@ackplus/nest-auth 1.1.27 → 1.1.29

package/dist/lib/auth/services/mfa.service.js

@@ -0,0 +1,420 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MfaService = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const mfa_secret_entity_1 = require("../../auth/entities/mfa-secret.entity");
+const speakeasy_1 = __importDefault(require("speakeasy"));
+const qrcode_1 = __importDefault(require("qrcode"));
+const mfa_options_interface_1 = require("../../core/interfaces/mfa-options.interface");
+const auth_constants_1 = require("../../auth.constants");
+const user_entity_1 = require("../../user/entities/user.entity");
+const otp_entity_1 = require("../../auth/entities/otp.entity");
+const otp_interface_1 = require("../../core/interfaces/otp.interface");
+const otp_1 = require("../../utils/otp");
+const ms_1 = __importDefault(require("ms"));
+const auth_config_service_1 = require("../../core/services/auth-config.service");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const two_factor_code_sent_event_1 = require("../events/two-factor-code-sent.event");
+const trusted_device_entity_1 = require("../entities/trusted-device.entity");
+const crypto_1 = require("crypto");
+const user_2fa_enabled_event_1 = require("../events/user-2fa-enabled.event");
+const user_2fa_disabled_event_1 = require("../events/user-2fa-disabled.event");
+let MfaService = class MfaService {
+    mfaSecretRepository;
+    userRepository;
+    otpRepository;
+    trustedDeviceRepository;
+    eventEmitter;
+    constructor(mfaSecretRepository, userRepository, otpRepository, trustedDeviceRepository, eventEmitter) {
+        this.mfaSecretRepository = mfaSecretRepository;
+        this.userRepository = userRepository;
+        this.otpRepository = otpRepository;
+        this.trustedDeviceRepository = trustedDeviceRepository;
+        this.eventEmitter = eventEmitter;
+    }
+    get mfaConfig() {
+        return auth_config_service_1.AuthConfigService.getOptions().mfa || {};
+    }
+    requireMfaEnabledForApp(throwError = true) {
+        if (!this.mfaConfig.enabled) {
+            if (throwError) {
+                throw new common_1.ForbiddenException({
+                    message: 'MFA is not enabled for the application',
+                    code: auth_constants_1.ERROR_CODES.MFA_NOT_ENABLED,
+                });
+            }
+            return false;
+        }
+        return true;
+    }
+    checkIsMfaEnabledForApp(throwError = true) {
+        return this.requireMfaEnabledForApp(throwError);
+    }
+    async getVerifiedMethods(userId) {
+        if (!this.requireMfaEnabledForApp(false)) {
+            return [];
+        }
+        const verifiedMethods = [];
+        const verifiedTotpDevice = await this.mfaSecretRepository.findOne({
+            where: {
+                userId,
+                verified: true,
+            },
+        });
+        if (verifiedTotpDevice && this.mfaConfig.methods?.includes(mfa_options_interface_1.MFAMethodEnum.TOTP)) {
+            verifiedMethods.push(mfa_options_interface_1.MFAMethodEnum.TOTP);
+        }
+        if (this.mfaConfig.methods?.includes(mfa_options_interface_1.MFAMethodEnum.EMAIL)) {
+            verifiedMethods.push(mfa_options_interface_1.MFAMethodEnum.EMAIL);
+        }
+        if (this.mfaConfig.methods?.includes(mfa_options_interface_1.MFAMethodEnum.SMS)) {
+            verifiedMethods.push(mfa_options_interface_1.MFAMethodEnum.SMS);
+        }
+        return verifiedMethods;
+    }
+    async getEnabledMethods(userId) {
+        if (!this.requireMfaEnabledForApp(false)) {
+            return [];
+        }
+        const isEnabled = await this.isMfaEnabled(userId);
+        if (!isEnabled) {
+            return [];
+        }
+        const enableMethod = [];
+        if (this.mfaConfig.methods?.includes(mfa_options_interface_1.MFAMethodEnum.EMAIL)) {
+            enableMethod.push(mfa_options_interface_1.MFAMethodEnum.EMAIL);
+        }
+        if (this.mfaConfig.methods?.includes(mfa_options_interface_1.MFAMethodEnum.SMS)) {
+            enableMethod.push(mfa_options_interface_1.MFAMethodEnum.SMS);
+        }
+        const verifiedTotpDevice = await this.mfaSecretRepository.findOne({
+            where: {
+                userId,
+                verified: true,
+            },
+        });
+        if (verifiedTotpDevice) {
+            enableMethod.push(mfa_options_interface_1.MFAMethodEnum.TOTP);
+        }
+        return enableMethod;
+    }
+    async sendMfaCode(userId, method) {
+        this.requireMfaEnabledForApp(true);
+        const options = auth_config_service_1.AuthConfigService.getOptions();
+        let code;
+        if (options.otp?.generate) {
+            code = await options.otp.generate(this.mfaConfig.otpLength);
+        }
+        else {
+            code = (0, otp_1.generateOtp)(this.mfaConfig.otpLength);
+        }
+        let expiresAtMs;
+        if (typeof this.mfaConfig.otpExpiresIn === 'string') {
+            expiresAtMs = (0, ms_1.default)(this.mfaConfig.otpExpiresIn);
+        }
+        else {
+            expiresAtMs = this.mfaConfig.otpExpiresIn || 900000;
+        }
+        if (!expiresAtMs || isNaN(expiresAtMs) || expiresAtMs <= 0) {
+            throw new Error(`Invalid MFA configuration: otpExpiresIn '${this.mfaConfig.otpExpiresIn}' results in invalid duration`);
+        }
+        await this.otpRepository.delete({
+            userId,
+            type: otp_interface_1.OTPTypeEnum.MFA
+        });
+        const otp = await this.otpRepository.create({
+            userId,
+            type: otp_interface_1.OTPTypeEnum.MFA,
+            expiresAt: new Date(Date.now() + expiresAtMs),
+            code,
+        });
+        await this.otpRepository.save(otp);
+        if (method === mfa_options_interface_1.MFAMethodEnum.EMAIL || method === mfa_options_interface_1.MFAMethodEnum.SMS) {
+            const user = await this.userRepository.findOne({ where: { id: userId } });
+            if (user) {
+                await this.eventEmitter.emitAsync(auth_constants_1.NestAuthEvents.TWO_FACTOR_CODE_SENT, new two_factor_code_sent_event_1.TwoFactorCodeSentEvent({
+                    user,
+                    tenantId: user.tenantId,
+                    method,
+                    code,
+                }));
+            }
+        }
+        return true;
+    }
+    async verifyMfa(userId, inputOtp, method) {
+        this.requireMfaEnabledForApp(true);
+        if (this.mfaConfig.defaultOtp && this.mfaConfig.defaultOtp === inputOtp) {
+            return true;
+        }
+        if (method === mfa_options_interface_1.MFAMethodEnum.TOTP) {
+            const devices = await this.mfaSecretRepository.find({
+                where: { userId, verified: true }
+            });
+            for (const device of devices) {
+                const isValid = speakeasy_1.default.totp.verify({
+                    secret: device.secret,
+                    encoding: 'base32',
+                    token: inputOtp,
+                    window: 1
+                });
+                if (isValid) {
+                    await this.mfaSecretRepository.update({ id: device.id }, { lastUsedAt: new Date() });
+                    return true;
+                }
+            }
+            return false;
+        }
+        if (method === mfa_options_interface_1.MFAMethodEnum.EMAIL || method === mfa_options_interface_1.MFAMethodEnum.SMS) {
+            const otp = await this.otpRepository.findOne({
+                where: {
+                    userId,
+                    type: otp_interface_1.OTPTypeEnum.MFA,
+                    used: false,
+                    expiresAt: (0, typeorm_2.MoreThan)(new Date()),
+                    code: inputOtp
+                }
+            });
+            if (!otp) {
+                return false;
+            }
+            await this.otpRepository.delete(otp.id);
+            return true;
+        }
+        return false;
+    }
+    async setupTotpDevice(userId, deviceName) {
+        this.requireMfaEnabledForApp(true);
+        const user = await this.userRepository.findOne({ where: { id: userId } });
+        if (!user) {
+            throw new Error('User not found');
+        }
+        const secret = speakeasy_1.default.generateSecret();
+        await this.mfaSecretRepository.save({
+            userId,
+            secret: secret.base32,
+            deviceName: deviceName || 'Authenticator',
+            verified: false
+        });
+        const qrCode = await qrcode_1.default.toDataURL(secret.otpauth_url);
+        return { secret: secret.base32, qrCode };
+    }
+    async verifyTotpSetup(userId, secret, inputOtp) {
+        this.requireMfaEnabledForApp(true);
+        const device = await this.mfaSecretRepository.findOne({
+            where: { userId, secret }
+        });
+        if (device) {
+            if (device.verified) {
+                return true;
+            }
+            const isValid = speakeasy_1.default.totp.verify({
+                secret: device.secret,
+                encoding: 'base32',
+                token: inputOtp,
+                window: 1
+            });
+            if (isValid) {
+                await this.mfaSecretRepository.update({ id: device.id }, { verified: true });
+                return true;
+            }
+        }
+        return false;
+    }
+    async getTotpDevices(userId) {
+        this.requireMfaEnabledForApp(true);
+        const devices = await this.mfaSecretRepository.find({
+            select: ['id', 'deviceName', 'lastUsedAt', 'verified', 'createdAt'],
+            where: { userId },
+            order: { lastUsedAt: 'DESC', createdAt: 'DESC' }
+        });
+        return devices.map(device => ({
+            id: device.id,
+            deviceName: device.deviceName,
+            method: mfa_options_interface_1.MFAMethodEnum.TOTP,
+            lastUsedAt: device.lastUsedAt,
+            createdAt: device.createdAt,
+            verified: device.verified,
+        }));
+    }
+    async removeDevice(deviceId) {
+        this.requireMfaEnabledForApp(true);
+        await this.mfaSecretRepository.delete({ id: deviceId });
+    }
+    async isRequiresMfa(userId) {
+        if (!this.mfaConfig.enabled) {
+            return false;
+        }
+        if (this.mfaConfig.required) {
+            return true;
+        }
+        const user = await this.userRepository.findOne({
+            select: ['id', 'isMfaEnabled'],
+            where: { id: userId },
+        });
+        return !!user?.isMfaEnabled;
+    }
+    async isMfaEnabled(userId) {
+        if (this.mfaConfig.enabled) {
+            const user = await this.userRepository.findOne({
+                select: ['id', 'isMfaEnabled'],
+                where: { id: userId },
+            });
+            return !!user?.isMfaEnabled;
+        }
+        return false;
+    }
+    async markAsVerified(userId, deviceId) {
+        this.requireMfaEnabledForApp(true);
+        await this.mfaSecretRepository.update({ id: deviceId, userId }, { verified: true });
+    }
+    async enableMFA(userId) {
+        this.requireMfaEnabledForApp(true);
+        if (!this.mfaConfig.allowUserToggle) {
+            throw new common_1.ForbiddenException({
+                message: 'MFA toggling is not allowed',
+                code: auth_constants_1.ERROR_CODES.MFA_TOGGLING_NOT_ALLOWED,
+            });
+        }
+        const verifiedMethods = await this.getVerifiedMethods(userId);
+        if (verifiedMethods.length === 0) {
+            throw new common_1.ForbiddenException({
+                message: 'Cannot enable MFA without at least one verified method',
+                code: auth_constants_1.ERROR_CODES.MFA_CANNOT_ENABLE_WITHOUT_METHOD,
+            });
+        }
+        await this.userRepository.update(userId, { isMfaEnabled: true });
+        const user = await this.userRepository.findOne({ where: { id: userId } });
+        if (user) {
+            await this.eventEmitter.emitAsync(auth_constants_1.NestAuthEvents.TWO_FACTOR_ENABLED, new user_2fa_enabled_event_1.User2faEnabledEvent({
+                user,
+                method: verifiedMethods[0]
+            }));
+        }
+    }
+    async disableMFA(userId) {
+        this.checkIsMfaEnabledForApp(true);
+        if (!this.mfaConfig.allowUserToggle) {
+            throw new common_1.ForbiddenException({
+                message: 'MFA toggling is not allowed',
+                code: auth_constants_1.ERROR_CODES.MFA_TOGGLING_NOT_ALLOWED,
+            });
+        }
+        await this.userRepository.update(userId, { isMfaEnabled: false });
+        const user = await this.userRepository.findOne({ where: { id: userId } });
+        if (user) {
+            await this.eventEmitter.emitAsync(auth_constants_1.NestAuthEvents.TWO_FACTOR_DISABLED, new user_2fa_disabled_event_1.User2faDisabledEvent({
+                user
+            }));
+        }
+    }
+    async removeTotpDevice(deviceId) {
+        this.checkIsMfaEnabledForApp(true);
+        await this.mfaSecretRepository.delete({ id: deviceId });
+    }
+    async generateRecoveryCode(userId) {
+        this.checkIsMfaEnabledForApp(true);
+        const secret = speakeasy_1.default.generateSecret({
+            name: `NestAuth:${userId}`,
+        });
+        await this.userRepository.update(userId, { mfaRecoveryCode: secret.base32 });
+        return secret.base32;
+    }
+    async resetMfa(userId, code) {
+        this.checkIsMfaEnabledForApp(true);
+        const user = await this.userRepository.findOne({ where: { id: userId } });
+        if (!user) {
+            throw new common_1.UnauthorizedException({
+                message: 'User not found',
+                code: auth_constants_1.ERROR_CODES.USER_NOT_FOUND
+            });
+        }
+        if (user.mfaRecoveryCode === code) {
+            await this.userRepository.update(userId, { mfaRecoveryCode: null });
+            await this.mfaSecretRepository.delete({ userId });
+            return {
+                message: 'Recovery code verified',
+            };
+        }
+        throw new common_1.UnauthorizedException({
+            message: 'Invalid recovery code',
+            code: auth_constants_1.ERROR_CODES.MFA_RECOVERY_CODE_INVALID
+        });
+    }
+    getAvailableMethods() {
+        if (!this.requireMfaEnabledForApp(false)) {
+            return [];
+        }
+        return this.mfaConfig.methods ?? [];
+    }
+    async hasRecoveryCode(userId) {
+        if (!this.checkIsMfaEnabledForApp(false)) {
+            return false;
+        }
+        const user = await this.userRepository.findOne({
+            select: ['id', 'mfaRecoveryCode'],
+            where: { id: userId },
+        });
+        return Boolean(user?.mfaRecoveryCode);
+    }
+    async createTrustedDevice(userId, userAgent, ipAddress) {
+        this.requireMfaEnabledForApp(true);
+        const token = (0, crypto_1.randomBytes)(32).toString('hex');
+        const duration = this.mfaConfig.trustedDeviceDuration || '30d';
+        const expiresAtMs = typeof duration === 'string' ? (0, ms_1.default)(duration) : duration;
+        await this.trustedDeviceRepository.save({
+            userId,
+            token,
+            userAgent,
+            ipAddress,
+            expiresAt: new Date(Date.now() + expiresAtMs),
+        });
+        return token;
+    }
+    async validateTrustedDevice(userId, token) {
+        if (!token)
+            return false;
+        const device = await this.trustedDeviceRepository.findOne({
+            where: { userId, token },
+        });
+        if (!device)
+            return false;
+        if (device.expiresAt < new Date()) {
+            await this.trustedDeviceRepository.remove(device);
+            return false;
+        }
+        await this.trustedDeviceRepository.update(device.id, { lastUsedAt: new Date() });
+        return true;
+    }
+};
+exports.MfaService = MfaService;
+exports.MfaService = MfaService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_1.InjectRepository)(mfa_secret_entity_1.NestAuthMFASecret)),
+    __param(1, (0, typeorm_1.InjectRepository)(user_entity_1.NestAuthUser)),
+    __param(2, (0, typeorm_1.InjectRepository)(otp_entity_1.NestAuthOTP)),
+    __param(3, (0, typeorm_1.InjectRepository)(trusted_device_entity_1.NestAuthTrustedDevice)),
+    __metadata("design:paramtypes", [typeorm_2.Repository,
+        typeorm_2.Repository,
+        typeorm_2.Repository,
+        typeorm_2.Repository,
+        event_emitter_1.EventEmitter2])
+], MfaService);
+//# sourceMappingURL=mfa.service.js.map

package/dist/lib/auth/services/mfa.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa.service.js","sourceRoot":"","sources":["../../../../src/lib/auth/services/mfa.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,2CAAuF;AACvF,6CAAmD;AACnD,qCAA+C;AAC/C,6EAA0E;AAC1E,0DAAkC;AAClC,oDAA4B;AAC5B,uFAAwF;AACxF,yDAG8B;AAC9B,iEAA+D;AAC/D,+DAA6D;AAC7D,uEAAkE;AAClE,yCAA8C;AAC9C,4CAAoB;AACpB,iFAA4E;AAC5E,yDAAsD;AACtD,qFAA8E;AAC9E,6EAA0E;AAC1E,mCAAqC;AACrC,6EAAuE;AACvE,+EAAyE;AAIlE,IAAM,UAAU,GAAhB,MAAM,UAAU;IAIP;IAGA;IAGA;IAGA;IAEA;IAbZ,YAEY,mBAAkD,EAGlD,cAAwC,EAGxC,aAAsC,EAGtC,uBAA0D,EAE1D,YAA2B;QAX3B,wBAAmB,GAAnB,mBAAmB,CAA+B;QAGlD,mBAAc,GAAd,cAAc,CAA0B;QAGxC,kBAAa,GAAb,aAAa,CAAyB;QAGtC,4BAAuB,GAAvB,uBAAuB,CAAmC;QAE1D,iBAAY,GAAZ,YAAY,CAAe;IACnC,CAAC;IAEL,IAAI,SAAS;QACT,OAAO,uCAAiB,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IACpD,CAAC;IAED,uBAAuB,CAAC,aAAsB,IAAI;QAC9C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,UAAU,EAAE,CAAC;gBACb,MAAM,IAAI,2BAAkB,CAAC;oBACzB,OAAO,EAAE,wCAAwC;oBACjD,IAAI,EAAE,4BAAW,CAAC,eAAe;iBACpC,CAAC,CAAC;YACP,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,uBAAuB,CAAC,aAAsB,IAAI;QACtD,OAAO,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACnC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,eAAe,GAAoB,EAAE,CAAA;QAG3C,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;YAC9D,KAAK,EAAE;gBACH,MAAM;gBACN,QAAQ,EAAE,IAAI;aACjB;SACJ,CAAC,CAAC;QAEH,IAAI,kBAAkB,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,qCAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,eAAe,CAAC,IAAI,CAAC,qCAAa,CAAC,IAAI,CAAC,CAAA;QAC5C,CAAC;QAKD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,qCAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,eAAe,CAAC,IAAI,CAAC,qCAAa,CAAC,KAAK,CAAC,CAAA;QAC7C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,qCAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,eAAe,CAAC,IAAI,CAAC,qCAAa,CAAC,GAAG,CAAC,CAAA;QAC3C,CAAC;QAED,OAAO,eAAe,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAc;QAClC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,EAAE,CAAA;QAEvB,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,qCAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,YAAY,CAAC,IAAI,CAAC,qCAAa,CAAC,KAAK,CAAC,CAAA;QAC1C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,qCAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,YAAY,CAAC,IAAI,CAAC,qCAAa,CAAC,GAAG,CAAC,CAAA;QACxC,CAAC;QAED,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;YAC9D,KAAK,EAAE;gBACH,MAAM;gBACN,QAAQ,EAAE,IAAI;aACjB;SACJ,CAAC,CAAC;QAEH,IAAI,kBAAkB,EAAE,CAAC;YACrB,YAAY,CAAC,IAAI,CAAC,qCAAa,CAAC,IAAI,CAAC,CAAA;QACzC,CAAC;QAED,OAAO,YAAY,CAAC;IACxB,CAAC;IAGD,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,MAAqB;QAEnD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,OAAO,GAAG,uCAAiB,CAAC,UAAU,EAAE,CAAC;QAC/C,IAAI,IAAY,CAAC;QAGjB,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;YACxB,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACJ,IAAI,GAAG,IAAA,iBAAW,EAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,WAAmB,CAAC;QACxB,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YAClD,WAAW,GAAG,IAAA,YAAE,EAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACJ,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,IAAI,MAAM,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,SAAS,CAAC,YAAY,+BAA+B,CAAC,CAAC;QAC5H,CAAC;QAGD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAC5B,MAAM;YACN,IAAI,EAAE,2BAAW,CAAC,GAAG;SACxB,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YACxC,MAAM;YACN,IAAI,EAAE,2BAAW,CAAC,GAAG;YACrB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YAC7C,IAAI;SACP,CAAC,CAAA;QACF,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEnC,IAAI,MAAM,KAAK,qCAAa,CAAC,KAAK,IAAI,MAAM,KAAK,qCAAa,CAAC,GAAG,EAAE,CAAC;YACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1E,IAAI,IAAI,EAAE,CAAC;gBACP,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAC7B,+BAAc,CAAC,oBAAoB,EACnC,IAAI,mDAAsB,CAAC;oBACvB,IAAI;oBACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM;oBACN,IAAI;iBACP,CAAC,CACL,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,QAAgB,EAAE,MAAqB;QAEnE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAGlC,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,KAAK,qCAAa,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;gBAChD,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;aACpC,CAAC,CAAC;YAEH,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,mBAAS,CAAC,IAAI,CAAC,MAAM,CAAC;oBAClC,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,QAAQ;oBAClB,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE,CAAC;iBACZ,CAAC,CAAC;gBAEH,IAAI,OAAO,EAAE,CAAC;oBAEV,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CACjC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EACjB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAC7B,CAAC;oBACF,OAAO,IAAI,CAAC;gBAChB,CAAC;YACL,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,MAAM,KAAK,qCAAa,CAAC,KAAK,IAAI,MAAM,KAAK,qCAAa,CAAC,GAAG,EAAE,CAAC;YACjE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;gBACzC,KAAK,EAAE;oBACH,MAAM;oBACN,IAAI,EAAE,2BAAW,CAAC,GAAG;oBACrB,IAAI,EAAE,KAAK;oBACX,SAAS,EAAE,IAAA,kBAAQ,EAAC,IAAI,IAAI,EAAE,CAAC;oBAC/B,IAAI,EAAE,QAAQ;iBACjB;aACJ,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,EAAE,CAAC;gBACP,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAGD,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,UAAmB;QACrD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,mBAAS,CAAC,cAAc,EAAE,CAAC;QAE1C,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAChC,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,UAAU,IAAI,eAAe;YACzC,QAAQ,EAAE,KAAK;SAClB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,gBAAM,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,MAAc,EAAE,QAAgB;QAElE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;SAC5B,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,OAAO,GAAG,mBAAS,CAAC,IAAI,CAAC,MAAM,CAAC;gBAClC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,CAAC;aACZ,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBACV,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7E,OAAO,IAAI,CAAC;YAChB,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QAC/B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAChD,MAAM,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC;YACnE,KAAK,EAAE,EAAE,MAAM,EAAE;YACjB,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;SACnD,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,qCAAa,CAAC,IAAI;YAC1B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC,CAAC;IACR,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB;QAC/B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAc;QAC9B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC;YAC9B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;SACxB,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC7B,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC;gBAC9B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;aACxB,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC;QAChC,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,QAAgB;QACjD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CACjC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EACxB,EAAE,QAAQ,EAAE,IAAI,EAAE,CACrB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc;QAC1B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,2BAAkB,CAAC;gBACzB,OAAO,EAAE,6BAA6B;gBACtC,IAAI,EAAE,4BAAW,CAAC,wBAAwB;aAC7C,CAAC,CAAC;QACP,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,2BAAkB,CAAC;gBACzB,OAAO,EAAE,wDAAwD;gBACjE,IAAI,EAAE,4BAAW,CAAC,gCAAgC;aACrD,CAAC,CAAC;QACP,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAC7B,+BAAc,CAAC,kBAAkB,EACjC,IAAI,4CAAmB,CAAC;gBACpB,IAAI;gBACJ,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;aAC7B,CAAC,CACL,CAAC;QACN,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC3B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAEnC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,2BAAkB,CAAC;gBACzB,OAAO,EAAE,6BAA6B;gBACtC,IAAI,EAAE,4BAAW,CAAC,wBAAwB;aAC7C,CAAC,CAAC;QACP,CAAC;QACD,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAElE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAC7B,+BAAc,CAAC,mBAAmB,EAClC,IAAI,8CAAoB,CAAC;gBACrB,IAAI;aACP,CAAC,CACL,CAAC;QACN,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACnC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAAc;QACrC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,MAAM,GAAG,mBAAS,CAAC,cAAc,CAAC;YACpC,IAAI,EAAE,YAAY,MAAM,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,IAAY;QAEvC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,8BAAqB,CAAC;gBAC5B,OAAO,EAAE,gBAAgB;gBACzB,IAAI,EAAE,4BAAW,CAAC,cAAc;aACnC,CAAC,CAAC;QACP,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAEhC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YAGpE,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAElD,OAAO;gBACH,OAAO,EAAE,wBAAwB;aACpC,CAAC;QACN,CAAC;QAED,MAAM,IAAI,8BAAqB,CAAC;YAC5B,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,4BAAW,CAAC,yBAAyB;SAC9C,CAAC,CAAC;IACP,CAAC;IAED,mBAAmB;QACf,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc;QAChC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC;YACjC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;SACxB,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,SAAiB,EAAE,SAAiB;QAC1E,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAEnC,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,qBAAqB,IAAI,KAAK,CAAC;QAC/D,MAAM,WAAW,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,YAAE,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAE3E,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC;YACpC,MAAM;YACN,KAAK;YACL,SAAS;YACT,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;SAChD,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAAc,EAAE,KAAa;QACrD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC;YACtD,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClD,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AApeY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;IAIJ,WAAA,IAAA,0BAAgB,EAAC,qCAAiB,CAAC,CAAA;IAGnC,WAAA,IAAA,0BAAgB,EAAC,0BAAY,CAAC,CAAA;IAG9B,WAAA,IAAA,0BAAgB,EAAC,wBAAW,CAAC,CAAA;IAG7B,WAAA,IAAA,0BAAgB,EAAC,6CAAqB,CAAC,CAAA;qCARX,oBAAU;QAGf,oBAAU;QAGX,oBAAU;QAGA,oBAAU;QAErB,6BAAa;GAf9B,UAAU,CAoetB"}

package/dist/lib/auth.constants.d.ts

@@ -0,0 +1,210 @@
+export declare const AUTH_MODULE_OPTIONS = "NEST_AUTH_AUTH_MODULE_OPTIONS";
+export declare const NEST_AUTH_ASYNC_OPTIONS_PROVIDER = "NEST_AUTH_ASYNC_OPTIONS_PROVIDER";
+export declare const JWT_AUTH_PROVIDER = "jwt";
+export declare const GOOGLE_AUTH_PROVIDER = "google";
+export declare const FACEBOOK_AUTH_PROVIDER = "facebook";
+export declare const APPLE_AUTH_PROVIDER = "apple";
+export declare const GITHUB_AUTH_PROVIDER = "github";
+export declare const EMAIL_AUTH_PROVIDER = "email";
+export declare const PHONE_AUTH_PROVIDER = "phone";
+export declare const AUTH_ERROR_CODES: {
+    readonly REGISTRATION_DISABLED: "REGISTRATION_DISABLED";
+    readonly EMAIL_ALREADY_EXISTS: "EMAIL_ALREADY_EXISTS";
+    readonly PHONE_ALREADY_EXISTS: "PHONE_ALREADY_EXISTS";
+    readonly PROVIDER_NOT_FOUND: "PROVIDER_NOT_FOUND";
+    readonly INVALID_CREDENTIALS: "INVALID_CREDENTIALS";
+    readonly INVALID_PROVIDER: "INVALID_PROVIDER";
+    readonly MISSING_REQUIRED_FIELDS: "MISSING_REQUIRED_FIELDS";
+    readonly USER_NOT_FOUND: "USER_NOT_FOUND";
+    readonly ACCOUNT_SUSPENDED: "ACCOUNT_SUSPENDED";
+    readonly ACCOUNT_INACTIVE: "ACCOUNT_INACTIVE";
+    readonly EMAIL_NOT_VERIFIED: "EMAIL_NOT_VERIFIED";
+    readonly CURRENT_PASSWORD_INCORRECT: "CURRENT_PASSWORD_INCORRECT";
+    readonly NEW_PASSWORD_SAME_AS_CURRENT: "NEW_PASSWORD_SAME_AS_CURRENT";
+    readonly PASSWORD_RESET_INVALID_REQUEST: "PASSWORD_RESET_INVALID_REQUEST";
+    readonly PASSWORD_RESET_TOKEN_INVALID: "PASSWORD_RESET_TOKEN_INVALID";
+    readonly PASSWORD_RESET_TOKEN_EXPIRED: "PASSWORD_RESET_TOKEN_EXPIRED";
+    readonly REFRESH_TOKEN_INVALID: "REFRESH_TOKEN_INVALID";
+    readonly REFRESH_TOKEN_EXPIRED: "REFRESH_TOKEN_EXPIRED";
+    readonly INVALID_TOKEN: "INVALID_TOKEN";
+    readonly TOKEN_EXPIRED: "TOKEN_EXPIRED";
+    readonly EMAIL_ALREADY_VERIFIED: "EMAIL_ALREADY_VERIFIED";
+    readonly VERIFICATION_CODE_INVALID: "VERIFICATION_CODE_INVALID";
+    readonly VERIFICATION_CODE_EXPIRED: "VERIFICATION_CODE_EXPIRED";
+    readonly NO_EMAIL_ADDRESS: "NO_EMAIL_ADDRESS";
+    readonly NO_PHONE_NUMBER: "NO_PHONE_NUMBER";
+};
+export declare const MFA_ERROR_CODES: {
+    readonly MFA_NOT_ENABLED: "MFA_NOT_ENABLED";
+    readonly MFA_REQUIRED: "MFA_REQUIRED";
+    readonly MFA_CODE_INVALID: "MFA_CODE_INVALID";
+    readonly MFA_CODE_EXPIRED: "MFA_CODE_EXPIRED";
+    readonly MFA_METHOD_NOT_AVAILABLE: "MFA_METHOD_NOT_AVAILABLE";
+    readonly MFA_TOGGLING_NOT_ALLOWED: "MFA_TOGGLING_NOT_ALLOWED";
+    readonly MFA_CANNOT_ENABLE_WITHOUT_METHOD: "MFA_CANNOT_ENABLE_WITHOUT_METHOD";
+    readonly MFA_RECOVERY_CODE_INVALID: "MFA_RECOVERY_CODE_INVALID";
+    readonly TOTP_SETUP_FAILED: "TOTP_SETUP_FAILED";
+    readonly TOTP_VERIFICATION_FAILED: "TOTP_VERIFICATION_FAILED";
+};
+export declare const SESSION_ERROR_CODES: {
+    readonly SESSION_NOT_FOUND: "SESSION_NOT_FOUND";
+    readonly SESSION_EXPIRED: "SESSION_EXPIRED";
+    readonly SESSION_INVALID: "SESSION_INVALID";
+    readonly MAX_SESSIONS_REACHED: "MAX_SESSIONS_REACHED";
+};
+export declare const GUARD_ERROR_CODES: {
+    readonly NO_AUTH_PROVIDED: "NO_AUTH_PROVIDED";
+    readonly INVALID_AUTH_FORMAT: "INVALID_AUTH_FORMAT";
+    readonly INVALID_AUTH_TYPE: "INVALID_AUTH_TYPE";
+    readonly UNAUTHORIZED: "UNAUTHORIZED";
+    readonly ACCESS_DENIED: "ACCESS_DENIED";
+    readonly FORBIDDEN: "FORBIDDEN";
+    readonly NO_ROLES_ASSIGNED: "NO_ROLES_ASSIGNED";
+    readonly MISSING_REQUIRED_ROLES: "MISSING_REQUIRED_ROLES";
+    readonly MISSING_REQUIRED_PERMISSIONS: "MISSING_REQUIRED_PERMISSIONS";
+};
+export declare const API_KEY_ERROR_CODES: {
+    readonly INVALID_API_KEY_FORMAT: "INVALID_API_KEY_FORMAT";
+    readonly INVALID_API_KEY: "INVALID_API_KEY";
+    readonly API_KEY_EXPIRED: "API_KEY_EXPIRED";
+    readonly API_KEY_DEACTIVATED: "API_KEY_DEACTIVATED";
+    readonly API_KEY_NOT_FOUND: "API_KEY_NOT_FOUND";
+};
+export declare const VALIDATION_ERROR_CODES: {
+    readonly EMAIL_OR_PHONE_REQUIRED: "EMAIL_OR_PHONE_REQUIRED";
+    readonly TENANT_ID_REQUIRED: "TENANT_ID_REQUIRED";
+    readonly INVALID_INPUT: "INVALID_INPUT";
+    readonly MISSING_REQUIRED_FIELD: "MISSING_REQUIRED_FIELD";
+    readonly INVALID_EMAIL_FORMAT: "INVALID_EMAIL_FORMAT";
+    readonly INVALID_PHONE_FORMAT: "INVALID_PHONE_FORMAT";
+};
+export declare const OTP_ERROR_CODES: {
+    readonly OTP_INVALID: "OTP_INVALID";
+    readonly OTP_EXPIRED: "OTP_EXPIRED";
+    readonly OTP_ALREADY_USED: "OTP_ALREADY_USED";
+    readonly OTP_NOT_FOUND: "OTP_NOT_FOUND";
+};
+export declare const USER_ERROR_CODES: {
+    readonly USER_NOT_FOUND: "USER_NOT_FOUND";
+    readonly USER_ALREADY_EXISTS: "USER_ALREADY_EXISTS";
+    readonly USER_CREATION_FAILED: "USER_CREATION_FAILED";
+    readonly USER_UPDATE_FAILED: "USER_UPDATE_FAILED";
+    readonly USER_DELETION_FAILED: "USER_DELETION_FAILED";
+};
+export declare const TENANT_ERROR_CODES: {
+    readonly TENANT_NOT_FOUND: "TENANT_NOT_FOUND";
+    readonly TENANT_ALREADY_EXISTS: "TENANT_ALREADY_EXISTS";
+    readonly INVALID_TENANT: "INVALID_TENANT";
+};
+export declare const ERROR_CODES: {
+    readonly TENANT_NOT_FOUND: "TENANT_NOT_FOUND";
+    readonly TENANT_ALREADY_EXISTS: "TENANT_ALREADY_EXISTS";
+    readonly INVALID_TENANT: "INVALID_TENANT";
+    readonly USER_NOT_FOUND: "USER_NOT_FOUND";
+    readonly USER_ALREADY_EXISTS: "USER_ALREADY_EXISTS";
+    readonly USER_CREATION_FAILED: "USER_CREATION_FAILED";
+    readonly USER_UPDATE_FAILED: "USER_UPDATE_FAILED";
+    readonly USER_DELETION_FAILED: "USER_DELETION_FAILED";
+    readonly OTP_INVALID: "OTP_INVALID";
+    readonly OTP_EXPIRED: "OTP_EXPIRED";
+    readonly OTP_ALREADY_USED: "OTP_ALREADY_USED";
+    readonly OTP_NOT_FOUND: "OTP_NOT_FOUND";
+    readonly EMAIL_OR_PHONE_REQUIRED: "EMAIL_OR_PHONE_REQUIRED";
+    readonly TENANT_ID_REQUIRED: "TENANT_ID_REQUIRED";
+    readonly INVALID_INPUT: "INVALID_INPUT";
+    readonly MISSING_REQUIRED_FIELD: "MISSING_REQUIRED_FIELD";
+    readonly INVALID_EMAIL_FORMAT: "INVALID_EMAIL_FORMAT";
+    readonly INVALID_PHONE_FORMAT: "INVALID_PHONE_FORMAT";
+    readonly INVALID_API_KEY_FORMAT: "INVALID_API_KEY_FORMAT";
+    readonly INVALID_API_KEY: "INVALID_API_KEY";
+    readonly API_KEY_EXPIRED: "API_KEY_EXPIRED";
+    readonly API_KEY_DEACTIVATED: "API_KEY_DEACTIVATED";
+    readonly API_KEY_NOT_FOUND: "API_KEY_NOT_FOUND";
+    readonly NO_AUTH_PROVIDED: "NO_AUTH_PROVIDED";
+    readonly INVALID_AUTH_FORMAT: "INVALID_AUTH_FORMAT";
+    readonly INVALID_AUTH_TYPE: "INVALID_AUTH_TYPE";
+    readonly UNAUTHORIZED: "UNAUTHORIZED";
+    readonly ACCESS_DENIED: "ACCESS_DENIED";
+    readonly FORBIDDEN: "FORBIDDEN";
+    readonly NO_ROLES_ASSIGNED: "NO_ROLES_ASSIGNED";
+    readonly MISSING_REQUIRED_ROLES: "MISSING_REQUIRED_ROLES";
+    readonly MISSING_REQUIRED_PERMISSIONS: "MISSING_REQUIRED_PERMISSIONS";
+    readonly SESSION_NOT_FOUND: "SESSION_NOT_FOUND";
+    readonly SESSION_EXPIRED: "SESSION_EXPIRED";
+    readonly SESSION_INVALID: "SESSION_INVALID";
+    readonly MAX_SESSIONS_REACHED: "MAX_SESSIONS_REACHED";
+    readonly MFA_NOT_ENABLED: "MFA_NOT_ENABLED";
+    readonly MFA_REQUIRED: "MFA_REQUIRED";
+    readonly MFA_CODE_INVALID: "MFA_CODE_INVALID";
+    readonly MFA_CODE_EXPIRED: "MFA_CODE_EXPIRED";
+    readonly MFA_METHOD_NOT_AVAILABLE: "MFA_METHOD_NOT_AVAILABLE";
+    readonly MFA_TOGGLING_NOT_ALLOWED: "MFA_TOGGLING_NOT_ALLOWED";
+    readonly MFA_CANNOT_ENABLE_WITHOUT_METHOD: "MFA_CANNOT_ENABLE_WITHOUT_METHOD";
+    readonly MFA_RECOVERY_CODE_INVALID: "MFA_RECOVERY_CODE_INVALID";
+    readonly TOTP_SETUP_FAILED: "TOTP_SETUP_FAILED";
+    readonly TOTP_VERIFICATION_FAILED: "TOTP_VERIFICATION_FAILED";
+    readonly REGISTRATION_DISABLED: "REGISTRATION_DISABLED";
+    readonly EMAIL_ALREADY_EXISTS: "EMAIL_ALREADY_EXISTS";
+    readonly PHONE_ALREADY_EXISTS: "PHONE_ALREADY_EXISTS";
+    readonly PROVIDER_NOT_FOUND: "PROVIDER_NOT_FOUND";
+    readonly INVALID_CREDENTIALS: "INVALID_CREDENTIALS";
+    readonly INVALID_PROVIDER: "INVALID_PROVIDER";
+    readonly MISSING_REQUIRED_FIELDS: "MISSING_REQUIRED_FIELDS";
+    readonly ACCOUNT_SUSPENDED: "ACCOUNT_SUSPENDED";
+    readonly ACCOUNT_INACTIVE: "ACCOUNT_INACTIVE";
+    readonly EMAIL_NOT_VERIFIED: "EMAIL_NOT_VERIFIED";
+    readonly CURRENT_PASSWORD_INCORRECT: "CURRENT_PASSWORD_INCORRECT";
+    readonly NEW_PASSWORD_SAME_AS_CURRENT: "NEW_PASSWORD_SAME_AS_CURRENT";
+    readonly PASSWORD_RESET_INVALID_REQUEST: "PASSWORD_RESET_INVALID_REQUEST";
+    readonly PASSWORD_RESET_TOKEN_INVALID: "PASSWORD_RESET_TOKEN_INVALID";
+    readonly PASSWORD_RESET_TOKEN_EXPIRED: "PASSWORD_RESET_TOKEN_EXPIRED";
+    readonly REFRESH_TOKEN_INVALID: "REFRESH_TOKEN_INVALID";
+    readonly REFRESH_TOKEN_EXPIRED: "REFRESH_TOKEN_EXPIRED";
+    readonly INVALID_TOKEN: "INVALID_TOKEN";
+    readonly TOKEN_EXPIRED: "TOKEN_EXPIRED";
+    readonly EMAIL_ALREADY_VERIFIED: "EMAIL_ALREADY_VERIFIED";
+    readonly VERIFICATION_CODE_INVALID: "VERIFICATION_CODE_INVALID";
+    readonly VERIFICATION_CODE_EXPIRED: "VERIFICATION_CODE_EXPIRED";
+    readonly NO_EMAIL_ADDRESS: "NO_EMAIL_ADDRESS";
+    readonly NO_PHONE_NUMBER: "NO_PHONE_NUMBER";
+};
+export type ErrorCode = typeof ERROR_CODES[keyof typeof ERROR_CODES];
+export declare const USER_NOT_FOUND_EXCEPTION_CODE: "USER_NOT_FOUND";
+export declare const UNAUTHORIZED_EXCEPTION_CODE: "UNAUTHORIZED";
+export declare const INVALID_MFA_EXCEPTION_CODE: "MFA_CODE_INVALID";
+export declare const INVALID_REFRESH_TOKEN_EXCEPTION_CODE: "REFRESH_TOKEN_INVALID";
+export declare const SESSION_NOT_FOUND_ERROR: "SESSION_NOT_FOUND";
+export declare const USER_NOT_ACTIVE_ERROR: "ACCOUNT_INACTIVE";
+export declare const REFRESH_TOKEN_INVALID: "REFRESH_TOKEN_INVALID";
+export declare const REFRESH_TOKEN_EXPIRED: "REFRESH_TOKEN_EXPIRED";
+export declare const ACCESS_TOKEN_COOKIE_NAME = "accessToken";
+export declare const REFRESH_TOKEN_COOKIE_NAME = "refreshToken";
+export declare const NEST_AUTH_TRUST_DEVICE_KEY = "nest_auth_device_trust";
+export declare const DEFAULT_GUARD_NAME = "web";
+export declare const NestAuthEvents: {
+    readonly EMAIL_VERIFICATION_REQUESTED: "email.verification.requested";
+    readonly EMAIL_VERIFIED: "email.verified";
+    readonly LOGGED_IN: "nest_auth.logged_in";
+    readonly REGISTERED: "nest_auth.registered";
+    readonly TWO_FACTOR_VERIFIED: "nest_auth.two_factor_verified";
+    readonly TWO_FACTOR_CODE_SENT: "nest_auth.two_factor_code_sent";
+    readonly REFRESH_TOKEN: "nest_auth.refresh_token";
+    readonly PASSWORD_RESET_REQUESTED: "nest_auth.password_reset_requested";
+    readonly PASSWORD_RESET: "nest_auth.password_reset";
+    readonly LOGGED_OUT: "nest_auth.logged_out";
+    readonly LOGGED_OUT_ALL: "nest_auth.logged_out_all";
+    readonly PASSWORD_CHANGED: "nest_auth.password_changed";
+    readonly TWO_FACTOR_ENABLED: "nest_auth.two_factor_enabled";
+    readonly TWO_FACTOR_DISABLED: "nest_auth.two_factor_disabled";
+    readonly USER_CREATED: "nest_auth.user.created";
+    readonly USER_UPDATED: "nest_auth.user.updated";
+    readonly USER_DELETED: "nest_auth.user.deleted";
+    readonly TENANT_CREATED: "nest_auth.tenant.created";
+    readonly TENANT_UPDATED: "nest_auth.tenant.updated";
+    readonly TENANT_DELETED: "nest_auth.tenant.deleted";
+    readonly ACCESS_KEY_CREATED: "nest_auth.access_key.created";
+    readonly ACCESS_KEY_DELETED: "nest_auth.access_key.deleted";
+    readonly ACCESS_KEY_UPDATED: "nest_auth.access_key.updated";
+    readonly ACCESS_KEY_DEACTIVATED: "nest_auth.access_key.deactivated";
+};
+//# sourceMappingURL=auth.constants.d.ts.map

package/dist/lib/auth.constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.constants.d.ts","sourceRoot":"","sources":["../../src/lib/auth.constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,kCAAkC,CAAC;AACnE,eAAO,MAAM,gCAAgC,qCAAqC,CAAC;AAInF,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AACvC,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAC7C,eAAO,MAAM,sBAAsB,aAAa,CAAC;AACjD,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAC3C,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAC7C,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAC3C,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAQ3C,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCnB,CAAC;AAGX,eAAO,MAAM,eAAe;;;;;;;;;;;CAWlB,CAAC;AAGX,eAAO,MAAM,mBAAmB;;;;;CAKtB,CAAC;AAGX,eAAO,MAAM,iBAAiB;;;;;;;;;;CAUpB,CAAC;AAGX,eAAO,MAAM,mBAAmB;;;;;;CAMtB,CAAC;AAGX,eAAO,MAAM,sBAAsB;;;;;;;CAOzB,CAAC;AAGX,eAAO,MAAM,eAAe;;;;;CAKlB,CAAC;AAGX,eAAO,MAAM,gBAAgB;;;;;;CAMnB,CAAC;AAGX,eAAO,MAAM,kBAAkB;;;;CAIrB,CAAC;AAGX,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAUd,CAAC;AAGX,MAAM,MAAM,SAAS,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAMrE,eAAO,MAAM,6BAA6B,kBAAkC,CAAC;AAE7E,eAAO,MAAM,2BAA2B,gBAAiC,CAAC;AAE1E,eAAO,MAAM,0BAA0B,oBAAmC,CAAC;AAE3E,eAAO,MAAM,oCAAoC,yBAAyC,CAAC;AAE3F,eAAO,MAAM,uBAAuB,qBAAwC,CAAC;AAE7E,eAAO,MAAM,qBAAqB,oBAAoC,CAAC;AAEvE,eAAO,MAAM,qBAAqB,yBAAyC,CAAC;AAE5E,eAAO,MAAM,qBAAqB,yBAAyC,CAAC;AAI5E,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AACtD,eAAO,MAAM,yBAAyB,iBAAiB,CAAC;AAExD,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AAGnE,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AAGxC,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;CAgCjB,CAAC"}