npm - @ackplus/nest-auth - Versions diffs - 1.1.17 → 1.1.19 - Mend

@ackplus/nest-auth 1.1.17 → 1.1.19

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (27) hide show

package/src/lib/auth.constants.d.ts CHANGED Viewed

@@ -7,14 +7,184 @@ export declare const APPLE_AUTH_PROVIDER = "apple";
 export declare const GITHUB_AUTH_PROVIDER = "github";
 export declare const EMAIL_AUTH_PROVIDER = "email";
 export declare const PHONE_AUTH_PROVIDER = "phone";
-export declare const USER_NOT_FOUND_EXCEPTION_CODE = "USER_NOT_FOUND";
-export declare const UNAUTHORIZED_EXCEPTION_CODE = "UNAUTHORIZED";
-export declare const INVALID_MFA_EXCEPTION_CODE = "INVALID_MFA";
-export declare const INVALID_REFRESH_TOKEN_EXCEPTION_CODE = "INVALID_REFRESH_TOKEN";
-export declare const SESSION_NOT_FOUND_ERROR = "SESSION_NOT_FOUND";
-export declare const USER_NOT_ACTIVE_ERROR = "USER_NOT_ACTIVE";
-export declare const REFRESH_TOKEN_INVALID = "REFRESH_TOKEN_INVALID";
-export declare const REFRESH_TOKEN_EXPIRED = "REFRESH_TOKEN_EXPIRED";
+export declare const AUTH_ERROR_CODES: {
+    readonly REGISTRATION_DISABLED: "REGISTRATION_DISABLED";
+    readonly EMAIL_ALREADY_EXISTS: "EMAIL_ALREADY_EXISTS";
+    readonly PHONE_ALREADY_EXISTS: "PHONE_ALREADY_EXISTS";
+    readonly PROVIDER_NOT_FOUND: "PROVIDER_NOT_FOUND";
+    readonly INVALID_CREDENTIALS: "INVALID_CREDENTIALS";
+    readonly INVALID_PROVIDER: "INVALID_PROVIDER";
+    readonly MISSING_REQUIRED_FIELDS: "MISSING_REQUIRED_FIELDS";
+    readonly USER_NOT_FOUND: "USER_NOT_FOUND";
+    readonly ACCOUNT_SUSPENDED: "ACCOUNT_SUSPENDED";
+    readonly ACCOUNT_INACTIVE: "ACCOUNT_INACTIVE";
+    readonly EMAIL_NOT_VERIFIED: "EMAIL_NOT_VERIFIED";
+    readonly CURRENT_PASSWORD_INCORRECT: "CURRENT_PASSWORD_INCORRECT";
+    readonly NEW_PASSWORD_SAME_AS_CURRENT: "NEW_PASSWORD_SAME_AS_CURRENT";
+    readonly PASSWORD_RESET_INVALID_REQUEST: "PASSWORD_RESET_INVALID_REQUEST";
+    readonly PASSWORD_RESET_TOKEN_INVALID: "PASSWORD_RESET_TOKEN_INVALID";
+    readonly PASSWORD_RESET_TOKEN_EXPIRED: "PASSWORD_RESET_TOKEN_EXPIRED";
+    readonly REFRESH_TOKEN_INVALID: "REFRESH_TOKEN_INVALID";
+    readonly REFRESH_TOKEN_EXPIRED: "REFRESH_TOKEN_EXPIRED";
+    readonly INVALID_TOKEN: "INVALID_TOKEN";
+    readonly TOKEN_EXPIRED: "TOKEN_EXPIRED";
+    readonly EMAIL_ALREADY_VERIFIED: "EMAIL_ALREADY_VERIFIED";
+    readonly VERIFICATION_CODE_INVALID: "VERIFICATION_CODE_INVALID";
+    readonly VERIFICATION_CODE_EXPIRED: "VERIFICATION_CODE_EXPIRED";
+    readonly NO_EMAIL_ADDRESS: "NO_EMAIL_ADDRESS";
+    readonly NO_PHONE_NUMBER: "NO_PHONE_NUMBER";
+};
+export declare const MFA_ERROR_CODES: {
+    readonly MFA_NOT_ENABLED: "MFA_NOT_ENABLED";
+    readonly MFA_REQUIRED: "MFA_REQUIRED";
+    readonly MFA_CODE_INVALID: "MFA_CODE_INVALID";
+    readonly MFA_CODE_EXPIRED: "MFA_CODE_EXPIRED";
+    readonly MFA_METHOD_NOT_AVAILABLE: "MFA_METHOD_NOT_AVAILABLE";
+    readonly MFA_TOGGLING_NOT_ALLOWED: "MFA_TOGGLING_NOT_ALLOWED";
+    readonly MFA_CANNOT_ENABLE_WITHOUT_METHOD: "MFA_CANNOT_ENABLE_WITHOUT_METHOD";
+    readonly MFA_RECOVERY_CODE_INVALID: "MFA_RECOVERY_CODE_INVALID";
+    readonly TOTP_SETUP_FAILED: "TOTP_SETUP_FAILED";
+    readonly TOTP_VERIFICATION_FAILED: "TOTP_VERIFICATION_FAILED";
+};
+export declare const SESSION_ERROR_CODES: {
+    readonly SESSION_NOT_FOUND: "SESSION_NOT_FOUND";
+    readonly SESSION_EXPIRED: "SESSION_EXPIRED";
+    readonly SESSION_INVALID: "SESSION_INVALID";
+    readonly MAX_SESSIONS_REACHED: "MAX_SESSIONS_REACHED";
+};
+export declare const GUARD_ERROR_CODES: {
+    readonly NO_AUTH_PROVIDED: "NO_AUTH_PROVIDED";
+    readonly INVALID_AUTH_FORMAT: "INVALID_AUTH_FORMAT";
+    readonly INVALID_AUTH_TYPE: "INVALID_AUTH_TYPE";
+    readonly UNAUTHORIZED: "UNAUTHORIZED";
+    readonly ACCESS_DENIED: "ACCESS_DENIED";
+    readonly FORBIDDEN: "FORBIDDEN";
+    readonly NO_ROLES_ASSIGNED: "NO_ROLES_ASSIGNED";
+    readonly MISSING_REQUIRED_ROLES: "MISSING_REQUIRED_ROLES";
+    readonly MISSING_REQUIRED_PERMISSIONS: "MISSING_REQUIRED_PERMISSIONS";
+};
+export declare const API_KEY_ERROR_CODES: {
+    readonly INVALID_API_KEY_FORMAT: "INVALID_API_KEY_FORMAT";
+    readonly INVALID_API_KEY: "INVALID_API_KEY";
+    readonly API_KEY_EXPIRED: "API_KEY_EXPIRED";
+    readonly API_KEY_DEACTIVATED: "API_KEY_DEACTIVATED";
+    readonly API_KEY_NOT_FOUND: "API_KEY_NOT_FOUND";
+};
+export declare const VALIDATION_ERROR_CODES: {
+    readonly EMAIL_OR_PHONE_REQUIRED: "EMAIL_OR_PHONE_REQUIRED";
+    readonly TENANT_ID_REQUIRED: "TENANT_ID_REQUIRED";
+    readonly INVALID_INPUT: "INVALID_INPUT";
+    readonly MISSING_REQUIRED_FIELD: "MISSING_REQUIRED_FIELD";
+    readonly INVALID_EMAIL_FORMAT: "INVALID_EMAIL_FORMAT";
+    readonly INVALID_PHONE_FORMAT: "INVALID_PHONE_FORMAT";
+};
+export declare const OTP_ERROR_CODES: {
+    readonly OTP_INVALID: "OTP_INVALID";
+    readonly OTP_EXPIRED: "OTP_EXPIRED";
+    readonly OTP_ALREADY_USED: "OTP_ALREADY_USED";
+    readonly OTP_NOT_FOUND: "OTP_NOT_FOUND";
+};
+export declare const USER_ERROR_CODES: {
+    readonly USER_NOT_FOUND: "USER_NOT_FOUND";
+    readonly USER_ALREADY_EXISTS: "USER_ALREADY_EXISTS";
+    readonly USER_CREATION_FAILED: "USER_CREATION_FAILED";
+    readonly USER_UPDATE_FAILED: "USER_UPDATE_FAILED";
+    readonly USER_DELETION_FAILED: "USER_DELETION_FAILED";
+};
+export declare const TENANT_ERROR_CODES: {
+    readonly TENANT_NOT_FOUND: "TENANT_NOT_FOUND";
+    readonly TENANT_ALREADY_EXISTS: "TENANT_ALREADY_EXISTS";
+    readonly INVALID_TENANT: "INVALID_TENANT";
+};
+export declare const ERROR_CODES: {
+    readonly TENANT_NOT_FOUND: "TENANT_NOT_FOUND";
+    readonly TENANT_ALREADY_EXISTS: "TENANT_ALREADY_EXISTS";
+    readonly INVALID_TENANT: "INVALID_TENANT";
+    readonly USER_NOT_FOUND: "USER_NOT_FOUND";
+    readonly USER_ALREADY_EXISTS: "USER_ALREADY_EXISTS";
+    readonly USER_CREATION_FAILED: "USER_CREATION_FAILED";
+    readonly USER_UPDATE_FAILED: "USER_UPDATE_FAILED";
+    readonly USER_DELETION_FAILED: "USER_DELETION_FAILED";
+    readonly OTP_INVALID: "OTP_INVALID";
+    readonly OTP_EXPIRED: "OTP_EXPIRED";
+    readonly OTP_ALREADY_USED: "OTP_ALREADY_USED";
+    readonly OTP_NOT_FOUND: "OTP_NOT_FOUND";
+    readonly EMAIL_OR_PHONE_REQUIRED: "EMAIL_OR_PHONE_REQUIRED";
+    readonly TENANT_ID_REQUIRED: "TENANT_ID_REQUIRED";
+    readonly INVALID_INPUT: "INVALID_INPUT";
+    readonly MISSING_REQUIRED_FIELD: "MISSING_REQUIRED_FIELD";
+    readonly INVALID_EMAIL_FORMAT: "INVALID_EMAIL_FORMAT";
+    readonly INVALID_PHONE_FORMAT: "INVALID_PHONE_FORMAT";
+    readonly INVALID_API_KEY_FORMAT: "INVALID_API_KEY_FORMAT";
+    readonly INVALID_API_KEY: "INVALID_API_KEY";
+    readonly API_KEY_EXPIRED: "API_KEY_EXPIRED";
+    readonly API_KEY_DEACTIVATED: "API_KEY_DEACTIVATED";
+    readonly API_KEY_NOT_FOUND: "API_KEY_NOT_FOUND";
+    readonly NO_AUTH_PROVIDED: "NO_AUTH_PROVIDED";
+    readonly INVALID_AUTH_FORMAT: "INVALID_AUTH_FORMAT";
+    readonly INVALID_AUTH_TYPE: "INVALID_AUTH_TYPE";
+    readonly UNAUTHORIZED: "UNAUTHORIZED";
+    readonly ACCESS_DENIED: "ACCESS_DENIED";
+    readonly FORBIDDEN: "FORBIDDEN";
+    readonly NO_ROLES_ASSIGNED: "NO_ROLES_ASSIGNED";
+    readonly MISSING_REQUIRED_ROLES: "MISSING_REQUIRED_ROLES";
+    readonly MISSING_REQUIRED_PERMISSIONS: "MISSING_REQUIRED_PERMISSIONS";
+    readonly SESSION_NOT_FOUND: "SESSION_NOT_FOUND";
+    readonly SESSION_EXPIRED: "SESSION_EXPIRED";
+    readonly SESSION_INVALID: "SESSION_INVALID";
+    readonly MAX_SESSIONS_REACHED: "MAX_SESSIONS_REACHED";
+    readonly MFA_NOT_ENABLED: "MFA_NOT_ENABLED";
+    readonly MFA_REQUIRED: "MFA_REQUIRED";
+    readonly MFA_CODE_INVALID: "MFA_CODE_INVALID";
+    readonly MFA_CODE_EXPIRED: "MFA_CODE_EXPIRED";
+    readonly MFA_METHOD_NOT_AVAILABLE: "MFA_METHOD_NOT_AVAILABLE";
+    readonly MFA_TOGGLING_NOT_ALLOWED: "MFA_TOGGLING_NOT_ALLOWED";
+    readonly MFA_CANNOT_ENABLE_WITHOUT_METHOD: "MFA_CANNOT_ENABLE_WITHOUT_METHOD";
+    readonly MFA_RECOVERY_CODE_INVALID: "MFA_RECOVERY_CODE_INVALID";
+    readonly TOTP_SETUP_FAILED: "TOTP_SETUP_FAILED";
+    readonly TOTP_VERIFICATION_FAILED: "TOTP_VERIFICATION_FAILED";
+    readonly REGISTRATION_DISABLED: "REGISTRATION_DISABLED";
+    readonly EMAIL_ALREADY_EXISTS: "EMAIL_ALREADY_EXISTS";
+    readonly PHONE_ALREADY_EXISTS: "PHONE_ALREADY_EXISTS";
+    readonly PROVIDER_NOT_FOUND: "PROVIDER_NOT_FOUND";
+    readonly INVALID_CREDENTIALS: "INVALID_CREDENTIALS";
+    readonly INVALID_PROVIDER: "INVALID_PROVIDER";
+    readonly MISSING_REQUIRED_FIELDS: "MISSING_REQUIRED_FIELDS";
+    readonly ACCOUNT_SUSPENDED: "ACCOUNT_SUSPENDED";
+    readonly ACCOUNT_INACTIVE: "ACCOUNT_INACTIVE";
+    readonly EMAIL_NOT_VERIFIED: "EMAIL_NOT_VERIFIED";
+    readonly CURRENT_PASSWORD_INCORRECT: "CURRENT_PASSWORD_INCORRECT";
+    readonly NEW_PASSWORD_SAME_AS_CURRENT: "NEW_PASSWORD_SAME_AS_CURRENT";
+    readonly PASSWORD_RESET_INVALID_REQUEST: "PASSWORD_RESET_INVALID_REQUEST";
+    readonly PASSWORD_RESET_TOKEN_INVALID: "PASSWORD_RESET_TOKEN_INVALID";
+    readonly PASSWORD_RESET_TOKEN_EXPIRED: "PASSWORD_RESET_TOKEN_EXPIRED";
+    readonly REFRESH_TOKEN_INVALID: "REFRESH_TOKEN_INVALID";
+    readonly REFRESH_TOKEN_EXPIRED: "REFRESH_TOKEN_EXPIRED";
+    readonly INVALID_TOKEN: "INVALID_TOKEN";
+    readonly TOKEN_EXPIRED: "TOKEN_EXPIRED";
+    readonly EMAIL_ALREADY_VERIFIED: "EMAIL_ALREADY_VERIFIED";
+    readonly VERIFICATION_CODE_INVALID: "VERIFICATION_CODE_INVALID";
+    readonly VERIFICATION_CODE_EXPIRED: "VERIFICATION_CODE_EXPIRED";
+    readonly NO_EMAIL_ADDRESS: "NO_EMAIL_ADDRESS";
+    readonly NO_PHONE_NUMBER: "NO_PHONE_NUMBER";
+};
+export type ErrorCode = typeof ERROR_CODES[keyof typeof ERROR_CODES];
+/** @deprecated Use ERROR_CODES.USER_NOT_FOUND instead */
+export declare const USER_NOT_FOUND_EXCEPTION_CODE: "USER_NOT_FOUND";
+/** @deprecated Use ERROR_CODES.UNAUTHORIZED instead */
+export declare const UNAUTHORIZED_EXCEPTION_CODE: "UNAUTHORIZED";
+/** @deprecated Use ERROR_CODES.MFA_CODE_INVALID instead */
+export declare const INVALID_MFA_EXCEPTION_CODE: "MFA_CODE_INVALID";
+/** @deprecated Use ERROR_CODES.REFRESH_TOKEN_INVALID instead */
+export declare const INVALID_REFRESH_TOKEN_EXCEPTION_CODE: "REFRESH_TOKEN_INVALID";
+/** @deprecated Use ERROR_CODES.SESSION_NOT_FOUND instead */
+export declare const SESSION_NOT_FOUND_ERROR: "SESSION_NOT_FOUND";
+/** @deprecated Use ERROR_CODES.ACCOUNT_INACTIVE instead */
+export declare const USER_NOT_ACTIVE_ERROR: "ACCOUNT_INACTIVE";
+/** @deprecated Use ERROR_CODES.REFRESH_TOKEN_INVALID instead */
+export declare const REFRESH_TOKEN_INVALID: "REFRESH_TOKEN_INVALID";
+/** @deprecated Use ERROR_CODES.REFRESH_TOKEN_EXPIRED instead */
+export declare const REFRESH_TOKEN_EXPIRED: "REFRESH_TOKEN_EXPIRED";
 export declare const ACCESS_TOKEN_COOKIE_NAME = "accessToken";
 export declare const REFRESH_TOKEN_COOKIE_NAME = "refreshToken";
 export declare const NEST_AUTH_TRUST_DEVICE_KEY = "nest_auth_device_trust";

package/src/lib/auth.constants.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"auth.constants.d.ts","sourceRoot":"","sources":["../../../../../packages/nest-auth/src/lib/auth.constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,kCAAkC,CAAC;AACnE,eAAO,MAAM,gCAAgC,qCAAqC,CAAC;AAInF,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AACvC,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAC7C,eAAO,MAAM,sBAAsB,aAAa,CAAC;AACjD,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAC3C,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAC7C,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAC3C,eAAO,MAAM,mBAAmB,UAAU,CAAC;~~AAI3C~~,eAAO,MAAM,~~6BAA6B~~,mBAAmB,CAAC;~~AAC9D~~,eAAO,MAAM,2BAA2B,~~iBAAiB~~,CAAC;~~AAC1D~~,eAAO,MAAM,0BAA0B,~~gBAAgB~~,CAAC;~~AACxD~~,eAAO,MAAM,oCAAoC,~~0BAA0B~~,CAAC;~~AAC5E~~,eAAO,MAAM,uBAAuB,~~sBAAsB~~,CAAC;AAC3D,eAAO,MAAM,qBAAqB,~~oBAAoB~~,CAAC;~~AAEvD~~,eAAO,MAAM,qBAAqB,~~0BAA0B~~,CAAC;~~AAC7D~~,eAAO,MAAM,qBAAqB,~~0BAA0B~~,CAAC;~~AAI7D~~,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AACtD,eAAO,MAAM,yBAAyB,iBAAiB,CAAC;AAExD,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AAGnE,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AAGxC,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;CA6BjB,CAAC"}
1	+ {"version":3,"file":"auth.constants.d.ts","sourceRoot":"","sources":["../../../../../packages/nest-auth/src/lib/auth.constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,kCAAkC,CAAC;AACnE,eAAO,MAAM,gCAAgC,qCAAqC,CAAC;AAInF,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AACvC,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAC7C,eAAO,MAAM,sBAAsB,aAAa,CAAC;AACjD,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAC3C,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAC7C,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAC3C,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAQ3C,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCnB,CAAC;AAGX,eAAO,MAAM,eAAe;;;;;;;;;;;CAWlB,CAAC;AAGX,eAAO,MAAM,mBAAmB;;;;;CAKtB,CAAC;AAGX,eAAO,MAAM,iBAAiB;;;;;;;;;;CAUpB,CAAC;AAGX,eAAO,MAAM,mBAAmB;;;;;;CAMtB,CAAC;AAGX,eAAO,MAAM,sBAAsB;;;;;;;CAOzB,CAAC;AAGX,eAAO,MAAM,eAAe;;;;;CAKlB,CAAC;AAGX,eAAO,MAAM,gBAAgB;;;;;;CAMnB,CAAC;AAGX,eAAO,MAAM,kBAAkB;;;;CAIrB,CAAC;AAGX,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAUd,CAAC;AAGX,MAAM,MAAM,SAAS,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAKrE,yDAAyD;AACzD,eAAO,MAAM,6BAA6B,kBAAkC,CAAC;AAC7E,uDAAuD;AACvD,eAAO,MAAM,2BAA2B,gBAAiC,CAAC;AAC1E,2DAA2D;AAC3D,eAAO,MAAM,0BAA0B,oBAAmC,CAAC;AAC3E,gEAAgE;AAChE,eAAO,MAAM,oCAAoC,yBAAyC,CAAC;AAC3F,4DAA4D;AAC5D,eAAO,MAAM,uBAAuB,qBAAwC,CAAC;AAC7E,2DAA2D;AAC3D,eAAO,MAAM,qBAAqB,oBAAoC,CAAC;AACvE,gEAAgE;AAChE,eAAO,MAAM,qBAAqB,yBAAyC,CAAC;AAC5E,gEAAgE;AAChE,eAAO,MAAM,qBAAqB,yBAAyC,CAAC;AAI5E,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AACtD,eAAO,MAAM,yBAAyB,iBAAiB,CAAC;AAExD,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AAGnE,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AAGxC,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;CA6BjB,CAAC"}

package/src/lib/auth.constants.js CHANGED Viewed

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.NestAuthEvents = exports.DEFAULT_GUARD_NAME = exports.NEST_AUTH_TRUST_DEVICE_KEY = exports.REFRESH_TOKEN_COOKIE_NAME = exports.ACCESS_TOKEN_COOKIE_NAME = exports.REFRESH_TOKEN_EXPIRED = exports.REFRESH_TOKEN_INVALID = exports.USER_NOT_ACTIVE_ERROR = exports.SESSION_NOT_FOUND_ERROR = exports.INVALID_REFRESH_TOKEN_EXCEPTION_CODE = exports.INVALID_MFA_EXCEPTION_CODE = exports.UNAUTHORIZED_EXCEPTION_CODE = exports.USER_NOT_FOUND_EXCEPTION_CODE = exports.PHONE_AUTH_PROVIDER = exports.EMAIL_AUTH_PROVIDER = exports.GITHUB_AUTH_PROVIDER = exports.APPLE_AUTH_PROVIDER = exports.FACEBOOK_AUTH_PROVIDER = exports.GOOGLE_AUTH_PROVIDER = exports.JWT_AUTH_PROVIDER = exports.NEST_AUTH_ASYNC_OPTIONS_PROVIDER = exports.AUTH_MODULE_OPTIONS = void 0;
+exports.NestAuthEvents = exports.DEFAULT_GUARD_NAME = exports.NEST_AUTH_TRUST_DEVICE_KEY = exports.REFRESH_TOKEN_COOKIE_NAME = exports.ACCESS_TOKEN_COOKIE_NAME = exports.REFRESH_TOKEN_EXPIRED = exports.REFRESH_TOKEN_INVALID = exports.USER_NOT_ACTIVE_ERROR = exports.SESSION_NOT_FOUND_ERROR = exports.INVALID_REFRESH_TOKEN_EXCEPTION_CODE = exports.INVALID_MFA_EXCEPTION_CODE = exports.UNAUTHORIZED_EXCEPTION_CODE = exports.USER_NOT_FOUND_EXCEPTION_CODE = exports.ERROR_CODES = exports.TENANT_ERROR_CODES = exports.USER_ERROR_CODES = exports.OTP_ERROR_CODES = exports.VALIDATION_ERROR_CODES = exports.API_KEY_ERROR_CODES = exports.GUARD_ERROR_CODES = exports.SESSION_ERROR_CODES = exports.MFA_ERROR_CODES = exports.AUTH_ERROR_CODES = exports.PHONE_AUTH_PROVIDER = exports.EMAIL_AUTH_PROVIDER = exports.GITHUB_AUTH_PROVIDER = exports.APPLE_AUTH_PROVIDER = exports.FACEBOOK_AUTH_PROVIDER = exports.GOOGLE_AUTH_PROVIDER = exports.JWT_AUTH_PROVIDER = exports.NEST_AUTH_ASYNC_OPTIONS_PROVIDER = exports.AUTH_MODULE_OPTIONS = void 0;
 exports.AUTH_MODULE_OPTIONS = 'NEST_AUTH_AUTH_MODULE_OPTIONS';
 exports.NEST_AUTH_ASYNC_OPTIONS_PROVIDER = 'NEST_AUTH_ASYNC_OPTIONS_PROVIDER';
 // Provider tokens
@@ -11,15 +11,144 @@ exports.APPLE_AUTH_PROVIDER = 'apple';
 exports.GITHUB_AUTH_PROVIDER = 'github';
 exports.EMAIL_AUTH_PROVIDER = 'email';
 exports.PHONE_AUTH_PROVIDER = 'phone';
-// Exception codes
-exports.USER_NOT_FOUND_EXCEPTION_CODE = 'USER_NOT_FOUND';
-exports.UNAUTHORIZED_EXCEPTION_CODE = 'UNAUTHORIZED';
-exports.INVALID_MFA_EXCEPTION_CODE = 'INVALID_MFA';
-exports.INVALID_REFRESH_TOKEN_EXCEPTION_CODE = 'INVALID_REFRESH_TOKEN';
-exports.SESSION_NOT_FOUND_ERROR = 'SESSION_NOT_FOUND';
-exports.USER_NOT_ACTIVE_ERROR = 'USER_NOT_ACTIVE';
-exports.REFRESH_TOKEN_INVALID = 'REFRESH_TOKEN_INVALID';
-exports.REFRESH_TOKEN_EXPIRED = 'REFRESH_TOKEN_EXPIRED';
+// ==========================================
+// ERROR CODES - Categorized for better organization
+// ==========================================
+// Authentication Error Codes
+exports.AUTH_ERROR_CODES = {
+    // Signup/Registration
+    REGISTRATION_DISABLED: 'REGISTRATION_DISABLED',
+    EMAIL_ALREADY_EXISTS: 'EMAIL_ALREADY_EXISTS',
+    PHONE_ALREADY_EXISTS: 'PHONE_ALREADY_EXISTS',
+    PROVIDER_NOT_FOUND: 'PROVIDER_NOT_FOUND',
+    // Login
+    INVALID_CREDENTIALS: 'INVALID_CREDENTIALS',
+    INVALID_PROVIDER: 'INVALID_PROVIDER',
+    MISSING_REQUIRED_FIELDS: 'MISSING_REQUIRED_FIELDS',
+    // Account Status
+    USER_NOT_FOUND: 'USER_NOT_FOUND',
+    ACCOUNT_SUSPENDED: 'ACCOUNT_SUSPENDED',
+    ACCOUNT_INACTIVE: 'ACCOUNT_INACTIVE',
+    EMAIL_NOT_VERIFIED: 'EMAIL_NOT_VERIFIED',
+    // Password
+    CURRENT_PASSWORD_INCORRECT: 'CURRENT_PASSWORD_INCORRECT',
+    NEW_PASSWORD_SAME_AS_CURRENT: 'NEW_PASSWORD_SAME_AS_CURRENT',
+    PASSWORD_RESET_INVALID_REQUEST: 'PASSWORD_RESET_INVALID_REQUEST',
+    PASSWORD_RESET_TOKEN_INVALID: 'PASSWORD_RESET_TOKEN_INVALID',
+    PASSWORD_RESET_TOKEN_EXPIRED: 'PASSWORD_RESET_TOKEN_EXPIRED',
+    // Tokens
+    REFRESH_TOKEN_INVALID: 'REFRESH_TOKEN_INVALID',
+    REFRESH_TOKEN_EXPIRED: 'REFRESH_TOKEN_EXPIRED',
+    INVALID_TOKEN: 'INVALID_TOKEN',
+    TOKEN_EXPIRED: 'TOKEN_EXPIRED',
+    // Email Verification
+    EMAIL_ALREADY_VERIFIED: 'EMAIL_ALREADY_VERIFIED',
+    VERIFICATION_CODE_INVALID: 'VERIFICATION_CODE_INVALID',
+    VERIFICATION_CODE_EXPIRED: 'VERIFICATION_CODE_EXPIRED',
+    NO_EMAIL_ADDRESS: 'NO_EMAIL_ADDRESS',
+    NO_PHONE_NUMBER: 'NO_PHONE_NUMBER',
+};
+// MFA Error Codes
+exports.MFA_ERROR_CODES = {
+    MFA_NOT_ENABLED: 'MFA_NOT_ENABLED',
+    MFA_REQUIRED: 'MFA_REQUIRED',
+    MFA_CODE_INVALID: 'MFA_CODE_INVALID',
+    MFA_CODE_EXPIRED: 'MFA_CODE_EXPIRED',
+    MFA_METHOD_NOT_AVAILABLE: 'MFA_METHOD_NOT_AVAILABLE',
+    MFA_TOGGLING_NOT_ALLOWED: 'MFA_TOGGLING_NOT_ALLOWED',
+    MFA_CANNOT_ENABLE_WITHOUT_METHOD: 'MFA_CANNOT_ENABLE_WITHOUT_METHOD',
+    MFA_RECOVERY_CODE_INVALID: 'MFA_RECOVERY_CODE_INVALID',
+    TOTP_SETUP_FAILED: 'TOTP_SETUP_FAILED',
+    TOTP_VERIFICATION_FAILED: 'TOTP_VERIFICATION_FAILED',
+};
+// Session Error Codes
+exports.SESSION_ERROR_CODES = {
+    SESSION_NOT_FOUND: 'SESSION_NOT_FOUND',
+    SESSION_EXPIRED: 'SESSION_EXPIRED',
+    SESSION_INVALID: 'SESSION_INVALID',
+    MAX_SESSIONS_REACHED: 'MAX_SESSIONS_REACHED',
+};
+// Guard Error Codes
+exports.GUARD_ERROR_CODES = {
+    NO_AUTH_PROVIDED: 'NO_AUTH_PROVIDED',
+    INVALID_AUTH_FORMAT: 'INVALID_AUTH_FORMAT',
+    INVALID_AUTH_TYPE: 'INVALID_AUTH_TYPE',
+    UNAUTHORIZED: 'UNAUTHORIZED',
+    ACCESS_DENIED: 'ACCESS_DENIED',
+    FORBIDDEN: 'FORBIDDEN',
+    NO_ROLES_ASSIGNED: 'NO_ROLES_ASSIGNED',
+    MISSING_REQUIRED_ROLES: 'MISSING_REQUIRED_ROLES',
+    MISSING_REQUIRED_PERMISSIONS: 'MISSING_REQUIRED_PERMISSIONS',
+};
+// API Key Error Codes
+exports.API_KEY_ERROR_CODES = {
+    INVALID_API_KEY_FORMAT: 'INVALID_API_KEY_FORMAT',
+    INVALID_API_KEY: 'INVALID_API_KEY',
+    API_KEY_EXPIRED: 'API_KEY_EXPIRED',
+    API_KEY_DEACTIVATED: 'API_KEY_DEACTIVATED',
+    API_KEY_NOT_FOUND: 'API_KEY_NOT_FOUND',
+};
+// Validation Error Codes
+exports.VALIDATION_ERROR_CODES = {
+    EMAIL_OR_PHONE_REQUIRED: 'EMAIL_OR_PHONE_REQUIRED',
+    TENANT_ID_REQUIRED: 'TENANT_ID_REQUIRED',
+    INVALID_INPUT: 'INVALID_INPUT',
+    MISSING_REQUIRED_FIELD: 'MISSING_REQUIRED_FIELD',
+    INVALID_EMAIL_FORMAT: 'INVALID_EMAIL_FORMAT',
+    INVALID_PHONE_FORMAT: 'INVALID_PHONE_FORMAT',
+};
+// OTP Error Codes
+exports.OTP_ERROR_CODES = {
+    OTP_INVALID: 'OTP_INVALID',
+    OTP_EXPIRED: 'OTP_EXPIRED',
+    OTP_ALREADY_USED: 'OTP_ALREADY_USED',
+    OTP_NOT_FOUND: 'OTP_NOT_FOUND',
+};
+// User Management Error Codes
+exports.USER_ERROR_CODES = {
+    USER_NOT_FOUND: 'USER_NOT_FOUND',
+    USER_ALREADY_EXISTS: 'USER_ALREADY_EXISTS',
+    USER_CREATION_FAILED: 'USER_CREATION_FAILED',
+    USER_UPDATE_FAILED: 'USER_UPDATE_FAILED',
+    USER_DELETION_FAILED: 'USER_DELETION_FAILED',
+};
+// Tenant Error Codes
+exports.TENANT_ERROR_CODES = {
+    TENANT_NOT_FOUND: 'TENANT_NOT_FOUND',
+    TENANT_ALREADY_EXISTS: 'TENANT_ALREADY_EXISTS',
+    INVALID_TENANT: 'INVALID_TENANT',
+};
+// Consolidated Error Codes (for easy access)
+exports.ERROR_CODES = {
+    ...exports.AUTH_ERROR_CODES,
+    ...exports.MFA_ERROR_CODES,
+    ...exports.SESSION_ERROR_CODES,
+    ...exports.GUARD_ERROR_CODES,
+    ...exports.API_KEY_ERROR_CODES,
+    ...exports.VALIDATION_ERROR_CODES,
+    ...exports.OTP_ERROR_CODES,
+    ...exports.USER_ERROR_CODES,
+    ...exports.TENANT_ERROR_CODES,
+};
+// ==========================================
+// LEGACY ERROR CODES (For backward compatibility)
+// ==========================================
+/** @deprecated Use ERROR_CODES.USER_NOT_FOUND instead */
+exports.USER_NOT_FOUND_EXCEPTION_CODE = exports.AUTH_ERROR_CODES.USER_NOT_FOUND;
+/** @deprecated Use ERROR_CODES.UNAUTHORIZED instead */
+exports.UNAUTHORIZED_EXCEPTION_CODE = exports.GUARD_ERROR_CODES.UNAUTHORIZED;
+/** @deprecated Use ERROR_CODES.MFA_CODE_INVALID instead */
+exports.INVALID_MFA_EXCEPTION_CODE = exports.MFA_ERROR_CODES.MFA_CODE_INVALID;
+/** @deprecated Use ERROR_CODES.REFRESH_TOKEN_INVALID instead */
+exports.INVALID_REFRESH_TOKEN_EXCEPTION_CODE = exports.AUTH_ERROR_CODES.REFRESH_TOKEN_INVALID;
+/** @deprecated Use ERROR_CODES.SESSION_NOT_FOUND instead */
+exports.SESSION_NOT_FOUND_ERROR = exports.SESSION_ERROR_CODES.SESSION_NOT_FOUND;
+/** @deprecated Use ERROR_CODES.ACCOUNT_INACTIVE instead */
+exports.USER_NOT_ACTIVE_ERROR = exports.AUTH_ERROR_CODES.ACCOUNT_INACTIVE;
+/** @deprecated Use ERROR_CODES.REFRESH_TOKEN_INVALID instead */
+exports.REFRESH_TOKEN_INVALID = exports.AUTH_ERROR_CODES.REFRESH_TOKEN_INVALID;
+/** @deprecated Use ERROR_CODES.REFRESH_TOKEN_EXPIRED instead */
+exports.REFRESH_TOKEN_EXPIRED = exports.AUTH_ERROR_CODES.REFRESH_TOKEN_EXPIRED;
 // Auth Cookie Names
 exports.ACCESS_TOKEN_COOKIE_NAME = 'accessToken';
 exports.REFRESH_TOKEN_COOKIE_NAME = 'refreshToken';

package/src/lib/core/interfaces/auth-module-options.interface.d.ts CHANGED Viewed

@@ -3,6 +3,8 @@ import { MFAOptions } from './mfa-options.interface';
 import { CookieOptions, SessionOptions } from './session-options.interface';
 import { BaseAuthProvider } from '../providers/base-auth.provider';
 import { DebugLogOptions } from '../services/debug-logger.service';
+import { NestAuthUser } from '../../user/entities/user.entity';
+import { SessionPayload, JWTTokenPayload } from './token-payload.interface';
 /**
  * Default Tenant Options
  *
@@ -41,6 +43,132 @@ export interface RegistrationCollectProfileField {
         value: string;
     }>;
 }
+/**
+ * User lifecycle hooks for customizing user creation and serialization
+ */
+export interface UserHooks {
+    /**
+     * Transform user data before creation.
+     * Use this to set default roles, validate fields, or enrich data.
+     *
+     * @example
+     * ```typescript
+     * beforeCreate: async (userData, input) => ({
+     *     ...userData,
+     *     metadata: { ...userData.metadata, source: 'web' }
+     * })
+     * ```
+     */
+    beforeCreate?: (userData: Partial<NestAuthUser>, input: any) => Promise<Partial<NestAuthUser>> | Partial<NestAuthUser>;
+    /**
+     * Callback after user creation.
+     * Use for side effects like creating related records, sending notifications.
+     */
+    afterCreate?: (user: NestAuthUser) => Promise<void> | void;
+    /**
+     * Control which user fields appear in API responses.
+     *
+     * @example
+     * ```typescript
+     * serialize: (user) => ({
+     *     id: user.id,
+     *     email: user.email,
+     *     roles: user.roles
+     * })
+     * ```
+     */
+    serialize?: (user: NestAuthUser) => Partial<NestAuthUser>;
+    /** Fields to always exclude from responses */
+    sensitiveFields?: string[];
+}
+/**
+ * Authentication response hooks
+ */
+export interface AuthHooks {
+    /**
+     * Transform authentication response (login/signup).
+     * Use to add custom data like user profile, organization info, feature flags.
+     *
+     * @example
+     * ```typescript
+     * transformResponse: async (response, user, session) => ({
+     *     ...response,
+     *     user: { id: user.id, email: user.email },
+     *     organization: await getOrg(user.id)
+     * })
+     * ```
+     */
+    transformResponse?: (response: any, user: NestAuthUser, session: SessionPayload) => Promise<any> | any;
+}
+/**
+ * Password customization hooks
+ */
+export interface PasswordHooks {
+    /** Custom password hashing (default: Argon2id) */
+    hash?: (password: string) => Promise<string>;
+    /** Custom password verification */
+    verify?: (password: string, hash: string) => Promise<boolean>;
+    /** Password policy validation */
+    validate?: (password: string) => {
+        valid: boolean;
+        errors?: string[];
+    };
+}
+/**
+ * OTP customization options
+ */
+export interface OtpOptions {
+    /** Custom OTP generation function */
+    generate?: () => string;
+    /** OTP length (default: 6) */
+    length?: number;
+    /** OTP format */
+    format?: 'numeric' | 'alphanumeric';
+}
+/**
+ * Guard customization hooks for pre/post auth validation
+ */
+export interface GuardHooks {
+    /**
+     * Pre-auth validation (IP whitelist, device fingerprint, etc.)
+     * Return { reject: true, reason: '...' } to block authentication.
+     */
+    beforeAuth?: (request: any, payload: JWTTokenPayload) => Promise<void | {
+        reject: boolean;
+        reason?: string;
+    }>;
+    /** Post-auth callback */
+    afterAuth?: (request: any, user: NestAuthUser, session: SessionPayload) => Promise<void> | void;
+}
+/**
+ * Authorization customization hooks
+ */
+export interface AuthorizationHooks {
+    /** Custom role resolution */
+    resolveRoles?: (user: NestAuthUser) => Promise<string[]>;
+    /** Custom permission resolution */
+    resolvePermissions?: (user: NestAuthUser, roles: string[]) => Promise<string[]>;
+}
+/**
+ * Audit event structure
+ */
+export interface AuthAuditEvent {
+    type: 'login' | 'logout' | 'signup' | 'password_change' | 'mfa_enable' | 'session_revoke';
+    userId?: string;
+    ip?: string;
+    userAgent?: string;
+    success: boolean;
+    metadata?: Record<string, any>;
+    timestamp: Date;
+}
+/**
+ * Audit logging options
+ */
+export interface AuditOptions {
+    enabled?: boolean;
+    /** Callback for audit events */
+    onEvent?: (event: AuthAuditEvent) => Promise<void> | void;
+}
 export interface AuthModuleOptions {
     isGlobal?: boolean;
     appName: string;
@@ -57,6 +185,8 @@ export interface AuthModuleOptions {
         secret: string;
         accessTokenExpiresIn?: number | string;
         refreshTokenExpiresIn?: number | string;
+        /** Custom token validation - return false to reject the token */
+        validateToken?: (payload: JWTTokenPayload, session: SessionPayload) => Promise<boolean>;
     };
     google?: {
         clientId: string;
@@ -145,6 +275,46 @@ export interface AuthModuleOptions {
      */
     adminConsole?: AdminConsoleOptions;
     debug?: DebugLogOptions;
+    /**
+     * User lifecycle hooks
+     * Customize user creation, validation, and serialization
+     */
+    user?: UserHooks;
+    /**
+     * Authentication hooks
+     * Customize auth responses (login/signup)
+     */
+    auth?: AuthHooks;
+    /**
+     * Guard hooks
+     * Add custom pre/post authentication validation
+     */
+    guards?: GuardHooks;
+    /**
+     * Password customization
+     * Custom hashing, verification, and validation
+     */
+    password?: PasswordHooks;
+    /**
+     * OTP customization
+     * Custom generation, format, and length
+     */
+    otp?: OtpOptions;
+    /**
+     * Authorization hooks
+     * Custom role and permission resolution
+     */
+    authorization?: AuthorizationHooks;
+    /**
+     * Audit logging
+     * Track auth events for compliance
+     */
+    audit?: AuditOptions;
+    /**
+     * Custom error handling
+     * Transform errors before sending to client
+     */
+    errorHandler?: (error: Error, context: 'login' | 'signup' | 'refresh' | 'mfa' | 'password_reset') => any;
 }
 export interface AdminConsoleOptions {
     /** Enable or disable the embedded admin console (default: true) */

package/src/lib/core/interfaces/auth-module-options.interface.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"auth-module-options.interface.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/interfaces/auth-module-options.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;~~AAEnE~~;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACjC,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,+BAA+B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACtC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,GAAG,EAAE;QACD,MAAM,EAAE,MAAM,CAAC;QACf,oBAAoB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACvC,qBAAqB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;~~KAC3C~~,CAAC;IACF,MAAM,CAAC,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,QAAQ,CAAC,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,KAAK,CAAC,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,MAAM,CAAC,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,CAAC,EAAE;QACR,OAAO,EAAE,OAAO,CAAC;KACpB,CAAC;IACF,SAAS,CAAC,EAAE;QACR,OAAO,EAAE,OAAO,CAAC;KACpB,CAAC;IACF;;;OAGG;IACH,YAAY,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,oBAAoB,CAAC,EAAE,KAAK,CAAC,+BAA+B,CAAC,CAAC;KACjE,CAAC;IACF;;;OAGG;IACH,YAAY,CAAC,EAAE;QACX;;;WAGG;QACH,OAAO,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE;YAAE,aAAa,EAAE,GAAG,CAAC;YAAC,aAAa,EAAE,GAAG,CAAA;SAAE,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;KAC7G,CAAC;IACF,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,mBAAmB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACzC,yBAAyB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5C,2BAA2B,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9C;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,KAAK,CAAC,EAAE,eAAe,CAAC;~~CAC3B~~;AAED,MAAM,WAAW,mBAAmB;IAChC,mEAAmE;IACnE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,uEAAuE;IACvE,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;OAEG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACnC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,iBAAiB,CAAC,GAAG,iBAAiB,CAAC;IAChF,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,QAAQ,CAAC,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC1C,WAAW,CAAC,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,wBAAwB;IACrC,uBAAuB,IAAI,OAAO,CAAC,iBAAiB,CAAC,GAAG,iBAAiB,CAAC;CAC7E"}
1	+ {"version":3,"file":"auth-module-options.interface.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/interfaces/auth-module-options.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG5E;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACjC,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,+BAA+B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACtB;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAEvH;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAE3D;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAE1D,8CAA8C;IAC9C,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACtB;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,EAAE,CAChB,QAAQ,EAAE,GAAG,EACb,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,cAAc,KACtB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC1B,kDAAkD;IAClD,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,mCAAmC;IACnC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,iCAAiC;IACjC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC1E;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;IACxB,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB;IACjB,MAAM,CAAC,EAAE,SAAS,GAAG,cAAc,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB;;;OAGG;IACH,UAAU,CAAC,EAAE,CACT,OAAO,EAAE,GAAG,EACZ,OAAO,EAAE,eAAe,KACvB,OAAO,CAAC,IAAI,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE1D,yBAAyB;IACzB,SAAS,CAAC,EAAE,CACR,OAAO,EAAE,GAAG,EACZ,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,cAAc,KACtB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B,6BAA6B;IAC7B,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,mCAAmC;IACnC,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACnF;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,iBAAiB,GAAG,YAAY,GAAG,gBAAgB,CAAC;IAC1F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gCAAgC;IAChC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC7D;AAED,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACtC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,GAAG,EAAE;QACD,MAAM,EAAE,MAAM,CAAC;QACf,oBAAoB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACvC,qBAAqB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACxC,iEAAiE;QACjE,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KAC3F,CAAC;IACF,MAAM,CAAC,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,QAAQ,CAAC,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,KAAK,CAAC,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,MAAM,CAAC,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,CAAC,EAAE;QACR,OAAO,EAAE,OAAO,CAAC;KACpB,CAAC;IACF,SAAS,CAAC,EAAE;QACR,OAAO,EAAE,OAAO,CAAC;KACpB,CAAC;IACF;;;OAGG;IACH,YAAY,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,oBAAoB,CAAC,EAAE,KAAK,CAAC,+BAA+B,CAAC,CAAC;KACjE,CAAC;IACF;;;OAGG;IACH,YAAY,CAAC,EAAE;QACX;;;WAGG;QACH,OAAO,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE;YAAE,aAAa,EAAE,GAAG,CAAC;YAAC,aAAa,EAAE,GAAG,CAAA;SAAE,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;KAC7G,CAAC;IACF,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,mBAAmB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACzC,yBAAyB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5C,2BAA2B,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9C;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,KAAK,CAAC,EAAE,eAAe,CAAC;IAMxB;;;OAGG;IACH,IAAI,CAAC,EAAE,SAAS,CAAC;IAEjB;;;OAGG;IACH,IAAI,CAAC,EAAE,SAAS,CAAC;IAEjB;;;OAGG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IAEpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,aAAa,CAAC;IAEzB;;;OAGG;IACH,GAAG,CAAC,EAAE,UAAU,CAAC;IAEjB;;;OAGG;IACH,aAAa,CAAC,EAAE,kBAAkB,CAAC;IAEnC;;;OAGG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IAErB;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,gBAAgB,KAAK,GAAG,CAAC;CAC5G;AAED,MAAM,WAAW,mBAAmB;IAChC,mEAAmE;IACnE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,uEAAuE;IACvE,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;OAEG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACnC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,iBAAiB,CAAC,GAAG,iBAAiB,CAAC;IAChF,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,QAAQ,CAAC,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC1C,WAAW,CAAC,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,wBAAwB;IACrC,uBAAuB,IAAI,OAAO,CAAC,iBAAiB,CAAC,GAAG,iBAAiB,CAAC;CAC7E"}

package/src/lib/core/interfaces/session-options.interface.d.ts CHANGED Viewed

@@ -1,4 +1,6 @@
 import { CookieOptions as ExpressCookieOptions } from 'express';
+import { NestAuthUser } from '../../user/entities/user.entity';
+import { SessionDataPayload, SessionPayload, JWTTokenPayload } from './token-payload.interface';
 export declare enum SessionStorageType {
     REDIS = "redis",
     DATABASE = "database",
@@ -11,6 +13,56 @@ export interface SessionOptions {
     refreshTokenExpiry?: number | string;
     maxSessionsPerUser?: number;
     slidingExpiration?: boolean;
+    /**
+     * Customize the data stored in the session (database).
+     * This data is NOT sent to the client and can include sensitive information.
+     * Supports async operations for database lookups.
+     *
+     * @param defaultData - The default session data (user, roles, permissions, isMfaVerified)
+     * @param user - The authenticated user entity
+     * @returns Custom session data to store (can be a Promise)
+     *
+     * @example
+     * ```typescript
+     * customizeSessionData: async (defaultData, user) => ({
+     *     ...defaultData,
+     *     organizationId: user.metadata?.organizationId,
+     *     internalApiKey: await fetchApiKey(user.id), // Async DB lookup
+     * })
+     * ```
+     */
+    customizeSessionData?: (defaultData: SessionDataPayload, user: NestAuthUser) => Promise<SessionDataPayload> | SessionDataPayload;
+    /**
+     * Customize the JWT token payload sent to the client.
+     * Keep this minimal for security - sensitive data should stay in session.
+     * Supports async operations for database lookups.
+     *
+     * @param defaultPayload - The default token payload
+     * @param session - The created session (with data from customizeSessionData if configured)
+     * @returns Custom token payload (can be a Promise)
+     *
+     * @example
+     * ```typescript
+     * customizeTokenPayload: async (defaultPayload, session) => ({
+     *     ...defaultPayload,
+     *     roles: undefined, // Remove sensitive data from token
+     *     orgId: session.data?.organizationId, // Add minimal identifier
+     * })
+     * ```
+     */
+    customizeTokenPayload?: (defaultPayload: JWTTokenPayload, session: SessionPayload) => Promise<JWTTokenPayload> | JWTTokenPayload;
+    /**
+     * Called when a new session is created (login/signup)
+     */
+    onCreated?: (session: SessionPayload, user: any) => Promise<void> | void;
+    /**
+     * Called when a session is refreshed (token refresh)
+     */
+    onRefreshed?: (oldSession: SessionPayload, newSession: SessionPayload) => Promise<void> | void;
+    /**
+     * Called when a session is revoked (logout, admin action, security)
+     */
+    onRevoked?: (session: SessionPayload, reason: 'logout' | 'expired' | 'admin' | 'security' | 'password_change') => Promise<void> | void;
 }
 export type CookieOptions = Omit<ExpressCookieOptions, 'maxAge'>;
 //# sourceMappingURL=session-options.interface.d.ts.map

package/src/lib/core/interfaces/session-options.interface.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"session-options.interface.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/interfaces/session-options.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,IAAI,oBAAoB,EAAE,MAAM,SAAS,CAAC;~~AAEhE~~,oBAAY,kBAAkB;IAC1B,KAAK,UAAU;IACf,QAAQ,aAAa;IACrB,MAAM,WAAW;CACpB;AAED,MAAM,WAAW,cAAc;IAC3B,WAAW,EAAE,kBAAkB,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,OAAO,CAAC;~~CAC~~/B;AAGD,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAA"}
1	+ {"version":3,"file":"session-options.interface.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/interfaces/session-options.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,IAAI,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAEhG,oBAAY,kBAAkB;IAC1B,KAAK,UAAU;IACf,QAAQ,aAAa;IACrB,MAAM,WAAW;CACpB;AAED,MAAM,WAAW,cAAc;IAC3B,WAAW,EAAE,kBAAkB,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,CAAC,EAAE,CACnB,WAAW,EAAE,kBAAkB,EAC/B,IAAI,EAAE,YAAY,KACjB,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;IAEtD;;;;;;;;;;;;;;;;;OAiBG;IACH,qBAAqB,CAAC,EAAE,CACpB,cAAc,EAAE,eAAe,EAC/B,OAAO,EAAE,cAAc,KACtB,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAAC;IAMhD;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAEzE;;OAEG;IACH,WAAW,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAE/F;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC1I;AAGD,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAA"}