@ackplus/nest-auth 2.7.6 → 2.8.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/lib/admin-console/admin-console.module.d.ts +3 -1
- package/dist/lib/admin-console/admin-console.module.d.ts.map +1 -1
- package/dist/lib/admin-console/admin-console.module.js +10 -0
- package/dist/lib/admin-console/admin-console.module.js.map +1 -1
- package/dist/lib/admin-console/controllers/admin-auth.controller.d.ts +13 -5
- package/dist/lib/admin-console/controllers/admin-auth.controller.d.ts.map +1 -1
- package/dist/lib/admin-console/controllers/admin-auth.controller.js +112 -15
- package/dist/lib/admin-console/controllers/admin-auth.controller.js.map +1 -1
- package/dist/lib/admin-console/controllers/admin-blocked-domains.controller.d.ts +23 -0
- package/dist/lib/admin-console/controllers/admin-blocked-domains.controller.d.ts.map +1 -0
- package/dist/lib/admin-console/controllers/admin-blocked-domains.controller.js +105 -0
- package/dist/lib/admin-console/controllers/admin-blocked-domains.controller.js.map +1 -0
- package/dist/lib/admin-console/controllers/admin-console.controller.d.ts.map +1 -1
- package/dist/lib/admin-console/controllers/admin-console.controller.js +5 -1
- package/dist/lib/admin-console/controllers/admin-console.controller.js.map +1 -1
- package/dist/lib/admin-console/decorators/admin-throttle.decorator.d.ts +4 -0
- package/dist/lib/admin-console/decorators/admin-throttle.decorator.d.ts.map +1 -0
- package/dist/lib/admin-console/decorators/admin-throttle.decorator.js +11 -0
- package/dist/lib/admin-console/decorators/admin-throttle.decorator.js.map +1 -0
- package/dist/lib/admin-console/dto/admin-blocked-domain.dto.d.ts +4 -0
- package/dist/lib/admin-console/dto/admin-blocked-domain.dto.d.ts.map +1 -0
- package/dist/lib/admin-console/dto/admin-blocked-domain.dto.js +32 -0
- package/dist/lib/admin-console/dto/admin-blocked-domain.dto.js.map +1 -0
- package/dist/lib/admin-console/entities/admin-user.entity.d.ts +1 -0
- package/dist/lib/admin-console/entities/admin-user.entity.d.ts.map +1 -1
- package/dist/lib/admin-console/entities/admin-user.entity.js +15 -0
- package/dist/lib/admin-console/entities/admin-user.entity.js.map +1 -1
- package/dist/lib/admin-console/guards/admin-brute-force.guard.d.ts +12 -0
- package/dist/lib/admin-console/guards/admin-brute-force.guard.d.ts.map +1 -0
- package/dist/lib/admin-console/guards/admin-brute-force.guard.js +45 -0
- package/dist/lib/admin-console/guards/admin-brute-force.guard.js.map +1 -0
- package/dist/lib/admin-console/guards/admin-session.guard.d.ts +3 -1
- package/dist/lib/admin-console/guards/admin-session.guard.d.ts.map +1 -1
- package/dist/lib/admin-console/guards/admin-session.guard.js +10 -2
- package/dist/lib/admin-console/guards/admin-session.guard.js.map +1 -1
- package/dist/lib/admin-console/middleware/admin-security-headers.middleware.d.ts +6 -0
- package/dist/lib/admin-console/middleware/admin-security-headers.middleware.d.ts.map +1 -0
- package/dist/lib/admin-console/middleware/admin-security-headers.middleware.js +35 -0
- package/dist/lib/admin-console/middleware/admin-security-headers.middleware.js.map +1 -0
- package/dist/lib/admin-console/services/admin-auth.service.d.ts +2 -0
- package/dist/lib/admin-console/services/admin-auth.service.d.ts.map +1 -1
- package/dist/lib/admin-console/services/admin-auth.service.js +14 -0
- package/dist/lib/admin-console/services/admin-auth.service.js.map +1 -1
- package/dist/lib/admin-console/services/admin-console-config.service.d.ts +2 -0
- package/dist/lib/admin-console/services/admin-console-config.service.d.ts.map +1 -1
- package/dist/lib/admin-console/services/admin-console-config.service.js +25 -3
- package/dist/lib/admin-console/services/admin-console-config.service.js.map +1 -1
- package/dist/lib/admin-console/services/admin-session.service.d.ts +1 -0
- package/dist/lib/admin-console/services/admin-session.service.d.ts.map +1 -1
- package/dist/lib/admin-console/services/admin-session.service.js +4 -3
- package/dist/lib/admin-console/services/admin-session.service.js.map +1 -1
- package/dist/lib/admin-console/services/admin-user.service.d.ts +1 -0
- package/dist/lib/admin-console/services/admin-user.service.d.ts.map +1 -1
- package/dist/lib/admin-console/services/admin-user.service.js +11 -0
- package/dist/lib/admin-console/services/admin-user.service.js.map +1 -1
- package/dist/lib/admin-console/static/index.html +387 -372
- package/dist/lib/admin-console/static/nest-auth.json +371 -4
- package/dist/lib/auth/auth.module.d.ts.map +1 -1
- package/dist/lib/auth/auth.module.js +5 -0
- package/dist/lib/auth/auth.module.js.map +1 -1
- package/dist/lib/auth/controllers/auth.controller.d.ts +14 -1
- package/dist/lib/auth/controllers/auth.controller.d.ts.map +1 -1
- package/dist/lib/auth/controllers/auth.controller.js +62 -2
- package/dist/lib/auth/controllers/auth.controller.js.map +1 -1
- package/dist/lib/auth/controllers/mfa.controller.d.ts.map +1 -1
- package/dist/lib/auth/controllers/mfa.controller.js +2 -1
- package/dist/lib/auth/controllers/mfa.controller.js.map +1 -1
- package/dist/lib/auth/data/disposable-domains.generated.d.ts +2 -0
- package/dist/lib/auth/data/disposable-domains.generated.d.ts.map +1 -0
- package/dist/lib/auth/data/disposable-domains.generated.js +8061 -0
- package/dist/lib/auth/data/disposable-domains.generated.js.map +1 -0
- package/dist/lib/auth/dto/credentials/social-credentials.dto.d.ts +3 -0
- package/dist/lib/auth/dto/credentials/social-credentials.dto.d.ts.map +1 -1
- package/dist/lib/auth/dto/credentials/social-credentials.dto.js +34 -1
- package/dist/lib/auth/dto/credentials/social-credentials.dto.js.map +1 -1
- package/dist/lib/auth/entities/blocked-email-domain.entity.d.ts +8 -0
- package/dist/lib/auth/entities/blocked-email-domain.entity.d.ts.map +1 -0
- package/dist/lib/auth/entities/blocked-email-domain.entity.js +41 -0
- package/dist/lib/auth/entities/blocked-email-domain.entity.js.map +1 -0
- package/dist/lib/auth/entities/otp.entity.d.ts +1 -0
- package/dist/lib/auth/entities/otp.entity.d.ts.map +1 -1
- package/dist/lib/auth/entities/otp.entity.js +5 -0
- package/dist/lib/auth/entities/otp.entity.js.map +1 -1
- package/dist/lib/auth/guards/auth.guard.d.ts +4 -1
- package/dist/lib/auth/guards/auth.guard.d.ts.map +1 -1
- package/dist/lib/auth/guards/auth.guard.js +40 -7
- package/dist/lib/auth/guards/auth.guard.js.map +1 -1
- package/dist/lib/auth/interceptors/token-response.interceptor.d.ts +4 -2
- package/dist/lib/auth/interceptors/token-response.interceptor.d.ts.map +1 -1
- package/dist/lib/auth/interceptors/token-response.interceptor.js +18 -4
- package/dist/lib/auth/interceptors/token-response.interceptor.js.map +1 -1
- package/dist/lib/auth/services/auth.service.d.ts +3 -1
- package/dist/lib/auth/services/auth.service.d.ts.map +1 -1
- package/dist/lib/auth/services/auth.service.js +52 -13
- package/dist/lib/auth/services/auth.service.js.map +1 -1
- package/dist/lib/auth/services/disposable-email.service.d.ts +37 -0
- package/dist/lib/auth/services/disposable-email.service.d.ts.map +1 -0
- package/dist/lib/auth/services/disposable-email.service.js +141 -0
- package/dist/lib/auth/services/disposable-email.service.js.map +1 -0
- package/dist/lib/auth/services/mfa.service.d.ts +1 -1
- package/dist/lib/auth/services/mfa.service.d.ts.map +1 -1
- package/dist/lib/auth/services/mfa.service.js +8 -3
- package/dist/lib/auth/services/mfa.service.js.map +1 -1
- package/dist/lib/auth/services/otp-flow.service.d.ts.map +1 -1
- package/dist/lib/auth/services/otp-flow.service.js +19 -0
- package/dist/lib/auth/services/otp-flow.service.js.map +1 -1
- package/dist/lib/auth.constants.d.ts +34 -0
- package/dist/lib/auth.constants.d.ts.map +1 -1
- package/dist/lib/auth.constants.js +22 -1
- package/dist/lib/auth.constants.js.map +1 -1
- package/dist/lib/core/core.module.d.ts.map +1 -1
- package/dist/lib/core/core.module.js +18 -0
- package/dist/lib/core/core.module.js.map +1 -1
- package/dist/lib/core/decorators/captcha.decorator.d.ts +2 -0
- package/dist/lib/core/decorators/captcha.decorator.d.ts.map +1 -0
- package/dist/lib/core/decorators/captcha.decorator.js +10 -0
- package/dist/lib/core/decorators/captcha.decorator.js.map +1 -0
- package/dist/lib/core/decorators/lockout.decorator.d.ts +2 -0
- package/dist/lib/core/decorators/lockout.decorator.d.ts.map +1 -0
- package/dist/lib/core/decorators/lockout.decorator.js +10 -0
- package/dist/lib/core/decorators/lockout.decorator.js.map +1 -0
- package/dist/lib/core/decorators/rate-limit.decorator.d.ts +3 -0
- package/dist/lib/core/decorators/rate-limit.decorator.d.ts.map +1 -0
- package/dist/lib/core/decorators/rate-limit.decorator.js +10 -0
- package/dist/lib/core/decorators/rate-limit.decorator.js.map +1 -0
- package/dist/lib/core/decorators/skip-email-verification.decorator.d.ts +3 -0
- package/dist/lib/core/decorators/skip-email-verification.decorator.d.ts.map +1 -0
- package/dist/lib/core/decorators/skip-email-verification.decorator.js +8 -0
- package/dist/lib/core/decorators/skip-email-verification.decorator.js.map +1 -0
- package/dist/lib/core/entities.d.ts +3 -1
- package/dist/lib/core/entities.d.ts.map +1 -1
- package/dist/lib/core/entities.js +3 -0
- package/dist/lib/core/entities.js.map +1 -1
- package/dist/lib/core/guards/captcha.guard.d.ts +8 -0
- package/dist/lib/core/guards/captcha.guard.d.ts.map +1 -0
- package/dist/lib/core/guards/captcha.guard.js +59 -0
- package/dist/lib/core/guards/captcha.guard.js.map +1 -0
- package/dist/lib/core/guards/lockout.guard.d.ts +10 -0
- package/dist/lib/core/guards/lockout.guard.d.ts.map +1 -0
- package/dist/lib/core/guards/lockout.guard.js +55 -0
- package/dist/lib/core/guards/lockout.guard.js.map +1 -0
- package/dist/lib/core/guards/rate-limit.guard.d.ts +10 -0
- package/dist/lib/core/guards/rate-limit.guard.d.ts.map +1 -0
- package/dist/lib/core/guards/rate-limit.guard.js +39 -0
- package/dist/lib/core/guards/rate-limit.guard.js.map +1 -0
- package/dist/lib/core/index.d.ts +8 -0
- package/dist/lib/core/index.d.ts.map +1 -1
- package/dist/lib/core/index.js +8 -0
- package/dist/lib/core/index.js.map +1 -1
- package/dist/lib/core/interfaces/auth-module-options.interface.d.ts +52 -0
- package/dist/lib/core/interfaces/auth-module-options.interface.d.ts.map +1 -1
- package/dist/lib/core/interfaces/rate-limit.interface.d.ts +19 -0
- package/dist/lib/core/interfaces/rate-limit.interface.d.ts.map +1 -0
- package/dist/lib/core/interfaces/rate-limit.interface.js +3 -0
- package/dist/lib/core/interfaces/rate-limit.interface.js.map +1 -0
- package/dist/lib/core/interfaces/session-options.interface.d.ts +5 -0
- package/dist/lib/core/interfaces/session-options.interface.d.ts.map +1 -1
- package/dist/lib/core/providers/apple-auth.provider.d.ts +1 -0
- package/dist/lib/core/providers/apple-auth.provider.d.ts.map +1 -1
- package/dist/lib/core/providers/apple-auth.provider.js +4 -1
- package/dist/lib/core/providers/apple-auth.provider.js.map +1 -1
- package/dist/lib/core/providers/base-auth.provider.d.ts +6 -4
- package/dist/lib/core/providers/base-auth.provider.d.ts.map +1 -1
- package/dist/lib/core/providers/base-auth.provider.js +23 -6
- package/dist/lib/core/providers/base-auth.provider.js.map +1 -1
- package/dist/lib/core/providers/email-auth.provider.js +3 -3
- package/dist/lib/core/providers/email-auth.provider.js.map +1 -1
- package/dist/lib/core/providers/facebook-auth.provider.d.ts +1 -0
- package/dist/lib/core/providers/facebook-auth.provider.d.ts.map +1 -1
- package/dist/lib/core/providers/facebook-auth.provider.js +2 -0
- package/dist/lib/core/providers/facebook-auth.provider.js.map +1 -1
- package/dist/lib/core/providers/github-auth.provider.d.ts.map +1 -1
- package/dist/lib/core/providers/github-auth.provider.js +1 -0
- package/dist/lib/core/providers/github-auth.provider.js.map +1 -1
- package/dist/lib/core/providers/google-auth.provider.d.ts.map +1 -1
- package/dist/lib/core/providers/google-auth.provider.js +1 -0
- package/dist/lib/core/providers/google-auth.provider.js.map +1 -1
- package/dist/lib/core/providers/jwt-auth.provider.d.ts +4 -19
- package/dist/lib/core/providers/jwt-auth.provider.d.ts.map +1 -1
- package/dist/lib/core/providers/jwt-auth.provider.js +14 -10
- package/dist/lib/core/providers/jwt-auth.provider.js.map +1 -1
- package/dist/lib/core/providers/phone-auth.provider.js +3 -3
- package/dist/lib/core/providers/phone-auth.provider.js.map +1 -1
- package/dist/lib/core/services/auth-config.service.d.ts +2 -0
- package/dist/lib/core/services/auth-config.service.d.ts.map +1 -1
- package/dist/lib/core/services/auth-config.service.js +62 -12
- package/dist/lib/core/services/auth-config.service.js.map +1 -1
- package/dist/lib/core/services/auth-provider-registry.service.d.ts +6 -1
- package/dist/lib/core/services/auth-provider-registry.service.d.ts.map +1 -1
- package/dist/lib/core/services/auth-provider-registry.service.js +19 -3
- package/dist/lib/core/services/auth-provider-registry.service.js.map +1 -1
- package/dist/lib/core/services/csrf.service.d.ts +13 -0
- package/dist/lib/core/services/csrf.service.d.ts.map +1 -0
- package/dist/lib/core/services/csrf.service.js +88 -0
- package/dist/lib/core/services/csrf.service.js.map +1 -0
- package/dist/lib/core/services/jwt.service.d.ts +1 -2
- package/dist/lib/core/services/jwt.service.d.ts.map +1 -1
- package/dist/lib/core/services/jwt.service.js +3 -8
- package/dist/lib/core/services/jwt.service.js.map +1 -1
- package/dist/lib/core/services/lockout.service.d.ts +24 -0
- package/dist/lib/core/services/lockout.service.d.ts.map +1 -0
- package/dist/lib/core/services/lockout.service.js +129 -0
- package/dist/lib/core/services/lockout.service.js.map +1 -0
- package/dist/lib/core/services/rate-limit.service.d.ts +22 -0
- package/dist/lib/core/services/rate-limit.service.d.ts.map +1 -0
- package/dist/lib/core/services/rate-limit.service.js +116 -0
- package/dist/lib/core/services/rate-limit.service.js.map +1 -0
- package/dist/lib/nest-auth.module.d.ts.map +1 -1
- package/dist/lib/nest-auth.module.js +3 -0
- package/dist/lib/nest-auth.module.js.map +1 -1
- package/dist/lib/permission/services/permission.service.d.ts.map +1 -1
- package/dist/lib/permission/services/permission.service.js +2 -1
- package/dist/lib/permission/services/permission.service.js.map +1 -1
- package/dist/lib/user/entities/user.entity.d.ts.map +1 -1
- package/dist/lib/user/entities/user.entity.js +2 -0
- package/dist/lib/user/entities/user.entity.js.map +1 -1
- package/dist/lib/utils/common-passwords.d.ts +2 -0
- package/dist/lib/utils/common-passwords.d.ts.map +1 -0
- package/dist/lib/utils/common-passwords.js +16 -0
- package/dist/lib/utils/common-passwords.js.map +1 -0
- package/dist/lib/utils/otp.d.ts.map +1 -1
- package/dist/lib/utils/otp.js +11 -3
- package/dist/lib/utils/otp.js.map +1 -1
- package/dist/lib/utils/password-policy.util.d.ts +11 -0
- package/dist/lib/utils/password-policy.util.d.ts.map +1 -0
- package/dist/lib/utils/password-policy.util.js +76 -0
- package/dist/lib/utils/password-policy.util.js.map +1 -0
- package/package.json +3 -3
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"lockout.decorator.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/decorators/lockout.decorator.ts"],"names":[],"mappings":"AAQA,wBAAgB,OAAO,gJAEtB"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.Lockout = Lockout;
|
|
4
|
+
const common_1 = require("@nestjs/common");
|
|
5
|
+
const lockout_guard_1 = require("../guards/lockout.guard");
|
|
6
|
+
const auth_constants_1 = require("../../auth.constants");
|
|
7
|
+
function Lockout() {
|
|
8
|
+
return (0, common_1.applyDecorators)((0, common_1.SetMetadata)(auth_constants_1.LOCKOUT_KEY, true), (0, common_1.UseGuards)(lockout_guard_1.LockoutGuard));
|
|
9
|
+
}
|
|
10
|
+
//# sourceMappingURL=lockout.decorator.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"lockout.decorator.js","sourceRoot":"","sources":["../../../../src/lib/core/decorators/lockout.decorator.ts"],"names":[],"mappings":";;AAQA,0BAEC;AAVD,2CAAyE;AACzE,2DAAuD;AACvD,yDAAmD;AAMnD,SAAgB,OAAO;IACnB,OAAO,IAAA,wBAAe,EAAC,IAAA,oBAAW,EAAC,4BAAW,EAAE,IAAI,CAAC,EAAE,IAAA,kBAAS,EAAC,4BAAY,CAAC,CAAC,CAAC;AACpF,CAAC"}
|
|
@@ -0,0 +1,3 @@
|
|
|
1
|
+
import { RateLimitBucket } from '../interfaces/rate-limit.interface';
|
|
2
|
+
export declare function RateLimit(bucket: RateLimitBucket): <TFunction extends Function, Y>(target: TFunction | object, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;
|
|
3
|
+
//# sourceMappingURL=rate-limit.decorator.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"rate-limit.decorator.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/decorators/rate-limit.decorator.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAarE,wBAAgB,SAAS,CAAC,MAAM,EAAE,eAAe,+IAKhD"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.RateLimit = RateLimit;
|
|
4
|
+
const common_1 = require("@nestjs/common");
|
|
5
|
+
const rate_limit_guard_1 = require("../guards/rate-limit.guard");
|
|
6
|
+
const auth_constants_1 = require("../../auth.constants");
|
|
7
|
+
function RateLimit(bucket) {
|
|
8
|
+
return (0, common_1.applyDecorators)((0, common_1.SetMetadata)(auth_constants_1.RATE_LIMIT_BUCKET_KEY, bucket), (0, common_1.UseGuards)(rate_limit_guard_1.RateLimitGuard));
|
|
9
|
+
}
|
|
10
|
+
//# sourceMappingURL=rate-limit.decorator.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"rate-limit.decorator.js","sourceRoot":"","sources":["../../../../src/lib/core/decorators/rate-limit.decorator.ts"],"names":[],"mappings":";;AAgBA,8BAKC;AArBD,2CAAyE;AACzE,iEAA4D;AAC5D,yDAA6D;AAc7D,SAAgB,SAAS,CAAC,MAAuB;IAC7C,OAAO,IAAA,wBAAe,EAClB,IAAA,oBAAW,EAAC,sCAAqB,EAAE,MAAM,CAAC,EAC1C,IAAA,kBAAS,EAAC,iCAAc,CAAC,CAC5B,CAAC;AACN,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"skip-email-verification.decorator.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/decorators/skip-email-verification.decorator.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AAYrE,eAAO,MAAM,qBAAqB,wDAAuD,CAAC"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.SkipEmailVerification = exports.SKIP_EMAIL_VERIFICATION_KEY = void 0;
|
|
4
|
+
const common_1 = require("@nestjs/common");
|
|
5
|
+
exports.SKIP_EMAIL_VERIFICATION_KEY = 'skip_email_verification';
|
|
6
|
+
const SkipEmailVerification = () => (0, common_1.SetMetadata)(exports.SKIP_EMAIL_VERIFICATION_KEY, true);
|
|
7
|
+
exports.SkipEmailVerification = SkipEmailVerification;
|
|
8
|
+
//# sourceMappingURL=skip-email-verification.decorator.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"skip-email-verification.decorator.js","sourceRoot":"","sources":["../../../../src/lib/core/decorators/skip-email-verification.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAGhC,QAAA,2BAA2B,GAAG,yBAAyB,CAAC;AAY9D,MAAM,qBAAqB,GAAG,GAAG,EAAE,CAAC,IAAA,oBAAW,EAAC,mCAA2B,EAAE,IAAI,CAAC,CAAC;AAA7E,QAAA,qBAAqB,yBAAwD"}
|
|
@@ -12,6 +12,7 @@ import { NestAuthSession } from '../session/entities/session.entity';
|
|
|
12
12
|
import { NestAuthPermission } from '../permission/entities/permission.entity';
|
|
13
13
|
import { NestAuthAdminUser } from '../admin-console/entities/admin-user.entity';
|
|
14
14
|
import { NestAuthTrustedDevice } from '../auth';
|
|
15
|
+
import { NestAuthBlockedEmailDomain } from '../auth/entities/blocked-email-domain.entity';
|
|
15
16
|
export * from '../user/entities/user.entity';
|
|
16
17
|
export * from '../user/entities/identity.entity';
|
|
17
18
|
export * from '../user/entities/access-key.entity';
|
|
@@ -24,5 +25,6 @@ export * from '../auth/entities/mfa-secret.entity';
|
|
|
24
25
|
export * from '../auth/entities/otp.entity';
|
|
25
26
|
export * from '../session/entities/session.entity';
|
|
26
27
|
export * from '../permission/entities/permission.entity';
|
|
27
|
-
export
|
|
28
|
+
export * from '../auth/entities/blocked-email-domain.entity';
|
|
29
|
+
export declare const NestAuthEntities: (typeof NestAuthIdentity | typeof NestAuthUser | typeof NestAuthSession | typeof NestAuthOTP | typeof NestAuthMFASecret | typeof NestAuthTenant | typeof NestAuthUserAccess | typeof NestAuthPlatformAccess | typeof NestAuthRole | typeof NestAuthPermission | typeof NestAuthRolePermission | typeof NestAuthAccessKey | typeof NestAuthAdminUser | typeof NestAuthTrustedDevice | typeof NestAuthBlockedEmailDomain)[];
|
|
28
30
|
//# sourceMappingURL=entities.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../../../src/lib/core/entities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;
|
|
1
|
+
{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../../../src/lib/core/entities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAE1F,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kCAAkC,CAAC;AACjD,cAAc,oCAAoC,CAAC;AACnD,cAAc,kCAAkC,CAAC;AACjD,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC;AACxD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yCAAyC,CAAC;AACxD,cAAc,oCAAoC,CAAC;AACnD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,8CAA8C,CAAC;AAG7D,eAAO,MAAM,gBAAgB,2ZAgB5B,CAAC"}
|
|
@@ -29,6 +29,7 @@ const session_entity_1 = require("../session/entities/session.entity");
|
|
|
29
29
|
const permission_entity_1 = require("../permission/entities/permission.entity");
|
|
30
30
|
const admin_user_entity_1 = require("../admin-console/entities/admin-user.entity");
|
|
31
31
|
const auth_1 = require("../auth");
|
|
32
|
+
const blocked_email_domain_entity_1 = require("../auth/entities/blocked-email-domain.entity");
|
|
32
33
|
__exportStar(require("../user/entities/user.entity"), exports);
|
|
33
34
|
__exportStar(require("../user/entities/identity.entity"), exports);
|
|
34
35
|
__exportStar(require("../user/entities/access-key.entity"), exports);
|
|
@@ -41,6 +42,7 @@ __exportStar(require("../auth/entities/mfa-secret.entity"), exports);
|
|
|
41
42
|
__exportStar(require("../auth/entities/otp.entity"), exports);
|
|
42
43
|
__exportStar(require("../session/entities/session.entity"), exports);
|
|
43
44
|
__exportStar(require("../permission/entities/permission.entity"), exports);
|
|
45
|
+
__exportStar(require("../auth/entities/blocked-email-domain.entity"), exports);
|
|
44
46
|
exports.NestAuthEntities = [
|
|
45
47
|
user_entity_1.NestAuthUser,
|
|
46
48
|
identity_entity_1.NestAuthIdentity,
|
|
@@ -56,5 +58,6 @@ exports.NestAuthEntities = [
|
|
|
56
58
|
permission_entity_1.NestAuthPermission,
|
|
57
59
|
admin_user_entity_1.NestAuthAdminUser,
|
|
58
60
|
auth_1.NestAuthTrustedDevice,
|
|
61
|
+
blocked_email_domain_entity_1.NestAuthBlockedEmailDomain,
|
|
59
62
|
];
|
|
60
63
|
//# sourceMappingURL=entities.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"entities.js","sourceRoot":"","sources":["../../../src/lib/core/entities.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,8DAA4D;AAC5D,sEAAoE;AACpE,0EAAuE;AACvE,oEAAkE;AAClE,oFAAiF;AACjF,4EAAyE;AACzE,8DAA4D;AAC5D,oFAAiF;AACjF,0EAAuE;AACvE,4DAA0D;AAC1D,uEAAqE;AACrE,gFAA8E;AAC9E,mFAAgF;AAChF,kCAAgD;
|
|
1
|
+
{"version":3,"file":"entities.js","sourceRoot":"","sources":["../../../src/lib/core/entities.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,8DAA4D;AAC5D,sEAAoE;AACpE,0EAAuE;AACvE,oEAAkE;AAClE,oFAAiF;AACjF,4EAAyE;AACzE,8DAA4D;AAC5D,oFAAiF;AACjF,0EAAuE;AACvE,4DAA0D;AAC1D,uEAAqE;AACrE,gFAA8E;AAC9E,mFAAgF;AAChF,kCAAgD;AAChD,8FAA0F;AAE1F,+DAA6C;AAC7C,mEAAiD;AACjD,qEAAmD;AACnD,mEAAiD;AACjD,sEAAoD;AACpD,0EAAwD;AACxD,+DAA6C;AAC7C,0EAAwD;AACxD,qEAAmD;AACnD,8DAA4C;AAC5C,qEAAmD;AACnD,2EAAyD;AACzD,+EAA6D;AAGhD,QAAA,gBAAgB,GAAG;IAC5B,0BAAY;IACZ,kCAAgB;IAChB,0BAAY;IACZ,+CAAsB;IACtB,8BAAc;IACd,+CAAsB;IACtB,uCAAkB;IAClB,qCAAiB;IACjB,gCAAe;IACf,wBAAW;IACX,qCAAiB;IACjB,sCAAkB;IAClB,qCAAiB;IACjB,4BAAqB;IACrB,wDAA0B;CAC7B,CAAC"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import { CanActivate, ExecutionContext } from '@nestjs/common';
|
|
2
|
+
import { Reflector } from '@nestjs/core';
|
|
3
|
+
export declare class CaptchaGuard implements CanActivate {
|
|
4
|
+
private readonly reflector;
|
|
5
|
+
constructor(reflector: Reflector);
|
|
6
|
+
canActivate(context: ExecutionContext): Promise<boolean>;
|
|
7
|
+
}
|
|
8
|
+
//# sourceMappingURL=captcha.guard.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"captcha.guard.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/guards/captcha.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,WAAW,EAAE,gBAAgB,EAAc,MAAM,gBAAgB,CAAC;AAChG,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAUzC,qBACa,YAAa,YAAW,WAAW;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,SAAS;IAE3C,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAgCjE"}
|
|
@@ -0,0 +1,59 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
7
|
+
};
|
|
8
|
+
var __metadata = (this && this.__metadata) || function (k, v) {
|
|
9
|
+
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
10
|
+
};
|
|
11
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
+
exports.CaptchaGuard = void 0;
|
|
13
|
+
const common_1 = require("@nestjs/common");
|
|
14
|
+
const core_1 = require("@nestjs/core");
|
|
15
|
+
const auth_config_service_1 = require("../services/auth-config.service");
|
|
16
|
+
const auth_constants_1 = require("../../auth.constants");
|
|
17
|
+
let CaptchaGuard = class CaptchaGuard {
|
|
18
|
+
reflector;
|
|
19
|
+
constructor(reflector) {
|
|
20
|
+
this.reflector = reflector;
|
|
21
|
+
}
|
|
22
|
+
async canActivate(context) {
|
|
23
|
+
const marked = this.reflector.getAllAndOverride(auth_constants_1.CAPTCHA_KEY, [
|
|
24
|
+
context.getHandler(),
|
|
25
|
+
context.getClass(),
|
|
26
|
+
]);
|
|
27
|
+
if (!marked)
|
|
28
|
+
return true;
|
|
29
|
+
const cfg = auth_config_service_1.AuthConfigService.getOptions().security?.captcha;
|
|
30
|
+
if (!cfg?.enabled || typeof cfg.verify !== 'function')
|
|
31
|
+
return true;
|
|
32
|
+
const http = context.switchToHttp();
|
|
33
|
+
const req = http.getRequest();
|
|
34
|
+
const headerName = (cfg.headerName || 'x-captcha-token').toLowerCase();
|
|
35
|
+
const bodyField = cfg.bodyField || 'captchaToken';
|
|
36
|
+
const raw = req.headers?.[headerName] ?? req.body?.[bodyField];
|
|
37
|
+
const token = Array.isArray(raw) ? raw[0] : raw;
|
|
38
|
+
if (!token || typeof token !== 'string') {
|
|
39
|
+
throw new common_1.BadRequestException({ message: 'CAPTCHA token is required', code: auth_constants_1.ERROR_CODES.CAPTCHA_REQUIRED });
|
|
40
|
+
}
|
|
41
|
+
let ok = false;
|
|
42
|
+
try {
|
|
43
|
+
ok = await cfg.verify(token, { ip: req?.ip, route: req?.path });
|
|
44
|
+
}
|
|
45
|
+
catch {
|
|
46
|
+
ok = false;
|
|
47
|
+
}
|
|
48
|
+
if (!ok) {
|
|
49
|
+
throw new common_1.BadRequestException({ message: 'CAPTCHA verification failed', code: auth_constants_1.ERROR_CODES.CAPTCHA_FAILED });
|
|
50
|
+
}
|
|
51
|
+
return true;
|
|
52
|
+
}
|
|
53
|
+
};
|
|
54
|
+
exports.CaptchaGuard = CaptchaGuard;
|
|
55
|
+
exports.CaptchaGuard = CaptchaGuard = __decorate([
|
|
56
|
+
(0, common_1.Injectable)(),
|
|
57
|
+
__metadata("design:paramtypes", [core_1.Reflector])
|
|
58
|
+
], CaptchaGuard);
|
|
59
|
+
//# sourceMappingURL=captcha.guard.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"captcha.guard.js","sourceRoot":"","sources":["../../../../src/lib/core/guards/captcha.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAgG;AAChG,uCAAyC;AACzC,yEAAoE;AACpE,yDAAgE;AASzD,IAAM,YAAY,GAAlB,MAAM,YAAY;IACQ;IAA7B,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAI,CAAC;IAEtD,KAAK,CAAC,WAAW,CAAC,OAAyB;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,4BAAW,EAAE;YAClE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,GAAG,GAAG,uCAAiB,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC7D,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAEnE,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,GAAG,GAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC;QACvE,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,cAAc,CAAC;QAElD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,4BAAmB,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAW,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAChH,CAAC;QAED,IAAI,EAAE,GAAG,KAAK,CAAC;QACf,IAAI,CAAC;YACD,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACL,EAAE,GAAG,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,EAAE,EAAE,CAAC;YACN,MAAM,IAAI,4BAAmB,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,IAAI,EAAE,4BAAW,CAAC,cAAc,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AAnCY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAE+B,gBAAS;GADxC,YAAY,CAmCxB"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import { CanActivate, ExecutionContext } from '@nestjs/common';
|
|
2
|
+
import { Reflector } from '@nestjs/core';
|
|
3
|
+
import { LockoutService } from '../services/lockout.service';
|
|
4
|
+
export declare class LockoutGuard implements CanActivate {
|
|
5
|
+
private readonly reflector;
|
|
6
|
+
private readonly lockout;
|
|
7
|
+
constructor(reflector: Reflector, lockout: LockoutService);
|
|
8
|
+
canActivate(context: ExecutionContext): boolean;
|
|
9
|
+
}
|
|
10
|
+
//# sourceMappingURL=lockout.guard.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"lockout.guard.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/guards/lockout.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAyC,MAAM,gBAAgB,CAAC;AACtG,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAQ7D,qBACa,YAAa,YAAW,WAAW;IAExC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,cAAc;IAG5C,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CA6BlD"}
|
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
7
|
+
};
|
|
8
|
+
var __metadata = (this && this.__metadata) || function (k, v) {
|
|
9
|
+
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
10
|
+
};
|
|
11
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
+
exports.LockoutGuard = void 0;
|
|
13
|
+
const common_1 = require("@nestjs/common");
|
|
14
|
+
const core_1 = require("@nestjs/core");
|
|
15
|
+
const lockout_service_1 = require("../services/lockout.service");
|
|
16
|
+
const auth_constants_1 = require("../../auth.constants");
|
|
17
|
+
let LockoutGuard = class LockoutGuard {
|
|
18
|
+
reflector;
|
|
19
|
+
lockout;
|
|
20
|
+
constructor(reflector, lockout) {
|
|
21
|
+
this.reflector = reflector;
|
|
22
|
+
this.lockout = lockout;
|
|
23
|
+
}
|
|
24
|
+
canActivate(context) {
|
|
25
|
+
const marked = this.reflector.getAllAndOverride(auth_constants_1.LOCKOUT_KEY, [
|
|
26
|
+
context.getHandler(),
|
|
27
|
+
context.getClass(),
|
|
28
|
+
]);
|
|
29
|
+
if (!marked || !this.lockout.isEnabled())
|
|
30
|
+
return true;
|
|
31
|
+
const http = context.switchToHttp();
|
|
32
|
+
const req = http.getRequest();
|
|
33
|
+
const res = http.getResponse();
|
|
34
|
+
const body = req?.body ?? {};
|
|
35
|
+
const identifier = body.credentials?.email ?? body.credentials?.phone ?? body.email ?? body.phone ?? body.identifier;
|
|
36
|
+
const { locked, retryAfter } = this.lockout.check(identifier, req?.ip);
|
|
37
|
+
if (locked) {
|
|
38
|
+
if (res && typeof res.setHeader === 'function')
|
|
39
|
+
res.setHeader('Retry-After', String(retryAfter));
|
|
40
|
+
throw new common_1.HttpException({
|
|
41
|
+
message: 'Account temporarily locked after too many failed attempts. Please try again later.',
|
|
42
|
+
code: auth_constants_1.ERROR_CODES.ACCOUNT_LOCKED,
|
|
43
|
+
retryAfter,
|
|
44
|
+
}, common_1.HttpStatus.TOO_MANY_REQUESTS);
|
|
45
|
+
}
|
|
46
|
+
return true;
|
|
47
|
+
}
|
|
48
|
+
};
|
|
49
|
+
exports.LockoutGuard = LockoutGuard;
|
|
50
|
+
exports.LockoutGuard = LockoutGuard = __decorate([
|
|
51
|
+
(0, common_1.Injectable)(),
|
|
52
|
+
__metadata("design:paramtypes", [core_1.Reflector,
|
|
53
|
+
lockout_service_1.LockoutService])
|
|
54
|
+
], LockoutGuard);
|
|
55
|
+
//# sourceMappingURL=lockout.guard.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"lockout.guard.js","sourceRoot":"","sources":["../../../../src/lib/core/guards/lockout.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAsG;AACtG,uCAAyC;AACzC,iEAA6D;AAC7D,yDAAgE;AAQzD,IAAM,YAAY,GAAlB,MAAM,YAAY;IAEA;IACA;IAFrB,YACqB,SAAoB,EACpB,OAAuB;QADvB,cAAS,GAAT,SAAS,CAAW;QACpB,YAAO,GAAP,OAAO,CAAgB;IACxC,CAAC;IAEL,WAAW,CAAC,OAAyB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,4BAAW,EAAE;YAClE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YAAE,OAAO,IAAI,CAAC;QAEtD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,GAAG,GAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,GAAG,GAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAEpC,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,UAAU,GACZ,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC;QAEtG,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,UAAU;gBAAE,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACjG,MAAM,IAAI,sBAAa,CACnB;gBACI,OAAO,EAAE,oFAAoF;gBAC7F,IAAI,EAAE,4BAAW,CAAC,cAAc;gBAChC,UAAU;aACb,EACD,mBAAU,CAAC,iBAAiB,CAC/B,CAAC;QACN,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AAnCY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAGuB,gBAAS;QACX,gCAAc;GAHnC,YAAY,CAmCxB"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import { CanActivate, ExecutionContext } from '@nestjs/common';
|
|
2
|
+
import { Reflector } from '@nestjs/core';
|
|
3
|
+
import { RateLimitService } from '../services/rate-limit.service';
|
|
4
|
+
export declare class RateLimitGuard implements CanActivate {
|
|
5
|
+
private readonly reflector;
|
|
6
|
+
private readonly rateLimit;
|
|
7
|
+
constructor(reflector: Reflector, rateLimit: RateLimitService);
|
|
8
|
+
canActivate(context: ExecutionContext): Promise<boolean>;
|
|
9
|
+
}
|
|
10
|
+
//# sourceMappingURL=rate-limit.guard.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"rate-limit.guard.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/guards/rate-limit.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAc,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AASlE,qBACa,cAAe,YAAW,WAAW;IAE1C,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,gBAAgB;IAG1C,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAWjE"}
|
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
7
|
+
};
|
|
8
|
+
var __metadata = (this && this.__metadata) || function (k, v) {
|
|
9
|
+
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
10
|
+
};
|
|
11
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
+
exports.RateLimitGuard = void 0;
|
|
13
|
+
const common_1 = require("@nestjs/common");
|
|
14
|
+
const core_1 = require("@nestjs/core");
|
|
15
|
+
const rate_limit_service_1 = require("../services/rate-limit.service");
|
|
16
|
+
const auth_constants_1 = require("../../auth.constants");
|
|
17
|
+
let RateLimitGuard = class RateLimitGuard {
|
|
18
|
+
reflector;
|
|
19
|
+
rateLimit;
|
|
20
|
+
constructor(reflector, rateLimit) {
|
|
21
|
+
this.reflector = reflector;
|
|
22
|
+
this.rateLimit = rateLimit;
|
|
23
|
+
}
|
|
24
|
+
async canActivate(context) {
|
|
25
|
+
const bucket = this.reflector.getAllAndOverride(auth_constants_1.RATE_LIMIT_BUCKET_KEY, [context.getHandler(), context.getClass()]);
|
|
26
|
+
if (!bucket)
|
|
27
|
+
return true;
|
|
28
|
+
const http = context.switchToHttp();
|
|
29
|
+
await this.rateLimit.enforce(bucket, http.getRequest(), http.getResponse());
|
|
30
|
+
return true;
|
|
31
|
+
}
|
|
32
|
+
};
|
|
33
|
+
exports.RateLimitGuard = RateLimitGuard;
|
|
34
|
+
exports.RateLimitGuard = RateLimitGuard = __decorate([
|
|
35
|
+
(0, common_1.Injectable)(),
|
|
36
|
+
__metadata("design:paramtypes", [core_1.Reflector,
|
|
37
|
+
rate_limit_service_1.RateLimitService])
|
|
38
|
+
], RateLimitGuard);
|
|
39
|
+
//# sourceMappingURL=rate-limit.guard.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"rate-limit.guard.js","sourceRoot":"","sources":["../../../../src/lib/core/guards/rate-limit.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA2E;AAC3E,uCAAyC;AACzC,uEAAkE;AAClE,yDAA6D;AAStD,IAAM,cAAc,GAApB,MAAM,cAAc;IAEF;IACA;IAFrB,YACqB,SAAoB,EACpB,SAA2B;QAD3B,cAAS,GAAT,SAAS,CAAW;QACpB,cAAS,GAAT,SAAS,CAAkB;IAC5C,CAAC;IAEL,KAAK,CAAC,WAAW,CAAC,OAAyB;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAC3C,sCAAqB,EACrB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC7C,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AAjBY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;qCAGuB,gBAAS;QACT,qCAAgB;GAHvC,cAAc,CAiB1B"}
|
package/dist/lib/core/index.d.ts
CHANGED
|
@@ -5,11 +5,19 @@ export * from './decorators/auth.decorator';
|
|
|
5
5
|
export * from './decorators/public.decorator';
|
|
6
6
|
export * from './decorators/current-user.decorator';
|
|
7
7
|
export * from './decorators/must-change-password.decorator';
|
|
8
|
+
export * from './decorators/skip-email-verification.decorator';
|
|
9
|
+
export * from './decorators/rate-limit.decorator';
|
|
10
|
+
export * from './decorators/captcha.decorator';
|
|
11
|
+
export * from './decorators/lockout.decorator';
|
|
12
|
+
export * from './guards/rate-limit.guard';
|
|
13
|
+
export * from './guards/lockout.guard';
|
|
14
|
+
export * from './guards/captcha.guard';
|
|
8
15
|
export * from './swagger/api-responses.decorator';
|
|
9
16
|
export * from './interfaces/auth-module-options.interface';
|
|
10
17
|
export * from './interfaces/mfa-options.interface';
|
|
11
18
|
export * from './interfaces/session-options.interface';
|
|
12
19
|
export * from './interfaces/token-payload.interface';
|
|
20
|
+
export * from './interfaces/rate-limit.interface';
|
|
13
21
|
export * from './entities';
|
|
14
22
|
export * from './dto/message.response.dto';
|
|
15
23
|
export * from './providers/base-auth.provider';
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/core/index.ts"],"names":[],"mappings":"AAEA,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oCAAoC,CAAC;AACnD,cAAc,iCAAiC,CAAC;AAChD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qCAAqC,CAAC;AACpD,cAAc,6CAA6C,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/core/index.ts"],"names":[],"mappings":"AAEA,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oCAAoC,CAAC;AACnD,cAAc,iCAAiC,CAAC;AAChD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qCAAqC,CAAC;AACpD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,gDAAgD,CAAC;AAG/D,cAAc,mCAAmC,CAAC;AAClD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAG/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AAGvC,cAAc,mCAAmC,CAAC;AAGlD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,oCAAoC,CAAC;AACnD,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,mCAAmC,CAAC;AAGlD,cAAc,YAAY,CAAC;AAG3B,cAAc,4BAA4B,CAAC;AAG3C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kCAAkC,CAAC;AACjD,cAAc,oCAAoC,CAAC;AACnD,cAAc,iCAAiC,CAAC;AAChD,cAAc,kCAAkC,CAAC;AACjD,cAAc,wCAAwC,CAAC;AAGvD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wBAAwB,CAAC"}
|
package/dist/lib/core/index.js
CHANGED
|
@@ -21,11 +21,19 @@ __exportStar(require("./decorators/auth.decorator"), exports);
|
|
|
21
21
|
__exportStar(require("./decorators/public.decorator"), exports);
|
|
22
22
|
__exportStar(require("./decorators/current-user.decorator"), exports);
|
|
23
23
|
__exportStar(require("./decorators/must-change-password.decorator"), exports);
|
|
24
|
+
__exportStar(require("./decorators/skip-email-verification.decorator"), exports);
|
|
25
|
+
__exportStar(require("./decorators/rate-limit.decorator"), exports);
|
|
26
|
+
__exportStar(require("./decorators/captcha.decorator"), exports);
|
|
27
|
+
__exportStar(require("./decorators/lockout.decorator"), exports);
|
|
28
|
+
__exportStar(require("./guards/rate-limit.guard"), exports);
|
|
29
|
+
__exportStar(require("./guards/lockout.guard"), exports);
|
|
30
|
+
__exportStar(require("./guards/captcha.guard"), exports);
|
|
24
31
|
__exportStar(require("./swagger/api-responses.decorator"), exports);
|
|
25
32
|
__exportStar(require("./interfaces/auth-module-options.interface"), exports);
|
|
26
33
|
__exportStar(require("./interfaces/mfa-options.interface"), exports);
|
|
27
34
|
__exportStar(require("./interfaces/session-options.interface"), exports);
|
|
28
35
|
__exportStar(require("./interfaces/token-payload.interface"), exports);
|
|
36
|
+
__exportStar(require("./interfaces/rate-limit.interface"), exports);
|
|
29
37
|
__exportStar(require("./entities"), exports);
|
|
30
38
|
__exportStar(require("./dto/message.response.dto"), exports);
|
|
31
39
|
__exportStar(require("./providers/base-auth.provider"), exports);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/core/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAEA,8DAA4C;AAC5C,qEAAmD;AACnD,kEAAgD;AAChD,8DAA4C;AAC5C,gEAA8C;AAC9C,sEAAoD;AACpD,8EAA4D;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/core/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAEA,8DAA4C;AAC5C,qEAAmD;AACnD,kEAAgD;AAChD,8DAA4C;AAC5C,gEAA8C;AAC9C,sEAAoD;AACpD,8EAA4D;AAC5D,iFAA+D;AAG/D,oEAAkD;AAClD,iEAA+C;AAC/C,iEAA+C;AAG/C,4DAA0C;AAC1C,yDAAuC;AACvC,yDAAuC;AAGvC,oEAAkD;AAGlD,6EAA2D;AAC3D,qEAAmD;AACnD,yEAAuD;AACvD,uEAAqD;AACrD,oEAAkD;AAGlD,6CAA2B;AAG3B,6DAA2C;AAG3C,iEAA+C;AAC/C,kEAAgD;AAChD,kEAAgD;AAChD,gEAA8C;AAC9C,mEAAiD;AACjD,qEAAmD;AACnD,kEAAgD;AAChD,mEAAiD;AACjD,yEAAuD;AAGvD,4EAA0D;AAC1D,yDAAuC"}
|
|
@@ -1,5 +1,7 @@
|
|
|
1
1
|
import { Type } from '@nestjs/common';
|
|
2
2
|
import { MFAOptions } from './mfa-options.interface';
|
|
3
|
+
import { IRateLimitOptions } from './rate-limit.interface';
|
|
4
|
+
import { HibpOptions } from '../../utils/password-policy.util';
|
|
3
5
|
import { CookieOptions, SessionOptions } from './session-options.interface';
|
|
4
6
|
import { BaseAuthProvider } from '../providers/base-auth.provider';
|
|
5
7
|
import { DebugLogOptions } from '../services/debug-logger.service';
|
|
@@ -72,6 +74,7 @@ export interface IOtpOptions {
|
|
|
72
74
|
length?: number;
|
|
73
75
|
format?: 'numeric' | 'alphanumeric';
|
|
74
76
|
codeExpiresIn?: number | string;
|
|
77
|
+
maxAttempts?: number;
|
|
75
78
|
}
|
|
76
79
|
export interface IGuardHooks {
|
|
77
80
|
beforeAuth?: (request: any, payload: JWTTokenPayload) => Promise<void | {
|
|
@@ -102,6 +105,33 @@ export interface IAuthModuleOptions {
|
|
|
102
105
|
appName: string;
|
|
103
106
|
routePrefix?: string;
|
|
104
107
|
enableAutoRefresh?: boolean;
|
|
108
|
+
security?: {
|
|
109
|
+
csrf?: {
|
|
110
|
+
enabled?: boolean;
|
|
111
|
+
allowedOrigins?: string[];
|
|
112
|
+
cookieName?: string;
|
|
113
|
+
headerName?: string;
|
|
114
|
+
};
|
|
115
|
+
rateLimit?: IRateLimitOptions;
|
|
116
|
+
lockout?: {
|
|
117
|
+
enabled?: boolean;
|
|
118
|
+
maxFailedAttempts?: number;
|
|
119
|
+
window?: number | string;
|
|
120
|
+
lockDuration?: number | string;
|
|
121
|
+
};
|
|
122
|
+
captcha?: {
|
|
123
|
+
enabled?: boolean;
|
|
124
|
+
verify?: (token: string, ctx: {
|
|
125
|
+
ip?: string;
|
|
126
|
+
route?: string;
|
|
127
|
+
}) => boolean | Promise<boolean>;
|
|
128
|
+
headerName?: string;
|
|
129
|
+
bodyField?: string;
|
|
130
|
+
};
|
|
131
|
+
};
|
|
132
|
+
social?: {
|
|
133
|
+
requireVerifiedEmailForLinking?: boolean;
|
|
134
|
+
};
|
|
105
135
|
google?: {
|
|
106
136
|
clientId: string;
|
|
107
137
|
clientSecret: string;
|
|
@@ -136,11 +166,17 @@ export interface IAuthModuleOptions {
|
|
|
136
166
|
};
|
|
137
167
|
emailAuth?: {
|
|
138
168
|
enabled: boolean;
|
|
169
|
+
disposable?: {
|
|
170
|
+
enabled?: boolean;
|
|
171
|
+
mode?: 'block' | 'flag';
|
|
172
|
+
allowlist?: string[];
|
|
173
|
+
};
|
|
139
174
|
};
|
|
140
175
|
passwordless?: IPasswordlessOptions;
|
|
141
176
|
registration?: {
|
|
142
177
|
enabled?: boolean;
|
|
143
178
|
requireInvitation?: boolean;
|
|
179
|
+
requireVerifiedEmail?: boolean;
|
|
144
180
|
autoLoginAfterSignup?: boolean;
|
|
145
181
|
collectProfileFields?: Array<IRegistrationCollectProfileField>;
|
|
146
182
|
};
|
|
@@ -174,6 +210,7 @@ export interface IAuthModuleOptions {
|
|
|
174
210
|
timeCost?: number;
|
|
175
211
|
parallelism?: number;
|
|
176
212
|
};
|
|
213
|
+
policy?: IPasswordPolicyOptions;
|
|
177
214
|
};
|
|
178
215
|
platformAccess?: {
|
|
179
216
|
enabled?: boolean;
|
|
@@ -185,15 +222,30 @@ export interface IAuthModuleOptions {
|
|
|
185
222
|
errorHandler?: (error: Error, context: 'login' | 'signup' | 'refresh' | 'mfa' | 'password_reset' | 'password_change') => any;
|
|
186
223
|
resolveConfig?: (context: any) => Promise<Partial<IAuthModuleOptions>> | Partial<IAuthModuleOptions>;
|
|
187
224
|
}
|
|
225
|
+
export interface IPasswordPolicyOptions {
|
|
226
|
+
enabled?: boolean;
|
|
227
|
+
minLength?: number;
|
|
228
|
+
maxLength?: number;
|
|
229
|
+
blockCommonPasswords?: boolean;
|
|
230
|
+
blocklist?: string[];
|
|
231
|
+
blockContainsIdentifier?: boolean;
|
|
232
|
+
checkBreached?: boolean;
|
|
233
|
+
hibp?: HibpOptions;
|
|
234
|
+
}
|
|
188
235
|
export interface IAdminConsoleOptions {
|
|
189
236
|
enabled?: boolean;
|
|
190
237
|
path?: string;
|
|
191
238
|
basePath?: string;
|
|
192
239
|
secretKey?: string;
|
|
240
|
+
sessionSecret?: string;
|
|
193
241
|
sessionCookieName?: string;
|
|
194
242
|
sessionDuration?: string | number;
|
|
195
243
|
cookie?: CookieOptions;
|
|
196
244
|
allowAdminManagement?: boolean;
|
|
245
|
+
bruteForce?: {
|
|
246
|
+
enabled?: boolean;
|
|
247
|
+
};
|
|
248
|
+
allowPublicSignupAfterFirstAdmin?: boolean;
|
|
197
249
|
}
|
|
198
250
|
export interface IAuthModuleAsyncOptions {
|
|
199
251
|
isGlobal?: boolean;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth-module-options.interface.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/interfaces/auth-module-options.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAkB,MAAM,8BAA8B,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAUzE,MAAM,WAAW,qBAAqB;IAElC,IAAI,EAAE,MAAM,CAAC;IAOb,IAAI,EAAE,MAAM,CAAC;IAGb,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,gCAAgC;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAKD,MAAM,WAAW,UAAU;IAavB,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAUvH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAWhG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;IASrK,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOpH,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAMrF,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAcpF,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAGhE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAKD,MAAM,WAAW,UAAU;IAcvB,iBAAiB,CAAC,EAAE,CAChB,QAAQ,EAAE,GAAG,EACb,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,cAAc,KACtB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;CAC3B;AASD,MAAM,WAAW,oBAAoB;IAEjC,OAAO,EAAE,OAAO,CAAC;CACpB;AAOD,MAAM,WAAW,gBAAgB;IAE7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,OAAO,CAAC,EAAE,aAAa,CAAC;CAC3B;AAKD,MAAM,WAAW,eAAe;IAE5B,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAEhC,cAAc,CAAC,EAAE,sBAAsB,CAAC;IAExC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAE5B,OAAO,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IAuB/B,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,wBAAwB,CAAC,GAAG,wBAAwB,CAAC;IAsBhJ,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,wBAAwB,EAAE,OAAO,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACxH;AAMD,MAAM,WAAW,WAAW;IAsBxB,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACrH;AAOD,MAAM,WAAW,oBAAoB;IAEjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAKlB,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAMD,MAAM,WAAW,WAAW;IAOxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,cAAc,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9F,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,MAAM,CAAC,EAAE,SAAS,GAAG,cAAc,CAAC;IAKpC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"auth-module-options.interface.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/interfaces/auth-module-options.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAkB,MAAM,8BAA8B,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAUzE,MAAM,WAAW,qBAAqB;IAElC,IAAI,EAAE,MAAM,CAAC;IAOb,IAAI,EAAE,MAAM,CAAC;IAGb,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,gCAAgC;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAKD,MAAM,WAAW,UAAU;IAavB,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAUvH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAWhG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;IASrK,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOpH,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAMrF,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAcpF,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAGhE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAKD,MAAM,WAAW,UAAU;IAcvB,iBAAiB,CAAC,EAAE,CAChB,QAAQ,EAAE,GAAG,EACb,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,cAAc,KACtB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;CAC3B;AASD,MAAM,WAAW,oBAAoB;IAEjC,OAAO,EAAE,OAAO,CAAC;CACpB;AAOD,MAAM,WAAW,gBAAgB;IAE7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,OAAO,CAAC,EAAE,aAAa,CAAC;CAC3B;AAKD,MAAM,WAAW,eAAe;IAE5B,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAEhC,cAAc,CAAC,EAAE,sBAAsB,CAAC;IAExC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAE5B,OAAO,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IAuB/B,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,wBAAwB,CAAC,GAAG,wBAAwB,CAAC;IAsBhJ,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,wBAAwB,EAAE,OAAO,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACxH;AAMD,MAAM,WAAW,WAAW;IAsBxB,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACrH;AAOD,MAAM,WAAW,oBAAoB;IAEjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAKlB,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAMD,MAAM,WAAW,WAAW;IAOxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,cAAc,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9F,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,MAAM,CAAC,EAAE,SAAS,GAAG,cAAc,CAAC;IAKpC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAOhC,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAKD,MAAM,WAAW,WAAW;IAKxB,UAAU,CAAC,EAAE,CACT,OAAO,EAAE,GAAG,EACZ,OAAO,EAAE,eAAe,KACvB,OAAO,CAAC,IAAI,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAG1D,SAAS,CAAC,EAAE,CACR,OAAO,EAAE,GAAG,EACZ,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,cAAc,KACtB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC7B;AAKD,MAAM,WAAW,mBAAmB;IAEhC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEzD,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACnF;AAKD,MAAM,WAAW,eAAe;IAC5B,IAAI,EAAE,OAAO,GAAG,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,iBAAiB,GAAG,YAAY,GAAG,aAAa,GAAG,gBAAgB,CAAC;IAC3H,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC;CACnB;AAKD,MAAM,WAAW,aAAa;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC9D;AAED,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAQhB,WAAW,CAAC,EAAE,MAAM,CAAC;IAOrB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAI5B,QAAQ,CAAC,EAAE;QAUP,IAAI,CAAC,EAAE;YAEH,OAAO,CAAC,EAAE,OAAO,CAAC;YAOlB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;YAE1B,UAAU,CAAC,EAAE,MAAM,CAAC;YAEpB,UAAU,CAAC,EAAE,MAAM,CAAC;SACvB,CAAC;QAQF,SAAS,CAAC,EAAE,iBAAiB,CAAC;QAQ9B,OAAO,CAAC,EAAE;YAEN,OAAO,CAAC,EAAE,OAAO,CAAC;YAElB,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAE3B,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;YAEzB,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;SAClC,CAAC;QAOF,OAAO,CAAC,EAAE;YAEN,OAAO,CAAC,EAAE,OAAO,CAAC;YAElB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE;gBAAE,EAAE,CAAC,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAE7F,UAAU,CAAC,EAAE,MAAM,CAAC;YAEpB,SAAS,CAAC,EAAE,MAAM,CAAC;SACtB,CAAC;KACL,CAAC;IAKF,MAAM,CAAC,EAAE;QAmBL,8BAA8B,CAAC,EAAE,OAAO,CAAC;KAC5C,CAAC;IACF,MAAM,CAAC,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QAepB,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAO/B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IACF,QAAQ,CAAC,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,KAAK,CAAC,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QAQpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QAMrB,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,MAAM,CAAC,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QAMpB,UAAU,CAAC,EAAE,MAAM,CAAC;QAKpB,YAAY,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,SAAS,CAAC,EAAE;QACR,OAAO,EAAE,OAAO,CAAC;KACpB,CAAC;IACF,SAAS,CAAC,EAAE;QACR,OAAO,EAAE,OAAO,CAAC;QAMjB,UAAU,CAAC,EAAE;YAET,OAAO,CAAC,EAAE,OAAO,CAAC;YAElB,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;YAExB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;SACxB,CAAC;KACL,CAAC;IACF,YAAY,CAAC,EAAE,oBAAoB,CAAC;IAMpC,YAAY,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAW5B,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAM/B,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,oBAAoB,CAAC,EAAE,KAAK,CAAC,gCAAgC,CAAC,CAAC;KAClE,CAAC;IAKF,YAAY,CAAC,EAAE;QAKX,OAAO,CAAC,EAAE,CACN,aAAa,EAAE,OAAO,8BAA8B,EAAE,aAAa,EACnE,OAAO,EAAE;YAAE,aAAa,EAAE,GAAG,CAAC;YAAC,aAAa,EAAE,GAAG,CAAA;SAAE,KAClD,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;KAC3B,CAAC;IACF,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,cAAc,CAAC;IAczB,kBAAkB,CAAC,EAAE;QACjB,OAAO,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;IAEF,mBAAmB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAiBzC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAMhC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAOtB,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,KAAK,CAAC,EAAE,eAAe,CAAC;IAUxB,IAAI,CAAC,EAAE,UAAU,CAAC;IAMlB,IAAI,CAAC,EAAE,UAAU,CAAC;IAOlB,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;IAOvC,UAAU,CAAC,EAAE,WAAW,CAAC;IAMzB,MAAM,CAAC,EAAE,WAAW,CAAC;IAMrB,QAAQ,CAAC,EAAE;QACP,2BAA2B,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAK9C,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QAK7C,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QAK9D,MAAM,CAAC,EAAE;YACL,UAAU,CAAC,EAAE,MAAM,CAAC;YACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,WAAW,CAAC,EAAE,MAAM,CAAC;SACxB,CAAC;QAOF,MAAM,CAAC,EAAE,sBAAsB,CAAC;KACnC,CAAC;IAMF,cAAc,CAAC,EAAE;QACb,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;KAC/D,CAAC;IAIF,GAAG,CAAC,EAAE,WAAW,CAAC;IAOlB,aAAa,CAAC,EAAE,mBAAmB,CAAC;IAMpC,KAAK,CAAC,EAAE,aAAa,CAAC;IAMtB,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,gBAAgB,GAAG,iBAAiB,KAAK,GAAG,CAAC;IAgB7H,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACxG;AAMD,MAAM,WAAW,sBAAsB;IAEnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAErB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAElC,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,IAAI,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IAEjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAUlB,IAAI,CAAC,EAAE,MAAM,CAAC;IAOd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAYlB,SAAS,CAAC,EAAE,MAAM,CAAC;IASnB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAKlC,MAAM,CAAC,EAAE,aAAa,CAAC;IAIvB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAS/B,UAAU,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IAUF,gCAAgC,CAAC,EAAE,OAAO,CAAC;CAC9C;AAED,MAAM,WAAW,uBAAuB;IACpC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAOnB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;IAClF,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,QAAQ,CAAC,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,yBAAyB;IACtC,uBAAuB,IAAI,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;CAC/E"}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
export type RateLimitBucket = 'login' | 'signup' | 'forgotPassword' | 'verifyOtp' | 'passwordlessSend' | 'mfaVerify' | 'adminLogin' | 'adminReset';
|
|
2
|
+
export interface RateLimitBucketConfig {
|
|
3
|
+
windowMs: number;
|
|
4
|
+
max: number;
|
|
5
|
+
}
|
|
6
|
+
export interface RateLimitHit {
|
|
7
|
+
count: number;
|
|
8
|
+
resetAt: number;
|
|
9
|
+
}
|
|
10
|
+
export interface IRateLimitStore {
|
|
11
|
+
increment(key: string, windowMs: number): Promise<RateLimitHit> | RateLimitHit;
|
|
12
|
+
}
|
|
13
|
+
export interface IRateLimitOptions {
|
|
14
|
+
enabled?: boolean;
|
|
15
|
+
keyBy?: 'ip' | 'identifier' | 'both';
|
|
16
|
+
store?: IRateLimitStore;
|
|
17
|
+
buckets?: Partial<Record<RateLimitBucket, RateLimitBucketConfig>>;
|
|
18
|
+
}
|
|
19
|
+
//# sourceMappingURL=rate-limit.interface.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"rate-limit.interface.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/interfaces/rate-limit.interface.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,eAAe,GACrB,OAAO,GACP,QAAQ,GACR,gBAAgB,GAChB,WAAW,GACX,kBAAkB,GAClB,WAAW,GACX,YAAY,GACZ,YAAY,CAAC;AAEnB,MAAM,WAAW,qBAAqB;IAElC,QAAQ,EAAE,MAAM,CAAC;IAEjB,GAAG,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAEzB,KAAK,EAAE,MAAM,CAAC;IAEd,OAAO,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,eAAe;IAK5B,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;CAClF;AAED,MAAM,WAAW,iBAAiB;IAE9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAQlB,KAAK,CAAC,EAAE,IAAI,GAAG,YAAY,GAAG,MAAM,CAAC;IAErC,KAAK,CAAC,EAAE,eAAe,CAAC;IAExB,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC,CAAC;CACrE"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"rate-limit.interface.js","sourceRoot":"","sources":["../../../../src/lib/core/interfaces/rate-limit.interface.ts"],"names":[],"mappings":""}
|
|
@@ -29,10 +29,15 @@ export interface SessionOptions {
|
|
|
29
29
|
store?: SessionStore | (() => SessionStore | Promise<SessionStore>);
|
|
30
30
|
accessTokenValidity?: number | string;
|
|
31
31
|
refreshTokenValidity?: number | string;
|
|
32
|
+
refreshTokenReuse?: {
|
|
33
|
+
revokeSession?: boolean;
|
|
34
|
+
};
|
|
32
35
|
cookieOptions?: CookieOptions;
|
|
33
36
|
accessTokenType?: 'header' | 'cookie' | null;
|
|
34
37
|
jwt?: {
|
|
35
38
|
secret: string;
|
|
39
|
+
validateSecretStrength?: boolean;
|
|
40
|
+
enableLoginProvider?: boolean;
|
|
36
41
|
validateToken?: (payload: JWTTokenPayload, session: SessionPayload) => Promise<boolean>;
|
|
37
42
|
};
|
|
38
43
|
maxSessionsPerUser?: number;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"session-options.interface.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/interfaces/session-options.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,IAAI,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAChG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kDAAkD,CAAC;AAErF,oBAAY,kBAAkB;IAC1B,KAAK,UAAU;IACf,QAAQ,aAAa;IACrB,MAAM,WAAW;IAEjB,MAAM,WAAW;CACpB;AAED,MAAM,WAAW,mBAAmB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjD,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,GAAG,MAAM,CAAC;IACtD,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAK3B,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAKjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAKlB,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAmB5B,KAAK,CAAC,EAAE,YAAY,GAAG,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAEpE,mBAAmB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,oBAAoB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"session-options.interface.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/interfaces/session-options.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,IAAI,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAChG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kDAAkD,CAAC;AAErF,oBAAY,kBAAkB;IAC1B,KAAK,UAAU;IACf,QAAQ,aAAa;IACrB,MAAM,WAAW;IAEjB,MAAM,WAAW;CACpB;AAED,MAAM,WAAW,mBAAmB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjD,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,GAAG,MAAM,CAAC;IACtD,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAK3B,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAKjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAKlB,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAmB5B,KAAK,CAAC,EAAE,YAAY,GAAG,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAEpE,mBAAmB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,oBAAoB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAOvC,iBAAiB,CAAC,EAAE;QAShB,aAAa,CAAC,EAAE,OAAO,CAAC;KAC3B,CAAC;IAMF,aAAa,CAAC,EAAE,aAAa,CAAC;IAQ9B,eAAe,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAC;IAM7C,GAAG,CAAC,EAAE;QAQF,MAAM,EAAE,MAAM,CAAC;QAQf,sBAAsB,CAAC,EAAE,OAAO,CAAC;QAUjC,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAM9B,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KAC3F,CAAC;IAEF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAgB5B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAShC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAoBhC,oBAAoB,CAAC,EAAE,CACnB,WAAW,EAAE,kBAAkB,EAC/B,IAAI,EAAE,YAAY,KACjB,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;IAoBtD,qBAAqB,CAAC,EAAE,CACpB,cAAc,EAAE,eAAe,EAC/B,OAAO,EAAE,cAAc,KACtB,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAAC;IAShD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAKzE,WAAW,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAK/F,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC1I;AAGD,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAA"}
|