@ackplus/nest-auth 1.1.69-beta.8 → 2.0.0-beta.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (206) hide show
  1. package/README.md +2 -2
  2. package/dist/index.d.ts +1 -1
  3. package/dist/index.d.ts.map +1 -1
  4. package/dist/index.js.map +1 -1
  5. package/dist/lib/admin-console/admin-console.module.d.ts.map +1 -1
  6. package/dist/lib/admin-console/admin-console.module.js +8 -1
  7. package/dist/lib/admin-console/admin-console.module.js.map +1 -1
  8. package/dist/lib/admin-console/controllers/admin-console.controller.d.ts.map +1 -1
  9. package/dist/lib/admin-console/controllers/admin-console.controller.js +0 -4
  10. package/dist/lib/admin-console/controllers/admin-console.controller.js.map +1 -1
  11. package/dist/lib/admin-console/controllers/admin-users.controller.d.ts +35 -5
  12. package/dist/lib/admin-console/controllers/admin-users.controller.d.ts.map +1 -1
  13. package/dist/lib/admin-console/controllers/admin-users.controller.js +74 -14
  14. package/dist/lib/admin-console/controllers/admin-users.controller.js.map +1 -1
  15. package/dist/lib/admin-console/dto/admin-user.dto.d.ts +1 -0
  16. package/dist/lib/admin-console/dto/admin-user.dto.d.ts.map +1 -1
  17. package/dist/lib/admin-console/dto/admin-user.dto.js +7 -0
  18. package/dist/lib/admin-console/dto/admin-user.dto.js.map +1 -1
  19. package/dist/lib/admin-console/static/index.html +589 -542
  20. package/dist/lib/admin-console/static/nest-auth.json +251 -25
  21. package/dist/lib/auth/auth.module.d.ts.map +1 -1
  22. package/dist/lib/auth/auth.module.js +3 -0
  23. package/dist/lib/auth/auth.module.js.map +1 -1
  24. package/dist/lib/auth/controllers/auth.controller.d.ts +8 -2
  25. package/dist/lib/auth/controllers/auth.controller.d.ts.map +1 -1
  26. package/dist/lib/auth/controllers/auth.controller.js +61 -3
  27. package/dist/lib/auth/controllers/auth.controller.js.map +1 -1
  28. package/dist/lib/auth/dto/credentials/passwordless-otp-credentials.dto.d.ts +6 -0
  29. package/dist/lib/auth/dto/credentials/passwordless-otp-credentials.dto.d.ts.map +1 -0
  30. package/dist/lib/auth/dto/credentials/passwordless-otp-credentials.dto.js +52 -0
  31. package/dist/lib/auth/dto/credentials/passwordless-otp-credentials.dto.js.map +1 -0
  32. package/dist/lib/auth/dto/requests/login.request.dto.d.ts +2 -1
  33. package/dist/lib/auth/dto/requests/login.request.dto.d.ts.map +1 -1
  34. package/dist/lib/auth/dto/requests/login.request.dto.js +17 -4
  35. package/dist/lib/auth/dto/requests/login.request.dto.js.map +1 -1
  36. package/dist/lib/auth/dto/requests/passwordless-send.request.dto.d.ts +7 -0
  37. package/dist/lib/auth/dto/requests/passwordless-send.request.dto.d.ts.map +1 -0
  38. package/dist/lib/auth/dto/requests/passwordless-send.request.dto.js +41 -0
  39. package/dist/lib/auth/dto/requests/passwordless-send.request.dto.js.map +1 -0
  40. package/dist/lib/auth/dto/requests/refresh-token.request.dto.d.ts +1 -1
  41. package/dist/lib/auth/dto/requests/refresh-token.request.dto.d.ts.map +1 -1
  42. package/dist/lib/auth/dto/requests/refresh-token.request.dto.js +2 -2
  43. package/dist/lib/auth/dto/requests/refresh-token.request.dto.js.map +1 -1
  44. package/dist/lib/auth/dto/requests/send-phone-verification.request.dto.d.ts +5 -0
  45. package/dist/lib/auth/dto/requests/send-phone-verification.request.dto.d.ts.map +1 -0
  46. package/dist/lib/auth/dto/requests/send-phone-verification.request.dto.js +28 -0
  47. package/dist/lib/auth/dto/requests/send-phone-verification.request.dto.js.map +1 -0
  48. package/dist/lib/auth/dto/requests/verify-email.request.dto.d.ts +1 -1
  49. package/dist/lib/auth/dto/requests/verify-email.request.dto.d.ts.map +1 -1
  50. package/dist/lib/auth/dto/requests/verify-email.request.dto.js +3 -3
  51. package/dist/lib/auth/dto/requests/verify-email.request.dto.js.map +1 -1
  52. package/dist/lib/auth/dto/requests/verify-forgot-password-otp-request-dto.d.ts +1 -1
  53. package/dist/lib/auth/dto/requests/verify-forgot-password-otp-request-dto.d.ts.map +1 -1
  54. package/dist/lib/auth/dto/requests/verify-forgot-password-otp-request-dto.js +3 -3
  55. package/dist/lib/auth/dto/requests/verify-forgot-password-otp-request-dto.js.map +1 -1
  56. package/dist/lib/auth/dto/requests/verify-phone.request.dto.d.ts +6 -0
  57. package/dist/lib/auth/dto/requests/verify-phone.request.dto.d.ts.map +1 -0
  58. package/dist/lib/auth/dto/requests/verify-phone.request.dto.js +40 -0
  59. package/dist/lib/auth/dto/requests/verify-phone.request.dto.js.map +1 -0
  60. package/dist/lib/auth/dto/responses/auth-messages.response.dto.d.ts +6 -0
  61. package/dist/lib/auth/dto/responses/auth-messages.response.dto.d.ts.map +1 -1
  62. package/dist/lib/auth/dto/responses/auth-messages.response.dto.js +17 -1
  63. package/dist/lib/auth/dto/responses/auth-messages.response.dto.js.map +1 -1
  64. package/dist/lib/auth/entities/otp.entity.d.ts +4 -2
  65. package/dist/lib/auth/entities/otp.entity.d.ts.map +1 -1
  66. package/dist/lib/auth/entities/otp.entity.js +29 -8
  67. package/dist/lib/auth/entities/otp.entity.js.map +1 -1
  68. package/dist/lib/auth/entities/trusted-device.entity.d.ts +4 -1
  69. package/dist/lib/auth/entities/trusted-device.entity.d.ts.map +1 -1
  70. package/dist/lib/auth/entities/trusted-device.entity.js +18 -4
  71. package/dist/lib/auth/entities/trusted-device.entity.js.map +1 -1
  72. package/dist/lib/auth/events/email-verification-requested.event.d.ts +13 -0
  73. package/dist/lib/auth/events/email-verification-requested.event.d.ts.map +1 -0
  74. package/dist/lib/auth/events/email-verification-requested.event.js +11 -0
  75. package/dist/lib/auth/events/email-verification-requested.event.js.map +1 -0
  76. package/dist/lib/auth/events/password-reset-requested.event.d.ts +1 -0
  77. package/dist/lib/auth/events/password-reset-requested.event.d.ts.map +1 -1
  78. package/dist/lib/auth/events/password-reset-requested.event.js.map +1 -1
  79. package/dist/lib/auth/events/passwordless-code-requested.event.d.ts +15 -0
  80. package/dist/lib/auth/events/passwordless-code-requested.event.d.ts.map +1 -0
  81. package/dist/lib/auth/events/passwordless-code-requested.event.js +11 -0
  82. package/dist/lib/auth/events/passwordless-code-requested.event.js.map +1 -0
  83. package/dist/lib/auth/events/phone-verification-requested.event.d.ts +13 -0
  84. package/dist/lib/auth/events/phone-verification-requested.event.d.ts.map +1 -0
  85. package/dist/lib/auth/events/phone-verification-requested.event.js +11 -0
  86. package/dist/lib/auth/events/phone-verification-requested.event.js.map +1 -0
  87. package/dist/lib/auth/filters/auth-exception.filter.d.ts +2 -2
  88. package/dist/lib/auth/filters/auth-exception.filter.d.ts.map +1 -1
  89. package/dist/lib/auth/filters/auth-exception.filter.js +17 -3
  90. package/dist/lib/auth/filters/auth-exception.filter.js.map +1 -1
  91. package/dist/lib/auth/guards/auth.guard.d.ts.map +1 -1
  92. package/dist/lib/auth/guards/auth.guard.js +3 -5
  93. package/dist/lib/auth/guards/auth.guard.js.map +1 -1
  94. package/dist/lib/auth/index.d.ts +5 -0
  95. package/dist/lib/auth/index.d.ts.map +1 -1
  96. package/dist/lib/auth/index.js +5 -0
  97. package/dist/lib/auth/index.js.map +1 -1
  98. package/dist/lib/auth/interceptors/token-response.interceptor.d.ts.map +1 -1
  99. package/dist/lib/auth/interceptors/token-response.interceptor.js +23 -20
  100. package/dist/lib/auth/interceptors/token-response.interceptor.js.map +1 -1
  101. package/dist/lib/auth/services/auth.service.d.ts +11 -1
  102. package/dist/lib/auth/services/auth.service.d.ts.map +1 -1
  103. package/dist/lib/auth/services/auth.service.js +136 -18
  104. package/dist/lib/auth/services/auth.service.js.map +1 -1
  105. package/dist/lib/auth/services/mfa.service.d.ts +4 -3
  106. package/dist/lib/auth/services/mfa.service.d.ts.map +1 -1
  107. package/dist/lib/auth/services/mfa.service.js +54 -66
  108. package/dist/lib/auth/services/mfa.service.js.map +1 -1
  109. package/dist/lib/auth/services/otp-flow.service.d.ts +28 -0
  110. package/dist/lib/auth/services/otp-flow.service.d.ts.map +1 -0
  111. package/dist/lib/auth/services/otp-flow.service.js +127 -0
  112. package/dist/lib/auth/services/otp-flow.service.js.map +1 -0
  113. package/dist/lib/auth/services/password.service.d.ts +5 -5
  114. package/dist/lib/auth/services/password.service.d.ts.map +1 -1
  115. package/dist/lib/auth/services/password.service.js +25 -57
  116. package/dist/lib/auth/services/password.service.js.map +1 -1
  117. package/dist/lib/auth/services/verification.service.d.ts +13 -4
  118. package/dist/lib/auth/services/verification.service.d.ts.map +1 -1
  119. package/dist/lib/auth/services/verification.service.js +116 -77
  120. package/dist/lib/auth/services/verification.service.js.map +1 -1
  121. package/dist/lib/auth.constants.d.ts +11 -0
  122. package/dist/lib/auth.constants.d.ts.map +1 -1
  123. package/dist/lib/auth.constants.js +9 -1
  124. package/dist/lib/auth.constants.js.map +1 -1
  125. package/dist/lib/core/core.module.d.ts.map +1 -1
  126. package/dist/lib/core/core.module.js +2 -0
  127. package/dist/lib/core/core.module.js.map +1 -1
  128. package/dist/lib/core/entities.d.ts +1 -1
  129. package/dist/lib/core/index.d.ts +1 -0
  130. package/dist/lib/core/index.d.ts.map +1 -1
  131. package/dist/lib/core/index.js +1 -0
  132. package/dist/lib/core/index.js.map +1 -1
  133. package/dist/lib/core/interfaces/auth-module-options.interface.d.ts +11 -20
  134. package/dist/lib/core/interfaces/auth-module-options.interface.d.ts.map +1 -1
  135. package/dist/lib/core/interfaces/mfa-options.interface.d.ts +3 -3
  136. package/dist/lib/core/interfaces/mfa-options.interface.d.ts.map +1 -1
  137. package/dist/lib/core/interfaces/session-options.interface.d.ts +8 -2
  138. package/dist/lib/core/interfaces/session-options.interface.d.ts.map +1 -1
  139. package/dist/lib/core/providers/base-auth.provider.d.ts +4 -4
  140. package/dist/lib/core/providers/base-auth.provider.d.ts.map +1 -1
  141. package/dist/lib/core/providers/base-auth.provider.js +7 -5
  142. package/dist/lib/core/providers/base-auth.provider.js.map +1 -1
  143. package/dist/lib/core/providers/email-auth.provider.d.ts +3 -3
  144. package/dist/lib/core/providers/email-auth.provider.d.ts.map +1 -1
  145. package/dist/lib/core/providers/email-auth.provider.js +9 -4
  146. package/dist/lib/core/providers/email-auth.provider.js.map +1 -1
  147. package/dist/lib/core/providers/facebook-auth.provider.d.ts +2 -2
  148. package/dist/lib/core/providers/facebook-auth.provider.d.ts.map +1 -1
  149. package/dist/lib/core/providers/facebook-auth.provider.js +1 -1
  150. package/dist/lib/core/providers/facebook-auth.provider.js.map +1 -1
  151. package/dist/lib/core/providers/github-auth.provider.d.ts +2 -2
  152. package/dist/lib/core/providers/github-auth.provider.d.ts.map +1 -1
  153. package/dist/lib/core/providers/github-auth.provider.js +1 -1
  154. package/dist/lib/core/providers/github-auth.provider.js.map +1 -1
  155. package/dist/lib/core/providers/google-auth.provider.d.ts +2 -2
  156. package/dist/lib/core/providers/google-auth.provider.d.ts.map +1 -1
  157. package/dist/lib/core/providers/google-auth.provider.js +1 -1
  158. package/dist/lib/core/providers/google-auth.provider.js.map +1 -1
  159. package/dist/lib/core/providers/jwt-auth.provider.d.ts +2 -2
  160. package/dist/lib/core/providers/jwt-auth.provider.d.ts.map +1 -1
  161. package/dist/lib/core/providers/jwt-auth.provider.js +2 -2
  162. package/dist/lib/core/providers/jwt-auth.provider.js.map +1 -1
  163. package/dist/lib/core/providers/passwordless-auth.provider.d.ts +19 -0
  164. package/dist/lib/core/providers/passwordless-auth.provider.d.ts.map +1 -0
  165. package/dist/lib/core/providers/passwordless-auth.provider.js +134 -0
  166. package/dist/lib/core/providers/passwordless-auth.provider.js.map +1 -0
  167. package/dist/lib/core/providers/phone-auth.provider.d.ts +2 -2
  168. package/dist/lib/core/providers/phone-auth.provider.d.ts.map +1 -1
  169. package/dist/lib/core/providers/phone-auth.provider.js +3 -3
  170. package/dist/lib/core/providers/phone-auth.provider.js.map +1 -1
  171. package/dist/lib/core/services/auth-config.service.d.ts +1 -3
  172. package/dist/lib/core/services/auth-config.service.d.ts.map +1 -1
  173. package/dist/lib/core/services/auth-config.service.js +29 -44
  174. package/dist/lib/core/services/auth-config.service.js.map +1 -1
  175. package/dist/lib/core/services/auth-provider-registry.service.d.ts +3 -1
  176. package/dist/lib/core/services/auth-provider-registry.service.d.ts.map +1 -1
  177. package/dist/lib/core/services/auth-provider-registry.service.js +9 -2
  178. package/dist/lib/core/services/auth-provider-registry.service.js.map +1 -1
  179. package/dist/lib/core/services/jwt.service.d.ts.map +1 -1
  180. package/dist/lib/core/services/jwt.service.js +35 -11
  181. package/dist/lib/core/services/jwt.service.js.map +1 -1
  182. package/dist/lib/session/services/session-manager.service.d.ts +3 -3
  183. package/dist/lib/session/services/session-manager.service.d.ts.map +1 -1
  184. package/dist/lib/session/services/session-manager.service.js +19 -33
  185. package/dist/lib/session/services/session-manager.service.js.map +1 -1
  186. package/dist/lib/session/session.module.js +1 -1
  187. package/dist/lib/session/session.module.js.map +1 -1
  188. package/dist/lib/tenant/services/tenant.service.d.ts.map +1 -1
  189. package/dist/lib/tenant/services/tenant.service.js +6 -1
  190. package/dist/lib/tenant/services/tenant.service.js.map +1 -1
  191. package/dist/lib/user/entities/user.entity.d.ts.map +1 -1
  192. package/dist/lib/user/entities/user.entity.js +1 -10
  193. package/dist/lib/user/entities/user.entity.js.map +1 -1
  194. package/dist/lib/utils/has-token.d.ts +6 -0
  195. package/dist/lib/utils/has-token.d.ts.map +1 -0
  196. package/dist/lib/utils/has-token.js +28 -0
  197. package/dist/lib/utils/has-token.js.map +1 -0
  198. package/dist/lib/utils/index.d.ts +1 -0
  199. package/dist/lib/utils/index.d.ts.map +1 -1
  200. package/dist/lib/utils/index.js +1 -0
  201. package/dist/lib/utils/index.js.map +1 -1
  202. package/dist/lib/utils/otp.d.ts +1 -1
  203. package/dist/lib/utils/otp.d.ts.map +1 -1
  204. package/dist/lib/utils/otp.js +8 -2
  205. package/dist/lib/utils/otp.js.map +1 -1
  206. package/package.json +3 -2
@@ -25,30 +25,30 @@ const qrcode_1 = __importDefault(require("qrcode"));
25
25
  const nest_auth_contracts_1 = require("@ackplus/nest-auth-contracts");
26
26
  const auth_constants_1 = require("../../auth.constants");
27
27
  const user_entity_1 = require("../../user/entities/user.entity");
28
- const otp_entity_1 = require("../../auth/entities/otp.entity");
29
28
  const nest_auth_contracts_2 = require("@ackplus/nest-auth-contracts");
30
- const otp_1 = require("../../utils/otp");
31
- const ms_1 = __importDefault(require("ms"));
32
29
  const auth_config_service_1 = require("../../core/services/auth-config.service");
30
+ const otp_flow_service_1 = require("./otp-flow.service");
33
31
  const event_emitter_1 = require("@nestjs/event-emitter");
34
32
  const two_factor_code_sent_event_1 = require("../events/two-factor-code-sent.event");
35
33
  const trusted_device_entity_1 = require("../entities/trusted-device.entity");
36
34
  const crypto_1 = require("crypto");
35
+ const typeorm_3 = require("typeorm");
37
36
  const user_2fa_enabled_event_1 = require("../events/user-2fa-enabled.event");
38
37
  const user_2fa_disabled_event_1 = require("../events/user-2fa-disabled.event");
39
38
  const request_context_1 = require("../../request-context/request-context");
39
+ const ms_1 = __importDefault(require("ms"));
40
40
  let MfaService = class MfaService {
41
41
  mfaSecretRepository;
42
42
  userRepository;
43
- otpRepository;
44
43
  trustedDeviceRepository;
45
44
  eventEmitter;
46
- constructor(mfaSecretRepository, userRepository, otpRepository, trustedDeviceRepository, eventEmitter) {
45
+ otpFlow;
46
+ constructor(mfaSecretRepository, userRepository, trustedDeviceRepository, eventEmitter, otpFlow) {
47
47
  this.mfaSecretRepository = mfaSecretRepository;
48
48
  this.userRepository = userRepository;
49
- this.otpRepository = otpRepository;
50
49
  this.trustedDeviceRepository = trustedDeviceRepository;
51
50
  this.eventEmitter = eventEmitter;
51
+ this.otpFlow = otpFlow;
52
52
  }
53
53
  get mfaConfig() {
54
54
  return auth_config_service_1.AuthConfigService.getOptions().mfa || {};
@@ -119,35 +119,11 @@ let MfaService = class MfaService {
119
119
  }
120
120
  async sendMfaCode(userId, method) {
121
121
  this.requireMfaEnabledForApp(true);
122
- const options = auth_config_service_1.AuthConfigService.getOptions();
123
- let code;
124
- if (options.otp?.generate) {
125
- code = await options.otp.generate(this.mfaConfig.otpLength);
126
- }
127
- else {
128
- code = (0, otp_1.generateOtp)(this.mfaConfig.otpLength);
129
- }
130
- let expiresAtMs;
131
- if (typeof this.mfaConfig.otpExpiresIn === 'string') {
132
- expiresAtMs = (0, ms_1.default)(this.mfaConfig.otpExpiresIn);
133
- }
134
- else {
135
- expiresAtMs = this.mfaConfig.otpExpiresIn || 900000;
136
- }
137
- if (!expiresAtMs || isNaN(expiresAtMs) || expiresAtMs <= 0) {
138
- throw new Error(`Invalid MFA configuration: otpExpiresIn '${this.mfaConfig.otpExpiresIn}' results in invalid duration`);
139
- }
140
- await this.otpRepository.delete({
141
- userId,
142
- type: nest_auth_contracts_2.NestAuthOTPTypeEnum.MFA
143
- });
144
- const otp = await this.otpRepository.create({
122
+ const { plainCode } = await this.otpFlow.createOtp({
145
123
  userId,
146
124
  type: nest_auth_contracts_2.NestAuthOTPTypeEnum.MFA,
147
- expiresAt: new Date(Date.now() + expiresAtMs),
148
- code,
125
+ replaceExisting: true,
149
126
  });
150
- await this.otpRepository.save(otp);
151
127
  if (method === nest_auth_contracts_1.NestAuthMFAMethodEnum.EMAIL || method === nest_auth_contracts_1.NestAuthMFAMethodEnum.SMS) {
152
128
  const user = await this.userRepository.findOne({ where: { id: userId } });
153
129
  if (user) {
@@ -155,7 +131,7 @@ let MfaService = class MfaService {
155
131
  user,
156
132
  tenantId: request_context_1.RequestContext.currentTenantId(),
157
133
  method,
158
- code,
134
+ code: plainCode,
159
135
  }));
160
136
  }
161
137
  }
@@ -163,9 +139,6 @@ let MfaService = class MfaService {
163
139
  }
164
140
  async verifyMfa(userId, inputOtp, method) {
165
141
  this.requireMfaEnabledForApp(true);
166
- if (this.mfaConfig.defaultOtp && this.mfaConfig.defaultOtp === inputOtp) {
167
- return true;
168
- }
169
142
  if (method === nest_auth_contracts_1.NestAuthMFAMethodEnum.TOTP) {
170
143
  const devices = await this.mfaSecretRepository.find({
171
144
  where: { userId, verified: true }
@@ -185,20 +158,17 @@ let MfaService = class MfaService {
185
158
  return false;
186
159
  }
187
160
  if (method === nest_auth_contracts_1.NestAuthMFAMethodEnum.EMAIL || method === nest_auth_contracts_1.NestAuthMFAMethodEnum.SMS) {
188
- const otp = await this.otpRepository.findOne({
189
- where: {
161
+ try {
162
+ await this.otpFlow.validateAndConsume({
190
163
  userId,
191
164
  type: nest_auth_contracts_2.NestAuthOTPTypeEnum.MFA,
192
- used: false,
193
- expiresAt: (0, typeorm_2.MoreThan)(new Date()),
194
- code: inputOtp
195
- }
196
- });
197
- if (!otp) {
165
+ code: inputOtp,
166
+ });
167
+ return true;
168
+ }
169
+ catch {
198
170
  return false;
199
171
  }
200
- await this.otpRepository.delete(otp.id);
201
- return true;
202
172
  }
203
173
  return false;
204
174
  }
@@ -394,34 +364,53 @@ let MfaService = class MfaService {
394
364
  });
395
365
  return Boolean(user?.mfaRecoveryCode);
396
366
  }
367
+ getTrustedDeviceSecret() {
368
+ const secret = this.mfaConfig.trustedDeviceSecret;
369
+ if (!secret) {
370
+ throw new Error('Trusted device HMAC secret is not configured. Set mfa.trustedDeviceSecret or session.jwt.secret.');
371
+ }
372
+ return secret;
373
+ }
397
374
  async createTrustedDevice(userId, userAgent, ipAddress) {
398
375
  this.requireMfaEnabledForApp(true);
399
- const token = (0, crypto_1.randomBytes)(32).toString('hex');
400
- const duration = this.mfaConfig.trustedDeviceDuration || '30m';
401
- const expiresAtMs = typeof duration === 'string' ? (0, ms_1.default)(duration) : duration;
402
- await this.trustedDeviceRepository.save({
376
+ const plainToken = (0, crypto_1.randomBytes)(32).toString('base64url');
377
+ const duration = this.mfaConfig.trustedDeviceDuration;
378
+ const expiresAtMs = (0, ms_1.default)(duration);
379
+ const secret = this.getTrustedDeviceSecret();
380
+ const device = this.trustedDeviceRepository.create({
403
381
  userId,
404
- token,
405
382
  userAgent,
406
383
  ipAddress,
407
384
  expiresAt: new Date(Date.now() + expiresAtMs),
385
+ revokedAt: null,
408
386
  });
409
- return token;
387
+ await device.setTrustToken(secret, plainToken);
388
+ await this.trustedDeviceRepository.save(device);
389
+ return plainToken;
410
390
  }
411
391
  async validateTrustedDevice(userId, token) {
412
- if (!token)
392
+ if (!token) {
413
393
  return false;
414
- const device = await this.trustedDeviceRepository.findOne({
415
- where: { userId, token },
394
+ }
395
+ const secret = this.getTrustedDeviceSecret();
396
+ const candidates = await this.trustedDeviceRepository.find({
397
+ where: {
398
+ userId,
399
+ revokedAt: (0, typeorm_3.IsNull)(),
400
+ expiresAt: (0, typeorm_3.MoreThan)(new Date()),
401
+ },
402
+ select: ['id', 'tokenHash'],
416
403
  });
417
- if (!device)
418
- return false;
419
- if (device.expiresAt < new Date()) {
420
- await this.trustedDeviceRepository.remove(device);
421
- return false;
404
+ const now = new Date();
405
+ for (const device of candidates) {
406
+ if (!(await device.validateTrustToken(secret, token))) {
407
+ continue;
408
+ }
409
+ device.lastUsedAt = now;
410
+ await this.trustedDeviceRepository.save(device);
411
+ return true;
422
412
  }
423
- await this.trustedDeviceRepository.update(device.id, { lastUsedAt: new Date() });
424
- return true;
413
+ return false;
425
414
  }
426
415
  };
427
416
  exports.MfaService = MfaService;
@@ -429,12 +418,11 @@ exports.MfaService = MfaService = __decorate([
429
418
  (0, common_1.Injectable)(),
430
419
  __param(0, (0, typeorm_1.InjectRepository)(mfa_secret_entity_1.NestAuthMFASecret)),
431
420
  __param(1, (0, typeorm_1.InjectRepository)(user_entity_1.NestAuthUser)),
432
- __param(2, (0, typeorm_1.InjectRepository)(otp_entity_1.NestAuthOTP)),
433
- __param(3, (0, typeorm_1.InjectRepository)(trusted_device_entity_1.NestAuthTrustedDevice)),
421
+ __param(2, (0, typeorm_1.InjectRepository)(trusted_device_entity_1.NestAuthTrustedDevice)),
434
422
  __metadata("design:paramtypes", [typeorm_2.Repository,
435
423
  typeorm_2.Repository,
436
424
  typeorm_2.Repository,
437
- typeorm_2.Repository,
438
- event_emitter_1.EventEmitter2])
425
+ event_emitter_1.EventEmitter2,
426
+ otp_flow_service_1.OtpFlowService])
439
427
  ], MfaService);
440
428
  //# sourceMappingURL=mfa.service.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"mfa.service.js","sourceRoot":"","sources":["../../../../src/lib/auth/services/mfa.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,2CAAuF;AACvF,6CAAmD;AACnD,qCAA+C;AAC/C,6EAA0E;AAC1E,0DAAkC;AAClC,oDAA4B;AAE5B,sEAAiF;AACjF,yDAG8B;AAC9B,iEAA+D;AAC/D,+DAA6D;AAC7D,sEAAmE;AACnE,yCAA8C;AAC9C,4CAAoB;AACpB,iFAA4E;AAC5E,yDAAsD;AACtD,qFAA8E;AAC9E,6EAA0E;AAC1E,mCAAqC;AACrC,6EAAuE;AACvE,+EAAyE;AACzE,2EAAuE;AAIhE,IAAM,UAAU,GAAhB,MAAM,UAAU;IAIP;IAGA;IAGA;IAGA;IAEA;IAbZ,YAEY,mBAAkD,EAGlD,cAAwC,EAGxC,aAAsC,EAGtC,uBAA0D,EAE1D,YAA2B;QAX3B,wBAAmB,GAAnB,mBAAmB,CAA+B;QAGlD,mBAAc,GAAd,cAAc,CAA0B;QAGxC,kBAAa,GAAb,aAAa,CAAyB;QAGtC,4BAAuB,GAAvB,uBAAuB,CAAmC;QAE1D,iBAAY,GAAZ,YAAY,CAAe;IACnC,CAAC;IAEL,IAAI,SAAS;QACT,OAAO,uCAAiB,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IACpD,CAAC;IAED,uBAAuB,CAAC,aAAsB,IAAI;QAC9C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,UAAU,EAAE,CAAC;gBACb,MAAM,IAAI,2BAAkB,CAAC;oBACzB,OAAO,EAAE,wCAAwC;oBACjD,IAAI,EAAE,4BAAW,CAAC,eAAe;iBACpC,CAAC,CAAC;YACP,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,uBAAuB,CAAC,aAAsB,IAAI;QACtD,OAAO,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACnC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAE1E,MAAM,eAAe,GAA4B,EAAE,CAAA;QAGnD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;YAC9D,KAAK,EAAE;gBACH,MAAM;gBACN,QAAQ,EAAE,IAAI;aACjB;SACJ,CAAC,CAAC;QAEH,IAAI,kBAAkB,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,2CAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACrF,eAAe,CAAC,IAAI,CAAC,2CAAqB,CAAC,IAAI,CAAC,CAAA;QACpD,CAAC;QAKD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,2CAAqB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAC/E,eAAe,CAAC,IAAI,CAAC,2CAAqB,CAAC,KAAK,CAAC,CAAA;QACrD,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,2CAAqB,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAC7E,eAAe,CAAC,IAAI,CAAC,2CAAqB,CAAC,GAAG,CAAC,CAAA;QACnD,CAAC;QAED,OAAO,eAAe,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAc;QAClC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAA4B,EAAE,CAAC;QAEjD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,2CAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,YAAY,CAAC,IAAI,CAAC,2CAAqB,CAAC,KAAK,CAAC,CAAA;QAClD,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,2CAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9D,YAAY,CAAC,IAAI,CAAC,2CAAqB,CAAC,GAAG,CAAC,CAAA;QAChD,CAAC;QAED,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;YAC9D,KAAK,EAAE;gBACH,MAAM;gBACN,QAAQ,EAAE,IAAI;aACjB;SACJ,CAAC,CAAC;QAEH,IAAI,kBAAkB,EAAE,CAAC;YACrB,YAAY,CAAC,IAAI,CAAC,2CAAqB,CAAC,IAAI,CAAC,CAAA;QACjD,CAAC;QAED,OAAO,YAAY,CAAC;IACxB,CAAC;IAGD,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,MAA6B;QAE3D,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,OAAO,GAAG,uCAAiB,CAAC,UAAU,EAAE,CAAC;QAC/C,IAAI,IAAY,CAAC;QAGjB,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;YACxB,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACJ,IAAI,GAAG,IAAA,iBAAW,EAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,WAAmB,CAAC;QACxB,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YAClD,WAAW,GAAG,IAAA,YAAE,EAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACJ,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,IAAI,MAAM,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,SAAS,CAAC,YAAY,+BAA+B,CAAC,CAAC;QAC5H,CAAC;QAGD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAC5B,MAAM;YACN,IAAI,EAAE,yCAAmB,CAAC,GAAG;SAChC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YACxC,MAAM;YACN,IAAI,EAAE,yCAAmB,CAAC,GAAG;YAC7B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YAC7C,IAAI;SACP,CAAC,CAAA;QACF,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEnC,IAAI,MAAM,KAAK,2CAAqB,CAAC,KAAK,IAAI,MAAM,KAAK,2CAAqB,CAAC,GAAG,EAAE,CAAC;YACjF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1E,IAAI,IAAI,EAAE,CAAC;gBACP,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAC7B,+BAAc,CAAC,oBAAoB,EACnC,IAAI,mDAAsB,CAAC;oBACvB,IAAI;oBACJ,QAAQ,EAAE,gCAAc,CAAC,eAAe,EAAE;oBAC1C,MAAM;oBACN,IAAI;iBACP,CAAC,CACL,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,QAAgB,EAAE,MAA6B;QAE3E,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAGlC,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,KAAK,2CAAqB,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;gBAChD,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;aACpC,CAAC,CAAC;YAEH,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,mBAAS,CAAC,IAAI,CAAC,MAAM,CAAC;oBAClC,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,QAAQ;oBAClB,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE,CAAC;iBACZ,CAAC,CAAC;gBAEH,IAAI,OAAO,EAAE,CAAC;oBAEV,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CACjC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EACjB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAC7B,CAAC;oBACF,OAAO,IAAI,CAAC;gBAChB,CAAC;YACL,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,MAAM,KAAK,2CAAqB,CAAC,KAAK,IAAI,MAAM,KAAK,2CAAqB,CAAC,GAAG,EAAE,CAAC;YACjF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;gBACzC,KAAK,EAAE;oBACH,MAAM;oBACN,IAAI,EAAE,yCAAmB,CAAC,GAAG;oBAC7B,IAAI,EAAE,KAAK;oBACX,SAAS,EAAE,IAAA,kBAAQ,EAAC,IAAI,IAAI,EAAE,CAAC;oBAC/B,IAAI,EAAE,QAAQ;iBACjB;aACJ,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,EAAE,CAAC;gBACP,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAGD,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,UAAmB;QACrD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,mBAAS,CAAC,cAAc,EAAE,CAAC;QAE1C,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAChC,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,UAAU,IAAI,eAAe;YACzC,QAAQ,EAAE,KAAK;SAClB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,gBAAM,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,MAAc,EAAE,QAAgB;QAElE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;SAC5B,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,OAAO,GAAG,mBAAS,CAAC,IAAI,CAAC,MAAM,CAAC;gBAClC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,CAAC;aACZ,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBACV,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7E,OAAO,IAAI,CAAC;YAChB,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QAC/B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAChD,MAAM,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC;YACnE,KAAK,EAAE,EAAE,MAAM,EAAE;YACjB,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;SACnD,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,2CAAqB,CAAC,IAAI;YAClC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC,CAAC;IACR,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB;QAC/B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAc;QAC9B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC;YAC9B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;SACxB,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC7B,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC;gBAC9B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;aACxB,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC;QAChC,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,QAAgB;QACjD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CACjC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EACxB,EAAE,QAAQ,EAAE,IAAI,EAAE,CACrB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc;QAC1B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,2BAAkB,CAAC;gBACzB,OAAO,EAAE,6BAA6B;gBACtC,IAAI,EAAE,4BAAW,CAAC,wBAAwB;aAC7C,CAAC,CAAC;QACP,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,2BAAkB,CAAC;gBACzB,OAAO,EAAE,wDAAwD;gBACjE,IAAI,EAAE,4BAAW,CAAC,gCAAgC;aACrD,CAAC,CAAC;QACP,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAC7B,+BAAc,CAAC,kBAAkB,EACjC,IAAI,4CAAmB,CAAC;gBACpB,IAAI;gBACJ,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;aAC7B,CAAC,CACL,CAAC;QACN,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC3B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAGnC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,2BAAkB,CAAC;gBACzB,OAAO,EAAE,wCAAwC;gBACjD,IAAI,EAAE,4BAAW,CAAC,wBAAwB;aAC7C,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,2BAAkB,CAAC;gBACzB,OAAO,EAAE,6BAA6B;gBACtC,IAAI,EAAE,4BAAW,CAAC,wBAAwB;aAC7C,CAAC,CAAC;QACP,CAAC;QACD,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAElE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAC7B,+BAAc,CAAC,mBAAmB,EAClC,IAAI,8CAAoB,CAAC;gBACrB,IAAI;aACP,CAAC,CACL,CAAC;QACN,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACnC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAAc;QACrC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,MAAM,GAAG,mBAAS,CAAC,cAAc,CAAC;YACpC,IAAI,EAAE,YAAY,MAAM,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,IAAY;QAEvC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,8BAAqB,CAAC;gBAC5B,OAAO,EAAE,gBAAgB;gBACzB,IAAI,EAAE,4BAAW,CAAC,cAAc;aACnC,CAAC,CAAC;QACP,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAEhC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YAGpE,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAElD,OAAO;gBACH,OAAO,EAAE,wBAAwB;aACpC,CAAC;QACN,CAAC;QAED,MAAM,IAAI,8BAAqB,CAAC;YAC5B,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,4BAAW,CAAC,yBAAyB;SAC9C,CAAC,CAAC;IACP,CAAC;IAED,mBAAmB;QACf,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACjC,CAAC;IAKD,aAAa;QACT,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC5C,CAAC;IAMD,gBAAgB;QACZ,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,IAAI,KAAK,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,KAAK,CAAC;QAClD,OAAO,eAAe,IAAI,CAAC,QAAQ,CAAC;IACxC,CAAC;IAMD,YAAY;QACR,OAAO,IAAI,CAAC,SAAS,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc;QAChC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC;YACjC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;SACxB,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,SAAiB,EAAE,SAAiB;QAC1E,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAEnC,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,qBAAqB,IAAI,KAAK,CAAC;QAC/D,MAAM,WAAW,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,YAAE,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAE3E,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC;YACpC,MAAM;YACN,KAAK;YACL,SAAS;YACT,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;SAChD,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAAc,EAAE,KAAa;QACrD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC;YACtD,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClD,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AAzgBY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;IAIJ,WAAA,IAAA,0BAAgB,EAAC,qCAAiB,CAAC,CAAA;IAGnC,WAAA,IAAA,0BAAgB,EAAC,0BAAY,CAAC,CAAA;IAG9B,WAAA,IAAA,0BAAgB,EAAC,wBAAW,CAAC,CAAA;IAG7B,WAAA,IAAA,0BAAgB,EAAC,6CAAqB,CAAC,CAAA;qCARX,oBAAU;QAGf,oBAAU;QAGX,oBAAU;QAGA,oBAAU;QAErB,6BAAa;GAf9B,UAAU,CAygBtB"}
1
+ {"version":3,"file":"mfa.service.js","sourceRoot":"","sources":["../../../../src/lib/auth/services/mfa.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,2CAAuF;AACvF,6CAAmD;AACnD,qCAAqC;AACrC,6EAA0E;AAC1E,0DAAkC;AAClC,oDAA4B;AAE5B,sEAAqE;AACrE,yDAG8B;AAC9B,iEAA+D;AAC/D,sEAAmE;AACnE,iFAA4E;AAC5E,yDAAoD;AACpD,yDAAsD;AACtD,qFAA8E;AAC9E,6EAA0E;AAC1E,mCAAqC;AACrC,qCAA2C;AAC3C,6EAAuE;AACvE,+EAAyE;AACzE,2EAAuE;AACvE,4CAAoB;AAIb,IAAM,UAAU,GAAhB,MAAM,UAAU;IAIP;IAGA;IAGA;IAEA;IAES;IAZrB,YAEY,mBAAkD,EAGlD,cAAwC,EAGxC,uBAA0D,EAE1D,YAA2B,EAElB,OAAuB;QAVhC,wBAAmB,GAAnB,mBAAmB,CAA+B;QAGlD,mBAAc,GAAd,cAAc,CAA0B;QAGxC,4BAAuB,GAAvB,uBAAuB,CAAmC;QAE1D,iBAAY,GAAZ,YAAY,CAAe;QAElB,YAAO,GAAP,OAAO,CAAgB;IACxC,CAAC;IAEL,IAAI,SAAS;QACT,OAAO,uCAAiB,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IACpD,CAAC;IAED,uBAAuB,CAAC,aAAsB,IAAI;QAC9C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,UAAU,EAAE,CAAC;gBACb,MAAM,IAAI,2BAAkB,CAAC;oBACzB,OAAO,EAAE,wCAAwC;oBACjD,IAAI,EAAE,4BAAW,CAAC,eAAe;iBACpC,CAAC,CAAC;YACP,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,uBAAuB,CAAC,aAAsB,IAAI;QACtD,OAAO,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACnC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAE1E,MAAM,eAAe,GAA4B,EAAE,CAAA;QAGnD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;YAC9D,KAAK,EAAE;gBACH,MAAM;gBACN,QAAQ,EAAE,IAAI;aACjB;SACJ,CAAC,CAAC;QAEH,IAAI,kBAAkB,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,2CAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACrF,eAAe,CAAC,IAAI,CAAC,2CAAqB,CAAC,IAAI,CAAC,CAAA;QACpD,CAAC;QAKD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,2CAAqB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAC/E,eAAe,CAAC,IAAI,CAAC,2CAAqB,CAAC,KAAK,CAAC,CAAA;QACrD,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,2CAAqB,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAC7E,eAAe,CAAC,IAAI,CAAC,2CAAqB,CAAC,GAAG,CAAC,CAAA;QACnD,CAAC;QAED,OAAO,eAAe,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAc;QAClC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAA4B,EAAE,CAAC;QAEjD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,2CAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,YAAY,CAAC,IAAI,CAAC,2CAAqB,CAAC,KAAK,CAAC,CAAA;QAClD,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,2CAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9D,YAAY,CAAC,IAAI,CAAC,2CAAqB,CAAC,GAAG,CAAC,CAAA;QAChD,CAAC;QAED,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;YAC9D,KAAK,EAAE;gBACH,MAAM;gBACN,QAAQ,EAAE,IAAI;aACjB;SACJ,CAAC,CAAC;QAEH,IAAI,kBAAkB,EAAE,CAAC;YACrB,YAAY,CAAC,IAAI,CAAC,2CAAqB,CAAC,IAAI,CAAC,CAAA;QACjD,CAAC;QAED,OAAO,YAAY,CAAC;IACxB,CAAC;IAGD,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,MAA6B;QAE3D,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAC/C,MAAM;YACN,IAAI,EAAE,yCAAmB,CAAC,GAAG;YAC7B,eAAe,EAAE,IAAI;SACxB,CAAC,CAAC;QAEH,IAAI,MAAM,KAAK,2CAAqB,CAAC,KAAK,IAAI,MAAM,KAAK,2CAAqB,CAAC,GAAG,EAAE,CAAC;YACjF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1E,IAAI,IAAI,EAAE,CAAC;gBACP,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAC7B,+BAAc,CAAC,oBAAoB,EACnC,IAAI,mDAAsB,CAAC;oBACvB,IAAI;oBACJ,QAAQ,EAAE,gCAAc,CAAC,eAAe,EAAE;oBAC1C,MAAM;oBACN,IAAI,EAAE,SAAS;iBAClB,CAAC,CACL,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,QAAgB,EAAE,MAA6B;QAE3E,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,IAAI,MAAM,KAAK,2CAAqB,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;gBAChD,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;aACpC,CAAC,CAAC;YAEH,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,mBAAS,CAAC,IAAI,CAAC,MAAM,CAAC;oBAClC,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,QAAQ;oBAClB,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE,CAAC;iBACZ,CAAC,CAAC;gBAEH,IAAI,OAAO,EAAE,CAAC;oBAEV,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CACjC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EACjB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAC7B,CAAC;oBACF,OAAO,IAAI,CAAC;gBAChB,CAAC;YACL,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,MAAM,KAAK,2CAAqB,CAAC,KAAK,IAAI,MAAM,KAAK,2CAAqB,CAAC,GAAG,EAAE,CAAC;YACjF,IAAI,CAAC;gBACD,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;oBAClC,MAAM;oBACN,IAAI,EAAE,yCAAmB,CAAC,GAAG;oBAC7B,IAAI,EAAE,QAAQ;iBACjB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO,KAAK,CAAC;YACjB,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAGD,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,UAAmB;QACrD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,mBAAS,CAAC,cAAc,EAAE,CAAC;QAE1C,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAChC,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,UAAU,IAAI,eAAe;YACzC,QAAQ,EAAE,KAAK;SAClB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,gBAAM,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,MAAc,EAAE,QAAgB;QAElE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;SAC5B,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,OAAO,GAAG,mBAAS,CAAC,IAAI,CAAC,MAAM,CAAC;gBAClC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,CAAC;aACZ,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBACV,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7E,OAAO,IAAI,CAAC;YAChB,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QAC/B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAChD,MAAM,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC;YACnE,KAAK,EAAE,EAAE,MAAM,EAAE;YACjB,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;SACnD,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,2CAAqB,CAAC,IAAI;YAClC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC,CAAC;IACR,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB;QAC/B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAc;QAC9B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC;YAC9B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;SACxB,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC7B,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC;gBAC9B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;aACxB,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC;QAChC,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,QAAgB;QACjD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CACjC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EACxB,EAAE,QAAQ,EAAE,IAAI,EAAE,CACrB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc;QAC1B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,2BAAkB,CAAC;gBACzB,OAAO,EAAE,6BAA6B;gBACtC,IAAI,EAAE,4BAAW,CAAC,wBAAwB;aAC7C,CAAC,CAAC;QACP,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,2BAAkB,CAAC;gBACzB,OAAO,EAAE,wDAAwD;gBACjE,IAAI,EAAE,4BAAW,CAAC,gCAAgC;aACrD,CAAC,CAAC;QACP,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAC7B,+BAAc,CAAC,kBAAkB,EACjC,IAAI,4CAAmB,CAAC;gBACpB,IAAI;gBACJ,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;aAC7B,CAAC,CACL,CAAC;QACN,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC3B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAGnC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,2BAAkB,CAAC;gBACzB,OAAO,EAAE,wCAAwC;gBACjD,IAAI,EAAE,4BAAW,CAAC,wBAAwB;aAC7C,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,2BAAkB,CAAC;gBACzB,OAAO,EAAE,6BAA6B;gBACtC,IAAI,EAAE,4BAAW,CAAC,wBAAwB;aAC7C,CAAC,CAAC;QACP,CAAC;QACD,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAElE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAC7B,+BAAc,CAAC,mBAAmB,EAClC,IAAI,8CAAoB,CAAC;gBACrB,IAAI;aACP,CAAC,CACL,CAAC;QACN,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACnC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAAc;QACrC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,MAAM,GAAG,mBAAS,CAAC,cAAc,CAAC;YACpC,IAAI,EAAE,YAAY,MAAM,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,IAAY;QAEvC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,8BAAqB,CAAC;gBAC5B,OAAO,EAAE,gBAAgB;gBACzB,IAAI,EAAE,4BAAW,CAAC,cAAc;aACnC,CAAC,CAAC;QACP,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAEhC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YAGpE,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAElD,OAAO;gBACH,OAAO,EAAE,wBAAwB;aACpC,CAAC;QACN,CAAC;QAED,MAAM,IAAI,8BAAqB,CAAC;YAC5B,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,4BAAW,CAAC,yBAAyB;SAC9C,CAAC,CAAC;IACP,CAAC;IAED,mBAAmB;QACf,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACjC,CAAC;IAKD,aAAa;QACT,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC5C,CAAC;IAMD,gBAAgB;QACZ,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,IAAI,KAAK,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,KAAK,CAAC;QAClD,OAAO,eAAe,IAAI,CAAC,QAAQ,CAAC;IACxC,CAAC;IAMD,YAAY;QACR,OAAO,IAAI,CAAC,SAAS,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc;QAChC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC;YACjC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;SACxB,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC1C,CAAC;IAEO,sBAAsB;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACX,kGAAkG,CACrG,CAAC;QACN,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,SAAiB,EAAE,SAAiB;QAC1E,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAEnC,MAAM,UAAU,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC;QACtD,MAAM,WAAW,GAAG,IAAA,YAAE,EAAC,QAAQ,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC;YAC/C,MAAM;YACN,SAAS;YACT,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YAC7C,SAAS,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC/C,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhD,OAAO,UAAU,CAAC;IACtB,CAAC;IAMD,KAAK,CAAC,qBAAqB,CAAC,MAAc,EAAE,KAAa;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC;YACvD,KAAK,EAAE;gBACH,MAAM;gBACN,SAAS,EAAE,IAAA,gBAAM,GAAE;gBACnB,SAAS,EAAE,IAAA,kBAAQ,EAAC,IAAI,IAAI,EAAE,CAAC;aAClC;YACD,MAAM,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;SAC9B,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpD,SAAS;YACb,CAAC;YACD,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;YACxB,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ,CAAA;AA5fY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;IAIJ,WAAA,IAAA,0BAAgB,EAAC,qCAAiB,CAAC,CAAA;IAGnC,WAAA,IAAA,0BAAgB,EAAC,0BAAY,CAAC,CAAA;IAG9B,WAAA,IAAA,0BAAgB,EAAC,6CAAqB,CAAC,CAAA;qCALX,oBAAU;QAGf,oBAAU;QAGD,oBAAU;QAErB,6BAAa;QAET,iCAAc;GAdnC,UAAU,CA4ftB"}
@@ -0,0 +1,28 @@
1
+ import { Repository } from 'typeorm';
2
+ import { NestAuthOTP } from '../entities/otp.entity';
3
+ import { NestAuthOTPTypeEnum } from '@ackplus/nest-auth-contracts';
4
+ import { IOtpOptions } from '../../core/interfaces/auth-module-options.interface';
5
+ export interface CreateOtpParams {
6
+ userId: string;
7
+ type: NestAuthOTPTypeEnum;
8
+ otpOptions?: IOtpOptions | null;
9
+ replaceExisting?: boolean;
10
+ }
11
+ export declare class OtpFlowService {
12
+ private readonly otpRepository;
13
+ constructor(otpRepository: Repository<NestAuthOTP>);
14
+ get otpConfig(): IOtpOptions;
15
+ resolveExpiresMs(raw: number | string | undefined, fallbackMsString: string): number;
16
+ generatePlainCode(otpOptions?: IOtpOptions | null): Promise<string>;
17
+ deleteByUserAndType(userId: string, type: NestAuthOTPTypeEnum): Promise<void>;
18
+ createOtp(params: CreateOtpParams): Promise<{
19
+ entity: NestAuthOTP;
20
+ plainCode: string;
21
+ }>;
22
+ validateAndConsume(params: {
23
+ userId: string;
24
+ type: NestAuthOTPTypeEnum;
25
+ code: string;
26
+ }): Promise<void>;
27
+ }
28
+ //# sourceMappingURL=otp-flow.service.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"otp-flow.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/auth/services/otp-flow.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,qDAAqD,CAAC;AAMlF,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,mBAAmB,CAAC;IAE1B,UAAU,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAEhC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B;AAKD,qBACa,cAAc;IAGnB,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAAb,aAAa,EAAE,UAAU,CAAC,WAAW,CAAC;IAG3D,IAAI,SAAS,IAAI,WAAW,CAE3B;IAKD,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,gBAAgB,EAAE,MAAM,GAAG,MAAM;IAqB9E,iBAAiB,CAAC,UAAU,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAanE,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7E,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IA8BvF,kBAAkB,CAAC,MAAM,EAAE;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,mBAAmB,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,IAAI,CAAC;CAyCpB"}
@@ -0,0 +1,127 @@
1
+ "use strict";
2
+ var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
3
+ var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
4
+ if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
5
+ else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
6
+ return c > 3 && r && Object.defineProperty(target, key, r), r;
7
+ };
8
+ var __metadata = (this && this.__metadata) || function (k, v) {
9
+ if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
10
+ };
11
+ var __param = (this && this.__param) || function (paramIndex, decorator) {
12
+ return function (target, key) { decorator(target, key, paramIndex); }
13
+ };
14
+ var __importDefault = (this && this.__importDefault) || function (mod) {
15
+ return (mod && mod.__esModule) ? mod : { "default": mod };
16
+ };
17
+ Object.defineProperty(exports, "__esModule", { value: true });
18
+ exports.OtpFlowService = void 0;
19
+ const common_1 = require("@nestjs/common");
20
+ const typeorm_1 = require("@nestjs/typeorm");
21
+ const typeorm_2 = require("typeorm");
22
+ const otp_entity_1 = require("../entities/otp.entity");
23
+ const otp_1 = require("../../utils/otp");
24
+ const auth_config_service_1 = require("../../core/services/auth-config.service");
25
+ const auth_constants_1 = require("../../auth.constants");
26
+ const ms_1 = __importDefault(require("ms"));
27
+ let OtpFlowService = class OtpFlowService {
28
+ otpRepository;
29
+ constructor(otpRepository) {
30
+ this.otpRepository = otpRepository;
31
+ }
32
+ get otpConfig() {
33
+ return auth_config_service_1.AuthConfigService.getOptions().otp;
34
+ }
35
+ resolveExpiresMs(raw, fallbackMsString) {
36
+ const fallback = (0, ms_1.default)(fallbackMsString);
37
+ if (raw === undefined || raw === null) {
38
+ return fallback;
39
+ }
40
+ let n;
41
+ if (typeof raw === 'string') {
42
+ const parsed = (0, ms_1.default)(raw);
43
+ n = typeof parsed === 'number' ? parsed : fallback;
44
+ }
45
+ else {
46
+ n = raw;
47
+ }
48
+ if (typeof n !== 'number' || !Number.isFinite(n) || n <= 0) {
49
+ return fallback;
50
+ }
51
+ return n;
52
+ }
53
+ async generatePlainCode(otpOptions) {
54
+ const length = otpOptions?.length ?? 6;
55
+ const format = otpOptions?.format ?? 'numeric';
56
+ if (otpOptions?.generate) {
57
+ const out = otpOptions.generate(length, format);
58
+ return out instanceof Promise ? out : Promise.resolve(out);
59
+ }
60
+ return (0, otp_1.generateOtp)(length, format);
61
+ }
62
+ async deleteByUserAndType(userId, type) {
63
+ await this.otpRepository.delete({ userId, type });
64
+ }
65
+ async createOtp(params) {
66
+ const { userId, type, otpOptions, replaceExisting = true } = params;
67
+ if (replaceExisting) {
68
+ await this.deleteByUserAndType(userId, type);
69
+ }
70
+ const expiresAtMs = this.resolveExpiresMs(this.otpConfig.codeExpiresIn, '30m');
71
+ const expiresAt = new Date(Date.now() + expiresAtMs);
72
+ const entity = this.otpRepository.create({
73
+ userId,
74
+ type,
75
+ expiresAt,
76
+ });
77
+ const plainCode = await this.generatePlainCode(otpOptions ?? undefined);
78
+ console.info('plainCode', plainCode);
79
+ await entity.setCode(plainCode);
80
+ await this.otpRepository.save(entity);
81
+ return { entity, plainCode };
82
+ }
83
+ async validateAndConsume(params) {
84
+ const { userId, type, code } = params;
85
+ const trimmed = code?.trim();
86
+ if (!trimmed) {
87
+ throw new common_1.BadRequestException({
88
+ message: 'Verification code is required',
89
+ code: auth_constants_1.ERROR_CODES.MISSING_REQUIRED_FIELD,
90
+ });
91
+ }
92
+ const candidates = await this.otpRepository.find({
93
+ where: { userId, type },
94
+ order: { createdAt: 'DESC' },
95
+ });
96
+ for (const row of candidates) {
97
+ const otp = await this.otpRepository.findOne({ where: { id: row.id } });
98
+ if (!otp) {
99
+ continue;
100
+ }
101
+ const expired = otp.expiresAt.getTime() <= Date.now();
102
+ const matches = await otp.validateCode(trimmed);
103
+ if (!matches) {
104
+ continue;
105
+ }
106
+ if (expired) {
107
+ throw new common_1.BadRequestException({
108
+ message: 'Verification code has expired',
109
+ code: auth_constants_1.ERROR_CODES.VERIFICATION_CODE_EXPIRED,
110
+ });
111
+ }
112
+ await this.otpRepository.remove(otp);
113
+ return;
114
+ }
115
+ throw new common_1.BadRequestException({
116
+ message: 'Invalid verification code',
117
+ code: auth_constants_1.ERROR_CODES.VERIFICATION_CODE_INVALID,
118
+ });
119
+ }
120
+ };
121
+ exports.OtpFlowService = OtpFlowService;
122
+ exports.OtpFlowService = OtpFlowService = __decorate([
123
+ (0, common_1.Injectable)(),
124
+ __param(0, (0, typeorm_1.InjectRepository)(otp_entity_1.NestAuthOTP)),
125
+ __metadata("design:paramtypes", [typeorm_2.Repository])
126
+ ], OtpFlowService);
127
+ //# sourceMappingURL=otp-flow.service.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"otp-flow.service.js","sourceRoot":"","sources":["../../../../src/lib/auth/services/otp-flow.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,2CAAiE;AACjE,6CAAmD;AACnD,qCAAqC;AACrC,uDAAqD;AAGrD,yCAA8C;AAC9C,iFAA4E;AAC5E,yDAAmD;AACnD,4CAAoB;AAeb,IAAM,cAAc,GAApB,MAAM,cAAc;IAGF;IAFrB,YAEqB,aAAsC;QAAtC,kBAAa,GAAb,aAAa,CAAyB;IACxD,CAAC;IAEJ,IAAI,SAAS;QACT,OAAO,uCAAiB,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC;IAC9C,CAAC;IAKD,gBAAgB,CAAC,GAAgC,EAAE,gBAAwB;QACvE,MAAM,QAAQ,GAAG,IAAA,YAAE,EAAC,gBAAgB,CAAW,CAAC;QAChD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACpC,OAAO,QAAQ,CAAC;QACpB,CAAC;QACD,IAAI,CAAS,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAA,YAAE,EAAC,GAAG,CAAC,CAAC;YACvB,CAAC,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvD,CAAC;aAAM,CAAC;YACJ,CAAC,GAAG,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,OAAO,QAAQ,CAAC;QACpB,CAAC;QACD,OAAO,CAAC,CAAC;IACb,CAAC;IAKD,KAAK,CAAC,iBAAiB,CAAC,UAA+B;QACnD,MAAM,MAAM,GAAG,UAAU,EAAE,MAAM,IAAI,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,UAAU,EAAE,MAAM,IAAI,SAAS,CAAC;QAC/C,IAAI,UAAU,EAAE,QAAQ,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChD,OAAO,GAAG,YAAY,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,IAAA,iBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAKD,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,IAAyB;QAC/D,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAMD,KAAK,CAAC,SAAS,CAAC,MAAuB;QACnC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAEpE,IAAI,eAAe,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YACrC,MAAM;YACN,IAAI;YACJ,SAAS;SACZ,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACrC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEhC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC;IAQD,KAAK,CAAC,kBAAkB,CAAC,MAIxB;QACG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,4BAAmB,CAAC;gBAC1B,OAAO,EAAE,+BAA+B;gBACxC,IAAI,EAAE,4BAAW,CAAC,sBAAsB;aAC3C,CAAC,CAAC;QACP,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;YAC7C,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YACvB,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;SAC/B,CAAC,CAAC;QAEH,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACP,SAAS;YACb,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,SAAS;YACb,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACV,MAAM,IAAI,4BAAmB,CAAC;oBAC1B,OAAO,EAAE,+BAA+B;oBACxC,IAAI,EAAE,4BAAW,CAAC,yBAAyB;iBAC9C,CAAC,CAAC;YACP,CAAC;YACD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrC,OAAO;QACX,CAAC;QAED,MAAM,IAAI,4BAAmB,CAAC;YAC1B,OAAO,EAAE,2BAA2B;YACpC,IAAI,EAAE,4BAAW,CAAC,yBAAyB;SAC9C,CAAC,CAAC;IACP,CAAC;CACJ,CAAA;AAlIY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAGJ,WAAA,IAAA,0BAAgB,EAAC,wBAAW,CAAC,CAAA;qCACE,oBAAU;GAHrC,cAAc,CAkI1B"}
@@ -1,6 +1,5 @@
1
1
  import { Repository } from 'typeorm';
2
2
  import { NestAuthUser } from '../../user/entities/user.entity';
3
- import { NestAuthOTP } from '../../auth/entities/otp.entity';
4
3
  import { JwtService } from '../../core/services/jwt.service';
5
4
  import { EventEmitter2 } from '@nestjs/event-emitter';
6
5
  import { SessionManagerService } from '../../session/services/session-manager.service';
@@ -13,10 +12,10 @@ import { NestAuthResetPasswordWithTokenRequestDto } from '../dto/requests/reset-
13
12
  import { NestAuthChangePasswordRequestDto } from '../dto/requests/change-password.request.dto';
14
13
  import { VerifyOtpResponseDto } from '../dto/responses/verify-otp.response.dto';
15
14
  import { AuthConfigService } from '../../core/services/auth-config.service';
16
- import type { MessageResponseDto } from 'src/lib/core';
15
+ import { OtpFlowService } from './otp-flow.service';
16
+ import type { MessageResponseDto } from '../../core/dto/message.response.dto';
17
17
  export declare class PasswordService {
18
18
  private readonly userRepository;
19
- private otpRepository;
20
19
  private readonly authProviderRegistry;
21
20
  private readonly sessionManager;
22
21
  private readonly jwtService;
@@ -24,8 +23,9 @@ export declare class PasswordService {
24
23
  private readonly tenantService;
25
24
  private readonly debugLogger;
26
25
  private readonly authConfigService;
27
- constructor(userRepository: Repository<NestAuthUser>, otpRepository: Repository<NestAuthOTP>, authProviderRegistry: AuthProviderRegistryService, sessionManager: SessionManagerService, jwtService: JwtService, eventEmitter: EventEmitter2, tenantService: TenantService, debugLogger: DebugLoggerService, authConfigService: AuthConfigService);
28
- get mfaConfig(): import("src/lib/core").MFAOptions;
26
+ private readonly otpFlow;
27
+ constructor(userRepository: Repository<NestAuthUser>, authProviderRegistry: AuthProviderRegistryService, sessionManager: SessionManagerService, jwtService: JwtService, eventEmitter: EventEmitter2, tenantService: TenantService, debugLogger: DebugLoggerService, authConfigService: AuthConfigService, otpFlow: OtpFlowService);
28
+ get mfaConfig(): import("../../core").MFAOptions;
29
29
  private handleError;
30
30
  changePassword(input: NestAuthChangePasswordRequestDto): Promise<MessageResponseDto>;
31
31
  forgotPassword(input: NestAuthForgotPasswordRequestDto): Promise<true | {
@@ -1 +1 @@
1
- {"version":3,"file":"password.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/auth/services/password.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAQ7D,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AAEvF,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAK/F,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAE9E,OAAO,EAAE,yCAAyC,EAAE,MAAM,wDAAwD,CAAC;AACnH,OAAO,EAAE,wCAAwC,EAAE,MAAM,uDAAuD,CAAC;AACjH,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAG5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,qBACa,eAAe;IAIpB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAG/B,OAAO,CAAC,aAAa;IAErB,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAErC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAE3B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAjBjB,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,EAGjD,aAAa,EAAE,UAAU,CAAC,WAAW,CAAC,EAE7B,oBAAoB,EAAE,2BAA2B,EAEjD,cAAc,EAAE,qBAAqB,EAErC,UAAU,EAAE,UAAU,EAEtB,YAAY,EAAE,aAAa,EAE3B,aAAa,EAAE,aAAa,EAE5B,WAAW,EAAE,kBAAkB,EAE/B,iBAAiB,EAAE,iBAAiB;IAGzD,IAAI,SAAS,sCAEZ;IAED,OAAO,CAAC,WAAW;IAWb,cAAc,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA+DpF,cAAc,CAAC,KAAK,EAAE,gCAAgC;;;IA+FtD,uBAAuB,CAAC,KAAK,EAAE,yCAAyC,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA8ExG,sBAAsB,CAAC,KAAK,EAAE,wCAAwC;CA8D/E"}
1
+ {"version":3,"file":"password.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/auth/services/password.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAQ/D,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AAEvF,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAI/F,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,yCAAyC,EAAE,MAAM,wDAAwD,CAAC;AACnH,OAAO,EAAE,wCAAwC,EAAE,MAAM,uDAAuD,CAAC;AACjH,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAE5E,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAE9E,qBACa,eAAe;IAIpB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAErC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAE3B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAhBP,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,EAExC,oBAAoB,EAAE,2BAA2B,EAEjD,cAAc,EAAE,qBAAqB,EAErC,UAAU,EAAE,UAAU,EAEtB,YAAY,EAAE,aAAa,EAE3B,aAAa,EAAE,aAAa,EAE5B,WAAW,EAAE,kBAAkB,EAE/B,iBAAiB,EAAE,iBAAiB,EAEpC,OAAO,EAAE,cAAc;IAG5C,IAAI,SAAS,oCAEZ;IAED,OAAO,CAAC,WAAW;IAWb,cAAc,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA+DpF,cAAc,CAAC,KAAK,EAAE,gCAAgC;;;IAyEtD,uBAAuB,CAAC,KAAK,EAAE,yCAAyC,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAyExG,sBAAsB,CAAC,KAAK,EAAE,wCAAwC;CA8D/E"}