@ambushsoftworks/nestjs-auth-graphql 0.1.3

package/dist/resolvers/oauth.controller.js

@@ -0,0 +1,216 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var OAuthController_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthController = exports.GoogleSignInResponse = exports.FacebookSignInDto = exports.GoogleSignInDto = void 0;
+const common_1 = require("@nestjs/common");
+const throttler_1 = require("@nestjs/throttler");
+const class_validator_1 = require("class-validator");
+const auth_service_1 = require("../services/auth.service");
+const google_strategy_1 = require("../strategies/google.strategy");
+const facebook_strategy_1 = require("../strategies/facebook.strategy");
+const brute_force_protection_service_1 = require("../services/brute-force-protection.service");
+const oauth_linking_token_service_1 = require("../services/oauth-linking-token.service");
+const oauth_exceptions_1 = require("../exceptions/oauth.exceptions");
+const auth_logger_interface_1 = require("../interfaces/auth-logger.interface");
+class GoogleSignInDto {
+}
+exports.GoogleSignInDto = GoogleSignInDto;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], GoogleSignInDto.prototype, "idToken", void 0);
+class FacebookSignInDto {
+}
+exports.FacebookSignInDto = FacebookSignInDto;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], FacebookSignInDto.prototype, "accessToken", void 0);
+class GoogleSignInResponse {
+}
+exports.GoogleSignInResponse = GoogleSignInResponse;
+let OAuthController = OAuthController_1 = class OAuthController {
+    constructor(authService, googleStrategy, facebookStrategy, bruteForceProtection, oauthLinkingTokenService, securityLogger) {
+        this.authService = authService;
+        this.googleStrategy = googleStrategy;
+        this.facebookStrategy = facebookStrategy;
+        this.bruteForceProtection = bruteForceProtection;
+        this.oauthLinkingTokenService = oauthLinkingTokenService;
+        this.securityLogger = securityLogger;
+        this.logger = new common_1.Logger(OAuthController_1.name);
+    }
+    async googleSignIn(body, request) {
+        const ipAddress = request.clientIp || request.ip || 'unknown';
+        this.logger.log(`[OAUTH_CONTROLLER] Google Sign-In attempt from IP: ${ipAddress}`);
+        this.securityLogger.log(auth_logger_interface_1.SecurityEvent.OAUTH_INITIATED, {
+            provider: 'google',
+            ipAddress,
+        });
+        const googleProfile = await this.googleStrategy.verifyIdToken(body.idToken);
+        this.logger.log(`[OAUTH_CONTROLLER] Google ID token verified for email: ${googleProfile.email}`);
+        if (await this.bruteForceProtection.isAccountLocked(googleProfile.email)) {
+            const remainingTime = await this.bruteForceProtection.getRemainingLockoutTime(googleProfile.email);
+            this.logger.warn(`[OAUTH_CONTROLLER] Account locked for ${googleProfile.email}, remaining: ${remainingTime}s`);
+            throw new Error(`Account is locked. Please try again in ${Math.ceil(remainingTime / 60)} minutes.`);
+        }
+        if (await this.bruteForceProtection.checkIpRateLimit(ipAddress)) {
+            this.logger.warn(`[OAUTH_CONTROLLER] IP rate limit exceeded: ${ipAddress}`);
+            throw new Error('Too many requests. Please try again later.');
+        }
+        let result;
+        try {
+            result = await this.authService.handleSocialLogin('google', googleProfile, ipAddress);
+            this.logger.log(`[OAUTH_CONTROLLER] Google Sign-In successful for user: ${result.user.id}`);
+            this.securityLogger.log(auth_logger_interface_1.SecurityEvent.OAUTH_SUCCESS, {
+                userId: result.user.id,
+                email: googleProfile.email,
+                provider: 'google',
+                ipAddress,
+            });
+        }
+        catch (error) {
+            this.logger.warn(`[OAUTH_CONTROLLER] Google Sign-In failed for ${googleProfile.email}: ${error.constructor.name}`);
+            this.logger.debug(`[OAUTH_CONTROLLER] Exception details: ${JSON.stringify(error.getResponse?.() || error.message)}`);
+            this.securityLogger.log(auth_logger_interface_1.SecurityEvent.OAUTH_FAILURE, {
+                email: googleProfile.email,
+                provider: 'google',
+                ipAddress,
+                reason: error.message || error.constructor.name,
+            });
+            throw error;
+        }
+        await this.bruteForceProtection.resetFailedAttempts(googleProfile.email);
+        return {
+            accessToken: result.accessToken,
+            refreshToken: result.refreshToken,
+            user: this.buildOAuthUserResponse(result.user),
+        };
+    }
+    buildOAuthUserResponse(user) {
+        return {
+            id: user.id,
+            email: user.email,
+            bio: user.bio,
+            avatarUrl: user.avatarUrl,
+            isPublic: user.isPublic,
+            emailVerified: user.emailVerified,
+            emailVerifiedAt: user.emailVerifiedAt?.toISOString() || null,
+            phoneNumber: user.phoneNumber,
+            phoneVerified: user.phoneVerified ?? false,
+            phoneVerifiedAt: user.phoneVerifiedAt?.toISOString() || null,
+            hasPassword: user.passwordHash != null,
+            googleId: user.googleId,
+            facebookId: user.facebookId,
+            appleId: user.appleId,
+            biometricEnabled: user.biometricEnabled ?? false,
+            biometricEnabledAt: user.biometricEnabledAt?.toISOString() || null,
+            lastBiometricLogin: user.lastBiometricLogin?.toISOString() || null,
+            biometricDeviceId: user.biometricDeviceId,
+            createdAt: user.createdAt.toISOString(),
+            updatedAt: user.updatedAt.toISOString(),
+            selections: user.selections || [],
+            progressionSettings: user.progressionSettings || null,
+        };
+    }
+    async facebookSignIn(body, request) {
+        const ipAddress = request.clientIp || request.ip || 'unknown';
+        this.logger.log(`[OAUTH_CONTROLLER] Facebook Sign-In attempt from IP: ${ipAddress}`);
+        this.securityLogger.log(auth_logger_interface_1.SecurityEvent.OAUTH_INITIATED, {
+            provider: 'facebook',
+            ipAddress,
+        });
+        const facebookProfile = await this.facebookStrategy.verifyAccessToken(body.accessToken);
+        if (!facebookProfile.email) {
+            this.logger.warn(`[OAUTH_CONTROLLER] Facebook email missing for facebookId: ${facebookProfile.facebookId}`);
+            const fallbackToken = this.oauthLinkingTokenService.generateFacebookEmailFallbackToken(facebookProfile.facebookId);
+            this.logger.log(`[OAUTH_CONTROLLER] Generated email fallback token for ${facebookProfile.facebookId}`);
+            throw new oauth_exceptions_1.OAuthMissingDataException('Facebook', 'email', fallbackToken, facebookProfile.facebookId);
+        }
+        this.logger.log(`[OAUTH_CONTROLLER] Facebook access token verified for email: ${facebookProfile.email}`);
+        if (await this.bruteForceProtection.isAccountLocked(facebookProfile.email)) {
+            const remainingTime = await this.bruteForceProtection.getRemainingLockoutTime(facebookProfile.email);
+            this.logger.warn(`[OAUTH_CONTROLLER] Account locked for ${facebookProfile.email}, remaining: ${remainingTime}s`);
+            throw new Error(`Account is locked. Please try again in ${Math.ceil(remainingTime / 60)} minutes.`);
+        }
+        if (await this.bruteForceProtection.checkIpRateLimit(ipAddress)) {
+            this.logger.warn(`[OAUTH_CONTROLLER] IP rate limit exceeded: ${ipAddress}`);
+            throw new Error('Too many requests. Please try again later.');
+        }
+        let result;
+        try {
+            result = await this.authService.handleSocialLogin('facebook', {
+                ...facebookProfile,
+                email: facebookProfile.email,
+                emailVerified: facebookProfile.emailVerified,
+            }, ipAddress);
+            this.logger.log(`[OAUTH_CONTROLLER] Facebook Sign-In successful for user: ${result.user.id}`);
+            this.securityLogger.log(auth_logger_interface_1.SecurityEvent.OAUTH_SUCCESS, {
+                userId: result.user.id,
+                email: facebookProfile.email,
+                provider: 'facebook',
+                ipAddress,
+            });
+        }
+        catch (error) {
+            this.logger.warn(`[OAUTH_CONTROLLER] Facebook Sign-In failed for ${facebookProfile.email}: ${error.constructor.name}`);
+            this.logger.debug(`[OAUTH_CONTROLLER] Exception details: ${JSON.stringify(error.getResponse?.() || error.message)}`);
+            this.securityLogger.log(auth_logger_interface_1.SecurityEvent.OAUTH_FAILURE, {
+                email: facebookProfile.email,
+                provider: 'facebook',
+                ipAddress,
+                reason: error.message || error.constructor.name,
+            });
+            throw error;
+        }
+        await this.bruteForceProtection.resetFailedAttempts(facebookProfile.email);
+        return {
+            accessToken: result.accessToken,
+            refreshToken: result.refreshToken,
+            user: this.buildOAuthUserResponse(result.user),
+        };
+    }
+};
+exports.OAuthController = OAuthController;
+__decorate([
+    (0, common_1.Post)('google/token'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 60000 } }),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [GoogleSignInDto, Object]),
+    __metadata("design:returntype", Promise)
+], OAuthController.prototype, "googleSignIn", null);
+__decorate([
+    (0, common_1.Post)('facebook/token'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 60000 } }),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [FacebookSignInDto, Object]),
+    __metadata("design:returntype", Promise)
+], OAuthController.prototype, "facebookSignIn", null);
+exports.OAuthController = OAuthController = OAuthController_1 = __decorate([
+    (0, common_1.Controller)('auth'),
+    __metadata("design:paramtypes", [auth_service_1.AuthService,
+        google_strategy_1.GoogleStrategy,
+        facebook_strategy_1.FacebookStrategy,
+        brute_force_protection_service_1.BruteForceProtectionService,
+        oauth_linking_token_service_1.OAuthLinkingTokenService, Object])
+], OAuthController);
+//# sourceMappingURL=oauth.controller.js.map

package/dist/resolvers/oauth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.controller.js","sourceRoot":"","sources":["../../src/resolvers/oauth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,iDAA6C;AAE7C,qDAAuD;AACvD,2DAAuD;AACvD,mEAA+D;AAC/D,uEAAmE;AACnE,+FAAyF;AACzF,yFAAmF;AACnF,qEAA2E;AAC3E,+EAAiF;AAEjF,MAAa,eAAe;CAI3B;AAJD,0CAIC;AADC;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;gDACG;AAGlB,MAAa,iBAAiB;CAI7B;AAJD,8CAIC;AADC;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACO;AAGtB,MAAa,oBAAoB;CAIhC;AAJD,oDAIC;AAQM,IAAM,eAAe,uBAArB,MAAM,eAAe;IAG1B,YACU,WAAwB,EACxB,cAA8B,EAC9B,gBAAkC,EAClC,oBAAiD,EACjD,wBAAkD,EAClD,cAA2B;QAL3B,gBAAW,GAAX,WAAW,CAAa;QACxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,yBAAoB,GAApB,oBAAoB,CAA6B;QACjD,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,mBAAc,GAAd,cAAc,CAAa;QARpB,WAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IASxD,CAAC;IAcE,AAAN,KAAK,CAAC,YAAY,CACR,IAAqB,EACtB,OAAgB;QAEvB,MAAM,SAAS,GAAI,OAAe,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;QAEvE,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,sDAAsD,SAAS,EAAE,CAClE,CAAC;QAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,eAAe,EAAE;YACrD,QAAQ,EAAE,QAAQ;YAClB,SAAS;SACV,CAAC,CAAC;QAGH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAC3D,IAAI,CAAC,OAAO,CACb,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,0DAA0D,aAAa,CAAC,KAAK,EAAE,CAChF,CAAC;QAGF,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,MAAM,aAAa,GACjB,MAAM,IAAI,CAAC,oBAAoB,CAAC,uBAAuB,CACrD,aAAa,CAAC,KAAK,CACpB,CAAC;YAEJ,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,yCAAyC,aAAa,CAAC,KAAK,gBAAgB,aAAa,GAAG,CAC7F,CAAC;YAEF,MAAM,IAAI,KAAK,CACb,0CAA0C,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,WAAW,CACnF,CAAC;QACJ,CAAC;QAGD,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8CAA8C,SAAS,EAAE,CAC1D,CAAC;YAEF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAGD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAC/C,QAAQ,EACR,aAAa,EACb,SAAS,CACV,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,0DAA0D,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAC3E,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;gBACnD,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;gBACtB,KAAK,EAAE,aAAa,CAAC,KAAK;gBAC1B,QAAQ,EAAE,QAAQ;gBAClB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gDAAgD,aAAa,CAAC,KAAK,KAAK,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CACjG,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,yCAAyC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAClG,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;gBACnD,KAAK,EAAE,aAAa,CAAC,KAAK;gBAC1B,QAAQ,EAAE,QAAQ;gBAClB,SAAS;gBACT,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI;aAChD,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC;QACd,CAAC;QAGD,MAAM,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAGzE,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,IAAI,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC;SAC/C,CAAC;IACJ,CAAC;IAOO,sBAAsB,CAAC,IAAS;QACtC,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,IAAI,IAAI;YAC5D,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK;YAC1C,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,IAAI,IAAI;YAE5D,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;YACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YAErB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,KAAK;YAChD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,EAAE,IAAI,IAAI;YAClE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,EAAE,IAAI,IAAI;YAClE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YACvC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YAEvC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;YACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,IAAI;SACtD,CAAC;IACJ,CAAC;IAcK,AAAN,KAAK,CAAC,cAAc,CACV,IAAuB,EACxB,OAAgB;QAEvB,MAAM,SAAS,GAAI,OAAe,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;QAEvE,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,wDAAwD,SAAS,EAAE,CACpE,CAAC;QAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,eAAe,EAAE;YACrD,QAAQ,EAAE,UAAU;YACpB,SAAS;SACV,CAAC,CAAC;QAGH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CACnE,IAAI,CAAC,WAAW,CACjB,CAAC;QAGF,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6DAA6D,eAAe,CAAC,UAAU,EAAE,CAC1F,CAAC;YAGF,MAAM,aAAa,GACjB,IAAI,CAAC,wBAAwB,CAAC,kCAAkC,CAC9D,eAAe,CAAC,UAAU,CAC3B,CAAC;YAEJ,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,yDAAyD,eAAe,CAAC,UAAU,EAAE,CACtF,CAAC;YAGF,MAAM,IAAI,4CAAyB,CACjC,UAAU,EACV,OAAO,EACP,aAAa,EACb,eAAe,CAAC,UAAU,CAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,gEAAgE,eAAe,CAAC,KAAK,EAAE,CACxF,CAAC;QAGF,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3E,MAAM,aAAa,GACjB,MAAM,IAAI,CAAC,oBAAoB,CAAC,uBAAuB,CACrD,eAAe,CAAC,KAAK,CACtB,CAAC;YAEJ,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,yCAAyC,eAAe,CAAC,KAAK,gBAAgB,aAAa,GAAG,CAC/F,CAAC;YAEF,MAAM,IAAI,KAAK,CACb,0CAA0C,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,WAAW,CACnF,CAAC;QACJ,CAAC;QAGD,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8CAA8C,SAAS,EAAE,CAC1D,CAAC;YAEF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAID,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAC/C,UAAU,EACV;gBACE,GAAG,eAAe;gBAClB,KAAK,EAAE,eAAe,CAAC,KAAM;gBAC7B,aAAa,EAAE,eAAe,CAAC,aAAc;aAC9C,EACD,SAAS,CACV,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,4DAA4D,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAC7E,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;gBACnD,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;gBACtB,KAAK,EAAE,eAAe,CAAC,KAAM;gBAC7B,QAAQ,EAAE,UAAU;gBACpB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kDAAkD,eAAe,CAAC,KAAM,KAAK,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CACtG,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,yCAAyC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAClG,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;gBACnD,KAAK,EAAE,eAAe,CAAC,KAAM;gBAC7B,QAAQ,EAAE,UAAU;gBACpB,SAAS;gBACT,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI;aAChD,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC;QACd,CAAC;QAGD,MAAM,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,eAAe,CAAC,KAAM,CAAC,CAAC;QAG5E,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,IAAI,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC;SAC/C,CAAC;IACJ,CAAC;CAKF,CAAA;AAlTY,0CAAe;AAwBpB;IAHL,IAAA,aAAI,EAAC,cAAc,CAAC;IACpB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qCADQ,eAAe;;mDAkG9B;AAiDK;IAHL,IAAA,aAAI,EAAC,gBAAgB,CAAC;IACtB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qCADQ,iBAAiB;;qDAgIhC;0BA7SU,eAAe;IAD3B,IAAA,mBAAU,EAAC,MAAM,CAAC;qCAKM,0BAAW;QACR,gCAAc;QACZ,oCAAgB;QACZ,4DAA2B;QACvB,sDAAwB;GARjD,eAAe,CAkT3B"}

package/dist/services/auth.service.d.ts

@@ -0,0 +1,104 @@
+import { JwtService } from '@nestjs/jwt';
+import { RefreshTokenService } from './refresh-token.service';
+import { BruteForceProtectionService } from './brute-force-protection.service';
+import { VerificationService } from './verification.service';
+import { OAuthLinkingTokenService } from './oauth-linking-token.service';
+import { FacebookStrategy } from '../strategies/facebook.strategy';
+import { IAuthLifecycleHooks } from '../interfaces/auth-lifecycle-hooks.interface';
+import { IEmailService } from '../interfaces/email-service.interface';
+import { ISmsService } from '../interfaces/sms-service.interface';
+import { IUserRepository } from '../interfaces/user-repository.interface';
+import { IRefreshTokenRepository } from '../interfaces/refresh-token-repository.interface';
+import { IAuthLogger } from '../interfaces/auth-logger.interface';
+import { JwtPayload } from '../dto/jwt-payload.interface';
+import { IAuthUser } from '../interfaces/auth-user.interface';
+import { SocialProvider } from '../utils/provider-helpers';
+export declare class AuthService {
+    private userRepository;
+    private refreshTokenRepository;
+    private jwtService;
+    private refreshTokenService;
+    private bruteForceProtection;
+    private verificationService;
+    private oauthLinkingTokenService;
+    private facebookStrategy;
+    private securityLogger;
+    private lifecycleHooks;
+    private emailService;
+    private smsService;
+    private readonly logger;
+    constructor(userRepository: IUserRepository<IAuthUser>, refreshTokenRepository: IRefreshTokenRepository, jwtService: JwtService, refreshTokenService: RefreshTokenService, bruteForceProtection: BruteForceProtectionService, verificationService: VerificationService, oauthLinkingTokenService: OAuthLinkingTokenService, facebookStrategy: FacebookStrategy, securityLogger: IAuthLogger, lifecycleHooks: IAuthLifecycleHooks<IAuthUser>, emailService: IEmailService, smsService: ISmsService);
+    signup(email: string, password: string): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        user: IAuthUser;
+    }>;
+    login(email: string, password: string, ipAddress?: string): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        user: IAuthUser;
+    }>;
+    refreshToken(refreshToken: string, ipAddress?: string): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        user: IAuthUser;
+    }>;
+    validateUser(payload: JwtPayload): Promise<IAuthUser>;
+    logout(refreshToken: string, userId: string): Promise<boolean>;
+    logoutAll(userId: string): Promise<number>;
+    verifyEmail(email: string, code: string): Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    resendVerificationEmail(email: string): Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    sendPhoneVerification(userId: string, phoneNumber: string, countryCode?: string): Promise<{
+        success: boolean;
+        message: string;
+        phoneNumber?: string;
+        expiresInSeconds?: number;
+    }>;
+    verifyPhone(userId: string, phoneNumber: string, code: string): Promise<{
+        success: boolean;
+        message: string;
+        user?: any;
+    }>;
+    resendPhoneVerification(userId: string, phoneNumber: string): Promise<{
+        success: boolean;
+        message: string;
+        cooldownSeconds?: number;
+    }>;
+    removePhoneNumber(userId: string): Promise<{
+        success: boolean;
+        message: string;
+        user?: any;
+    }>;
+    handleSocialLogin(provider: 'google' | 'facebook' | 'apple', profile: {
+        googleId?: string;
+        facebookId?: string;
+        appleId?: string;
+        email: string;
+        emailVerified: boolean;
+        firstName?: string;
+        lastName?: string;
+    }, ipAddress?: string): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        user: IAuthUser;
+    }>;
+    completeFacebookSignUp(fallbackToken: string, email: string, accessToken: string): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        user: IAuthUser;
+    }>;
+    unlinkSocialAccount(userId: string, provider: SocialProvider): Promise<{
+        success: boolean;
+        message: string;
+        user: IAuthUser;
+        alreadyUnlinked: boolean;
+    }>;
+    private generateToken;
+}
+//# sourceMappingURL=auth.service.d.ts.map

package/dist/services/auth.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAiB,MAAM,qCAAqC,CAAC;AAEjF,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAC9D,OAAO,EACL,cAAc,EAGf,MAAM,2BAA2B,CAAC;AAEnC,qBACa,WAAW;IAKpB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,sBAAsB;IAC9B,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,oBAAoB;IAC5B,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,wBAAwB;IAChC,OAAO,CAAC,gBAAgB;IAExB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,YAAY;IAEpB,OAAO,CAAC,UAAU;IApBpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;gBAI7C,cAAc,EAAE,eAAe,CAAC,SAAS,CAAC,EAE1C,sBAAsB,EAAE,uBAAuB,EAC/C,UAAU,EAAE,UAAU,EACtB,mBAAmB,EAAE,mBAAmB,EACxC,oBAAoB,EAAE,2BAA2B,EACjD,mBAAmB,EAAE,mBAAmB,EACxC,wBAAwB,EAAE,wBAAwB,EAClD,gBAAgB,EAAE,gBAAgB,EAElC,cAAc,EAAE,WAAW,EAE3B,cAAc,EAAE,mBAAmB,CAAC,SAAS,CAAC,EAE9C,YAAY,EAAE,aAAa,EAE3B,UAAU,EAAE,WAAW;IAM3B,MAAM,CACV,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAoEpE,KAAK,CACT,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IA0GpE,YAAY,CAChB,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAyHpE,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAarD,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwC9D,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkB1C,WAAW,CACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAsC3C,uBAAuB,CAC3B,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAyE3C,qBAAqB,CACzB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IAoFI,WAAW,CACf,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,GAAG,CAAC;KACZ,CAAC;IA0EI,uBAAuB,CAC3B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IAkFI,iBAAiB,CACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,GAAG,CAAC;KACZ,CAAC;IAuEI,iBAAiB,CACrB,QAAQ,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,EACzC,OAAO,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACnJ,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IA6LpE,sBAAsB,CAC1B,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IA6KpE,mBAAmB,CACvB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAC;QAAC,eAAe,EAAE,OAAO,CAAA;KAAE,CAAC;IAgH5F,OAAO,CAAC,aAAa;CAQtB"}