@ackplus/nest-auth 1.1.18 → 1.1.20

package/src/lib/audit/services/audit.service.d.ts

@@ -0,0 +1,15 @@
+import { AuthConfigService } from '../../core/services/auth-config.service';
+import { UserLoggedInEvent, LoggedOutEvent, UserRegisteredEvent, UserPasswordChangedEvent, User2faEnabledEvent, User2faDisabledEvent } from '../../auth/events';
+export declare class AuditService {
+    private readonly authConfigService;
+    private readonly logger;
+    constructor(authConfigService: AuthConfigService);
+    private emitAuditEvent;
+    handleUserLoggedIn(payload: UserLoggedInEvent): Promise<void>;
+    handleUserLoggedOut(payload: LoggedOutEvent): Promise<void>;
+    handleUserRegistered(payload: UserRegisteredEvent): Promise<void>;
+    handlePasswordChanged(payload: UserPasswordChangedEvent): Promise<void>;
+    handle2faEnabled(payload: User2faEnabledEvent): Promise<void>;
+    handle2faDisabled(payload: User2faDisabledEvent): Promise<void>;
+}
+//# sourceMappingURL=audit.service.d.ts.map

package/src/lib/audit/services/audit.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.service.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/audit/services/audit.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAE5E,OAAO,EACH,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACvB,MAAM,mBAAmB,CAAC;AAG3B,qBACa,YAAY;IAIjB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAHtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;gBAGnC,iBAAiB,EAAE,iBAAiB;YAG3C,cAAc;IAiBtB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB;IAgB7C,mBAAmB,CAAC,OAAO,EAAE,cAAc;IAc3C,oBAAoB,CAAC,OAAO,EAAE,mBAAmB;IAcjD,qBAAqB,CAAC,OAAO,EAAE,wBAAwB;IAavD,gBAAgB,CAAC,OAAO,EAAE,mBAAmB;IAc7C,iBAAiB,CAAC,OAAO,EAAE,oBAAoB;CAWxD"}

package/src/lib/audit/services/audit.service.js

@@ -0,0 +1,143 @@
+"use strict";
+var AuditService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const auth_config_service_1 = require("../../core/services/auth-config.service");
+const auth_constants_1 = require("../../auth.constants");
+const events_1 = require("../../auth/events");
+let AuditService = AuditService_1 = class AuditService {
+    constructor(authConfigService) {
+        this.authConfigService = authConfigService;
+        this.logger = new common_1.Logger(AuditService_1.name);
+    }
+    async emitAuditEvent(event) {
+        const config = this.authConfigService.getConfig();
+        if (config.audit?.enabled === false) {
+            return;
+        }
+        if (config.audit?.onEvent) {
+            try {
+                await config.audit.onEvent(event);
+            }
+            catch (error) {
+                this.logger.error(`Error in audit.onEvent hook: ${error.message}`, error.stack);
+            }
+        }
+    }
+    async handleUserLoggedIn(payload) {
+        await this.emitAuditEvent({
+            type: 'login',
+            userId: payload.payload.user.id,
+            ip: payload.payload.session.ipAddress,
+            userAgent: payload.payload.session.userAgent,
+            success: true,
+            metadata: {
+                provider: payload.payload.provider,
+                tenantId: payload.payload.tenantId,
+            },
+            timestamp: new Date(),
+        });
+    }
+    async handleUserLoggedOut(payload) {
+        await this.emitAuditEvent({
+            type: 'logout',
+            userId: payload.payload.user?.id,
+            success: true,
+            metadata: {
+                reason: payload.payload.reason,
+                sessionId: payload.payload.session.id,
+            },
+            timestamp: new Date(),
+        });
+    }
+    async handleUserRegistered(payload) {
+        await this.emitAuditEvent({
+            type: 'signup',
+            userId: payload.payload.user.id,
+            success: true,
+            metadata: {
+                tenantId: payload.payload.tenantId,
+                provider: payload.payload.provider,
+            },
+            timestamp: new Date(),
+        });
+    }
+    async handlePasswordChanged(payload) {
+        await this.emitAuditEvent({
+            type: 'password_change',
+            userId: payload.payload.user.id,
+            success: true,
+            metadata: {
+                initiatedBy: payload.payload.initiatedBy,
+            },
+            timestamp: new Date(),
+        });
+    }
+    async handle2faEnabled(payload) {
+        await this.emitAuditEvent({
+            type: 'mfa_enable',
+            userId: payload.payload.user.id,
+            success: true,
+            metadata: {
+                method: payload.payload.method,
+                action: 'enabled'
+            },
+            timestamp: new Date(),
+        });
+    }
+    async handle2faDisabled(payload) {
+        await this.emitAuditEvent({
+            type: 'mfa_enable', // reusing type or should add mfa_disable?
+            userId: payload.payload.user.id,
+            success: true,
+            metadata: {
+                action: 'disabled'
+            },
+            timestamp: new Date(),
+        });
+    }
+};
+exports.AuditService = AuditService;
+tslib_1.__decorate([
+    (0, event_emitter_1.OnEvent)(auth_constants_1.NestAuthEvents.LOGGED_IN),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [events_1.UserLoggedInEvent]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuditService.prototype, "handleUserLoggedIn", null);
+tslib_1.__decorate([
+    (0, event_emitter_1.OnEvent)(auth_constants_1.NestAuthEvents.LOGGED_OUT),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [events_1.LoggedOutEvent]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuditService.prototype, "handleUserLoggedOut", null);
+tslib_1.__decorate([
+    (0, event_emitter_1.OnEvent)(auth_constants_1.NestAuthEvents.REGISTERED),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [events_1.UserRegisteredEvent]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuditService.prototype, "handleUserRegistered", null);
+tslib_1.__decorate([
+    (0, event_emitter_1.OnEvent)(auth_constants_1.NestAuthEvents.PASSWORD_CHANGED),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [events_1.UserPasswordChangedEvent]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuditService.prototype, "handlePasswordChanged", null);
+tslib_1.__decorate([
+    (0, event_emitter_1.OnEvent)(auth_constants_1.NestAuthEvents.TWO_FACTOR_ENABLED),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [events_1.User2faEnabledEvent]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuditService.prototype, "handle2faEnabled", null);
+tslib_1.__decorate([
+    (0, event_emitter_1.OnEvent)(auth_constants_1.NestAuthEvents.TWO_FACTOR_DISABLED),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [events_1.User2faDisabledEvent]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuditService.prototype, "handle2faDisabled", null);
+exports.AuditService = AuditService = AuditService_1 = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [auth_config_service_1.AuthConfigService])
+], AuditService);

package/src/lib/auth/controllers/auth.controller.d.ts

@@ -65,7 +65,7 @@ export declare class AuthController {
      */
     resetPassword(input: ResetPasswordRequestDto): Promise<MessageResponseDto>;
     resetPasswordWithToken(input: ResetPasswordWithTokenRequestDto): Promise<MessageResponseDto>;
-    getUser(): Promise<import("../../core").NestAuthUser>;
+    getUser(): Promise<Partial<import("../../core").NestAuthUser>>;
     sendEmailVerification(input: SendEmailVerificationRequestDto): Promise<MessageResponseDto>;
     verifyEmail(input: VerifyEmailRequestDto): Promise<MessageResponseDto>;
     getClientConfig(): Promise<ClientConfigResponseDto>;

package/src/lib/auth/controllers/mfa.controller.js

@@ -30,13 +30,13 @@ let MfaController = class MfaController {
         const user = this.getCurrentUserOrThrow();
         const config = this.mfaService.mfaConfig;
         const globallyEnabled = config?.enabled ?? false;
-        let enabledMethods = [];
+        let verifiedMethods = [];
         let totpDevices = [];
         let hasRecoveryCode = false;
         let isEnabled = false;
         if (globallyEnabled) {
-            [enabledMethods, totpDevices, hasRecoveryCode, isEnabled] = await Promise.all([
-                this.mfaService.getEnabledMethods(user.id),
+            [verifiedMethods, totpDevices, hasRecoveryCode, isEnabled] = await Promise.all([
+                this.mfaService.getVerifiedMethods(user.id),
                 this.mfaService.getTotpDevices(user.id),
                 this.mfaService.hasRecoveryCode(user.id),
                 this.mfaService.isMfaEnabled(user.id),
@@ -44,8 +44,8 @@ let MfaController = class MfaController {
         }
         return {
             isEnabled,
-            enabledMethods,
-            availableMethods: this.mfaService.getAvailableMethods(),
+            verifiedMethods, // Methods user has verified/can use
+            configuredMethods: this.mfaService.getAvailableMethods(), // Methods configured in app
             allowUserToggle: config?.allowUserToggle ?? false,
             allowMethodSelection: config?.allowMethodSelection ?? false,
             totpDevices,

package/src/lib/auth/dto/responses/mfa-status.response.dto.d.ts

@@ -9,8 +9,8 @@ export declare class MfaDeviceDto {
 }
 export declare class MfaStatusResponseDto {
     isEnabled: boolean;
-    enabledMethods: MFAMethodEnum[];
-    availableMethods: MFAMethodEnum[];
+    verifiedMethods: MFAMethodEnum[];
+    configuredMethods: MFAMethodEnum[];
     allowUserToggle: boolean;
     allowMethodSelection: boolean;
     totpDevices: MfaDeviceDto[];

package/src/lib/auth/dto/responses/mfa-status.response.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mfa-status.response.dto.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/nest-auth/src/lib/auth/dto/responses/mfa-status.response.dto.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,qBAAa,YAAY;IAKrB,EAAE,EAAE,MAAM,CAAC;IAMX,UAAU,EAAE,MAAM,CAAC;IAOnB,MAAM,EAAE,aAAa,CAAC;IAMtB,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAMzB,QAAQ,EAAE,OAAO,CAAC;IAMlB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CAC3B;AAED,qBAAa,oBAAoB;IAK7B,SAAS,EAAE,OAAO,CAAC;IAQnB,cAAc,EAAE,aAAa,EAAE,CAAC;IAQhC,gBAAgB,EAAE,aAAa,EAAE,CAAC;IAMlC,eAAe,EAAE,OAAO,CAAC;IAMzB,oBAAoB,EAAE,OAAO,CAAC;IAM9B,WAAW,EAAE,YAAY,EAAE,CAAC;IAM5B,eAAe,EAAE,OAAO,CAAC;CAC5B"}
+{"version":3,"file":"mfa-status.response.dto.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/nest-auth/src/lib/auth/dto/responses/mfa-status.response.dto.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,qBAAa,YAAY;IAKrB,EAAE,EAAE,MAAM,CAAC;IAMX,UAAU,EAAE,MAAM,CAAC;IAOnB,MAAM,EAAE,aAAa,CAAC;IAMtB,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAMzB,QAAQ,EAAE,OAAO,CAAC;IAMlB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CAC3B;AAED,qBAAa,oBAAoB;IAK7B,SAAS,EAAE,OAAO,CAAC;IAQnB,eAAe,EAAE,aAAa,EAAE,CAAC;IAQjC,iBAAiB,EAAE,aAAa,EAAE,CAAC;IAMnC,eAAe,EAAE,OAAO,CAAC;IAMzB,oBAAoB,EAAE,OAAO,CAAC;IAM9B,WAAW,EAAE,YAAY,EAAE,CAAC;IAM5B,eAAe,EAAE,OAAO,CAAC;CAC5B"}

package/src/lib/auth/dto/responses/mfa-status.response.dto.js

@@ -62,22 +62,22 @@ tslib_1.__decorate([
 ], MfaStatusResponseDto.prototype, "isEnabled", void 0);
 tslib_1.__decorate([
     (0, swagger_1.ApiProperty)({
-        description: 'MFA methods currently active for the user',
+        description: 'MFA methods the user has verified and can currently use (includes EMAIL/SMS if configured, and TOTP if user has verified device)',
         enum: core_1.MFAMethodEnum,
         isArray: true,
         example: [core_1.MFAMethodEnum.EMAIL, core_1.MFAMethodEnum.TOTP],
     }),
     tslib_1.__metadata("design:type", Array)
-], MfaStatusResponseDto.prototype, "enabledMethods", void 0);
+], MfaStatusResponseDto.prototype, "verifiedMethods", void 0);
 tslib_1.__decorate([
     (0, swagger_1.ApiProperty)({
-        description: 'All MFA methods available to the user based on backend configuration',
+        description: 'All MFA methods configured and available in the application (methods user can potentially set up)',
         enum: core_1.MFAMethodEnum,
         isArray: true,
-        example: [core_1.MFAMethodEnum.EMAIL, core_1.MFAMethodEnum.TOTP],
+        example: [core_1.MFAMethodEnum.EMAIL, core_1.MFAMethodEnum.TOTP, core_1.MFAMethodEnum.SMS],
     }),
     tslib_1.__metadata("design:type", Array)
-], MfaStatusResponseDto.prototype, "availableMethods", void 0);
+], MfaStatusResponseDto.prototype, "configuredMethods", void 0);
 tslib_1.__decorate([
     (0, swagger_1.ApiProperty)({
         description: 'Indicates if MFA toggling is allowed for the user',

package/src/lib/auth/events/index.d.ts

@@ -0,0 +1,13 @@
+export * from './user-logged-in.event';
+export * from './logged-out.event';
+export * from './logged-out-all.event';
+export * from './user-registered.event';
+export * from './password-reset-requested.event';
+export * from './password-reset.event';
+export * from './two-factor-code-sent.event';
+export * from './user-2fa-verified.event';
+export * from './user-refresh-token.event';
+export * from './user-password-changed.event';
+export * from './user-2fa-enabled.event';
+export * from './user-2fa-disabled.event';
+//# sourceMappingURL=index.d.ts.map

package/src/lib/auth/events/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/events/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC"}

package/src/lib/auth/events/index.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./user-logged-in.event"), exports);
+tslib_1.__exportStar(require("./logged-out.event"), exports);
+tslib_1.__exportStar(require("./logged-out-all.event"), exports);
+tslib_1.__exportStar(require("./user-registered.event"), exports);
+tslib_1.__exportStar(require("./password-reset-requested.event"), exports);
+tslib_1.__exportStar(require("./password-reset.event"), exports);
+tslib_1.__exportStar(require("./two-factor-code-sent.event"), exports);
+tslib_1.__exportStar(require("./user-2fa-verified.event"), exports);
+tslib_1.__exportStar(require("./user-refresh-token.event"), exports);
+tslib_1.__exportStar(require("./user-password-changed.event"), exports);
+tslib_1.__exportStar(require("./user-2fa-enabled.event"), exports);
+tslib_1.__exportStar(require("./user-2fa-disabled.event"), exports);

package/src/lib/auth/events/user-2fa-disabled.event.d.ts

@@ -0,0 +1,10 @@
+import { NestAuthUser } from "../../user/entities/user.entity";
+export interface User2faDisabledEventPayload {
+    user: NestAuthUser;
+}
+export declare class User2faDisabledEvent {
+    readonly payload: User2faDisabledEventPayload;
+    constructor(payload: User2faDisabledEventPayload);
+    get user(): NestAuthUser;
+}
+//# sourceMappingURL=user-2fa-disabled.event.d.ts.map

package/src/lib/auth/events/user-2fa-disabled.event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-2fa-disabled.event.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/events/user-2fa-disabled.event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAE/D,MAAM,WAAW,2BAA2B;IACxC,IAAI,EAAE,YAAY,CAAC;CACtB;AAED,qBAAa,oBAAoB;aAET,OAAO,EAAE,2BAA2B;gBAApC,OAAO,EAAE,2BAA2B;IAGxD,IAAI,IAAI,IAAI,YAAY,CAEvB;CACJ"}

package/src/lib/auth/events/user-2fa-disabled.event.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.User2faDisabledEvent = void 0;
+class User2faDisabledEvent {
+    constructor(payload) {
+        this.payload = payload;
+    }
+    get user() {
+        return this.payload.user;
+    }
+}
+exports.User2faDisabledEvent = User2faDisabledEvent;

package/src/lib/auth/events/user-2fa-enabled.event.d.ts

@@ -0,0 +1,13 @@
+import { NestAuthUser } from "../../user/entities/user.entity";
+import { MFAMethodEnum } from "../../core/interfaces/mfa-options.interface";
+export interface User2faEnabledEventPayload {
+    user: NestAuthUser;
+    method?: MFAMethodEnum;
+}
+export declare class User2faEnabledEvent {
+    readonly payload: User2faEnabledEventPayload;
+    constructor(payload: User2faEnabledEventPayload);
+    get user(): NestAuthUser;
+    get method(): MFAMethodEnum | undefined;
+}
+//# sourceMappingURL=user-2fa-enabled.event.d.ts.map

package/src/lib/auth/events/user-2fa-enabled.event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-2fa-enabled.event.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/events/user-2fa-enabled.event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAE5E,MAAM,WAAW,0BAA0B;IACvC,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,CAAC,EAAE,aAAa,CAAC;CAC1B;AAED,qBAAa,mBAAmB;aAER,OAAO,EAAE,0BAA0B;gBAAnC,OAAO,EAAE,0BAA0B;IAGvD,IAAI,IAAI,IAAI,YAAY,CAEvB;IAED,IAAI,MAAM,IAAI,aAAa,GAAG,SAAS,CAEtC;CACJ"}

package/src/lib/auth/events/user-2fa-enabled.event.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.User2faEnabledEvent = void 0;
+class User2faEnabledEvent {
+    constructor(payload) {
+        this.payload = payload;
+    }
+    get user() {
+        return this.payload.user;
+    }
+    get method() {
+        return this.payload.method;
+    }
+}
+exports.User2faEnabledEvent = User2faEnabledEvent;

package/src/lib/auth/events/user-password-changed.event.d.ts

@@ -0,0 +1,12 @@
+import { NestAuthUser } from "../../user/entities/user.entity";
+export interface UserPasswordChangedEventPayload {
+    user: NestAuthUser;
+    initiatedBy: 'user' | 'admin';
+}
+export declare class UserPasswordChangedEvent {
+    readonly payload: UserPasswordChangedEventPayload;
+    constructor(payload: UserPasswordChangedEventPayload);
+    get user(): NestAuthUser;
+    get initiatedBy(): 'user' | 'admin';
+}
+//# sourceMappingURL=user-password-changed.event.d.ts.map

package/src/lib/auth/events/user-password-changed.event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-password-changed.event.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/events/user-password-changed.event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAE/D,MAAM,WAAW,+BAA+B;IAC5C,IAAI,EAAE,YAAY,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED,qBAAa,wBAAwB;aAEb,OAAO,EAAE,+BAA+B;gBAAxC,OAAO,EAAE,+BAA+B;IAG5D,IAAI,IAAI,IAAI,YAAY,CAEvB;IAED,IAAI,WAAW,IAAI,MAAM,GAAG,OAAO,CAElC;CACJ"}

package/src/lib/auth/events/user-password-changed.event.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserPasswordChangedEvent = void 0;
+class UserPasswordChangedEvent {
+    constructor(payload) {
+        this.payload = payload;
+    }
+    get user() {
+        return this.payload.user;
+    }
+    get initiatedBy() {
+        return this.payload.initiatedBy;
+    }
+}
+exports.UserPasswordChangedEvent = UserPasswordChangedEvent;

package/src/lib/auth/guards/auth.guard.d.ts

@@ -3,6 +3,7 @@ import { Reflector } from '@nestjs/core';
 import { JwtService } from '../../core/services/jwt.service';
 import { SessionManagerService } from '../../session/services/session-manager.service';
 import { AccessKeyService } from '../../user/services/access-key.service';
+import { AuthConfigService } from '../../core/services/auth-config.service';
 export declare const OPTIONAL_AUTH_KEY = "optional_auth";
 /**
  * NestAuthAuthGuard
@@ -23,7 +24,8 @@ export declare class NestAuthAuthGuard implements CanActivate {
     private jwtService;
     private sessionManager;
     private accessKeyService;
-    constructor(reflector: Reflector, jwtService: JwtService, sessionManager: SessionManagerService, accessKeyService: AccessKeyService);
+    private authConfigService;
+    constructor(reflector: Reflector, jwtService: JwtService, sessionManager: SessionManagerService, accessKeyService: AccessKeyService, authConfigService: AuthConfigService);
     canActivate(context: ExecutionContext): Promise<boolean>;
     private handleJwtAuth;
     private handleApiKeyAuth;
@@ -40,10 +42,26 @@ export declare class NestAuthAuthGuard implements CanActivate {
      * Get required roles from decorator
      */
     private getRequiredRoles;
+    /**
+     * Check if user has required roles
+     */
+    /**
+     * Check if user has required roles
+     */
+    /**
+     * Helper to resolve user roles
+     */
+    private resolveUserRoles;
     /**
      * Check if user has required roles
      */
     private checkRoles;
+    /**
+     * Check if user has required permissions
+     */
+    /**
+     * Check if user has required permissions
+     */
     /**
      * Check if user has required permissions
      */

package/src/lib/auth/guards/auth.guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.guard.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/guards/auth.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,WAAW,EAAE,gBAAgB,EAA6C,MAAM,gBAAgB,CAAC;AAEtH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAO1E,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AAEjD;;;;;;;;;;;;;GAaG;AACH,qBACa,iBAAkB,YAAW,WAAW;IAE7C,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,gBAAgB;gBAHhB,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,UAAU,EACtB,cAAc,EAAE,qBAAqB,EACrC,gBAAgB,EAAE,gBAAgB;IAGxC,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;YAyFhD,aAAa;YA2Cb,gBAAgB;YAqDhB,QAAQ;IA0BtB;;OAEG;YACW,kBAAkB;IA4BhC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAc9B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAcxB;;OAEG;IACH,OAAO,CAAC,UAAU;IAqBlB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAwBxB;;OAEG;IACH,OAAO,CAAC,kBAAkB;CAiB7B"}
+{"version":3,"file":"auth.guard.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/guards/auth.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,WAAW,EAAE,gBAAgB,EAA6C,MAAM,gBAAgB,CAAC;AAEtH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAK1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAG5E,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AAEjD;;;;;;;;;;;;;GAaG;AACH,qBACa,iBAAkB,YAAW,WAAW;IAE7C,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,gBAAgB;IACxB,OAAO,CAAC,iBAAiB;gBAJjB,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,UAAU,EACtB,cAAc,EAAE,qBAAqB,EACrC,gBAAgB,EAAE,gBAAgB,EAClC,iBAAiB,EAAE,iBAAiB;IAG1C,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;YAyFhD,aAAa;YAgFb,gBAAgB;YAqDhB,QAAQ;IA0BtB;;OAEG;YACW,kBAAkB;IA+BhC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAc9B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAcxB;;OAEG;IACH;;OAEG;IACH;;OAEG;YACW,gBAAgB;IAoB9B;;OAEG;YACW,UAAU;IAsBxB;;OAEG;IACH;;OAEG;IACH;;OAEG;YACW,gBAAgB;IAuC9B;;OAEG;IACH,OAAO,CAAC,kBAAkB;CAiB7B"}