@aepstore-dev/contracts 1.102.0 → 1.104.0

package/gen/auth.d.ts

@@ -96,11 +96,8 @@ export interface DeletePasskeyRequest {
     passkeyId: string;
 }
 export interface GeneratePasskeyAuthenticationOptionsRequest {
-    /**
-     * Username or email. V1 requires an existing account identifier and does
-     * not implement passkey-first/account-discovery registration.
-     */
-    credentials: string;
+    userAgent: string;
+    ip: string;
 }
 export interface VerifyPasskeyAuthenticationRequest {
     challengeId: string;
@@ -109,6 +106,78 @@ export interface VerifyPasskeyAuthenticationRequest {
     userAgent: string;
     ip: string;
 }
+export interface CreateOAuthAuthorizationCodeRequest {
+    userId: string;
+    responseType: string;
+    clientId: string;
+    redirectUri: string;
+    scopes: string[];
+    codeChallenge: string;
+    codeChallengeMethod: string;
+}
+export interface ValidateOAuthAuthorizationRequestInput {
+    responseType: string;
+    clientId: string;
+    redirectUri: string;
+    scopes: string[];
+    codeChallenge: string;
+    codeChallengeMethod: string;
+}
+export interface OAuthAuthorizationRequestInfo {
+    clientId: string;
+    clientName: string;
+    redirectUri: string;
+    scopes: string[];
+}
+export interface CreateOAuthAuthorizationCodeResponse {
+    code: string;
+    redirectUri: string;
+    expiresIn: number;
+}
+export interface ExchangeOAuthTokenRequest {
+    grantType: string;
+    code: string;
+    refreshToken: string;
+    clientId: string;
+    clientSecret: string;
+    redirectUri: string;
+    codeVerifier: string;
+}
+export interface OAuthTokenResponse {
+    accessToken: string;
+    tokenType: string;
+    expiresIn: number;
+    refreshToken: string;
+    scope: string;
+}
+export interface OAuthResourceRequest {
+    accessToken: string;
+}
+export interface OAuthPremiumInfo {
+    active: boolean;
+    expiresAt: string;
+}
+export interface OAuthUserInfoResponse {
+    id: string;
+    email: string;
+    username: string;
+    fullName: string;
+    avatarUrl: string;
+    premium: OAuthPremiumInfo | undefined;
+}
+export interface OAuthProduct {
+    id: string;
+    name: string;
+    description: string;
+    preview: string;
+    price: string;
+    currency: string;
+    publicUrl: string;
+    moderationStatus: string;
+}
+export interface OAuthProductsResponse {
+    items: OAuthProduct[];
+}
 export interface AuthUser {
     id: string;
     username: string;
@@ -259,6 +328,15 @@ export interface AuthServiceClient {
     deletePasskey(request: DeletePasskeyRequest): Observable<DeletePasskeyResponse>;
     generatePasskeyAuthenticationOptions(request: GeneratePasskeyAuthenticationOptionsRequest): Observable<PasskeyOptionsResponse>;
     verifyPasskeyAuthentication(request: VerifyPasskeyAuthenticationRequest): Observable<AuthResult>;
+    /**
+     * First-party OAuth 2.0 provider. Authorization codes use PKCE S256;
+     * access/refresh tokens are opaque, scoped and independently revocable.
+     */
+    validateOAuthAuthorizationRequest(request: ValidateOAuthAuthorizationRequestInput): Observable<OAuthAuthorizationRequestInfo>;
+    createOAuthAuthorizationCode(request: CreateOAuthAuthorizationCodeRequest): Observable<CreateOAuthAuthorizationCodeResponse>;
+    exchangeOAuthToken(request: ExchangeOAuthTokenRequest): Observable<OAuthTokenResponse>;
+    getOAuthUserInfo(request: OAuthResourceRequest): Observable<OAuthUserInfoResponse>;
+    listOAuthProducts(request: OAuthResourceRequest): Observable<OAuthProductsResponse>;
     /**
      * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
      * HMAC matches; LogoutAll wipes every row for the user.
@@ -302,6 +380,15 @@ export interface AuthServiceController {
     deletePasskey(request: DeletePasskeyRequest): Promise<DeletePasskeyResponse> | Observable<DeletePasskeyResponse> | DeletePasskeyResponse;
     generatePasskeyAuthenticationOptions(request: GeneratePasskeyAuthenticationOptionsRequest): Promise<PasskeyOptionsResponse> | Observable<PasskeyOptionsResponse> | PasskeyOptionsResponse;
     verifyPasskeyAuthentication(request: VerifyPasskeyAuthenticationRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
+    /**
+     * First-party OAuth 2.0 provider. Authorization codes use PKCE S256;
+     * access/refresh tokens are opaque, scoped and independently revocable.
+     */
+    validateOAuthAuthorizationRequest(request: ValidateOAuthAuthorizationRequestInput): Promise<OAuthAuthorizationRequestInfo> | Observable<OAuthAuthorizationRequestInfo> | OAuthAuthorizationRequestInfo;
+    createOAuthAuthorizationCode(request: CreateOAuthAuthorizationCodeRequest): Promise<CreateOAuthAuthorizationCodeResponse> | Observable<CreateOAuthAuthorizationCodeResponse> | CreateOAuthAuthorizationCodeResponse;
+    exchangeOAuthToken(request: ExchangeOAuthTokenRequest): Promise<OAuthTokenResponse> | Observable<OAuthTokenResponse> | OAuthTokenResponse;
+    getOAuthUserInfo(request: OAuthResourceRequest): Promise<OAuthUserInfoResponse> | Observable<OAuthUserInfoResponse> | OAuthUserInfoResponse;
+    listOAuthProducts(request: OAuthResourceRequest): Promise<OAuthProductsResponse> | Observable<OAuthProductsResponse> | OAuthProductsResponse;
     /**
      * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
      * HMAC matches; LogoutAll wipes every row for the user.

package/gen/auth.js

@@ -37,6 +37,11 @@ function AuthServiceControllerMethods() {
             "deletePasskey",
             "generatePasskeyAuthenticationOptions",
             "verifyPasskeyAuthentication",
+            "validateOAuthAuthorizationRequest",
+            "createOAuthAuthorizationCode",
+            "exchangeOAuthToken",
+            "getOAuthUserInfo",
+            "listOAuthProducts",
             "logoutCurrent",
             "logoutAll",
             "restoreLogin",

package/gen/auth.ts

@@ -120,11 +120,8 @@ export interface DeletePasskeyRequest {
 }
 
 export interface GeneratePasskeyAuthenticationOptionsRequest {
-  /**
-   * Username or email. V1 requires an existing account identifier and does
-   * not implement passkey-first/account-discovery registration.
-   */
-  credentials: string;
+  userAgent: string;
+  ip: string;
 }
 
 export interface VerifyPasskeyAuthenticationRequest {
@@ -135,6 +132,89 @@ export interface VerifyPasskeyAuthenticationRequest {
   ip: string;
 }
 
+export interface CreateOAuthAuthorizationCodeRequest {
+  userId: string;
+  responseType: string;
+  clientId: string;
+  redirectUri: string;
+  scopes: string[];
+  codeChallenge: string;
+  codeChallengeMethod: string;
+}
+
+export interface ValidateOAuthAuthorizationRequestInput {
+  responseType: string;
+  clientId: string;
+  redirectUri: string;
+  scopes: string[];
+  codeChallenge: string;
+  codeChallengeMethod: string;
+}
+
+export interface OAuthAuthorizationRequestInfo {
+  clientId: string;
+  clientName: string;
+  redirectUri: string;
+  scopes: string[];
+}
+
+export interface CreateOAuthAuthorizationCodeResponse {
+  code: string;
+  redirectUri: string;
+  expiresIn: number;
+}
+
+export interface ExchangeOAuthTokenRequest {
+  grantType: string;
+  code: string;
+  refreshToken: string;
+  clientId: string;
+  clientSecret: string;
+  redirectUri: string;
+  codeVerifier: string;
+}
+
+export interface OAuthTokenResponse {
+  accessToken: string;
+  tokenType: string;
+  expiresIn: number;
+  refreshToken: string;
+  scope: string;
+}
+
+export interface OAuthResourceRequest {
+  accessToken: string;
+}
+
+export interface OAuthPremiumInfo {
+  active: boolean;
+  expiresAt: string;
+}
+
+export interface OAuthUserInfoResponse {
+  id: string;
+  email: string;
+  username: string;
+  fullName: string;
+  avatarUrl: string;
+  premium: OAuthPremiumInfo | undefined;
+}
+
+export interface OAuthProduct {
+  id: string;
+  name: string;
+  description: string;
+  preview: string;
+  price: string;
+  currency: string;
+  publicUrl: string;
+  moderationStatus: string;
+}
+
+export interface OAuthProductsResponse {
+  items: OAuthProduct[];
+}
+
 export interface AuthUser {
   id: string;
   username: string;
@@ -324,6 +404,25 @@ export interface AuthServiceClient {
 
   verifyPasskeyAuthentication(request: VerifyPasskeyAuthenticationRequest): Observable<AuthResult>;
 
+  /**
+   * First-party OAuth 2.0 provider. Authorization codes use PKCE S256;
+   * access/refresh tokens are opaque, scoped and independently revocable.
+   */
+
+  validateOAuthAuthorizationRequest(
+    request: ValidateOAuthAuthorizationRequestInput,
+  ): Observable<OAuthAuthorizationRequestInfo>;
+
+  createOAuthAuthorizationCode(
+    request: CreateOAuthAuthorizationCodeRequest,
+  ): Observable<CreateOAuthAuthorizationCodeResponse>;
+
+  exchangeOAuthToken(request: ExchangeOAuthTokenRequest): Observable<OAuthTokenResponse>;
+
+  getOAuthUserInfo(request: OAuthResourceRequest): Observable<OAuthUserInfoResponse>;
+
+  listOAuthProducts(request: OAuthResourceRequest): Observable<OAuthProductsResponse>;
+
   /**
    * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
    * HMAC matches; LogoutAll wipes every row for the user.
@@ -407,6 +506,34 @@ export interface AuthServiceController {
     request: VerifyPasskeyAuthenticationRequest,
   ): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
 
+  /**
+   * First-party OAuth 2.0 provider. Authorization codes use PKCE S256;
+   * access/refresh tokens are opaque, scoped and independently revocable.
+   */
+
+  validateOAuthAuthorizationRequest(
+    request: ValidateOAuthAuthorizationRequestInput,
+  ): Promise<OAuthAuthorizationRequestInfo> | Observable<OAuthAuthorizationRequestInfo> | OAuthAuthorizationRequestInfo;
+
+  createOAuthAuthorizationCode(
+    request: CreateOAuthAuthorizationCodeRequest,
+  ):
+    | Promise<CreateOAuthAuthorizationCodeResponse>
+    | Observable<CreateOAuthAuthorizationCodeResponse>
+    | CreateOAuthAuthorizationCodeResponse;
+
+  exchangeOAuthToken(
+    request: ExchangeOAuthTokenRequest,
+  ): Promise<OAuthTokenResponse> | Observable<OAuthTokenResponse> | OAuthTokenResponse;
+
+  getOAuthUserInfo(
+    request: OAuthResourceRequest,
+  ): Promise<OAuthUserInfoResponse> | Observable<OAuthUserInfoResponse> | OAuthUserInfoResponse;
+
+  listOAuthProducts(
+    request: OAuthResourceRequest,
+  ): Promise<OAuthProductsResponse> | Observable<OAuthProductsResponse> | OAuthProductsResponse;
+
   /**
    * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
    * HMAC matches; LogoutAll wipes every row for the user.
@@ -453,6 +580,11 @@ export function AuthServiceControllerMethods() {
       "deletePasskey",
       "generatePasskeyAuthenticationOptions",
       "verifyPasskeyAuthentication",
+      "validateOAuthAuthorizationRequest",
+      "createOAuthAuthorizationCode",
+      "exchangeOAuthToken",
+      "getOAuthUserInfo",
+      "listOAuthProducts",
       "logoutCurrent",
       "logoutAll",
       "restoreLogin",

package/package.json

@@ -1,35 +1,35 @@
-{
-  "name": "@aepstore-dev/contracts",
-  "version": "1.102.0",
-  "description": "Protobuf definitions for aepstore microservices",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "scripts": {
-    "generate": "node scripts/generate.cjs",
-    "build": "tsc -p tsconfig.build.json && tsc -p tsconfig.gen.json"
-  },
-  "files": [
-    "dist",
-    "proto",
-    "gen"
-  ],
-  "publishConfig": {
-    "access": "public"
-  },
-  "author": {
-    "name": "torroixq",
-    "email": "cato.ixq@gmail.com"
-  },
-  "peerDependencies": {
-    "@nestjs/microservices": "^11.1.11",
-    "rxjs": "^7.8.2"
-  },
-  "devDependencies": {
-    "@nestjs/microservices": "^11.1.11",
-    "@protobuf-ts/protoc": "^2.9.4",
-    "@types/node": "^25.0.3",
-    "rxjs": "^7.8.2",
-    "ts-proto": "^2.10.1",
-    "typescript": "^5.9.3"
-  }
-}
+{
+  "name": "@aepstore-dev/contracts",
+  "version": "1.104.0",
+  "description": "Protobuf definitions for aepstore microservices",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "scripts": {
+    "generate": "node scripts/generate.cjs",
+    "build": "tsc -p tsconfig.build.json && tsc -p tsconfig.gen.json"
+  },
+  "files": [
+    "dist",
+    "proto",
+    "gen"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "author": {
+    "name": "torroixq",
+    "email": "cato.ixq@gmail.com"
+  },
+  "peerDependencies": {
+    "@nestjs/microservices": "^11.1.11",
+    "rxjs": "^7.8.2"
+  },
+  "devDependencies": {
+    "@nestjs/microservices": "^11.1.11",
+    "@protobuf-ts/protoc": "^2.9.4",
+    "@types/node": "^25.0.3",
+    "rxjs": "^7.8.2",
+    "ts-proto": "^2.10.1",
+    "typescript": "^5.9.3"
+  }
+}