@ackplus/nest-auth 1.1.1 → 1.1.5

package/src/lib/auth/dto/responses/mfa-status.response.dto.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MfaStatusResponseDto = exports.MfaDeviceDto = void 0;
+const tslib_1 = require("tslib");
+const swagger_1 = require("@nestjs/swagger");
+const core_1 = require("../../../core");
+class MfaDeviceDto {
+}
+exports.MfaDeviceDto = MfaDeviceDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Unique identifier of the MFA device',
+        example: '4b3c9c9c-9a9d-4d1e-8d9f-123456789abc',
+    }),
+    tslib_1.__metadata("design:type", String)
+], MfaDeviceDto.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Friendly name of the registered device',
+        example: 'Work laptop',
+    }),
+    tslib_1.__metadata("design:type", String)
+], MfaDeviceDto.prototype, "deviceName", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'MFA method this device supports',
+        enum: core_1.MFAMethodEnum,
+        example: core_1.MFAMethodEnum.TOTP,
+    }),
+    tslib_1.__metadata("design:type", String)
+], MfaDeviceDto.prototype, "method", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Timestamp of when the device was last used',
+        example: '2024-05-20T12:34:56.000Z',
+    }),
+    tslib_1.__metadata("design:type", Date)
+], MfaDeviceDto.prototype, "lastUsedAt", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Whether the device setup has been verified',
+        example: true,
+    }),
+    tslib_1.__metadata("design:type", Boolean)
+], MfaDeviceDto.prototype, "verified", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Timestamp of when the device was registered',
+        example: '2024-05-18T10:15:00.000Z',
+    }),
+    tslib_1.__metadata("design:type", Date)
+], MfaDeviceDto.prototype, "createdAt", void 0);
+class MfaStatusResponseDto {
+}
+exports.MfaStatusResponseDto = MfaStatusResponseDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Whether MFA is currently enabled for the user',
+        example: true,
+    }),
+    tslib_1.__metadata("design:type", Boolean)
+], MfaStatusResponseDto.prototype, "isEnabled", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'MFA methods currently active for the user',
+        enum: core_1.MFAMethodEnum,
+        isArray: true,
+        example: [core_1.MFAMethodEnum.EMAIL, core_1.MFAMethodEnum.TOTP],
+    }),
+    tslib_1.__metadata("design:type", Array)
+], MfaStatusResponseDto.prototype, "enabledMethods", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'All MFA methods available to the user based on backend configuration',
+        enum: core_1.MFAMethodEnum,
+        isArray: true,
+        example: [core_1.MFAMethodEnum.EMAIL, core_1.MFAMethodEnum.TOTP],
+    }),
+    tslib_1.__metadata("design:type", Array)
+], MfaStatusResponseDto.prototype, "availableMethods", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Indicates if MFA toggling is allowed for the user',
+        example: true,
+    }),
+    tslib_1.__metadata("design:type", Boolean)
+], MfaStatusResponseDto.prototype, "allowUserToggle", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Indicates if users can choose their preferred MFA method',
+        example: true,
+    }),
+    tslib_1.__metadata("design:type", Boolean)
+], MfaStatusResponseDto.prototype, "allowMethodSelection", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Registered TOTP devices for the user',
+        type: [MfaDeviceDto],
+    }),
+    tslib_1.__metadata("design:type", Array)
+], MfaStatusResponseDto.prototype, "totpDevices", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Whether a recovery code has been generated for the user',
+        example: false,
+    }),
+    tslib_1.__metadata("design:type", Boolean)
+], MfaStatusResponseDto.prototype, "hasRecoveryCode", void 0);

package/src/lib/auth/dto/responses/verify-otp.response.dto.d.ts

@@ -0,0 +1,5 @@
+export declare class VerifyOtpResponseDto {
+    message: string;
+    resetToken?: string;
+}
+//# sourceMappingURL=verify-otp.response.dto.d.ts.map

package/src/lib/auth/dto/responses/verify-otp.response.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-otp.response.dto.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/nest-auth/src/lib/auth/dto/responses/verify-otp.response.dto.ts"],"names":[],"mappings":"AAEA,qBAAa,oBAAoB;IAE7B,OAAO,EAAE,MAAM,CAAC;IAGhB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB"}

package/src/lib/auth/dto/responses/verify-otp.response.dto.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerifyOtpResponseDto = void 0;
+const tslib_1 = require("tslib");
+const swagger_1 = require("@nestjs/swagger");
+class VerifyOtpResponseDto {
+}
+exports.VerifyOtpResponseDto = VerifyOtpResponseDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Success message' }),
+    tslib_1.__metadata("design:type", String)
+], VerifyOtpResponseDto.prototype, "message", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Password reset token - use this to reset password', required: false }),
+    tslib_1.__metadata("design:type", String)
+], VerifyOtpResponseDto.prototype, "resetToken", void 0);

package/src/lib/auth/entities/mfa-secret.entity.d.ts

@@ -0,0 +1,13 @@
+import { NestAuthUser } from '../../user/entities/user.entity';
+export declare class NestAuthMFASecret {
+    id: string;
+    userId: string;
+    user: NestAuthUser;
+    secret: string;
+    verified: boolean;
+    deviceName: string;
+    lastUsedAt: Date;
+    createdAt: Date;
+    updatedAt: Date;
+}
+//# sourceMappingURL=mfa-secret.entity.d.ts.map

package/src/lib/auth/entities/mfa-secret.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa-secret.entity.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/entities/mfa-secret.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAE/D,qBACa,iBAAiB;IAE1B,EAAE,EAAE,MAAM,CAAC;IAGX,MAAM,EAAE,MAAM,CAAC;IAIf,IAAI,EAAE,YAAY,CAAC;IAGnB,MAAM,EAAE,MAAM,CAAC;IAGf,QAAQ,EAAE,OAAO,CAAC;IAGlB,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,IAAI,CAAC;IAGjB,SAAS,EAAE,IAAI,CAAC;IAGhB,SAAS,EAAE,IAAI,CAAC;CACnB"}

package/src/lib/auth/entities/mfa-secret.entity.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NestAuthMFASecret = void 0;
+const tslib_1 = require("tslib");
+const typeorm_1 = require("typeorm");
+const user_entity_1 = require("../../user/entities/user.entity");
+let NestAuthMFASecret = class NestAuthMFASecret {
+};
+exports.NestAuthMFASecret = NestAuthMFASecret;
+tslib_1.__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    tslib_1.__metadata("design:type", String)
+], NestAuthMFASecret.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    tslib_1.__metadata("design:type", String)
+], NestAuthMFASecret.prototype, "userId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.ManyToOne)(() => user_entity_1.NestAuthUser, user => user.mfaSecrets, { onDelete: 'CASCADE' }),
+    (0, typeorm_1.JoinColumn)({ name: 'userId' }),
+    tslib_1.__metadata("design:type", user_entity_1.NestAuthUser)
+], NestAuthMFASecret.prototype, "user", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    tslib_1.__metadata("design:type", String)
+], NestAuthMFASecret.prototype, "secret", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ default: false }),
+    tslib_1.__metadata("design:type", Boolean)
+], NestAuthMFASecret.prototype, "verified", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], NestAuthMFASecret.prototype, "deviceName", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    tslib_1.__metadata("design:type", Date)
+], NestAuthMFASecret.prototype, "lastUsedAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.CreateDateColumn)(),
+    tslib_1.__metadata("design:type", Date)
+], NestAuthMFASecret.prototype, "createdAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.UpdateDateColumn)(),
+    tslib_1.__metadata("design:type", Date)
+], NestAuthMFASecret.prototype, "updatedAt", void 0);
+exports.NestAuthMFASecret = NestAuthMFASecret = tslib_1.__decorate([
+    (0, typeorm_1.Entity)('nest_auth_mfa_secrets')
+], NestAuthMFASecret);

package/src/lib/auth/entities/otp.entity.d.ts

@@ -0,0 +1,14 @@
+import { NestAuthUser } from '../../user/entities/user.entity';
+import { OTPTypeEnum } from '../../core/interfaces/otp.interface';
+export declare class NestAuthOTP {
+    id: string;
+    userId: string;
+    code: string;
+    type: OTPTypeEnum;
+    expiresAt: Date;
+    used: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+    user: NestAuthUser;
+}
+//# sourceMappingURL=otp.entity.d.ts.map

package/src/lib/auth/entities/otp.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp.entity.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/entities/otp.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAElE,qBACa,WAAW;IAEpB,EAAE,EAAE,MAAM,CAAC;IAGX,MAAM,EAAE,MAAM,CAAC;IAGf,IAAI,EAAE,MAAM,CAAC;IAGb,IAAI,EAAE,WAAW,CAAC;IAGlB,SAAS,EAAE,IAAI,CAAC;IAGhB,IAAI,EAAE,OAAO,CAAC;IAGd,SAAS,EAAE,IAAI,CAAC;IAGhB,SAAS,EAAE,IAAI,CAAC;IAGhB,IAAI,EAAE,YAAY,CAAC;CACtB"}

package/src/lib/auth/entities/otp.entity.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NestAuthOTP = void 0;
+const tslib_1 = require("tslib");
+const typeorm_1 = require("typeorm");
+const user_entity_1 = require("../../user/entities/user.entity");
+const otp_interface_1 = require("../../core/interfaces/otp.interface");
+let NestAuthOTP = class NestAuthOTP {
+};
+exports.NestAuthOTP = NestAuthOTP;
+tslib_1.__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    tslib_1.__metadata("design:type", String)
+], NestAuthOTP.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    tslib_1.__metadata("design:type", String)
+], NestAuthOTP.prototype, "userId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    tslib_1.__metadata("design:type", String)
+], NestAuthOTP.prototype, "code", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    tslib_1.__metadata("design:type", String)
+], NestAuthOTP.prototype, "type", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    tslib_1.__metadata("design:type", Date)
+], NestAuthOTP.prototype, "expiresAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ default: false }),
+    tslib_1.__metadata("design:type", Boolean)
+], NestAuthOTP.prototype, "used", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.CreateDateColumn)(),
+    tslib_1.__metadata("design:type", Date)
+], NestAuthOTP.prototype, "createdAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.UpdateDateColumn)(),
+    tslib_1.__metadata("design:type", Date)
+], NestAuthOTP.prototype, "updatedAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.ManyToOne)(() => user_entity_1.NestAuthUser, user => user.otps, { onDelete: 'CASCADE' }),
+    tslib_1.__metadata("design:type", user_entity_1.NestAuthUser)
+], NestAuthOTP.prototype, "user", void 0);
+exports.NestAuthOTP = NestAuthOTP = tslib_1.__decorate([
+    (0, typeorm_1.Entity)('nest_auth_otps')
+], NestAuthOTP);

package/src/lib/auth/events/{logged-out-all.event.ts → logged-out-all.event.d.ts}

@@ -1,6 +1,5 @@
 import { SessionPayload } from "../../core";
 import { NestAuthUser } from "../../user/entities/user.entity";
-
 export interface LoggedOutAllEventPayload {
     user: NestAuthUser;
     tenantId?: string;
@@ -10,9 +9,8 @@ export interface LoggedOutAllEventPayload {
     reason?: string;
     currentSessionId?: string;
 }
-
-export class LoggedOutAllEvent {
-    constructor(
-        public readonly payload: LoggedOutAllEventPayload,
-    ) { }
+export declare class LoggedOutAllEvent {
+    readonly payload: LoggedOutAllEventPayload;
+    constructor(payload: LoggedOutAllEventPayload);
 }
+//# sourceMappingURL=logged-out-all.event.d.ts.map

package/src/lib/auth/events/logged-out-all.event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logged-out-all.event.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/events/logged-out-all.event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAE/D,MAAM,WAAW,wBAAwB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,qBAAa,iBAAiB;aAEN,OAAO,EAAE,wBAAwB;gBAAjC,OAAO,EAAE,wBAAwB;CAExD"}

package/src/lib/auth/events/logged-out-all.event.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoggedOutAllEvent = void 0;
+class LoggedOutAllEvent {
+    constructor(payload) {
+        this.payload = payload;
+    }
+}
+exports.LoggedOutAllEvent = LoggedOutAllEvent;

package/src/lib/auth/events/{logged-out.event.ts → logged-out.event.d.ts}

@@ -7,9 +7,8 @@ export interface LoggedOutEventPayload {
     logoutType: 'user' | 'admin' | 'system';
     reason?: string;
 }
-
-export class LoggedOutEvent {
-    constructor(
-        public readonly payload: LoggedOutEventPayload,
-    ) { }
+export declare class LoggedOutEvent {
+    readonly payload: LoggedOutEventPayload;
+    constructor(payload: LoggedOutEventPayload);
 }
+//# sourceMappingURL=logged-out.event.d.ts.map

package/src/lib/auth/events/logged-out.event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logged-out.event.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/events/logged-out.event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,MAAM,WAAW,qBAAqB;IAClC,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,cAAc;aAEH,OAAO,EAAE,qBAAqB;gBAA9B,OAAO,EAAE,qBAAqB;CAErD"}

package/src/lib/auth/events/logged-out.event.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoggedOutEvent = void 0;
+class LoggedOutEvent {
+    constructor(payload) {
+        this.payload = payload;
+    }
+}
+exports.LoggedOutEvent = LoggedOutEvent;

package/src/lib/auth/events/{password-reset-requested.event.ts → password-reset-requested.event.d.ts}

@@ -2,7 +2,6 @@ import { NestAuthUser } from "../../user/entities/user.entity";
 import { ForgotPasswordRequestDto } from "../dto/requests/forgot-password.request.dto";
 import { BaseAuthProvider } from "../../core/providers/base-auth.provider";
 import { NestAuthOTP } from "../entities/otp.entity";
-
 export interface PasswordResetRequestedEventPayload {
     user: NestAuthUser;
     tenantId?: string;
@@ -10,9 +9,8 @@ export interface PasswordResetRequestedEventPayload {
     otp: NestAuthOTP;
     provider: BaseAuthProvider;
 }
-
-export class PasswordResetRequestedEvent {
-    constructor(
-        public readonly payload: PasswordResetRequestedEventPayload,
-    ) { }
+export declare class PasswordResetRequestedEvent {
+    readonly payload: PasswordResetRequestedEventPayload;
+    constructor(payload: PasswordResetRequestedEventPayload);
 }
+//# sourceMappingURL=password-reset-requested.event.d.ts.map

package/src/lib/auth/events/password-reset-requested.event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset-requested.event.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/events/password-reset-requested.event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,WAAW,kCAAkC;IAC/C,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,wBAAwB,CAAC;IAChC,GAAG,EAAE,WAAW,CAAC;IACjB,QAAQ,EAAE,gBAAgB,CAAC;CAC9B;AAED,qBAAa,2BAA2B;aAEhB,OAAO,EAAE,kCAAkC;gBAA3C,OAAO,EAAE,kCAAkC;CAElE"}

package/src/lib/auth/events/password-reset-requested.event.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasswordResetRequestedEvent = void 0;
+class PasswordResetRequestedEvent {
+    constructor(payload) {
+        this.payload = payload;
+    }
+}
+exports.PasswordResetRequestedEvent = PasswordResetRequestedEvent;

package/src/lib/auth/events/{password-reset.event.ts → password-reset.event.d.ts}

@@ -1,14 +1,12 @@
 import { NestAuthUser } from "../../user/entities/user.entity";
 import { ResetPasswordRequestDto } from "../dto/requests/reset-password.request.dto";
-
 export interface PasswordResetEventPayload {
     user: NestAuthUser;
     tenantId?: string;
     input: ResetPasswordRequestDto;
 }
-
-export class PasswordResetEvent {
-    constructor(
-        public readonly payload: PasswordResetEventPayload,
-    ) { }
+export declare class PasswordResetEvent {
+    readonly payload: PasswordResetEventPayload;
+    constructor(payload: PasswordResetEventPayload);
 }
+//# sourceMappingURL=password-reset.event.d.ts.map

package/src/lib/auth/events/password-reset.event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset.event.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/events/password-reset.event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,MAAM,WAAW,yBAAyB;IACtC,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,uBAAuB,CAAC;CAClC;AAED,qBAAa,kBAAkB;aAEP,OAAO,EAAE,yBAAyB;gBAAlC,OAAO,EAAE,yBAAyB;CAEzD"}

package/src/lib/auth/events/password-reset.event.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasswordResetEvent = void 0;
+class PasswordResetEvent {
+    constructor(payload) {
+        this.payload = payload;
+    }
+}
+exports.PasswordResetEvent = PasswordResetEvent;

package/src/lib/auth/events/{user-2fa-verified.event.ts → user-2fa-verified.event.d.ts}

@@ -2,7 +2,6 @@ import { NestAuthUser } from "../../user/entities/user.entity";
 import { Verify2faRequestDto } from "../dto/requests/verify-2fa.request.dto";
 import { SessionPayload } from "../../core";
 import { AuthTokensResponseDto } from "../dto/responses/auth.response.dto";
-
 export interface User2faVerifiedEventPayload {
     user: NestAuthUser;
     tenantId?: string;
@@ -10,9 +9,8 @@ export interface User2faVerifiedEventPayload {
     session: SessionPayload;
     tokens: AuthTokensResponseDto;
 }
-
-export class User2faVerifiedEvent {
-    constructor(
-        public readonly payload: User2faVerifiedEventPayload,
-    ) { }
+export declare class User2faVerifiedEvent {
+    readonly payload: User2faVerifiedEventPayload;
+    constructor(payload: User2faVerifiedEventPayload);
 }
+//# sourceMappingURL=user-2fa-verified.event.d.ts.map

package/src/lib/auth/events/user-2fa-verified.event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-2fa-verified.event.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/events/user-2fa-verified.event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,MAAM,WAAW,2BAA2B;IACxC,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,qBAAqB,CAAC;CACjC;AAED,qBAAa,oBAAoB;aAET,OAAO,EAAE,2BAA2B;gBAApC,OAAO,EAAE,2BAA2B;CAE3D"}

package/src/lib/auth/events/user-2fa-verified.event.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.User2faVerifiedEvent = void 0;
+class User2faVerifiedEvent {
+    constructor(payload) {
+        this.payload = payload;
+    }
+}
+exports.User2faVerifiedEvent = User2faVerifiedEvent;

package/src/lib/auth/events/{user-logged-in.event.ts → user-logged-in.event.d.ts}

@@ -3,7 +3,6 @@ import { AuthTokensResponseDto } from "../dto/responses/auth.response.dto";
 import { LoginRequestDto } from "../dto/requests/login.request.dto";
 import { SessionPayload } from "../../core";
 import { BaseAuthProvider } from "../../core/providers/base-auth.provider";
-
 export interface UserLoggedInEventPayload {
     user: NestAuthUser;
     tenantId?: string;
@@ -13,10 +12,8 @@ export interface UserLoggedInEventPayload {
     tokens: AuthTokensResponseDto;
     isRequiresMfa: boolean;
 }
-
-// User Management Events
-export class UserLoggedInEvent {
-    constructor(
-        public readonly payload: UserLoggedInEventPayload,
-    ) { }
+export declare class UserLoggedInEvent {
+    readonly payload: UserLoggedInEventPayload;
+    constructor(payload: UserLoggedInEventPayload);
 }
+//# sourceMappingURL=user-logged-in.event.d.ts.map

package/src/lib/auth/events/user-logged-in.event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-logged-in.event.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/events/user-logged-in.event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAE3E,MAAM,WAAW,wBAAwB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,aAAa,EAAE,OAAO,CAAC;CAC1B;AAGD,qBAAa,iBAAiB;aAEN,OAAO,EAAE,wBAAwB;gBAAjC,OAAO,EAAE,wBAAwB;CAExD"}

package/src/lib/auth/events/user-logged-in.event.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserLoggedInEvent = void 0;
+// User Management Events
+class UserLoggedInEvent {
+    constructor(payload) {
+        this.payload = payload;
+    }
+}
+exports.UserLoggedInEvent = UserLoggedInEvent;

package/src/lib/auth/events/{user-refresh-token.event.ts → user-refresh-token.event.d.ts}

@@ -1,14 +1,12 @@
 import { SessionPayload } from "../../core";
 import { AuthTokensResponseDto } from "../dto/responses/auth.response.dto";
-
 export interface UserRefreshTokenEventPayload {
     session: SessionPayload;
     tokens: AuthTokensResponseDto;
     oldRefreshToken: string;
 }
-
-export class UserRefreshTokenEvent {
-    constructor(
-        public readonly payload: UserRefreshTokenEventPayload,
-    ) { }
+export declare class UserRefreshTokenEvent {
+    readonly payload: UserRefreshTokenEventPayload;
+    constructor(payload: UserRefreshTokenEventPayload);
 }
+//# sourceMappingURL=user-refresh-token.event.d.ts.map

package/src/lib/auth/events/user-refresh-token.event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-refresh-token.event.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/events/user-refresh-token.event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,MAAM,WAAW,4BAA4B;IACzC,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,qBAAqB;aAEV,OAAO,EAAE,4BAA4B;gBAArC,OAAO,EAAE,4BAA4B;CAE5D"}

package/src/lib/auth/events/user-refresh-token.event.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserRefreshTokenEvent = void 0;
+class UserRefreshTokenEvent {
+    constructor(payload) {
+        this.payload = payload;
+    }
+}
+exports.UserRefreshTokenEvent = UserRefreshTokenEvent;

package/src/lib/auth/events/{user-registered.event.ts → user-registered.event.d.ts}

@@ -3,7 +3,6 @@ import { AuthTokensResponseDto } from "../dto/responses/auth.response.dto";
 import { SignupRequestDto } from "../dto/requests/signup.request.dto";
 import { SessionPayload } from "../../core";
 import { BaseAuthProvider } from "../../core/providers/base-auth.provider";
-
 export interface UserRegisteredEventPayload {
     user: NestAuthUser;
     tenantId?: string;
@@ -13,10 +12,8 @@ export interface UserRegisteredEventPayload {
     tokens: AuthTokensResponseDto;
     isRequiresMfa: boolean;
 }
-
-// User Management Events
-export class UserRegisteredEvent {
-    constructor(
-        public readonly payload: UserRegisteredEventPayload,
-    ) { }
+export declare class UserRegisteredEvent {
+    readonly payload: UserRegisteredEventPayload;
+    constructor(payload: UserRegisteredEventPayload);
 }
+//# sourceMappingURL=user-registered.event.d.ts.map

package/src/lib/auth/events/user-registered.event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-registered.event.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/events/user-registered.event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAE3E,MAAM,WAAW,0BAA0B;IACvC,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,gBAAgB,CAAC;IACxB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,aAAa,EAAE,OAAO,CAAC;CAC1B;AAGD,qBAAa,mBAAmB;aAER,OAAO,EAAE,0BAA0B;gBAAnC,OAAO,EAAE,0BAA0B;CAE1D"}

package/src/lib/auth/events/user-registered.event.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserRegisteredEvent = void 0;
+// User Management Events
+class UserRegisteredEvent {
+    constructor(payload) {
+        this.payload = payload;
+    }
+}
+exports.UserRegisteredEvent = UserRegisteredEvent;

package/src/lib/auth/guards/auth.guard.d.ts

@@ -0,0 +1,56 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { JwtService } from '../../core/services/jwt.service';
+import { SessionManagerService } from '../../session/services/session-manager.service';
+import { AccessKeyService } from '../../user/services/access-key.service';
+export declare const OPTIONAL_AUTH_KEY = "optional_auth";
+/**
+ * NestAuthAuthGuard
+ *
+ * Handles authentication and authorization for protected routes.
+ * Token refresh is handled by RefreshTokenInterceptor (applied globally).
+ *
+ * This guard verifies:
+ * - JWT tokens (Bearer)
+ * - API keys
+ * - MFA requirements
+ * - Roles and permissions
+ *
+ * Note: For automatic token refresh, enable RefreshTokenInterceptor globally.
+ */
+export declare class NestAuthAuthGuard implements CanActivate {
+    private reflector;
+    private jwtService;
+    private sessionManager;
+    private accessKeyService;
+    constructor(reflector: Reflector, jwtService: JwtService, sessionManager: SessionManagerService, accessKeyService: AccessKeyService);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    private handleJwtAuth;
+    private handleApiKeyAuth;
+    private checkMfa;
+    /**
+     * Check authorization (roles, permissions) after successful authentication
+     */
+    private checkAuthorization;
+    /**
+     * Get required permissions from decorator
+     */
+    private getRequiredPermissions;
+    /**
+     * Get required roles from decorator
+     */
+    private getRequiredRoles;
+    /**
+     * Check if user has required roles
+     */
+    private checkRoles;
+    /**
+     * Check if user has required permissions
+     */
+    private checkPermissions;
+    /**
+     * Extract all permissions from user's roles
+     */
+    private getUserPermissions;
+}
+//# sourceMappingURL=auth.guard.d.ts.map

package/src/lib/auth/guards/auth.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.guard.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/guards/auth.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,WAAW,EAAE,gBAAgB,EAA6C,MAAM,gBAAgB,CAAC;AAEtH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAO1E,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AAEjD;;;;;;;;;;;;;GAaG;AACH,qBACa,iBAAkB,YAAW,WAAW;IAE7C,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,gBAAgB;gBAHhB,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,UAAU,EACtB,cAAc,EAAE,qBAAqB,EACrC,gBAAgB,EAAE,gBAAgB;IAGxC,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;YAyFhD,aAAa;YA2Cb,gBAAgB;YAqDhB,QAAQ;IA0BtB;;OAEG;YACW,kBAAkB;IA4BhC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAc9B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAcxB;;OAEG;IACH,OAAO,CAAC,UAAU;IAqBlB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAwBxB;;OAEG;IACH,OAAO,CAAC,kBAAkB;CAiB7B"}