@ackplus/nest-auth-contracts 1.1.68 → 1.1.69-beta.2

package/dist/index.cjs

@@ -20,7 +20,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   NestAuthMFAMethodEnum: () => NestAuthMFAMethodEnum,
-  NestAuthOTPTypeEnum: () => NestAuthOTPTypeEnum
+  NestAuthOTPTypeEnum: () => NestAuthOTPTypeEnum,
+  TenantModeEnum: () => TenantModeEnum
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -37,9 +38,17 @@ var NestAuthMFAMethodEnum = /* @__PURE__ */ ((NestAuthMFAMethodEnum2) => {
   NestAuthMFAMethodEnum2["TOTP"] = "totp";
   return NestAuthMFAMethodEnum2;
 })(NestAuthMFAMethodEnum || {});
+
+// src/config.ts
+var TenantModeEnum = /* @__PURE__ */ ((TenantModeEnum2) => {
+  TenantModeEnum2["ISOLATED"] = "isolated";
+  TenantModeEnum2["SHARED"] = "shared";
+  return TenantModeEnum2;
+})(TenantModeEnum || {});
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   NestAuthMFAMethodEnum,
-  NestAuthOTPTypeEnum
+  NestAuthOTPTypeEnum,
+  TenantModeEnum
 });
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/auth.ts"],"sourcesContent":["/**\n * @libs/auth-s - Shared authentication s\n */\n\n// Auth s (from auth.ts)\nexport {\n    NestAuthMFAMethodEnum,\n    NestAuthOTPTypeEnum,\n    IEmailCredentials,\n    IPhoneCredentials,\n    ISocialCredentials,\n    ILoginCredentials,\n    ILoginRequest,\n    ISignupRequest,\n    IRefreshRequest,\n    ITokenPair,\n    IAuthResponse,\n    IAuthUser,\n    IAuthSession,\n    IMessageResponse,\n    IAuthCookieResponse,\n    IAuthSuccessResponse,\n    IUserResponse,\n    ITokensResponse,\n    // Entities\n    INestAuthIdentity,\n    INestAuthSession,\n    INestAuthAccessKey,\n    INestAuthOTP,\n} from './auth';\n\n// MFA (from mfa.ts)\nexport {\n    IVerify2faRequest,\n    IVerify2faResponse,\n    ISendMfaCodeRequest,\n    IToggleMfaRequest,\n    IVerifyTotpSetupRequest,\n    IMfaDevice,\n    IMfaStatusResponse,\n    IMfaCodeResponse,\n    ITotpSetupResponse,\n    // Entities\n    INestAuthMFASecret,\n    INestAuthTrustedDevice,\n} from './mfa';\n\n// Password\nexport {\n    IForgotPasswordRequest,\n    IResetPasswordWithTokenRequest,\n    IChangePasswordRequest,\n    IVerifyForgotPasswordOtpRequest,\n    IVerifyOtpResponse,\n} from './password';\n\n// Verification\nexport {\n    IVerifyEmailRequest,\n    IResendVerificationRequest,\n    ISendEmailVerificationRequest,\n    ISessionVerifyResponse,\n} from './verification';\n\n// Admin\nexport {\n    IInitializeAdminRequest,\n    IInitializeAdminResponse,\n    IAdminUser,\n} from './admin';\n\n// Config\nexport {\n    IEmailAuthConfig,\n    IPhoneAuthConfig,\n    IProfileFieldOption,\n    IProfileField,\n    IRegistrationConfig,\n    IMfaConfig,\n    ITenantOption,\n    ITenantsConfig,\n    ISsoProviderConfig,\n    ISsoConfig,\n    IUiConfig\n} from './config';\n\n// User & Role (from user.ts)\nexport {\n    INestAuthUser,\n    INestAuthRole,\n    INestAuthPermission,\n} from './user';\n\n// Tenant (from tenant.ts)\nexport {\n    INestAuthTenant,\n} from './tenant';\n\n","/**\n       * Auth Types\n * Contains: Login/Signup/Token types + Auth Entities (Session, Identity, AccessKey, OTP)\n */\n\n// OTP Type Enum\nexport enum NestAuthOTPTypeEnum {\n    PASSWORD_RESET = 'password_reset',\n    VERIFICATION = 'verification',\n    MFA = 'mfa',\n}\n\n// MFA Method Enum (Needed for AuthResponse and others)\nexport enum NestAuthMFAMethodEnum {\n    EMAIL = 'email',\n    SMS = 'sms',\n    TOTP  = 'totp',\n}\n\n// --- Entity Interfaces ---\n\nexport interface INestAuthIdentity {\n    id: string;\n    provider: string;\n    providerId: string;\n    metadata?: Record<string, any>;\n    userId: string;\n    createdAt: Date;\n    updatedAt: Date;\n}\n\nexport interface INestAuthSession {\n    id: string;\n    userId: string;\n    data?: any;\n    refreshToken?: string;\n    expiresAt?: Date;\n    userAgent?: string;\n    deviceName?: string;\n    ipAddress?: string;\n    lastActive?: Date;\n    createdAt?: Date;\n    updatedAt?: Date;\n}\n\nexport interface INestAuthAccessKey {\n    id: string;\n    name: string;\n    publicKey: string;\n    privateKey: string;\n    description?: string;\n    isActive: boolean;\n    expiresAt?: Date;\n    lastUsedAt?: Date;\n    userId: string;\n    createdAt: Date;\n    updatedAt: Date;\n}\n\nexport interface INestAuthOTP {\n    id: string;\n    userId: string;\n    code: string;\n    type: NestAuthOTPTypeEnum;\n    expiresAt: Date;\n    used: boolean;\n    createdAt: Date;\n    updatedAt: Date;\n}\n\n// --- Request/Response Interfaces ---\n\nexport interface IEmailCredentials {\n    email: string;\n    password: string;\n}\n\nexport interface IPhoneCredentials {\n    phone: string;\n    password: string;\n}\n\nexport interface ISocialCredentials {\n    token: string;\n}\n\nexport type ILoginCredentials = IEmailCredentials | IPhoneCredentials | ISocialCredentials | Record<string, any>;\n\nexport interface ILoginRequest {\n    providerName?: 'email' | 'phone' | 'google' | 'facebook' | 'apple' | 'github' | string;\n    credentials: ILoginCredentials;\n    tenantId?: string;\n    createUserIfNotExists?: boolean;\n}\n\nexport interface ISignupRequest {\n    email?: string;\n    phone?: string;\n    password: string;\n    tenantId?: string;\n    [key: string]: any;\n}\n\nexport interface IRefreshRequest {\n    refreshToken?: string;\n}\n\nexport interface ITokenPair {\n    accessToken: string;\n    refreshToken: string;\n}\n\nexport interface IAuthUser {\n    id: string;\n    email?: string;\n    phone?: string;\n    isVerified?: boolean;\n    isMfaEnabled?: boolean;\n    roles?: string[];\n    permissions?: string[];\n    metadata?: Record<string, any>;\n    tenantId?: string;\n}\n\nexport interface IAuthResponse extends ITokenPair {\n    message?: string;\n    isRequiresMfa?: boolean;\n    mfaMethods?: NestAuthMFAMethodEnum[];\n    defaultMfaMethod?: NestAuthMFAMethodEnum;\n    user?: IAuthUser;\n}\n\nexport interface IAuthSession {\n    id: string;\n    userId: string;\n    expiresAt: string;\n    createdAt: string;\n}\n\nexport interface IMessageResponse {\n    message: string;\n}\n\nexport interface IAuthCookieResponse {\n    message: string;\n    isRequiresMfa?: boolean;\n}\n\nexport interface IAuthSuccessResponse {\n    message: string;\n    isRequiresMfa?: boolean;\n}\n\nexport interface IUserResponse {\n    id: string;\n    email?: string;\n    phone?: string;\n    isVerified?: boolean;\n    isMfaEnabled?: boolean;\n    roles?: string[];\n    permissions?: string[];\n    metadata?: Record<string, any>;\n    tenantId?: string;\n}\n\nexport interface ITokensResponse {\n    accessToken: string;\n    refreshToken: string;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACMO,IAAK,sBAAL,kBAAKA,yBAAL;AACH,EAAAA,qBAAA,oBAAiB;AACjB,EAAAA,qBAAA,kBAAe;AACf,EAAAA,qBAAA,SAAM;AAHE,SAAAA;AAAA,GAAA;AAOL,IAAK,wBAAL,kBAAKC,2BAAL;AACH,EAAAA,uBAAA,WAAQ;AACR,EAAAA,uBAAA,SAAM;AACN,EAAAA,uBAAA,UAAQ;AAHA,SAAAA;AAAA,GAAA;","names":["NestAuthOTPTypeEnum","NestAuthMFAMethodEnum"]}
+{"version":3,"sources":["../src/index.ts","../src/auth.ts","../src/config.ts"],"sourcesContent":["/**\n * @libs/auth-s - Shared authentication s\n */\n\n// Auth s (from auth.ts)\nexport {\n    NestAuthMFAMethodEnum,\n    NestAuthOTPTypeEnum,\n    IEmailCredentials,\n    IPhoneCredentials,\n    ISocialCredentials,\n    ILoginCredentials,\n    ILoginRequest,\n    ISignupRequest,\n    IRefreshRequest,\n    ISwitchTenantRequest,\n    ITokenPair,\n    IAuthResponse,\n    IAuthUser,\n    IAuthSession,\n    IMessageResponse,\n    IAuthCookieResponse,\n    IAuthSuccessResponse,\n    IUserResponse,\n    ITokensResponse,\n    // Entities\n    INestAuthIdentity,\n    INestAuthSession,\n    INestAuthAccessKey,\n    INestAuthOTP,\n} from './auth';\n\n// MFA (from mfa.ts)\nexport {\n    IVerify2faRequest,\n    IVerify2faResponse,\n    ISendMfaCodeRequest,\n    IToggleMfaRequest,\n    IVerifyTotpSetupRequest,\n    IMfaDevice,\n    IMfaStatusResponse,\n    IMfaCodeResponse,\n    ITotpSetupResponse,\n    // Entities\n    INestAuthMFASecret,\n    INestAuthTrustedDevice,\n} from './mfa';\n\n// Password\nexport {\n    IForgotPasswordRequest,\n    IResetPasswordWithTokenRequest,\n    IChangePasswordRequest,\n    IVerifyForgotPasswordOtpRequest,\n    IVerifyOtpResponse,\n} from './password';\n\n// Verification\nexport {\n    IVerifyEmailRequest,\n    IResendVerificationRequest,\n    ISendEmailVerificationRequest,\n    ISessionVerifyResponse,\n} from './verification';\n\n// Admin\nexport {\n    IInitializeAdminRequest,\n    IInitializeAdminResponse,\n    IAdminUser,\n} from './admin';\n\n// Config\nexport {\n    IEmailAuthConfig,\n    IPhoneAuthConfig,\n    IProfileFieldOption,\n    IProfileField,\n    IRegistrationConfig,\n    IMfaConfig,\n    ITenantOption,\n    ITenantsConfig,\n    ISsoProviderConfig,\n    ISsoConfig,\n    IUiConfig,\n    TenantModeEnum,\n    INestAuthTenantOptions,\n} from './config';\n\n// User & Role (from user.ts)\nexport {\n    INestAuthUser,\n    INestAuthRole,\n    INestAuthPermission,\n} from './user';\n\n// Tenant (from tenant.ts)\nexport {\n    INestAuthTenant,\n    INestAuthUserAccess,\n} from './tenant';\n","/**\n       * Auth Types\n * Contains: Login/Signup/Token types + Auth Entities (Session, Identity, AccessKey, OTP)\n */\n\nimport type { INestAuthTenant, INestAuthUserAccess } from './tenant';\n\n// OTP Type Enum\nexport enum NestAuthOTPTypeEnum {\n    PASSWORD_RESET = 'password_reset',\n    VERIFICATION = 'verification',\n    MFA = 'mfa',\n}\n\n// MFA Method Enum (Needed for AuthResponse and others)\nexport enum NestAuthMFAMethodEnum {\n    EMAIL = 'email',\n    SMS = 'sms',\n    TOTP  = 'totp',\n}\n\n// --- Entity Interfaces ---\n\nexport interface INestAuthIdentity {\n    id: string;\n    provider: string;\n    providerId: string;\n    metadata?: Record<string, any>;\n    userId: string;\n    createdAt: Date;\n    updatedAt: Date;\n}\n\nexport interface INestAuthSession {\n    id: string;\n    userId: string;\n    data?: any;\n    refreshToken?: string;\n    expiresAt?: Date;\n    userAgent?: string;\n    deviceName?: string;\n    ipAddress?: string;\n    lastActive?: Date;\n    createdAt?: Date;\n    updatedAt?: Date;\n}\n\nexport interface INestAuthAccessKey {\n    id: string;\n    name: string;\n    publicKey: string;\n    privateKey: string;\n    description?: string;\n    isActive: boolean;\n    expiresAt?: Date;\n    lastUsedAt?: Date;\n    userId: string;\n    createdAt: Date;\n    updatedAt: Date;\n}\n\nexport interface INestAuthOTP {\n    id: string;\n    userId: string;\n    code: string;\n    type: NestAuthOTPTypeEnum;\n    expiresAt: Date;\n    used: boolean;\n    createdAt: Date;\n    updatedAt: Date;\n}\n\n// --- Request/Response Interfaces ---\n\nexport interface IEmailCredentials {\n    email: string;\n    password: string;\n}\n\nexport interface IPhoneCredentials {\n    phone: string;\n    password: string;\n}\n\nexport interface ISocialCredentials {\n    token: string;\n}\n\nexport type ILoginCredentials = IEmailCredentials | IPhoneCredentials | ISocialCredentials | Record<string, any>;\n\nexport interface ILoginRequest {\n    providerName?: 'email' | 'phone' | 'google' | 'facebook' | 'apple' | 'github' | string;\n    credentials: ILoginCredentials;\n    tenantId?: string;\n    createUserIfNotExists?: boolean;\n}\n\nexport interface ISignupRequest {\n    email?: string;\n    phone?: string;\n    password: string;\n    tenantId?: string;\n    [key: string]: any;\n}\n\nexport interface IRefreshRequest {\n    refreshToken?: string;\n}\n\nexport interface ISwitchTenantRequest {\n    tenantId: string;\n}\n\nexport interface ITokenPair {\n    accessToken: string;\n    refreshToken: string;\n}\n\nexport interface IAuthUser {\n    id: string;\n    email?: string;\n    phone?: string;\n    isVerified?: boolean;\n    isMfaEnabled?: boolean;\n    roles?: string[];\n    permissions?: string[];\n    metadata?: Record<string, any>;\n    userAccesses?: INestAuthUserAccess[];\n}\n\nexport interface IAuthResponse extends ITokenPair {\n    message?: string;\n    isRequiresMfa?: boolean;\n    mfaMethods?: NestAuthMFAMethodEnum[];\n    defaultMfaMethod?: NestAuthMFAMethodEnum;\n    user?: IAuthUser;\n}\n\nexport interface IAuthSession {\n    id: string;\n    userId: string;\n    expiresAt: string;\n    createdAt: string;\n}\n\nexport interface IMessageResponse {\n    message: string;\n}\n\nexport interface IAuthCookieResponse {\n    message: string;\n    isRequiresMfa?: boolean;\n}\n\nexport interface IAuthSuccessResponse {\n    message: string;\n    isRequiresMfa?: boolean;\n}\n\nexport interface IUserResponse {\n    id: string;\n    email?: string;\n    phone?: string;\n    isVerified?: boolean;\n    isMfaEnabled?: boolean;\n    roles?: string[];\n    permissions?: string[];\n    metadata?: Record<string, any>;\n    tenantId?: string;\n    tenants?: INestAuthTenant[];\n}\n\nexport interface ITokensResponse {\n    accessToken: string;\n    refreshToken: string;\n}\n","/**\n * Config Types\n * Client configuration response types\n */\n\nimport { NestAuthMFAMethodEnum } from './auth';\n\nexport interface IEmailAuthConfig {\n    enabled: boolean;\n}\n\nexport interface IPhoneAuthConfig {\n    enabled: boolean;\n}\n\nexport interface IProfileFieldOption {\n    label: string;\n    value: string;\n}\n\nexport interface IProfileField {\n    id: string;\n    label: string;\n    required?: boolean;\n    type?: 'text' | 'email' | 'phone' | 'select' | 'checkbox' | 'password';\n    placeholder?: string;\n    options?: IProfileFieldOption[];\n}\n\nexport interface IRegistrationConfig {\n    enabled: boolean;\n    requireInvitation?: boolean;\n    collectProfileFields?: IProfileField[];\n}\n\nexport interface IMfaConfig {\n    enabled: boolean;\n    methods?: NestAuthMFAMethodEnum[];\n    allowUserToggle?: boolean;\n    allowMethodSelection?: boolean;\n}\n\nexport interface ITenantOption {\n    id: string;\n    name: string;\n    slug: string;\n    isActive: boolean;\n    metadata?: Record<string, any>;\n}\n\n/**\n * Tenant support configuration.\n * - enabled: false → no tenant checks; auth works without tenant (future-safe: entities remain).\n * - enabled: true → multi-tenant is on; tenant is required; mode controls behavior:\n *   - ISOLATED: one tenant per user (user belongs to one tenant).\n *   - SHARED: user can belong to multiple tenants; active tenant from header/subdomain/JWT/custom.\n */\nexport interface INestAuthTenantOptions {\n    /** When false, tenant resolution and validation are disabled. When true, multi-tenant is enabled and tenant is required. Default: false. */\n    enabled?: boolean;\n    /** When enabled, use ISOLATED (one tenant per user) or SHARED (multiple tenants per user). Default: ISOLATED. */\n    mode?: TenantModeEnum;\n}\n\nexport enum TenantModeEnum {\n    ISOLATED = 'isolated',\n    SHARED = 'shared',\n}\n\nexport interface ITenantsConfig {\n    mode: TenantModeEnum;\n    options?: ITenantOption[];\n}\n\nexport interface ISsoProviderConfig {\n    id: string;\n    name: string;\n    logoUrl?: string;\n    authorizationUrl?: string;\n    clientId?: string;\n    hint?: string;\n}\n\nexport interface ISsoConfig {\n    enabled: boolean;\n    providers?: ISsoProviderConfig[];\n}\n\nexport interface IUiConfig {\n    brandName?: string;\n    brandColor?: string;\n    logoUrl?: string;\n    backgroundImageUrl?: string;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACQO,IAAK,sBAAL,kBAAKA,yBAAL;AACH,EAAAA,qBAAA,oBAAiB;AACjB,EAAAA,qBAAA,kBAAe;AACf,EAAAA,qBAAA,SAAM;AAHE,SAAAA;AAAA,GAAA;AAOL,IAAK,wBAAL,kBAAKC,2BAAL;AACH,EAAAA,uBAAA,WAAQ;AACR,EAAAA,uBAAA,SAAM;AACN,EAAAA,uBAAA,UAAQ;AAHA,SAAAA;AAAA,GAAA;;;ACiDL,IAAK,iBAAL,kBAAKC,oBAAL;AACH,EAAAA,gBAAA,cAAW;AACX,EAAAA,gBAAA,YAAS;AAFD,SAAAA;AAAA,GAAA;","names":["NestAuthOTPTypeEnum","NestAuthMFAMethodEnum","TenantModeEnum"]}

package/dist/index.d.cts

@@ -1,3 +1,154 @@
+interface INestAuthMFASecret {
+    id: string;
+    userId: string;
+    secret: string;
+    verified: boolean;
+    deviceName?: string;
+    lastUsedAt?: Date;
+    createdAt: Date;
+    updatedAt: Date;
+}
+interface INestAuthTrustedDevice {
+    id: string;
+    userId: string;
+    token: string;
+    userAgent?: string;
+    ipAddress?: string;
+    expiresAt: Date;
+    lastUsedAt?: Date;
+    createdAt: Date;
+}
+interface IVerify2faRequest {
+    otp: string;
+    method?: NestAuthMFAMethodEnum;
+    trustDevice?: boolean;
+}
+interface IVerify2faResponse {
+    accessToken: string;
+    refreshToken: string;
+    message?: string;
+    trustToken?: string;
+    user?: {
+        id: string;
+        email?: string;
+        phone?: string;
+        isVerified?: boolean;
+        isMfaEnabled?: boolean;
+        roles?: string[];
+        permissions?: string[];
+        metadata?: Record<string, any>;
+        tenantId?: string;
+    };
+}
+interface ISendMfaCodeRequest {
+    method: NestAuthMFAMethodEnum;
+}
+interface IToggleMfaRequest {
+    enabled: boolean;
+}
+interface IVerifyTotpSetupRequest {
+    otp: string;
+    secret: string;
+}
+interface IMfaDevice {
+    id: string;
+    deviceName: string;
+    method: NestAuthMFAMethodEnum;
+    lastUsedAt?: Date | string | null;
+    verified: boolean;
+    createdAt?: Date | string | null;
+}
+interface IMfaStatusResponse {
+    isEnabled: boolean;
+    verifiedMethods: NestAuthMFAMethodEnum[];
+    configuredMethods: NestAuthMFAMethodEnum[];
+    allowUserToggle: boolean;
+    allowMethodSelection: boolean;
+    totpDevices: IMfaDevice[];
+    hasRecoveryCode: boolean;
+    required?: boolean;
+    canToggle?: boolean;
+}
+interface IMfaCodeResponse {
+    code: string;
+    expiresAt: Date | string;
+    used: boolean;
+    warning?: string;
+}
+interface ITotpSetupResponse {
+    secret: string;
+    qrCode: string;
+    otpAuthUrl: string;
+}
+
+interface INestAuthUser {
+    id: string;
+    email?: string;
+    emailVerifiedAt?: Date;
+    phone?: string;
+    phoneVerifiedAt?: Date;
+    passwordHash?: string;
+    isVerified: boolean;
+    isActive: boolean;
+    metadata?: Record<string, any>;
+    isMfaEnabled: boolean;
+    mfaRecoveryCode?: string;
+    identities?: INestAuthIdentity[];
+    mfaSecrets?: INestAuthMFASecret[];
+    sessions?: INestAuthSession[];
+    otps?: INestAuthOTP[];
+    userAccesses?: INestAuthUserAccess[];
+    createdAt: Date;
+    updatedAt: Date;
+}
+interface INestAuthRole {
+    id: string;
+    name: string;
+    guard: string;
+    tenantId?: string;
+    isSystem: boolean;
+    isActive: boolean;
+    permissions: string[];
+    createdAt: Date;
+    updatedAt: Date;
+}
+interface INestAuthPermission {
+    id: string;
+    name: string;
+    guard: string;
+    description?: string;
+    category?: string;
+    metadata?: Record<string, any>;
+    createdAt: Date;
+    updatedAt: Date;
+}
+
+interface INestAuthTenant {
+    id: string;
+    name: string;
+    slug: string;
+    userAccesses?: INestAuthUserAccess[];
+    description?: string;
+    metadata?: Record<string, any>;
+    isActive: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+}
+interface INestAuthUserAccess {
+    id: string;
+    userId: string;
+    tenantId: string;
+    user?: INestAuthUser;
+    tenant?: INestAuthTenant;
+    roles?: INestAuthRole[];
+    isActive: boolean;
+    isDefault?: boolean;
+    status?: string;
+    metadata?: Record<string, any>;
+    createdAt: Date;
+    updatedAt: Date;
+}
+
 declare enum NestAuthOTPTypeEnum {
     PASSWORD_RESET = "password_reset",
     VERIFICATION = "verification",
@@ -81,6 +232,9 @@ interface ISignupRequest {
 interface IRefreshRequest {
     refreshToken?: string;
 }
+interface ISwitchTenantRequest {
+    tenantId: string;
+}
 interface ITokenPair {
     accessToken: string;
     refreshToken: string;
@@ -94,7 +248,7 @@ interface IAuthUser {
     roles?: string[];
     permissions?: string[];
     metadata?: Record<string, any>;
-    tenantId?: string;
+    userAccesses?: INestAuthUserAccess[];
 }
 interface IAuthResponse extends ITokenPair {
     message?: string;
@@ -130,95 +284,13 @@ interface IUserResponse {
     permissions?: string[];
     metadata?: Record<string, any>;
     tenantId?: string;
+    tenants?: INestAuthTenant[];
 }
 interface ITokensResponse {
     accessToken: string;
     refreshToken: string;
 }
 
-interface INestAuthMFASecret {
-    id: string;
-    userId: string;
-    secret: string;
-    verified: boolean;
-    deviceName?: string;
-    lastUsedAt?: Date;
-    createdAt: Date;
-    updatedAt: Date;
-}
-interface INestAuthTrustedDevice {
-    id: string;
-    userId: string;
-    token: string;
-    userAgent?: string;
-    ipAddress?: string;
-    expiresAt: Date;
-    lastUsedAt?: Date;
-    createdAt: Date;
-}
-interface IVerify2faRequest {
-    otp: string;
-    method?: NestAuthMFAMethodEnum;
-    trustDevice?: boolean;
-}
-interface IVerify2faResponse {
-    accessToken: string;
-    refreshToken: string;
-    message?: string;
-    trustToken?: string;
-    user?: {
-        id: string;
-        email?: string;
-        phone?: string;
-        isVerified?: boolean;
-        isMfaEnabled?: boolean;
-        roles?: string[];
-        permissions?: string[];
-        metadata?: Record<string, any>;
-        tenantId?: string;
-    };
-}
-interface ISendMfaCodeRequest {
-    method: NestAuthMFAMethodEnum;
-}
-interface IToggleMfaRequest {
-    enabled: boolean;
-}
-interface IVerifyTotpSetupRequest {
-    otp: string;
-    secret: string;
-}
-interface IMfaDevice {
-    id: string;
-    deviceName: string;
-    method: NestAuthMFAMethodEnum;
-    lastUsedAt?: Date | string | null;
-    verified: boolean;
-    createdAt?: Date | string | null;
-}
-interface IMfaStatusResponse {
-    isEnabled: boolean;
-    verifiedMethods: NestAuthMFAMethodEnum[];
-    configuredMethods: NestAuthMFAMethodEnum[];
-    allowUserToggle: boolean;
-    allowMethodSelection: boolean;
-    totpDevices: IMfaDevice[];
-    hasRecoveryCode: boolean;
-    required?: boolean;
-    canToggle?: boolean;
-}
-interface IMfaCodeResponse {
-    code: string;
-    expiresAt: Date | string;
-    used: boolean;
-    warning?: string;
-}
-interface ITotpSetupResponse {
-    secret: string;
-    qrCode: string;
-    otpAuthUrl: string;
-}
-
 interface IForgotPasswordRequest {
     email?: string;
     phone?: string;
@@ -317,9 +389,16 @@ interface ITenantOption {
     isActive: boolean;
     metadata?: Record<string, any>;
 }
+interface INestAuthTenantOptions {
+    enabled?: boolean;
+    mode?: TenantModeEnum;
+}
+declare enum TenantModeEnum {
+    ISOLATED = "isolated",
+    SHARED = "shared"
+}
 interface ITenantsConfig {
-    mode: 'single' | 'multi';
-    defaultTenantId: string | null;
+    mode: TenantModeEnum;
     options?: ITenantOption[];
 }
 interface ISsoProviderConfig {
@@ -341,56 +420,4 @@ interface IUiConfig {
     backgroundImageUrl?: string;
 }
 
-interface INestAuthUser {
-    id: string;
-    email?: string;
-    emailVerifiedAt?: Date;
-    phone?: string;
-    phoneVerifiedAt?: Date;
-    passwordHash?: string;
-    isVerified: boolean;
-    isActive: boolean;
-    metadata?: Record<string, any>;
-    tenantId?: string;
-    isMfaEnabled: boolean;
-    mfaRecoveryCode?: string;
-    emailTenant?: string;
-    phoneTenant?: string;
-    createdAt: Date;
-    updatedAt: Date;
-}
-interface INestAuthRole {
-    id: string;
-    name: string;
-    guard: string;
-    tenantId?: string;
-    isSystem: boolean;
-    isActive: boolean;
-    permissions: string[];
-    createdAt: Date;
-    updatedAt: Date;
-}
-interface INestAuthPermission {
-    id: string;
-    name: string;
-    guard: string;
-    description?: string;
-    category?: string;
-    metadata?: Record<string, any>;
-    createdAt: Date;
-    updatedAt: Date;
-}
-
-interface INestAuthTenant {
-    id: string;
-    name: string;
-    slug: string;
-    domain?: string;
-    description?: string;
-    metadata?: Record<string, any>;
-    isActive: boolean;
-    createdAt: Date;
-    updatedAt: Date;
-}
-
-export { type IAdminUser, type IAuthCookieResponse, type IAuthResponse, type IAuthSession, type IAuthSuccessResponse, type IAuthUser, type IChangePasswordRequest, type IEmailAuthConfig, type IEmailCredentials, type IForgotPasswordRequest, type IInitializeAdminRequest, type IInitializeAdminResponse, type ILoginCredentials, type ILoginRequest, type IMessageResponse, type IMfaCodeResponse, type IMfaConfig, type IMfaDevice, type IMfaStatusResponse, type INestAuthAccessKey, type INestAuthIdentity, type INestAuthMFASecret, type INestAuthOTP, type INestAuthPermission, type INestAuthRole, type INestAuthSession, type INestAuthTenant, type INestAuthTrustedDevice, type INestAuthUser, type IPhoneAuthConfig, type IPhoneCredentials, type IProfileField, type IProfileFieldOption, type IRefreshRequest, type IRegistrationConfig, type IResendVerificationRequest, type IResetPasswordWithTokenRequest, type ISendEmailVerificationRequest, type ISendMfaCodeRequest, type ISessionVerifyResponse, type ISignupRequest, type ISocialCredentials, type ISsoConfig, type ISsoProviderConfig, type ITenantOption, type ITenantsConfig, type IToggleMfaRequest, type ITokenPair, type ITokensResponse, type ITotpSetupResponse, type IUiConfig, type IUserResponse, type IVerify2faRequest, type IVerify2faResponse, type IVerifyEmailRequest, type IVerifyForgotPasswordOtpRequest, type IVerifyOtpResponse, type IVerifyTotpSetupRequest, NestAuthMFAMethodEnum, NestAuthOTPTypeEnum };
+export { type IAdminUser, type IAuthCookieResponse, type IAuthResponse, type IAuthSession, type IAuthSuccessResponse, type IAuthUser, type IChangePasswordRequest, type IEmailAuthConfig, type IEmailCredentials, type IForgotPasswordRequest, type IInitializeAdminRequest, type IInitializeAdminResponse, type ILoginCredentials, type ILoginRequest, type IMessageResponse, type IMfaCodeResponse, type IMfaConfig, type IMfaDevice, type IMfaStatusResponse, type INestAuthAccessKey, type INestAuthIdentity, type INestAuthMFASecret, type INestAuthOTP, type INestAuthPermission, type INestAuthRole, type INestAuthSession, type INestAuthTenant, type INestAuthTenantOptions, type INestAuthTrustedDevice, type INestAuthUser, type INestAuthUserAccess, type IPhoneAuthConfig, type IPhoneCredentials, type IProfileField, type IProfileFieldOption, type IRefreshRequest, type IRegistrationConfig, type IResendVerificationRequest, type IResetPasswordWithTokenRequest, type ISendEmailVerificationRequest, type ISendMfaCodeRequest, type ISessionVerifyResponse, type ISignupRequest, type ISocialCredentials, type ISsoConfig, type ISsoProviderConfig, type ISwitchTenantRequest, type ITenantOption, type ITenantsConfig, type IToggleMfaRequest, type ITokenPair, type ITokensResponse, type ITotpSetupResponse, type IUiConfig, type IUserResponse, type IVerify2faRequest, type IVerify2faResponse, type IVerifyEmailRequest, type IVerifyForgotPasswordOtpRequest, type IVerifyOtpResponse, type IVerifyTotpSetupRequest, NestAuthMFAMethodEnum, NestAuthOTPTypeEnum, TenantModeEnum };

package/dist/index.d.ts

@@ -1,3 +1,154 @@
+interface INestAuthMFASecret {
+    id: string;
+    userId: string;
+    secret: string;
+    verified: boolean;
+    deviceName?: string;
+    lastUsedAt?: Date;
+    createdAt: Date;
+    updatedAt: Date;
+}
+interface INestAuthTrustedDevice {
+    id: string;
+    userId: string;
+    token: string;
+    userAgent?: string;
+    ipAddress?: string;
+    expiresAt: Date;
+    lastUsedAt?: Date;
+    createdAt: Date;
+}
+interface IVerify2faRequest {
+    otp: string;
+    method?: NestAuthMFAMethodEnum;
+    trustDevice?: boolean;
+}
+interface IVerify2faResponse {
+    accessToken: string;
+    refreshToken: string;
+    message?: string;
+    trustToken?: string;
+    user?: {
+        id: string;
+        email?: string;
+        phone?: string;
+        isVerified?: boolean;
+        isMfaEnabled?: boolean;
+        roles?: string[];
+        permissions?: string[];
+        metadata?: Record<string, any>;
+        tenantId?: string;
+    };
+}
+interface ISendMfaCodeRequest {
+    method: NestAuthMFAMethodEnum;
+}
+interface IToggleMfaRequest {
+    enabled: boolean;
+}
+interface IVerifyTotpSetupRequest {
+    otp: string;
+    secret: string;
+}
+interface IMfaDevice {
+    id: string;
+    deviceName: string;
+    method: NestAuthMFAMethodEnum;
+    lastUsedAt?: Date | string | null;
+    verified: boolean;
+    createdAt?: Date | string | null;
+}
+interface IMfaStatusResponse {
+    isEnabled: boolean;
+    verifiedMethods: NestAuthMFAMethodEnum[];
+    configuredMethods: NestAuthMFAMethodEnum[];
+    allowUserToggle: boolean;
+    allowMethodSelection: boolean;
+    totpDevices: IMfaDevice[];
+    hasRecoveryCode: boolean;
+    required?: boolean;
+    canToggle?: boolean;
+}
+interface IMfaCodeResponse {
+    code: string;
+    expiresAt: Date | string;
+    used: boolean;
+    warning?: string;
+}
+interface ITotpSetupResponse {
+    secret: string;
+    qrCode: string;
+    otpAuthUrl: string;
+}
+
+interface INestAuthUser {
+    id: string;
+    email?: string;
+    emailVerifiedAt?: Date;
+    phone?: string;
+    phoneVerifiedAt?: Date;
+    passwordHash?: string;
+    isVerified: boolean;
+    isActive: boolean;
+    metadata?: Record<string, any>;
+    isMfaEnabled: boolean;
+    mfaRecoveryCode?: string;
+    identities?: INestAuthIdentity[];
+    mfaSecrets?: INestAuthMFASecret[];
+    sessions?: INestAuthSession[];
+    otps?: INestAuthOTP[];
+    userAccesses?: INestAuthUserAccess[];
+    createdAt: Date;
+    updatedAt: Date;
+}
+interface INestAuthRole {
+    id: string;
+    name: string;
+    guard: string;
+    tenantId?: string;
+    isSystem: boolean;
+    isActive: boolean;
+    permissions: string[];
+    createdAt: Date;
+    updatedAt: Date;
+}
+interface INestAuthPermission {
+    id: string;
+    name: string;
+    guard: string;
+    description?: string;
+    category?: string;
+    metadata?: Record<string, any>;
+    createdAt: Date;
+    updatedAt: Date;
+}
+
+interface INestAuthTenant {
+    id: string;
+    name: string;
+    slug: string;
+    userAccesses?: INestAuthUserAccess[];
+    description?: string;
+    metadata?: Record<string, any>;
+    isActive: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+}
+interface INestAuthUserAccess {
+    id: string;
+    userId: string;
+    tenantId: string;
+    user?: INestAuthUser;
+    tenant?: INestAuthTenant;
+    roles?: INestAuthRole[];
+    isActive: boolean;
+    isDefault?: boolean;
+    status?: string;
+    metadata?: Record<string, any>;
+    createdAt: Date;
+    updatedAt: Date;
+}
+
 declare enum NestAuthOTPTypeEnum {
     PASSWORD_RESET = "password_reset",
     VERIFICATION = "verification",
@@ -81,6 +232,9 @@ interface ISignupRequest {
 interface IRefreshRequest {
     refreshToken?: string;
 }
+interface ISwitchTenantRequest {
+    tenantId: string;
+}
 interface ITokenPair {
     accessToken: string;
     refreshToken: string;
@@ -94,7 +248,7 @@ interface IAuthUser {
     roles?: string[];
     permissions?: string[];
     metadata?: Record<string, any>;
-    tenantId?: string;
+    userAccesses?: INestAuthUserAccess[];
 }
 interface IAuthResponse extends ITokenPair {
     message?: string;
@@ -130,95 +284,13 @@ interface IUserResponse {
     permissions?: string[];
     metadata?: Record<string, any>;
     tenantId?: string;
+    tenants?: INestAuthTenant[];
 }
 interface ITokensResponse {
     accessToken: string;
     refreshToken: string;
 }
 
-interface INestAuthMFASecret {
-    id: string;
-    userId: string;
-    secret: string;
-    verified: boolean;
-    deviceName?: string;
-    lastUsedAt?: Date;
-    createdAt: Date;
-    updatedAt: Date;
-}
-interface INestAuthTrustedDevice {
-    id: string;
-    userId: string;
-    token: string;
-    userAgent?: string;
-    ipAddress?: string;
-    expiresAt: Date;
-    lastUsedAt?: Date;
-    createdAt: Date;
-}
-interface IVerify2faRequest {
-    otp: string;
-    method?: NestAuthMFAMethodEnum;
-    trustDevice?: boolean;
-}
-interface IVerify2faResponse {
-    accessToken: string;
-    refreshToken: string;
-    message?: string;
-    trustToken?: string;
-    user?: {
-        id: string;
-        email?: string;
-        phone?: string;
-        isVerified?: boolean;
-        isMfaEnabled?: boolean;
-        roles?: string[];
-        permissions?: string[];
-        metadata?: Record<string, any>;
-        tenantId?: string;
-    };
-}
-interface ISendMfaCodeRequest {
-    method: NestAuthMFAMethodEnum;
-}
-interface IToggleMfaRequest {
-    enabled: boolean;
-}
-interface IVerifyTotpSetupRequest {
-    otp: string;
-    secret: string;
-}
-interface IMfaDevice {
-    id: string;
-    deviceName: string;
-    method: NestAuthMFAMethodEnum;
-    lastUsedAt?: Date | string | null;
-    verified: boolean;
-    createdAt?: Date | string | null;
-}
-interface IMfaStatusResponse {
-    isEnabled: boolean;
-    verifiedMethods: NestAuthMFAMethodEnum[];
-    configuredMethods: NestAuthMFAMethodEnum[];
-    allowUserToggle: boolean;
-    allowMethodSelection: boolean;
-    totpDevices: IMfaDevice[];
-    hasRecoveryCode: boolean;
-    required?: boolean;
-    canToggle?: boolean;
-}
-interface IMfaCodeResponse {
-    code: string;
-    expiresAt: Date | string;
-    used: boolean;
-    warning?: string;
-}
-interface ITotpSetupResponse {
-    secret: string;
-    qrCode: string;
-    otpAuthUrl: string;
-}
-
 interface IForgotPasswordRequest {
     email?: string;
     phone?: string;
@@ -317,9 +389,16 @@ interface ITenantOption {
     isActive: boolean;
     metadata?: Record<string, any>;
 }
+interface INestAuthTenantOptions {
+    enabled?: boolean;
+    mode?: TenantModeEnum;
+}
+declare enum TenantModeEnum {
+    ISOLATED = "isolated",
+    SHARED = "shared"
+}
 interface ITenantsConfig {
-    mode: 'single' | 'multi';
-    defaultTenantId: string | null;
+    mode: TenantModeEnum;
     options?: ITenantOption[];
 }
 interface ISsoProviderConfig {
@@ -341,56 +420,4 @@ interface IUiConfig {
     backgroundImageUrl?: string;
 }
 
-interface INestAuthUser {
-    id: string;
-    email?: string;
-    emailVerifiedAt?: Date;
-    phone?: string;
-    phoneVerifiedAt?: Date;
-    passwordHash?: string;
-    isVerified: boolean;
-    isActive: boolean;
-    metadata?: Record<string, any>;
-    tenantId?: string;
-    isMfaEnabled: boolean;
-    mfaRecoveryCode?: string;
-    emailTenant?: string;
-    phoneTenant?: string;
-    createdAt: Date;
-    updatedAt: Date;
-}
-interface INestAuthRole {
-    id: string;
-    name: string;
-    guard: string;
-    tenantId?: string;
-    isSystem: boolean;
-    isActive: boolean;
-    permissions: string[];
-    createdAt: Date;
-    updatedAt: Date;
-}
-interface INestAuthPermission {
-    id: string;
-    name: string;
-    guard: string;
-    description?: string;
-    category?: string;
-    metadata?: Record<string, any>;
-    createdAt: Date;
-    updatedAt: Date;
-}
-
-interface INestAuthTenant {
-    id: string;
-    name: string;
-    slug: string;
-    domain?: string;
-    description?: string;
-    metadata?: Record<string, any>;
-    isActive: boolean;
-    createdAt: Date;
-    updatedAt: Date;
-}
-
-export { type IAdminUser, type IAuthCookieResponse, type IAuthResponse, type IAuthSession, type IAuthSuccessResponse, type IAuthUser, type IChangePasswordRequest, type IEmailAuthConfig, type IEmailCredentials, type IForgotPasswordRequest, type IInitializeAdminRequest, type IInitializeAdminResponse, type ILoginCredentials, type ILoginRequest, type IMessageResponse, type IMfaCodeResponse, type IMfaConfig, type IMfaDevice, type IMfaStatusResponse, type INestAuthAccessKey, type INestAuthIdentity, type INestAuthMFASecret, type INestAuthOTP, type INestAuthPermission, type INestAuthRole, type INestAuthSession, type INestAuthTenant, type INestAuthTrustedDevice, type INestAuthUser, type IPhoneAuthConfig, type IPhoneCredentials, type IProfileField, type IProfileFieldOption, type IRefreshRequest, type IRegistrationConfig, type IResendVerificationRequest, type IResetPasswordWithTokenRequest, type ISendEmailVerificationRequest, type ISendMfaCodeRequest, type ISessionVerifyResponse, type ISignupRequest, type ISocialCredentials, type ISsoConfig, type ISsoProviderConfig, type ITenantOption, type ITenantsConfig, type IToggleMfaRequest, type ITokenPair, type ITokensResponse, type ITotpSetupResponse, type IUiConfig, type IUserResponse, type IVerify2faRequest, type IVerify2faResponse, type IVerifyEmailRequest, type IVerifyForgotPasswordOtpRequest, type IVerifyOtpResponse, type IVerifyTotpSetupRequest, NestAuthMFAMethodEnum, NestAuthOTPTypeEnum };
+export { type IAdminUser, type IAuthCookieResponse, type IAuthResponse, type IAuthSession, type IAuthSuccessResponse, type IAuthUser, type IChangePasswordRequest, type IEmailAuthConfig, type IEmailCredentials, type IForgotPasswordRequest, type IInitializeAdminRequest, type IInitializeAdminResponse, type ILoginCredentials, type ILoginRequest, type IMessageResponse, type IMfaCodeResponse, type IMfaConfig, type IMfaDevice, type IMfaStatusResponse, type INestAuthAccessKey, type INestAuthIdentity, type INestAuthMFASecret, type INestAuthOTP, type INestAuthPermission, type INestAuthRole, type INestAuthSession, type INestAuthTenant, type INestAuthTenantOptions, type INestAuthTrustedDevice, type INestAuthUser, type INestAuthUserAccess, type IPhoneAuthConfig, type IPhoneCredentials, type IProfileField, type IProfileFieldOption, type IRefreshRequest, type IRegistrationConfig, type IResendVerificationRequest, type IResetPasswordWithTokenRequest, type ISendEmailVerificationRequest, type ISendMfaCodeRequest, type ISessionVerifyResponse, type ISignupRequest, type ISocialCredentials, type ISsoConfig, type ISsoProviderConfig, type ISwitchTenantRequest, type ITenantOption, type ITenantsConfig, type IToggleMfaRequest, type ITokenPair, type ITokensResponse, type ITotpSetupResponse, type IUiConfig, type IUserResponse, type IVerify2faRequest, type IVerify2faResponse, type IVerifyEmailRequest, type IVerifyForgotPasswordOtpRequest, type IVerifyOtpResponse, type IVerifyTotpSetupRequest, NestAuthMFAMethodEnum, NestAuthOTPTypeEnum, TenantModeEnum };

package/dist/index.js

@@ -11,8 +11,16 @@ var NestAuthMFAMethodEnum = /* @__PURE__ */ ((NestAuthMFAMethodEnum2) => {
   NestAuthMFAMethodEnum2["TOTP"] = "totp";
   return NestAuthMFAMethodEnum2;
 })(NestAuthMFAMethodEnum || {});
+
+// src/config.ts
+var TenantModeEnum = /* @__PURE__ */ ((TenantModeEnum2) => {
+  TenantModeEnum2["ISOLATED"] = "isolated";
+  TenantModeEnum2["SHARED"] = "shared";
+  return TenantModeEnum2;
+})(TenantModeEnum || {});
 export {
   NestAuthMFAMethodEnum,
-  NestAuthOTPTypeEnum
+  NestAuthOTPTypeEnum,
+  TenantModeEnum
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/auth.ts"],"sourcesContent":["/**\n       * Auth Types\n * Contains: Login/Signup/Token types + Auth Entities (Session, Identity, AccessKey, OTP)\n */\n\n// OTP Type Enum\nexport enum NestAuthOTPTypeEnum {\n    PASSWORD_RESET = 'password_reset',\n    VERIFICATION = 'verification',\n    MFA = 'mfa',\n}\n\n// MFA Method Enum (Needed for AuthResponse and others)\nexport enum NestAuthMFAMethodEnum {\n    EMAIL = 'email',\n    SMS = 'sms',\n    TOTP  = 'totp',\n}\n\n// --- Entity Interfaces ---\n\nexport interface INestAuthIdentity {\n    id: string;\n    provider: string;\n    providerId: string;\n    metadata?: Record<string, any>;\n    userId: string;\n    createdAt: Date;\n    updatedAt: Date;\n}\n\nexport interface INestAuthSession {\n    id: string;\n    userId: string;\n    data?: any;\n    refreshToken?: string;\n    expiresAt?: Date;\n    userAgent?: string;\n    deviceName?: string;\n    ipAddress?: string;\n    lastActive?: Date;\n    createdAt?: Date;\n    updatedAt?: Date;\n}\n\nexport interface INestAuthAccessKey {\n    id: string;\n    name: string;\n    publicKey: string;\n    privateKey: string;\n    description?: string;\n    isActive: boolean;\n    expiresAt?: Date;\n    lastUsedAt?: Date;\n    userId: string;\n    createdAt: Date;\n    updatedAt: Date;\n}\n\nexport interface INestAuthOTP {\n    id: string;\n    userId: string;\n    code: string;\n    type: NestAuthOTPTypeEnum;\n    expiresAt: Date;\n    used: boolean;\n    createdAt: Date;\n    updatedAt: Date;\n}\n\n// --- Request/Response Interfaces ---\n\nexport interface IEmailCredentials {\n    email: string;\n    password: string;\n}\n\nexport interface IPhoneCredentials {\n    phone: string;\n    password: string;\n}\n\nexport interface ISocialCredentials {\n    token: string;\n}\n\nexport type ILoginCredentials = IEmailCredentials | IPhoneCredentials | ISocialCredentials | Record<string, any>;\n\nexport interface ILoginRequest {\n    providerName?: 'email' | 'phone' | 'google' | 'facebook' | 'apple' | 'github' | string;\n    credentials: ILoginCredentials;\n    tenantId?: string;\n    createUserIfNotExists?: boolean;\n}\n\nexport interface ISignupRequest {\n    email?: string;\n    phone?: string;\n    password: string;\n    tenantId?: string;\n    [key: string]: any;\n}\n\nexport interface IRefreshRequest {\n    refreshToken?: string;\n}\n\nexport interface ITokenPair {\n    accessToken: string;\n    refreshToken: string;\n}\n\nexport interface IAuthUser {\n    id: string;\n    email?: string;\n    phone?: string;\n    isVerified?: boolean;\n    isMfaEnabled?: boolean;\n    roles?: string[];\n    permissions?: string[];\n    metadata?: Record<string, any>;\n    tenantId?: string;\n}\n\nexport interface IAuthResponse extends ITokenPair {\n    message?: string;\n    isRequiresMfa?: boolean;\n    mfaMethods?: NestAuthMFAMethodEnum[];\n    defaultMfaMethod?: NestAuthMFAMethodEnum;\n    user?: IAuthUser;\n}\n\nexport interface IAuthSession {\n    id: string;\n    userId: string;\n    expiresAt: string;\n    createdAt: string;\n}\n\nexport interface IMessageResponse {\n    message: string;\n}\n\nexport interface IAuthCookieResponse {\n    message: string;\n    isRequiresMfa?: boolean;\n}\n\nexport interface IAuthSuccessResponse {\n    message: string;\n    isRequiresMfa?: boolean;\n}\n\nexport interface IUserResponse {\n    id: string;\n    email?: string;\n    phone?: string;\n    isVerified?: boolean;\n    isMfaEnabled?: boolean;\n    roles?: string[];\n    permissions?: string[];\n    metadata?: Record<string, any>;\n    tenantId?: string;\n}\n\nexport interface ITokensResponse {\n    accessToken: string;\n    refreshToken: string;\n}\n"],"mappings":";AAMO,IAAK,sBAAL,kBAAKA,yBAAL;AACH,EAAAA,qBAAA,oBAAiB;AACjB,EAAAA,qBAAA,kBAAe;AACf,EAAAA,qBAAA,SAAM;AAHE,SAAAA;AAAA,GAAA;AAOL,IAAK,wBAAL,kBAAKC,2BAAL;AACH,EAAAA,uBAAA,WAAQ;AACR,EAAAA,uBAAA,SAAM;AACN,EAAAA,uBAAA,UAAQ;AAHA,SAAAA;AAAA,GAAA;","names":["NestAuthOTPTypeEnum","NestAuthMFAMethodEnum"]}
+{"version":3,"sources":["../src/auth.ts","../src/config.ts"],"sourcesContent":["/**\n       * Auth Types\n * Contains: Login/Signup/Token types + Auth Entities (Session, Identity, AccessKey, OTP)\n */\n\nimport type { INestAuthTenant, INestAuthUserAccess } from './tenant';\n\n// OTP Type Enum\nexport enum NestAuthOTPTypeEnum {\n    PASSWORD_RESET = 'password_reset',\n    VERIFICATION = 'verification',\n    MFA = 'mfa',\n}\n\n// MFA Method Enum (Needed for AuthResponse and others)\nexport enum NestAuthMFAMethodEnum {\n    EMAIL = 'email',\n    SMS = 'sms',\n    TOTP  = 'totp',\n}\n\n// --- Entity Interfaces ---\n\nexport interface INestAuthIdentity {\n    id: string;\n    provider: string;\n    providerId: string;\n    metadata?: Record<string, any>;\n    userId: string;\n    createdAt: Date;\n    updatedAt: Date;\n}\n\nexport interface INestAuthSession {\n    id: string;\n    userId: string;\n    data?: any;\n    refreshToken?: string;\n    expiresAt?: Date;\n    userAgent?: string;\n    deviceName?: string;\n    ipAddress?: string;\n    lastActive?: Date;\n    createdAt?: Date;\n    updatedAt?: Date;\n}\n\nexport interface INestAuthAccessKey {\n    id: string;\n    name: string;\n    publicKey: string;\n    privateKey: string;\n    description?: string;\n    isActive: boolean;\n    expiresAt?: Date;\n    lastUsedAt?: Date;\n    userId: string;\n    createdAt: Date;\n    updatedAt: Date;\n}\n\nexport interface INestAuthOTP {\n    id: string;\n    userId: string;\n    code: string;\n    type: NestAuthOTPTypeEnum;\n    expiresAt: Date;\n    used: boolean;\n    createdAt: Date;\n    updatedAt: Date;\n}\n\n// --- Request/Response Interfaces ---\n\nexport interface IEmailCredentials {\n    email: string;\n    password: string;\n}\n\nexport interface IPhoneCredentials {\n    phone: string;\n    password: string;\n}\n\nexport interface ISocialCredentials {\n    token: string;\n}\n\nexport type ILoginCredentials = IEmailCredentials | IPhoneCredentials | ISocialCredentials | Record<string, any>;\n\nexport interface ILoginRequest {\n    providerName?: 'email' | 'phone' | 'google' | 'facebook' | 'apple' | 'github' | string;\n    credentials: ILoginCredentials;\n    tenantId?: string;\n    createUserIfNotExists?: boolean;\n}\n\nexport interface ISignupRequest {\n    email?: string;\n    phone?: string;\n    password: string;\n    tenantId?: string;\n    [key: string]: any;\n}\n\nexport interface IRefreshRequest {\n    refreshToken?: string;\n}\n\nexport interface ISwitchTenantRequest {\n    tenantId: string;\n}\n\nexport interface ITokenPair {\n    accessToken: string;\n    refreshToken: string;\n}\n\nexport interface IAuthUser {\n    id: string;\n    email?: string;\n    phone?: string;\n    isVerified?: boolean;\n    isMfaEnabled?: boolean;\n    roles?: string[];\n    permissions?: string[];\n    metadata?: Record<string, any>;\n    userAccesses?: INestAuthUserAccess[];\n}\n\nexport interface IAuthResponse extends ITokenPair {\n    message?: string;\n    isRequiresMfa?: boolean;\n    mfaMethods?: NestAuthMFAMethodEnum[];\n    defaultMfaMethod?: NestAuthMFAMethodEnum;\n    user?: IAuthUser;\n}\n\nexport interface IAuthSession {\n    id: string;\n    userId: string;\n    expiresAt: string;\n    createdAt: string;\n}\n\nexport interface IMessageResponse {\n    message: string;\n}\n\nexport interface IAuthCookieResponse {\n    message: string;\n    isRequiresMfa?: boolean;\n}\n\nexport interface IAuthSuccessResponse {\n    message: string;\n    isRequiresMfa?: boolean;\n}\n\nexport interface IUserResponse {\n    id: string;\n    email?: string;\n    phone?: string;\n    isVerified?: boolean;\n    isMfaEnabled?: boolean;\n    roles?: string[];\n    permissions?: string[];\n    metadata?: Record<string, any>;\n    tenantId?: string;\n    tenants?: INestAuthTenant[];\n}\n\nexport interface ITokensResponse {\n    accessToken: string;\n    refreshToken: string;\n}\n","/**\n * Config Types\n * Client configuration response types\n */\n\nimport { NestAuthMFAMethodEnum } from './auth';\n\nexport interface IEmailAuthConfig {\n    enabled: boolean;\n}\n\nexport interface IPhoneAuthConfig {\n    enabled: boolean;\n}\n\nexport interface IProfileFieldOption {\n    label: string;\n    value: string;\n}\n\nexport interface IProfileField {\n    id: string;\n    label: string;\n    required?: boolean;\n    type?: 'text' | 'email' | 'phone' | 'select' | 'checkbox' | 'password';\n    placeholder?: string;\n    options?: IProfileFieldOption[];\n}\n\nexport interface IRegistrationConfig {\n    enabled: boolean;\n    requireInvitation?: boolean;\n    collectProfileFields?: IProfileField[];\n}\n\nexport interface IMfaConfig {\n    enabled: boolean;\n    methods?: NestAuthMFAMethodEnum[];\n    allowUserToggle?: boolean;\n    allowMethodSelection?: boolean;\n}\n\nexport interface ITenantOption {\n    id: string;\n    name: string;\n    slug: string;\n    isActive: boolean;\n    metadata?: Record<string, any>;\n}\n\n/**\n * Tenant support configuration.\n * - enabled: false → no tenant checks; auth works without tenant (future-safe: entities remain).\n * - enabled: true → multi-tenant is on; tenant is required; mode controls behavior:\n *   - ISOLATED: one tenant per user (user belongs to one tenant).\n *   - SHARED: user can belong to multiple tenants; active tenant from header/subdomain/JWT/custom.\n */\nexport interface INestAuthTenantOptions {\n    /** When false, tenant resolution and validation are disabled. When true, multi-tenant is enabled and tenant is required. Default: false. */\n    enabled?: boolean;\n    /** When enabled, use ISOLATED (one tenant per user) or SHARED (multiple tenants per user). Default: ISOLATED. */\n    mode?: TenantModeEnum;\n}\n\nexport enum TenantModeEnum {\n    ISOLATED = 'isolated',\n    SHARED = 'shared',\n}\n\nexport interface ITenantsConfig {\n    mode: TenantModeEnum;\n    options?: ITenantOption[];\n}\n\nexport interface ISsoProviderConfig {\n    id: string;\n    name: string;\n    logoUrl?: string;\n    authorizationUrl?: string;\n    clientId?: string;\n    hint?: string;\n}\n\nexport interface ISsoConfig {\n    enabled: boolean;\n    providers?: ISsoProviderConfig[];\n}\n\nexport interface IUiConfig {\n    brandName?: string;\n    brandColor?: string;\n    logoUrl?: string;\n    backgroundImageUrl?: string;\n}\n"],"mappings":";AAQO,IAAK,sBAAL,kBAAKA,yBAAL;AACH,EAAAA,qBAAA,oBAAiB;AACjB,EAAAA,qBAAA,kBAAe;AACf,EAAAA,qBAAA,SAAM;AAHE,SAAAA;AAAA,GAAA;AAOL,IAAK,wBAAL,kBAAKC,2BAAL;AACH,EAAAA,uBAAA,WAAQ;AACR,EAAAA,uBAAA,SAAM;AACN,EAAAA,uBAAA,UAAQ;AAHA,SAAAA;AAAA,GAAA;;;ACiDL,IAAK,iBAAL,kBAAKC,oBAAL;AACH,EAAAA,gBAAA,cAAW;AACX,EAAAA,gBAAA,YAAS;AAFD,SAAAA;AAAA,GAAA;","names":["NestAuthOTPTypeEnum","NestAuthMFAMethodEnum","TenantModeEnum"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ackplus/nest-auth-contracts",
-  "version": "1.1.68",
+  "version": "1.1.69-beta.2",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",