@ackplus/nest-auth 1.1.27 → 1.1.29

package/dist/lib/auth/controllers/mfa.controller.js

@@ -0,0 +1,239 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MfaController = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("../../core");
+const mfa_service_1 = require("../services/mfa.service");
+const request_context_1 = require("../../request-context/request-context");
+const send_mfa_code_request_dto_1 = require("../dto/requests/send-mfa-code.request.dto");
+const verify_totp_setup_request_dto_1 = require("../dto/requests/verify-totp-setup.request.dto");
+const swagger_1 = require("@nestjs/swagger");
+const auth_constants_1 = require("../../auth.constants");
+const auth_guard_1 = require("../guards/auth.guard");
+const toggle_mfa_request_dto_1 = require("../dto/requests/toggle-mfa.request.dto");
+const mfa_status_response_dto_1 = require("../dto/responses/mfa-status.response.dto");
+const auth_config_service_1 = require("../../core/services/auth-config.service");
+let MfaController = class MfaController {
+    mfaService;
+    authConfig;
+    constructor(mfaService, authConfig) {
+        this.mfaService = mfaService;
+        this.authConfig = authConfig;
+    }
+    getCurrentUserOrThrow() {
+        const user = request_context_1.RequestContext.currentUser();
+        if (!user) {
+            throw new common_1.UnauthorizedException('User not found');
+        }
+        return user;
+    }
+    async getStatus() {
+        const user = this.getCurrentUserOrThrow();
+        const config = this.mfaService.mfaConfig;
+        const globallyEnabled = config?.enabled ?? false;
+        let verifiedMethods = [];
+        let totpDevices = [];
+        let hasRecoveryCode = false;
+        let isEnabled = false;
+        if (globallyEnabled) {
+            [verifiedMethods, totpDevices, hasRecoveryCode, isEnabled] = await Promise.all([
+                this.mfaService.getVerifiedMethods(user.id),
+                this.mfaService.getTotpDevices(user.id),
+                this.mfaService.hasRecoveryCode(user.id),
+                this.mfaService.isMfaEnabled(user.id),
+            ]);
+        }
+        return {
+            isEnabled,
+            verifiedMethods,
+            configuredMethods: this.mfaService.getAvailableMethods(),
+            allowUserToggle: config?.allowUserToggle ?? false,
+            allowMethodSelection: config?.allowMethodSelection ?? false,
+            totpDevices,
+            hasRecoveryCode,
+        };
+    }
+    async toggleMfa(input) {
+        const user = this.getCurrentUserOrThrow();
+        this.mfaService.requireMfaEnabledForApp(true);
+        if (input.enabled) {
+            await this.mfaService.enableMFA(user.id);
+            return { message: 'MFA enabled successfully' };
+        }
+        await this.mfaService.disableMFA(user.id);
+        return { message: 'MFA disabled successfully' };
+    }
+    async listDevices() {
+        const user = this.getCurrentUserOrThrow();
+        this.mfaService.requireMfaEnabledForApp(true);
+        return await this.mfaService.getTotpDevices(user.id);
+    }
+    async removeDevice(deviceId) {
+        const user = this.getCurrentUserOrThrow();
+        this.mfaService.requireMfaEnabledForApp(true);
+        await this.mfaService.removeTotpDevice(deviceId);
+        return { message: 'MFA device removed successfully' };
+    }
+    async sendMfaCode(input) {
+        const user = this.getCurrentUserOrThrow();
+        await this.mfaService.sendMfaCode(user.id, input.method);
+        return { message: 'MFA code sent' };
+    }
+    async setupTotp() {
+        const user = this.getCurrentUserOrThrow();
+        const config = this.authConfig.getConfig();
+        const appName = config.appName;
+        let userEmail = user.email;
+        if (!userEmail) {
+            const fullUser = await core_1.NestAuthUser.findOne({ where: { id: user.id } });
+            userEmail = fullUser?.email || 'User';
+        }
+        const deviceName = `${appName} : ${userEmail}`;
+        const { secret, qrCode } = await this.mfaService.setupTotpDevice(user.id, deviceName);
+        return { secret, qrCode };
+    }
+    async verifyTotpSetup(input) {
+        const user = this.getCurrentUserOrThrow();
+        const isVerified = await this.mfaService.verifyTotpSetup(user.id, input.secret, input.otp);
+        if (!isVerified) {
+            throw new common_1.UnauthorizedException({
+                message: 'Invalid OTP',
+                code: auth_constants_1.INVALID_MFA_EXCEPTION_CODE
+            });
+        }
+        return { message: 'Device setup successfully' };
+    }
+    async generateRecoveryCodes() {
+        const user = this.getCurrentUserOrThrow();
+        const code = await this.mfaService.generateRecoveryCode(user.id);
+        return { code };
+    }
+    async resetTotp(code) {
+        const user = this.getCurrentUserOrThrow();
+        await this.mfaService.resetMfa(user.id, code);
+        return { message: 'MFA reset successfully' };
+    }
+};
+exports.MfaController = MfaController;
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Get MFA status for the current user' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: mfa_status_response_dto_1.MfaStatusResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Get)('status'),
+    (0, core_1.SkipMfa)(),
+    (0, common_1.UseGuards)(auth_guard_1.NestAuthAuthGuard),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], MfaController.prototype, "getStatus", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Enable or disable MFA for the current user' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: core_1.MessageResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('toggle'),
+    (0, core_1.SkipMfa)(),
+    (0, common_1.UseGuards)(auth_guard_1.NestAuthAuthGuard),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [toggle_mfa_request_dto_1.ToggleMfaRequestDto]),
+    __metadata("design:returntype", Promise)
+], MfaController.prototype, "toggleMfa", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'List registered MFA devices' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: [mfa_status_response_dto_1.MfaDeviceDto] }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Get)('devices'),
+    (0, core_1.SkipMfa)(),
+    (0, common_1.UseGuards)(auth_guard_1.NestAuthAuthGuard),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], MfaController.prototype, "listDevices", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Remove a registered MFA device' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: core_1.MessageResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Delete)('devices/:deviceId'),
+    (0, core_1.SkipMfa)(),
+    (0, common_1.UseGuards)(auth_guard_1.NestAuthAuthGuard),
+    __param(0, (0, common_1.Param)('deviceId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], MfaController.prototype, "removeDevice", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Send MFA Code' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: core_1.MessageResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('send-mfa-code'),
+    (0, core_1.SkipMfa)(),
+    (0, common_1.UseGuards)(auth_guard_1.NestAuthAuthGuard),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [send_mfa_code_request_dto_1.SendMfaCodeRequestDto]),
+    __metadata("design:returntype", Promise)
+], MfaController.prototype, "sendMfaCode", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Setup TOTP Device' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: core_1.MessageResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('setup-totp'),
+    (0, core_1.SkipMfa)(),
+    (0, common_1.UseGuards)(auth_guard_1.NestAuthAuthGuard),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], MfaController.prototype, "setupTotp", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Verify TOTP Setup' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: core_1.MessageResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('verify-totp-setup'),
+    (0, core_1.SkipMfa)(),
+    (0, common_1.UseGuards)(auth_guard_1.NestAuthAuthGuard),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [verify_totp_setup_request_dto_1.VerifyTotpSetupRequestDto]),
+    __metadata("design:returntype", Promise)
+], MfaController.prototype, "verifyTotpSetup", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Generate Recovery Codes' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: core_1.MessageResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('generate-recovery-code'),
+    (0, core_1.SkipMfa)(),
+    (0, common_1.UseGuards)(auth_guard_1.NestAuthAuthGuard),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], MfaController.prototype, "generateRecoveryCodes", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Reset TOTP Device' }),
+    (0, swagger_1.ApiResponse)({ status: 200, type: core_1.MessageResponseDto }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.Post)('reset-totp'),
+    (0, core_1.SkipMfa)(),
+    (0, common_1.UseGuards)(auth_guard_1.NestAuthAuthGuard),
+    __param(0, (0, common_1.Body)('code')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], MfaController.prototype, "resetTotp", null);
+exports.MfaController = MfaController = __decorate([
+    (0, common_1.Controller)('auth/mfa'),
+    __metadata("design:paramtypes", [mfa_service_1.MfaService,
+        auth_config_service_1.AuthConfigService])
+], MfaController);
+//# sourceMappingURL=mfa.controller.js.map

package/dist/lib/auth/controllers/mfa.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa.controller.js","sourceRoot":"","sources":["../../../../src/lib/auth/controllers/mfa.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwH;AACxH,qCAAsF;AACtF,yDAAqD;AACrD,2EAAuE;AACvE,yFAAkF;AAClF,iGAA0F;AAC1F,6CAA4D;AAC5D,yDAAiG;AACjG,qDAAyD;AACzD,mFAA6E;AAC7E,sFAA8F;AAC9F,iFAA4E;AAGrE,IAAM,aAAa,GAAnB,MAAM,aAAa;IAED;IACA;IAFrB,YACqB,UAAsB,EACtB,UAA6B;QAD7B,eAAU,GAAV,UAAU,CAAY;QACtB,eAAU,GAAV,UAAU,CAAmB;IAC9C,CAAC;IAEG,qBAAqB;QACzB,MAAM,IAAI,GAAG,gCAAc,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAQK,AAAN,KAAK,CAAC,SAAS;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QACzC,MAAM,eAAe,GAAG,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC;QAEjD,IAAI,eAAe,GAAoB,EAAE,CAAC;QAC1C,IAAI,WAAW,GAAmB,EAAE,CAAC;QACrC,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,IAAI,eAAe,EAAE,CAAC;YAClB,CAAC,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC3E,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;aACxC,CAAC,CAAC;QACP,CAAC;QAED,OAAO;YACH,SAAS;YACT,eAAe;YACf,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE;YACxD,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,KAAK;YACjD,oBAAoB,EAAE,MAAM,EAAE,oBAAoB,IAAI,KAAK;YAC3D,WAAW;YACX,eAAe;SAClB,CAAC;IACN,CAAC;IAQK,AAAN,KAAK,CAAC,SAAS,CAAS,KAA0B;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAE1C,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAE9C,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzC,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IACpD,CAAC;IAQK,AAAN,KAAK,CAAC,WAAW;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAE1C,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IAQK,AAAN,KAAK,CAAC,YAAY,CAAoB,QAAgB;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAE1C,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IAC1D,CAAC;IAQK,AAAN,KAAK,CAAC,WAAW,CAAS,KAA4B;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAE1C,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAEzD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACxC,CAAC;IASK,AAAN,KAAK,CAAC,SAAS;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAG3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAG/B,IAAI,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,MAAM,mBAAY,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACxE,SAAS,GAAG,QAAQ,EAAE,KAAK,IAAI,MAAM,CAAC;QAC1C,CAAC;QAGD,MAAM,UAAU,GAAG,GAAG,OAAO,MAAM,SAAS,EAAE,CAAC;QAE/C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QACtF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAQK,AAAN,KAAK,CAAC,eAAe,CAAS,KAAgC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAE1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3F,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,8BAAqB,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,IAAI,EAAE,2CAA0B;aACnC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IACpD,CAAC;IAQK,AAAN,KAAK,CAAC,qBAAqB;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAG1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,CAAC;IACpB,CAAC;IAQK,AAAN,KAAK,CAAC,SAAS,CAAe,IAAY;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC1C,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACjD,CAAC;CACJ,CAAA;AAzLY,sCAAa;AAoBhB;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAChE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,8CAAoB,EAAE,CAAC;IACxD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,cAAO,GAAE;IACT,IAAA,kBAAS,EAAC,8BAAiB,CAAC;;;;8CA8B5B;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;IACvE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAkB,EAAE,CAAC;IACtD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,cAAO,GAAE;IACT,IAAA,kBAAS,EAAC,8BAAiB,CAAC;IACZ,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAQ,4CAAmB;;8CAYjD;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACxD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,sCAAY,CAAC,EAAE,CAAC;IAClD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,YAAG,EAAC,SAAS,CAAC;IACd,IAAA,cAAO,GAAE;IACT,IAAA,kBAAS,EAAC,8BAAiB,CAAC;;;;gDAM5B;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IAC3D,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAkB,EAAE,CAAC;IACtD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,eAAM,EAAC,mBAAmB,CAAC;IAC3B,IAAA,cAAO,GAAE;IACT,IAAA,kBAAS,EAAC,8BAAiB,CAAC;IACT,WAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;;;;iDAMpC;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC1C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAkB,EAAE,CAAC;IACtD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,eAAe,CAAC;IACrB,IAAA,cAAO,GAAE;IACT,IAAA,kBAAS,EAAC,8BAAiB,CAAC;IACV,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAQ,iDAAqB;;gDAMrD;AASK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC9C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAkB,EAAE,CAAC;IACtD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,cAAO,GAAE;IACT,IAAA,kBAAS,EAAC,8BAAiB,CAAC;;;;8CAqB5B;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC9C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAkB,EAAE,CAAC;IACtD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,mBAAmB,CAAC;IACzB,IAAA,cAAO,GAAE;IACT,IAAA,kBAAS,EAAC,8BAAiB,CAAC;IACN,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAQ,yDAAyB;;oDAW7D;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IACpD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAkB,EAAE,CAAC;IACtD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,wBAAwB,CAAC;IAC9B,IAAA,cAAO,GAAE;IACT,IAAA,kBAAS,EAAC,8BAAiB,CAAC;;;;0DAO5B;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC9C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAkB,EAAE,CAAC;IACtD,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,cAAO,GAAE;IACT,IAAA,kBAAS,EAAC,8BAAiB,CAAC;IACZ,WAAA,IAAA,aAAI,EAAC,MAAM,CAAC,CAAA;;;;8CAI5B;wBAxLQ,aAAa;IADzB,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAGc,wBAAU;QACV,uCAAiB;GAHzC,aAAa,CAyLzB"}

package/dist/lib/auth/dto/credentials/email-credentials.dto.d.ts

@@ -0,0 +1,5 @@
+export declare class EmailCredentialsDto {
+    email: string;
+    password: string;
+}
+//# sourceMappingURL=email-credentials.dto.d.ts.map

package/dist/lib/auth/dto/credentials/email-credentials.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-credentials.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/auth/dto/credentials/email-credentials.dto.ts"],"names":[],"mappings":"AAMA,qBAAa,mBAAmB;IAO5B,KAAK,EAAE,MAAM,CAAC;IASd,QAAQ,EAAE,MAAM,CAAC;CACpB"}

package/dist/lib/auth/dto/credentials/email-credentials.dto.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailCredentialsDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class EmailCredentialsDto {
+    email;
+    password;
+}
+exports.EmailCredentialsDto = EmailCredentialsDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'User email address',
+        example: 'user@example.com',
+    }),
+    (0, class_validator_1.IsEmail)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], EmailCredentialsDto.prototype, "email", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'User password',
+        example: 'SecurePass123!',
+        minLength: 8,
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], EmailCredentialsDto.prototype, "password", void 0);
+//# sourceMappingURL=email-credentials.dto.js.map

package/dist/lib/auth/dto/credentials/email-credentials.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-credentials.dto.js","sourceRoot":"","sources":["../../../../../src/lib/auth/dto/credentials/email-credentials.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAgE;AAKhE,MAAa,mBAAmB;IAO5B,KAAK,CAAS;IASd,QAAQ,CAAS;CACpB;AAjBD,kDAiBC;AAVG;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE,kBAAkB;KAC9B,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,4BAAU,GAAE;;kDACC;AASd;IAPC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,CAAC;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;qDACI"}

package/dist/lib/auth/dto/credentials/phone-credentials.dto.d.ts

@@ -0,0 +1,5 @@
+export declare class PhoneCredentialsDto {
+    phone: string;
+    password: string;
+}
+//# sourceMappingURL=phone-credentials.dto.d.ts.map

package/dist/lib/auth/dto/credentials/phone-credentials.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phone-credentials.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/auth/dto/credentials/phone-credentials.dto.ts"],"names":[],"mappings":"AAMA,qBAAa,mBAAmB;IAO5B,KAAK,EAAE,MAAM,CAAC;IASd,QAAQ,EAAE,MAAM,CAAC;CACpB"}

package/dist/lib/auth/dto/credentials/phone-credentials.dto.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PhoneCredentialsDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class PhoneCredentialsDto {
+    phone;
+    password;
+}
+exports.PhoneCredentialsDto = PhoneCredentialsDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'User phone number',
+        example: '+1234567890',
+    }),
+    (0, class_validator_1.IsPhoneNumber)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], PhoneCredentialsDto.prototype, "phone", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'User password',
+        example: 'SecurePass123!',
+        minLength: 8,
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], PhoneCredentialsDto.prototype, "password", void 0);
+//# sourceMappingURL=phone-credentials.dto.js.map

package/dist/lib/auth/dto/credentials/phone-credentials.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phone-credentials.dto.js","sourceRoot":"","sources":["../../../../../src/lib/auth/dto/credentials/phone-credentials.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAsE;AAKtE,MAAa,mBAAmB;IAO5B,KAAK,CAAS;IASd,QAAQ,CAAS;CACpB;AAjBD,kDAiBC;AAVG;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,mBAAmB;QAChC,OAAO,EAAE,aAAa;KACzB,CAAC;IACD,IAAA,+BAAa,GAAE;IACf,IAAA,4BAAU,GAAE;;kDACC;AASd;IAPC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,CAAC;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;qDACI"}

package/dist/lib/auth/dto/credentials/social-credentials.dto.d.ts

@@ -0,0 +1,4 @@
+export declare class SocialCredentialsDto {
+    accessToken: string;
+}
+//# sourceMappingURL=social-credentials.dto.d.ts.map

package/dist/lib/auth/dto/credentials/social-credentials.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-credentials.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/auth/dto/credentials/social-credentials.dto.ts"],"names":[],"mappings":"AAMA,qBAAa,oBAAoB;IAO7B,WAAW,EAAE,MAAM,CAAC;CACvB"}

package/dist/lib/auth/dto/credentials/social-credentials.dto.js

@@ -0,0 +1,28 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SocialCredentialsDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class SocialCredentialsDto {
+    accessToken;
+}
+exports.SocialCredentialsDto = SocialCredentialsDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'OAuth token or ID token from social provider',
+        example: 'ya29.a0AfH6SMBx1234567890abcdefghijklmnop',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], SocialCredentialsDto.prototype, "accessToken", void 0);
+//# sourceMappingURL=social-credentials.dto.js.map

package/dist/lib/auth/dto/credentials/social-credentials.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-credentials.dto.js","sourceRoot":"","sources":["../../../../../src/lib/auth/dto/credentials/social-credentials.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAuD;AAKvD,MAAa,oBAAoB;IAO7B,WAAW,CAAS;CACvB;AARD,oDAQC;AADG;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,2CAA2C;KACvD,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;yDACO"}

package/dist/lib/auth/dto/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/auth/dto/index.ts"],"names":[],"mappings":""}

package/dist/lib/auth/dto/index.js

@@ -0,0 +1 @@
+//# sourceMappingURL=index.js.map

package/dist/lib/auth/dto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lib/auth/dto/index.ts"],"names":[],"mappings":""}

package/dist/lib/auth/dto/requests/change-password.request.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-password.request.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/auth/dto/requests/change-password.request.dto.ts"],"names":[],"mappings":"AAcA,qBAAa,wBAAwB;IAQjC,eAAe,EAAE,MAAM,CAAC;IAUxB,WAAW,EAAE,MAAM,CAAC;CACvB"}

package/dist/lib/auth/dto/requests/change-password.request.dto.js

@@ -0,0 +1,53 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChangePasswordRequestDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+let PasswordNotSameAsCurrent = class PasswordNotSameAsCurrent {
+    validate(newPassword, args) {
+        const obj = args.object;
+        return typeof newPassword === 'string' && newPassword !== obj.currentPassword;
+    }
+    defaultMessage(_args) {
+        return 'New password must be different from the current password';
+    }
+};
+PasswordNotSameAsCurrent = __decorate([
+    (0, class_validator_1.ValidatorConstraint)({ name: 'passwordNotSameAsCurrent', async: false })
+], PasswordNotSameAsCurrent);
+class ChangePasswordRequestDto {
+    currentPassword;
+    newPassword;
+}
+exports.ChangePasswordRequestDto = ChangePasswordRequestDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Current password',
+        example: 'DemoOwner1!',
+        minLength: 8,
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(8),
+    __metadata("design:type", String)
+], ChangePasswordRequestDto.prototype, "currentPassword", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'New password',
+        example: 'DemoOwner1!New',
+        minLength: 8,
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(8),
+    (0, class_validator_1.Validate)(PasswordNotSameAsCurrent),
+    __metadata("design:type", String)
+], ChangePasswordRequestDto.prototype, "newPassword", void 0);
+//# sourceMappingURL=change-password.request.dto.js.map

package/dist/lib/auth/dto/requests/change-password.request.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-password.request.dto.js","sourceRoot":"","sources":["../../../../../src/lib/auth/dto/requests/change-password.request.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAwI;AAGxI,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAC1B,QAAQ,CAAC,WAAmB,EAAE,IAAyB;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAa,CAAC;QAC/B,OAAO,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,GAAG,CAAC,eAAe,CAAC;IAClF,CAAC;IACD,cAAc,CAAC,KAA0B;QACrC,OAAO,0DAA0D,CAAC;IACtE,CAAC;CACJ,CAAA;AARK,wBAAwB;IAD7B,IAAA,qCAAmB,EAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;GAClE,wBAAwB,CAQ7B;AAED,MAAa,wBAAwB;IAQjC,eAAe,CAAS;IAUxB,WAAW,CAAS;CACvB;AAnBD,4DAmBC;AAXG;IAPC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,CAAC;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,CAAC,CAAC;;iEACW;AAUxB;IARC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,CAAC;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,CAAC,CAAC;IACZ,IAAA,0BAAQ,EAAC,wBAAwB,CAAC;;6DACf"}

package/dist/lib/auth/dto/requests/forgot-password.request.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgot-password.request.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/auth/dto/requests/forgot-password.request.dto.ts"],"names":[],"mappings":"AAGA,qBAAa,wBAAwB;IAQjC,KAAK,CAAC,EAAE,MAAM,CAAC;IASf,KAAK,CAAC,EAAE,MAAM,CAAC;IAQf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/dist/lib/auth/dto/requests/forgot-password.request.dto.js

@@ -0,0 +1,50 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ForgotPasswordRequestDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class ForgotPasswordRequestDto {
+    email;
+    phone;
+    tenantId;
+}
+exports.ForgotPasswordRequestDto = ForgotPasswordRequestDto;
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'User email address (required if phone not provided)',
+        example: 'user@example.com',
+    }),
+    (0, class_validator_1.ValidateIf)(o => !o.phone),
+    (0, class_validator_1.IsEmail)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], ForgotPasswordRequestDto.prototype, "email", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'User phone number (required if email not provided)',
+        example: '+1234567890',
+    }),
+    (0, class_validator_1.ValidateIf)(o => !o.email),
+    (0, class_validator_1.IsPhoneNumber)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], ForgotPasswordRequestDto.prototype, "phone", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Tenant ID for multi-tenant applications',
+        example: '123e4567-e89b-12d3-a456-426614174000',
+    }),
+    (0, class_validator_1.IsUUID)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], ForgotPasswordRequestDto.prototype, "tenantId", void 0);
+//# sourceMappingURL=forgot-password.request.dto.js.map

package/dist/lib/auth/dto/requests/forgot-password.request.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgot-password.request.dto.js","sourceRoot":"","sources":["../../../../../src/lib/auth/dto/requests/forgot-password.request.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,qDAAqG;AAErG,MAAa,wBAAwB;IAQjC,KAAK,CAAU;IASf,KAAK,CAAU;IAQf,QAAQ,CAAU;CACrB;AA1BD,4DA0BC;AAlBG;IAPC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EAAE,qDAAqD;QAClE,OAAO,EAAE,kBAAkB;KAC9B,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACzB,IAAA,yBAAO,GAAE;IACT,IAAA,4BAAU,GAAE;;uDACE;AASf;IAPC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,aAAa;KACzB,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACzB,IAAA,+BAAa,GAAE;IACf,IAAA,4BAAU,GAAE;;uDACE;AAQf;IANC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,sCAAsC;KAClD,CAAC;IACD,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;0DACK"}

package/dist/lib/auth/dto/requests/initialize-admin.request.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialize-admin.request.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/auth/dto/requests/initialize-admin.request.dto.ts"],"names":[],"mappings":"AAGA,qBAAa,yBAAyB;IAOlC,KAAK,EAAE,MAAM,CAAC;IAcd,QAAQ,EAAE,MAAM,CAAC;IAQjB,SAAS,EAAE,MAAM,CAAC;IAQlB,QAAQ,CAAC,EAAE,MAAM,CAAC;IASlB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAClC"}

package/dist/lib/auth/dto/requests/initialize-admin.request.dto.js

@@ -0,0 +1,72 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InitializeAdminRequestDto = void 0;
+const class_validator_1 = require("class-validator");
+const swagger_1 = require("@nestjs/swagger");
+class InitializeAdminRequestDto {
+    email;
+    password;
+    secretKey;
+    tenantId;
+    metadata;
+}
+exports.InitializeAdminRequestDto = InitializeAdminRequestDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Super admin email address',
+        example: 'admin@example.com'
+    }),
+    (0, class_validator_1.IsEmail)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], InitializeAdminRequestDto.prototype, "email", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Super admin password (minimum 8 characters, must contain uppercase, lowercase, number, and special character)',
+        example: 'SecurePassword123!',
+        minLength: 8
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.MinLength)(8),
+    (0, class_validator_1.Matches)(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]+$/, { message: 'Password must contain uppercase, lowercase, number, and special character' }),
+    __metadata("design:type", String)
+], InitializeAdminRequestDto.prototype, "password", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Secret key for authorization (provided in module configuration)',
+        example: 'your-secret-key'
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], InitializeAdminRequestDto.prototype, "secretKey", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Tenant ID (optional, uses default tenant if not provided)',
+        required: false
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], InitializeAdminRequestDto.prototype, "tenantId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Additional metadata for the admin user (free-form object for storing firstName, lastName, department, etc.)',
+        required: false,
+        example: { firstName: 'Admin', lastName: 'User', department: 'IT' }
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsObject)(),
+    __metadata("design:type", Object)
+], InitializeAdminRequestDto.prototype, "metadata", void 0);
+//# sourceMappingURL=initialize-admin.request.dto.js.map

package/dist/lib/auth/dto/requests/initialize-admin.request.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialize-admin.request.dto.js","sourceRoot":"","sources":["../../../../../src/lib/auth/dto/requests/initialize-admin.request.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAA0G;AAC1G,6CAA8C;AAE9C,MAAa,yBAAyB;IAOlC,KAAK,CAAS;IAcd,QAAQ,CAAS;IAQjB,SAAS,CAAS;IAQlB,QAAQ,CAAU;IASlB,QAAQ,CAAuB;CAClC;AA/CD,8DA+CC;AAxCG;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,2BAA2B;QACxC,OAAO,EAAE,mBAAmB;KAC/B,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,4BAAU,GAAE;;wDACC;AAcd;IAZC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,+GAA+G;QAC5H,OAAO,EAAE,oBAAoB;QAC7B,SAAS,EAAE,CAAC;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,CAAC,CAAC;IACZ,IAAA,yBAAO,EACJ,mEAAmE,EACnE,EAAE,OAAO,EAAE,2EAA2E,EAAE,CAC3F;;2DACgB;AAQjB;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,iEAAiE;QAC9E,OAAO,EAAE,iBAAiB;KAC7B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;4DACK;AAQlB;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,2DAA2D;QACxE,QAAQ,EAAE,KAAK;KAClB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;2DACO;AASlB;IAPC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,6GAA6G;QAC1H,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE;KACtE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;2DACoB"}

package/dist/lib/auth/dto/requests/login.request.dto.d.ts

@@ -0,0 +1,10 @@
+import { EmailCredentialsDto } from '../credentials/email-credentials.dto';
+import { PhoneCredentialsDto } from '../credentials/phone-credentials.dto';
+import { SocialCredentialsDto } from '../credentials/social-credentials.dto';
+export declare class LoginRequestDto {
+    providerName?: string;
+    credentials?: EmailCredentialsDto | PhoneCredentialsDto | SocialCredentialsDto | Record<string, any>;
+    tenantId?: string;
+    createUserIfNotExists?: boolean;
+}
+//# sourceMappingURL=login.request.dto.d.ts.map

package/dist/lib/auth/dto/requests/login.request.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.request.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/auth/dto/requests/login.request.dto.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAK7E,qBACa,eAAe;IAUxB,YAAY,CAAC,EAAE,MAAM,CAAC;IA2BtB,WAAW,CAAC,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAQrG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAQlB,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACnC"}