@ackplus/nest-auth 1.1.0 → 1.1.2

package/src/lib/core/interfaces/session-options.interface.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionStorageType = void 0;
+var SessionStorageType;
+(function (SessionStorageType) {
+    SessionStorageType["REDIS"] = "redis";
+    SessionStorageType["DATABASE"] = "database";
+    SessionStorageType["MEMORY"] = "memory";
+})(SessionStorageType || (exports.SessionStorageType = SessionStorageType = {}));

package/src/lib/core/interfaces/{token-payload.interface.ts → token-payload.interface.d.ts}

@@ -1,9 +1,8 @@
 import { NestAuthRole } from '../../role/entities/role.entity';
 import { NestAuthUser } from '../../user/entities/user.entity';
-
 export interface JWTTokenPayload {
     id?: string;
-    sub?: string; // user id
+    sub?: string;
     email?: string;
     phone?: string;
     isVerified?: boolean;
@@ -16,7 +15,6 @@ export interface JWTTokenPayload {
     exp?: number;
     iat?: number;
 }
-
 export interface SessionPayload {
     id?: string;
     userId?: string;
@@ -35,9 +33,9 @@ export interface SessionPayload {
     createdAt?: Date;
     updatedAt?: Date;
 }
-
 export interface TokenGenerationResponse {
     accessToken: string;
     refreshToken: string;
     user?: NestAuthUser;
 }
+//# sourceMappingURL=token-payload.interface.d.ts.map

package/src/lib/core/interfaces/token-payload.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-payload.interface.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/interfaces/token-payload.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAE/D,MAAM,WAAW,eAAe;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE;QACH,IAAI,EAAE,YAAY,CAAC;QACnB,aAAa,EAAE,OAAO,CAAC;QACvB,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/B,WAAW,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC;IACF,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,YAAY,CAAC;CACvB"}

package/src/lib/core/interfaces/token-payload.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/src/lib/core/providers/apple-auth.provider.d.ts

@@ -0,0 +1,19 @@
+import { DataSource } from 'typeorm';
+import { BaseAuthProvider } from './base-auth.provider';
+import { JwtService } from '../services/jwt.service';
+export declare class AppleAuthProvider extends BaseAuthProvider {
+    readonly dataSource: DataSource;
+    private readonly jwtService;
+    providerName: string;
+    private appleAuth;
+    constructor(dataSource: DataSource, jwtService: JwtService);
+    validate(credentials: {
+        accessToken: string;
+    }): Promise<{
+        userId: string;
+        email: string;
+        metadata: import("..").JWTTokenPayload;
+    }>;
+    getRequiredFields(): string[];
+}
+//# sourceMappingURL=apple-auth.provider.d.ts.map

package/src/lib/core/providers/apple-auth.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple-auth.provider.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/providers/apple-auth.provider.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAIxD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,qBACa,iBAAkB,SAAQ,gBAAgB;IAM/C,QAAQ,CAAC,UAAU,EAAE,UAAU;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAN/B,YAAY,SAAuB;IAEnC,OAAO,CAAC,SAAS,CAAY;gBAGhB,UAAU,EAAE,UAAU,EACd,UAAU,EAAE,UAAU;IA0BrC,QAAQ,CAAC,WAAW,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE;;;;;IAcnD,iBAAiB,IAAI,MAAM,EAAE;CAGhC"}

package/src/lib/core/providers/apple-auth.provider.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppleAuthProvider = void 0;
+const tslib_1 = require("tslib");
+const apple_auth_1 = tslib_1.__importDefault(require("apple-auth"));
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("typeorm");
+const base_auth_provider_1 = require("./base-auth.provider");
+const auth_constants_1 = require("../../auth.constants");
+const user_entity_1 = require("../../user/entities/user.entity");
+const identity_entity_1 = require("../../user/entities/identity.entity");
+const jwt_service_1 = require("../services/jwt.service");
+let AppleAuthProvider = class AppleAuthProvider extends base_auth_provider_1.BaseAuthProvider {
+    constructor(dataSource, jwtService) {
+        const userRepository = dataSource.getRepository(user_entity_1.NestAuthUser);
+        const authIdentityRepository = dataSource.getRepository(identity_entity_1.NestAuthIdentity);
+        super(userRepository, authIdentityRepository);
+        this.dataSource = dataSource;
+        this.jwtService = jwtService;
+        this.providerName = auth_constants_1.APPLE_AUTH_PROVIDER;
+        const appleConfig = this.options.apple;
+        this.enabled = Boolean(this.options.apple);
+        if (this.enabled) {
+            this.appleAuth = new apple_auth_1.default({
+                scope: 'email name',
+                redirect_uri: appleConfig.redirectUri,
+                team_id: appleConfig.teamId,
+                key_id: appleConfig.keyId,
+                client_id: appleConfig.clientId,
+            }, appleConfig.privateKey, appleConfig.privateKeyMethod || 'text');
+        }
+    }
+    async validate(credentials) {
+        try {
+            const response = await this.appleAuth.accessToken(credentials.accessToken);
+            const user = this.jwtService.decodeToken(response.id_token);
+            return {
+                userId: user.id,
+                email: user.email || '',
+                metadata: user,
+            };
+        }
+        catch (error) {
+            throw new common_1.UnauthorizedException('Invalid Apple token');
+        }
+    }
+    getRequiredFields() {
+        return ['accessToken'];
+    }
+};
+exports.AppleAuthProvider = AppleAuthProvider;
+exports.AppleAuthProvider = AppleAuthProvider = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [typeorm_1.DataSource,
+        jwt_service_1.JwtService])
+], AppleAuthProvider);

package/src/lib/core/providers/base-auth.provider.d.ts

@@ -0,0 +1,33 @@
+import { Repository } from 'typeorm';
+import { NestAuthUser } from '../../user/entities/user.entity';
+import { NestAuthIdentity } from '../../user/entities/identity.entity';
+import { AuthModuleOptions } from '../interfaces/auth-module-options.interface';
+export interface AuthProviderUser {
+    userId: string;
+    email?: string;
+    phone?: string;
+    username?: string;
+    metadata?: Record<string, any>;
+}
+export type LinkUserWith = 'email' | 'phone';
+export declare abstract class BaseAuthProvider {
+    protected readonly userRepository: Repository<NestAuthUser>;
+    protected readonly authIdentityRepository: Repository<NestAuthIdentity>;
+    abstract providerName: string;
+    enabled: boolean;
+    options: AuthModuleOptions;
+    constructor(userRepository: Repository<NestAuthUser>, authIdentityRepository: Repository<NestAuthIdentity>);
+    /**
+     * Link a provider identity to a user
+     */
+    linkToUser(userId: string, providerUserId: string, metadata?: Record<string, any>): Promise<void>;
+    findIdentityByUserId(userId: string): Promise<NestAuthIdentity | null>;
+    /**
+     * Find an existing identity for a provider
+     */
+    findIdentity(providerUserId: string): Promise<NestAuthIdentity | null>;
+    abstract validate(credentials: any): Promise<AuthProviderUser | null>;
+    abstract getRequiredFields(): string[];
+    linkUserWith(): LinkUserWith;
+}
+//# sourceMappingURL=base-auth.provider.d.ts.map

package/src/lib/core/providers/base-auth.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-auth.provider.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/providers/base-auth.provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAEvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAEhF,MAAM,WAAW,gBAAgB;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,CAAC;AAG7C,8BAAsB,gBAAgB;IAM9B,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC;IAC3D,SAAS,CAAC,QAAQ,CAAC,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CAAC;IAN3E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,iBAAiB,CAAC;gBAGJ,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,EACxC,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CAAC;IAK3E;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjG,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAU5E;;OAEG;IACG,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAU5E,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAErE,QAAQ,CAAC,iBAAiB,IAAI,MAAM,EAAE;IAGtC,YAAY,IAAI,YAAY;CAG/B"}

package/src/lib/core/providers/base-auth.provider.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BaseAuthProvider = void 0;
+const auth_config_service_1 = require("../services/auth-config.service");
+class BaseAuthProvider {
+    constructor(userRepository, authIdentityRepository) {
+        this.userRepository = userRepository;
+        this.authIdentityRepository = authIdentityRepository;
+        this.options = auth_config_service_1.AuthConfigService.getOptions();
+    }
+    /**
+     * Link a provider identity to a user
+     */
+    async linkToUser(userId, providerUserId, metadata) {
+        const identity = this.authIdentityRepository.create({
+            userId,
+            provider: this.providerName,
+            providerId: providerUserId,
+            metadata: metadata || {},
+        });
+        await this.authIdentityRepository.save(identity);
+    }
+    async findIdentityByUserId(userId) {
+        return this.authIdentityRepository.findOne({
+            where: {
+                userId,
+                provider: this.providerName,
+            },
+            relations: ['user'],
+        });
+    }
+    /**
+     * Find an existing identity for a provider
+     */
+    async findIdentity(providerUserId) {
+        return this.authIdentityRepository.findOne({
+            where: {
+                provider: this.providerName,
+                providerId: providerUserId,
+            },
+            relations: ['user'],
+        });
+    }
+    linkUserWith() {
+        return 'email';
+    }
+}
+exports.BaseAuthProvider = BaseAuthProvider;

package/src/lib/core/providers/email-auth.provider.d.ts

@@ -0,0 +1,31 @@
+import { DataSource } from 'typeorm';
+import { BaseAuthProvider } from './base-auth.provider';
+import { NestAuthUser } from '../../user/entities/user.entity';
+import { NestAuthIdentity } from '../../user/entities/identity.entity';
+export declare class EmailAuthProvider extends BaseAuthProvider {
+    readonly dataSource: DataSource;
+    providerName: string;
+    constructor(dataSource: DataSource);
+    /**
+     * Normalize email to lowercase for case-insensitive matching
+     */
+    private normalizeEmail;
+    /**
+     * Override findIdentity to normalize email before searching
+     */
+    findIdentity(providerUserId: string): Promise<NestAuthIdentity | null>;
+    /**
+     * Override linkToUser to normalize email before linking
+     */
+    linkToUser(userId: string, providerUserId: string, metadata?: Record<string, any>): Promise<void>;
+    validate(credentials: {
+        email?: string;
+        password?: string;
+    }): Promise<{
+        userId: string;
+        email: string;
+        metadata: NestAuthUser;
+    }>;
+    getRequiredFields(): string[];
+}
+//# sourceMappingURL=email-auth.provider.d.ts.map

package/src/lib/core/providers/email-auth.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-auth.provider.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/providers/email-auth.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAEvE,qBACa,iBAAkB,SAAQ,gBAAgB;IAI/C,QAAQ,CAAC,UAAU,EAAE,UAAU;IAHnC,YAAY,SAAuB;gBAGtB,UAAU,EAAE,UAAU;IAUnC;;OAEG;IACH,OAAO,CAAC,cAAc;IAKtB;;OAEG;IACG,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAK5E;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjG,QAAQ,CAAC,WAAW,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;IAqBjE,iBAAiB,IAAI,MAAM,EAAE;CAGhC"}

package/src/lib/core/providers/email-auth.provider.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailAuthProvider = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("typeorm");
+const base_auth_provider_1 = require("./base-auth.provider");
+const auth_constants_1 = require("../../auth.constants");
+const user_entity_1 = require("../../user/entities/user.entity");
+const identity_entity_1 = require("../../user/entities/identity.entity");
+let EmailAuthProvider = class EmailAuthProvider extends base_auth_provider_1.BaseAuthProvider {
+    constructor(dataSource) {
+        const userRepository = dataSource.getRepository(user_entity_1.NestAuthUser);
+        const authIdentityRepository = dataSource.getRepository(identity_entity_1.NestAuthIdentity);
+        super(userRepository, authIdentityRepository);
+        this.dataSource = dataSource;
+        this.providerName = auth_constants_1.EMAIL_AUTH_PROVIDER;
+        this.enabled = this.options.emailAuth?.enabled;
+    }
+    /**
+     * Normalize email to lowercase for case-insensitive matching
+     */
+    normalizeEmail(email) {
+        if (!email)
+            return null;
+        return email.toLowerCase().trim();
+    }
+    /**
+     * Override findIdentity to normalize email before searching
+     */
+    async findIdentity(providerUserId) {
+        const normalizedEmail = this.normalizeEmail(providerUserId);
+        return super.findIdentity(normalizedEmail || providerUserId);
+    }
+    /**
+     * Override linkToUser to normalize email before linking
+     */
+    async linkToUser(userId, providerUserId, metadata) {
+        const normalizedEmail = this.normalizeEmail(providerUserId);
+        return super.linkToUser(userId, normalizedEmail || providerUserId, metadata);
+    }
+    async validate(credentials) {
+        // Normalize email to lowercase for case-insensitive matching
+        const normalizedEmail = this.normalizeEmail(credentials.email);
+        if (!normalizedEmail) {
+            throw new common_1.UnauthorizedException('Email is required');
+        }
+        const identity = await this.findIdentity(normalizedEmail);
+        if (!identity?.user || !(await identity.user.validatePassword(credentials.password))) {
+            throw new common_1.UnauthorizedException('Invalid credentials');
+        }
+        return {
+            userId: identity.user?.email,
+            email: identity.user?.email || '',
+            metadata: identity.user,
+        };
+    }
+    getRequiredFields() {
+        return ['email', 'password'];
+    }
+};
+exports.EmailAuthProvider = EmailAuthProvider;
+exports.EmailAuthProvider = EmailAuthProvider = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [typeorm_1.DataSource])
+], EmailAuthProvider);

package/src/lib/core/providers/facebook-auth.provider.d.ts

@@ -0,0 +1,19 @@
+import { BaseAuthProvider } from './base-auth.provider';
+import { DataSource } from 'typeorm';
+export declare class FacebookAuthProvider extends BaseAuthProvider {
+    readonly dataSource: DataSource;
+    providerName: string;
+    constructor(dataSource: DataSource);
+    validate(credentials: {
+        accessToken: string;
+    }): Promise<{
+        userId: any;
+        email: any;
+        metadata: {
+            name: any;
+            picture: any;
+        };
+    }>;
+    getRequiredFields(): string[];
+}
+//# sourceMappingURL=facebook-auth.provider.d.ts.map

package/src/lib/core/providers/facebook-auth.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook-auth.provider.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/providers/facebook-auth.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAKrC,qBACa,oBAAqB,SAAQ,gBAAgB;IAIlD,QAAQ,CAAC,UAAU,EAAE,UAAU;IAHnC,YAAY,SAA0B;gBAGzB,UAAU,EAAE,UAAU;IAkB7B,QAAQ,CAAC,WAAW,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE;;;;;;;;IAoBnD,iBAAiB,IAAI,MAAM,EAAE;CAGhC"}

package/src/lib/core/providers/facebook-auth.provider.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FacebookAuthProvider = void 0;
+const tslib_1 = require("tslib");
+const fb_1 = tslib_1.__importDefault(require("fb"));
+const base_auth_provider_1 = require("./base-auth.provider");
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("typeorm");
+const auth_constants_1 = require("../../auth.constants");
+const user_entity_1 = require("../../user/entities/user.entity");
+const identity_entity_1 = require("../../user/entities/identity.entity");
+let FacebookAuthProvider = class FacebookAuthProvider extends base_auth_provider_1.BaseAuthProvider {
+    constructor(dataSource) {
+        const userRepository = dataSource.getRepository(user_entity_1.NestAuthUser);
+        const authIdentityRepository = dataSource.getRepository(identity_entity_1.NestAuthIdentity);
+        super(userRepository, authIdentityRepository);
+        this.dataSource = dataSource;
+        this.providerName = auth_constants_1.FACEBOOK_AUTH_PROVIDER;
+        const facebookConfig = this.options.facebook;
+        this.enabled = Boolean(facebookConfig);
+        if (this.enabled) {
+            fb_1.default.options({
+                appId: facebookConfig.appId,
+                appSecret: facebookConfig.appSecret,
+            });
+        }
+    }
+    async validate(credentials) {
+        try {
+            const response = await fb_1.default.api('me', {
+                fields: ['id', 'email', 'name', 'picture'],
+                access_token: credentials.accessToken,
+            });
+            return {
+                userId: response.id,
+                email: response.email || '',
+                metadata: {
+                    name: response.name,
+                    picture: response.picture?.data?.url,
+                },
+            };
+        }
+        catch (error) {
+            throw new common_1.UnauthorizedException('Invalid Facebook token');
+        }
+    }
+    getRequiredFields() {
+        return ['accessToken'];
+    }
+};
+exports.FacebookAuthProvider = FacebookAuthProvider;
+exports.FacebookAuthProvider = FacebookAuthProvider = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [typeorm_1.DataSource])
+], FacebookAuthProvider);

package/src/lib/core/providers/github-auth.provider.d.ts

@@ -0,0 +1,24 @@
+import { BaseAuthProvider } from './base-auth.provider';
+import { DataSource } from 'typeorm';
+export declare class GitHubAuthProvider extends BaseAuthProvider {
+    readonly dataSource: DataSource;
+    providerName: string;
+    private githubConfig;
+    constructor(dataSource: DataSource);
+    validate(credentials: {
+        accessToken: string;
+    }): Promise<{
+        userId: any;
+        email: any;
+        metadata: {
+            name: any;
+            login: any;
+            avatar: any;
+            bio: any;
+            company: any;
+            location: any;
+        };
+    }>;
+    getRequiredFields(): string[];
+}
+//# sourceMappingURL=github-auth.provider.d.ts.map

package/src/lib/core/providers/github-auth.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-auth.provider.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/providers/github-auth.provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAMrC,qBACa,kBAAmB,SAAQ,gBAAgB;IAKhD,QAAQ,CAAC,UAAU,EAAE,UAAU;IAJnC,YAAY,SAAwB;IACpC,OAAO,CAAC,YAAY,CAA8B;gBAGrC,UAAU,EAAE,UAAU;IAW7B,QAAQ,CAAC,WAAW,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;IAkDnD,iBAAiB,IAAI,MAAM,EAAE;CAGhC"}

package/src/lib/core/providers/{github-auth.provider.ts → github-auth.provider.js}

@@ -1,29 +1,24 @@
-import { BaseAuthProvider } from './base-auth.provider';
-import { Injectable, UnauthorizedException } from '@nestjs/common';
-import { DataSource } from 'typeorm';
-import { GITHUB_AUTH_PROVIDER } from '../../auth.constants';
-import { NestAuthUser } from '../../user/entities/user.entity';
-import { NestAuthIdentity } from '../../user/entities/identity.entity';
-import { AuthModuleOptions } from '../interfaces/auth-module-options.interface';
-
-@Injectable()
-export class GitHubAuthProvider extends BaseAuthProvider {
-    providerName = GITHUB_AUTH_PROVIDER;
-    private githubConfig: AuthModuleOptions['github'];
-
-    constructor(
-        readonly dataSource: DataSource,
-    ) {
-        const userRepository = dataSource.getRepository(NestAuthUser);
-        const authIdentityRepository = dataSource.getRepository(NestAuthIdentity);
-
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GitHubAuthProvider = void 0;
+const tslib_1 = require("tslib");
+const base_auth_provider_1 = require("./base-auth.provider");
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("typeorm");
+const auth_constants_1 = require("../../auth.constants");
+const user_entity_1 = require("../../user/entities/user.entity");
+const identity_entity_1 = require("../../user/entities/identity.entity");
+let GitHubAuthProvider = class GitHubAuthProvider extends base_auth_provider_1.BaseAuthProvider {
+    constructor(dataSource) {
+        const userRepository = dataSource.getRepository(user_entity_1.NestAuthUser);
+        const authIdentityRepository = dataSource.getRepository(identity_entity_1.NestAuthIdentity);
         super(userRepository, authIdentityRepository);
-
+        this.dataSource = dataSource;
+        this.providerName = auth_constants_1.GITHUB_AUTH_PROVIDER;
         this.githubConfig = this.options.github;
         this.enabled = Boolean(this.githubConfig);
     }
-
-    async validate(credentials: { accessToken: string }) {
+    async validate(credentials) {
         try {
             // Fetch user info from GitHub API
             const userResponse = await fetch('https://api.github.com/user', {
@@ -32,13 +27,10 @@ export class GitHubAuthProvider extends BaseAuthProvider {
                     Accept: 'application/vnd.github.v3+json',
                 },
             });
-
             if (!userResponse.ok) {
-                throw new UnauthorizedException('Invalid GitHub token');
+                throw new common_1.UnauthorizedException('Invalid GitHub token');
             }
-
-            const userData: any = await userResponse.json();
-
+            const userData = await userResponse.json();
             // Fetch user emails (in case email is private in profile)
             let email = userData.email;
             if (!email) {
@@ -48,14 +40,12 @@ export class GitHubAuthProvider extends BaseAuthProvider {
                         Accept: 'application/vnd.github.v3+json',
                     },
                 });
-
                 if (emailsResponse.ok) {
-                    const emails: any = await emailsResponse.json();
-                    const primaryEmail = emails.find((e: any) => e.primary) || emails[0];
+                    const emails = await emailsResponse.json();
+                    const primaryEmail = emails.find((e) => e.primary) || emails[0];
                     email = primaryEmail?.email || '';
                 }
             }
-
             return {
                 userId: userData.id.toString(),
                 email: email || '',
@@ -68,12 +58,17 @@ export class GitHubAuthProvider extends BaseAuthProvider {
                     location: userData.location,
                 },
             };
-        } catch (error) {
-            throw new UnauthorizedException('Invalid GitHub token');
+        }
+        catch (error) {
+            throw new common_1.UnauthorizedException('Invalid GitHub token');
         }
     }
-
-    getRequiredFields(): string[] {
+    getRequiredFields() {
         return ['accessToken'];
     }
-}
+};
+exports.GitHubAuthProvider = GitHubAuthProvider;
+exports.GitHubAuthProvider = GitHubAuthProvider = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [typeorm_1.DataSource])
+], GitHubAuthProvider);

package/src/lib/core/providers/google-auth.provider.d.ts

@@ -0,0 +1,22 @@
+import { BaseAuthProvider } from './base-auth.provider';
+import { DataSource } from 'typeorm';
+export declare class GoogleAuthProvider extends BaseAuthProvider {
+    readonly dataSource: DataSource;
+    providerName: string;
+    private client;
+    private googleConfig;
+    constructor(dataSource: DataSource);
+    validate(credentials: {
+        accessToken: string;
+    }): Promise<{
+        userId: string;
+        email: string;
+        metadata: {
+            name: string;
+            picture: string;
+            locale: string;
+        };
+    }>;
+    getRequiredFields(): string[];
+}
+//# sourceMappingURL=google-auth.provider.d.ts.map

package/src/lib/core/providers/google-auth.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-auth.provider.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/providers/google-auth.provider.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAGxD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAIrC,qBACa,kBAAmB,SAAQ,gBAAgB;IAMhD,QAAQ,CAAC,UAAU,EAAE,UAAU;IALnC,YAAY,SAAwB;IACpC,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,YAAY,CAA8B;gBAGrC,UAAU,EAAE,UAAU;IAe7B,QAAQ,CAAC,WAAW,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE;;;;;;;;;IA0BnD,iBAAiB,IAAI,MAAM,EAAE;CAGhC"}

package/src/lib/core/providers/google-auth.provider.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GoogleAuthProvider = void 0;
+const tslib_1 = require("tslib");
+const google_auth_library_1 = require("google-auth-library");
+const common_1 = require("@nestjs/common");
+const base_auth_provider_1 = require("./base-auth.provider");
+const auth_constants_1 = require("../../auth.constants");
+const typeorm_1 = require("typeorm");
+const user_entity_1 = require("../../user/entities/user.entity");
+const identity_entity_1 = require("../../user/entities/identity.entity");
+let GoogleAuthProvider = class GoogleAuthProvider extends base_auth_provider_1.BaseAuthProvider {
+    constructor(dataSource) {
+        const userRepository = dataSource.getRepository(user_entity_1.NestAuthUser);
+        const authIdentityRepository = dataSource.getRepository(identity_entity_1.NestAuthIdentity);
+        super(userRepository, authIdentityRepository);
+        this.dataSource = dataSource;
+        this.providerName = auth_constants_1.GOOGLE_AUTH_PROVIDER;
+        this.googleConfig = this.options.google;
+        this.enabled = Boolean(this.googleConfig);
+        if (this.enabled) {
+            this.client = new google_auth_library_1.OAuth2Client(this.googleConfig.clientId, this.googleConfig.clientSecret);
+        }
+    }
+    async validate(credentials) {
+        try {
+            const ticket = await this.client.verifyIdToken({
+                idToken: credentials.accessToken,
+                audience: this.googleConfig.clientId,
+            });
+            const payload = ticket.getPayload();
+            if (!payload) {
+                throw new common_1.UnauthorizedException('Invalid Google token');
+            }
+            return {
+                userId: payload.sub,
+                email: payload.email || '',
+                metadata: {
+                    name: payload.name,
+                    picture: payload.picture,
+                    locale: payload.locale,
+                },
+            };
+        }
+        catch (error) {
+            throw new common_1.UnauthorizedException('Invalid Google token');
+        }
+    }
+    getRequiredFields() {
+        return ['accessToken'];
+    }
+};
+exports.GoogleAuthProvider = GoogleAuthProvider;
+exports.GoogleAuthProvider = GoogleAuthProvider = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [typeorm_1.DataSource])
+], GoogleAuthProvider);

package/src/lib/core/providers/jwt-auth.provider.d.ts

@@ -0,0 +1,34 @@
+import { BaseAuthProvider } from './base-auth.provider';
+import { DataSource } from 'typeorm';
+import { JwtService } from '../services/jwt.service';
+export declare class JwtAuthProvider extends BaseAuthProvider {
+    readonly dataSource: DataSource;
+    private readonly jwtService;
+    providerName: string;
+    private jwtConfig;
+    constructor(dataSource: DataSource, jwtService: JwtService);
+    validate(credentials: {
+        accessToken: string;
+    }): Promise<{
+        userId: string;
+        email: string;
+        phone: string;
+        metadata: {
+            id?: string;
+            sub?: string;
+            email?: string;
+            phone?: string;
+            isVerified?: boolean;
+            roles?: Partial<import("../../core").NestAuthRole>[];
+            tenantId?: string;
+            isMfaEnabled?: boolean;
+            isMfaVerified?: boolean;
+            sessionId?: string;
+            type?: "access" | "refresh";
+            exp?: number;
+            iat?: number;
+        };
+    }>;
+    getRequiredFields(): string[];
+}
+//# sourceMappingURL=jwt-auth.provider.d.ts.map