zibri 2.3.0 → 2.4.1

package/dist/cjs/auth/strategies/cookie/cookie-auth.auth-strategy.d.ts

@@ -0,0 +1,73 @@
+import { CookieAuthConfirmPasswordResetData } from './cookie-auth-confirm-password-reset-data.model';
+import { CookieAuthRefreshLoginData } from './cookie-auth-refresh-login-data.model';
+import { CookieAuthRefreshSession, CookieAuthRefreshSessionCreateData } from './cookie-auth-refresh-session.model';
+import { CookieAuthRequestPasswordResetData } from './cookie-auth-request-password-reset-data.model';
+import { CookieAuthSession, CookieAuthSessionCreateData } from './cookie-auth-session.model';
+import { ZibriApplication } from '../../../application';
+import { HttpRequestContext } from '../../../context/request/http-request.context';
+import { WebsocketRequestContext } from '../../../context/request/websocket-request.context';
+import { Repository } from '../../../data-source/repository';
+import { type EmailServiceInterface } from '../../../email/email-service.interface';
+import { BaseEntity } from '../../../entity/base-entity.model';
+import { OpenApiSecuritySchemeObject } from '../../../open-api/open-api.model';
+import { Newable } from '../../../types/newable.type';
+import { type OmitStrict } from '../../../types/omit-strict.type';
+import { type HashServiceInterface } from '../../hash/hash-service.interface';
+import { BaseUser } from '../../models/base-user.model';
+import { type UserServiceInterface } from '../../user/user-service.interface';
+import { AuthStrategyInterface } from '../auth-strategy.interface';
+import { CookieAuthCredentials, CookieAuthCredentialsData } from './cookie-auth-credentials.model';
+import { CookieAuthData } from './cookie-auth-data.model';
+import { CookieAuthLogoutData } from './cookie-auth-logout-data.model';
+import { type CookieOptions } from '../../../http/cookie-options.model';
+import { PasswordResetToken } from '../../models/password-reset-token.model';
+/**
+ * Options input for any cookie session.
+ */
+export type CookieAuthSessionOptionsInput = OmitStrict<CookieOptions, 'maxAge' | 'expires' | 'signed' | 'httpOnly' | 'secure'>;
+/**
+ * Cookie auth strategy implementation of Zibri.
+ */
+export declare class CookieAuthStrategy<RoleType extends string, UserType extends BaseUser<RoleType> = BaseUser<RoleType>> implements AuthStrategyInterface<RoleType, UserType, CookieAuthData<RoleType>, CookieAuthCredentialsData, CookieAuthRequestPasswordResetData<RoleType, UserType>, CookieAuthConfirmPasswordResetData, CookieAuthRefreshLoginData, CookieAuthLogoutData> {
+    private readonly sessionRepository;
+    private readonly refreshSessionRepository;
+    private readonly userService;
+    private readonly csrfTokenHeader;
+    private readonly sessionExpiresInMs;
+    private readonly refreshSessionExpiresInMs;
+    private readonly passwordResetTokenExpiresInMs;
+    private readonly passwordResetTokenRepository;
+    private readonly credentialsRepository;
+    private readonly emailService;
+    private readonly hashService;
+    readonly name: string;
+    readonly securityScheme: OpenApiSecuritySchemeObject;
+    private readonly confirmPasswordResetUrl;
+    private readonly PasswordResetEmail;
+    private readonly sessionOptions;
+    private readonly refreshSessionOptions;
+    constructor(sessionRepository: Repository<CookieAuthSession, CookieAuthSessionCreateData>, refreshSessionRepository: Repository<CookieAuthRefreshSession, CookieAuthRefreshSessionCreateData>, userService: UserServiceInterface, csrfTokenHeader: string, sessionOptions: OmitStrict<CookieOptions, 'maxAge' | 'expires'>, refreshSessionOptions: OmitStrict<CookieOptions, 'maxAge' | 'expires'>, sessionExpiresInMs: number, refreshSessionExpiresInMs: number, passwordResetTokenExpiresInMs: number, passwordResetTokenRepository: Repository<PasswordResetToken>, credentialsRepository: Repository<CookieAuthCredentials>, emailService: EmailServiceInterface, hashService: HashServiceInterface, secret: string | undefined);
+    init(app: ZibriApplication): void;
+    resolveUser(context: HttpRequestContext | WebsocketRequestContext): Promise<UserType | undefined>;
+    login(credentials: CookieAuthCredentialsData): Promise<CookieAuthData<RoleType>>;
+    logout(data: CookieAuthLogoutData): Promise<void>;
+    refreshLogin(data: CookieAuthRefreshLoginData): Promise<CookieAuthData<RoleType>>;
+    private rotateSessions;
+    isLoggedIn(context: HttpRequestContext | WebsocketRequestContext): Promise<boolean>;
+    hasRole(context: HttpRequestContext | WebsocketRequestContext, allowedRoles: RoleType[]): Promise<boolean>;
+    belongsTo<TargetEntity extends Newable<BaseEntity>>(context: HttpRequestContext | WebsocketRequestContext, targetEntity: TargetEntity, targetUserIdKey: keyof InstanceType<TargetEntity>, targetIdParamKey: string): Promise<boolean>;
+    requestPasswordReset(data: CookieAuthRequestPasswordResetData<RoleType, UserType>): Promise<void>;
+    confirmPasswordReset(data: CookieAuthConfirmPasswordResetData): Promise<void>;
+    private activePasswordResetTokenAlreadyExists;
+    private resolveSession;
+    private resolveAndValidateSession;
+    private isCsrfTokenValid;
+    private resolveRefreshSession;
+    private createSession;
+    private createRefreshSession;
+    private resolveCsrfTokenFromHeader;
+    private clearCookies;
+    private setSessionCookie;
+    private setRefreshSessionCookie;
+}
+//# sourceMappingURL=cookie-auth.auth-strategy.d.ts.map

package/dist/cjs/auth/strategies/cookie/cookie-auth.auth-strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth.auth-strategy.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth.auth-strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AACrG,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,wBAAwB,EAAE,kCAAkC,EAAE,MAAM,qCAAqC,CAAC;AACnH,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AAErG,OAAO,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC7F,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+CAA+C,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAE7F,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAO7D,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAEpF,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAK/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAE/E,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAGlE,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAgC,MAAM,yCAAyC,CAAC;AAG3G;;GAEG;AACH,MAAM,MAAM,6BAA6B,GAAG,UAAU,CAAC,aAAa,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC;AAQ/H;;GAEG;AACH,qBAAa,kBAAkB,CAC3B,QAAQ,SAAS,MAAM,EACvB,QAAQ,SAAS,QAAQ,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAC1D,YAAW,qBAAqB,CAC9B,QAAQ,EACR,QAAQ,EACR,cAAc,CAAC,QAAQ,CAAC,EACxB,yBAAyB,EACzB,kCAAkC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACtD,kCAAkC,EAClC,0BAA0B,EAC1B,oBAAoB,CACvB;IAaO,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IAEzC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAMhC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAE1C,OAAO,CAAC,QAAQ,CAAC,6BAA6B;IAE9C,OAAO,CAAC,QAAQ,CAAC,4BAA4B;IAE7C,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IAEtC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAnChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAY;IAEjC,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;IAErD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAiD;IACpF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAC1D,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA2B;gBAI5C,iBAAiB,EAAE,UAAU,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,EAE7E,wBAAwB,EAAE,UAAU,CAAC,wBAAwB,EAAE,kCAAkC,CAAC,EAElG,WAAW,EAAE,oBAAoB,EAEjC,eAAe,EAAE,MAAM,EAExC,cAAc,EAAE,UAAU,CAAC,aAAa,EAAE,QAAQ,GAAG,SAAS,CAAC,EAE/D,qBAAqB,EAAE,UAAU,CAAC,aAAa,EAAE,QAAQ,GAAG,SAAS,CAAC,EAErD,kBAAkB,EAAE,MAAM,EAE1B,yBAAyB,EAAE,MAAM,EAEjC,6BAA6B,EAAE,MAAM,EAErC,4BAA4B,EAAE,UAAU,CAAC,kBAAkB,CAAC,EAE5D,qBAAqB,EAAE,UAAU,CAAC,qBAAqB,CAAC,EAExD,YAAY,EAAE,qBAAqB,EAEnC,WAAW,EAAE,oBAAoB,EAElD,MAAM,EAAE,MAAM,GAAG,SAAS;IA0C9B,IAAI,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI;IAO3B,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,uBAAuB,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;IAUjG,KAAK,CAAC,WAAW,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAiChF,MAAM,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBjD,YAAY,CAAC,IAAI,EAAE,0BAA0B,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YA4CzE,cAAc;IAiCtB,UAAU,CAAC,OAAO,EAAE,kBAAkB,GAAG,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC;IAKnF,OAAO,CACT,OAAO,EAAE,kBAAkB,GAAG,uBAAuB,EACrD,YAAY,EAAE,QAAQ,EAAE,GACzB,OAAO,CAAC,OAAO,CAAC;IAUb,SAAS,CAAC,YAAY,SAAS,OAAO,CAAC,UAAU,CAAC,EACpD,OAAO,EAAE,kBAAkB,GAAG,uBAAuB,EACrD,YAAY,EAAE,YAAY,EAC1B,eAAe,EAAE,MAAM,YAAY,CAAC,YAAY,CAAC,EACjD,gBAAgB,EAAE,MAAM,GACzB,OAAO,CAAC,OAAO,CAAC;IAyBb,oBAAoB,CAAC,IAAI,EAAE,kCAAkC,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAiCjG,oBAAoB,CAAC,IAAI,EAAE,kCAAkC,GAAG,OAAO,CAAC,IAAI,CAAC;YAyBrE,qCAAqC;YAcrC,cAAc;YAed,yBAAyB;IAiCvC,OAAO,CAAC,gBAAgB;YAgBV,qBAAqB;YAkBrB,aAAa;YAYb,oBAAoB;IAelC,OAAO,CAAC,0BAA0B;IAOlC,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,uBAAuB;CAQlC"}

package/dist/cjs/auth/strategies/cookie/cookie-auth.auth-strategy.js

@@ -0,0 +1,430 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CookieAuthStrategy = void 0;
+const node_crypto_1 = require("node:crypto");
+const cookie_auth_refresh_session_model_1 = require("./cookie-auth-refresh-session.model");
+const cookie_auth_session_cleanup_cron_job_1 = require("./cookie-auth-session-cleanup.cron-job");
+const cookie_auth_session_model_1 = require("./cookie-auth-session.model");
+const http_request_context_1 = require("../../../context/request/http-request.context");
+const repository_1 = require("../../../data-source/repository");
+const inject_repository_decorator_1 = require("../../../di/decorators/inject-repository.decorator");
+const inject_decorator_1 = require("../../../di/decorators/inject.decorator");
+const zibri_di_tokens_default_1 = require("../../../di/default/zibri-di-tokens.default");
+const no_provider_error_1 = require("../../../di/errors/no-provider.error");
+const inject_function_1 = require("../../../di/inject.function");
+const email_priority_enum_1 = require("../../../email/models/email-priority.enum");
+const too_many_requests_error_1 = require("../../../error-handling/errors/too-many-requests.error");
+const unauthorized_error_1 = require("../../../error-handling/errors/unauthorized.error");
+const http_method_enum_1 = require("../../../http/http-method.enum");
+const known_header_enum_1 = require("../../../http/known-header.enum");
+const preact_utilities_1 = require("../../../preact/preact.utilities");
+const ms_1 = require("../../../utilities/ms");
+const uuid_utilities_1 = require("../../../utilities/uuid.utilities");
+const cookie_auth_credentials_model_1 = require("./cookie-auth-credentials.model");
+const password_reset_token_model_1 = require("../../models/password-reset-token.model");
+/**
+ * Cookie auth strategy implementation of Zibri.
+ */
+let CookieAuthStrategy = class CookieAuthStrategy {
+    sessionRepository;
+    refreshSessionRepository;
+    userService;
+    csrfTokenHeader;
+    sessionExpiresInMs;
+    refreshSessionExpiresInMs;
+    passwordResetTokenExpiresInMs;
+    passwordResetTokenRepository;
+    credentialsRepository;
+    emailService;
+    hashService;
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    name = 'cookie';
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    securityScheme;
+    confirmPasswordResetUrl;
+    PasswordResetEmail;
+    sessionOptions;
+    refreshSessionOptions;
+    constructor(sessionRepository, refreshSessionRepository, userService, csrfTokenHeader, sessionOptions, refreshSessionOptions, sessionExpiresInMs, refreshSessionExpiresInMs, passwordResetTokenExpiresInMs, passwordResetTokenRepository, credentialsRepository, emailService, hashService, secret) {
+        this.sessionRepository = sessionRepository;
+        this.refreshSessionRepository = refreshSessionRepository;
+        this.userService = userService;
+        this.csrfTokenHeader = csrfTokenHeader;
+        this.sessionExpiresInMs = sessionExpiresInMs;
+        this.refreshSessionExpiresInMs = refreshSessionExpiresInMs;
+        this.passwordResetTokenExpiresInMs = passwordResetTokenExpiresInMs;
+        this.passwordResetTokenRepository = passwordResetTokenRepository;
+        this.credentialsRepository = credentialsRepository;
+        this.emailService = emailService;
+        this.hashService = hashService;
+        if (!secret) {
+            throw new no_provider_error_1.NoProviderError(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.COOKIE_SIGN_SECRET, []);
+        }
+        const confirmPasswordResetUrl = (0, inject_function_1.inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.CONFIRM_PASSWORD_RESET_URL);
+        if (!confirmPasswordResetUrl) {
+            throw new no_provider_error_1.NoProviderError(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.CONFIRM_PASSWORD_RESET_URL, []);
+        }
+        const PasswordResetEmail = (0, inject_function_1.inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.PASSWORD_RESET_EMAIL_TEMPLATE);
+        if (!PasswordResetEmail) {
+            throw new no_provider_error_1.NoProviderError(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.PASSWORD_RESET_EMAIL_TEMPLATE, []);
+        }
+        this.confirmPasswordResetUrl = confirmPasswordResetUrl;
+        this.PasswordResetEmail = PasswordResetEmail;
+        this.sessionOptions = {
+            maxAge: this.sessionExpiresInMs,
+            signed: true,
+            httpOnly: true,
+            sameSite: 'lax',
+            ...sessionOptions
+        };
+        this.refreshSessionOptions = {
+            maxAge: this.refreshSessionExpiresInMs,
+            signed: true,
+            httpOnly: true,
+            sameSite: 'lax',
+            ...refreshSessionOptions
+        };
+        this.securityScheme = {
+            type: 'apiKey',
+            in: 'cookie',
+            name: this.sessionOptions.name
+        };
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    init(app) {
+        if (!app.options.cronJobs.includes(cookie_auth_session_cleanup_cron_job_1.CookieAuthSessionCleanupCronJob)) {
+            app.options.cronJobs.push(cookie_auth_session_cleanup_cron_job_1.CookieAuthSessionCleanupCronJob);
+        }
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async resolveUser(context) {
+        const session = await this.resolveAndValidateSession(context, undefined);
+        if (!session) {
+            return undefined;
+        }
+        return await this.userService.findById(session.userId);
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async login(credentials) {
+        try {
+            const foundUser = await this.userService.findByEmail(credentials.email);
+            const credentialsFound = await this.userService.resolveCredentialsFor(foundUser);
+            const passwordMatched = await this.hashService.equal(credentials.password, credentialsFound.password);
+            if (!passwordMatched) {
+                throw new unauthorized_error_1.UnauthorizedError('Invalid email or password.');
+            }
+            const refreshSession = await this.createRefreshSession(foundUser.id, uuid_utilities_1.UUIDUtilities.generate(), credentials.transaction, (0, node_crypto_1.randomBytes)(32).toString('base64url'));
+            const session = await this.createSession(refreshSession, credentials.transaction);
+            this.setRefreshSessionCookie(refreshSession);
+            this.setSessionCookie(session);
+            return {
+                userId: session.userId,
+                roles: foundUser.roles,
+                csrfToken: refreshSession.csrfToken,
+                sessionExpirationDate: session.expirationDate,
+                refreshSessionExpirationDate: refreshSession.expirationDate
+            };
+        }
+        catch {
+            throw new unauthorized_error_1.UnauthorizedError('Invalid email or password.');
+        }
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async logout(data) {
+        try {
+            const refreshSession = await this.refreshSessionRepository.findOne({ where: { id: data.refreshSessionId }, transaction: data.transaction }, false);
+            await this.refreshSessionRepository.deleteAll({ id: data.refreshSessionId }, { transaction: data.transaction });
+            if (refreshSession) {
+                await this.sessionRepository.deleteAll({ familyId: refreshSession.familyId }, { transaction: data.transaction });
+                await this.refreshSessionRepository.deleteAll({ familyId: refreshSession.familyId }, { transaction: data.transaction });
+            }
+            if (data.clearCookies) {
+                this.clearCookies();
+            }
+        }
+        catch {
+            // ignore
+        }
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async refreshLogin(data) {
+        const context = (0, inject_function_1.inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.CURRENT_REQUEST_CONTEXT);
+        if (!(context instanceof http_request_context_1.HttpRequestContext)) {
+            throw new unauthorized_error_1.UnauthorizedError('No valid context');
+        }
+        const currentRefreshSession = await this.resolveRefreshSession(context, data.transaction);
+        if (!currentRefreshSession) {
+            this.clearCookies();
+            throw new unauthorized_error_1.UnauthorizedError('No valid refresh session');
+        }
+        if (new Date(currentRefreshSession.expirationDate).getTime() <= Date.now() || currentRefreshSession.blacklisted) {
+            await this.logout({ clearCookies: true, refreshSessionId: currentRefreshSession.id, transaction: data.transaction });
+            throw new unauthorized_error_1.UnauthorizedError('No valid refresh session');
+        }
+        if (!this.isCsrfTokenValid(currentRefreshSession, context)) {
+            throw new unauthorized_error_1.UnauthorizedError('No valid csrf token');
+        }
+        const currentSession = await this.resolveSession(context, data.transaction);
+        if (currentSession && new Date(currentSession.expirationDate).getTime() > Date.now()) {
+            // the current session is valid, no need to refresh
+            const user = await this.userService.findById(currentSession.userId);
+            return {
+                userId: currentSession.userId,
+                roles: user.roles,
+                csrfToken: currentRefreshSession.csrfToken,
+                sessionExpirationDate: currentSession.expirationDate,
+                refreshSessionExpirationDate: currentRefreshSession.expirationDate
+            };
+        }
+        const newSession = await this.rotateSessions(currentRefreshSession, data.transaction);
+        const user = await this.userService.findById(newSession.userId);
+        return {
+            userId: newSession.userId,
+            roles: user.roles,
+            csrfToken: currentRefreshSession.csrfToken,
+            sessionExpirationDate: newSession.expirationDate,
+            refreshSessionExpirationDate: new Date(Date.now() + this.refreshSessionExpiresInMs + (ms_1.Ms.MINUTE * 5))
+        };
+    }
+    async rotateSessions(currentRefreshSession, transaction) {
+        if (currentRefreshSession.blacklisted) {
+            await this.logout({ clearCookies: true, refreshSessionId: currentRefreshSession.id, transaction });
+        }
+        // 1. invalidate old refresh (reuse detection)
+        await this.refreshSessionRepository.updateById(currentRefreshSession.id, { blacklisted: true }, { transaction });
+        // 2. create new refresh (same family + SAME csrf)
+        const newRefresh = await this.createRefreshSession(currentRefreshSession.userId, currentRefreshSession.familyId, transaction, currentRefreshSession.csrfToken);
+        // 3. create new access session
+        const newSession = await this.createSession(newRefresh, transaction);
+        // 4. set cookies (important: use current context)
+        this.setSessionCookie(newSession);
+        this.setRefreshSessionCookie(newRefresh);
+        return newSession;
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async isLoggedIn(context) {
+        return await this.resolveUser(context) !== undefined;
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async hasRole(context, allowedRoles) {
+        const user = await this.resolveUser(context);
+        if (!user) {
+            return false;
+        }
+        return user.roles.some(r => allowedRoles.includes(r));
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async belongsTo(context, targetEntity, targetUserIdKey, targetIdParamKey) {
+        const session = await this.resolveAndValidateSession(context, undefined);
+        if (!session) {
+            return false;
+        }
+        try {
+            const repo = (0, inject_function_1.inject)((0, inject_repository_decorator_1.repositoryTokenFor)(targetEntity));
+            const targetId = context.request.params?.[targetIdParamKey];
+            if (targetId == undefined) {
+                throw new Error(`Could not find the target id specified as path param "${targetId}"`);
+            }
+            const foundTarget = await repo.findById(targetId);
+            const userIdProperty = foundTarget[targetUserIdKey];
+            if (Array.isArray(userIdProperty)) {
+                return userIdProperty.includes(session.userId);
+            }
+            return userIdProperty === session.userId;
+        }
+        catch {
+            return false;
+        }
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async requestPasswordReset(data) {
+        if (await this.activePasswordResetTokenAlreadyExists(data.user, data.transaction)) {
+            throw new too_many_requests_error_1.TooManyRequestsError('A password reset has already been requested for this account.');
+        }
+        const resetTokenData = {
+            value: (0, node_crypto_1.randomBytes)(16).toString('hex'),
+            userId: data.user.id,
+            expirationDate: new Date(Date.now() + this.passwordResetTokenExpiresInMs)
+        };
+        const resetToken = await this.passwordResetTokenRepository.create(resetTokenData, { transaction: data.transaction });
+        const html = preact_utilities_1.PreactUtilities.renderEmail(this.PasswordResetEmail, {
+            user: data.user,
+            confirmPasswordResetLink: `${data.emailData?.confirmPasswordResetUrl ?? this.confirmPasswordResetUrl}/${resetToken.value}`
+        });
+        await this.emailService.queue({
+            recipients: [data.user.email],
+            subject: 'Password Reset',
+            html,
+            priority: email_priority_enum_1.EmailPriority.HIGH,
+            ...data.emailData
+        });
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async confirmPasswordReset(data) {
+        const resetToken = await this.passwordResetTokenRepository.findOne({
+            where: { value: data.resetToken },
+            transaction: data.transaction
+        }, false);
+        if (!resetToken) {
+            throw new unauthorized_error_1.UnauthorizedError('Link invalid');
+        }
+        if (new Date(resetToken.expirationDate).getTime() <= Date.now()) {
+            await this.passwordResetTokenRepository.deleteById(resetToken.id, { transaction: data.transaction });
+            throw new unauthorized_error_1.UnauthorizedError('Link expired');
+        }
+        const user = await this.userService.findById(resetToken.userId);
+        const credentials = await this.userService.resolveCredentialsFor(user);
+        await this.credentialsRepository.updateById(credentials.id, { password: data.newPassword }, { transaction: data.transaction });
+        await this.passwordResetTokenRepository.deleteById(resetToken.id, { transaction: data.transaction });
+        await this.sessionRepository.deleteAll({ userId: resetToken.userId }, { transaction: data.transaction });
+        // TODO: set require password change to false
+    }
+    async activePasswordResetTokenAlreadyExists(user, transaction) {
+        const existingToken = await this.passwordResetTokenRepository.findOne({ where: { userId: user.id }, transaction }, false);
+        if (existingToken) {
+            if (new Date(existingToken.expirationDate).getTime() > Date.now()) {
+                return true;
+            }
+            await this.passwordResetTokenRepository.deleteById(existingToken.id, { transaction });
+        }
+        return false;
+    }
+    async resolveSession(context, transaction) {
+        if (!(context instanceof http_request_context_1.HttpRequestContext)) {
+            return undefined;
+        }
+        // eslint-disable-next-line typescript/no-unsafe-assignment
+        const currentSessionId = context.request.signedCookies?.[this.sessionOptions.name];
+        if (!currentSessionId) {
+            return undefined;
+        }
+        return await this.sessionRepository.findOne({ where: { id: currentSessionId }, transaction }, false);
+    }
+    async resolveAndValidateSession(context, transaction) {
+        const refreshSession = await this.resolveRefreshSession(context, transaction);
+        if (!refreshSession) {
+            this.clearCookies();
+            return undefined;
+        }
+        if (new Date(refreshSession.expirationDate).getTime() <= Date.now() || refreshSession.blacklisted) {
+            await this.logout({ clearCookies: true, refreshSessionId: refreshSession.id, transaction });
+            return undefined;
+        }
+        if (!this.isCsrfTokenValid(refreshSession, context)) {
+            return undefined;
+        }
+        const session = await this.resolveSession(context, transaction);
+        if (!session) {
+            return undefined;
+        }
+        if (new Date(session.expirationDate).getTime() <= Date.now()) {
+            return await this.rotateSessions(refreshSession, transaction);
+        }
+        if (session.familyId !== refreshSession.familyId || session.userId !== refreshSession.userId) {
+            return undefined;
+        }
+        return session;
+    }
+    isCsrfTokenValid(refreshSession, context) {
+        if (!(context instanceof http_request_context_1.HttpRequestContext)) {
+            return false;
+        }
+        if ([http_method_enum_1.HttpMethod.GET, http_method_enum_1.HttpMethod.HEAD, http_method_enum_1.HttpMethod.OPTIONS].includes(context.request.method)) {
+            // don't validate safe methods
+            return true;
+        }
+        const csrfToken = this.resolveCsrfTokenFromHeader(context);
+        return csrfToken === refreshSession.csrfToken;
+    }
+    async resolveRefreshSession(context, transaction) {
+        if (!(context instanceof http_request_context_1.HttpRequestContext)) {
+            return undefined;
+        }
+        // eslint-disable-next-line typescript/no-unsafe-assignment
+        const currentRefreshSessionId = context.request.signedCookies?.[this.refreshSessionOptions.name];
+        if (!currentRefreshSessionId) {
+            return undefined;
+        }
+        return await this.refreshSessionRepository.findOne({ where: { id: currentRefreshSessionId }, transaction }, false);
+    }
+    async createSession(refreshSession, transaction) {
+        const sessionCreateData = {
+            userId: refreshSession.userId,
+            familyId: refreshSession.familyId,
+            expirationDate: new Date(Date.now() + this.sessionExpiresInMs + (ms_1.Ms.MINUTE * 5))
+        };
+        return await this.sessionRepository.create(sessionCreateData, { transaction });
+    }
+    async createRefreshSession(userId, familyId, transaction, csrfToken) {
+        return await this.refreshSessionRepository.create({
+            userId,
+            blacklisted: false,
+            familyId,
+            expirationDate: new Date(Date.now() + this.refreshSessionExpiresInMs + (ms_1.Ms.MINUTE * 5)),
+            csrfToken
+        }, { transaction });
+    }
+    resolveCsrfTokenFromHeader(context) {
+        if (!(context instanceof http_request_context_1.HttpRequestContext)) {
+            return undefined;
+        }
+        return context.request.headers[this.csrfTokenHeader];
+    }
+    clearCookies() {
+        const context = (0, inject_function_1.inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.CURRENT_REQUEST_CONTEXT);
+        if (!(context instanceof http_request_context_1.HttpRequestContext)) {
+            return;
+        }
+        context.response.clearCookie(this.sessionOptions.name, this.sessionOptions);
+        context.response.clearCookie(this.refreshSessionOptions.name, this.refreshSessionOptions);
+    }
+    setSessionCookie(session) {
+        const context = (0, inject_function_1.inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.CURRENT_REQUEST_CONTEXT);
+        if (!(context instanceof http_request_context_1.HttpRequestContext)) {
+            return;
+        }
+        const secure = context.request.secure || context.request.headers[known_header_enum_1.KnownHeader.X_FORWARDED_PROTO] === 'https';
+        context.response.cookie(this.sessionOptions.name, session.id, { ...this.sessionOptions, secure });
+    }
+    setRefreshSessionCookie(session) {
+        const context = (0, inject_function_1.inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.CURRENT_REQUEST_CONTEXT);
+        if (!(context instanceof http_request_context_1.HttpRequestContext)) {
+            return;
+        }
+        const secure = context.request.secure || context.request.headers[known_header_enum_1.KnownHeader.X_FORWARDED_PROTO] === 'https';
+        context.response.cookie(this.refreshSessionOptions.name, session.id, { ...this.refreshSessionOptions, secure });
+    }
+};
+exports.CookieAuthStrategy = CookieAuthStrategy;
+exports.CookieAuthStrategy = CookieAuthStrategy = __decorate([
+    __param(0, (0, inject_repository_decorator_1.InjectRepository)(cookie_auth_session_model_1.CookieAuthSession)),
+    __param(1, (0, inject_repository_decorator_1.InjectRepository)(cookie_auth_refresh_session_model_1.CookieAuthRefreshSession)),
+    __param(2, (0, inject_decorator_1.Inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.USER_SERVICE)),
+    __param(3, (0, inject_decorator_1.Inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.CSRF_TOKEN_HEADER)),
+    __param(4, (0, inject_decorator_1.Inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.COOKIE_AUTH_SESSION_OPTIONS)),
+    __param(5, (0, inject_decorator_1.Inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.COOKIE_AUTH_REFRESH_SESSION_OPTIONS)),
+    __param(6, (0, inject_decorator_1.Inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.COOKIE_AUTH_SESSION_EXPIRES_IN_MS)),
+    __param(7, (0, inject_decorator_1.Inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.COOKIE_AUTH_REFRESH_SESSION_EXPIRES_IN_MS)),
+    __param(8, (0, inject_decorator_1.Inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.PASSWORD_RESET_TOKEN_EXPIRES_IN_MS)),
+    __param(9, (0, inject_repository_decorator_1.InjectRepository)(password_reset_token_model_1.PasswordResetToken)),
+    __param(10, (0, inject_repository_decorator_1.InjectRepository)(cookie_auth_credentials_model_1.CookieAuthCredentials)),
+    __param(11, (0, inject_decorator_1.Inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.EMAIL_SERVICE)),
+    __param(12, (0, inject_decorator_1.Inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.HASH_SERVICE)),
+    __param(13, (0, inject_decorator_1.Inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.COOKIE_SIGN_SECRET)),
+    __metadata("design:paramtypes", [repository_1.Repository,
+        repository_1.Repository, Object, String, Object, Object, Number, Number, Number, repository_1.Repository,
+        repository_1.Repository, Object, Object, Object])
+], CookieAuthStrategy);
+//# sourceMappingURL=cookie-auth.auth-strategy.js.map

package/dist/cjs/auth/strategies/cookie/cookie-auth.auth-strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth.auth-strategy.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth.auth-strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6CAA0C;AAI1C,2FAAmH;AAEnH,iGAAyF;AACzF,2EAA6F;AAE7F,wFAAmF;AAGnF,gEAA6D;AAE7D,oGAA0G;AAC1G,8EAAiE;AACjE,yFAA8E;AAC9E,4EAAuE;AACvE,iEAAqD;AAErD,mFAA0E;AAE1E,oGAA8F;AAC9F,0FAAsF;AACtF,qEAA4D;AAC5D,uEAA8D;AAE9D,uEAAmE;AAGnE,8CAA2C;AAC3C,sEAAkE;AAKlE,mFAAmG;AAInG,wFAA2G;AAc3G;;GAEG;AACH,IAAa,kBAAkB,GAA/B,MAAa,kBAAkB;IAyBN;IAEA;IAEA;IAEA;IAMA;IAEA;IAEA;IAEA;IAEA;IAEA;IAEA;IApCrB,+CAA+C;IACtC,IAAI,GAAW,QAAQ,CAAC;IACjC,+CAA+C;IACtC,cAAc,CAA8B;IAEpC,uBAAuB,CAAS;IAChC,kBAAkB,CAAiD;IACnE,cAAc,CAA2B;IACzC,qBAAqB,CAA2B;IAEjE,YAEqB,iBAA6E,EAE7E,wBAAkG,EAElG,WAAiC,EAEjC,eAAuB,EAExC,cAA+D,EAE/D,qBAAsE,EAErD,kBAA0B,EAE1B,yBAAiC,EAEjC,6BAAqC,EAErC,4BAA4D,EAE5D,qBAAwD,EAExD,YAAmC,EAEnC,WAAiC,EAElD,MAA0B;QA1BT,sBAAiB,GAAjB,iBAAiB,CAA4D;QAE7E,6BAAwB,GAAxB,wBAAwB,CAA0E;QAElG,gBAAW,GAAX,WAAW,CAAsB;QAEjC,oBAAe,GAAf,eAAe,CAAQ;QAMvB,uBAAkB,GAAlB,kBAAkB,CAAQ;QAE1B,8BAAyB,GAAzB,yBAAyB,CAAQ;QAEjC,kCAA6B,GAA7B,6BAA6B,CAAQ;QAErC,iCAA4B,GAA5B,4BAA4B,CAAgC;QAE5D,0BAAqB,GAArB,qBAAqB,CAAmC;QAExD,iBAAY,GAAZ,YAAY,CAAuB;QAEnC,gBAAW,GAAX,WAAW,CAAsB;QAIlD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,mCAAe,CAAC,yCAAe,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,uBAAuB,GAAuB,IAAA,wBAAM,EAAC,yCAAe,CAAC,0BAA0B,CAAC,CAAC;QACvG,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC3B,MAAM,IAAI,mCAAe,CAAC,yCAAe,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,kBAAkB,GAA+D,IAAA,wBAAM,EACzF,yCAAe,CAAC,6BAA6B,CAChD,CAAC;QACF,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACtB,MAAM,IAAI,mCAAe,CAAC,yCAAe,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;QACvD,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAE7C,IAAI,CAAC,cAAc,GAAG;YAClB,MAAM,EAAE,IAAI,CAAC,kBAAkB;YAC/B,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,KAAK;YACf,GAAG,cAAc;SACpB,CAAC;QACF,IAAI,CAAC,qBAAqB,GAAG;YACzB,MAAM,EAAE,IAAI,CAAC,yBAAyB;YACtC,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,KAAK;YACf,GAAG,qBAAqB;SAC3B,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG;YAClB,IAAI,EAAE,QAAQ;YACd,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI;SACjC,CAAC;IACN,CAAC;IAED,+CAA+C;IAC/C,IAAI,CAAC,GAAqB;QACtB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,sEAA+B,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,sEAA+B,CAAC,CAAC;QAC/D,CAAC;IACL,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,WAAW,CAAC,OAAqD;QACnE,MAAM,OAAO,GAAkC,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACxG,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAqB,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,KAAK,CAAC,WAAsC;QAC9C,IAAI,CAAC;YACD,MAAM,SAAS,GAAa,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAClF,MAAM,gBAAgB,GAA0B,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;YACxG,MAAM,eAAe,GAAY,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC/G,IAAI,CAAC,eAAe,EAAE,CAAC;gBACnB,MAAM,IAAI,sCAAiB,CAAC,4BAA4B,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,cAAc,GAA6B,MAAM,IAAI,CAAC,oBAAoB,CAC5E,SAAS,CAAC,EAAE,EACZ,8BAAa,CAAC,QAAQ,EAAE,EACxB,WAAW,CAAC,WAAW,EACvB,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CACxC,CAAC;YACF,MAAM,OAAO,GAAsB,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;YACrG,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC;YAC7C,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAE/B,OAAO;gBACH,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,qBAAqB,EAAE,OAAO,CAAC,cAAc;gBAC7C,4BAA4B,EAAE,cAAc,CAAC,cAAc;aAC9D,CAAC;QACN,CAAC;QACD,MAAM,CAAC;YACH,MAAM,IAAI,sCAAiB,CAAC,4BAA4B,CAAC,CAAC;QAC9D,CAAC;IACL,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,MAAM,CAAC,IAA0B;QACnC,IAAI,CAAC;YACD,MAAM,cAAc,GAAyC,MAAM,IAAI,CAAC,wBAAwB,CAAC,OAAO,CACpG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EACvE,KAAK,CACR,CAAC;YACF,MAAM,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,gBAAgB,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAChH,IAAI,cAAc,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;gBACjH,MAAM,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAC5H,CAAC;YAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpB,IAAI,CAAC,YAAY,EAAE,CAAC;YACxB,CAAC;QACL,CAAC;QACD,MAAM,CAAC;YACH,SAAS;QACb,CAAC;IACL,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,YAAY,CAAC,IAAgC;QAC/C,MAAM,OAAO,GAA6D,IAAA,wBAAM,EAAC,yCAAe,CAAC,uBAAuB,CAAC,CAAC;QAC1H,IAAI,CAAC,CAAC,OAAO,YAAY,yCAAkB,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,sCAAiB,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,qBAAqB,GAAyC,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAChI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,IAAI,sCAAiB,CAAC,0BAA0B,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,qBAAqB,CAAC,WAAW,EAAE,CAAC;YAC9G,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,qBAAqB,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACrH,MAAM,IAAI,sCAAiB,CAAC,0BAA0B,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,OAAO,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,sCAAiB,CAAC,qBAAqB,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,cAAc,GAAkC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3G,IAAI,cAAc,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACnF,mDAAmD;YACnD,MAAM,IAAI,GAAa,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC9E,OAAO;gBACH,MAAM,EAAE,cAAc,CAAC,MAAM;gBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,qBAAqB,CAAC,SAAS;gBAC1C,qBAAqB,EAAE,cAAc,CAAC,cAAc;gBACpD,4BAA4B,EAAE,qBAAqB,CAAC,cAAc;aACrE,CAAC;QACN,CAAC;QAED,MAAM,UAAU,GAAsB,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACzG,MAAM,IAAI,GAAa,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAE1E,OAAO;YACH,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,qBAAqB,CAAC,SAAS;YAC1C,qBAAqB,EAAE,UAAU,CAAC,cAAc;YAChD,4BAA4B,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,yBAAyB,GAAG,CAAC,OAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;SACxG,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,cAAc,CACxB,qBAA+C,EAC/C,WAAoC;QAEpC,IAAI,qBAAqB,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,qBAAqB,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,8CAA8C;QAC9C,MAAM,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAC1C,qBAAqB,CAAC,EAAE,EACxB,EAAE,WAAW,EAAE,IAAI,EAAE,EACrB,EAAE,WAAW,EAAE,CAClB,CAAC;QAEF,kDAAkD;QAClD,MAAM,UAAU,GAA6B,MAAM,IAAI,CAAC,oBAAoB,CACxE,qBAAqB,CAAC,MAAM,EAC5B,qBAAqB,CAAC,QAAQ,EAC9B,WAAW,EACX,qBAAqB,CAAC,SAAS,CAClC,CAAC;QAEF,+BAA+B;QAC/B,MAAM,UAAU,GAAsB,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAExF,kDAAkD;QAClD,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAEzC,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,UAAU,CAAC,OAAqD;QAClE,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;IACzD,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,OAAO,CACT,OAAqD,EACrD,YAAwB;QAExB,MAAM,IAAI,GAAyB,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,SAAS,CACX,OAAqD,EACrD,YAA0B,EAC1B,eAAiD,EACjD,gBAAwB;QAExB,MAAM,OAAO,GAAkC,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACxG,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,CAAC;YACD,MAAM,IAAI,GAAwD,IAAA,wBAAM,EAAC,IAAA,gDAAkB,EAAC,YAAY,CAAC,CAAC,CAAC;YAC3G,MAAM,QAAQ,GAAuB,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,gBAAgB,CAAC,CAAC;YAChF,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,yDAAyD,QAAQ,GAAG,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,WAAW,GAA+B,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAA+B,CAAC;YAC5G,MAAM,cAAc,GAAY,WAAW,CAAC,eAAe,CAAC,CAAC;YAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;gBAChC,OAAO,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACnD,CAAC;YACD,OAAO,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC;QAC7C,CAAC;QACD,MAAM,CAAC;YACH,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,oBAAoB,CAAC,IAA4D;QACnF,IAAI,MAAM,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,8CAAoB,CAAC,+DAA+D,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,cAAc,GAAiC;YACjD,KAAK,EAAE,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;YACpB,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,6BAA6B,CAAC;SAC5E,CAAC;QACF,MAAM,UAAU,GAAuB,MAAM,IAAI,CAAC,4BAA4B,CAAC,MAAM,CACjF,cAAc,EACd,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CACpC,CAAC;QAEF,MAAM,IAAI,GAAW,kCAAe,CAAC,WAAW,CAC5C,IAAI,CAAC,kBAAkB,EACvB;YACI,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,wBAAwB,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,uBAAuB,IAAI,IAAI,CAAC,uBAAuB,IAAI,UAAU,CAAC,KAAK,EAAE;SAC7H,CACJ,CAAC;QAEF,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAC1B,UAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAC7B,OAAO,EAAE,gBAAgB;YACzB,IAAI;YACJ,QAAQ,EAAE,mCAAa,CAAC,IAAI;YAC5B,GAAG,IAAI,CAAC,SAAS;SACpB,CAAC,CAAC;IACP,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,oBAAoB,CAAC,IAAwC;QAC/D,MAAM,UAAU,GAAmC,MAAM,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAC9F;YACI,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE;YACjC,WAAW,EAAE,IAAI,CAAC,WAAW;SAChC,EACD,KAAK,CACR,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,sCAAiB,CAAC,cAAc,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC9D,MAAM,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACrG,MAAM,IAAI,sCAAiB,CAAC,cAAc,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,IAAI,GAAa,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1E,MAAM,WAAW,GAA0B,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAE9F,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/H,MAAM,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACrG,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACzG,6CAA6C;IACjD,CAAC;IAEO,KAAK,CAAC,qCAAqC,CAAC,IAAwB,EAAE,WAAoC;QAC9G,MAAM,aAAa,GAAmC,MAAM,IAAI,CAAC,4BAA4B,CAAC,OAAO,CACjG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,EAC3C,KAAK,CACR,CAAC;QACF,IAAI,aAAa,EAAE,CAAC;YAChB,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAChE,OAAO,IAAI,CAAC;YAChB,CAAC;YACD,MAAM,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,cAAc,CACxB,OAAqD,EACrD,WAAoC;QAEpC,IAAI,CAAC,CAAC,OAAO,YAAY,yCAAkB,CAAC,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,2DAA2D;QAC3D,MAAM,gBAAgB,GAAuB,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACvG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;IACzG,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACnC,OAAqD,EACrD,WAAoC;QAEpC,MAAM,cAAc,GAAyC,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAEpH,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC;YAChG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,cAAc,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5F,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,MAAM,OAAO,GAAkC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/F,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3D,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,KAAK,cAAc,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;YAC3F,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,OAAO,OAAO,CAAC;IACnB,CAAC;IAEO,gBAAgB,CACpB,cAAwC,EACxC,OAAqD;QAErD,IAAI,CAAC,CAAC,OAAO,YAAY,yCAAkB,CAAC,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,CAAC,6BAAU,CAAC,GAAG,EAAE,6BAAU,CAAC,IAAI,EAAE,6BAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACzF,8BAA8B;YAC9B,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,SAAS,GAAuB,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAC/E,OAAO,SAAS,KAAK,cAAc,CAAC,SAAS,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAC/B,OAAqD,EACrD,WAAoC;QAEpC,IAAI,CAAC,CAAC,OAAO,YAAY,yCAAkB,CAAC,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,2DAA2D;QAC3D,MAAM,uBAAuB,GAAuB,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACrH,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAC9C,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,uBAAuB,EAAE,EAAE,WAAW,EAAE,EACvD,KAAK,CACR,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,aAAa,CACvB,cAAwC,EACxC,WAAoC;QAEpC,MAAM,iBAAiB,GAAgC;YACnD,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,QAAQ,EAAE,cAAc,CAAC,QAAQ;YACjC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,kBAAkB,GAAG,CAAC,OAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;SACnF,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACnF,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAC9B,MAAc,EACd,QAAgB,EAChB,WAAoC,EACpC,SAAiB;QAEjB,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC;YAC9C,MAAM;YACN,WAAW,EAAE,KAAK;YAClB,QAAQ;YACR,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,yBAAyB,GAAG,CAAC,OAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACvF,SAAS;SACZ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACxB,CAAC;IAEO,0BAA0B,CAAC,OAAqD;QACpF,IAAI,CAAC,CAAC,OAAO,YAAY,yCAAkB,CAAC,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,eAA8B,CAAC,CAAC;IACxE,CAAC;IAEO,YAAY;QAChB,MAAM,OAAO,GAA6D,IAAA,wBAAM,EAAC,yCAAe,CAAC,uBAAuB,CAAC,CAAC;QAC1H,IAAI,CAAC,CAAC,OAAO,YAAY,yCAAkB,CAAC,EAAE,CAAC;YAC3C,OAAO;QACX,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5E,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC9F,CAAC;IAEO,gBAAgB,CAAC,OAA0B;QAC/C,MAAM,OAAO,GAA6D,IAAA,wBAAM,EAAC,yCAAe,CAAC,uBAAuB,CAAC,CAAC;QAC1H,IAAI,CAAC,CAAC,OAAO,YAAY,yCAAkB,CAAC,EAAE,CAAC;YAC3C,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAAY,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,+BAAW,CAAC,iBAAiB,CAAC,KAAK,OAAO,CAAC;QACrH,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;IACtG,CAAC;IAEO,uBAAuB,CAAC,OAAiC;QAC7D,MAAM,OAAO,GAA6D,IAAA,wBAAM,EAAC,yCAAe,CAAC,uBAAuB,CAAC,CAAC;QAC1H,IAAI,CAAC,CAAC,OAAO,YAAY,yCAAkB,CAAC,EAAE,CAAC;YAC3C,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAAY,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,+BAAW,CAAC,iBAAiB,CAAC,KAAK,OAAO,CAAC;QACrH,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,qBAAqB,EAAE,MAAM,EAAE,CAAC,CAAC;IACpH,CAAC;CACJ,CAAA;AAxfY,gDAAkB;6BAAlB,kBAAkB;IAwBtB,WAAA,IAAA,8CAAgB,EAAC,6CAAiB,CAAC,CAAA;IAEnC,WAAA,IAAA,8CAAgB,EAAC,4DAAwB,CAAC,CAAA;IAE1C,WAAA,IAAA,yBAAM,EAAC,yCAAe,CAAC,YAAY,CAAC,CAAA;IAEpC,WAAA,IAAA,yBAAM,EAAC,yCAAe,CAAC,iBAAiB,CAAC,CAAA;IAEzC,WAAA,IAAA,yBAAM,EAAC,yCAAe,CAAC,2BAA2B,CAAC,CAAA;IAEnD,WAAA,IAAA,yBAAM,EAAC,yCAAe,CAAC,mCAAmC,CAAC,CAAA;IAE3D,WAAA,IAAA,yBAAM,EAAC,yCAAe,CAAC,iCAAiC,CAAC,CAAA;IAEzD,WAAA,IAAA,yBAAM,EAAC,yCAAe,CAAC,yCAAyC,CAAC,CAAA;IAEjE,WAAA,IAAA,yBAAM,EAAC,yCAAe,CAAC,kCAAkC,CAAC,CAAA;IAE1D,WAAA,IAAA,8CAAgB,EAAC,+CAAkB,CAAC,CAAA;IAEpC,YAAA,IAAA,8CAAgB,EAAC,qDAAqB,CAAC,CAAA;IAEvC,YAAA,IAAA,yBAAM,EAAC,yCAAe,CAAC,aAAa,CAAC,CAAA;IAErC,YAAA,IAAA,yBAAM,EAAC,yCAAe,CAAC,YAAY,CAAC,CAAA;IAEpC,YAAA,IAAA,yBAAM,EAAC,yCAAe,CAAC,kBAAkB,CAAC,CAAA;qCAzBP,uBAAU;QAEH,uBAAU,0DAgBN,uBAAU;QAEjB,uBAAU;GA7C7C,kBAAkB,CAwf9B"}

package/dist/cjs/auth/strategies/cookie/cookie-auth.controller.d.ts

@@ -0,0 +1,42 @@
+import { CookieAuthConfirmPasswordResetData } from './cookie-auth-confirm-password-reset-data.model';
+import { CookieAuthCredentialsDto } from './cookie-auth-credentials.model';
+import { CookieAuthData } from './cookie-auth-data.model';
+import { CookieAuthLogoutData } from './cookie-auth-logout-data.model';
+import { CookieAuthRefreshLoginData } from './cookie-auth-refresh-login-data.model';
+import { Repository } from '../../../data-source/repository';
+import { AuthControllerInterface } from '../../auth-controller.interface';
+import { type AuthServiceInterface } from '../../auth-service.interface';
+import { PasswordResetToken } from '../../models/password-reset-token.model';
+import { type UserServiceInterface } from '../../user/user-service.interface';
+declare class CookieAuthRequestPasswordResetInput {
+    email: string;
+}
+declare class CookieAuthVerifyPasswordResetTokenInput {
+    resetToken: string;
+}
+declare class CookieAuthVerifyPasswordResetTokenResponse {
+    isValid: boolean;
+}
+declare const CookieAuthConfirmPasswordResetDto_base: import("../../..").Newable<Omit<CookieAuthConfirmPasswordResetData, "transaction">>;
+declare class CookieAuthConfirmPasswordResetDto extends CookieAuthConfirmPasswordResetDto_base {
+}
+declare const CookieAuthRefreshLoginDto_base: import("../../..").Newable<Omit<CookieAuthRefreshLoginData, "transaction">>;
+declare class CookieAuthRefreshLoginDto extends CookieAuthRefreshLoginDto_base {
+}
+declare const CookieAuthLogoutDto_base: import("../../..").Newable<Omit<CookieAuthLogoutData, "transaction">>;
+declare class CookieAuthLogoutDto extends CookieAuthLogoutDto_base {
+}
+export declare class CookieAuthController implements AuthControllerInterface<CookieAuthCredentialsDto, CookieAuthData<string>, CookieAuthRefreshLoginData, CookieAuthRequestPasswordResetInput, CookieAuthConfirmPasswordResetData> {
+    private readonly authService;
+    private readonly userService;
+    private readonly passwordResetTokenRepository;
+    constructor(authService: AuthServiceInterface, userService: UserServiceInterface, passwordResetTokenRepository: Repository<PasswordResetToken>);
+    login(credentials: CookieAuthCredentialsDto): Promise<CookieAuthData<string>>;
+    refreshLogin(data: CookieAuthRefreshLoginDto): Promise<CookieAuthData<string>>;
+    requestPasswordReset(data: CookieAuthRequestPasswordResetInput): Promise<void>;
+    verifyResetToken(input: CookieAuthVerifyPasswordResetTokenInput): Promise<CookieAuthVerifyPasswordResetTokenResponse>;
+    confirmPasswordReset(data: CookieAuthConfirmPasswordResetDto): Promise<void>;
+    logout(data: CookieAuthLogoutDto): Promise<void>;
+}
+export {};
+//# sourceMappingURL=cookie-auth.controller.d.ts.map

package/dist/cjs/auth/strategies/cookie/cookie-auth.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth.controller.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AACrG,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AAGpF,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAW7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,cAAM,mCAAmC;IAErC,KAAK,EAAG,MAAM,CAAC;CAClB;AAED,cAAM,uCAAuC;IAEzC,UAAU,EAAG,MAAM,CAAC;CACvB;AAED,cAAM,0CAA0C;IAE5C,OAAO,EAAG,OAAO,CAAC;CACrB;;AAED,cAAM,iCAAkC,SAAQ,sCAA8D;CAAG;;AAEjH,cAAM,yBAA0B,SAAQ,8BAAsD;CAAG;;AAEjG,cAAM,mBAAoB,SAAQ,wBAAgD;CAAG;AAErF,qBACa,oBAAqB,YAAW,uBAAuB,CAChE,wBAAwB,EACxB,cAAc,CAAC,MAAM,CAAC,EACtB,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,CACrC;IAGO,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,4BAA4B;gBAJ5B,WAAW,EAAE,oBAAoB,EAEjC,WAAW,EAAE,oBAAoB,EAEjC,4BAA4B,EAAE,UAAU,CAAC,kBAAkB,CAAC;IAK3E,KAAK,CAEP,WAAW,EAAE,wBAAwB,GACtC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAe5B,YAAY,CAEd,IAAI,EAAE,yBAAyB,GAChC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAe5B,oBAAoB,CAEtB,IAAI,EAAE,mCAAmC,GAC1C,OAAO,CAAC,IAAI,CAAC;IAeV,gBAAgB,CAElB,KAAK,EAAE,uCAAuC,GAC/C,OAAO,CAAC,0CAA0C,CAAC;IA6BhD,oBAAoB,CAEtB,IAAI,EAAE,iCAAiC,GACxC,OAAO,CAAC,IAAI,CAAC;IAcV,MAAM,CAER,IAAI,EAAE,mBAAmB,GAC1B,OAAO,CAAC,IAAI,CAAC;CAWnB"}