@ackplus/nest-auth 1.1.0 → 1.1.2

package/src/lib/auth/controllers/mfa.controller.ts

@@ -1,200 +0,0 @@
-import { Controller, Post, Body, UnauthorizedException, UseGuards, HttpCode, Get, Delete, Param } from '@nestjs/common';
-import { SkipMfa, MessageResponseDto, MFAMethodEnum, NestAuthUser } from '../../core';
-import { MfaService } from '../services/mfa.service';
-import { RequestContext } from '../../request-context/request-context';
-import { SendMfaCodeRequestDto } from '../dto/requests/send-mfa-code.request.dto';
-import { VerifyTotpSetupRequestDto } from '../dto/requests/verify-totp-setup.request.dto';
-import { ApiOperation, ApiResponse } from '@nestjs/swagger';
-import { INVALID_MFA_EXCEPTION_CODE, USER_NOT_FOUND_EXCEPTION_CODE } from '../../auth.constants';
-import { NestAuthAuthGuard } from '../guards/auth.guard';
-import { ToggleMfaRequestDto } from '../dto/requests/toggle-mfa.request.dto';
-import { MfaStatusResponseDto, MfaDeviceDto } from '../dto/responses/mfa-status.response.dto';
-import { AuthConfigService } from '../../core/services/auth-config.service';
-
-@Controller('auth/mfa')
-export class MfaController {
-    constructor(
-        private readonly mfaService: MfaService,
-        private readonly authConfig: AuthConfigService,
-    ) { }
-
-    private getCurrentUserOrThrow() {
-        const user = RequestContext.currentUser();
-        if (!user) {
-            throw new UnauthorizedException('User not found');
-        }
-        return user;
-    }
-
-    @ApiOperation({ summary: 'Get MFA status for the current user' })
-    @ApiResponse({ status: 200, type: MfaStatusResponseDto })
-    @HttpCode(200)
-    @Get('status')
-    @SkipMfa()
-    @UseGuards(NestAuthAuthGuard)
-    async getStatus(): Promise<MfaStatusResponseDto> {
-        const user = this.getCurrentUserOrThrow();
-
-        const config = this.mfaService.mfaConfig;
-        const globallyEnabled = config?.enabled ?? false;
-
-        let enabledMethods: MFAMethodEnum[] = [];
-        let totpDevices: MfaDeviceDto[] = [];
-        let hasRecoveryCode = false;
-        let isEnabled = false;
-
-        if (globallyEnabled) {
-            [enabledMethods, totpDevices, hasRecoveryCode, isEnabled] = await Promise.all([
-                this.mfaService.getEnabledMethods(user.id),
-                this.mfaService.getTotpDevices(user.id),
-                this.mfaService.hasRecoveryCode(user.id),
-                this.mfaService.isMfaEnabled(user.id),
-            ]);
-        }
-
-        return {
-            isEnabled,
-            enabledMethods,
-            availableMethods: this.mfaService.getAvailableMethods(),
-            allowUserToggle: config?.allowUserToggle ?? false,
-            allowMethodSelection: config?.allowMethodSelection ?? false,
-            totpDevices,
-            hasRecoveryCode,
-        };
-    }
-
-    @ApiOperation({ summary: 'Enable or disable MFA for the current user' })
-    @ApiResponse({ status: 200, type: MessageResponseDto })
-    @HttpCode(200)
-    @Post('toggle')
-    @SkipMfa()
-    @UseGuards(NestAuthAuthGuard)
-    async toggleMfa(@Body() input: ToggleMfaRequestDto): Promise<MessageResponseDto> {
-        const user = this.getCurrentUserOrThrow();
-
-        this.mfaService.requireMfaEnabledForApp(true);
-
-        if (input.enabled) {
-            await this.mfaService.enableMFA(user.id);
-            return { message: 'MFA enabled successfully' };
-        }
-
-        await this.mfaService.disableMFA(user.id);
-        return { message: 'MFA disabled successfully' };
-    }
-
-    @ApiOperation({ summary: 'List registered MFA devices' })
-    @ApiResponse({ status: 200, type: [MfaDeviceDto] })
-    @HttpCode(200)
-    @Get('devices')
-    @SkipMfa()
-    @UseGuards(NestAuthAuthGuard)
-    async listDevices(): Promise<MfaDeviceDto[]> {
-        const user = this.getCurrentUserOrThrow();
-
-        this.mfaService.requireMfaEnabledForApp(true);
-        return await this.mfaService.getTotpDevices(user.id);
-    }
-
-    @ApiOperation({ summary: 'Remove a registered MFA device' })
-    @ApiResponse({ status: 200, type: MessageResponseDto })
-    @HttpCode(200)
-    @Delete('devices/:deviceId')
-    @SkipMfa()
-    @UseGuards(NestAuthAuthGuard)
-    async removeDevice(@Param('deviceId') deviceId: string): Promise<MessageResponseDto> {
-        const user = this.getCurrentUserOrThrow();
-
-        this.mfaService.requireMfaEnabledForApp(true);
-        await this.mfaService.removeTotpDevice(deviceId);
-        return { message: 'MFA device removed successfully' };
-    }
-
-    @ApiOperation({ summary: 'Send MFA Code' })
-    @ApiResponse({ status: 200, type: MessageResponseDto })
-    @HttpCode(200)
-    @Post('send-mfa-code')
-    @SkipMfa()
-    @UseGuards(NestAuthAuthGuard)
-    async sendMfaCode(@Body() input: SendMfaCodeRequestDto) {
-        const user = this.getCurrentUserOrThrow();
-
-        await this.mfaService.sendMfaCode(user.id, input.method);
-
-        return { message: 'MFA code sent' };
-    }
-
-    // These routes skip MFA verification
-    @ApiOperation({ summary: 'Setup TOTP Device' })
-    @ApiResponse({ status: 200, type: MessageResponseDto })
-    @HttpCode(200)
-    @Post('setup-totp')
-    @SkipMfa()
-    @UseGuards(NestAuthAuthGuard)
-    async setupTotp() {
-        const user = this.getCurrentUserOrThrow();
-
-        const config = this.authConfig.getConfig();
-
-        // Get app name from config, fallback to default
-        const appName = config.appName;
-
-        // Get user email - try from JWT token first, then from database
-        let userEmail = user.email;
-        if (!userEmail) {
-            const fullUser = await NestAuthUser.findOne({ where: { id: user.id } });
-            userEmail = fullUser?.email || 'User';
-        }
-
-        // Generate meaningful device name: {APP_NAME} : {email}
-        const deviceName = `${appName} : ${userEmail}`;
-
-        const { secret, qrCode } = await this.mfaService.setupTotpDevice(user.id, deviceName);
-        return { secret, qrCode };
-    }
-
-    @ApiOperation({ summary: 'Verify TOTP Setup' })
-    @ApiResponse({ status: 200, type: MessageResponseDto })
-    @HttpCode(200)
-    @Post('verify-totp-setup')
-    @SkipMfa()
-    @UseGuards(NestAuthAuthGuard)
-    async verifyTotpSetup(@Body() input: VerifyTotpSetupRequestDto) {
-        const user = this.getCurrentUserOrThrow();
-
-        const isVerified = await this.mfaService.verifyTotpSetup(user.id, input.secret, input.otp);
-        if (!isVerified) {
-            throw new UnauthorizedException({
-                message: 'Invalid OTP',
-                code: INVALID_MFA_EXCEPTION_CODE
-            });
-        }
-        return { message: 'Device setup successfully' };
-    }
-
-    @ApiOperation({ summary: 'Generate Recovery Codes' })
-    @ApiResponse({ status: 200, type: MessageResponseDto })
-    @HttpCode(200)
-    @Post('generate-recovery-code')
-    @SkipMfa()
-    @UseGuards(NestAuthAuthGuard)
-    async generateRecoveryCodes() {
-        const user = this.getCurrentUserOrThrow();
-
-        // Generate recovery codes
-        const code = await this.mfaService.generateRecoveryCode(user.id);
-        return { code };
-    }
-
-    @ApiOperation({ summary: 'Reset TOTP Device' })
-    @ApiResponse({ status: 200, type: MessageResponseDto })
-    @HttpCode(200)
-    @Post('reset-totp')
-    @SkipMfa()
-    @UseGuards(NestAuthAuthGuard)
-    async resetTotp(@Body('code') code: string) {
-        const user = this.getCurrentUserOrThrow();
-        await this.mfaService.resetMfa(user.id, code);
-        return { message: 'MFA reset successfully' };
-    }
-}

package/src/lib/auth/dto/credentials/email-credentials.dto.ts

@@ -1,24 +0,0 @@
-import { ApiProperty } from '@nestjs/swagger';
-import { IsEmail, IsString, IsNotEmpty } from 'class-validator';
-
-/**
- * Email-based login credentials
- */
-export class EmailCredentialsDto {
-    @ApiProperty({
-        description: 'User email address',
-        example: 'user@example.com',
-    })
-    @IsEmail()
-    @IsNotEmpty()
-    email: string;
-
-    @ApiProperty({
-        description: 'User password',
-        example: 'SecurePass123!',
-        minLength: 8,
-    })
-    @IsString()
-    @IsNotEmpty()
-    password: string;
-}

package/src/lib/auth/dto/credentials/phone-credentials.dto.ts

@@ -1,24 +0,0 @@
-import { ApiProperty } from '@nestjs/swagger';
-import { IsString, IsNotEmpty, IsPhoneNumber } from 'class-validator';
-
-/**
- * Phone-based login credentials
- */
-export class PhoneCredentialsDto {
-    @ApiProperty({
-        description: 'User phone number',
-        example: '+1234567890',
-    })
-    @IsPhoneNumber()
-    @IsNotEmpty()
-    phone: string;
-
-    @ApiProperty({
-        description: 'User password',
-        example: 'SecurePass123!',
-        minLength: 8,
-    })
-    @IsString()
-    @IsNotEmpty()
-    password: string;
-}

package/src/lib/auth/dto/credentials/social-credentials.dto.ts

@@ -1,15 +0,0 @@
-import { ApiProperty } from '@nestjs/swagger';
-import { IsString, IsNotEmpty } from 'class-validator';
-
-/**
- * Social login credentials (Google, Facebook, Apple, GitHub)
- */
-export class SocialCredentialsDto {
-    @ApiProperty({
-        description: 'OAuth token or ID token from social provider',
-        example: 'ya29.a0AfH6SMBx1234567890abcdefghijklmnop',
-    })
-    @IsString()
-    @IsNotEmpty()
-    accessToken: string;
-}

package/src/lib/auth/dto/index.ts

@@ -1 +0,0 @@
- 

package/src/lib/auth/dto/requests/change-password.request.dto.ts

@@ -1,34 +0,0 @@
-import { ApiProperty } from '@nestjs/swagger';
-import { IsString, MinLength, Validate, ValidatorConstraint, ValidatorConstraintInterface, ValidationArguments } from 'class-validator';
-
-@ValidatorConstraint({ name: 'passwordNotSameAsCurrent', async: false })
-class PasswordNotSameAsCurrent implements ValidatorConstraintInterface {
-    validate(newPassword: string, args: ValidationArguments) {
-        const obj = args.object as any;
-        return typeof newPassword === 'string' && newPassword !== obj.currentPassword;
-    }
-    defaultMessage(_args: ValidationArguments) {
-        return 'New password must be different from the current password';
-    }
-}
-
-export class ChangePasswordRequestDto {
-    @ApiProperty({
-        description: 'Current password',
-        example: 'DemoOwner1!',
-        minLength: 8,
-    })
-    @IsString()
-    @MinLength(8)
-    currentPassword: string;
-
-    @ApiProperty({
-        description: 'New password',
-        example: 'DemoOwner1!New',
-        minLength: 8,
-    })
-    @IsString()
-    @MinLength(8)
-    @Validate(PasswordNotSameAsCurrent)
-    newPassword: string;
-}

package/src/lib/auth/dto/requests/forgot-password.request.dto.ts

@@ -1,30 +0,0 @@
-import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
-import { IsEmail, IsNotEmpty, IsPhoneNumber, ValidateIf, IsUUID, IsOptional } from 'class-validator';
-
-export class ForgotPasswordRequestDto {
-    @ApiPropertyOptional({
-        description: 'User email address (required if phone not provided)',
-        example: 'user@example.com',
-    })
-    @ValidateIf(o => !o.phone)
-    @IsEmail()
-    @IsNotEmpty()
-    email?: string;
-
-    @ApiPropertyOptional({
-        description: 'User phone number (required if email not provided)',
-        example: '+1234567890',
-    })
-    @ValidateIf(o => !o.email)
-    @IsPhoneNumber()
-    @IsNotEmpty()
-    phone?: string;
-
-    @ApiPropertyOptional({
-        description: 'Tenant ID for multi-tenant applications',
-        example: '123e4567-e89b-12d3-a456-426614174000',
-    })
-    @IsUUID()
-    @IsOptional()
-    tenantId?: string;
-}

package/src/lib/auth/dto/requests/initialize-admin.request.dto.ts

@@ -1,51 +0,0 @@
-import { IsEmail, IsNotEmpty, IsOptional, IsString, MinLength, Matches, IsObject } from 'class-validator';
-import { ApiProperty } from '@nestjs/swagger';
-
-export class InitializeAdminRequestDto {
-    @ApiProperty({
-        description: 'Super admin email address',
-        example: 'admin@example.com'
-    })
-    @IsEmail()
-    @IsNotEmpty()
-    email: string;
-
-    @ApiProperty({
-        description: 'Super admin password (minimum 8 characters, must contain uppercase, lowercase, number, and special character)',
-        example: 'SecurePassword123!',
-        minLength: 8
-    })
-    @IsString()
-    @IsNotEmpty()
-    @MinLength(8)
-    @Matches(
-        /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]+$/,
-        { message: 'Password must contain uppercase, lowercase, number, and special character' }
-    )
-    password: string;
-
-    @ApiProperty({
-        description: 'Secret key for authorization (provided in module configuration)',
-        example: 'your-secret-key'
-    })
-    @IsString()
-    @IsNotEmpty()
-    secretKey: string;
-
-    @ApiProperty({
-        description: 'Tenant ID (optional, uses default tenant if not provided)',
-        required: false
-    })
-    @IsOptional()
-    @IsString()
-    tenantId?: string;
-
-    @ApiProperty({
-        description: 'Additional metadata for the admin user (free-form object for storing firstName, lastName, department, etc.)',
-        required: false,
-        example: { firstName: 'Admin', lastName: 'User', department: 'IT' }
-    })
-    @IsOptional()
-    @IsObject()
-    metadata?: Record<string, any>;
-}

package/src/lib/auth/dto/requests/login.request.dto.ts

@@ -1,65 +0,0 @@
-import { IsString, IsUUID, IsOptional, IsObject, IsBoolean } from 'class-validator';
-import { ApiProperty, ApiPropertyOptional, ApiExtraModels, getSchemaPath } from '@nestjs/swagger';
-import { EmailCredentialsDto } from '../credentials/email-credentials.dto';
-import { PhoneCredentialsDto } from '../credentials/phone-credentials.dto';
-import { SocialCredentialsDto } from '../credentials/social-credentials.dto';
-
-/**
- * Login request DTO supporting multiple authentication providers
- */
-@ApiExtraModels(EmailCredentialsDto, PhoneCredentialsDto, SocialCredentialsDto)
-export class LoginRequestDto {
-
-    @ApiPropertyOptional({
-        description: 'Authentication provider name',
-        example: 'email',
-        enum: ['email', 'phone', 'google', 'facebook', 'apple', 'github'],
-        default: 'email',
-    })
-    @IsString()
-    @IsOptional()
-    providerName?: string;
-
-    @ApiProperty({
-        description: 'Login credentials - type varies by provider',
-        required: false,
-        examples: {
-            emailLogin: {
-                summary: 'Email Login',
-                value: { email: 'user@example.com', password: 'SecurePass123!' },
-            },
-            phoneLogin: {
-                summary: 'Phone Login',
-                value: { phone: '+1234567890', password: 'SecurePass123!' },
-            },
-            socialLogin: {
-                summary: 'Social Login (Google/Facebook/etc)',
-                value: { token: 'ya29.a0AfH6SMBx...' },
-            },
-        },
-        oneOf: [
-            { $ref: getSchemaPath(EmailCredentialsDto) },
-            { $ref: getSchemaPath(PhoneCredentialsDto) },
-            { $ref: getSchemaPath(SocialCredentialsDto) },
-        ],
-    })
-    @IsObject()
-    @IsOptional()
-    credentials?: EmailCredentialsDto | PhoneCredentialsDto | SocialCredentialsDto | Record<string, any>;
-
-    @ApiPropertyOptional({
-        description: 'Tenant ID for multi-tenant applications',
-        example: '123e4567-e89b-12d3-a456-426614174000',
-    })
-    @IsUUID()
-    @IsOptional()
-    tenantId?: string;
-
-    @ApiPropertyOptional({
-        description: 'Auto-create user if not exists (for social auth)',
-        default: false,
-    })
-    @IsBoolean()
-    @IsOptional()
-    createUserIfNotExists?: boolean;
-}

package/src/lib/auth/dto/requests/refresh-token.request.dto.ts

@@ -1,12 +0,0 @@
-import { ApiProperty } from '@nestjs/swagger';
-import { IsString, IsNotEmpty } from 'class-validator';
-
-export class RefreshTokenRequestDto {
-    @ApiProperty({
-        description: 'Refresh token to obtain new access token',
-        example: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiIxMjMiLCJ0eXBlIjoicmVmcmVzaCJ9.abc123',
-    })
-    @IsString()
-    @IsNotEmpty()
-    refreshToken: string;
-}

package/src/lib/auth/dto/requests/reset-password-with-token.request.dto.ts

@@ -1,22 +0,0 @@
-import { ApiProperty } from '@nestjs/swagger';
-import { IsNotEmpty, IsString, MinLength } from 'class-validator';
-
-export class ResetPasswordWithTokenRequestDto {
-    @ApiProperty({
-        description: 'Password reset token (JWT) received after OTP verification',
-        example: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0eXBlIjoicGFzc3dvcmQtcmVzZXQifQ.xyz',
-    })
-    @IsString()
-    @IsNotEmpty()
-    token: string;
-
-    @ApiProperty({
-        description: 'New password',
-        example: 'NewSecurePass123!',
-        minLength: 8,
-    })
-    @IsString()
-    @IsNotEmpty()
-    @MinLength(8)
-    newPassword: string;
-}

package/src/lib/auth/dto/requests/reset-password.request.dto.ts

@@ -1,50 +0,0 @@
-import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
-import { IsEmail, IsNotEmpty, IsPhoneNumber, IsString, ValidateIf, IsUUID, IsOptional, MinLength } from 'class-validator';
-
-export class ResetPasswordRequestDto {
-    @ApiPropertyOptional({
-        description: 'User email address (required if phone not provided)',
-        example: 'user@example.com',
-    })
-    @ValidateIf(o => !o.phone)
-    @IsEmail()
-    @IsNotEmpty()
-    email?: string;
-
-    @ApiPropertyOptional({
-        description: 'User phone number (required if email not provided)',
-        example: '+1234567890',
-    })
-    @ValidateIf(o => !o.email)
-    @IsPhoneNumber()
-    @IsNotEmpty()
-    phone?: string;
-
-    @ApiProperty({
-        description: 'One-time password (OTP) received via email or SMS',
-        example: '123456',
-        minLength: 6,
-        maxLength: 8,
-    })
-    @IsString()
-    @IsNotEmpty()
-    otp: string;
-
-    @ApiProperty({
-        description: 'New password',
-        example: 'NewSecurePass123!',
-        minLength: 8,
-    })
-    @IsString()
-    @IsNotEmpty()
-    @MinLength(8)
-    newPassword: string;
-
-    @ApiPropertyOptional({
-        description: 'Tenant ID for multi-tenant applications',
-        example: '123e4567-e89b-12d3-a456-426614174000',
-    })
-    @IsUUID()
-    @IsOptional()
-    tenantId?: string;
-}

package/src/lib/auth/dto/requests/send-email-verification.request.dto.ts

@@ -1,12 +0,0 @@
-import { ApiPropertyOptional } from '@nestjs/swagger';
-import { IsUUID, IsOptional } from 'class-validator';
-
-export class SendEmailVerificationRequestDto {
-    @ApiPropertyOptional({
-        description: 'Tenant ID for multi-tenant applications',
-        example: '123e4567-e89b-12d3-a456-426614174000',
-    })
-    @IsUUID()
-    @IsOptional()
-    tenantId?: string;
-}

package/src/lib/auth/dto/requests/send-mfa-code.request.dto.ts

@@ -1,19 +0,0 @@
-import { IsEnum } from "class-validator";
-import { MFAMethodEnum } from "../../../core";
-import { ApiProperty } from "@nestjs/swagger";
-
-export class SendMfaCodeRequestDto {
-    @ApiProperty({
-        description: 'MFA delivery method',
-        enum: MFAMethodEnum,
-        example: MFAMethodEnum.EMAIL,
-        enumName: 'MFAMethodEnum',
-        examples: {
-            email: { value: MFAMethodEnum.EMAIL, description: 'Send OTP via email' },
-            sms: { value: MFAMethodEnum.SMS, description: 'Send OTP via SMS' },
-            totp: { value: MFAMethodEnum.TOTP, description: 'Use authenticator app (TOTP)' },
-        },
-    })
-    @IsEnum(MFAMethodEnum)
-    method: MFAMethodEnum;
-}

package/src/lib/auth/dto/requests/signup.request.dto.ts

@@ -1,42 +0,0 @@
-import { IsEmail, IsString, IsOptional, IsNotEmpty, MinLength, ValidateIf } from 'class-validator';
-import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
-
-export class SignupRequestDto {
-    [x: string]: any;
-
-    @ApiPropertyOptional({
-        description: 'User email address (required if phone not provided)',
-        example: 'user@example.com',
-    })
-    @ValidateIf(o => !o.phone)
-    @IsEmail()
-    @IsNotEmpty()
-    email?: string;
-
-    @ApiPropertyOptional({
-        description: 'User phone number (required if email not provided)',
-        example: '+1234567890',
-    })
-    @ValidateIf(o => !o.email)
-    @IsString()
-    @IsNotEmpty()
-    phone?: string;
-
-    @ApiProperty({
-        description: 'User password',
-        example: 'SecurePass123!',
-        minLength: 8,
-    })
-    @IsString()
-    @IsNotEmpty()
-    @MinLength(8)
-    password: string;
-
-    @ApiPropertyOptional({
-        description: 'Tenant ID for multi-tenant applications',
-        example: '123e4567-e89b-12d3-a456-426614174000',
-    })
-    @IsString()
-    @IsOptional()
-    tenantId?: string;
-}

package/src/lib/auth/dto/requests/toggle-mfa.request.dto.ts

@@ -1,12 +0,0 @@
-import { ApiProperty } from '@nestjs/swagger';
-import { IsBoolean, IsDefined } from 'class-validator';
-
-export class ToggleMfaRequestDto {
-    @ApiProperty({
-        description: 'Whether MFA should be enabled for the current user',
-        example: true,
-    })
-    @IsDefined()
-    @IsBoolean()
-    enabled: boolean;
-}

package/src/lib/auth/dto/requests/verify-2fa.request.dto.ts

@@ -1,24 +0,0 @@
-import { IsEnum, IsString, IsNotEmpty } from "class-validator";
-import { MFAMethodEnum } from "../../../core";
-import { ApiProperty } from "@nestjs/swagger";
-
-export class Verify2faRequestDto {
-    @ApiProperty({
-        description: 'MFA method used',
-        enum: MFAMethodEnum,
-        example: MFAMethodEnum.TOTP,
-        enumName: 'MFAMethodEnum',
-    })
-    @IsEnum(MFAMethodEnum)
-    method: MFAMethodEnum;
-
-    @ApiProperty({
-        description: 'One-time password code',
-        example: '123456',
-        minLength: 6,
-        maxLength: 8,
-    })
-    @IsString()
-    @IsNotEmpty()
-    otp: string;
-}

package/src/lib/auth/dto/requests/verify-email.request.dto.ts

@@ -1,22 +0,0 @@
-import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
-import { IsString, IsNotEmpty, IsUUID, IsOptional } from 'class-validator';
-
-export class VerifyEmailRequestDto {
-    @ApiProperty({
-        description: 'One-time password code received via email',
-        example: '123456',
-        minLength: 6,
-        maxLength: 8,
-    })
-    @IsString()
-    @IsNotEmpty()
-    otp: string;
-
-    @ApiPropertyOptional({
-        description: 'Tenant ID for multi-tenant applications',
-        example: '123e4567-e89b-12d3-a456-426614174000',
-    })
-    @IsUUID()
-    @IsOptional()
-    tenantId?: string;
-}