@ackplus/nest-auth 0.0.23

package/README.md

@@ -0,0 +1,226 @@
+# Nest Auth
+
+A comprehensive authentication module for NestJS applications.
+
+## Table of Contents
+
+- [Installation](#installation)
+- [Quick Start](#quick-start)
+- [Configuration](#configuration)
+- [Database Setup](#database-setup)
+- [Testing](#testing)
+- [Authentication Providers](#authentication-providers)
+- [API Documentation](#api-documentation)
+- [Contributing](#contributing)
+- [License](#license)
+
+## Installation
+
+```bash
+yarn add @ackplus/nest-auth
+```
+
+## Quick Start
+
+```typescript
+import { NestAuthModule } from '@ackplus/nest-auth';
+
+@Module({
+  imports: [
+    NestAuthModule.forRoot({
+      jwt: {
+        secret: 'your-secret-key',
+      },
+      emailAuth: {
+        enabled: true,
+      },
+      // ... other options
+    }),
+  ],
+})
+export class AppModule {}
+```
+
+## Configuration
+
+### Database Configuration
+
+The module supports both PostgreSQL and SQLite databases. Configure your database connection using the `DATABASE_URL` environment variable:
+
+```bash
+# For PostgreSQL
+DATABASE_URL=postgresql://user:password@localhost:5432/dbname
+
+# For SQLite
+DATABASE_URL=:memory:  # For in-memory database
+DATABASE_URL=./database.sqlite  # For file-based database
+```
+
+### Environment Variables
+
+| Variable | Description | Default |
+|----------|-------------|---------|
+| `DATABASE_URL` | Database connection URL | `:memory:` |
+| `NODE_ENV` | Application environment | `development` |
+
+### Module Options
+
+```typescript
+interface AuthModuleOptions {
+  jwt: {
+    secret: string;
+    expiresIn?: string;
+  };
+  emailAuth?: {
+    enabled: boolean;
+    // ... other email auth options
+  };
+  phoneAuth?: {
+    enabled: boolean;
+    // ... other phone auth options
+  };
+  // ... other options
+}
+```
+
+## Database Setup
+
+### PostgreSQL
+
+1. Create a new database:
+```sql
+CREATE DATABASE your_database;
+```
+
+2. Run migrations:
+```bash
+yarn typeorm migration:run -d src/typeorm.config.ts
+```
+
+### SQLite
+
+No setup required. The database will be created automatically.
+
+## Testing
+
+### Local Development
+
+1. For PostgreSQL:
+```bash
+DATABASE_URL=postgresql://user:password@localhost:5432/testdb yarn test
+```
+
+2. For SQLite:
+```bash
+DATABASE_URL=:memory: yarn test
+```
+
+### CI/CD (GitHub Actions)
+
+The tests run automatically in GitHub Actions using SQLite for faster execution. No additional setup required.
+
+## Authentication Providers
+
+### Email Authentication
+
+```typescript
+@Post('login')
+async login(@Body() loginDto: LoginRequestDto) {
+  return this.authService.login({
+    providerId: 'email',
+    credentials: {
+      email: loginDto.email,
+      password: loginDto.password,
+    },
+  });
+}
+```
+
+### Phone Authentication
+
+```typescript
+@Post('login')
+async login(@Body() loginDto: LoginRequestDto) {
+  return this.authService.login({
+    providerId: 'phone',
+    credentials: {
+      phone: loginDto.phone,
+      password: loginDto.password,
+    },
+  });
+}
+```
+
+## API Documentation
+
+### Authentication Endpoints
+
+| Endpoint | Method | Description |
+|----------|--------|-------------|
+| `/auth/login` | POST | Login with credentials |
+| `/auth/register` | POST | Register new user |
+| `/auth/refresh` | POST | Refresh access token |
+| `/auth/logout` | POST | Logout user |
+
+### Request/Response Examples
+
+#### Login Request
+```json
+{
+  "providerId": "email",
+  "credentials": {
+    "email": "user@example.com",
+    "password": "password123"
+  }
+}
+```
+
+#### Login Response
+```json
+{
+  "accessToken": "eyJhbGciOiJIUzI1NiIs...",
+  "refreshToken": "eyJhbGciOiJIUzI1NiIs...",
+  "isRequiresMfa": false
+}
+```
+
+## Contributing
+
+1. Fork the repository
+2. Create your feature branch (`git checkout -b feature/amazing-feature`)
+3. Commit your changes (`git commit -m 'Add some amazing feature'`)
+4. Push to the branch (`git push origin feature/amazing-feature`)
+5. Open a Pull Request
+
+### Development Setup
+
+1. Clone the repository
+2. Install dependencies:
+```bash
+yarn install
+```
+
+3. Set up the database:
+```bash
+# For PostgreSQL
+DATABASE_URL=postgresql://user:password@localhost:5432/testdb
+
+# For SQLite
+DATABASE_URL=:memory:
+```
+
+4. Run tests:
+```bash
+yarn test
+```
+
+### Testing Guidelines
+
+- Write tests for all new features
+- Ensure tests pass in both PostgreSQL and SQLite
+- Follow the existing test patterns
+- Use appropriate test fixtures
+
+## License
+
+This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@ackplus/nest-auth",
+  "version": "0.0.23",
+  "type": "commonjs",
+  "main": "./src/index.js",
+  "types": "./src/index.d.ts",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ack-solutions/packages.git"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "homepage": "https://github.com/ack-solutions/packages.git#readme",
+  "dependencies": {
+    "tslib": "^2.3.0",
+    "@nestjs/common": "^10.4.5",
+    "@nestjs/typeorm": "^10.0.2",
+    "@nestjs/swagger": "^7.4.2",
+    "typeorm": "^0.3.20",
+    "deepmerge": "4.3.1",
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.14.1",
+    "pluralize": "8.0.0",
+    "lodash": "^4.17.21",
+    "rxjs": "^7.8.0",
+    "bcrypt": "^5.1.0",
+    "passport": "^0.6.0",
+    "passport-jwt": "^4.0.1",
+    "uuid": "^9.0.0",
+    "google-auth-library": "^9.0.0",
+    "fb": "^2.0.0",
+    "apple-auth": "^1.0.0",
+    "speakeasy": "^2.0.0",
+    "qrcode": "^1.5.3"
+  },
+  "devDependencies": {
+    "@nestjs/testing": "^10.0.0",
+    "@types/bcrypt": "^5.0.0",
+    "@types/jest": "^29.0.0",
+    "@types/node": "^20.0.0",
+    "@types/passport-jwt": "^3.0.8",
+    "@types/uuid": "^9.0.0",
+    "@types/speakeasy": "^2.0.0",
+    "@types/qrcode": "^1.5.5",
+    "jest": "^29.0.0",
+    "ts-jest": "^29.0.0",
+    "typescript": "^5.0.0"
+  }
+}

package/src/index.d.ts

@@ -0,0 +1,11 @@
+export * from './lib/nest-auth.module';
+export * from './lib/auth.constants';
+export * from './lib/services/mfa.service';
+export * from './lib/services/auth.service';
+export * from './lib/guards/auth.guard';
+export * from './lib/decorators/skip-mfa.decorator';
+export * from './lib/interfaces/auth-module-options.interface';
+export * from './lib/interfaces/mfa-options.interface';
+export * from './lib/dto';
+export * from './lib/entities';
+export * from './lib/providers';

package/src/index.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./lib/nest-auth.module"), exports);
+tslib_1.__exportStar(require("./lib/auth.constants"), exports);
+tslib_1.__exportStar(require("./lib/services/mfa.service"), exports);
+tslib_1.__exportStar(require("./lib/services/auth.service"), exports);
+tslib_1.__exportStar(require("./lib/guards/auth.guard"), exports);
+tslib_1.__exportStar(require("./lib/decorators/skip-mfa.decorator"), exports);
+tslib_1.__exportStar(require("./lib/interfaces/auth-module-options.interface"), exports);
+tslib_1.__exportStar(require("./lib/interfaces/mfa-options.interface"), exports);
+tslib_1.__exportStar(require("./lib/dto"), exports);
+tslib_1.__exportStar(require("./lib/entities"), exports);
+tslib_1.__exportStar(require("./lib/providers"), exports);
+//# sourceMappingURL=index.js.map

package/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/nest-auth/src/index.ts"],"names":[],"mappings":";;;AAAA,iEAAuC;AAEvC,+DAAqC;AAGrC,qEAA2C;AAC3C,sEAA4C;AAG5C,kEAAwC;AAGxC,8EAAoD;AAGpD,yFAA+D;AAC/D,iFAAuD;AAGvD,oDAA0B;AAG1B,yDAA+B;AAG/B,0DAAgC"}

package/src/lib/auth.constants.d.ts

@@ -0,0 +1,17 @@
+export declare const AUTH_MODULE_OPTIONS = "NEST_AUTH_AUTH_MODULE_OPTIONS";
+export declare const JWT_AUTH_PROVIDER = "jwt";
+export declare const GOOGLE_AUTH_PROVIDER = "google";
+export declare const FACEBOOK_AUTH_PROVIDER = "facebook";
+export declare const APPLE_AUTH_PROVIDER = "apple";
+export declare const EMAIL_AUTH_PROVIDER = "email";
+export declare const PHONE_AUTH_PROVIDER = "phone";
+export declare const ENABLED_AUTH_PROVIDERS = "NEST_AUTH_ENABLED_AUTH_PROVIDERS";
+export declare const USER_NOT_FOUND_EXCEPTION_CODE = "USER_NOT_FOUND";
+export declare const UNAUTHORIZED_EXCEPTION_CODE = "UNAUTHORIZED";
+export declare const INVALID_MFA_EXCEPTION_CODE = "INVALID_MFA";
+export declare const INVALID_REFRESH_TOKEN_EXCEPTION_CODE = "INVALID_REFRESH_TOKEN";
+export declare const SESSION_NOT_FOUND_ERROR = "SESSION_NOT_FOUND";
+export declare const REFRESH_TOKEN_INVALID = "REFRESH_TOKEN_INVALID";
+export declare const REFRESH_TOKEN_EXPIRED = "REFRESH_TOKEN_EXPIRED";
+export declare const ACCESS_TOKEN_COOKIE_NAME = "accessToken";
+export declare const REFRESH_TOKEN_COOKIE_NAME = "refreshToken";

package/src/lib/auth.constants.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REFRESH_TOKEN_COOKIE_NAME = exports.ACCESS_TOKEN_COOKIE_NAME = exports.REFRESH_TOKEN_EXPIRED = exports.REFRESH_TOKEN_INVALID = exports.SESSION_NOT_FOUND_ERROR = exports.INVALID_REFRESH_TOKEN_EXCEPTION_CODE = exports.INVALID_MFA_EXCEPTION_CODE = exports.UNAUTHORIZED_EXCEPTION_CODE = exports.USER_NOT_FOUND_EXCEPTION_CODE = exports.ENABLED_AUTH_PROVIDERS = exports.PHONE_AUTH_PROVIDER = exports.EMAIL_AUTH_PROVIDER = exports.APPLE_AUTH_PROVIDER = exports.FACEBOOK_AUTH_PROVIDER = exports.GOOGLE_AUTH_PROVIDER = exports.JWT_AUTH_PROVIDER = exports.AUTH_MODULE_OPTIONS = void 0;
+exports.AUTH_MODULE_OPTIONS = 'NEST_AUTH_AUTH_MODULE_OPTIONS';
+exports.JWT_AUTH_PROVIDER = 'jwt';
+exports.GOOGLE_AUTH_PROVIDER = 'google';
+exports.FACEBOOK_AUTH_PROVIDER = 'facebook';
+exports.APPLE_AUTH_PROVIDER = 'apple';
+exports.EMAIL_AUTH_PROVIDER = 'email';
+exports.PHONE_AUTH_PROVIDER = 'phone';
+exports.ENABLED_AUTH_PROVIDERS = 'NEST_AUTH_ENABLED_AUTH_PROVIDERS';
+exports.USER_NOT_FOUND_EXCEPTION_CODE = 'USER_NOT_FOUND';
+exports.UNAUTHORIZED_EXCEPTION_CODE = 'UNAUTHORIZED';
+exports.INVALID_MFA_EXCEPTION_CODE = 'INVALID_MFA';
+exports.INVALID_REFRESH_TOKEN_EXCEPTION_CODE = 'INVALID_REFRESH_TOKEN';
+exports.SESSION_NOT_FOUND_ERROR = 'SESSION_NOT_FOUND';
+exports.REFRESH_TOKEN_INVALID = 'REFRESH_TOKEN_INVALID';
+exports.REFRESH_TOKEN_EXPIRED = 'REFRESH_TOKEN_EXPIRED';
+exports.ACCESS_TOKEN_COOKIE_NAME = 'accessToken';
+exports.REFRESH_TOKEN_COOKIE_NAME = 'refreshToken';
+//# sourceMappingURL=auth.constants.js.map

package/src/lib/auth.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.constants.js","sourceRoot":"","sources":["../../../../../packages/nest-auth/src/lib/auth.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,mBAAmB,GAAG,+BAA+B,CAAC;AAGtD,QAAA,iBAAiB,GAAG,KAAK,CAAC;AAC1B,QAAA,oBAAoB,GAAG,QAAQ,CAAC;AAChC,QAAA,sBAAsB,GAAG,UAAU,CAAC;AACpC,QAAA,mBAAmB,GAAG,OAAO,CAAC;AAC9B,QAAA,mBAAmB,GAAG,OAAO,CAAC;AAC9B,QAAA,mBAAmB,GAAG,OAAO,CAAC;AAG9B,QAAA,sBAAsB,GAAG,kCAAkC,CAAC;AAI5D,QAAA,6BAA6B,GAAG,gBAAgB,CAAC;AACjD,QAAA,2BAA2B,GAAG,cAAc,CAAC;AAC7C,QAAA,0BAA0B,GAAG,aAAa,CAAC;AAC3C,QAAA,oCAAoC,GAAG,uBAAuB,CAAC;AAC/D,QAAA,uBAAuB,GAAG,mBAAmB,CAAC;AAE9C,QAAA,qBAAqB,GAAG,uBAAuB,CAAC;AAChD,QAAA,qBAAqB,GAAG,uBAAuB,CAAC;AAIhD,QAAA,wBAAwB,GAAG,aAAa,CAAC;AACzC,QAAA,yBAAyB,GAAG,cAAc,CAAC"}

package/src/lib/controllers/auth.controller.d.ts

@@ -0,0 +1,26 @@
+import { AuthService } from '../services/auth.service';
+import { SignupRequestDto, LoginRequestDto, ResetPasswordRequestDto, ForgotPasswordRequestDto, MessageResponseDto, DeviceInfoDto } from '../dto';
+import { MFAMethodEnum } from '../interfaces/mfa-options.interface';
+import { Verify2faRequestDto } from '../dto/requests/verify-2fa.request.dto';
+import { RefreshTokenRequestDto } from '../dto/requests/refresh-token.request.dto';
+import { Response } from 'express';
+import { CookieService } from '../services/cookie.service';
+export declare class AuthController {
+    private readonly authService;
+    private readonly cookieService;
+    constructor(authService: AuthService, cookieService: CookieService);
+    signup(input: SignupRequestDto, res: Response): Promise<void>;
+    login(input: LoginRequestDto, res: Response): Promise<void>;
+    refreshToken(input: RefreshTokenRequestDto, res: Response): Promise<void>;
+    send2faCode(method: MFAMethodEnum): Promise<{
+        message: string;
+    }>;
+    verify2fa(input: Verify2faRequestDto, res: Response): Promise<void>;
+    logout(res: Response): Promise<void>;
+    logoutAll(): Promise<MessageResponseDto>;
+    forgotPassword(input: ForgotPasswordRequestDto): Promise<MessageResponseDto>;
+    resetPassword(input: ResetPasswordRequestDto): Promise<MessageResponseDto>;
+    getUser(): Promise<import("../entities/user.entity").User>;
+    listDevices(): Promise<DeviceInfoDto[]>;
+    deleteDevice(deviceId: string): Promise<MessageResponseDto>;
+}

package/src/lib/controllers/auth.controller.js

@@ -0,0 +1,214 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthController = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const auth_service_1 = require("../services/auth.service");
+const auth_guard_1 = require("../guards/auth.guard");
+const dto_1 = require("../dto");
+const skip_mfa_decorator_1 = require("../decorators/skip-mfa.decorator");
+const request_context_1 = require("../request-context/request-context");
+const mfa_options_interface_1 = require("../interfaces/mfa-options.interface");
+const verify_2fa_request_dto_1 = require("../dto/requests/verify-2fa.request.dto");
+const refresh_token_request_dto_1 = require("../dto/requests/refresh-token.request.dto");
+const swagger_1 = require("@nestjs/swagger");
+const swagger_2 = require("@nestjs/swagger");
+const cookie_service_1 = require("../services/cookie.service");
+let AuthController = class AuthController {
+    constructor(authService, cookieService) {
+        this.authService = authService;
+        this.cookieService = cookieService;
+    }
+    async signup(input, res) {
+        const response = await this.authService.signup(input);
+        this.cookieService.setTokens(res, response.accessToken, response.refreshToken);
+        res.status(200).json(response);
+    }
+    async login(input, res) {
+        const response = await this.authService.login(input);
+        this.cookieService.setTokens(res, response.accessToken, response.refreshToken);
+        res.status(200).json(response);
+    }
+    async refreshToken(input, res) {
+        const response = await this.authService.refreshToken(input.refreshToken);
+        this.cookieService.setTokens(res, response.accessToken, response.refreshToken);
+        res.status(200).json(response);
+    }
+    async send2faCode(method) {
+        const user = request_context_1.RequestContext.currentUser();
+        await this.authService.send2faCode(user.id, method);
+        return { message: '2FA code sent successfully' };
+    }
+    async verify2fa(input, res) {
+        const response = await this.authService.verify2fa(input);
+        this.cookieService.setTokens(res, response.accessToken, response.refreshToken);
+        res.status(200).json(response);
+    }
+    async logout(res) {
+        await this.authService.logout();
+        this.cookieService.clearCookies(res);
+        res.status(200).json({ message: 'Logged out successfully' });
+    }
+    async logoutAll() {
+        const user = request_context_1.RequestContext.currentUser();
+        await this.authService.logoutAll(user.id);
+        return { message: 'Logged out from all devices successfully' };
+    }
+    async forgotPassword(input) {
+        await this.authService.forgotPassword(input);
+        return { message: 'If the account exists, a password reset code has been sent' };
+    }
+    async resetPassword(input) {
+        await this.authService.resetPassword(input);
+        return { message: 'Password reset successfully' };
+    }
+    async getUser() {
+        return await this.authService.getUser();
+    }
+    async listDevices() {
+        const user = request_context_1.RequestContext.currentUser();
+        return this.authService.listDevices(user.id);
+    }
+    async deleteDevice(deviceId) {
+        const user = request_context_1.RequestContext.currentUser();
+        return this.authService.deleteDevice(user.id, deviceId);
+    }
+};
+exports.AuthController = AuthController;
+tslib_1.__decorate([
+    (0, swagger_2.ApiOperation)({ summary: 'Signup' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: dto_1.AuthResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('signup'),
+    tslib_1.__param(0, (0, common_1.Body)()),
+    tslib_1.__param(1, (0, common_1.Res)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [dto_1.SignupRequestDto, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "signup", null);
+tslib_1.__decorate([
+    (0, swagger_2.ApiOperation)({ summary: 'Login' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: dto_1.AuthResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('login'),
+    tslib_1.__param(0, (0, common_1.Body)()),
+    tslib_1.__param(1, (0, common_1.Res)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [dto_1.LoginRequestDto, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "login", null);
+tslib_1.__decorate([
+    (0, swagger_2.ApiOperation)({ summary: 'Refresh Token' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: dto_1.AuthResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('refresh-token'),
+    tslib_1.__param(0, (0, common_1.Body)()),
+    tslib_1.__param(1, (0, common_1.Res)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [refresh_token_request_dto_1.RefreshTokenRequestDto, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "refreshToken", null);
+tslib_1.__decorate([
+    (0, swagger_2.ApiOperation)({ summary: 'Send 2FA Code' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: dto_1.MessageResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('send-2fa-code'),
+    (0, skip_mfa_decorator_1.SkipMfa)(),
+    (0, common_1.UseGuards)(auth_guard_1.AuthGuard),
+    tslib_1.__param(0, (0, common_1.Body)('method')),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "send2faCode", null);
+tslib_1.__decorate([
+    (0, swagger_2.ApiOperation)({ summary: 'Verify 2FA' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: dto_1.Verify2faResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('verify-2fa'),
+    (0, skip_mfa_decorator_1.SkipMfa)(),
+    (0, common_1.UseGuards)(auth_guard_1.AuthGuard),
+    tslib_1.__param(0, (0, common_1.Body)()),
+    tslib_1.__param(1, (0, common_1.Res)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [verify_2fa_request_dto_1.Verify2faRequestDto, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "verify2fa", null);
+tslib_1.__decorate([
+    (0, swagger_2.ApiOperation)({ summary: 'Logout' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: dto_1.MessageResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('logout'),
+    (0, skip_mfa_decorator_1.SkipMfa)(),
+    (0, common_1.UseGuards)(auth_guard_1.AuthGuard),
+    tslib_1.__param(0, (0, common_1.Res)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "logout", null);
+tslib_1.__decorate([
+    (0, swagger_2.ApiOperation)({ summary: 'Logout All' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: dto_1.MessageResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('logout-all'),
+    (0, skip_mfa_decorator_1.SkipMfa)(),
+    (0, common_1.UseGuards)(auth_guard_1.AuthGuard),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "logoutAll", null);
+tslib_1.__decorate([
+    (0, swagger_2.ApiOperation)({ summary: 'Forgot Password' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: dto_1.MessageResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('forgot-password'),
+    (0, skip_mfa_decorator_1.SkipMfa)(),
+    tslib_1.__param(0, (0, common_1.Body)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [dto_1.ForgotPasswordRequestDto]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "forgotPassword", null);
+tslib_1.__decorate([
+    (0, swagger_2.ApiOperation)({ summary: 'Reset Password' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: dto_1.MessageResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('reset-password'),
+    (0, skip_mfa_decorator_1.SkipMfa)(),
+    tslib_1.__param(0, (0, common_1.Body)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [dto_1.ResetPasswordRequestDto]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "resetPassword", null);
+tslib_1.__decorate([
+    (0, swagger_2.ApiOperation)({ summary: 'Get Logged In User' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: dto_1.UserResponseDto }),
+    (0, common_1.UseGuards)(auth_guard_1.AuthGuard),
+    (0, common_1.Get)('user'),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "getUser", null);
+tslib_1.__decorate([
+    (0, swagger_2.ApiOperation)({ summary: 'List Devices' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: dto_1.DeviceInfoDto }),
+    (0, common_1.UseGuards)(auth_guard_1.AuthGuard),
+    (0, common_1.Get)('devices'),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "listDevices", null);
+tslib_1.__decorate([
+    (0, swagger_2.ApiOperation)({ summary: 'Delete Device' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: dto_1.MessageResponseDto }),
+    (0, common_1.UseGuards)(auth_guard_1.AuthGuard),
+    (0, common_1.Delete)('devices/:deviceId'),
+    tslib_1.__param(0, (0, common_1.Param)('deviceId')),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthController.prototype, "deleteDevice", null);
+exports.AuthController = AuthController = tslib_1.__decorate([
+    (0, common_1.Controller)('auth'),
+    tslib_1.__metadata("design:paramtypes", [auth_service_1.AuthService,
+        cookie_service_1.CookieService])
+], AuthController);
+//# sourceMappingURL=auth.controller.js.map

package/src/lib/controllers/auth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../../../../../packages/nest-auth/src/lib/controllers/auth.controller.ts"],"names":[],"mappings":";;;;AAAA,2CAA6H;AAC7H,2DAAuD;AACvD,qDAAiD;AACjD,gCAUgB;AAChB,yEAA2D;AAC3D,wEAAoE;AACpE,+EAAoE;AACpE,mFAA6E;AAC7E,yFAAmF;AAEnF,6CAA8C;AAC9C,6CAA+C;AAC/C,+DAA2D;AAIpD,IAAM,cAAc,GAApB,MAAM,cAAc;IACvB,YACqB,WAAwB,EACxB,aAA4B;QAD5B,gBAAW,GAAX,WAAW,CAAa;QACxB,kBAAa,GAAb,aAAa,CAAe;IAC7C,CAAC;IAMC,AAAN,KAAK,CAAC,MAAM,CAAS,KAAuB,EAAS,GAAa;QAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC/E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAMK,AAAN,KAAK,CAAC,KAAK,CAAS,KAAsB,EAAS,GAAa;QAC5D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC/E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAMK,AAAN,KAAK,CAAC,YAAY,CAAS,KAA6B,EAAS,GAAa;QAC1E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACzE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC/E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IASK,AAAN,KAAK,CAAC,WAAW,CAAiB,MAAqB;QACnD,MAAM,IAAI,GAAG,gCAAc,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAA;IACpD,CAAC;IAQK,AAAN,KAAK,CAAC,SAAS,CAAS,KAA0B,EAAS,GAAa;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC/E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAa;QAC7B,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACrC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACjE,CAAC;IAQK,AAAN,KAAK,CAAC,SAAS;QACX,MAAM,IAAI,GAAG,gCAAc,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IACnE,CAAC;IAOK,AAAN,KAAK,CAAC,cAAc,CAAS,KAA+B;QACxD,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAA;IACpF,CAAC;IAOK,AAAN,KAAK,CAAC,aAAa,CAAS,KAA8B;QACtD,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAA;IACrD,CAAC;IAMK,AAAN,KAAK,CAAC,OAAO;QACT,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;IAC5C,CAAC;IAMK,AAAN,KAAK,CAAC,WAAW;QACb,MAAM,IAAI,GAAG,gCAAc,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAMK,AAAN,KAAK,CAAC,YAAY,CACK,QAAgB;QAEnC,MAAM,IAAI,GAAG,gCAAc,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;CAEJ,CAAA;AArIY,wCAAc;AAUjB;IAJL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACnC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAe,EAAE,CAAC;IACnD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,QAAQ,CAAC;IACD,mBAAA,IAAA,aAAI,GAAE,CAAA;IAA2B,mBAAA,IAAA,YAAG,GAAE,CAAA;;6CAAxB,sBAAgB;;4CAI3C;AAMK;IAJL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAClC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAe,EAAE,CAAC;IACnD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,OAAO,CAAC;IACD,mBAAA,IAAA,aAAI,GAAE,CAAA;IAA0B,mBAAA,IAAA,YAAG,GAAE,CAAA;;6CAAvB,qBAAe;;2CAIzC;AAMK;IAJL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC1C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAe,EAAE,CAAC;IACnD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,eAAe,CAAC;IACF,mBAAA,IAAA,aAAI,GAAE,CAAA;IAAiC,mBAAA,IAAA,YAAG,GAAE,CAAA;;6CAA9B,kDAAsB;;kDAIvD;AASK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC1C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAkB,EAAE,CAAC;IACtD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,eAAe,CAAC;IACrB,IAAA,4BAAO,GAAE;IACT,IAAA,kBAAS,EAAC,sBAAS,CAAC;IACF,mBAAA,IAAA,aAAI,EAAC,QAAQ,CAAC,CAAA;;;;iDAIhC;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IACvC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,0BAAoB,EAAE,CAAC;IACxD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,4BAAO,GAAE;IACT,IAAA,kBAAS,EAAC,sBAAS,CAAC;IACJ,mBAAA,IAAA,aAAI,GAAE,CAAA;IAA8B,mBAAA,IAAA,YAAG,GAAE,CAAA;;6CAA3B,4CAAmB;;+CAIjD;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACnC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAkB,EAAE,CAAC;IACtD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,4BAAO,GAAE;IACT,IAAA,kBAAS,EAAC,sBAAS,CAAC;IACP,mBAAA,IAAA,YAAG,GAAE,CAAA;;;;4CAIlB;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IACvC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAkB,EAAE,CAAC;IACtD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,4BAAO,GAAE;IACT,IAAA,kBAAS,EAAC,sBAAS,CAAC;;;;+CAKpB;AAOK;IALL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC5C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAkB,EAAE,CAAC;IACtD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,iBAAiB,CAAC;IACvB,IAAA,4BAAO,GAAE;IACY,mBAAA,IAAA,aAAI,GAAE,CAAA;;6CAAQ,8BAAwB;;oDAG3D;AAOK;IALL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC3C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAkB,EAAE,CAAC;IACtD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,gBAAgB,CAAC;IACtB,IAAA,4BAAO,GAAE;IACW,mBAAA,IAAA,aAAI,GAAE,CAAA;;6CAAQ,6BAAuB;;mDAGzD;AAMK;IAJL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAC/C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAe,EAAE,CAAC;IACnD,IAAA,kBAAS,EAAC,sBAAS,CAAC;IACpB,IAAA,YAAG,EAAC,MAAM,CAAC;;;;6CAGX;AAMK;IAJL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IACzC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAa,EAAE,CAAC;IACjD,IAAA,kBAAS,EAAC,sBAAS,CAAC;IACpB,IAAA,YAAG,EAAC,SAAS,CAAC;;;;iDAId;AAMK;IAJL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC1C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAkB,EAAE,CAAC;IACtD,IAAA,kBAAS,EAAC,sBAAS,CAAC;IACpB,IAAA,eAAM,EAAC,mBAAmB,CAAC;IAEvB,mBAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;;;;kDAIrB;yBAnIQ,cAAc;IAD1B,IAAA,mBAAU,EAAC,MAAM,CAAC;6CAGmB,0BAAW;QACT,8BAAa;GAHxC,cAAc,CAqI1B"}

package/src/lib/controllers/mfa.controller.d.ts

@@ -0,0 +1,23 @@
+import { MfaService } from '../services/mfa.service';
+import { SendMfaCodeRequestDto } from '../dto/requests/send-mfa-code.request.dto';
+import { VerifyTotpSetupRequestDto } from '../dto/requests/verify-totp-setup.request.dto';
+export declare class MfaController {
+    private readonly mfaService;
+    constructor(mfaService: MfaService);
+    sendMfaCode(input: SendMfaCodeRequestDto): Promise<{
+        message: string;
+    }>;
+    setupTotp(): Promise<{
+        secret: string;
+        qrCode: string;
+    }>;
+    verifyTotpSetup(input: VerifyTotpSetupRequestDto): Promise<{
+        message: string;
+    }>;
+    generateRecoveryCodes(): Promise<{
+        code: string;
+    }>;
+    resetTotp(code: string): Promise<{
+        message: string;
+    }>;
+}