@ackplus/nest-auth 2.7.6 → 2.8.1

package/dist/lib/core/services/auth-provider-registry.service.d.ts

@@ -1,3 +1,6 @@
+import { Repository } from 'typeorm';
+import { NestAuthUser } from '../../user/entities/user.entity';
+import { NestAuthIdentity } from '../../user/entities/identity.entity';
 import { BaseAuthProvider } from '../providers/base-auth.provider';
 import { EmailAuthProvider } from '../providers/email-auth.provider';
 import { PhoneAuthProvider } from '../providers/phone-auth.provider';
@@ -16,9 +19,11 @@ export declare class AuthProviderRegistryService {
     private readonly facebookAuthProvider;
     private readonly appleAuthProvider;
     private readonly githubAuthProvider;
+    private readonly userRepository;
+    private readonly authIdentityRepository;
     private providers;
     private options;
-    constructor(emailAuthProvider: EmailAuthProvider, phoneAuthProvider: PhoneAuthProvider, passwordlessAuthProvider: PasswordlessAuthProvider, jwtAuthProvider: JwtAuthProvider, googleAuthProvider: GoogleAuthProvider, facebookAuthProvider: FacebookAuthProvider, appleAuthProvider: AppleAuthProvider, githubAuthProvider: GitHubAuthProvider);
+    constructor(emailAuthProvider: EmailAuthProvider, phoneAuthProvider: PhoneAuthProvider, passwordlessAuthProvider: PasswordlessAuthProvider, jwtAuthProvider: JwtAuthProvider, googleAuthProvider: GoogleAuthProvider, facebookAuthProvider: FacebookAuthProvider, appleAuthProvider: AppleAuthProvider, githubAuthProvider: GitHubAuthProvider, userRepository: Repository<NestAuthUser>, authIdentityRepository: Repository<NestAuthIdentity>);
     registerDefaultProviders(): void;
     registerProvider(provider: BaseAuthProvider): void;
     getProvider(providerName: string): BaseAuthProvider | undefined;

package/dist/lib/core/services/auth-provider-registry.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-provider-registry.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/services/auth-provider-registry.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAGvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAEnF,qBACa,2BAA2B;IAKhC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAXvC,OAAO,CAAC,SAAS,CAA4C;IAC7D,OAAO,CAAC,OAAO,CAAqB;gBAGf,iBAAiB,EAAE,iBAAiB,EACpC,iBAAiB,EAAE,iBAAiB,EACpC,wBAAwB,EAAE,wBAAwB,EAClD,eAAe,EAAE,eAAe,EAChC,kBAAkB,EAAE,kBAAkB,EACtC,oBAAoB,EAAE,oBAAoB,EAC1C,iBAAiB,EAAE,iBAAiB,EACpC,kBAAkB,EAAE,kBAAkB;IAS3D,wBAAwB;IAqCxB,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAOlD,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAO/D,eAAe,IAAI,gBAAgB,EAAE;IAOrC,mBAAmB,IAAI,gBAAgB,EAAE;IASzC,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;CAG7C"}
+{"version":3,"file":"auth-provider-registry.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/services/auth-provider-registry.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAGvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAEnF,qBACa,2BAA2B;IAKhC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IAf3C,OAAO,CAAC,SAAS,CAA4C;IAC7D,OAAO,CAAC,OAAO,CAAqB;gBAGf,iBAAiB,EAAE,iBAAiB,EACpC,iBAAiB,EAAE,iBAAiB,EACpC,wBAAwB,EAAE,wBAAwB,EAClD,eAAe,EAAE,eAAe,EAChC,kBAAkB,EAAE,kBAAkB,EACtC,oBAAoB,EAAE,oBAAoB,EAC1C,iBAAiB,EAAE,iBAAiB,EACpC,kBAAkB,EAAE,kBAAkB,EAEtC,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,EAExC,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CAAC;IAQzE,wBAAwB;IA4CxB,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAOlD,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAO/D,eAAe,IAAI,gBAAgB,EAAE;IAOrC,mBAAmB,IAAI,gBAAgB,EAAE;IASzC,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;CAG7C"}

package/dist/lib/core/services/auth-provider-registry.service.js

@@ -8,9 +8,16 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthProviderRegistryService = void 0;
 const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const user_entity_1 = require("../../user/entities/user.entity");
+const identity_entity_1 = require("../../user/entities/identity.entity");
 const email_auth_provider_1 = require("../providers/email-auth.provider");
 const phone_auth_provider_1 = require("../providers/phone-auth.provider");
 const apple_auth_provider_1 = require("../providers/apple-auth.provider");
@@ -29,9 +36,11 @@ let AuthProviderRegistryService = class AuthProviderRegistryService {
     facebookAuthProvider;
     appleAuthProvider;
     githubAuthProvider;
+    userRepository;
+    authIdentityRepository;
     providers = new Map();
     options;
-    constructor(emailAuthProvider, phoneAuthProvider, passwordlessAuthProvider, jwtAuthProvider, googleAuthProvider, facebookAuthProvider, appleAuthProvider, githubAuthProvider) {
+    constructor(emailAuthProvider, phoneAuthProvider, passwordlessAuthProvider, jwtAuthProvider, googleAuthProvider, facebookAuthProvider, appleAuthProvider, githubAuthProvider, userRepository, authIdentityRepository) {
         this.emailAuthProvider = emailAuthProvider;
         this.phoneAuthProvider = phoneAuthProvider;
         this.passwordlessAuthProvider = passwordlessAuthProvider;
@@ -40,6 +49,8 @@ let AuthProviderRegistryService = class AuthProviderRegistryService {
         this.facebookAuthProvider = facebookAuthProvider;
         this.appleAuthProvider = appleAuthProvider;
         this.githubAuthProvider = githubAuthProvider;
+        this.userRepository = userRepository;
+        this.authIdentityRepository = authIdentityRepository;
         this.options = auth_config_service_1.AuthConfigService.getOptions();
         this.registerDefaultProviders();
     }
@@ -53,7 +64,7 @@ let AuthProviderRegistryService = class AuthProviderRegistryService {
         if (this.options.passwordless?.enabled) {
             this.registerProvider(this.passwordlessAuthProvider);
         }
-        if (this.options.session?.jwt) {
+        if (this.options.session?.jwt?.enableLoginProvider === true) {
             this.registerProvider(this.jwtAuthProvider);
         }
         if (this.options.google) {
@@ -70,6 +81,7 @@ let AuthProviderRegistryService = class AuthProviderRegistryService {
         }
         if (this.options.customAuthProviders && Array.isArray(this.options.customAuthProviders)) {
             for (const provider of this.options.customAuthProviders) {
+                provider.attachRepositories(this.userRepository, this.authIdentityRepository);
                 this.registerProvider(provider);
             }
         }
@@ -93,6 +105,8 @@ let AuthProviderRegistryService = class AuthProviderRegistryService {
 exports.AuthProviderRegistryService = AuthProviderRegistryService;
 exports.AuthProviderRegistryService = AuthProviderRegistryService = __decorate([
     (0, common_1.Injectable)(),
+    __param(8, (0, typeorm_1.InjectRepository)(user_entity_1.NestAuthUser)),
+    __param(9, (0, typeorm_1.InjectRepository)(identity_entity_1.NestAuthIdentity)),
     __metadata("design:paramtypes", [email_auth_provider_1.EmailAuthProvider,
         phone_auth_provider_1.PhoneAuthProvider,
         passwordless_auth_provider_1.PasswordlessAuthProvider,
@@ -100,6 +114,8 @@ exports.AuthProviderRegistryService = AuthProviderRegistryService = __decorate([
         google_auth_provider_1.GoogleAuthProvider,
         facebook_auth_provider_1.FacebookAuthProvider,
         apple_auth_provider_1.AppleAuthProvider,
-        github_auth_provider_1.GitHubAuthProvider])
+        github_auth_provider_1.GitHubAuthProvider,
+        typeorm_2.Repository,
+        typeorm_2.Repository])
 ], AuthProviderRegistryService);
 //# sourceMappingURL=auth-provider-registry.service.js.map

package/dist/lib/core/services/auth-provider-registry.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-provider-registry.service.js","sourceRoot":"","sources":["../../../../src/lib/core/services/auth-provider-registry.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAoD;AAEpD,0EAAqE;AACrE,0EAAqE;AACrE,0EAAqE;AACrE,4EAAuE;AACvE,sEAAiE;AACjE,gFAA2E;AAC3E,4EAAuE;AAEvE,+DAA0D;AAC1D,wFAAmF;AAG5E,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IAKf;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IAXb,SAAS,GAAkC,IAAI,GAAG,EAAE,CAAC;IACrD,OAAO,CAAqB;IAEpC,YACqB,iBAAoC,EACpC,iBAAoC,EACpC,wBAAkD,EAClD,eAAgC,EAChC,kBAAsC,EACtC,oBAA0C,EAC1C,iBAAoC,EACpC,kBAAsC;QAPtC,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,oBAAe,GAAf,eAAe,CAAiB;QAChC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QAIvD,IAAI,CAAC,OAAO,GAAG,uCAAiB,CAAC,UAAU,EAAE,CAAC;QAE9C,IAAI,CAAC,wBAAwB,EAAE,CAAC;IACpC,CAAC;IAED,wBAAwB;QACpB,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;YACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;YAC5B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACtB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACtB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnD,CAAC;QAGD,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACtF,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;gBACtD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC;QACL,CAAC;IACL,CAAC;IAKD,gBAAgB,CAAC,QAA0B;QACvC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAKD,WAAW,CAAC,YAAoB;QAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAKD,eAAe;QACX,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IAKD,mBAAmB;QACf,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAC5C,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAClD,CAAC;IACN,CAAC;IAKD,WAAW,CAAC,YAAoB;QAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;CACJ,CAAA;AA3FY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;qCAM+B,uCAAiB;QACjB,uCAAiB;QACV,qDAAwB;QACjC,mCAAe;QACZ,yCAAkB;QAChB,6CAAoB;QACvB,uCAAiB;QAChB,yCAAkB;GAZlD,2BAA2B,CA2FvC"}
+{"version":3,"file":"auth-provider-registry.service.js","sourceRoot":"","sources":["../../../../src/lib/core/services/auth-provider-registry.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,6CAAmD;AACnD,qCAAqC;AACrC,iEAA+D;AAC/D,yEAAuE;AAEvE,0EAAqE;AACrE,0EAAqE;AACrE,0EAAqE;AACrE,4EAAuE;AACvE,sEAAiE;AACjE,gFAA2E;AAC3E,4EAAuE;AAEvE,+DAA0D;AAC1D,wFAAmF;AAG5E,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IAKf;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IAEA;IAEA;IAfb,SAAS,GAAkC,IAAI,GAAG,EAAE,CAAC;IACrD,OAAO,CAAqB;IAEpC,YACqB,iBAAoC,EACpC,iBAAoC,EACpC,wBAAkD,EAClD,eAAgC,EAChC,kBAAsC,EACtC,oBAA0C,EAC1C,iBAAoC,EACpC,kBAAsC,EAEtC,cAAwC,EAExC,sBAAoD;QAXpD,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,oBAAe,GAAf,eAAe,CAAiB;QAChC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QAEtC,mBAAc,GAAd,cAAc,CAA0B;QAExC,2BAAsB,GAAtB,sBAAsB,CAA8B;QAGrE,IAAI,CAAC,OAAO,GAAG,uCAAiB,CAAC,UAAU,EAAE,CAAC;QAE9C,IAAI,CAAC,wBAAwB,EAAE,CAAC;IACpC,CAAC;IAED,wBAAwB;QACpB,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;YACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACzD,CAAC;QAID,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,mBAAmB,KAAK,IAAI,EAAE,CAAC;YAC1D,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACtB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACtB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnD,CAAC;QAMD,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACtF,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;gBACtD,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBAC9E,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC;QACL,CAAC;IACL,CAAC;IAKD,gBAAgB,CAAC,QAA0B;QACvC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAKD,WAAW,CAAC,YAAoB;QAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAKD,eAAe;QACX,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IAKD,mBAAmB;QACf,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAC5C,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAClD,CAAC;IACN,CAAC;IAKD,WAAW,CAAC,YAAoB;QAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;CACJ,CAAA;AArGY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;IAcJ,WAAA,IAAA,0BAAgB,EAAC,0BAAY,CAAC,CAAA;IAE9B,WAAA,IAAA,0BAAgB,EAAC,kCAAgB,CAAC,CAAA;qCAVC,uCAAiB;QACjB,uCAAiB;QACV,qDAAwB;QACjC,mCAAe;QACZ,yCAAkB;QAChB,6CAAoB;QACvB,uCAAiB;QAChB,yCAAkB;QAEtB,oBAAU;QAEF,oBAAU;GAhB9C,2BAA2B,CAqGvC"}

package/dist/lib/core/services/csrf.service.d.ts

@@ -0,0 +1,13 @@
+import { Request, Response } from 'express';
+import { CookieOptions } from '../../utils/cookie.helper';
+export declare class CsrfService {
+    private cfg;
+    isEnabled(): boolean;
+    cookieName(): string;
+    headerName(): string;
+    generateToken(): string;
+    issue(res: Response, baseOptions?: CookieOptions): string;
+    assertValidForCookieAuth(req: Request): void;
+    private requestOrigin;
+}
+//# sourceMappingURL=csrf.service.d.ts.map

package/dist/lib/core/services/csrf.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/services/csrf.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE5C,OAAO,EAAgB,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAkBxE,qBACa,WAAW;IACpB,OAAO,CAAC,GAAG;IAIX,SAAS,IAAI,OAAO;IAIpB,UAAU,IAAI,MAAM;IAIpB,UAAU,IAAI,MAAM;IAKpB,aAAa,IAAI,MAAM;IASvB,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,aAAa,GAAG,MAAM;IAazD,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI;IAgC5C,OAAO,CAAC,aAAa;CAcxB"}

package/dist/lib/core/services/csrf.service.js

@@ -0,0 +1,88 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CsrfService = void 0;
+const common_1 = require("@nestjs/common");
+const crypto_1 = require("crypto");
+const auth_config_service_1 = require("./auth-config.service");
+const cookie_helper_1 = require("../../utils/cookie.helper");
+const security_util_1 = require("../../utils/security.util");
+const auth_constants_1 = require("../../auth.constants");
+const SAFE_METHODS = new Set(['GET', 'HEAD', 'OPTIONS']);
+let CsrfService = class CsrfService {
+    cfg() {
+        return auth_config_service_1.AuthConfigService.getOptions().security?.csrf;
+    }
+    isEnabled() {
+        return this.cfg()?.enabled === true;
+    }
+    cookieName() {
+        return this.cfg()?.cookieName || auth_constants_1.CSRF_COOKIE_NAME;
+    }
+    headerName() {
+        return (this.cfg()?.headerName || 'x-csrf-token').toLowerCase();
+    }
+    generateToken() {
+        return (0, crypto_1.randomBytes)(32).toString('base64url');
+    }
+    issue(res, baseOptions) {
+        const token = this.generateToken();
+        cookie_helper_1.CookieHelper.set(res, this.cookieName(), token, {
+            ...baseOptions,
+            httpOnly: false,
+        });
+        return token;
+    }
+    assertValidForCookieAuth(req) {
+        if (!this.isEnabled())
+            return;
+        const method = (req.method || 'GET').toUpperCase();
+        if (SAFE_METHODS.has(method))
+            return;
+        const allowed = this.cfg()?.allowedOrigins;
+        if (Array.isArray(allowed) && allowed.length > 0) {
+            const origin = this.requestOrigin(req);
+            if (origin && !allowed.includes(origin)) {
+                throw new common_1.ForbiddenException({
+                    message: 'Cross-site request blocked (origin not allowed).',
+                    code: auth_constants_1.ERROR_CODES.CSRF_ORIGIN_REJECTED,
+                });
+            }
+        }
+        const cookieToken = cookie_helper_1.CookieHelper.get(req, this.cookieName());
+        const raw = req.headers[this.headerName()];
+        const headerToken = Array.isArray(raw) ? raw[0] : raw;
+        if (!cookieToken || !headerToken || !(0, security_util_1.compareKeys)(headerToken, cookieToken)) {
+            throw new common_1.ForbiddenException({
+                message: 'Invalid or missing CSRF token.',
+                code: auth_constants_1.ERROR_CODES.CSRF_TOKEN_INVALID,
+            });
+        }
+    }
+    requestOrigin(req) {
+        const origin = req.headers.origin;
+        if (typeof origin === 'string' && origin)
+            return origin;
+        const referer = req.headers.referer;
+        if (typeof referer === 'string' && referer) {
+            try {
+                const u = new URL(referer);
+                return `${u.protocol}//${u.host}`;
+            }
+            catch {
+                return undefined;
+            }
+        }
+        return undefined;
+    }
+};
+exports.CsrfService = CsrfService;
+exports.CsrfService = CsrfService = __decorate([
+    (0, common_1.Injectable)()
+], CsrfService);
+//# sourceMappingURL=csrf.service.js.map

package/dist/lib/core/services/csrf.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.service.js","sourceRoot":"","sources":["../../../../src/lib/core/services/csrf.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAgE;AAChE,mCAAqC;AAErC,+DAA0D;AAC1D,6DAAwE;AACxE,6DAAwD;AACxD,yDAAqE;AAErE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAelD,IAAM,WAAW,GAAjB,MAAM,WAAW;IACZ,GAAG;QACP,OAAO,uCAAiB,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC;IACzD,CAAC;IAED,SAAS;QACL,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,KAAK,IAAI,CAAC;IACxC,CAAC;IAED,UAAU;QACN,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,IAAI,iCAAgB,CAAC;IACtD,CAAC;IAED,UAAU;QACN,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,IAAI,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,CAAC;IAGD,aAAa;QACT,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAOD,KAAK,CAAC,GAAa,EAAE,WAA2B;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,4BAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE;YAC5C,GAAG,WAAW;YACd,QAAQ,EAAE,KAAK;SAClB,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACjB,CAAC;IAMD,wBAAwB,CAAC,GAAY;QACjC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAC9B,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO;QAMrC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,2BAAkB,CAAC;oBACzB,OAAO,EAAE,kDAAkD;oBAC3D,IAAI,EAAE,4BAAW,CAAC,oBAAoB;iBACzC,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAGD,MAAM,WAAW,GAAG,4BAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACtD,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,IAAI,CAAC,IAAA,2BAAW,EAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,2BAAkB,CAAC;gBACzB,OAAO,EAAE,gCAAgC;gBACzC,IAAI,EAAE,4BAAW,CAAC,kBAAkB;aACvC,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,GAAY;QAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QACxD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;QACpC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC;YACzC,IAAI,CAAC;gBACD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC3B,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO,SAAS,CAAC;YACrB,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;CACJ,CAAA;AAtFY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;GACA,WAAW,CAsFvB"}

package/dist/lib/core/services/jwt.service.d.ts

@@ -1,8 +1,7 @@
 import { IAuthModuleOptions } from '../interfaces/auth-module-options.interface';
 import { JWTTokenPayload } from '../interfaces/token-payload.interface';
 export declare class JwtService {
-    private options;
-    constructor();
+    private get options();
     generateAccessToken(payload: Partial<JWTTokenPayload>): Promise<string>;
     generateRefreshToken(payload: Partial<JWTTokenPayload>): Promise<string>;
     verifyToken(token: string): Promise<JWTTokenPayload>;

package/dist/lib/core/services/jwt.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/services/jwt.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAKxE,qBACa,UAAU;IAEnB,OAAO,CAAC,OAAO,CAAqB;;IAM9B,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBvE,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BxE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAkBpD,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC;QAC7D,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;KACxB,CAAC;IAYF,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAiB9E,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAQlD,SAAS,IAAI,kBAAkB;IAIzB,0BAA0B,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IA8BrI,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAiB9D"}
+{"version":3,"file":"jwt.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/services/jwt.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAKxE,qBACa,UAAU;IASnB,OAAO,KAAK,OAAO,GAElB;IAEK,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBvE,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BxE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAkBpD,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC;QAC7D,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;KACxB,CAAC;IAYF,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAiB9E,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAQlD,SAAS,IAAI,kBAAkB;IAIzB,0BAA0B,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IA8BrI,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAiB9D"}

package/dist/lib/core/services/jwt.service.js

@@ -38,9 +38,6 @@ var __importStar = (this && this.__importStar) || (function () {
         return result;
     };
 })();
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -52,9 +49,8 @@ const jwt = __importStar(require("jsonwebtoken"));
 const ms_1 = __importDefault(require("ms"));
 const auth_config_service_1 = require("./auth-config.service");
 let JwtService = class JwtService {
-    options;
-    constructor() {
-        this.options = auth_config_service_1.AuthConfigService.getOptions();
+    get options() {
+        return auth_config_service_1.AuthConfigService.getOptions();
     }
     async generateAccessToken(payload) {
         return new Promise((resolve, reject) => {
@@ -188,7 +184,6 @@ let JwtService = class JwtService {
 };
 exports.JwtService = JwtService;
 exports.JwtService = JwtService = __decorate([
-    (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [])
+    (0, common_1.Injectable)()
 ], JwtService);
 //# sourceMappingURL=jwt.service.js.map

package/dist/lib/core/services/jwt.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.service.js","sourceRoot":"","sources":["../../../../src/lib/core/services/jwt.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,mCAAoC;AACpC,kDAAoC;AAGpC,4CAAoB;AACpB,+DAA0D;AAInD,IAAM,UAAU,GAAhB,MAAM,UAAU;IAEX,OAAO,CAAqB;IAEpC;QACI,IAAI,CAAC,OAAO,GAAG,uCAAiB,CAAC,UAAU,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAiC;QACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;YACpD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,GAAG,CAAC,IAAI,CACJ;gBACI,GAAG,OAAO;gBACV,IAAI,EAAE,QAAQ;aACjB,EACD,SAAS,EACT;gBACI,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB;aACtD,EACD,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACX,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,OAAiC;QACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;YACpD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,GAAG,CAAC,IAAI,CACJ;gBACI,GAAG,OAAO;gBACV,IAAI,EAAE,SAAS;gBAGf,GAAG,EAAE,IAAA,mBAAU,GAAE;aACpB,EACD,SAAS,EACT;gBACI,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB;aACvD,EACD,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACX,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;YACpD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,GAAG,CAAC,MAAM,CACN,KAAK,EACL,SAAS,EACT,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,EACzB,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBACb,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,OAA0B,CAAC,CAAC;YAC7C,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAiC;QAIlD,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClD,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;YACjC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;SACrC,CAAC,CAAC;QAEH,OAAO;YACH,WAAW;YACX,YAAY;SACf,CAAC;IACN,CAAC;IAED,WAAW,CAAC,KAAa,EAAE,OAAiC;QACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;iBAC5C,CAAC;gBACF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;gBACpD,IAAI,CAAC,SAAS,EAAE,CAAC;oBACb,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;gBAC3D,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;oBACpH,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;wBAChB,OAAO,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC,CAAC,CAAC;YACP,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IAED,WAAW,CAAC,KAAa;QACrB,IAAI,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAoB,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,SAAS;QACL,OAAO,IAAI,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,OAAwF;QACrH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,2BAA2B,IAAI,IAAI,CAAC;YAKhF,MAAM,YAAY,GAAG,OAAO,YAAY,KAAK,QAAQ;gBACjD,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,IAAI,CAAC,KAAK,CAAE,IAAA,YAAE,EAAC,YAAY,CAAY,GAAG,IAAI,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;YACpD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,GAAG,CAAC,IAAI,CACJ;gBACI,GAAG,OAAO;gBACV,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,YAAY;gBACjD,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;aACrC,EACD,SAAS,EACT,EAAE,SAAS,EAAE,OAAO,EAAE,EACtB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACX,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,KAAa;QACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;YACpD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,GAAG,CAAC,MAAM,CACN,KAAK,EACL,SAAS,EACT,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,EACzB,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBACb,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;CACJ,CAAA;AAtKY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;;GACA,UAAU,CAsKtB"}
+{"version":3,"file":"jwt.service.js","sourceRoot":"","sources":["../../../../src/lib/core/services/jwt.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,mCAAoC;AACpC,kDAAoC;AAGpC,4CAAoB;AACpB,+DAA0D;AAInD,IAAM,UAAU,GAAhB,MAAM,UAAU;IASnB,IAAY,OAAO;QACf,OAAO,uCAAiB,CAAC,UAAU,EAAE,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAiC;QACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;YACpD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,GAAG,CAAC,IAAI,CACJ;gBACI,GAAG,OAAO;gBACV,IAAI,EAAE,QAAQ;aACjB,EACD,SAAS,EACT;gBACI,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB;aACtD,EACD,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACX,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,OAAiC;QACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;YACpD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,GAAG,CAAC,IAAI,CACJ;gBACI,GAAG,OAAO;gBACV,IAAI,EAAE,SAAS;gBAGf,GAAG,EAAE,IAAA,mBAAU,GAAE;aACpB,EACD,SAAS,EACT;gBACI,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB;aACvD,EACD,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACX,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;YACpD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,GAAG,CAAC,MAAM,CACN,KAAK,EACL,SAAS,EACT,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,EACzB,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBACb,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,OAA0B,CAAC,CAAC;YAC7C,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAiC;QAIlD,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClD,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;YACjC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;SACrC,CAAC,CAAC;QAEH,OAAO;YACH,WAAW;YACX,YAAY;SACf,CAAC;IACN,CAAC;IAED,WAAW,CAAC,KAAa,EAAE,OAAiC;QACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;iBAC5C,CAAC;gBACF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;gBACpD,IAAI,CAAC,SAAS,EAAE,CAAC;oBACb,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;gBAC3D,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;oBACpH,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;wBAChB,OAAO,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC,CAAC,CAAC;YACP,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IAED,WAAW,CAAC,KAAa;QACrB,IAAI,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAoB,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,SAAS;QACL,OAAO,IAAI,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,OAAwF;QACrH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,2BAA2B,IAAI,IAAI,CAAC;YAKhF,MAAM,YAAY,GAAG,OAAO,YAAY,KAAK,QAAQ;gBACjD,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,IAAI,CAAC,KAAK,CAAE,IAAA,YAAE,EAAC,YAAY,CAAY,GAAG,IAAI,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;YACpD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,GAAG,CAAC,IAAI,CACJ;gBACI,GAAG,OAAO;gBACV,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,YAAY;gBACjD,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;aACrC,EACD,SAAS,EACT,EAAE,SAAS,EAAE,OAAO,EAAE,EACtB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACX,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,KAAa;QACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;YACpD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,GAAG,CAAC,MAAM,CACN,KAAK,EACL,SAAS,EACT,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,EACzB,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBACb,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;CACJ,CAAA;AA3KY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;GACA,UAAU,CA2KtB"}

package/dist/lib/core/services/lockout.service.d.ts

@@ -0,0 +1,24 @@
+import { LoginFailedEvent } from '../../auth/events/login-failed.event';
+import { UserLoggedInEvent } from '../../auth/events/user-logged-in.event';
+export declare class LockoutService {
+    private readonly store;
+    private sweepCounter;
+    private cfg;
+    isEnabled(): boolean;
+    private toMs;
+    private windowMs;
+    private lockMs;
+    private maxFailures;
+    private key;
+    check(identifier: string | undefined, ip?: string): {
+        locked: boolean;
+        retryAfter: number;
+    };
+    onLoginFailed(event: LoginFailedEvent): void;
+    onLoggedIn(event: UserLoggedInEvent): void;
+    private recordFailure;
+    clearIdentifier(identifier: string): void;
+    private resetForIdentifier;
+    private maybeSweep;
+}
+//# sourceMappingURL=lockout.service.d.ts.map

package/dist/lib/core/services/lockout.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockout.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/services/lockout.service.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAiB3E,qBACa,cAAc;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,OAAO,CAAC,YAAY,CAAK;IAEzB,OAAO,CAAC,GAAG;IAIX,SAAS,IAAI,OAAO;IAIpB,OAAO,CAAC,IAAI;IASZ,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,GAAG;IAKX,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE;IAW3F,aAAa,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAS5C,UAAU,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI;IAO1C,OAAO,CAAC,aAAa;IAqBrB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAKzC,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,UAAU;CAMrB"}

package/dist/lib/core/services/lockout.service.js

@@ -0,0 +1,129 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LockoutService = void 0;
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const ms_1 = __importDefault(require("ms"));
+const auth_config_service_1 = require("./auth-config.service");
+const auth_constants_1 = require("../../auth.constants");
+const login_failed_event_1 = require("../../auth/events/login-failed.event");
+const user_logged_in_event_1 = require("../../auth/events/user-logged-in.event");
+let LockoutService = class LockoutService {
+    store = new Map();
+    sweepCounter = 0;
+    cfg() {
+        return auth_config_service_1.AuthConfigService.getOptions().security?.lockout;
+    }
+    isEnabled() {
+        return this.cfg()?.enabled === true;
+    }
+    toMs(v, fallback) {
+        if (typeof v === 'number' && v > 0)
+            return v;
+        if (typeof v === 'string') {
+            const n = (0, ms_1.default)(v);
+            if (typeof n === 'number' && n > 0)
+                return n;
+        }
+        return (0, ms_1.default)(fallback);
+    }
+    windowMs() { return this.toMs(this.cfg()?.window, '15m'); }
+    lockMs() { return this.toMs(this.cfg()?.lockDuration, '15m'); }
+    maxFailures() {
+        const m = this.cfg()?.maxFailedAttempts;
+        return m && m > 0 ? m : 10;
+    }
+    key(identifier, ip) {
+        return `${identifier.trim().toLowerCase()}:${ip ?? '-'}`;
+    }
+    check(identifier, ip) {
+        if (!this.isEnabled() || !identifier)
+            return { locked: false, retryAfter: 0 };
+        const s = this.store.get(this.key(identifier, ip));
+        const now = Date.now();
+        if (s && s.lockedUntil > now) {
+            return { locked: true, retryAfter: Math.max(1, Math.ceil((s.lockedUntil - now) / 1000)) };
+        }
+        return { locked: false, retryAfter: 0 };
+    }
+    onLoginFailed(event) {
+        if (!this.isEnabled())
+            return;
+        const p = event?.payload;
+        if (!p?.identifier || p.reasonCode !== auth_constants_1.ERROR_CODES.INVALID_CREDENTIALS)
+            return;
+        this.recordFailure(p.identifier, p.ip);
+    }
+    onLoggedIn(event) {
+        if (!this.isEnabled())
+            return;
+        const user = event?.payload?.user;
+        if (user?.email)
+            this.resetForIdentifier(user.email);
+        if (user?.phone)
+            this.resetForIdentifier(user.phone);
+    }
+    recordFailure(identifier, ip) {
+        const now = Date.now();
+        const key = this.key(identifier, ip);
+        let s = this.store.get(key);
+        if (!s || s.windowResetAt <= now) {
+            s = { failures: 0, windowResetAt: now + this.windowMs(), lockedUntil: 0 };
+        }
+        s.failures += 1;
+        if (s.failures >= this.maxFailures()) {
+            s.lockedUntil = now + this.lockMs();
+            s.failures = 0;
+            s.windowResetAt = now + this.windowMs();
+        }
+        this.store.set(key, s);
+        this.maybeSweep(now);
+    }
+    clearIdentifier(identifier) {
+        this.resetForIdentifier(identifier);
+    }
+    resetForIdentifier(identifier) {
+        const prefix = `${identifier.trim().toLowerCase()}:`;
+        for (const k of this.store.keys()) {
+            if (k.startsWith(prefix))
+                this.store.delete(k);
+        }
+    }
+    maybeSweep(now) {
+        if (++this.sweepCounter % 512 !== 0)
+            return;
+        for (const [k, v] of this.store) {
+            if (v.lockedUntil <= now && v.windowResetAt <= now)
+                this.store.delete(k);
+        }
+    }
+};
+exports.LockoutService = LockoutService;
+__decorate([
+    (0, event_emitter_1.OnEvent)(auth_constants_1.NestAuthEvents.LOGIN_FAILED),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [login_failed_event_1.LoginFailedEvent]),
+    __metadata("design:returntype", void 0)
+], LockoutService.prototype, "onLoginFailed", null);
+__decorate([
+    (0, event_emitter_1.OnEvent)(auth_constants_1.NestAuthEvents.LOGGED_IN),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [user_logged_in_event_1.UserLoggedInEvent]),
+    __metadata("design:returntype", void 0)
+], LockoutService.prototype, "onLoggedIn", null);
+exports.LockoutService = LockoutService = __decorate([
+    (0, common_1.Injectable)()
+], LockoutService);
+//# sourceMappingURL=lockout.service.js.map

package/dist/lib/core/services/lockout.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockout.service.js","sourceRoot":"","sources":["../../../../src/lib/core/services/lockout.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,yDAAgD;AAChD,4CAAoB;AACpB,+DAA0D;AAC1D,yDAAmE;AACnE,6EAAwE;AACxE,iFAA2E;AAkBpE,IAAM,cAAc,GAApB,MAAM,cAAc;IACN,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC9C,YAAY,GAAG,CAAC,CAAC;IAEjB,GAAG;QACP,OAAO,uCAAiB,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC5D,CAAC;IAED,SAAS;QACL,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,KAAK,IAAI,CAAC;IACxC,CAAC;IAEO,IAAI,CAAC,CAA8B,EAAE,QAAgB;QACzD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,IAAA,YAAE,EAAC,CAAC,CAAC,CAAC;YAChB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,IAAA,YAAE,EAAC,QAAQ,CAAW,CAAC;IAClC,CAAC;IAEO,QAAQ,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACvE,WAAW;QACf,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,iBAAiB,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/B,CAAC;IAEO,GAAG,CAAC,UAAkB,EAAE,EAAW;QACvC,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC;IAC7D,CAAC;IAGD,KAAK,CAAC,UAA8B,EAAE,EAAW;QAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAC9E,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;YAC3B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;QAC9F,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;IAGD,aAAa,CAAC,KAAuB;QACjC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAC9B,MAAM,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;QAEzB,IAAI,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC,UAAU,KAAK,4BAAW,CAAC,mBAAmB;YAAE,OAAO;QAC/E,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;IAGD,UAAU,CAAC,KAAwB;QAC/B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAC9B,MAAM,IAAI,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC;QAClC,IAAI,IAAI,EAAE,KAAK;YAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,IAAI,EAAE,KAAK;YAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IAEO,aAAa,CAAC,UAAkB,EAAE,EAAW;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,IAAI,GAAG,EAAE,CAAC;YAC/B,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;QACD,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACnC,CAAC,CAAC,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACpC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;YACf,CAAC,CAAC,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAMD,eAAe,CAAC,UAAkB;QAC9B,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAGO,kBAAkB,CAAC,UAAkB;QACzC,MAAM,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,GAAW;QAC1B,IAAI,EAAE,IAAI,CAAC,YAAY,GAAG,GAAG,KAAK,CAAC;YAAE,OAAO;QAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,WAAW,IAAI,GAAG,IAAI,CAAC,CAAC,aAAa,IAAI,GAAG;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;IACL,CAAC;CACJ,CAAA;AAnGY,wCAAc;AA4CvB;IADC,IAAA,uBAAO,EAAC,+BAAc,CAAC,YAAY,CAAC;;qCAChB,qCAAgB;;mDAMpC;AAGD;IADC,IAAA,uBAAO,EAAC,+BAAc,CAAC,SAAS,CAAC;;qCAChB,wCAAiB;;gDAKlC;yBA1DQ,cAAc;IAD1B,IAAA,mBAAU,GAAE;GACA,cAAc,CAmG1B"}

package/dist/lib/core/services/rate-limit.service.d.ts

@@ -0,0 +1,22 @@
+import { Request, Response } from 'express';
+import { IRateLimitStore, RateLimitBucket, RateLimitBucketConfig, RateLimitHit } from '../interfaces/rate-limit.interface';
+export declare const DEFAULT_RATE_LIMIT_BUCKETS: Record<RateLimitBucket, RateLimitBucketConfig>;
+export declare class MemoryRateLimitStore implements IRateLimitStore {
+    private readonly map;
+    private sweepCounter;
+    increment(key: string, windowMs: number): RateLimitHit;
+    private maybeSweep;
+}
+export declare class RateLimitService {
+    private readonly memoryStore;
+    private cfg;
+    isEnabled(): boolean;
+    private store;
+    private bucketConfig;
+    enforce(bucket: RateLimitBucket, req: Request, res?: Response): Promise<void>;
+    enforceAlways(bucket: RateLimitBucket, req: Request, res?: Response): Promise<void>;
+    private enforceBucket;
+    private clientIp;
+    private identifier;
+}
+//# sourceMappingURL=rate-limit.service.d.ts.map

package/dist/lib/core/services/rate-limit.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/core/services/rate-limit.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE5C,OAAO,EACH,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,YAAY,EACf,MAAM,oCAAoC,CAAC;AAI5C,eAAO,MAAM,0BAA0B,EAAE,MAAM,CAAC,eAAe,EAAE,qBAAqB,CAWrF,CAAC;AAOF,qBAAa,oBAAqB,YAAW,eAAe;IACxD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmC;IACvD,OAAO,CAAC,YAAY,CAAK;IAEzB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY;IAatD,OAAO,CAAC,UAAU;CAQrB;AAED,qBACa,gBAAgB;IACzB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAE1D,OAAO,CAAC,GAAG;IAIX,SAAS,IAAI,OAAO;IAIpB,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,YAAY;IAQd,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAW7E,aAAa,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;YAI3E,aAAa;IAkC3B,OAAO,CAAC,QAAQ;IAKhB,OAAO,CAAC,UAAU;CAUrB"}

package/dist/lib/core/services/rate-limit.service.js

@@ -0,0 +1,116 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RateLimitService = exports.MemoryRateLimitStore = exports.DEFAULT_RATE_LIMIT_BUCKETS = void 0;
+const common_1 = require("@nestjs/common");
+const auth_config_service_1 = require("./auth-config.service");
+const auth_constants_1 = require("../../auth.constants");
+exports.DEFAULT_RATE_LIMIT_BUCKETS = {
+    login: { windowMs: 60_000, max: 5 },
+    signup: { windowMs: 60_000, max: 5 },
+    forgotPassword: { windowMs: 60_000, max: 3 },
+    verifyOtp: { windowMs: 60_000, max: 5 },
+    passwordlessSend: { windowMs: 60_000, max: 3 },
+    mfaVerify: { windowMs: 60_000, max: 5 },
+    adminLogin: { windowMs: 60_000, max: 5 },
+    adminReset: { windowMs: 15 * 60_000, max: 5 },
+};
+class MemoryRateLimitStore {
+    map = new Map();
+    sweepCounter = 0;
+    increment(key, windowMs) {
+        const now = Date.now();
+        const existing = this.map.get(key);
+        if (!existing || existing.resetAt <= now) {
+            const hit = { count: 1, resetAt: now + windowMs };
+            this.map.set(key, hit);
+            this.maybeSweep(now);
+            return hit;
+        }
+        existing.count += 1;
+        return existing;
+    }
+    maybeSweep(now) {
+        if (++this.sweepCounter % 512 !== 0)
+            return;
+        for (const [k, v] of this.map) {
+            if (v.resetAt <= now)
+                this.map.delete(k);
+        }
+    }
+}
+exports.MemoryRateLimitStore = MemoryRateLimitStore;
+let RateLimitService = class RateLimitService {
+    memoryStore = new MemoryRateLimitStore();
+    cfg() {
+        return auth_config_service_1.AuthConfigService.getOptions().security?.rateLimit;
+    }
+    isEnabled() {
+        return this.cfg()?.enabled === true;
+    }
+    store() {
+        return this.cfg()?.store ?? this.memoryStore;
+    }
+    bucketConfig(bucket) {
+        return { ...exports.DEFAULT_RATE_LIMIT_BUCKETS[bucket], ...this.cfg()?.buckets?.[bucket] };
+    }
+    async enforce(bucket, req, res) {
+        return this.enforceBucket(bucket, req, res, false);
+    }
+    async enforceAlways(bucket, req, res) {
+        return this.enforceBucket(bucket, req, res, true);
+    }
+    async enforceBucket(bucket, req, res, force) {
+        if (!force && !this.isEnabled())
+            return;
+        const { windowMs, max } = this.bucketConfig(bucket);
+        if (!Number.isFinite(max) || max <= 0)
+            return;
+        const keyBy = this.cfg()?.keyBy ?? 'both';
+        const ip = this.clientIp(req);
+        const identifier = this.identifier(req);
+        const keys = [];
+        if (keyBy === 'ip' || keyBy === 'both')
+            keys.push(`${bucket}:ip:${ip}`);
+        if ((keyBy === 'identifier' || keyBy === 'both') && identifier)
+            keys.push(`${bucket}:id:${identifier}`);
+        if (keys.length === 0)
+            keys.push(`${bucket}:ip:${ip}`);
+        for (const key of keys) {
+            const hit = await this.store().increment(key, windowMs);
+            if (hit.count > max) {
+                const retryAfter = Math.max(1, Math.ceil((hit.resetAt - Date.now()) / 1000));
+                if (res && typeof res.setHeader === 'function') {
+                    res.setHeader('Retry-After', String(retryAfter));
+                }
+                throw new common_1.HttpException({
+                    message: 'Too many requests. Please try again later.',
+                    code: auth_constants_1.ERROR_CODES.RATE_LIMITED,
+                    retryAfter,
+                }, common_1.HttpStatus.TOO_MANY_REQUESTS);
+            }
+        }
+    }
+    clientIp(req) {
+        return (req.ip || (req.socket && req.socket.remoteAddress) || 'unknown');
+    }
+    identifier(req) {
+        const b = req.body ?? {};
+        const raw = b.credentials?.email ??
+            b.credentials?.phone ??
+            b.email ??
+            b.phone ??
+            b.identifier;
+        return typeof raw === 'string' && raw.trim() ? raw.trim().toLowerCase() : undefined;
+    }
+};
+exports.RateLimitService = RateLimitService;
+exports.RateLimitService = RateLimitService = __decorate([
+    (0, common_1.Injectable)()
+], RateLimitService);
+//# sourceMappingURL=rate-limit.service.js.map

package/dist/lib/core/services/rate-limit.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.service.js","sourceRoot":"","sources":["../../../../src/lib/core/services/rate-limit.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAuE;AAEvE,+DAA0D;AAO1D,yDAAmD;AAGtC,QAAA,0BAA0B,GAAmD;IACtF,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE;IACnC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE;IACpC,cAAc,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE;IAC5C,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE;IACvC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE;IAC9C,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE;IACvC,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE;IAGxC,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE;CAChD,CAAC;AAOF,MAAa,oBAAoB;IACZ,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,YAAY,GAAG,CAAC,CAAC;IAEzB,SAAS,CAAC,GAAW,EAAE,QAAgB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;YACvC,MAAM,GAAG,GAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC;YAChE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACrB,OAAO,GAAG,CAAC;QACf,CAAC;QACD,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACpB,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEO,UAAU,CAAC,GAAW;QAG1B,IAAI,EAAE,IAAI,CAAC,YAAY,GAAG,GAAG,KAAK,CAAC;YAAE,OAAO;QAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG;gBAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;CACJ;AAzBD,oDAyBC;AAGM,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IACR,WAAW,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAElD,GAAG;QACP,OAAO,uCAAiB,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC9D,CAAC;IAED,SAAS;QACL,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,KAAK,IAAI,CAAC;IACxC,CAAC;IAEO,KAAK;QACT,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC;IACjD,CAAC;IAEO,YAAY,CAAC,MAAuB;QACxC,OAAO,EAAE,GAAG,kCAA0B,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IACvF,CAAC;IAMD,KAAK,CAAC,OAAO,CAAC,MAAuB,EAAE,GAAY,EAAE,GAAc;QAC/D,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IASD,KAAK,CAAC,aAAa,CAAC,MAAuB,EAAE,GAAY,EAAE,GAAc;QACrE,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAAuB,EAAE,GAAY,EAAE,GAAyB,EAAE,KAAc;QACxG,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAExC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO;QAE9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,IAAI,MAAM,CAAC;QAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAExC,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,EAAE,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,UAAU,EAAE,CAAC,CAAC;QACxG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,EAAE,EAAE,CAAC,CAAC;QAEvD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACxD,IAAI,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC;gBAClB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;gBAC7E,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;oBAC7C,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM,IAAI,sBAAa,CACnB;oBACI,OAAO,EAAE,4CAA4C;oBACrD,IAAI,EAAE,4BAAW,CAAC,YAAY;oBAC9B,UAAU;iBACb,EACD,mBAAU,CAAC,iBAAiB,CAC/B,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,GAAY;QACzB,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,SAAS,CAAW,CAAC;IACvF,CAAC;IAGO,UAAU,CAAC,GAAY;QAC3B,MAAM,CAAC,GAAS,GAAW,CAAC,IAAI,IAAI,EAAE,CAAC;QACvC,MAAM,GAAG,GACL,CAAC,CAAC,WAAW,EAAE,KAAK;YACpB,CAAC,CAAC,WAAW,EAAE,KAAK;YACpB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,UAAU,CAAC;QACjB,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,CAAC;CACJ,CAAA;AAvFY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;GACA,gBAAgB,CAuF5B"}