@acorex-platform/framework-server 0.0.15 → 0.0.20

package/security/src/lib/auth/auth.config.js

@@ -1,30 +1,11 @@
 "use strict";
 //#region ---- Auth configuration ----
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AUTH_REFRESH_COOKIE_PATH = exports.AUTH_COOKIE_SAME_SITE = exports.AUTH_COOKIE_SECURE = exports.AUTH_CAPTCHA_ATTEMPT_THRESHOLD = exports.AUTH_LOCKOUT_DURATION_MINUTES = exports.AUTH_MAX_LOGIN_ATTEMPTS = exports.AUTH_STRATEGY_USER_PASS = exports.AUTH_COOKIE_ACCESS_TOKEN = exports.AUTH_COOKIE_REFRESH_TOKEN = void 0;
+exports.AUTH_REFRESH_COOKIE_PATH = exports.AUTH_COOKIE_SAME_SITE = exports.AUTH_COOKIE_SECURE = exports.AUTH_STRATEGY_USER_PASS = exports.AUTH_COOKIE_ACCESS_TOKEN = exports.AUTH_COOKIE_REFRESH_TOKEN = void 0;
 exports.AUTH_COOKIE_REFRESH_TOKEN = 'acx_refresh_token';
-/** Optional short-lived access token cookie for legacy cookie-based guards. */
+/** HttpOnly access token cookie (primary SPA credential). */
 exports.AUTH_COOKIE_ACCESS_TOKEN = 'acx_access_token';
 exports.AUTH_STRATEGY_USER_PASS = 'user-pass';
-const AUTH_MAX_LOGIN_ATTEMPTS = () => {
-    const raw = process.env['AUTH_MAX_LOGIN_ATTEMPTS']?.trim();
-    const parsed = raw ? Number(raw) : 5;
-    return Number.isFinite(parsed) && parsed >= 1 ? parsed : 5;
-};
-exports.AUTH_MAX_LOGIN_ATTEMPTS = AUTH_MAX_LOGIN_ATTEMPTS;
-const AUTH_LOCKOUT_DURATION_MINUTES = () => {
-    const raw = process.env['AUTH_LOCKOUT_DURATION_MINUTES']?.trim();
-    const parsed = raw ? Number(raw) : 15;
-    return Number.isFinite(parsed) && parsed >= 1 ? parsed : 15;
-};
-exports.AUTH_LOCKOUT_DURATION_MINUTES = AUTH_LOCKOUT_DURATION_MINUTES;
-/** Failed attempts before the API signals that a login challenge may be required. */
-const AUTH_CAPTCHA_ATTEMPT_THRESHOLD = () => {
-    const raw = process.env['AUTH_CAPTCHA_ATTEMPT_THRESHOLD']?.trim();
-    const parsed = raw ? Number(raw) : 3;
-    return Number.isFinite(parsed) && parsed >= 1 ? parsed : 3;
-};
-exports.AUTH_CAPTCHA_ATTEMPT_THRESHOLD = AUTH_CAPTCHA_ATTEMPT_THRESHOLD;
 const AUTH_COOKIE_SECURE = () => process.env['NODE_ENV'] === 'production' || process.env['AUTH_COOKIE_SECURE'] === 'true';
 exports.AUTH_COOKIE_SECURE = AUTH_COOKIE_SECURE;
 const AUTH_COOKIE_SAME_SITE = () => {
@@ -35,7 +16,8 @@ const AUTH_COOKIE_SAME_SITE = () => {
     return 'lax';
 };
 exports.AUTH_COOKIE_SAME_SITE = AUTH_COOKIE_SAME_SITE;
-const AUTH_REFRESH_COOKIE_PATH = () => process.env['AUTH_REFRESH_COOKIE_PATH']?.trim() || '/api/v1/auth';
+/** Path scoped so refresh cookies are sent to all `/api` routes (incl. runtime). */
+const AUTH_REFRESH_COOKIE_PATH = () => process.env['AUTH_REFRESH_COOKIE_PATH']?.trim() || '/api';
 exports.AUTH_REFRESH_COOKIE_PATH = AUTH_REFRESH_COOKIE_PATH;
 //#endregion
 //# sourceMappingURL=auth.config.js.map

package/security/src/lib/auth/auth.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.config.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.config.ts"],"names":[],"mappings":";AAAA,sCAAsC;;;AAEzB,QAAA,yBAAyB,GAAG,mBAAmB,CAAC;AAE7D,+EAA+E;AAClE,QAAA,wBAAwB,GAAG,kBAAkB,CAAC;AAE9C,QAAA,uBAAuB,GAAG,WAAW,CAAC;AAE5C,MAAM,uBAAuB,GAAG,GAAW,EAAE;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC;AAJW,QAAA,uBAAuB,2BAIlC;AAEK,MAAM,6BAA6B,GAAG,GAAW,EAAE;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,EAAE,IAAI,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC,CAAC;AAJW,QAAA,6BAA6B,iCAIxC;AAEF,qFAAqF;AAC9E,MAAM,8BAA8B,GAAG,GAAW,EAAE;IACzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,EAAE,IAAI,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC;AAJW,QAAA,8BAA8B,kCAIzC;AAEK,MAAM,kBAAkB,GAAG,GAAY,EAAE,CAC9C,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,MAAM,CAAC;AAD9E,QAAA,kBAAkB,sBAC4D;AAEpF,MAAM,qBAAqB,GAAG,GAA8B,EAAE;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzE,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AANW,QAAA,qBAAqB,yBAMhC;AAEK,MAAM,wBAAwB,GAAG,GAAW,EAAE,CACnD,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,IAAI,cAAc,CAAC;AADvD,QAAA,wBAAwB,4BAC+B;AAEpE,YAAY"}
+{"version":3,"file":"auth.config.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.config.ts"],"names":[],"mappings":";AAAA,sCAAsC;;;AAEzB,QAAA,yBAAyB,GAAG,mBAAmB,CAAC;AAE7D,6DAA6D;AAChD,QAAA,wBAAwB,GAAG,kBAAkB,CAAC;AAE9C,QAAA,uBAAuB,GAAG,WAAW,CAAC;AAE5C,MAAM,kBAAkB,GAAG,GAAY,EAAE,CAC9C,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,MAAM,CAAC;AAD9E,QAAA,kBAAkB,sBAC4D;AAEpF,MAAM,qBAAqB,GAAG,GAA8B,EAAE;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzE,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AANW,QAAA,qBAAqB,yBAMhC;AAEF,oFAAoF;AAC7E,MAAM,wBAAwB,GAAG,GAAW,EAAE,CACnD,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC;AAD/C,QAAA,wBAAwB,4BACuB;AAE5D,YAAY"}

package/security/src/lib/auth/auth.events.d.ts

@@ -0,0 +1,7 @@
+export declare const AUTH_LOGOUT_EVENT = "auth.logout";
+export interface AuthLogoutEventPayload {
+    userId: string;
+    tenantId?: string;
+    at: string;
+}
+//# sourceMappingURL=auth.events.d.ts.map

package/security/src/lib/auth/auth.events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.events.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.events.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,iBAAiB,gBAAgB,CAAC;AAE/C,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;CACZ"}

package/security/src/lib/auth/auth.events.js

@@ -0,0 +1,7 @@
+"use strict";
+//#region ----- Auth lifecycle events -----
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTH_LOGOUT_EVENT = void 0;
+exports.AUTH_LOGOUT_EVENT = 'auth.logout';
+//#endregion
+//# sourceMappingURL=auth.events.js.map

package/security/src/lib/auth/auth.events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.events.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.events.ts"],"names":[],"mappings":";AAAA,2CAA2C;;;AAE9B,QAAA,iBAAiB,GAAG,aAAa,CAAC;AAQ/C,YAAY"}

package/security/src/lib/auth/auth.service.d.ts

@@ -1,16 +1,20 @@
 import { EntityStorageMiddlewareService } from '@acorex-platform/framework-server/core';
+import { EventEmitter2 } from '@nestjs/event-emitter';
 import { AuthLocalCredentialsService } from './auth-local-credentials.service';
 import { DeviceSessionService } from './device-session.service';
 import type { AuthRequestMeta } from './request-meta.util';
 import { TokenService } from './token.service';
 import type { AuthTokenResponseDto, RegisterRequestDto, SecurityManagementUserRecord, UpdateSessionRequestDto } from './auth.types';
+/** Stable client i18n mapping key — not shown raw in UI. */
+export declare const SESSION_MEMBERSHIP_DENIED_CODE = "SESSION_MEMBERSHIP_DENIED";
 export declare class AuthService {
     private readonly entityStorage;
     private readonly tokenService;
     private readonly localCredentials;
     private readonly deviceSessions;
+    private readonly events?;
     private readonly logger;
-    constructor(entityStorage: EntityStorageMiddlewareService, tokenService: TokenService, localCredentials: AuthLocalCredentialsService, deviceSessions: DeviceSessionService);
+    constructor(entityStorage: EntityStorageMiddlewareService, tokenService: TokenService, localCredentials: AuthLocalCredentialsService, deviceSessions: DeviceSessionService, events?: EventEmitter2 | undefined);
     completeSignIn(user: SecurityManagementUserRecord, meta: AuthRequestMeta): Promise<AuthTokenResponseDto>;
     assertSupportedSignInStrategy(strategy?: string): void;
     register(dto: RegisterRequestDto, meta: AuthRequestMeta): Promise<AuthTokenResponseDto>;
@@ -24,7 +28,15 @@ export declare class AuthService {
     accessTokenMaxAgeMs(): number;
     refreshTokenMaxAgeMs(): number;
     private completeAuthentication;
+    private emitLogoutEvent;
     private toAuthUser;
+    private normalizeAvatar;
+    /**
+     * Session bind requires active TenantUser for the tenant, and when an
+     * application is selected, active TenantUserAppAccess for that app.
+     * Nested reads use server-only scope bypass (membership tables filter by themselves).
+     */
+    private assertActiveMembership;
     private resolveTenantDto;
     private resolveApplicationDto;
 }

package/security/src/lib/auth/auth.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.service.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAKxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAGV,oBAAoB,EAEpB,kBAAkB,EAClB,4BAA4B,EAC5B,uBAAuB,EACxB,MAAM,cAAc,CAAC;AAUtB,qBACa,WAAW;IAIpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc;IANjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;gBAGpC,aAAa,EAAE,8BAA8B,EAC7C,YAAY,EAAE,YAAY,EAC1B,gBAAgB,EAAE,2BAA2B,EAC7C,cAAc,EAAE,oBAAoB;IAGjD,cAAc,CAClB,IAAI,EAAE,4BAA4B,EAClC,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,oBAAoB,CAAC;IAIhC,6BAA6B,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAOhD,QAAQ,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAiCvF,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuB1F,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;IAehE,aAAa,CACjB,kBAAkB,EAAE,MAAM,EAC1B,GAAG,EAAE,uBAAuB,EAC5B,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,oBAAoB,CAAC;IAmChC,iBAAiB,CAAC,KAAK,EAAE,MAAM;IAQ/B,kBAAkB,CAAC,KAAK,EAAE,MAAM;IAQhC,mBAAmB,IAAI,MAAM;IAI7B,oBAAoB,IAAI,MAAM;YAIhB,sBAAsB;IA0BpC,OAAO,CAAC,UAAU;YAQJ,gBAAgB;YA+BhB,qBAAqB;CAkCpC"}
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.service.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAcxF,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAGtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAGV,oBAAoB,EAEpB,kBAAkB,EAClB,4BAA4B,EAC5B,uBAAuB,EACxB,MAAM,cAAc,CAAC;AAUtB,4DAA4D;AAC5D,eAAO,MAAM,8BAA8B,8BAA8B,CAAC;AAE1E,qBACa,WAAW;IAIpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAPtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;gBAGpC,aAAa,EAAE,8BAA8B,EAC7C,YAAY,EAAE,YAAY,EAC1B,gBAAgB,EAAE,2BAA2B,EAC7C,cAAc,EAAE,oBAAoB,EACxB,MAAM,CAAC,EAAE,aAAa,YAAA;IAG/C,cAAc,CAClB,IAAI,EAAE,4BAA4B,EAClC,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,oBAAoB,CAAC;IAIhC,6BAA6B,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAOhD,QAAQ,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqCvF,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAyB1F,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;IAoBhE,aAAa,CACjB,kBAAkB,EAAE,MAAM,EAC1B,GAAG,EAAE,uBAAuB,EAC5B,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,oBAAoB,CAAC;IAqChC,iBAAiB,CAAC,KAAK,EAAE,MAAM;IAQ/B,kBAAkB,CAAC,KAAK,EAAE,MAAM;IAQhC,mBAAmB,IAAI,MAAM;IAI7B,oBAAoB,IAAI,MAAM;YAIhB,sBAAsB;IAuDpC,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,eAAe;IAcvB;;;;OAIG;YACW,sBAAsB;YA+FtB,gBAAgB;YAyChB,qBAAqB;CAuCpC"}

package/security/src/lib/auth/auth.service.js

@@ -1,14 +1,17 @@
 "use strict";
 var AuthService_1;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthService = void 0;
+exports.AuthService = exports.SESSION_MEMBERSHIP_DENIED_CODE = void 0;
 const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
 const core_1 = require("@acorex-platform/framework-server/core");
+const abstract_1 = require("@acorex-platform/framework-server/jql/abstract");
 const core_2 = require("@acorex-platform/framework-shared/core");
 const lodash_es_1 = require("lodash-es");
 const crypto_1 = require("crypto");
+const event_emitter_1 = require("@nestjs/event-emitter");
 const auth_config_1 = require("./auth.config");
+const auth_events_1 = require("./auth.events");
 const auth_local_credentials_service_1 = require("./auth-local-credentials.service");
 const device_session_service_1 = require("./device-session.service");
 const token_service_1 = require("./token.service");
@@ -18,12 +21,16 @@ const TENANT_ENTITY = 'TenantManagement.Tenant';
 const APPLICATION_ENTITY = 'ApplicationManagement.Application';
 const ACTIVE_ACCOUNT_STATE = 'active';
 const ALLOWED_ACCESS_STATE = 'allowed';
+const ACTIVE_MEMBERSHIP_STATUS = 'active';
+/** Stable client i18n mapping key — not shown raw in UI. */
+exports.SESSION_MEMBERSHIP_DENIED_CODE = 'SESSION_MEMBERSHIP_DENIED';
 let AuthService = AuthService_1 = class AuthService {
-    constructor(entityStorage, tokenService, localCredentials, deviceSessions) {
+    constructor(entityStorage, tokenService, localCredentials, deviceSessions, events) {
         this.entityStorage = entityStorage;
         this.tokenService = tokenService;
         this.localCredentials = localCredentials;
         this.deviceSessions = deviceSessions;
+        this.events = events;
         this.logger = new common_1.Logger(AuthService_1.name);
     }
     async completeSignIn(user, meta) {
@@ -60,7 +67,7 @@ let AuthService = AuthService_1 = class AuthService {
             accountState: ACTIVE_ACCOUNT_STATE,
             accessState: ALLOWED_ACCESS_STATE,
         });
-        return this.completeAuthentication({ id, name: username, title: displayName }, meta, {});
+        return this.completeAuthentication({ id, name: username, title: displayName, avatar: null }, meta, {});
     }
     async refreshSession(refreshToken, meta) {
         const payload = this.verifyRefreshToken(refreshToken);
@@ -69,6 +76,7 @@ let AuthService = AuthService_1 = class AuthService {
             throw new common_1.UnauthorizedException('User not found');
         }
         await this.deviceSessions.revokeByAuthorizationId(payload.jti);
+        await this.assertActiveMembership(user.id, payload.tid, payload.aid);
         const [tenant, application] = await Promise.all([
             this.resolveTenantDto(payload.tid),
             this.resolveApplicationDto(payload.aid),
@@ -79,7 +87,7 @@ let AuthService = AuthService_1 = class AuthService {
             tenant,
             application,
             sessionId: payload.sid,
-        });
+        }, 'update-binding');
     }
     async logout(refreshToken) {
         if (!refreshToken?.trim()) {
@@ -88,6 +96,11 @@ let AuthService = AuthService_1 = class AuthService {
         try {
             const payload = this.verifyRefreshToken(refreshToken);
             await this.deviceSessions.revokeByAuthorizationId(payload.jti);
+            this.emitLogoutEvent({
+                userId: payload.sub,
+                tenantId: payload.tid,
+                at: new Date().toISOString(),
+            });
         }
         catch (error) {
             this.logger.debug(`Logout ignored invalid refresh token: ${String(error)}`);
@@ -114,6 +127,7 @@ let AuthService = AuthService_1 = class AuthService {
         else {
             applicationId = current.aid;
         }
+        await this.assertActiveMembership(user.id, tenantId, applicationId);
         const [tenant, application] = await Promise.all([
             this.resolveTenantDto(tenantId, dto.tenant),
             this.resolveApplicationDto(applicationId, dto.application),
@@ -124,7 +138,7 @@ let AuthService = AuthService_1 = class AuthService {
             tenant,
             application,
             sessionId: current.sid,
-        });
+        }, 'update-binding');
     }
     verifyAccessToken(token) {
         try {
@@ -148,41 +162,187 @@ let AuthService = AuthService_1 = class AuthService {
     refreshTokenMaxAgeMs() {
         return this.tokenService.refreshTokenMaxAgeMs();
     }
-    async completeAuthentication(user, meta, context) {
+    async completeAuthentication(user, meta, context, deviceSessionMode = 'create') {
         const tokens = this.tokenService.issueTokenResponse(user, context);
         const refreshPayload = this.tokenService.verifyRefreshToken(tokens.refreshToken);
-        await this.deviceSessions.createSession({
-            user,
-            authorizationId: refreshPayload.jti,
-            sessionId: tokens.sessionId ?? refreshPayload.sid,
-            meta,
-            tenantId: context.tenantId,
-            applicationId: context.applicationId,
-        });
+        const sessionId = tokens.sessionId ?? refreshPayload.sid;
+        if (deviceSessionMode === 'update-binding' && context.sessionId) {
+            const updated = await this.deviceSessions.updateSessionBinding({
+                sessionId: context.sessionId,
+                authorizationId: refreshPayload.jti,
+                tenantId: context.tenantId,
+                applicationId: context.applicationId,
+            });
+            if (!updated) {
+                await this.deviceSessions.createSession({
+                    user,
+                    authorizationId: refreshPayload.jti,
+                    sessionId,
+                    meta,
+                    tenantId: context.tenantId,
+                    applicationId: context.applicationId,
+                });
+            }
+        }
+        else {
+            await this.deviceSessions.createSession({
+                user,
+                authorizationId: refreshPayload.jti,
+                sessionId,
+                meta,
+                tenantId: context.tenantId,
+                applicationId: context.applicationId,
+            });
+        }
+        try {
+            await this.entityStorage.updateOne(USER_ENTITY, user.id, {
+                lastSignInAt: new Date().toISOString(),
+            });
+        }
+        catch (error) {
+            this.logger.warn(`Failed to stamp lastSignInAt for user ${user.id}: ${String(error)}`);
+        }
         return tokens;
     }
+    emitLogoutEvent(payload) {
+        try {
+            this.events?.emit(auth_events_1.AUTH_LOGOUT_EVENT, payload);
+        }
+        catch (error) {
+            this.logger.debug(`Auth logout event emit failed: ${String(error)}`);
+        }
+    }
     toAuthUser(user) {
         return {
             id: user.id,
             name: user.username ?? user.id,
             title: user.displayName ?? user.username ?? user.id,
+            avatar: this.normalizeAvatar(user.avatar),
         };
     }
+    normalizeAvatar(value) {
+        if (value === null || value === undefined) {
+            return null;
+        }
+        if (typeof value !== 'string') {
+            return null;
+        }
+        const trimmed = value.trim();
+        if (!trimmed || trimmed === 'null') {
+            return null;
+        }
+        return trimmed;
+    }
+    /**
+     * Session bind requires active TenantUser for the tenant, and when an
+     * application is selected, active TenantUserAppAccess for that app.
+     * Nested reads use server-only scope bypass (membership tables filter by themselves).
+     */
+    async assertActiveMembership(userId, tenantId, applicationId) {
+        if (!tenantId) {
+            return;
+        }
+        const runtime = (0, abstract_1.getIsolationRuntimeConfig)();
+        const tenantUserEntity = runtime.tenantUserEntityName ?? 'TenantManagement.TenantUser';
+        const appAccessEntity = runtime.tenantUserAppAccessEntityName ?? 'TenantManagement.TenantUserAppAccess';
+        const bypassParams = {
+            [abstract_1.SCOPE_FILTER_BYPASS]: true,
+            [abstract_1.VISIBILITY_FILTER_BYPASS]: true,
+        };
+        const tenantUsers = await this.entityStorage.query(tenantUserEntity, {
+            skip: 0,
+            take: 50,
+            filter: {
+                logic: 'and',
+                filters: [
+                    { field: 'userId', operator: { type: 'equal' }, value: userId },
+                    { field: 'tenantId', operator: { type: 'equal' }, value: tenantId },
+                    {
+                        logic: 'or',
+                        filters: [
+                            { field: 'statusId', operator: { type: 'equal' }, value: ACTIVE_MEMBERSHIP_STATUS },
+                            { field: 'statusId', operator: { type: 'isNull' } },
+                            { field: 'statusId', operator: { type: 'isEmpty' } },
+                        ],
+                    },
+                ],
+            },
+            params: bypassParams,
+        });
+        const membershipRows = (tenantUsers?.items ?? []);
+        if (!membershipRows.length) {
+            throw new common_1.ForbiddenException({
+                code: exports.SESSION_MEMBERSHIP_DENIED_CODE,
+                message: 'You do not have access to this organization.',
+                details: { userId, tenantId, reason: 'tenant-membership' },
+            });
+        }
+        if (!applicationId) {
+            return;
+        }
+        const tenantUserIds = membershipRows
+            .map((row) => row['id'])
+            .filter((id) => typeof id === 'string' && !!id);
+        if (!tenantUserIds.length) {
+            throw new common_1.ForbiddenException({
+                code: exports.SESSION_MEMBERSHIP_DENIED_CODE,
+                message: 'You do not have access to this organization.',
+                details: { userId, tenantId, reason: 'tenant-membership' },
+            });
+        }
+        const appAccess = await this.entityStorage.query(appAccessEntity, {
+            skip: 0,
+            take: 50,
+            filter: {
+                logic: 'and',
+                filters: [
+                    { field: 'tenantUserId', operator: { type: 'in' }, value: tenantUserIds },
+                    { field: 'applicationId', operator: { type: 'equal' }, value: applicationId },
+                    {
+                        logic: 'or',
+                        filters: [
+                            { field: 'statusId', operator: { type: 'equal' }, value: ACTIVE_MEMBERSHIP_STATUS },
+                            { field: 'statusId', operator: { type: 'isNull' } },
+                            { field: 'statusId', operator: { type: 'isEmpty' } },
+                        ],
+                    },
+                ],
+            },
+            params: bypassParams,
+        });
+        if (!(appAccess?.items ?? []).length) {
+            throw new common_1.ForbiddenException({
+                code: exports.SESSION_MEMBERSHIP_DENIED_CODE,
+                message: 'You do not have access to this application.',
+                details: { userId, tenantId, applicationId, reason: 'app-access' },
+            });
+        }
+    }
     async resolveTenantDto(tenantId, partial) {
         if (!tenantId) {
             return undefined;
         }
-        if (partial?.title?.trim()) {
-            return { id: tenantId, name: partial.name, title: partial.title };
+        if ((0, core_2.hasMultiLanguageContent)(partial?.title)) {
+            return {
+                id: tenantId,
+                name: partial?.name,
+                title: (0, core_2.coerceUnknownToMultiLanguageString)(partial?.title),
+            };
         }
         const tenant = (await this.entityStorage.getOne(TENANT_ENTITY, tenantId));
         if (!tenant) {
-            return partial?.name || partial?.title
-                ? { id: tenantId, name: partial.name, title: partial.title }
+            return partial?.name || (0, core_2.hasMultiLanguageContent)(partial?.title)
+                ? {
+                    id: tenantId,
+                    name: partial?.name,
+                    title: (0, core_2.coerceUnknownToMultiLanguageString)(partial?.title),
+                }
                 : { id: tenantId };
         }
-        const title = String(tenant['title'] ?? partial?.title ?? '');
-        const fallbackName = title.toLowerCase().replace(/\s+/g, '-');
+        const title = (0, core_2.coerceUnknownToMultiLanguageString)(tenant['title'] ?? partial?.title);
+        const fallbackName = (0, core_2.resolveMultiLanguageString)(title, 'en-US')
+            .toLowerCase()
+            .replace(/\s+/g, '-');
         return {
             id: tenantId,
             name: String(tenant['name'] ?? partial?.name ?? (fallbackName || 'default-name')),
@@ -193,33 +353,40 @@ let AuthService = AuthService_1 = class AuthService {
         if (!applicationId) {
             return undefined;
         }
-        if (partial?.title?.trim() && partial?.name?.trim()) {
-            return { id: applicationId, name: partial.name, title: partial.title };
+        if ((0, core_2.hasMultiLanguageContent)(partial?.title) && partial?.name?.trim()) {
+            return {
+                id: applicationId,
+                name: partial.name,
+                title: (0, core_2.coerceUnknownToMultiLanguageString)(partial.title),
+            };
         }
         const application = (await this.entityStorage.getOne(APPLICATION_ENTITY, applicationId));
         if (!application) {
-            return partial?.name || partial?.title
-                ? { id: applicationId, name: partial.name, title: partial.title }
+            return partial?.name || (0, core_2.hasMultiLanguageContent)(partial?.title)
+                ? {
+                    id: applicationId,
+                    name: partial?.name,
+                    title: (0, core_2.coerceUnknownToMultiLanguageString)(partial?.title),
+                }
                 : { id: applicationId };
         }
-        const title = String(application['title'] ?? partial?.title ?? '');
-        const code = application['code'] != null ? String(application['code']) : undefined;
-        const routeName = code === 'MAGFA-001'
-            ? 'magfa-commerce'
-            : partial?.name ||
-                (application['name'] != null ? String(application['name']) : undefined) ||
-                title.toLowerCase().replace(/\s+/g, '-') ||
-                'default-name';
+        const title = (0, core_2.coerceUnknownToMultiLanguageString)(application['title'] ?? partial?.title);
+        const routeName = partial?.name ||
+            (application['name'] != null ? String(application['name']) : undefined) ||
+            (0, core_2.resolveMultiLanguageString)(title, 'en-US').toLowerCase().replace(/\s+/g, '-') ||
+            'default-name';
         return { id: applicationId, name: routeName, title };
     }
 };
 exports.AuthService = AuthService;
 exports.AuthService = AuthService = AuthService_1 = tslib_1.__decorate([
     (0, common_1.Injectable)(),
+    tslib_1.__param(4, (0, common_1.Optional)()),
     tslib_1.__metadata("design:paramtypes", [core_1.EntityStorageMiddlewareService,
         token_service_1.TokenService,
         auth_local_credentials_service_1.AuthLocalCredentialsService,
-        device_session_service_1.DeviceSessionService])
+        device_session_service_1.DeviceSessionService,
+        event_emitter_1.EventEmitter2])
 ], AuthService);
 //#endregion
 //# sourceMappingURL=auth.service.js.map

package/security/src/lib/auth/auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAKwB;AACxB,iEAAwF;AACxF,iEAAsE;AACtE,yCAAiC;AACjC,mCAAoC;AACpC,+CAAwD;AACxD,qFAA+E;AAC/E,qEAAgE;AAEhE,mDAA+C;AAW/C,gCAAgC;AAEhC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAC/D,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AACtC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAGhC,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAGtB,YACmB,aAA6C,EAC7C,YAA0B,EAC1B,gBAA6C,EAC7C,cAAoC;QAHpC,kBAAa,GAAb,aAAa,CAAgC;QAC7C,iBAAY,GAAZ,YAAY,CAAc;QAC1B,qBAAgB,GAAhB,gBAAgB,CAA6B;QAC7C,mBAAc,GAAd,cAAc,CAAsB;QANtC,WAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAOpD,CAAC;IAEJ,KAAK,CAAC,cAAc,CAClB,IAAkC,EAClC,IAAqB;QAErB,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,6BAA6B,CAAC,QAAiB;QAC7C,MAAM,QAAQ,GAAG,QAAQ,IAAI,qCAAuB,CAAC;QACrD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAuB,EAAE,IAAqB;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,qCAAuB,CAAC;QACzD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,EAAE,GAAG,IAAA,mBAAU,GAAE,CAAC;QACxB,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC;QACtD,MAAM,YAAY,GAAG,MAAM,IAAA,mBAAY,EAAC,QAAQ,CAAC,CAAC;QAElD,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,WAAW,EAAE;YAC9C,EAAE;YACF,QAAQ;YACR,WAAW;YACX,QAAQ,EAAE,YAAY;YACtB,YAAY,EAAE,oBAAoB;YAClC,WAAW,EAAE,oBAAoB;SAClC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,YAAoB,EAAE,IAAqB;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAE/D,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC;SACxC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,aAAa,EAAE,OAAO,CAAC,GAAG;YAC1B,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;SACvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAA4B;QACvC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,kBAA0B,EAC1B,GAA4B,EAC5B,IAAqB;QAErB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC;QAC/D,MAAM,uBAAuB,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;QAC/E,MAAM,4BAA4B,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,IAAI,CAAC;QAE9F,IAAI,aAAiC,CAAC;QACtC,IAAI,4BAA4B,EAAE,CAAC;YACjC,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,CAAC;aAAM,IAAI,uBAAuB,EAAE,CAAC;YACnC,gFAAgF;YAChF,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC;QAC9B,CAAC;QAED,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;YAC3C,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC;SAC3D,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ;YACR,aAAa;YACb,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;SACvB,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;IACjD,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,oBAAoB,EAAE,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,IAAiB,EACjB,IAAqB,EACrB,OAMC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAEjF,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;YACtC,IAAI;YACJ,eAAe,EAAE,cAAc,CAAC,GAAG;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,cAAc,CAAC,GAAG;YACjD,IAAI;YACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,UAAU,CAAC,IAAkC;QACnD,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;YAC9B,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;SACpD,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,QAAiB,EACjB,OAAuB;QAEvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YAC3B,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACpE,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAGhE,CAAC;QACT,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,KAAK;gBACpC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;gBAC5D,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9D,OAAO;YACL,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC,CAAC;YACjF,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,aAAsB,EACtB,OAA4B;QAE5B,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACzE,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAClD,kBAAkB,EAClB,aAAa,CACd,CAAmC,CAAC;QACrC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,KAAK;gBACpC,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;gBACjE,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,SAAS,GACb,IAAI,KAAK,WAAW;YAClB,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,OAAO,EAAE,IAAI;gBACb,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvE,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;gBACxC,cAAc,CAAC;QAErB,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;CACF,CAAA;AAjQY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;6CAKuB,qCAA8B;QAC/B,4BAAY;QACR,4DAA2B;QAC7B,6CAAoB;GAP5C,WAAW,CAiQvB;AAED,YAAY"}
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAOwB;AACxB,iEAAwF;AACxF,6EAIwD;AACxD,iEAKgD;AAChD,yCAAiC;AACjC,mCAAoC;AACpC,yDAAsD;AACtD,+CAAwD;AACxD,+CAA+E;AAC/E,qFAA+E;AAC/E,qEAAgE;AAEhE,mDAA+C;AAW/C,gCAAgC;AAEhC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAC/D,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AACtC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AACvC,MAAM,wBAAwB,GAAG,QAAQ,CAAC;AAC1C,4DAA4D;AAC/C,QAAA,8BAA8B,GAAG,2BAA2B,CAAC;AAGnE,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAGtB,YACmB,aAA6C,EAC7C,YAA0B,EAC1B,gBAA6C,EAC7C,cAAoC,EACzC,MAAuC;QAJlC,kBAAa,GAAb,aAAa,CAAgC;QAC7C,iBAAY,GAAZ,YAAY,CAAc;QAC1B,qBAAgB,GAAhB,gBAAgB,CAA6B;QAC7C,mBAAc,GAAd,cAAc,CAAsB;QACxB,WAAM,GAAN,MAAM,CAAgB;QAPpC,WAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAQpD,CAAC;IAEJ,KAAK,CAAC,cAAc,CAClB,IAAkC,EAClC,IAAqB;QAErB,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,6BAA6B,CAAC,QAAiB;QAC7C,MAAM,QAAQ,GAAG,QAAQ,IAAI,qCAAuB,CAAC;QACrD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAuB,EAAE,IAAqB;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,qCAAuB,CAAC;QACzD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,EAAE,GAAG,IAAA,mBAAU,GAAE,CAAC;QACxB,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC;QACtD,MAAM,YAAY,GAAG,MAAM,IAAA,mBAAY,EAAC,QAAQ,CAAC,CAAC;QAElD,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,WAAW,EAAE;YAC9C,EAAE;YACF,QAAQ;YACR,WAAW;YACX,QAAQ,EAAE,YAAY;YACtB,YAAY,EAAE,oBAAoB;YAClC,WAAW,EAAE,oBAAoB;SAClC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAChC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,EACxD,IAAI,EACJ,EAAE,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,YAAoB,EAAE,IAAqB;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAE/D,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAErE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC;SACxC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,aAAa,EAAE,OAAO,CAAC,GAAG;YAC1B,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;SACvB,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAA4B;QACvC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,eAAe,CAAC;gBACnB,MAAM,EAAE,OAAO,CAAC,GAAG;gBACnB,QAAQ,EAAE,OAAO,CAAC,GAAG;gBACrB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,kBAA0B,EAC1B,GAA4B,EAC5B,IAAqB;QAErB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC;QAC/D,MAAM,uBAAuB,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;QAC/E,MAAM,4BAA4B,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,IAAI,CAAC;QAE9F,IAAI,aAAiC,CAAC;QACtC,IAAI,4BAA4B,EAAE,CAAC;YACjC,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,CAAC;aAAM,IAAI,uBAAuB,EAAE,CAAC;YACnC,gFAAgF;YAChF,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC;QAC9B,CAAC;QAED,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEpE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;YAC3C,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC;SAC3D,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ;YACR,aAAa;YACb,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;SACvB,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;IACjD,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,oBAAoB,EAAE,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,IAAiB,EACjB,IAAqB,EACrB,OAMC,EACD,oBAAiD,QAAQ;QAEzD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC;QAEzD,IAAI,iBAAiB,KAAK,gBAAgB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC;gBAC7D,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,eAAe,EAAE,cAAc,CAAC,GAAG;gBACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;oBACtC,IAAI;oBACJ,eAAe,EAAE,cAAc,CAAC,GAAG;oBACnC,SAAS;oBACT,IAAI;oBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;gBACtC,IAAI;gBACJ,eAAe,EAAE,cAAc,CAAC,GAAG;gBACnC,SAAS;gBACT,IAAI;gBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE;gBACvD,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACvC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,eAAe,CAAC,OAA+B;QACrD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,+BAAiB,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,IAAkC;QACnD,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;YAC9B,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;YACnD,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;SAC1C,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,KAAc;QACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,sBAAsB,CAClC,MAAc,EACd,QAA4B,EAC5B,aAAiC;QAEjC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAA,oCAAyB,GAAE,CAAC;QAC5C,MAAM,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,IAAI,6BAA6B,CAAC;QACvF,MAAM,eAAe,GACnB,OAAO,CAAC,6BAA6B,IAAI,sCAAsC,CAAC;QAElF,MAAM,YAAY,GAAG;YACnB,CAAC,8BAAmB,CAAC,EAAE,IAAI;YAC3B,CAAC,mCAAwB,CAAC,EAAE,IAAI;SACjC,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,gBAAgB,EAAE;YACnE,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;oBAC/D,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;oBACnE;wBACE,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE;4BACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;4BACnF,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;4BACnD,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;yBACrD;qBACF;iBACF;aACF;YACD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAmC,CAAC;QACpF,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,8CAA8C;gBACvD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,cAAc;aACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aACvB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAEhE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,8CAA8C;gBACvD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,EAAE;YAChE,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;oBACzE,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;oBAC7E;wBACE,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE;4BACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;4BACnF,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;4BACnD,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;yBACrD;qBACF;iBACF;aACF;YACD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,6CAA6C;gBACtD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,QAAiB,EACjB,OAAuB;QAEvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,OAAO,EAAE,IAAI;gBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;aAC1D,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAGhE,CAAC;QACT,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,EAAE,IAAI,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC;gBAC7D,CAAC,CAAC;oBACE,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,OAAO,EAAE,IAAI;oBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;iBAC1D;gBACH,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,yCAAkC,EAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC;QACpF,MAAM,YAAY,GAAG,IAAA,iCAA0B,EAAC,KAAK,EAAE,OAAO,CAAC;aAC5D,WAAW,EAAE;aACb,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC,CAAC;YACjF,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,aAAsB,EACtB,OAA4B;QAE5B,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACrE,OAAO;gBACL,EAAE,EAAE,aAAa;gBACjB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,CAAC,KAAK,CAAC;aACzD,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAClD,kBAAkB,EAClB,aAAa,CACd,CAAmC,CAAC;QACrC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,OAAO,EAAE,IAAI,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC;gBAC7D,CAAC,CAAC;oBACE,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE,OAAO,EAAE,IAAI;oBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;iBAC1D;gBACH,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,yCAAkC,EAAC,WAAW,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC;QACzF,MAAM,SAAS,GACb,OAAO,EAAE,IAAI;YACb,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,IAAA,iCAA0B,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;YAC7E,cAAc,CAAC;QAEjB,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;CACF,CAAA;AAtbY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IASR,mBAAA,IAAA,iBAAQ,GAAE,CAAA;6CAJqB,qCAA8B;QAC/B,4BAAY;QACR,4DAA2B;QAC7B,6CAAoB;QACf,6BAAa;GAR1C,WAAW,CAsbvB;AAED,YAAY"}

package/security/src/lib/auth/auth.types.d.ts

@@ -1,3 +1,4 @@
+import type { AXPMultiLanguageString } from '@acorex-platform/framework-shared/core';
 export interface SignInRequestDto {
     strategy?: string;
     username: string;
@@ -15,12 +16,12 @@ export interface UpdateSessionRequestDto {
     tenant?: {
         id: string;
         name?: string;
-        title?: string;
+        title?: AXPMultiLanguageString;
     };
     application?: {
         id: string;
         name?: string;
-        title?: string;
+        title?: AXPMultiLanguageString;
     };
 }
 export interface RefreshTokenRequestDto {
@@ -30,16 +31,18 @@ export interface AuthUserDto {
     id: string;
     name: string;
     title: string;
+    /** File-storage id / ref; `null` when the user has no avatar. */
+    avatar: string | null;
 }
 export interface AuthTenantDto {
     id: string;
     name?: string;
-    title?: string;
+    title?: AXPMultiLanguageString;
 }
 export interface AuthApplicationDto {
     id: string;
     name?: string;
-    title?: string;
+    title?: AXPMultiLanguageString;
 }
 export interface AuthTokenResponseDto {
     accessToken: string;
@@ -71,9 +74,10 @@ export interface SecurityManagementUserRecord {
     username?: string;
     displayName?: string;
     password?: string;
+    avatar?: string | null;
     accountState?: string;
     accessState?: string | null;
-    ownershipInfo?: {
+    scopeInfo?: {
         tenantId?: string | null;
     };
 }

package/security/src/lib/auth/auth.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.types.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,WAAW,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7D;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC9C"}
+{"version":3,"file":"auth.types.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAErF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;IACvE,WAAW,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;CAC7E;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC1C"}

package/security/src/lib/auth/auth.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":";AAAA,8CAA8C;;AAkF9C,YAAY"}
+{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":";AAAA,8CAA8C;;AAuF9C,YAAY"}

package/security/src/lib/auth/device-session.service.d.ts

@@ -9,11 +9,27 @@ export interface CreateDeviceSessionInput {
     tenantId?: string;
     applicationId?: string;
 }
+export interface UpdateDeviceSessionBindingInput {
+    sessionId: string;
+    authorizationId: string;
+    tenantId?: string;
+    applicationId?: string;
+}
 export declare class DeviceSessionService {
     private readonly entityStorage;
     private readonly logger;
     constructor(entityStorage: EntityStorageMiddlewareService);
     createSession(input: CreateDeviceSessionInput): Promise<string>;
+    /**
+     * Tenant/app/token rotation during an existing sign-in journey.
+     * Updates the primary row for {@link sessionId} and revokes duplicate legacy rows.
+     */
+    updateSessionBinding(input: UpdateDeviceSessionBindingInput): Promise<boolean>;
     revokeByAuthorizationId(authorizationId: string): Promise<void>;
+    private findBySessionId;
+    /** Legacy rows stored only under `config.sessionId`. */
+    private findBySessionIdFromConfig;
+    private revokeDuplicateSessionRows;
+    private revokeSessionRow;
 }
 //# sourceMappingURL=device-session.service.d.ts.map

package/security/src/lib/auth/device-session.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device-session.service.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/device-session.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAExF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAM9E,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,WAAW,GAAG,4BAA4B,CAAC;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBACa,oBAAoB;IAGnB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAF1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;gBAEnC,aAAa,EAAE,8BAA8B;IAEpE,aAAa,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC;IAyC/D,uBAAuB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CA8BtE"}
+{"version":3,"file":"device-session.service.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/device-session.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAExF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAO9E,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,WAAW,GAAG,4BAA4B,CAAC;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAWD,qBACa,oBAAoB;IAGnB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAF1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;gBAEnC,aAAa,EAAE,8BAA8B;IAEpE,aAAa,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC;IA0CrE;;;OAGG;IACG,oBAAoB,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,OAAO,CAAC;IAoC9E,uBAAuB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAwBvD,eAAe;IAoC7B,wDAAwD;YAC1C,yBAAyB;YAgCzB,0BAA0B;YAW1B,gBAAgB;CAQ/B"}