@acorex-platform/framework-server 0.0.10 → 0.0.15

package/security/src/lib/auth/auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAKwB;AACxB,iEAAwF;AACxF,6EAAkG;AAClG,iEAAwE;AACxE,yCAAuC;AACvC,0DAAoC;AAapC,gCAAgC;AAEhC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAC/D,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AACtC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAGhC,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAGtB,YAA6B,aAA6C;QAA7C,kBAAa,GAAb,aAAa,CAAgC;QAFzD,WAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAEsB,CAAC;IAE9E,KAAK,CAAC,MAAM,CAAC,GAAqB;QAChC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACjD,MAAM,IAAI,4BAAmB,CAC3B,8BAA8B,GAAG,CAAC,QAAQ,EAAE,CAC7C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,8BAA8B,CAAC,CAAC;QAClE,CAAC;QAED,oFAAoF;QACpF,wEAAwE;QACxE,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,YAAoB;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC;SACxC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;YACpD,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,aAAa,EAAE,OAAO,CAAC,GAAG;YAC1B,MAAM;YACN,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,kBAA0B,EAC1B,GAA4B;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC;QAC/D,MAAM,aAAa,GACjB,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC;QAE1D,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;YAC3C,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC;SAC3D,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;YACpD,QAAQ;YACR,aAAa;YACb,MAAM;YACN,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAuB,CAAC;YAC1E,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC9C,MAAM,IAAI,8BAAqB,CAAC,sBAAsB,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CACxB,KAAK,EACL,IAAI,CAAC,SAAS,EAAE,CACM,CAAC;YACzB,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC/C,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,+BAA+B;IAEvB,KAAK,CAAC,qBAAqB,CACjC,QAAgB,EAChB,QAAgB;QAEhB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,QAAQ,KAAK,QAAQ;YACvB,CAAC,CAAC,YAAY,KAAK,oBAAoB;YACvC,CAAC,IAAA,iBAAK,EAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,oBAAoB,CAAC,CACnE,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,MAAM,IAAA,qBAAc,EAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,MAAc;QAEd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACpE,OAAQ,MAAuC,IAAI,IAAI,CAAC;IAC1D,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAC3C,WAAW,EACX,IAAA,2CAAgC,EAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAC1D,CAAC;QACF,MAAM,KAAK,GAAG,IAAA,eAAG,EAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAmC,CAAC;QACzE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,CAAC;IAEO,UAAU,CAAC,IAAkC;QACnD,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;YAC9B,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;SACpD,CAAC;IACJ,CAAC;IAED,YAAY;IAEZ,kCAAkC;IAE1B,kBAAkB,CACxB,IAAiB,EACjB,OAKC;QAED,MAAM,aAAa,GAAuB;YACxC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ;YACd,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;QAEF,MAAM,cAAc,GAAwB;YAC1C,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,IAAI,EAAE,SAAS;YACf,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;QAEF,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;YAC5D,SAAS,EAAE,IAAI,CAAC,cAAc,EAAkC;SACjE,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;YAC9D,SAAS,EAAE,IAAI,CAAC,eAAe,EAAkC;SAClE,CAAC,CAAC;QAEH,OAAO;YACL,WAAW;YACX,YAAY;YACZ,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE;YAChC,IAAI;YACJ,MAAM,EACJ,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACxE,WAAW,EACT,OAAO,CAAC,WAAW;gBACnB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACjE,CAAC;IACJ,CAAC;IAEO,SAAS;QACf,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC;QACjD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2DAA2D,CAC5D,CAAC;YACF,OAAO,iCAAiC,CAAC;QAC3C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,cAAc;QACpB,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IAC9D,CAAC;IAEO,eAAe;QACrB,OAAO,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,QAAiB,EACjB,OAAuB;QAEvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAC7C,aAAa,EACb,QAAQ,CACT,CAAmC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,KAAK;gBACpC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;gBAC5D,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE9D,OAAO;YACL,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM,CACV,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC,CACpE;YACD,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,aAAsB,EACtB,OAA4B;QAE5B,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACpD,OAAO;gBACL,EAAE,EAAE,aAAa;gBACjB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAClD,kBAAkB,EAClB,aAAa,CACd,CAAmC,CAAC;QACrC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,KAAK;gBACpC,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;gBACjE,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GACR,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,MAAM,SAAS,GACb,IAAI,KAAK,WAAW;YAClB,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,OAAO,EAAE,IAAI;gBACb,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI;oBAC1B,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;oBAC7B,CAAC,CAAC,SAAS,CAAC;gBACd,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;gBACxC,cAAc,CAAC;QAErB,OAAO;YACL,EAAE,EAAE,aAAa;YACjB,IAAI,EAAE,SAAS;YACf,KAAK;SACN,CAAC;IACJ,CAAC;CAGF,CAAA;AA3SY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;6CAIiC,qCAA8B;GAH/D,WAAW,CA2SvB;AAED,YAAY"}
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAKwB;AACxB,iEAAwF;AACxF,iEAAsE;AACtE,yCAAiC;AACjC,mCAAoC;AACpC,+CAAwD;AACxD,qFAA+E;AAC/E,qEAAgE;AAEhE,mDAA+C;AAW/C,gCAAgC;AAEhC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAC/D,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AACtC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAGhC,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAGtB,YACmB,aAA6C,EAC7C,YAA0B,EAC1B,gBAA6C,EAC7C,cAAoC;QAHpC,kBAAa,GAAb,aAAa,CAAgC;QAC7C,iBAAY,GAAZ,YAAY,CAAc;QAC1B,qBAAgB,GAAhB,gBAAgB,CAA6B;QAC7C,mBAAc,GAAd,cAAc,CAAsB;QANtC,WAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAOpD,CAAC;IAEJ,KAAK,CAAC,cAAc,CAClB,IAAkC,EAClC,IAAqB;QAErB,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,6BAA6B,CAAC,QAAiB;QAC7C,MAAM,QAAQ,GAAG,QAAQ,IAAI,qCAAuB,CAAC;QACrD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAuB,EAAE,IAAqB;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,qCAAuB,CAAC;QACzD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,EAAE,GAAG,IAAA,mBAAU,GAAE,CAAC;QACxB,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC;QACtD,MAAM,YAAY,GAAG,MAAM,IAAA,mBAAY,EAAC,QAAQ,CAAC,CAAC;QAElD,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,WAAW,EAAE;YAC9C,EAAE;YACF,QAAQ;YACR,WAAW;YACX,QAAQ,EAAE,YAAY;YACtB,YAAY,EAAE,oBAAoB;YAClC,WAAW,EAAE,oBAAoB;SAClC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,YAAoB,EAAE,IAAqB;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAE/D,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC;SACxC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,aAAa,EAAE,OAAO,CAAC,GAAG;YAC1B,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;SACvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAA4B;QACvC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,kBAA0B,EAC1B,GAA4B,EAC5B,IAAqB;QAErB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC;QAC/D,MAAM,uBAAuB,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;QAC/E,MAAM,4BAA4B,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,IAAI,CAAC;QAE9F,IAAI,aAAiC,CAAC;QACtC,IAAI,4BAA4B,EAAE,CAAC;YACjC,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,CAAC;aAAM,IAAI,uBAAuB,EAAE,CAAC;YACnC,gFAAgF;YAChF,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC;QAC9B,CAAC;QAED,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;YAC3C,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC;SAC3D,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ;YACR,aAAa;YACb,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;SACvB,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;IACjD,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,oBAAoB,EAAE,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,IAAiB,EACjB,IAAqB,EACrB,OAMC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAEjF,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;YACtC,IAAI;YACJ,eAAe,EAAE,cAAc,CAAC,GAAG;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,cAAc,CAAC,GAAG;YACjD,IAAI;YACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,UAAU,CAAC,IAAkC;QACnD,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;YAC9B,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;SACpD,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,QAAiB,EACjB,OAAuB;QAEvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YAC3B,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACpE,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAGhE,CAAC;QACT,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,KAAK;gBACpC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;gBAC5D,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9D,OAAO;YACL,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC,CAAC;YACjF,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,aAAsB,EACtB,OAA4B;QAE5B,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACzE,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAClD,kBAAkB,EAClB,aAAa,CACd,CAAmC,CAAC;QACrC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,KAAK;gBACpC,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;gBACjE,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,SAAS,GACb,IAAI,KAAK,WAAW;YAClB,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,OAAO,EAAE,IAAI;gBACb,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvE,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;gBACxC,cAAc,CAAC;QAErB,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;CACF,CAAA;AAjQY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;6CAKuB,qCAA8B;QAC/B,4BAAY;QACR,4DAA2B;QAC7B,6CAAoB;GAP5C,WAAW,CAiQvB;AAED,YAAY"}

package/security/src/lib/auth/auth.types.d.ts

@@ -3,6 +3,12 @@ export interface SignInRequestDto {
     username: string;
     password: string;
 }
+export interface RegisterRequestDto {
+    strategy?: string;
+    username: string;
+    password: string;
+    displayName?: string;
+}
 export interface UpdateSessionRequestDto {
     tenantId?: string;
     applicationId?: string;
@@ -18,7 +24,7 @@ export interface UpdateSessionRequestDto {
     };
 }
 export interface RefreshTokenRequestDto {
-    refreshToken: string;
+    refreshToken?: string;
 }
 export interface AuthUserDto {
     id: string;
@@ -39,6 +45,7 @@ export interface AuthTokenResponseDto {
     accessToken: string;
     refreshToken: string;
     expiresIn: string;
+    sessionId?: string;
     user: AuthUserDto;
     tenant?: AuthTenantDto | null;
     application?: AuthApplicationDto | null;
@@ -48,11 +55,14 @@ export interface AccessTokenPayload {
     username: string;
     tid?: string;
     aid?: string;
+    sid?: string;
     type: 'access';
 }
 export interface RefreshTokenPayload {
     sub: string;
     type: 'refresh';
+    jti: string;
+    sid: string;
     tid?: string;
     aid?: string;
 }
@@ -67,3 +77,4 @@ export interface SecurityManagementUserRecord {
         tenantId?: string | null;
     };
 }
+//# sourceMappingURL=auth.types.d.ts.map

package/security/src/lib/auth/auth.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.types.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,WAAW,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7D;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC9C"}

package/security/src/lib/auth/auth.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":";AAAA,8CAA8C;;AAuE9C,YAAY"}
+{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":";AAAA,8CAA8C;;AAkF9C,YAAY"}

package/security/src/lib/auth/device-session.service.d.ts

@@ -0,0 +1,19 @@
+import { EntityStorageMiddlewareService } from '@acorex-platform/framework-server/core';
+import type { AuthRequestMeta } from './request-meta.util';
+import type { AuthUserDto, SecurityManagementUserRecord } from './auth.types';
+export interface CreateDeviceSessionInput {
+    user: AuthUserDto | SecurityManagementUserRecord;
+    authorizationId: string;
+    sessionId: string;
+    meta: AuthRequestMeta;
+    tenantId?: string;
+    applicationId?: string;
+}
+export declare class DeviceSessionService {
+    private readonly entityStorage;
+    private readonly logger;
+    constructor(entityStorage: EntityStorageMiddlewareService);
+    createSession(input: CreateDeviceSessionInput): Promise<string>;
+    revokeByAuthorizationId(authorizationId: string): Promise<void>;
+}
+//# sourceMappingURL=device-session.service.d.ts.map

package/security/src/lib/auth/device-session.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-session.service.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/device-session.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAExF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAM9E,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,WAAW,GAAG,4BAA4B,CAAC;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBACa,oBAAoB;IAGnB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAF1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;gBAEnC,aAAa,EAAE,8BAA8B;IAEpE,aAAa,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC;IAyC/D,uBAAuB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CA8BtE"}

package/security/src/lib/auth/device-session.service.js

@@ -0,0 +1,88 @@
+"use strict";
+var DeviceSessionService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeviceSessionService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const core_1 = require("@acorex-platform/framework-server/core");
+const crypto_1 = require("crypto");
+const request_meta_util_1 = require("./request-meta.util");
+//#region ---- Device session service ----
+const DEVICE_SESSION_ENTITY = 'SecurityManagement.DeviceSessions';
+let DeviceSessionService = DeviceSessionService_1 = class DeviceSessionService {
+    constructor(entityStorage) {
+        this.entityStorage = entityStorage;
+        this.logger = new common_1.Logger(DeviceSessionService_1.name);
+    }
+    async createSession(input) {
+        const userId = input.user.id;
+        const username = 'name' in input.user && 'title' in input.user
+            ? input.user.name
+            : input.user.username ?? userId;
+        const parsed = (0, request_meta_util_1.parseUserAgent)(input.meta.userAgent);
+        const tenantId = input.tenantId ?? 'default';
+        const applicationId = input.applicationId ?? 'default';
+        const now = new Date();
+        const record = {
+            id: (0, crypto_1.randomUUID)(),
+            clientName: input.meta.clientName,
+            ipAddress: input.meta.ipAddress,
+            userAgent: input.meta.userAgent,
+            authorizationId: input.authorizationId,
+            status: 'active',
+            userId,
+            user: { id: userId, name: username },
+            applicationId,
+            application: { id: applicationId, name: applicationId },
+            tenantId,
+            tenant: { id: tenantId, name: tenantId },
+            isActiveSession: true,
+            deviceName: parsed.deviceName,
+            operatingSystem: parsed.operatingSystem,
+            browser: parsed.browser,
+            location: 'Unknown',
+            lastLoginDate: now,
+            config: { sessionId: input.sessionId },
+        };
+        try {
+            return await this.entityStorage.insertOne(DEVICE_SESSION_ENTITY, record);
+        }
+        catch (error) {
+            this.logger.warn(`Failed to create device session: ${String(error)}`);
+            return record.id;
+        }
+    }
+    async revokeByAuthorizationId(authorizationId) {
+        try {
+            const result = await this.entityStorage.query(DEVICE_SESSION_ENTITY, {
+                skip: 0,
+                take: 5,
+                filter: {
+                    logic: 'and',
+                    filters: [
+                        {
+                            field: 'authorizationId',
+                            operator: { type: 'equal' },
+                            value: authorizationId,
+                        },
+                    ],
+                },
+            });
+            const items = (result.items ?? []);
+            await Promise.all(items.map((item) => this.entityStorage.updateOne(DEVICE_SESSION_ENTITY, item.id, {
+                status: 'revoked',
+                isActiveSession: false,
+            })));
+        }
+        catch (error) {
+            this.logger.warn(`Failed to revoke device session: ${String(error)}`);
+        }
+    }
+};
+exports.DeviceSessionService = DeviceSessionService;
+exports.DeviceSessionService = DeviceSessionService = DeviceSessionService_1 = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [core_1.EntityStorageMiddlewareService])
+], DeviceSessionService);
+//#endregion
+//# sourceMappingURL=device-session.service.js.map

package/security/src/lib/auth/device-session.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-session.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/device-session.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAAoD;AACpD,iEAAwF;AACxF,mCAAoC;AAEpC,2DAAqD;AAGrD,0CAA0C;AAE1C,MAAM,qBAAqB,GAAG,mCAAmC,CAAC;AAY3D,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAG/B,YAA6B,aAA6C;QAA7C,kBAAa,GAAb,aAAa,CAAgC;QAFzD,WAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAEa,CAAC;IAE9E,KAAK,CAAC,aAAa,CAAC,KAA+B;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,QAAQ,GACZ,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,CAAC,IAAI;YAC3C,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI;YACjB,CAAC,CAAE,KAAK,CAAC,IAAqC,CAAC,QAAQ,IAAI,MAAM,CAAC;QACtE,MAAM,MAAM,GAAG,IAAA,kCAAc,EAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC;QAC7C,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,SAAS,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,MAAM,GAAG;YACb,EAAE,EAAE,IAAA,mBAAU,GAAE;YAChB,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;YACjC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;YAC/B,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;YAC/B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,MAAM,EAAE,QAAQ;YAChB,MAAM;YACN,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;YACpC,aAAa;YACb,WAAW,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE;YACvD,QAAQ;YACR,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxC,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,SAAS;YACnB,aAAa,EAAE,GAAG;YAClB,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;SACvC,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtE,OAAO,MAAM,CAAC,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,eAAuB;QACnD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBACnE,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE;oBACN,KAAK,EAAE,KAAK;oBACZ,OAAO,EAAE;wBACP;4BACE,KAAK,EAAE,iBAAiB;4BACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;4BAC3B,KAAK,EAAE,eAAe;yBACvB;qBACF;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAA0B,CAAC;YAC5D,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACjB,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,EAAE,EAAE;gBAC3D,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE,KAAK;aACvB,CAAC,CACH,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;CACF,CAAA;AA5EY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;6CAIiC,qCAA8B;GAH/D,oBAAoB,CA4EhC;AAED,YAAY"}

package/security/src/lib/auth/jwt-auth.guard.d.ts

@@ -1,14 +1,18 @@
 import { CanActivate, ExecutionContext } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
 import { AuthService } from './auth.service';
+import { MachineTokenService } from './machine-token.service';
+import { TokenResolverService } from './token-resolver.service';
 /**
- * Opt-in guard for routes that require a valid Bearer access token.
- * Apply with `@UseGuards(JwtAuthGuard)` — not registered globally so public APIs stay open.
+ * Opt-in guard for routes that require a valid access token.
+ * Supports legacy Bearer header and optional access-token cookie.
  */
 export declare class JwtAuthGuard implements CanActivate {
     private readonly reflector;
     private readonly authService;
-    constructor(reflector: Reflector, authService: AuthService);
+    private readonly machineTokenService;
+    private readonly tokenResolver;
+    constructor(reflector: Reflector, authService: AuthService, machineTokenService: MachineTokenService, tokenResolver: TokenResolverService);
     canActivate(context: ExecutionContext): boolean;
-    private extractBearerToken;
 }
+//# sourceMappingURL=jwt-auth.guard.d.ts.map

package/security/src/lib/auth/jwt-auth.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-auth.guard.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/jwt-auth.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAGjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAYhE;;;GAGG;AACH,qBACa,YAAa,YAAW,WAAW;IAE5C,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAHb,SAAS,EAAE,SAAS,EACpB,WAAW,EAAE,WAAW,EACxB,mBAAmB,EAAE,mBAAmB,EACxC,aAAa,EAAE,oBAAoB;IAGtD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CA0ChD"}

package/security/src/lib/auth/jwt-auth.guard.js

@@ -5,17 +5,20 @@ const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
 const core_1 = require("@nestjs/core");
 const auth_service_1 = require("./auth.service");
+const machine_token_service_1 = require("./machine-token.service");
 const public_decorator_1 = require("./public.decorator");
+const token_resolver_service_1 = require("./token-resolver.service");
 const current_session_decorator_1 = require("../session/current-session.decorator");
-//#region ---- JWT auth guard ----
 /**
- * Opt-in guard for routes that require a valid Bearer access token.
- * Apply with `@UseGuards(JwtAuthGuard)` — not registered globally so public APIs stay open.
+ * Opt-in guard for routes that require a valid access token.
+ * Supports legacy Bearer header and optional access-token cookie.
  */
 let JwtAuthGuard = class JwtAuthGuard {
-    constructor(reflector, authService) {
+    constructor(reflector, authService, machineTokenService, tokenResolver) {
         this.reflector = reflector;
         this.authService = authService;
+        this.machineTokenService = machineTokenService;
+        this.tokenResolver = tokenResolver;
     }
     canActivate(context) {
         const isPublic = this.reflector.getAllAndOverride(public_decorator_1.IS_PUBLIC_KEY, [
@@ -26,13 +29,18 @@ let JwtAuthGuard = class JwtAuthGuard {
             return true;
         }
         const request = context.switchToHttp().getRequest();
-        const token = this.extractBearerToken(request.headers?.authorization);
-        if (!token) {
+        const machineSession = this.machineTokenService.resolveSession(request.headers);
+        if (machineSession) {
+            request[current_session_decorator_1.CURRENT_SESSION_KEY] = machineSession;
+            return true;
+        }
+        const resolved = this.tokenResolver.resolveAccessToken(request.headers, request.cookies);
+        if (!resolved) {
             throw new common_1.UnauthorizedException('Bearer access token is required');
         }
         let payload;
         try {
-            payload = this.authService.verifyAccessToken(token);
+            payload = this.authService.verifyAccessToken(resolved.token);
         }
         catch (error) {
             if (error instanceof common_1.UnauthorizedException) {
@@ -40,29 +48,22 @@ let JwtAuthGuard = class JwtAuthGuard {
             }
             throw new common_1.UnauthorizedException('Invalid or expired access token');
         }
-        const session = {
+        request[current_session_decorator_1.CURRENT_SESSION_KEY] = {
             userId: payload.sub,
             username: payload.username,
             tenantId: payload.tid,
             applicationId: payload.aid,
         };
-        request[current_session_decorator_1.CURRENT_SESSION_KEY] = session;
         return true;
     }
-    extractBearerToken(authorization) {
-        const header = Array.isArray(authorization) ? authorization[0] : authorization;
-        if (!header?.startsWith('Bearer ')) {
-            return null;
-        }
-        const token = header.slice('Bearer '.length).trim();
-        return token.length > 0 ? token : null;
-    }
 };
 exports.JwtAuthGuard = JwtAuthGuard;
 exports.JwtAuthGuard = JwtAuthGuard = tslib_1.__decorate([
     (0, common_1.Injectable)(),
     tslib_1.__metadata("design:paramtypes", [core_1.Reflector,
-        auth_service_1.AuthService])
+        auth_service_1.AuthService,
+        machine_token_service_1.MachineTokenService,
+        token_resolver_service_1.TokenResolverService])
 ], JwtAuthGuard);
 //#endregion
 //# sourceMappingURL=jwt-auth.guard.js.map

package/security/src/lib/auth/jwt-auth.guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-auth.guard.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/jwt-auth.guard.ts"],"names":[],"mappings":";;;;AAAA,2CAKwB;AACxB,uCAAyC;AACzC,iDAA6C;AAC7C,yDAAmD;AACnD,oFAA2E;AAG3E,kCAAkC;AAElC;;;GAGG;AAEI,IAAM,YAAY,GAAlB,MAAM,YAAY;IACvB,YACmB,SAAoB,EACpB,WAAwB;QADxB,cAAS,GAAT,SAAS,CAAW;QACpB,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAEJ,WAAW,CAAC,OAAyB;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,gCAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAG7C,CAAC;QAEL,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAA0B;YACrC,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,aAAa,EAAE,OAAO,CAAC,GAAG;SAC3B,CAAC;QAEF,OAAO,CAAC,+CAAmB,CAAC,GAAG,OAAO,CAAC;QAEvC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,kBAAkB,CAAC,aAAiC;QAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QAC/E,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;CACF,CAAA;AAxDY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;6CAGmB,gBAAS;QACP,0BAAW;GAHhC,YAAY,CAwDxB;AAED,YAAY"}
+{"version":3,"file":"jwt-auth.guard.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/jwt-auth.guard.ts"],"names":[],"mappings":";;;;AAAA,2CAKwB;AACxB,uCAAyC;AAEzC,iDAA6C;AAC7C,mEAA8D;AAC9D,yDAAmD;AACnD,qEAAgE;AAChE,oFAA2E;AAW3E;;;GAGG;AAEI,IAAM,YAAY,GAAlB,MAAM,YAAY;IACvB,YACmB,SAAoB,EACpB,WAAwB,EACxB,mBAAwC,EACxC,aAAmC;QAHnC,cAAS,GAAT,SAAS,CAAW;QACpB,gBAAW,GAAX,WAAW,CAAa;QACxB,wBAAmB,GAAnB,mBAAmB,CAAqB;QACxC,kBAAa,GAAb,aAAa,CAAsB;IACnD,CAAC;IAEJ,WAAW,CAAC,OAAyB;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,gCAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAsB,CAAC;QAExE,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChF,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,+CAAmB,CAAC,GAAG,cAAc,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACzF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,CAAC,+CAAmB,CAAC,GAAG;YAC7B,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,aAAa,EAAE,OAAO,CAAC,GAAG;SAC3B,CAAC;QAEF,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAlDY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;6CAGmB,gBAAS;QACP,0BAAW;QACH,2CAAmB;QACzB,6CAAoB;GAL3C,YAAY,CAkDxB;AAED,YAAY"}

package/security/src/lib/auth/login-attempt.service.d.ts

@@ -0,0 +1,21 @@
+import { AuthLocalCredentialsService } from './auth-local-credentials.service';
+export interface LoginAttemptFailureResult {
+    failures: number;
+    remainingAttempts: number;
+    requiresCaptcha: boolean;
+    locked: boolean;
+    lockedUntil?: string;
+}
+export declare class LoginAttemptService {
+    private readonly credentials;
+    private readonly logger;
+    private readonly attempts;
+    constructor(credentials: AuthLocalCredentialsService);
+    buildAttemptKey(strategy: string, username: string): string;
+    assertNotLocked(strategy: string, username: string): Promise<void>;
+    recordSuccess(strategy: string, username: string): Promise<void>;
+    recordFailure(strategy: string, username: string): Promise<never>;
+    authenticateLocal(strategy: string, username: string, password: string): Promise<import("./auth.types").SecurityManagementUserRecord>;
+    strategyName(): string;
+}
+//# sourceMappingURL=login-attempt.service.d.ts.map

package/security/src/lib/auth/login-attempt.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-attempt.service.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/login-attempt.service.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAW/E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBACa,mBAAmB;IAIlB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAHxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;gBAE/B,WAAW,EAAE,2BAA2B;IAErE,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;IAIrD,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BlE,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUhE,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAwCjE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAsB5E,YAAY,IAAI,MAAM;CAGvB"}

package/security/src/lib/auth/login-attempt.service.js

@@ -0,0 +1,111 @@
+"use strict";
+var LoginAttemptService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoginAttemptService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const auth_config_1 = require("./auth.config");
+const auth_local_credentials_service_1 = require("./auth-local-credentials.service");
+let LoginAttemptService = LoginAttemptService_1 = class LoginAttemptService {
+    constructor(credentials) {
+        this.credentials = credentials;
+        this.logger = new common_1.Logger(LoginAttemptService_1.name);
+        this.attempts = new Map();
+    }
+    buildAttemptKey(strategy, username) {
+        return `${strategy}:${username.trim().toLowerCase()}`;
+    }
+    async assertNotLocked(strategy, username) {
+        const key = this.buildAttemptKey(strategy, username);
+        const state = this.attempts.get(key);
+        if (!state?.lockedUntil) {
+            return;
+        }
+        if (state.lockedUntil.getTime() > Date.now()) {
+            throw new common_1.HttpException({
+                statusCode: 401,
+                message: `Account is temporarily locked. Try again after ${state.lockedUntil.toISOString()}.`,
+                error: 'AccountLocked',
+                lockedUntil: state.lockedUntil.toISOString(),
+                requiresCaptcha: true,
+            }, 401);
+        }
+        this.attempts.delete(key);
+        const user = await this.credentials.findUserByUsername(username);
+        if (user?.accessState === 'blocked') {
+            await this.credentials.restoreUserAccess(user.id);
+        }
+    }
+    async recordSuccess(strategy, username) {
+        const key = this.buildAttemptKey(strategy, username);
+        this.attempts.delete(key);
+        const user = await this.credentials.findUserByUsername(username);
+        if (user?.accessState === 'blocked') {
+            await this.credentials.restoreUserAccess(user.id);
+        }
+    }
+    async recordFailure(strategy, username) {
+        const key = this.buildAttemptKey(strategy, username);
+        const previous = this.attempts.get(key);
+        const failures = (previous?.failures ?? 0) + 1;
+        const maxAttempts = (0, auth_config_1.AUTH_MAX_LOGIN_ATTEMPTS)();
+        const locked = failures >= maxAttempts;
+        const state = {
+            failures,
+            lastAttemptAt: new Date(),
+            strategy,
+            ...(locked
+                ? { lockedUntil: new Date(Date.now() + (0, auth_config_1.AUTH_LOCKOUT_DURATION_MINUTES)() * 60_000) }
+                : {}),
+        };
+        this.attempts.set(key, state);
+        if (locked) {
+            const user = await this.credentials.findUserByUsername(username);
+            if (user) {
+                await this.credentials.blockUserAccess(user.id);
+            }
+            this.logger.warn(`Account locked after ${failures} failed attempts for ${username}`);
+        }
+        throw new common_1.UnauthorizedException({
+            statusCode: 401,
+            message: locked
+                ? `Too many failed login attempts. Account locked for ${(0, auth_config_1.AUTH_LOCKOUT_DURATION_MINUTES)()} minutes.`
+                : 'Invalid username or password',
+            error: locked ? 'AccountLocked' : 'InvalidCredentials',
+            failures,
+            remainingAttempts: Math.max(0, maxAttempts - failures),
+            requiresCaptcha: failures >= (0, auth_config_1.AUTH_CAPTCHA_ATTEMPT_THRESHOLD)(),
+            locked,
+            lockedUntil: state.lockedUntil?.toISOString(),
+        });
+    }
+    async authenticateLocal(strategy, username, password) {
+        await this.assertNotLocked(strategy, username);
+        try {
+            const user = await this.credentials.validate(username, password);
+            await this.recordSuccess(strategy, username);
+            return user;
+        }
+        catch (error) {
+            if (error instanceof common_1.UnauthorizedException) {
+                const response = error.getResponse();
+                if (typeof response === 'object' &&
+                    response !== null &&
+                    response['error'] === 'InvalidCredentials') {
+                    await this.recordFailure(strategy, username);
+                }
+            }
+            throw error;
+        }
+    }
+    strategyName() {
+        return auth_config_1.AUTH_STRATEGY_USER_PASS;
+    }
+};
+exports.LoginAttemptService = LoginAttemptService;
+exports.LoginAttemptService = LoginAttemptService = LoginAttemptService_1 = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [auth_local_credentials_service_1.AuthLocalCredentialsService])
+], LoginAttemptService);
+//#endregion
+//# sourceMappingURL=login-attempt.service.js.map

package/security/src/lib/auth/login-attempt.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-attempt.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/login-attempt.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAKwB;AACxB,+CAKuB;AACvB,qFAA+E;AAoBxE,IAAM,mBAAmB,2BAAzB,MAAM,mBAAmB;IAI9B,YAA6B,WAAwC;QAAxC,gBAAW,GAAX,WAAW,CAA6B;QAHpD,WAAM,GAAG,IAAI,eAAM,CAAC,qBAAmB,CAAC,IAAI,CAAC,CAAC;QAC9C,aAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEY,CAAC;IAEzE,eAAe,CAAC,QAAgB,EAAE,QAAgB;QAChD,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,QAAgB;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,sBAAa,CACrB;gBACE,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,kDAAkD,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG;gBAC7F,KAAK,EAAE,eAAe;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE;gBAC5C,eAAe,EAAE,IAAI;aACtB,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,QAAgB;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,QAAgB;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAA,qCAAuB,GAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,QAAQ,IAAI,WAAW,CAAC;QAEvC,MAAM,KAAK,GAAiB;YAC1B,QAAQ;YACR,aAAa,EAAE,IAAI,IAAI,EAAE;YACzB,QAAQ;YACR,GAAG,CAAC,MAAM;gBACR,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAA,2CAA6B,GAAE,GAAG,MAAM,CAAC,EAAE;gBAClF,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAE9B,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACjE,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,QAAQ,wBAAwB,QAAQ,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,IAAI,8BAAqB,CAAC;YAC9B,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,MAAM;gBACb,CAAC,CAAC,sDAAsD,IAAA,2CAA6B,GAAE,WAAW;gBAClG,CAAC,CAAC,8BAA8B;YAClC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB;YACtD,QAAQ;YACR,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;YACtD,eAAe,EAAE,QAAQ,IAAI,IAAA,4CAA8B,GAAE;YAC7D,MAAM;YACN,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAAgB,EAAE,QAAgB,EAAE,QAAgB;QAC1E,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACjE,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAAqB,EAAE,CAAC;gBAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;gBACrC,IACE,OAAO,QAAQ,KAAK,QAAQ;oBAC5B,QAAQ,KAAK,IAAI;oBAChB,QAAoC,CAAC,OAAO,CAAC,KAAK,oBAAoB,EACvE,CAAC;oBACD,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,YAAY;QACV,OAAO,qCAAuB,CAAC;IACjC,CAAC;CACF,CAAA;AAhHY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;6CAK+B,4DAA2B;GAJ1D,mBAAmB,CAgH/B;AAED,YAAY"}

package/security/src/lib/auth/machine-token.service.d.ts

@@ -0,0 +1,13 @@
+import type { BackendRequestSession } from '../session/backend-session.types';
+export declare class MachineTokenService {
+    private readonly logger;
+    private readonly token;
+    private readonly session;
+    constructor();
+    isEnabled(): boolean;
+    resolveSession(headers?: Record<string, string | string[] | undefined>): BackendRequestSession | null;
+    private readConfiguredToken;
+    private extractToken;
+    private headerValue;
+}
+//# sourceMappingURL=machine-token.service.d.ts.map

package/security/src/lib/auth/machine-token.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-token.service.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/machine-token.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAW9E,qBACa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;;IA0BhD,SAAS,IAAI,OAAO;IAIpB,cAAc,CACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACtD,qBAAqB,GAAG,IAAI;IAa/B,OAAO,CAAC,mBAAmB;IAK3B,OAAO,CAAC,YAAY;IA8BpB,OAAO,CAAC,WAAW;CAOpB"}

package/security/src/lib/auth/machine-token.service.js

@@ -0,0 +1,85 @@
+"use strict";
+var MachineTokenService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MachineTokenService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+//#region ---- Machine token auth ----
+/** super-root — platform operator used for MCP / automation. */
+const DEFAULT_MACHINE_USER_ID = 'f0000001-0000-4000-a000-000000000003';
+const DEFAULT_MACHINE_USERNAME = 'super-root';
+const DEFAULT_MACHINE_TENANT_ID = 'f0000002-0000-4000-a000-000000000001';
+/** Platform Console application (seed: application-tree.data.ts). */
+const DEFAULT_MACHINE_APPLICATION_ID = '00000000-0000-0000-0000-000000000004';
+let MachineTokenService = MachineTokenService_1 = class MachineTokenService {
+    constructor() {
+        this.logger = new common_1.Logger(MachineTokenService_1.name);
+        this.token = this.readConfiguredToken();
+        this.session = {
+            userId: process.env['ACOREX_MACHINE_TOKEN_USER_ID']?.trim() ||
+                DEFAULT_MACHINE_USER_ID,
+            username: process.env['ACOREX_MACHINE_TOKEN_USERNAME']?.trim() ||
+                DEFAULT_MACHINE_USERNAME,
+            tenantId: process.env['ACOREX_MACHINE_TOKEN_TENANT_ID']?.trim() ||
+                DEFAULT_MACHINE_TENANT_ID,
+            applicationId: process.env['ACOREX_MACHINE_TOKEN_APPLICATION_ID']?.trim() ||
+                DEFAULT_MACHINE_APPLICATION_ID,
+        };
+        if (this.token) {
+            this.logger.log(`Machine token authentication is enabled (user=${this.session.username}, tenant=${this.session.tenantId}, application=${this.session.applicationId})`);
+        }
+    }
+    isEnabled() {
+        return this.token != null;
+    }
+    resolveSession(headers) {
+        if (!this.token) {
+            return null;
+        }
+        const candidate = this.extractToken(headers);
+        if (!candidate || candidate !== this.token) {
+            return null;
+        }
+        return { ...this.session };
+    }
+    readConfiguredToken() {
+        const token = process.env['ACOREX_MACHINE_TOKEN']?.trim();
+        return token && token.length > 0 ? token : null;
+    }
+    extractToken(headers) {
+        if (!headers) {
+            return null;
+        }
+        const machineHeader = this.headerValue(headers['x-machine-token']);
+        if (machineHeader) {
+            return machineHeader;
+        }
+        const authorization = this.headerValue(headers['authorization']);
+        if (!authorization) {
+            return null;
+        }
+        if (authorization.startsWith('Machine ')) {
+            const token = authorization.slice('Machine '.length).trim();
+            return token.length > 0 ? token : null;
+        }
+        if (authorization.startsWith('Bearer ')) {
+            const token = authorization.slice('Bearer '.length).trim();
+            return token.length > 0 ? token : null;
+        }
+        return null;
+    }
+    headerValue(value) {
+        const header = Array.isArray(value) ? value[0] : value;
+        if (!header?.trim()) {
+            return null;
+        }
+        return header.trim();
+    }
+};
+exports.MachineTokenService = MachineTokenService;
+exports.MachineTokenService = MachineTokenService = MachineTokenService_1 = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [])
+], MachineTokenService);
+//#endregion
+//# sourceMappingURL=machine-token.service.js.map

package/security/src/lib/auth/machine-token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-token.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/machine-token.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAAoD;AAGpD,sCAAsC;AAEtC,gEAAgE;AAChE,MAAM,uBAAuB,GAAG,sCAAsC,CAAC;AACvE,MAAM,wBAAwB,GAAG,YAAY,CAAC;AAC9C,MAAM,yBAAyB,GAAG,sCAAsC,CAAC;AACzE,qEAAqE;AACrE,MAAM,8BAA8B,GAAG,sCAAsC,CAAC;AAGvE,IAAM,mBAAmB,2BAAzB,MAAM,mBAAmB;IAK9B;QAJiB,WAAM,GAAG,IAAI,eAAM,CAAC,qBAAmB,CAAC,IAAI,CAAC,CAAC;QAK7D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG;YACb,MAAM,EACJ,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,IAAI,EAAE;gBACnD,uBAAuB;YACzB,QAAQ,EACN,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,EAAE,IAAI,EAAE;gBACpD,wBAAwB;YAC1B,QAAQ,EACN,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,EAAE,IAAI,EAAE;gBACrD,yBAAyB;YAC3B,aAAa,EACX,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE,IAAI,EAAE;gBAC1D,8BAA8B;SACjC,CAAC;QAEF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,iDAAiD,IAAI,CAAC,OAAO,CAAC,QAAQ,YAAY,IAAI,CAAC,OAAO,CAAC,QAAQ,iBAAiB,IAAI,CAAC,OAAO,CAAC,aAAa,GAAG,CACtJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;IAC5B,CAAC;IAED,cAAc,CACZ,OAAuD;QAEvD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;IAEO,mBAAmB;QACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC;QAC1D,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAEO,YAAY,CAClB,OAAuD;QAEvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACnE,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,aAAa,CAAC;QACvB,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,CAAC;QAED,IAAI,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,WAAW,CAAC,KAAyB;QAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;CACF,CAAA;AA1FY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;;GACA,mBAAmB,CA0F/B;AAED,YAAY"}

package/security/src/lib/auth/public.decorator.d.ts

@@ -1,3 +1,4 @@
 export declare const IS_PUBLIC_KEY = "isPublic";
 /** Skips JWT authentication for this route or controller. */
 export declare const Public: () => import("@nestjs/common").CustomDecorator<string>;
+//# sourceMappingURL=public.decorator.d.ts.map