@ackplus/nest-auth 1.1.27 → 1.1.29

package/src/lib/core/decorators/public.decorator.js

@@ -1,35 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Public = exports.IS_PUBLIC_KEY = void 0;
-const common_1 = require("@nestjs/common");
-/**
- * Key for public route metadata
- * Used to mark routes that should skip authentication when global guard is enabled
- */
-exports.IS_PUBLIC_KEY = 'isPublic';
-/**
- * @Public decorator
- *
- * Use this decorator to skip authentication on specific routes when enableGlobalGuard is true.
- *
- * @example
- * ```typescript
- * @Controller('users')
- * export class UsersController {
- *   // This route is public - no authentication required
- *   @Public()
- *   @Get('info')
- *   getPublicInfo() {
- *     return { info: 'public data' };
- *   }
- *
- *   // This route requires authentication (protected by global guard)
- *   @Get('profile')
- *   getProfile(@Request() req) {
- *     return req.user;
- *   }
- * }
- * ```
- */
-const Public = () => (0, common_1.SetMetadata)(exports.IS_PUBLIC_KEY, true);
-exports.Public = Public;

package/src/lib/core/decorators/role.decorator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"role.decorator.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/decorators/role.decorator.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,SAAS,oBAAoB,CAAC;AAC3C,eAAO,MAAM,SAAS,oBAAoB,CAAC;AAG3C,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,IAC1D,QAAQ,GAAG,EAAE,KAAK,MAAM,EAAE,YAAY,kBAAkB,wBAKnE"}

package/src/lib/core/decorators/role.decorator.js

@@ -1,13 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GUARD_KEY = exports.ROLES_KEY = void 0;
-exports.NestAuthRoles = NestAuthRoles;
-exports.ROLES_KEY = 'nest_auth_roles';
-exports.GUARD_KEY = 'nest_auth_guard';
-function NestAuthRoles(roles, guard) {
-    return (target, key, descriptor) => {
-        Reflect.defineMetadata(exports.ROLES_KEY, roles, descriptor.value);
-        Reflect.defineMetadata(exports.GUARD_KEY, guard, descriptor.value);
-        return descriptor;
-    };
-}

package/src/lib/core/decorators/skip-mfa.decorator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"skip-mfa.decorator.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/decorators/skip-mfa.decorator.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY,YAAY,CAAC;AACtC,eAAO,MAAM,OAAO,wDAAwC,CAAC"}

package/src/lib/core/decorators/skip-mfa.decorator.js

@@ -1,7 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SkipMfa = exports.SKIP_MFA_KEY = void 0;
-const common_1 = require("@nestjs/common");
-exports.SKIP_MFA_KEY = 'skipMfa';
-const SkipMfa = () => (0, common_1.SetMetadata)(exports.SKIP_MFA_KEY, true);
-exports.SkipMfa = SkipMfa;

package/src/lib/core/dto/message.response.dto.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"message.response.dto.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/dto/message.response.dto.ts"],"names":[],"mappings":"AAEA,qBAAa,kBAAkB;IAE3B,OAAO,EAAE,MAAM,CAAC;CACnB"}

package/src/lib/core/dto/message.response.dto.js

@@ -1,12 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MessageResponseDto = void 0;
-const tslib_1 = require("tslib");
-const swagger_1 = require("@nestjs/swagger");
-class MessageResponseDto {
-}
-exports.MessageResponseDto = MessageResponseDto;
-tslib_1.__decorate([
-    (0, swagger_1.ApiProperty)({ description: 'Response message' }),
-    tslib_1.__metadata("design:type", String)
-], MessageResponseDto.prototype, "message", void 0);

package/src/lib/core/entities.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../../../../../../packages/nest-auth/src/lib/core/entities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,SAAS,IAAI,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAEhD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kCAAkC,CAAC;AACjD,cAAc,oCAAoC,CAAC;AACnD,cAAc,kCAAkC,CAAC;AACjD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oCAAoC,CAAC;AACnD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,OAAO,EAAE,SAAS,IAAI,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAE7F,eAAO,MAAM,gBAAgB,2RAY5B,CAAC"}

package/src/lib/core/entities.js

@@ -1,39 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.NestAuthEntities = exports.NestAuthAdminUser = void 0;
-const tslib_1 = require("tslib");
-const user_entity_1 = require("../user/entities/user.entity");
-const identity_entity_1 = require("../user/entities/identity.entity");
-const access_key_entity_1 = require("../user/entities/access-key.entity");
-const tenant_entity_1 = require("../tenant/entities/tenant.entity");
-const role_entity_1 = require("../role/entities/role.entity");
-const mfa_secret_entity_1 = require("../auth/entities/mfa-secret.entity");
-const otp_entity_1 = require("../auth/entities/otp.entity");
-const session_entity_1 = require("../session/entities/session.entity");
-const permission_entity_1 = require("../permission/entities/permission.entity");
-const admin_user_entity_1 = require("../admin-console/entities/admin-user.entity");
-const auth_1 = require("../auth");
-tslib_1.__exportStar(require("../user/entities/user.entity"), exports);
-tslib_1.__exportStar(require("../user/entities/identity.entity"), exports);
-tslib_1.__exportStar(require("../user/entities/access-key.entity"), exports);
-tslib_1.__exportStar(require("../tenant/entities/tenant.entity"), exports);
-tslib_1.__exportStar(require("../role/entities/role.entity"), exports);
-tslib_1.__exportStar(require("../auth/entities/mfa-secret.entity"), exports);
-tslib_1.__exportStar(require("../auth/entities/otp.entity"), exports);
-tslib_1.__exportStar(require("../session/entities/session.entity"), exports);
-tslib_1.__exportStar(require("../permission/entities/permission.entity"), exports);
-var admin_user_entity_2 = require("../admin-console/entities/admin-user.entity");
-Object.defineProperty(exports, "NestAuthAdminUser", { enumerable: true, get: function () { return admin_user_entity_2.AdminUser; } });
-exports.NestAuthEntities = [
-    user_entity_1.NestAuthUser,
-    identity_entity_1.NestAuthIdentity,
-    role_entity_1.NestAuthRole,
-    tenant_entity_1.NestAuthTenant,
-    mfa_secret_entity_1.NestAuthMFASecret,
-    session_entity_1.NestAuthSession,
-    otp_entity_1.NestAuthOTP,
-    access_key_entity_1.NestAuthAccessKey,
-    permission_entity_1.NestAuthPermission,
-    admin_user_entity_1.AdminUser,
-    auth_1.NestAuthTrustedDevice,
-];

package/src/lib/core/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../packages/nest-auth/src/lib/core/index.ts"],"names":[],"mappings":"AACA,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oCAAoC,CAAC;AACnD,cAAc,iCAAiC,CAAC;AAChD,cAAc,6BAA6B,CAAC;AAG5C,cAAc,4CAA4C,CAAC;AAC3D,cAAc,oCAAoC,CAAC;AACnD,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AAGrD,cAAc,YAAY,CAAC;AAG3B,cAAc,4BAA4B,CAAC;AAI3C,cAAc,4CAA4C,CAAC;AAC3D,cAAc,oCAAoC,CAAC;AACnD,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,4BAA4B,CAAC;AAG3C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kCAAkC,CAAC;AACjD,cAAc,oCAAoC,CAAC;AACnD,cAAc,iCAAiC,CAAC;AAChD,cAAc,kCAAkC,CAAC;AAIjD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wBAAwB,CAAC"}

package/src/lib/core/index.js

@@ -1,35 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const tslib_1 = require("tslib");
-// Decorators
-tslib_1.__exportStar(require("./decorators/role.decorator"), exports);
-tslib_1.__exportStar(require("./decorators/permissions.decorator"), exports);
-tslib_1.__exportStar(require("./decorators/skip-mfa.decorator"), exports);
-tslib_1.__exportStar(require("./decorators/auth.decorator"), exports);
-// Interfaces
-tslib_1.__exportStar(require("./interfaces/auth-module-options.interface"), exports);
-tslib_1.__exportStar(require("./interfaces/mfa-options.interface"), exports);
-tslib_1.__exportStar(require("./interfaces/session-options.interface"), exports);
-tslib_1.__exportStar(require("./interfaces/token-payload.interface"), exports);
-// Entities
-tslib_1.__exportStar(require("./entities"), exports);
-// DTOs
-tslib_1.__exportStar(require("./dto/message.response.dto"), exports);
-// Interface
-tslib_1.__exportStar(require("./interfaces/auth-module-options.interface"), exports);
-tslib_1.__exportStar(require("./interfaces/mfa-options.interface"), exports);
-tslib_1.__exportStar(require("./interfaces/session-options.interface"), exports);
-tslib_1.__exportStar(require("./interfaces/token-payload.interface"), exports);
-tslib_1.__exportStar(require("./interfaces/otp.interface"), exports);
-// Providers
-tslib_1.__exportStar(require("./providers/base-auth.provider"), exports);
-tslib_1.__exportStar(require("./providers/email-auth.provider"), exports);
-tslib_1.__exportStar(require("./providers/phone-auth.provider"), exports);
-tslib_1.__exportStar(require("./providers/jwt-auth.provider"), exports);
-tslib_1.__exportStar(require("./providers/google-auth.provider"), exports);
-tslib_1.__exportStar(require("./providers/facebook-auth.provider"), exports);
-tslib_1.__exportStar(require("./providers/apple-auth.provider"), exports);
-tslib_1.__exportStar(require("./providers/github-auth.provider"), exports);
-// Services
-tslib_1.__exportStar(require("./services/auth-provider-registry.service"), exports);
-tslib_1.__exportStar(require("./services/jwt.service"), exports);

package/src/lib/core/interfaces/auth-module-options.interface.d.ts

@@ -1,378 +0,0 @@
-import { Type } from '@nestjs/common';
-import { MFAOptions } from './mfa-options.interface';
-import { CookieOptions, SessionOptions } from './session-options.interface';
-import { BaseAuthProvider } from '../providers/base-auth.provider';
-import { DebugLogOptions } from '../services/debug-logger.service';
-import { NestAuthUser } from '../../user/entities/user.entity';
-import { SessionPayload, JWTTokenPayload } from './token-payload.interface';
-/**
- * Default Tenant Options
- *
- * When configured, a default tenant will be automatically created on module initialization
- * and used for all authentication operations when no tenantId is explicitly provided.
- *
- * This enables single-tenant mode where users don't need to pass tenantId in signup/login requests.
- */
-export interface DefaultTenantOptions {
-    /** Name of the default tenant */
-    name: string;
-    /**
-     * Unique identifier/slug for the tenant
-     * Must be lowercase, no spaces, only letters, numbers, hyphens (-) and underscores (_)
-     * Examples: 'my-app', 'acme_corp', 'tenant123'
-     */
-    slug: string;
-    /**
-     * @deprecated Use 'slug' instead. Will be removed in v2.0.0
-     * Unique domain identifier for the tenant (legacy field)
-     */
-    domain?: string;
-    /** Optional description */
-    description?: string;
-    /** Optional metadata */
-    metadata?: Record<string, any>;
-}
-export interface RegistrationCollectProfileField {
-    id: string;
-    label: string;
-    required: boolean;
-    type: 'text' | 'email' | 'phone' | 'select' | 'checkbox' | 'password';
-    placeholder?: string;
-    options?: Array<{
-        label: string;
-        value: string;
-    }>;
-}
-/**
- * User lifecycle hooks for customizing user creation and serialization
- */
-export interface UserHooks {
-    /**
-     * Transform user data before creation.
-     * Use this to set default roles, validate fields, or enrich data.
-     *
-     * @example
-     * ```typescript
-     * beforeCreate: async (userData, input) => ({
-     *     ...userData,
-     *     metadata: { ...userData.metadata, source: 'web' }
-     * })
-     * ```
-     */
-    beforeCreate?: (userData: Partial<NestAuthUser>, input: any) => Promise<Partial<NestAuthUser>> | Partial<NestAuthUser>;
-    /**
-     * Callback after user creation.
-     * Use for side effects like creating related records, sending notifications.
-     */
-    afterCreate?: (user: NestAuthUser, input: any) => Promise<void> | void;
-    /**
-     * Control which user fields appear in API responses.
-     *
-     * @example
-     * ```typescript
-     * serialize: (user) => ({
-     *     id: user.id,
-     *     email: user.email,
-     *     roles: user.roles
-     * })
-     * ```
-     */
-    serialize?: (user: NestAuthUser) => Partial<NestAuthUser>;
-    /** Fields to always exclude from responses */
-    sensitiveFields?: string[];
-}
-/**
- * Authentication response hooks
- */
-export interface AuthHooks {
-    /**
-     * Transform authentication response (login/signup).
-     * Use to add custom data like user profile, organization info, feature flags.
-     *
-     * @example
-     * ```typescript
-     * transformResponse: async (response, user, session) => ({
-     *     ...response,
-     *     user: { id: user.id, email: user.email },
-     *     organization: await getOrg(user.id)
-     * })
-     * ```
-     */
-    transformResponse?: (response: any, user: NestAuthUser, session: SessionPayload) => Promise<any> | any;
-}
-/**
- * Password customization hooks
- */
-export interface PasswordHooks {
-    /** Custom password hashing (default: Argon2id) */
-    hash?: (password: string) => Promise<string>;
-    /** Custom password verification */
-    verify?: (password: string, hash: string) => Promise<boolean>;
-    /** Password policy validation */
-    validate?: (password: string) => {
-        valid: boolean;
-        errors?: string[];
-    };
-}
-/**
- * OTP customization options
- */
-export interface OtpOptions {
-    /** Custom OTP generation function */
-    generate?: (length?: number) => string | Promise<string>;
-    /** OTP length (default: 6) */
-    length?: number;
-    /** OTP format */
-    format?: 'numeric' | 'alphanumeric';
-}
-/**
- * Guard customization hooks for pre/post auth validation
- */
-export interface GuardHooks {
-    /**
-     * Pre-auth validation (IP whitelist, device fingerprint, etc.)
-     * Return { reject: true, reason: '...' } to block authentication.
-     */
-    beforeAuth?: (request: any, payload: JWTTokenPayload) => Promise<void | {
-        reject: boolean;
-        reason?: string;
-    }>;
-    /** Post-auth callback */
-    afterAuth?: (request: any, user: NestAuthUser, session: SessionPayload) => Promise<void> | void;
-}
-/**
- * Authorization customization hooks
- */
-export interface AuthorizationHooks {
-    /** Custom role resolution */
-    resolveRoles?: (user: NestAuthUser) => Promise<string[]>;
-    /** Custom permission resolution */
-    resolvePermissions?: (user: NestAuthUser, roles: string[]) => Promise<string[]>;
-}
-/**
- * Audit event structure
- */
-export interface AuthAuditEvent {
-    type: 'login' | 'logout' | 'signup' | 'password_change' | 'mfa_enable' | 'session_revoke';
-    userId?: string;
-    ip?: string;
-    userAgent?: string;
-    success: boolean;
-    metadata?: Record<string, any>;
-    timestamp: Date;
-}
-/**
- * Audit logging options
- */
-export interface AuditOptions {
-    enabled?: boolean;
-    /** Callback for audit events */
-    onEvent?: (event: AuthAuditEvent) => Promise<void> | void;
-}
-export interface AuthModuleOptions {
-    isGlobal?: boolean;
-    appName: string;
-    /**
-     * Enable automatic token refresh via global interceptor.
-     * When enabled, expired access tokens are automatically refreshed using refresh tokens.
-     *
-     * Default: true (automatic refresh enabled)
-     */
-    enableAutoRefresh?: boolean;
-    accessTokenType?: 'header' | 'cookie';
-    cookieOptions?: CookieOptions;
-    jwt: {
-        secret: string;
-        accessTokenExpiresIn?: number | string;
-        refreshTokenExpiresIn?: number | string;
-        /** Custom token validation - return false to reject the token */
-        validateToken?: (payload: JWTTokenPayload, session: SessionPayload) => Promise<boolean>;
-    };
-    google?: {
-        clientId: string;
-        clientSecret: string;
-        redirectUri: string;
-    };
-    facebook?: {
-        appId: string;
-        appSecret: string;
-        redirectUri: string;
-    };
-    apple?: {
-        clientId: string;
-        teamId: string;
-        keyId: string;
-        privateKey: string;
-        privateKeyMethod?: string;
-        redirectUri: string;
-    };
-    github?: {
-        clientId: string;
-        clientSecret: string;
-        redirectUri: string;
-    };
-    phoneAuth?: {
-        enabled: boolean;
-    };
-    emailAuth?: {
-        enabled: boolean;
-    };
-    /**
-     * Registration configuration
-     * Controls user registration/signup behavior and profile fields
-     */
-    registration?: {
-        enabled?: boolean;
-        requireInvitation?: boolean;
-        collectProfileFields?: Array<RegistrationCollectProfileField>;
-    };
-    /**
-     * Client configuration customization
-     * Allows extending/modifying the client-config endpoint response
-     */
-    clientConfig?: {
-        /**
-         * Factory function to customize the client config response
-         * Receives the default config and can modify/return it
-         */
-        factory?: (defaultConfig: any, context: {
-            configService: any;
-            tenantService: any;
-        }) => Promise<any> | any;
-    };
-    mfa?: MFAOptions;
-    session?: SessionOptions;
-    customAuthProviders?: BaseAuthProvider[];
-    passwordResetOtpExpiresIn?: number | string;
-    passwordResetTokenExpiresIn?: number | string;
-    /**
-     * Configure a default tenant for single-tenant applications.
-     * When set, tenantId becomes optional in all authentication requests.
-     * The default tenant is automatically created on module initialization.
-     *
-     * Example:
-     * ```typescript
-     * defaultTenant: {
-     *   name: 'My App',
-     *   slug: 'my-app'  // lowercase, no spaces, only a-z0-9_-
-     * }
-     * ```
-     *
-     * Legacy (deprecated):
-     * ```typescript
-     * defaultTenant: {
-     *   name: 'My App',
-     *   domain: 'myapp'  // Still supported but use 'slug' instead
-     * }
-     * ```
-     */
-    defaultTenant?: DefaultTenantOptions;
-    /**
-     * Embedded admin console configuration.
-     * Provides a password-protected dashboard for managing users, roles, tenants, and system settings.
-     *
-     * The admin console secretKey is also used for admin signup via the /signup endpoint.
-     */
-    adminConsole?: AdminConsoleOptions;
-    debug?: DebugLogOptions;
-    /**
-     * User lifecycle hooks
-     * Customize user creation, validation, and serialization
-     */
-    user?: UserHooks;
-    /**
-     * Authentication hooks
-     * Customize auth responses (login/signup)
-     */
-    auth?: AuthHooks;
-    /**
-     * Guard hooks
-     * Add custom pre/post authentication validation
-     */
-    guards?: GuardHooks;
-    /**
-     * Password customization
-     * Custom hashing, verification, and validation
-     */
-    password?: PasswordHooks;
-    /**
-     * OTP customization
-     * Custom generation, format, and length
-     */
-    otp?: OtpOptions;
-    /**
-     * Authorization hooks
-     * Custom role and permission resolution
-     */
-    authorization?: AuthorizationHooks;
-    /**
-     * Audit logging
-     * Track auth events for compliance
-     */
-    audit?: AuditOptions;
-    /**
-     * Custom error handling
-     * Transform errors before sending to client
-     */
-    errorHandler?: (error: Error, context: 'login' | 'signup' | 'refresh' | 'mfa' | 'password_reset' | 'password_change') => any;
-}
-export interface AdminConsoleOptions {
-    /** Enable or disable the embedded admin console (default: true) */
-    enabled?: boolean;
-    /** Base path where the console is served (default: /auth/admin) */
-    basePath?: string;
-    /**
-     * Nest Auth Admin Console Secret Key used for security operations.
-     * This key is used for:
-     * - Signing admin dashboard sessions
-     * - Admin signup via /signup endpoint
-     * - Password reset operations
-     *
-     * You can set this to any value you prefer:
-     * - Hardcode: secretKey: 'your-secret-key-here'
-     * - Environment variable: secretKey: process.env.MY_SECRET_KEY (use any variable name)
-     */
-    secretKey?: string;
-    /** Cookie name for admin dashboard sessions (default: nest_auth_admin) */
-    sessionCookieName?: string;
-    /** Session duration expressed in seconds or ms string (default: 2h) */
-    sessionDuration?: string | number;
-    /**
-     * @deprecated This option is no longer used. Admin users are created directly without role assignment.
-     * Role name for super admin created via /initialize endpoint (default: 'super-admin')
-     */
-    superAdminRole?: string;
-    /**
-     * @deprecated This option is no longer used. The /signup endpoint is always available when secretKey is configured.
-     * Whether the /initialize endpoint is enabled for super admin creation (default: true if secretKey is available)
-     */
-    initializeEnabled?: boolean;
-    /**
-     * Cookie options applied to the admin session cookie.
-     * httpOnly and sameSite default to true/'lax' respectively.
-     */
-    cookie?: CookieOptions;
-    /**
-     * Allow managing other dashboard admins through the console UI (default: true).
-     */
-    allowAdminManagement?: boolean;
-}
-export interface AuthModuleAsyncOptions {
-    isGlobal?: boolean;
-    /**
-     * Enable automatic token refresh via global interceptor.
-     * When enabled, expired access tokens are automatically refreshed using refresh tokens.
-     *
-     * Default: true (automatic refresh enabled)
-     */
-    enableAutoRefresh?: boolean;
-    imports?: any[];
-    useFactory?: (...args: any[]) => Promise<AuthModuleOptions> | AuthModuleOptions;
-    inject?: any[];
-    useClass?: Type<AuthModuleOptionsFactory>;
-    useExisting?: Type<AuthModuleOptionsFactory>;
-}
-export interface AuthModuleOptionsFactory {
-    createAuthModuleOptions(): Promise<AuthModuleOptions> | AuthModuleOptions;
-}
-//# sourceMappingURL=auth-module-options.interface.d.ts.map

package/src/lib/core/interfaces/auth-module-options.interface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-module-options.interface.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/interfaces/auth-module-options.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG5E;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACjC,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,+BAA+B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACtB;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAEvH;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAEvE;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAE1D,8CAA8C;IAC9C,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACtB;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,EAAE,CAChB,QAAQ,EAAE,GAAG,EACb,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,cAAc,KACtB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC1B,kDAAkD;IAClD,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,mCAAmC;IACnC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,iCAAiC;IACjC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC1E;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB;IACjB,MAAM,CAAC,EAAE,SAAS,GAAG,cAAc,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB;;;OAGG;IACH,UAAU,CAAC,EAAE,CACT,OAAO,EAAE,GAAG,EACZ,OAAO,EAAE,eAAe,KACvB,OAAO,CAAC,IAAI,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE1D,yBAAyB;IACzB,SAAS,CAAC,EAAE,CACR,OAAO,EAAE,GAAG,EACZ,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,cAAc,KACtB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B,6BAA6B;IAC7B,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,mCAAmC;IACnC,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACnF;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,iBAAiB,GAAG,YAAY,GAAG,gBAAgB,CAAC;IAC1F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gCAAgC;IAChC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC7D;AAED,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACtC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,GAAG,EAAE;QACD,MAAM,EAAE,MAAM,CAAC;QACf,oBAAoB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACvC,qBAAqB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACxC,iEAAiE;QACjE,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KAC3F,CAAC;IACF,MAAM,CAAC,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,QAAQ,CAAC,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,KAAK,CAAC,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,MAAM,CAAC,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,CAAC,EAAE;QACR,OAAO,EAAE,OAAO,CAAC;KACpB,CAAC;IACF,SAAS,CAAC,EAAE;QACR,OAAO,EAAE,OAAO,CAAC;KACpB,CAAC;IACF;;;OAGG;IACH,YAAY,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,oBAAoB,CAAC,EAAE,KAAK,CAAC,+BAA+B,CAAC,CAAC;KACjE,CAAC;IACF;;;OAGG;IACH,YAAY,CAAC,EAAE;QACX;;;WAGG;QACH,OAAO,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE;YAAE,aAAa,EAAE,GAAG,CAAC;YAAC,aAAa,EAAE,GAAG,CAAA;SAAE,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;KAC7G,CAAC;IACF,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,mBAAmB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACzC,yBAAyB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5C,2BAA2B,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9C;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,KAAK,CAAC,EAAE,eAAe,CAAC;IAMxB;;;OAGG;IACH,IAAI,CAAC,EAAE,SAAS,CAAC;IAEjB;;;OAGG;IACH,IAAI,CAAC,EAAE,SAAS,CAAC;IAEjB;;;OAGG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IAEpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,aAAa,CAAC;IAEzB;;;OAGG;IACH,GAAG,CAAC,EAAE,UAAU,CAAC;IAEjB;;;OAGG;IACH,aAAa,CAAC,EAAE,kBAAkB,CAAC;IAEnC;;;OAGG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IAErB;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,gBAAgB,GAAG,iBAAiB,KAAK,GAAG,CAAC;CAChI;AAED,MAAM,WAAW,mBAAmB;IAChC,mEAAmE;IACnE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,uEAAuE;IACvE,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;OAEG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACnC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,iBAAiB,CAAC,GAAG,iBAAiB,CAAC;IAChF,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,QAAQ,CAAC,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC1C,WAAW,CAAC,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,wBAAwB;IACrC,uBAAuB,IAAI,OAAO,CAAC,iBAAiB,CAAC,GAAG,iBAAiB,CAAC;CAC7E"}

package/src/lib/core/interfaces/auth-module-options.interface.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/src/lib/core/interfaces/mfa-options.interface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mfa-options.interface.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/interfaces/mfa-options.interface.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,UAAU;IAEvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAGlB,QAAQ,CAAC,EAAE,OAAO,CAAC;IAGnB,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAG1B,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,IAAI,CAAC,EAAE;QACH,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;KAClB,CAAC;IAGF,GAAG,CAAC,EAAE;QACF,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KACpB,CAAC;IAGF,KAAK,CAAC,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;KACpB,CAAC;IAGF,eAAe,CAAC,EAAE,OAAO,CAAC;IAG1B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAG/B,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAG/B,qBAAqB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAGxC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAIhC,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,oBAAY,aAAa;IACrB,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,KAAK,UAAU;CAClB"}

package/src/lib/core/interfaces/mfa-options.interface.js

@@ -1,9 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MFAMethodEnum = void 0;
-var MFAMethodEnum;
-(function (MFAMethodEnum) {
-    MFAMethodEnum["TOTP"] = "totp";
-    MFAMethodEnum["SMS"] = "sms";
-    MFAMethodEnum["EMAIL"] = "email";
-})(MFAMethodEnum || (exports.MFAMethodEnum = MFAMethodEnum = {}));

package/src/lib/core/interfaces/otp.interface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"otp.interface.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/interfaces/otp.interface.ts"],"names":[],"mappings":"AACA,oBAAY,WAAW;IACnB,cAAc,mBAAmB;IACjC,YAAY,iBAAiB;IAC7B,GAAG,QAAQ;CACd"}

package/src/lib/core/interfaces/otp.interface.js

@@ -1,9 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OTPTypeEnum = void 0;
-var OTPTypeEnum;
-(function (OTPTypeEnum) {
-    OTPTypeEnum["PASSWORD_RESET"] = "password_reset";
-    OTPTypeEnum["VERIFICATION"] = "verification";
-    OTPTypeEnum["MFA"] = "mfa";
-})(OTPTypeEnum || (exports.OTPTypeEnum = OTPTypeEnum = {}));

package/src/lib/core/interfaces/session-options.interface.d.ts

@@ -1,68 +0,0 @@
-import { CookieOptions as ExpressCookieOptions } from 'express';
-import { NestAuthUser } from '../../user/entities/user.entity';
-import { SessionDataPayload, SessionPayload, JWTTokenPayload } from './token-payload.interface';
-export declare enum SessionStorageType {
-    REDIS = "redis",
-    DATABASE = "database",
-    MEMORY = "memory"
-}
-export interface SessionOptions {
-    storageType: SessionStorageType;
-    redisUrl?: string;
-    sessionExpiry?: number | string;
-    refreshTokenExpiry?: number | string;
-    maxSessionsPerUser?: number;
-    slidingExpiration?: boolean;
-    /**
-     * Customize the data stored in the session (database).
-     * This data is NOT sent to the client and can include sensitive information.
-     * Supports async operations for database lookups.
-     *
-     * @param defaultData - The default session data (user, roles, permissions, isMfaVerified)
-     * @param user - The authenticated user entity
-     * @returns Custom session data to store (can be a Promise)
-     *
-     * @example
-     * ```typescript
-     * customizeSessionData: async (defaultData, user) => ({
-     *     ...defaultData,
-     *     organizationId: user.metadata?.organizationId,
-     *     internalApiKey: await fetchApiKey(user.id), // Async DB lookup
-     * })
-     * ```
-     */
-    customizeSessionData?: (defaultData: SessionDataPayload, user: NestAuthUser) => Promise<SessionDataPayload> | SessionDataPayload;
-    /**
-     * Customize the JWT token payload sent to the client.
-     * Keep this minimal for security - sensitive data should stay in session.
-     * Supports async operations for database lookups.
-     *
-     * @param defaultPayload - The default token payload
-     * @param session - The created session (with data from customizeSessionData if configured)
-     * @returns Custom token payload (can be a Promise)
-     *
-     * @example
-     * ```typescript
-     * customizeTokenPayload: async (defaultPayload, session) => ({
-     *     ...defaultPayload,
-     *     roles: undefined, // Remove sensitive data from token
-     *     orgId: session.data?.organizationId, // Add minimal identifier
-     * })
-     * ```
-     */
-    customizeTokenPayload?: (defaultPayload: JWTTokenPayload, session: SessionPayload) => Promise<JWTTokenPayload> | JWTTokenPayload;
-    /**
-     * Called when a new session is created (login/signup)
-     */
-    onCreated?: (session: SessionPayload, user: any) => Promise<void> | void;
-    /**
-     * Called when a session is refreshed (token refresh)
-     */
-    onRefreshed?: (oldSession: SessionPayload, newSession: SessionPayload) => Promise<void> | void;
-    /**
-     * Called when a session is revoked (logout, admin action, security)
-     */
-    onRevoked?: (session: SessionPayload, reason: 'logout' | 'expired' | 'admin' | 'security' | 'password_change') => Promise<void> | void;
-}
-export type CookieOptions = Omit<ExpressCookieOptions, 'maxAge'>;
-//# sourceMappingURL=session-options.interface.d.ts.map