barsa d3b94b1ed3 feat(auth): implement permission-based access control and centralized error handling
- Introduced PermissionsGuard to enforce permission checks on routes.
- Added RequirePermissions decorator for specifying required permissions on handlers.
- Created AUTH_ERRORS constants for consistent error messages across the auth module.
- Updated CsrfService to reduce CSRF token expiry time for enhanced security.
- Refactored auth cookie handling into utility functions for better maintainability.
- Enhanced TokenBlacklistService to default to fail-closed in production environments.
- Updated various DTOs and schemas for consistency and clarity.
- Removed legacy code and types related to SIM requests.
- Improved logging and error handling in GlobalAuthGuard.
- Added middleware for public path checks and optimistic authentication.
2026-01-19 10:40:50 +09:00

24 lines
686 B
TypeScript

/**
* Checkout Domain - Contract
*
* Business constants and helpers for the checkout flow.
*/
// Re-export ORDER_TYPE from orders domain for convenience
export { ORDER_TYPE, type OrderTypeValue } from "../orders/contract.js";
/**
* Checkout-specific order types (subset of ORDER_TYPE, excludes "Other")
* These are the types that can be ordered through checkout.
*/
export const CHECKOUT_ORDER_TYPE = {
INTERNET: "Internet",
SIM: "SIM",
VPN: "VPN",
} as const;
export type CheckoutOrderTypeValue = (typeof CHECKOUT_ORDER_TYPE)[keyof typeof CHECKOUT_ORDER_TYPE];
// Re-export types from schema
export type { OrderType, PriceBreakdownItem, CartItem } from "./schema.js";