@ackplus/nest-auth 2.7.6 → 2.8.0

package/dist/lib/admin-console/static/nest-auth.json

@@ -1,6 +1,47 @@
 {
   "openapi": "3.0.0",
   "paths": {
+    "/auth/csrf": {
+      "get": {
+        "description": "Cookie mode: sets/rotates the double-submit CSRF cookie and returns the token to echo in the CSRF header (default `x-csrf-token`) on state-changing requests. Call with credentials so the cookie is stored. Returns `{ enabled: false }` when CSRF is not configured.",
+        "operationId": "AuthController_getCsrfToken",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
+          },
+          "400": {
+            "description": "Validation failed (bad input).",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Missing, invalid, or expired authentication.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "access-token": []
+          }
+        ],
+        "summary": "Get a CSRF token",
+        "tags": [
+          "Authentication"
+        ]
+      }
+    },
     "/auth/signup": {
       "post": {
         "description": "Register a new user. Response format depends on accessTokenType configuration:\n- Header mode (default): Returns tokens in response body\n- Cookie mode: Sets tokens in HTTP-only cookies and returns success message",
@@ -1875,7 +1916,7 @@
             }
           }
         },
-        "summary": "Create an admin (secret-key gated)",
+        "summary": "Bootstrap the first admin (secret-key gated)",
         "tags": [
           "Admin · Console"
         ]
@@ -2279,7 +2320,7 @@
             }
           }
         },
-        "summary": "Reset an admin's password",
+        "summary": "Reset an admin's password (secret-key gated recovery)",
         "tags": [
           "Admin · Console"
         ]
@@ -4108,12 +4149,304 @@
           "Admin · Permissions"
         ]
       }
+    },
+    "/auth/admin/api/blocked-email-domains": {
+      "get": {
+        "operationId": "AdminBlockedDomainsController_list",
+        "parameters": [
+          {
+            "name": "search",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "page",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "pageSize",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          },
+          "400": {
+            "description": "Validation failed (bad input).",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Admin session missing or invalid.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Authenticated but not permitted.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "admin-session": []
+          }
+        ],
+        "summary": "List blocked email domains (searchable, paginated)",
+        "tags": [
+          "Admin · Blocked Email Domains"
+        ]
+      },
+      "post": {
+        "operationId": "AdminBlockedDomainsController_add",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/AdminAddBlockedDomainsDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": "{ added, skipped }"
+          },
+          "400": {
+            "description": "Validation failed (bad input).",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Admin session missing or invalid.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Authenticated but not permitted.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "admin-session": []
+          }
+        ],
+        "summary": "Add one or more blocked domains",
+        "tags": [
+          "Admin · Blocked Email Domains"
+        ]
+      }
+    },
+    "/auth/admin/api/blocked-email-domains/stats": {
+      "get": {
+        "operationId": "AdminBlockedDomainsController_stats",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
+          },
+          "400": {
+            "description": "Validation failed (bad input).",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Admin session missing or invalid.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Authenticated but not permitted.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "admin-session": []
+          }
+        ],
+        "summary": "Blocklist stats (current count + size of the built-in default list)",
+        "tags": [
+          "Admin · Blocked Email Domains"
+        ]
+      }
+    },
+    "/auth/admin/api/blocked-email-domains/import-defaults": {
+      "post": {
+        "operationId": "AdminBlockedDomainsController_importDefaults",
+        "parameters": [],
+        "responses": {
+          "201": {
+            "description": "{ imported, total }"
+          },
+          "400": {
+            "description": "Validation failed (bad input).",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Admin session missing or invalid.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Authenticated but not permitted.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "admin-session": []
+          }
+        ],
+        "summary": "Import the built-in default disposable-domain list",
+        "tags": [
+          "Admin · Blocked Email Domains"
+        ]
+      }
+    },
+    "/auth/admin/api/blocked-email-domains/{idOrDomain}": {
+      "delete": {
+        "operationId": "AdminBlockedDomainsController_remove",
+        "parameters": [
+          {
+            "name": "idOrDomain",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          },
+          "400": {
+            "description": "Validation failed (bad input).",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Admin session missing or invalid.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Authenticated but not permitted.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiErrorResponseDto"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "admin-session": []
+          }
+        ],
+        "summary": "Remove a blocked domain (by id or domain)",
+        "tags": [
+          "Admin · Blocked Email Domains"
+        ]
+      }
     }
   },
   "info": {
     "title": "@ackplus/nest-auth API",
     "description": "Authentication & authorization API for **@ackplus/nest-auth**.\n\n### Conventions\n- **Base URL** — routes are shown relative to your app’s global prefix. The reference example app uses `/api`, so a route like `POST /auth/login` is called at `POST /api/auth/login`.\n- **Auth** — most endpoints require a Bearer access token: `Authorization: Bearer <accessToken>`. The **Admin** endpoints use an httpOnly session cookie set by `POST /auth/admin/login`.\n- **Token modes** — in *header* mode (default) tokens are returned in the response body; in *cookie* mode they are set as httpOnly cookies. Controlled by `accessTokenType`.\n- **Errors** — failures return `{ statusCode, error, message, code }`; the machine-readable `code` is the value to branch on.\n\nBrowse by section in the sidebar: **Authentication**, **Password**, **Verification**, **Passwordless**, **MFA**, and the **Admin** groups.",
-    "version": "2.7.6",
+    "version": "2.8.0",
     "contact": {}
   },
   "tags": [
@@ -4387,9 +4720,24 @@
           },
           "name": {
             "type": "string",
-            "description": "Display name from the provider. Apple only returns the user's name on the FIRST native sign-in, so pass it here to persist it (ignored by other providers).",
+            "description": "Full display name from the provider. Apple only returns the user's name on the FIRST native sign-in, so pass it here to persist it (ignored by other providers). Prefer `firstName`/`lastName` when you have them separately.",
             "example": "Ada Lovelace"
           },
+          "firstName": {
+            "type": "string",
+            "description": "User's given/first name captured by the frontend. Needed for Apple Sign In, which returns the name to the app ONLY on the first authorization (never in the id_token on later logins) — capture it then and send it here. Ignored by providers that already supply a name.",
+            "example": "Ada"
+          },
+          "lastName": {
+            "type": "string",
+            "description": "User's family/last name captured by the frontend (see `firstName`). Needed for Apple Sign In on the first authorization.",
+            "example": "Lovelace"
+          },
+          "avatarUrl": {
+            "type": "string",
+            "description": "Avatar / profile-picture URL supplied by the frontend. Apple Sign In does NOT provide a photo, so pass one here only if your app sourced it elsewhere. Google returns its own `picture`, used as a fallback when this is omitted.",
+            "example": "https://example.com/avatar/ada.png"
+          },
           "nonce": {
             "type": "string",
             "description": "Nonce used for native sign-in replay protection. When provided, it must match the `nonce` claim in the verified Apple identityToken."
@@ -5767,6 +6115,25 @@
             "description": "Optional description of what this permission allows"
           }
         }
+      },
+      "AdminAddBlockedDomainsDto": {
+        "type": "object",
+        "properties": {
+          "domains": {
+            "description": "One or more email domains to block (e.g. [\"mailinator.com\", \"guerrillamail.com\"]). Max 1000 per request; each max 253 chars.",
+            "example": [
+              "mailinator.com",
+              "guerrillamail.com"
+            ],
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        },
+        "required": [
+          "domains"
+        ]
       }
     }
   }

package/dist/lib/auth/auth.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.module.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/auth.module.ts"],"names":[],"mappings":"AA6BA,qBA6Ca,UAAU;CACtB"}
+{"version":3,"file":"auth.module.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/auth.module.ts"],"names":[],"mappings":"AA+BA,qBAgDa,UAAU;CACtB"}

package/dist/lib/auth/auth.module.js

@@ -26,6 +26,8 @@ const session_token_service_1 = require("./services/session-token.service");
 const invite_service_1 = require("./services/invite.service");
 const otp_entity_1 = require("./entities/otp.entity");
 const mfa_secret_entity_1 = require("./entities/mfa-secret.entity");
+const blocked_email_domain_entity_1 = require("./entities/blocked-email-domain.entity");
+const disposable_email_service_1 = require("./services/disposable-email.service");
 const access_key_entity_1 = require("../user/entities/access-key.entity");
 const trusted_device_entity_1 = require("./entities/trusted-device.entity");
 const event_emitter_1 = require("@nestjs/event-emitter");
@@ -49,6 +51,7 @@ exports.AuthModule = AuthModule = __decorate([
                 access_key_entity_1.NestAuthAccessKey,
                 identity_entity_1.NestAuthIdentity,
                 trusted_device_entity_1.NestAuthTrustedDevice,
+                blocked_email_domain_entity_1.NestAuthBlockedEmailDomain,
             ]),
             (0, common_1.forwardRef)(() => core_module_1.CoreModule),
             (0, common_1.forwardRef)(() => user_module_1.UserModule),
@@ -69,6 +72,7 @@ exports.AuthModule = AuthModule = __decorate([
             logout_service_1.LogoutService,
             session_token_service_1.SessionTokenService,
             invite_service_1.InviteService,
+            disposable_email_service_1.DisposableEmailService,
         ],
         controllers: [auth_controller_1.AuthController, mfa_controller_1.MfaController],
         exports: [
@@ -82,6 +86,7 @@ exports.AuthModule = AuthModule = __decorate([
             mfa_service_1.MfaService,
             auth_guard_1.NestAuthAuthGuard,
             token_response_interceptor_1.TokenResponseInterceptor,
+            disposable_email_service_1.DisposableEmailService,
         ],
     })
 ], AuthModule);

package/dist/lib/auth/auth.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../../src/lib/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAoD;AACpD,0DAAsD;AACtD,wDAAoD;AACpD,oDAAwD;AACxD,0FAAqF;AACrF,mEAA+D;AAC/D,iEAA6D;AAC7D,wGAA0F;AAC1F,sEAAoE;AACpE,6CAAgD;AAChD,8DAA4D;AAC5D,kEAA8D;AAC9D,0EAAsE;AACtE,kEAA6D;AAC7D,8DAA0D;AAC1D,4EAAuE;AACvE,8DAA0D;AAC1D,sDAAoD;AACpD,oEAAiE;AACjE,0EAAuE;AACvE,4EAAyE;AACzE,yDAA2D;AAC3D,qDAAiD;AACjD,qDAAiD;AACjD,8DAA0D;AAC1D,2DAAuD;AACvD,qDAAiD;AACjD,8CAAiD;AA+C1C,IAAM,UAAU,GAAhB,MAAM,UAAU;CACtB,CAAA;AADY,gCAAU;qBAAV,UAAU;IA7CtB,IAAA,eAAM,EAAC;QACJ,OAAO,EAAE;YACL,kCAAkB;YAClB,uBAAa,CAAC,UAAU,CAAC;gBACrB,0BAAY;gBACZ,wBAAW;gBACX,qCAAiB;gBACjB,qCAAiB;gBACjB,kCAAgB;gBAChB,6CAAqB;aACxB,CAAC;YACF,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,8BAAa,CAAC;YAC/B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,4BAAY,CAAC;YAC9B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,6BAAgB,CAAC;SACrC;QACD,SAAS,EAAE;YACP,0BAAW;YACX,wBAAU;YACV,8BAAiB;YACjB,qDAAwB;YACxB,8DAAwB;YACxB,kCAAe;YACf,0CAAmB;YACnB,iCAAc;YACd,8BAAa;YACb,2CAAmB;YACnB,8BAAa;SAChB;QACD,WAAW,EAAE,CAAC,gCAAc,EAAE,8BAAa,CAAC;QAC5C,OAAO,EAAE;YACL,0BAAW;YACX,kCAAe;YACf,0CAAmB;YACnB,iCAAc;YACd,8BAAa;YACb,2CAAmB;YACnB,8BAAa;YACb,wBAAU;YACV,8BAAiB;YACjB,qDAAwB;SAC3B;KACJ,CAAC;GACW,UAAU,CACtB"}
+{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../../src/lib/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAoD;AACpD,0DAAsD;AACtD,wDAAoD;AACpD,oDAAwD;AACxD,0FAAqF;AACrF,mEAA+D;AAC/D,iEAA6D;AAC7D,wGAA0F;AAC1F,sEAAoE;AACpE,6CAAgD;AAChD,8DAA4D;AAC5D,kEAA8D;AAC9D,0EAAsE;AACtE,kEAA6D;AAC7D,8DAA0D;AAC1D,4EAAuE;AACvE,8DAA0D;AAC1D,sDAAoD;AACpD,oEAAiE;AACjE,wFAAoF;AACpF,kFAA6E;AAC7E,0EAAuE;AACvE,4EAAyE;AACzE,yDAA2D;AAC3D,qDAAiD;AACjD,qDAAiD;AACjD,8DAA0D;AAC1D,2DAAuD;AACvD,qDAAiD;AACjD,8CAAiD;AAkD1C,IAAM,UAAU,GAAhB,MAAM,UAAU;CACtB,CAAA;AADY,gCAAU;qBAAV,UAAU;IAhDtB,IAAA,eAAM,EAAC;QACJ,OAAO,EAAE;YACL,kCAAkB;YAClB,uBAAa,CAAC,UAAU,CAAC;gBACrB,0BAAY;gBACZ,wBAAW;gBACX,qCAAiB;gBACjB,qCAAiB;gBACjB,kCAAgB;gBAChB,6CAAqB;gBACrB,wDAA0B;aAC7B,CAAC;YACF,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,8BAAa,CAAC;YAC/B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,4BAAY,CAAC;YAC9B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,6BAAgB,CAAC;SACrC;QACD,SAAS,EAAE;YACP,0BAAW;YACX,wBAAU;YACV,8BAAiB;YACjB,qDAAwB;YACxB,8DAAwB;YACxB,kCAAe;YACf,0CAAmB;YACnB,iCAAc;YACd,8BAAa;YACb,2CAAmB;YACnB,8BAAa;YACb,iDAAsB;SACzB;QACD,WAAW,EAAE,CAAC,gCAAc,EAAE,8BAAa,CAAC;QAC5C,OAAO,EAAE;YACL,0BAAW;YACX,kCAAe;YACf,0CAAmB;YACnB,iCAAc;YACd,8BAAa;YACb,2CAAmB;YACnB,8BAAa;YACb,wBAAU;YACV,8BAAiB;YACjB,qDAAwB;YACxB,iDAAsB;SACzB;KACJ,CAAC;GACW,UAAU,CACtB"}

package/dist/lib/auth/controllers/auth.controller.d.ts

@@ -23,6 +23,7 @@ import { NestAuthSwitchTenantRequestDto } from '../dto/requests/switch-tenant.re
 import { PasswordService } from '../services/password.service';
 import { VerificationService } from '../services/verification.service';
 import { AuthConfigService } from '../../core/services/auth-config.service';
+import { CsrfService } from '../../core/services/csrf.service';
 import { TenantService } from '../../tenant/services/tenant.service';
 import { NestAuthPasswordlessSendRequestDto } from '../dto/requests/passwordless-send.request.dto';
 export declare class AuthController {
@@ -32,7 +33,19 @@ export declare class AuthController {
     private readonly authConfigService;
     private readonly tenantService;
     private readonly inviteService;
-    constructor(authService: AuthService, passwordService: PasswordService, verificationService: VerificationService, authConfigService: AuthConfigService, tenantService: TenantService, inviteService: InviteService);
+    private readonly csrfService;
+    constructor(authService: AuthService, passwordService: PasswordService, verificationService: VerificationService, authConfigService: AuthConfigService, tenantService: TenantService, inviteService: InviteService, csrfService: CsrfService);
+    getCsrfToken(res: Response): {
+        enabled: boolean;
+        csrfToken?: undefined;
+        headerName?: undefined;
+        cookieName?: undefined;
+    } | {
+        enabled: boolean;
+        csrfToken: string;
+        headerName: string;
+        cookieName: string;
+    };
     signup(input: NestAuthSignupRequestDto): Promise<AuthWithTokensResponseDto>;
     invite(input: NestAuthInviteRequestDto): Promise<{
         message: string;

package/dist/lib/auth/controllers/auth.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.controller.d.ts","sourceRoot":"","sources":["../../../../src/lib/auth/controllers/auth.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE5C,OAAO,EAAE,yBAAyB,EAAmB,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AAEhI,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EACH,yBAAyB,EACzB,4BAA4B,EAC5B,wCAAwC,EACxC,gCAAgC,EAChC,wCAAwC,EACxC,gCAAgC,EAChC,wCAAwC,EACxC,gCAAgC,EAChC,8BAA8B,EACjC,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAE5E,OAAO,EAAE,kBAAkB,EAAuH,MAAM,YAAY,CAAC;AACrK,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAiB,gBAAgB,EAAE,qBAAqB,EAAkB,MAAM,8BAA8B,CAAC;AACtH,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAE/F,OAAO,EAAE,yCAAyC,EAAE,MAAM,wDAAwD,CAAC;AACnH,OAAO,EAAE,wCAAwC,EAAE,MAAM,uDAAuD,CAAC;AACjH,OAAO,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAChF,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,EAAE,uCAAuC,EAAE,MAAM,qDAAqD,CAAC;AAC9G,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,uCAAuC,EAAE,MAAM,qDAAqD,CAAC;AAC9G,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAI3F,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAKvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,+CAA+C,CAAC;AAInG,qBAMa,cAAc;IAEnB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,aAAa;gBALb,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,eAAe,EAChC,mBAAmB,EAAE,mBAAmB,EACxC,iBAAiB,EAAE,iBAAiB,EACpC,aAAa,EAAE,aAAa,EAC5B,aAAa,EAAE,aAAa;IAkB3C,MAAM,CAAS,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAiBnF,MAAM,CAAS,KAAK,EAAE,wBAAwB;;;;;IAwB9C,KAAK,CAAS,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAcjF,gBAAgB,CAAS,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAgBhG,YAAY,CACN,KAAK,EAAE,8BAA8B,EACtC,GAAG,EAAE,OAAO,GACpB,OAAO,CAAC,yBAAyB,CAAC;IAsC/B,WAAW,CAAiB,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAuBnG,SAAS,CAAS,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAe9F,MAAM,CAA6B,GAAG,EAAE,QAAQ,EAAS,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA6BhH,OAAO,CAAC,yBAAyB;IA2B3B,SAAS,CAA6B,GAAG,EAAE,QAAQ,EAAS,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAyBhH,YAAY,CAAS,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAerG,eAAe,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAY5C,cAAc,CAAS,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAUtF,cAAc,CAAS,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,wCAAwC,CAAC;IAWlH,uBAAuB,CAAS,KAAK,EAAE,yCAAyC,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAUhH,aAAa,CAAS,KAAK,EAAE,wCAAwC,GAAG,OAAO,CAAC,gCAAgC,CAAC;IAajH,eAAe;IAsEf,YAAY,CAAQ,GAAG,EAAE,OAAO;;;;;;;;;IAiChC,YAAY,CAAgB,IAAI,CAAC,EAAE,MAAM;;;;;IAiBzC,OAAO;IA0BP,aAAa;;;;;IAiBb,qBAAqB,CAAS,KAAK,EAAE,uCAAuC,GAAG,OAAO,CAAC,wCAAwC,CAAC;IAYhI,WAAW,CAAS,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,gCAAgC,CAAC;IAYpG,qBAAqB,CAAS,KAAK,EAAE,uCAAuC,GAAG,OAAO,CAAC,wCAAwC,CAAC;IAYhI,WAAW,CAAS,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,gCAAgC,CAAC;IAWpG,WAAW,CACM,QAAQ,EAAE,MAAM,EAC1B,IAAI,EAAE,GAAG,EACX,GAAG,EAAE,QAAQ;CA6F3B"}
+{"version":3,"file":"auth.controller.d.ts","sourceRoot":"","sources":["../../../../src/lib/auth/controllers/auth.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE5C,OAAO,EAAE,yBAAyB,EAAmB,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AAEhI,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EACH,yBAAyB,EACzB,4BAA4B,EAC5B,wCAAwC,EACxC,gCAAgC,EAChC,wCAAwC,EACxC,gCAAgC,EAChC,wCAAwC,EACxC,gCAAgC,EAChC,8BAA8B,EACjC,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAE5E,OAAO,EAAE,kBAAkB,EAA8I,MAAM,YAAY,CAAC;AAC5L,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAiB,gBAAgB,EAAE,qBAAqB,EAAkB,MAAM,8BAA8B,CAAC;AACtH,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAE/F,OAAO,EAAE,yCAAyC,EAAE,MAAM,wDAAwD,CAAC;AACnH,OAAO,EAAE,wCAAwC,EAAE,MAAM,uDAAuD,CAAC;AACjH,OAAO,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAChF,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,EAAE,uCAAuC,EAAE,MAAM,qDAAqD,CAAC;AAC9G,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,uCAAuC,EAAE,MAAM,qDAAqD,CAAC;AAC9G,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAI3F,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAQvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,+CAA+C,CAAC;AAInG,qBAMa,cAAc;IAEnB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW;gBANX,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,eAAe,EAChC,mBAAmB,EAAE,mBAAmB,EACxC,iBAAiB,EAAE,iBAAiB,EACpC,aAAa,EAAE,aAAa,EAC5B,aAAa,EAAE,aAAa,EAC5B,WAAW,EAAE,WAAW;IAc7C,YAAY,CAA6B,GAAG,EAAE,QAAQ;;;;;;;;;;;IAkChD,MAAM,CAAS,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAiBnF,MAAM,CAAS,KAAK,EAAE,wBAAwB;;;;;IA0B9C,KAAK,CAAS,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAejF,gBAAgB,CAAS,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAgBhG,YAAY,CACN,KAAK,EAAE,8BAA8B,EACtC,GAAG,EAAE,OAAO,GACpB,OAAO,CAAC,yBAAyB,CAAC;IAuC/B,WAAW,CAAiB,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAyBnG,SAAS,CAAS,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAgB9F,MAAM,CAA6B,GAAG,EAAE,QAAQ,EAAS,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA6BhH,OAAO,CAAC,yBAAyB;IA4B3B,SAAS,CAA6B,GAAG,EAAE,QAAQ,EAAS,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAyBhH,YAAY,CAAS,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAgBrG,eAAe,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAa5C,cAAc,CAAS,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAYtF,cAAc,CAAS,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,wCAAwC,CAAC;IAYlH,uBAAuB,CAAS,KAAK,EAAE,yCAAyC,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAUhH,aAAa,CAAS,KAAK,EAAE,wCAAwC,GAAG,OAAO,CAAC,gCAAgC,CAAC;IAajH,eAAe;IAsEf,YAAY,CAAQ,GAAG,EAAE,OAAO;;;;;;;;;IAiChC,YAAY,CAAgB,IAAI,CAAC,EAAE,MAAM;;;;;IAkBzC,OAAO;IA2BP,aAAa;;;;;IAkBb,qBAAqB,CAAS,KAAK,EAAE,uCAAuC,GAAG,OAAO,CAAC,wCAAwC,CAAC;IAahI,WAAW,CAAS,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,gCAAgC,CAAC;IAapG,qBAAqB,CAAS,KAAK,EAAE,uCAAuC,GAAG,OAAO,CAAC,wCAAwC,CAAC;IAahI,WAAW,CAAS,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,gCAAgC,CAAC;IAWpG,WAAW,CACM,QAAQ,EAAE,MAAM,EAC1B,IAAI,EAAE,GAAG,EACX,GAAG,EAAE,QAAQ;CA6F3B"}