barsa d3b94b1ed3 feat(auth): implement permission-based access control and centralized error handling
- Introduced PermissionsGuard to enforce permission checks on routes.
- Added RequirePermissions decorator for specifying required permissions on handlers.
- Created AUTH_ERRORS constants for consistent error messages across the auth module.
- Updated CsrfService to reduce CSRF token expiry time for enhanced security.
- Refactored auth cookie handling into utility functions for better maintainability.
- Enhanced TokenBlacklistService to default to fail-closed in production environments.
- Updated various DTOs and schemas for consistency and clarity.
- Removed legacy code and types related to SIM requests.
- Improved logging and error handling in GlobalAuthGuard.
- Added middleware for public path checks and optimistic authentication.
2026-01-19 10:40:50 +09:00

24 lines
440 B
TypeScript

/**
* Checkout Domain
*
* Types and schemas for unified checkout flow.
*/
// Contracts (constants, helpers)
export {
ORDER_TYPE,
CHECKOUT_ORDER_TYPE,
type OrderTypeValue,
type CheckoutOrderTypeValue,
} from "./contract.js";
// Schemas and schema-derived types
export {
checkoutOrderTypeSchema,
priceBreakdownItemSchema,
cartItemSchema,
type OrderType,
type PriceBreakdownItem,
type CartItem,
} from "./schema.js";