newToken = await this.performRefresh();
+                    originalRequest.headers = originalRequest.headers || {};
+                    originalRequest.headers.Authorization = `Bearer ${newToken}`;
+                    console.log('[AuthClient] Token refreshed, retrying original request...');
+                    return this.client(originalRequest);
+                }
+                catch (refreshError) {
+                    console.error('[AuthClient] Token refresh failed:', refreshError);
+                    if (this.refreshTokenCallbacks.onRefreshFailure) {
+                        await this.refreshTokenCallbacks.onRefreshFailure();
+                    }
+                    return Promise.reject(refreshError);
+                }
+            }
+            // Handle other errors
             if (error.response?.status === 401) {
                 console.error('[AuthClient] API Key authentication failed');
             }
@@ -62,6 +154,7 @@ class AuthClient {
         this.systemConfig = new api_1.SystemConfigAPI(this);
         this.files = new api_1.FilesAPI(this);
         this.eventLog = new api_1.EventLogApi(this);
+        this.license = new api_1.LicenseAPI(this);
         this.line = new api_1.LineAPI(this);
     }
     /**
@@ -152,6 +245,12 @@ class AuthClient {
         this.token = token;
         this.authType = type;
         console.log(`[AuthClient] Token set with type: ${type}`);
+        // Reset warning time when token changes
+        this.lastWarningTime = 0;
+        // If session expiration monitoring is enabled, check immediately
+        if (this.sessionExpirationCallbacks) {
+            this.checkSessionExpiration();
+        }
     }
     /**
      * Get current token type
@@ -185,6 +284,7 @@ class AuthClient {
     clearToken() {
         this.token = null;
         this.authType = 'hybrid';
+        this.lastWarningTime = 0;
     }
     /**
      * Get axios instance for advanced usage
@@ -192,5 +292,354 @@ class AuthClient {
     getAxiosInstance() {
         return this.client;
     }
+    /**
+     * Enable automatic token refresh
+     * Call this after user is authenticated to enable automatic refresh
+     *
+     * @param options - Options for automatic refresh
+     *
+     * @example
+     * ```typescript
+     * // Simple: SDK manages localStorage automatically
+     * await authClient.enableAutomaticRefresh({
+     *   refreshTokenKey: 'refresh_token',
+     *   onRefreshFailure: () => window.location.href = '/login'
+     * });
+     *
+     * // Advanced: Custom callbacks
+     * await authClient.enableAutomaticRefresh({
+     *   callbacks: {
+     *     getRefreshToken: () => customStorage.get('refresh_token'),
+     *     setRefreshToken: (token) => customStorage.set('refresh_token', token),
+     *     clearRefreshToken: () => customStorage.remove('refresh_token'),
+     *     onRefreshFailure: () => window.location.href = '/login'
+     *   }
+     * });
+     * ```
+     */
+    async enableAutomaticRefresh(options) {
+        if (options.refreshTokenKey) {
+            // Use localStorage with provided key
+            const key = options.refreshTokenKey;
+            this.refreshTokenCallbacks = {
+                getRefreshToken: () => {
+                    if (typeof window === 'undefined')
+                        return null;
+                    return localStorage.getItem(key);
+                },
+                setRefreshToken: (token) => {
+                    if (typeof window === 'undefined')
+                        return;
+                    localStorage.setItem(key, token);
+                },
+                clearRefreshToken: () => {
+                    if (typeof window === 'undefined')
+                        return;
+                    localStorage.removeItem(key);
+                },
+                onRefreshFailure: options.onRefreshFailure,
+            };
+        }
+        else if (options.callbacks) {
+            // Use custom callbacks
+            this.refreshTokenCallbacks = {
+                ...options.callbacks,
+                onRefreshFailure: options.onRefreshFailure || options.callbacks.onRefreshFailure,
+            };
+        }
+        else {
+            throw new Error('Either refreshTokenKey or callbacks must be provided');
+        }
+        await this.loadJwtConfig();
+    }
+    /**
+     * Disable automatic token refresh
+     */
+    disableAutomaticRefresh() {
+        this.refreshTokenCallbacks = null;
+        this.refreshThresholdMinutes = null;
+        this.automaticRefreshEnabled = null;
+        this.jwtConfigPromise = null;
+    }
+    /**
+     * Load JWT config from API
+     */
+    async loadJwtConfig() {
+        if (this.jwtConfigPromise) {
+            return this.jwtConfigPromise;
+        }
+        this.jwtConfigPromise = this.performJwtConfigLoad();
+        return this.jwtConfigPromise;
+    }
+    /**
+     * Perform JWT config load
+     */
+    async performJwtConfigLoad() {
+        try {
+            const config = await this.systemConfig.getSecurityJwtConfig();
+            this.refreshThresholdMinutes = config.refresh_threshold_minutes;
+            this.automaticRefreshEnabled = config.automatic_refresh ?? true;
+            console.log(`[AuthClient] JWT config loaded: refresh_threshold_minutes=${this.refreshThresholdMinutes} minutes, automatic_refresh=${this.automaticRefreshEnabled}`);
+        }
+        catch (error) {
+            console.error('[AuthClient] Failed to load JWT config:', error);
+            // Reset to allow retry
+            this.jwtConfigPromise = null;
+            throw error;
+        }
+    }
+    /**
+     * Perform token refresh
+     */
+    async performRefresh() {
+        // If refresh is already in progress, wait for it
+        if (this.refreshPromise) {
+            return this.refreshPromise;
+        }
+        if (!this.refreshTokenCallbacks) {
+            throw new Error('Refresh token callbacks not configured');
+        }
+        this.refreshPromise = this.doRefresh();
+        try {
+            const newToken = await this.refreshPromise;
+            return newToken;
+        }
+        finally {
+            this.refreshPromise = null;
+        }
+    }
+    /**
+     * Execute refresh token request
+     */
+    async doRefresh() {
+        if (!this.refreshTokenCallbacks) {
+            throw new Error('Refresh token callbacks not configured');
+        }
+        const refreshToken = await this.refreshTokenCallbacks.getRefreshToken();
+        if (!refreshToken) {
+            throw new Error('No refresh token available');
+        }
+        try {
+            // Try refreshWithToken first (for mobile apps with refresh token)
+            const session = await this.auth.refreshWithToken(refreshToken);
+            const newAccessToken = session.access_token;
+            // Update token in client
+            this.token = newAccessToken;
+            // Save new refresh token if rotated
+            if (session.refresh_token) {
+                await this.refreshTokenCallbacks.setRefreshToken(session.refresh_token);
+            }
+            console.log('[AuthClient] Token refreshed successfully');
+            return newAccessToken;
+        }
+        catch (error) {
+            // If refreshWithToken fails, try regular refresh endpoint
+            if (error.response?.status === 404 || error.response?.status === 400) {
+                try {
+                    const tokens = await this.auth.refresh(refreshToken);
+                    const newAccessToken = tokens.access_token;
+                    this.token = newAccessToken;
+                    if (tokens.refresh_token) {
+                        await this.refreshTokenCallbacks.setRefreshToken(tokens.refresh_token);
+                    }
+                    console.log('[AuthClient] Token refreshed successfully (fallback)');
+                    return newAccessToken;
+                }
+                catch (fallbackError) {
+                    console.error('[AuthClient] Fallback refresh also failed:', fallbackError);
+                    throw fallbackError;
+                }
+            }
+            throw error;
+        }
+    }
+    /**
+     * Reload JWT config (for when config changes)
+     */
+    async reloadJwtConfig() {
+        this.jwtConfigPromise = null;
+        this.refreshThresholdMinutes = null;
+        this.automaticRefreshEnabled = null;
+        await this.loadJwtConfig();
+    }
+    /**
+     * Enable session expiration monitoring
+     * จะตรวจสอบ session expiration ตาม config จาก settings/sessions และเรียก callback เมื่อใกล้หมดอายุ
+     *
+     * @param options - Options for session expiration monitoring
+     *
+     * @example
+     * ```typescript
+     * await authClient.enableSessionExpirationMonitoring({
+     *   callbacks: {
+     *     onSessionExpiring: (remainingMinutes, expirationType) => {
+     *       console.log(`Session will expire in ${remainingMinutes} minutes (${expirationType})`);
+     *       // แสดง notification หรือ dialog
+     *     },
+     *     onSessionExpired: () => {
+     *       console.log('Session expired');
+     *       // Redirect to login
+     *     }
+     *   },
+     *   checkIntervalSeconds: 30 // ตรวจสอบทุก 30 วินาที
+     * });
+     * ```
+     */
+    async enableSessionExpirationMonitoring(options) {
+        this.sessionExpirationCallbacks = options.callbacks;
+        this.sessionExpirationCheckIntervalSeconds = options.checkIntervalSeconds ?? 30;
+        // Load session management config
+        await this.loadSessionManagementConfig();
+        // Start monitoring
+        this.startSessionExpirationMonitoring();
+    }
+    /**
+     * Disable session expiration monitoring
+     */
+    disableSessionExpirationMonitoring() {
+        this.stopSessionExpirationMonitoring();
+        this.sessionExpirationCallbacks = null;
+        this.sessionManagementConfig = null;
+        this.sessionManagementConfigPromise = null;
+    }
+    /**
+     * Load session management config from API
+     */
+    async loadSessionManagementConfig() {
+        if (this.sessionManagementConfigPromise) {
+            return this.sessionManagementConfigPromise;
+        }
+        this.sessionManagementConfigPromise = this.performSessionManagementConfigLoad();
+        return this.sessionManagementConfigPromise;
+    }
+    /**
+     * Perform session management config load
+     */
+    async performSessionManagementConfigLoad() {
+        try {
+            const config = await this.systemConfig.getSessionManagement();
+            this.sessionManagementConfig = config;
+            console.log('[AuthClient] Session management config loaded:', {
+                inactivityEnabled: config.inactivity.enabled,
+                inactivityTimeout: `${config.inactivity.timeout_duration} ${config.inactivity.timeout_unit}`,
+                inactivityWarningMinutes: config.inactivity.warning_minutes,
+                lifetimeEnabled: config.lifetime.enabled,
+                lifetimeMax: config.lifetime.enabled ? `${config.lifetime.max_duration} ${config.lifetime.max_unit}` : 'N/A',
+            });
+        }
+        catch (error) {
+            console.error('[AuthClient] Failed to load session management config:', error);
+            // Reset to allow retry
+            this.sessionManagementConfigPromise = null;
+            throw error;
+        }
+    }
+    /**
+     * Start session expiration monitoring interval
+     */
+    startSessionExpirationMonitoring() {
+        // Clear existing interval if any
+        this.stopSessionExpirationMonitoring();
+        // Check immediately
+        this.checkSessionExpiration();
+        // Set up interval
+        this.sessionExpirationCheckInterval = setInterval(() => {
+            this.checkSessionExpiration();
+        }, this.sessionExpirationCheckIntervalSeconds * 1000);
+    }
+    /**
+     * Stop session expiration monitoring interval
+     */
+    stopSessionExpirationMonitoring() {
+        if (this.sessionExpirationCheckInterval) {
+            clearInterval(this.sessionExpirationCheckInterval);
+            this.sessionExpirationCheckInterval = null;
+        }
+    }
+    /**
+     * Check session expiration and trigger callbacks if needed
+     *
+     * Note: ใช้ token expiration time เป็นตัวประมาณ session expiration
+     * เพราะเราไม่มี session creation time หรือ last activity time ใน SDK
+     * Token expiration จะถูก refresh อัตโนมัติเมื่อมีการใช้งาน (extend_on_activity)
+     */
+    checkSessionExpiration() {
+        if (!this.token || !this.sessionExpirationCallbacks || !this.sessionManagementConfig) {
+            return;
+        }
+        // Check if token is expired
+        if ((0, token_utils_1.isTokenExpired)(this.token)) {
+            if (this.sessionExpirationCallbacks.onSessionExpired) {
+                this.sessionExpirationCallbacks.onSessionExpired();
+            }
+            return;
+        }
+        const tokenExpirationMinutes = (0, token_utils_1.getTokenExpirationMinutes)(this.token);
+        if (tokenExpirationMinutes === null) {
+            return;
+        }
+        // ใช้ token expiration time เป็นตัวประมาณ session expiration
+        // เพราะ token จะถูก refresh อัตโนมัติเมื่อมีการใช้งาน (extend_on_activity)
+        // ดังนั้น token expiration time จะสะท้อน session expiration time ได้ดีพอสมควร
+        // ตรวจสอบว่า session expiration monitoring เปิดใช้งานหรือไม่
+        const inactivityEnabled = this.sessionManagementConfig.inactivity.enabled;
+        const lifetimeEnabled = this.sessionManagementConfig.lifetime.enabled;
+        // ถ้าไม่มี expiration config เปิดใช้งาน ให้ใช้ token expiration
+        if (!inactivityEnabled && !lifetimeEnabled) {
+            // ใช้ token expiration time เป็นตัวประมาณ
+            const warningMinutes = this.sessionManagementConfig.inactivity.warning_minutes;
+            if (tokenExpirationMinutes <= warningMinutes && tokenExpirationMinutes > 0) {
+                this.triggerExpiringWarning(tokenExpirationMinutes, 'inactivity');
+            }
+            return;
+        }
+        // คำนวณ session expiration times จาก config
+        const inactivityTimeoutMinutes = inactivityEnabled
+            ? (0, token_utils_1.convertDurationToMinutes)(this.sessionManagementConfig.inactivity.timeout_duration, this.sessionManagementConfig.inactivity.timeout_unit)
+            : null;
+        const lifetimeMaxMinutes = lifetimeEnabled
+            ? (0, token_utils_1.convertDurationToMinutes)(this.sessionManagementConfig.lifetime.max_duration, this.sessionManagementConfig.lifetime.max_unit)
+            : null;
+        // ใช้ token expiration time เป็นตัวประมาณ session expiration
+        // เพราะ token จะถูก refresh อัตโนมัติเมื่อมีการใช้งาน
+        // ดังนั้น token expiration time จะสะท้อน session expiration time ได้ดีพอสมควร
+        const warningMinutes = this.sessionManagementConfig.inactivity.warning_minutes;
+        // ตรวจสอบว่า token expiration time ใกล้หมดอายุตาม warning_minutes หรือไม่
+        if (tokenExpirationMinutes <= warningMinutes && tokenExpirationMinutes > 0) {
+            // กำหนด expiration type จาก config
+            let expirationType = 'inactivity';
+            if (inactivityTimeoutMinutes !== null && lifetimeMaxMinutes !== null) {
+                // ใช้ type ที่สั้นกว่า
+                expirationType = inactivityTimeoutMinutes <= lifetimeMaxMinutes ? 'inactivity' : 'lifetime';
+            }
+            else if (lifetimeMaxMinutes !== null) {
+                expirationType = 'lifetime';
+            }
+            this.triggerExpiringWarning(tokenExpirationMinutes, expirationType);
+        }
+    }
+    /**
+     * Trigger expiring warning callback with cooldown
+     */
+    triggerExpiringWarning(remainingMinutes, expirationType) {
+        if (!this.sessionExpirationCallbacks?.onSessionExpiring) {
+            return;
+        }
+        // Check cooldown to avoid spam
+        const now = Date.now();
+        const timeSinceLastWarning = now - this.lastWarningTime;
+        if (timeSinceLastWarning >= this.WARNING_COOLDOWN_MS) {
+            this.lastWarningTime = now;
+            this.sessionExpirationCallbacks.onSessionExpiring(remainingMinutes, expirationType);
+        }
+    }
+    /**
+     * Reload session management config (for when config changes)
+     */
+    async reloadSessionManagementConfig() {
+        this.sessionManagementConfigPromise = null;
+        this.sessionManagementConfig = null;
+        await this.loadSessionManagementConfig();
+    }
 }
 exports.AuthClient = AuthClient;

package/dist/client/index.d.ts

@@ -2,4 +2,6 @@
  * Client exports for frontend applications
  */
 export { AuthClient } from './auth-client';
+export type { RefreshTokenCallbacks, AutomaticRefreshOptions, SessionExpirationCallbacks, SessionExpirationOptions, } from './auth-client';
+export * from './api';
 //# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EACV,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,cAAc,OAAO,CAAC"}

package/dist/client/index.js

@@ -2,7 +2,22 @@
 /**
  * Client exports for frontend applications
  */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthClient = void 0;
 var auth_client_1 = require("./auth-client");
 Object.defineProperty(exports, "AuthClient", { enumerable: true, get: function () { return auth_client_1.AuthClient; } });
+__exportStar(require("./api"), exports);

package/dist/index.d.ts

@@ -7,4 +7,5 @@
 export * from './types';
 export * from './client';
 export * from './middleware';
+export * from './utils/token-utils';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,cAAc,SAAS,CAAC;AAGxB,cAAc,UAAU,CAAC;AAGzB,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,cAAc,SAAS,CAAC;AAGxB,cAAc,UAAU,CAAC;AAGzB,cAAc,cAAc,CAAC;AAG7B,cAAc,qBAAqB,CAAC"}

package/dist/index.js

@@ -26,3 +26,5 @@ __exportStar(require("./types"), exports);
 __exportStar(require("./client"), exports);
 // Middleware (Backend only - Express & NestJS)
 __exportStar(require("./middleware"), exports);
+// Utils
+__exportStar(require("./utils/token-utils"), exports);

package/dist/types/auth.types.d.ts

@@ -66,6 +66,15 @@ export interface User {
 export interface RefreshTokenRequest {
     refresh_token: string;
 }
+/**
+ * Refresh Token Request with optional metadata
+ */
+export interface RefreshTokenRequestWithMetadata {
+    refresh_token: string;
+    ip_address?: string;
+    user_agent?: string;
+    device_id?: string;
+}
 /**
  * Authentication Tokens
  * Result of token refresh

package/dist/types/auth.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.types.d.ts","sourceRoot":"","sources":["../../src/types/auth.types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,IAAI,CAAC;IACX,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,KAAK,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IACH,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC,CAAC;IACH,gBAAgB,CAAC,EAAE;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}
+{"version":3,"file":"auth.types.d.ts","sourceRoot":"","sources":["../../src/types/auth.types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,IAAI,CAAC;IACX,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,KAAK,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IACH,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC,CAAC;IACH,gBAAgB,CAAC,EAAE;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/dist/types/system-config.types.d.ts

@@ -29,4 +29,41 @@ export interface SystemConfig {
  * Returns an object with key-value pairs for a category
  */
 export type SystemConfigByCategory = Record<string, any>;
+/**
+ * Security JWT Configuration
+ * Configuration for JWT token settings
+ */
+export interface SecurityJwtConfig {
+    jwt_secret: string;
+    access_token_expiry_minutes: number;
+    refresh_token_expiry_days: number;
+    automatic_refresh: boolean;
+    refresh_threshold_minutes: number;
+    rotate_refresh_token: boolean;
+    revoke_on_logout: boolean;
+    max_refresh_attempts: number;
+}
+/**
+ * Session Management Configuration
+ * Configuration for session timeout and expiration settings
+ */
+export interface SessionManagementConfig {
+    inactivity: {
+        enabled: boolean;
+        timeout_duration: number;
+        timeout_unit: 'minutes' | 'hours' | 'days';
+        warning_minutes: number;
+        extend_on_activity: boolean;
+    };
+    lifetime: {
+        enabled: boolean;
+        max_duration: number;
+        max_unit: 'minutes' | 'hours' | 'days';
+    };
+    concurrent: {
+        max_sessions: number;
+        logout_inactive: boolean;
+        show_badge: boolean;
+    };
+}
 //# sourceMappingURL=system-config.types.d.ts.map

package/dist/types/system-config.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"system-config.types.d.ts","sourceRoot":"","sources":["../../src/types/system-config.types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,GAAG,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;IAC9D,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC"}
+{"version":3,"file":"system-config.types.d.ts","sourceRoot":"","sources":["../../src/types/system-config.types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,GAAG,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;IAC9D,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEzD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B,EAAE,MAAM,CAAC;IACpC,yBAAyB,EAAE,MAAM,CAAC;IAClC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,yBAAyB,EAAE,MAAM,CAAC;IAClC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE;QACV,OAAO,EAAE,OAAO,CAAC;QACjB,gBAAgB,EAAE,MAAM,CAAC;QACzB,YAAY,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;QAC3C,eAAe,EAAE,MAAM,CAAC;QACxB,kBAAkB,EAAE,OAAO,CAAC;KAC7B,CAAC;IACF,QAAQ,EAAE;QACR,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;KACxC,CAAC;IACF,UAAU,EAAE;QACV,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,OAAO,CAAC;QACzB,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;CACH"}