"use strict";
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
    return c > 3 && r && Object.defineProperty(target, key, r), r;
};
var __metadata = (this && this.__metadata) || function (k, v) {
    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
};
var __importDefault = (this && this.__importDefault) || function (mod) {
    return (mod && mod.__esModule) ? mod : { "default": mod };
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.AppleAuthProvider = void 0;
const apple_auth_1 = __importDefault(require("apple-auth"));
const common_1 = require("@nestjs/common");
const typeorm_1 = require("typeorm");
const base_auth_provider_1 = require("./base-auth.provider");
const auth_constants_1 = require("../../auth.constants");
const user_entity_1 = require("../../user/entities/user.entity");
const identity_entity_1 = require("../../user/entities/identity.entity");
const jwt_service_1 = require("../services/jwt.service");
let AppleAuthProvider = class AppleAuthProvider extends base_auth_provider_1.BaseAuthProvider {
    dataSource;
    jwtService;
    providerName = auth_constants_1.APPLE_AUTH_PROVIDER;
    skipMfa = true;
    appleConfig;
    appleAuth;
    constructor(dataSource, jwtService) {
        const userRepository = dataSource.getRepository(user_entity_1.NestAuthUser);
        const authIdentityRepository = dataSource.getRepository(identity_entity_1.NestAuthIdentity);
        super(userRepository, authIdentityRepository);
        this.dataSource = dataSource;
        this.jwtService = jwtService;
        this.appleConfig = this.options.apple;
        this.enabled = Boolean(this.options.apple);
        if (this.enabled) {
            this.appleAuth = new apple_auth_1.default({
                scope: 'email name',
                redirect_uri: this.appleConfig.redirectUri,
                team_id: this.appleConfig.teamId,
                key_id: this.appleConfig.keyId,
                client_id: this.appleConfig.clientId,
            }, this.appleConfig.privateKey, this.appleConfig.privateKeyMethod || 'text');
        }
    }
    async validate(credentials) {
        try {
            const response = await this.appleAuth.accessToken(credentials.token);
            const user = this.jwtService.decodeToken(response.id_token);
            return {
                userId: user.id,
                email: user.email || '',
                metadata: user,
            };
        }
        catch (error) {
            throw new common_1.UnauthorizedException('Invalid Apple token');
        }
    }
    getRequiredFields() {
        return ['token'];
    }
};
exports.AppleAuthProvider = AppleAuthProvider;
exports.AppleAuthProvider = AppleAuthProvider = __decorate([
    (0, common_1.Injectable)(),
    __metadata("design:paramtypes", [typeorm_1.DataSource,
        jwt_service_1.JwtService])
], AppleAuthProvider);
//# sourceMappingURL=apple-auth.provider.js.map