@ambushsoftworks/nestjs-auth-graphql 0.15.1 → 0.16.0-rc.2

package/dist/index.js

@@ -29,6 +29,8 @@ __exportStar(require("./interfaces/verification-repository.interface"), exports)
 __exportStar(require("./interfaces/brute-force-repository.interface"), exports);
 __exportStar(require("./interfaces/biometric-repository.interface"), exports);
 __exportStar(require("./interfaces/biometric-verifier.interface"), exports);
+__exportStar(require("./interfaces/passkey-repository.interface"), exports);
+__exportStar(require("./passkey/passkey-json.types"), exports);
 __exportStar(require("./interfaces/password-policy-config.interface"), exports);
 __exportStar(require("./interfaces/rate-limiter.interface"), exports);
 __exportStar(require("./interfaces/refresh-retry-cache.interface"), exports);
@@ -52,6 +54,9 @@ __exportStar(require("./services/biometric-verification.service"), exports);
 __exportStar(require("./services/biometric-challenge.service"), exports);
 __exportStar(require("./verifiers/es256-device-key.verifier"), exports);
 __exportStar(require("./services/oauth-linking-token.service"), exports);
+__exportStar(require("./services/passkey.service"), exports);
+__exportStar(require("./services/step-up.service"), exports);
+__exportStar(require("./services/step-up-token.service"), exports);
 __exportStar(require("./services/password-validation.service"), exports);
 __exportStar(require("./services/in-memory-rate-limiter.service"), exports);
 __exportStar(require("./services/in-memory-refresh-retry-cache"), exports);
@@ -72,6 +77,7 @@ __exportStar(require("./repositories/noop-brute-force.repository"), exports);
 __exportStar(require("./repositories/noop-rate-limiter"), exports);
 __exportStar(require("./repositories/noop-tenant.repository"), exports);
 __exportStar(require("./repositories/noop-tenant-extractor"), exports);
+__exportStar(require("./repositories/in-memory-passkey.repository"), exports);
 __exportStar(require("./strategies/jwt.strategy"), exports);
 __exportStar(require("./strategies/google.strategy"), exports);
 __exportStar(require("./strategies/facebook.strategy"), exports);
@@ -109,6 +115,7 @@ __exportStar(require("./dto/jwt-payload.interface"), exports);
 __exportStar(require("./dto/request-password-reset.input"), exports);
 __exportStar(require("./dto/reset-password.input"), exports);
 __exportStar(require("./dto/password-reset-response.dto"), exports);
+__exportStar(require("./dto/passkey.dto"), exports);
 __exportStar(require("./decorators/current-user.decorator"), exports);
 __exportStar(require("./decorators/public.decorator"), exports);
 __exportStar(require("./decorators/public-endpoint.decorator"), exports);
@@ -134,6 +141,8 @@ __exportStar(require("./exceptions/oauth.exceptions"), exports);
 __exportStar(require("./exceptions/password-reset.exceptions"), exports);
 __exportStar(require("./exceptions/invalid-auth-config.exception"), exports);
 __exportStar(require("./exceptions/coded-http.exception"), exports);
+__exportStar(require("./exceptions/step-up.exceptions"), exports);
+__exportStar(require("./exceptions/passkey.exceptions"), exports);
 __exportStar(require("./enums/verification-type.enum"), exports);
 __exportStar(require("./types/oauth.types"), exports);
 __exportStar(require("./utils/provider-helpers"), exports);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAYA,gDAA8B;AAC9B,8CAA4B;AAK5B,mEAAiD;AACjD,yEAAuD;AACvD,uEAAqD;AACrD,qEAAmD;AACnD,8EAA4D;AAC5D,yEAAuD;AACvD,kFAAgE;AAChE,qEAAmD;AACnD,iFAA+D;AAC/D,gFAA8D;AAC9D,8EAA4D;AAC5D,4EAA0D;AAC1D,gFAA8D;AAC9D,sEAAoD;AACpD,6EAA2D;AAC3D,2EAAyD;AACzD,0EAAwD;AACxD,yEAAuD;AACvD,wFAAsE;AACtE,6EAA2D;AAC3D,4EAA0D;AAC1D,iFAA+D;AAC/D,sEAAoD;AACpD,+EAA6D;AAK7D,0DAAwC;AACxC,mEAAiD;AACjD,kEAAgD;AAChD,gEAA8C;AAC9C,iEAA+C;AAC/C,4EAA0D;AAE1D,oEAAkD;AAElD,4EAA0D;AAC1D,yEAAuD;AACvD,wEAAsD;AACtD,yEAAuD;AACvD,yEAAuD;AACvD,4EAA0D;AAC1D,2EAAyD;AACzD,yEAAuD;AACvD,qEAAmD;AACnD,6EAA2D;AAC3D,wEAAsD;AAKtD,oEAAkD;AAClD,gEAA8C;AAC9C,gEAA8C;AAC9C,8DAA4C;AAC5C,oEAAkD;AAClD,mEAAiD;AACjD,iEAA+C;AAC/C,+DAA6C;AAK7C,8EAA4D;AAC5D,6EAA2D;AAC3D,mEAAiD;AACjD,wEAAsD;AACtD,uEAAqD;AAKrD,4DAA0C;AAC1C,+DAA6C;AAC7C,iEAA+C;AAC/C,oEAAkD;AAClD,sEAAoD;AACpD,gEAA8C;AAC9C,qEAAmD;AAKnD,iEAA+C;AAG/C,+DAA6C;AAM7C,oDAAkC;AAClC,qDAAmC;AACnC,4DAA0C;AAC1C,qDAAmC;AACnC,4DAA0C;AAC1C,2DAAyC;AACzC,kEAAgD;AAChD,sEAAoD;AACpD,2DAAyC;AACzC,wEAAsD;AACtD,sEAAoD;AACpD,kEAAgD;AAChD,uEAAqD;AACrD,oEAAkD;AAClD,2EAAyD;AACzD,gEAA8C;AAC9C,8DAA4C;AAC5C,6DAA2C;AAC3C,+DAA6C;AAC7C,+DAA6C;AAC7C,yEAAuD;AACvD,iEAA+C;AAC/C,gEAA8C;AAC9C,6EAA2D;AAC3D,8DAA4C;AAC5C,qEAAmD;AACnD,6DAA2C;AAC3C,oEAAkD;AAKlD,sEAAoD;AACpD,gEAA8C;AAC9C,yEAAuD;AACvD,qEAAmD;AACnD,6EAA2D;AAC3D,wEAAsD;AACtD,wEAAsD;AACtD,uEAAqD;AACrD,wEAAsD;AAKtD,0DAAwC;AACxC,wDAAsC;AACtC,4DAA0C;AAC1C,uDAAqC;AACrC,6DAA2C;AAC3C,sDAAoC;AAKpC,gEAA8C;AAK9C,gEAAuD;AAA9C,4GAAA,QAAQ,OAAA;AAKjB,wEAAsD;AACtD,0EAAwD;AACxD,uEAAqD;AACrD,gEAA8C;AAC9C,yEAAuD;AACvD,6EAA2D;AAC3D,oEAAkD;AAKlD,iEAA+C;AAK/C,sDAAoC;AAKpC,2DAAyC;AACzC,yDAAuC;AACvC,sDAAoC;AACpC,4DAA0C;AAC1C,kDAAgC;AAChC,0DAAwC;AACxC,kDAAgC;AAChC,uDAK+B;AAJ7B,4GAAA,WAAW,OAAA;AACX,yGAAA,QAAQ,OAAA;AACR,gHAAA,eAAe,OAAA;AACf,4HAAA,2BAA2B,OAAA;AAE7B,yDAAuC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAYA,gDAA8B;AAC9B,8CAA4B;AAK5B,mEAAiD;AACjD,yEAAuD;AACvD,uEAAqD;AACrD,qEAAmD;AACnD,8EAA4D;AAC5D,yEAAuD;AACvD,kFAAgE;AAChE,qEAAmD;AACnD,iFAA+D;AAC/D,gFAA8D;AAC9D,8EAA4D;AAC5D,4EAA0D;AAC1D,4EAA0D;AAC1D,+DAA6C;AAC7C,gFAA8D;AAC9D,sEAAoD;AACpD,6EAA2D;AAC3D,2EAAyD;AACzD,0EAAwD;AACxD,yEAAuD;AACvD,wFAAsE;AACtE,6EAA2D;AAC3D,4EAA0D;AAC1D,iFAA+D;AAC/D,sEAAoD;AACpD,+EAA6D;AAK7D,0DAAwC;AACxC,mEAAiD;AACjD,kEAAgD;AAChD,gEAA8C;AAC9C,iEAA+C;AAC/C,4EAA0D;AAE1D,oEAAkD;AAElD,4EAA0D;AAC1D,yEAAuD;AACvD,wEAAsD;AACtD,yEAAuD;AACvD,6DAA2C;AAC3C,6DAA2C;AAC3C,mEAAiD;AACjD,yEAAuD;AACvD,4EAA0D;AAC1D,2EAAyD;AACzD,yEAAuD;AACvD,qEAAmD;AACnD,6EAA2D;AAC3D,wEAAsD;AAKtD,oEAAkD;AAClD,gEAA8C;AAC9C,gEAA8C;AAC9C,8DAA4C;AAC5C,oEAAkD;AAClD,mEAAiD;AACjD,iEAA+C;AAC/C,+DAA6C;AAK7C,8EAA4D;AAC5D,6EAA2D;AAC3D,mEAAiD;AACjD,wEAAsD;AACtD,uEAAqD;AACrD,8EAA4D;AAK5D,4DAA0C;AAC1C,+DAA6C;AAC7C,iEAA+C;AAC/C,oEAAkD;AAClD,sEAAoD;AACpD,gEAA8C;AAC9C,qEAAmD;AAKnD,iEAA+C;AAG/C,+DAA6C;AAM7C,oDAAkC;AAClC,qDAAmC;AACnC,4DAA0C;AAC1C,qDAAmC;AACnC,4DAA0C;AAC1C,2DAAyC;AACzC,kEAAgD;AAChD,sEAAoD;AACpD,2DAAyC;AACzC,wEAAsD;AACtD,sEAAoD;AACpD,kEAAgD;AAChD,uEAAqD;AACrD,oEAAkD;AAClD,2EAAyD;AACzD,gEAA8C;AAC9C,8DAA4C;AAC5C,6DAA2C;AAC3C,+DAA6C;AAC7C,+DAA6C;AAC7C,yEAAuD;AACvD,iEAA+C;AAC/C,gEAA8C;AAC9C,6EAA2D;AAC3D,8DAA4C;AAC5C,qEAAmD;AACnD,6DAA2C;AAC3C,oEAAkD;AAClD,oDAAkC;AAKlC,sEAAoD;AACpD,gEAA8C;AAC9C,yEAAuD;AACvD,qEAAmD;AACnD,6EAA2D;AAC3D,wEAAsD;AACtD,wEAAsD;AACtD,uEAAqD;AACrD,wEAAsD;AAKtD,0DAAwC;AACxC,wDAAsC;AACtC,4DAA0C;AAC1C,uDAAqC;AACrC,6DAA2C;AAC3C,sDAAoC;AAKpC,gEAA8C;AAK9C,gEAAuD;AAA9C,4GAAA,QAAQ,OAAA;AAKjB,wEAAsD;AACtD,0EAAwD;AACxD,uEAAqD;AACrD,gEAA8C;AAC9C,yEAAuD;AACvD,6EAA2D;AAC3D,oEAAkD;AAClD,kEAAgD;AAChD,kEAAgD;AAKhD,iEAA+C;AAK/C,sDAAoC;AAKpC,2DAAyC;AACzC,yDAAuC;AACvC,sDAAoC;AACpC,4DAA0C;AAC1C,kDAAgC;AAChC,0DAAwC;AACxC,kDAAgC;AAEhC,uDAK+B;AAJ7B,4GAAA,WAAW,OAAA;AACX,yGAAA,QAAQ,OAAA;AACR,gHAAA,eAAe,OAAA;AACf,4HAAA,2BAA2B,OAAA;AAE7B,yDAAuC"}

package/dist/interfaces/auth-lifecycle-hooks.interface.d.ts

@@ -10,5 +10,7 @@ export interface IAuthLifecycleHooks<T extends import('./auth-user.interface').I
     onAuthFailure?(email: string, ipAddress: string | undefined, reason: string): void;
     onAccountLocked?(userId: string, email: string, ipAddress: string | undefined, lockDurationSeconds: number, realm?: string): void;
     onAccountDelete?(user: T): Promise<void>;
+    onPasskeyRegistered?(user: T, passkey: import('../passkey/passkey-json.types').PasskeySummary, realm?: string): Promise<void>;
+    onPasskeyRemoved?(user: T, passkey: import('../passkey/passkey-json.types').PasskeySummary, realm?: string): Promise<void>;
 }
 //# sourceMappingURL=auth-lifecycle-hooks.interface.d.ts.map

package/dist/interfaces/auth-lifecycle-hooks.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-lifecycle-hooks.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/auth-lifecycle-hooks.interface.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,OAAO,uBAAuB,EAAE,SAAS,GAAG,OAAO,uBAAuB,EAAE,SAAS;IAOlI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMlC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMjC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMlC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMzC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMzC,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMhE,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMzC,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAa3C,aAAa,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAsBnF,eAAe,CAAC,CACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,mBAAmB,EAAE,MAAM,EAC3B,KAAK,CAAC,EAAE,MAAM,GACb,IAAI,CAAC;IAMR,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C"}
+{"version":3,"file":"auth-lifecycle-hooks.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/auth-lifecycle-hooks.interface.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,OAAO,uBAAuB,EAAE,SAAS,GAAG,OAAO,uBAAuB,EAAE,SAAS;IAOlI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMlC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMjC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMlC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMzC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMzC,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMhE,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMzC,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAa3C,aAAa,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAsBnF,eAAe,CAAC,CACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,mBAAmB,EAAE,MAAM,EAC3B,KAAK,CAAC,EAAE,MAAM,GACb,IAAI,CAAC;IAMR,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAezC,mBAAmB,CAAC,CAClB,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,OAAO,+BAA+B,EAAE,cAAc,EAC/D,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAAC;IAMjB,gBAAgB,CAAC,CACf,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,OAAO,+BAA+B,EAAE,cAAc,EAC/D,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB"}

package/dist/interfaces/auth-logger.interface.d.ts

@@ -45,6 +45,15 @@ export declare enum SecurityEvent {
     BIOMETRIC_LOGIN_SUCCESS = "BIOMETRIC_LOGIN_SUCCESS",
     BIOMETRIC_LOGIN_FAILURE = "BIOMETRIC_LOGIN_FAILURE",
     BIOMETRIC_DISABLED = "BIOMETRIC_DISABLED",
-    BIOMETRIC_DEVICE_REMOVED = "BIOMETRIC_DEVICE_REMOVED"
+    BIOMETRIC_DEVICE_REMOVED = "BIOMETRIC_DEVICE_REMOVED",
+    PASSKEY_REGISTERED = "PASSKEY_REGISTERED",
+    PASSKEY_REGISTRATION_FAILURE = "PASSKEY_REGISTRATION_FAILURE",
+    PASSKEY_LOGIN_SUCCESS = "PASSKEY_LOGIN_SUCCESS",
+    PASSKEY_LOGIN_FAILURE = "PASSKEY_LOGIN_FAILURE",
+    PASSKEY_COUNTER_REGRESSION = "PASSKEY_COUNTER_REGRESSION",
+    PASSKEY_RENAMED = "PASSKEY_RENAMED",
+    PASSKEY_REMOVED = "PASSKEY_REMOVED",
+    STEP_UP_SUCCESS = "STEP_UP_SUCCESS",
+    STEP_UP_FAILURE = "STEP_UP_FAILURE"
 }
 //# sourceMappingURL=auth-logger.interface.d.ts.map

package/dist/interfaces/auth-logger.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-logger.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/auth-logger.interface.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,WAAW;IAK1B,GAAG,CAAC,cAAc,EAAE,MAAM,GAAG,aAAa,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAKpG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK9C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK/C,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClD;AAKD,oBAAY,aAAa;IAEvB,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,MAAM,WAAW;IACjB,cAAc,mBAAmB;IACjC,cAAc,mBAAmB;IACjC,MAAM,WAAW;IACjB,cAAc,mBAAmB;IACjC,UAAU,eAAe;IAQzB,cAAc,mBAAmB;IAGjC,aAAa,kBAAkB;IAC/B,qBAAqB,0BAA0B;IAC/C,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAG7C,wBAAwB,6BAA6B;IACrD,wBAAwB,6BAA6B;IAGrD,cAAc,mBAAmB;IACjC,gBAAgB,qBAAqB;IASrC,wBAAwB,6BAA6B;IAcrD,sBAAsB,2BAA2B;IAGjD,sBAAsB,2BAA2B;IACjD,2BAA2B,gCAAgC;IAC3D,wBAAwB,6BAA6B;IACrD,yBAAyB,8BAA8B;IACvD,uBAAuB,4BAA4B;IACnD,cAAc,mBAAmB;IACjC,uBAAuB,4BAA4B;IACnD,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAG/B,eAAe,oBAAoB;IACnC,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IAGnD,kBAAkB,uBAAuB;IACzC,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,kBAAkB,uBAAuB;IACzC,wBAAwB,6BAA6B;CACtD"}
+{"version":3,"file":"auth-logger.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/auth-logger.interface.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,WAAW;IAK1B,GAAG,CAAC,cAAc,EAAE,MAAM,GAAG,aAAa,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAKpG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK9C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK/C,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClD;AAKD,oBAAY,aAAa;IAEvB,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,MAAM,WAAW;IACjB,cAAc,mBAAmB;IACjC,cAAc,mBAAmB;IACjC,MAAM,WAAW;IACjB,cAAc,mBAAmB;IACjC,UAAU,eAAe;IAQzB,cAAc,mBAAmB;IAGjC,aAAa,kBAAkB;IAC/B,qBAAqB,0BAA0B;IAC/C,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAG7C,wBAAwB,6BAA6B;IACrD,wBAAwB,6BAA6B;IAGrD,cAAc,mBAAmB;IACjC,gBAAgB,qBAAqB;IASrC,wBAAwB,6BAA6B;IAcrD,sBAAsB,2BAA2B;IAGjD,sBAAsB,2BAA2B;IACjD,2BAA2B,gCAAgC;IAC3D,wBAAwB,6BAA6B;IACrD,yBAAyB,8BAA8B;IACvD,uBAAuB,4BAA4B;IACnD,cAAc,mBAAmB;IACjC,uBAAuB,4BAA4B;IACnD,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAG/B,eAAe,oBAAoB;IACnC,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IAGnD,kBAAkB,uBAAuB;IACzC,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,kBAAkB,uBAAuB;IACzC,wBAAwB,6BAA6B;IAGrD,kBAAkB,uBAAuB;IACzC,4BAA4B,iCAAiC;IAC7D,qBAAqB,0BAA0B;IAC/C,qBAAqB,0BAA0B;IAE/C,0BAA0B,+BAA+B;IACzD,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IAGnC,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;CACpC"}

package/dist/interfaces/auth-logger.interface.js

@@ -43,5 +43,14 @@ var SecurityEvent;
     SecurityEvent["BIOMETRIC_LOGIN_FAILURE"] = "BIOMETRIC_LOGIN_FAILURE";
     SecurityEvent["BIOMETRIC_DISABLED"] = "BIOMETRIC_DISABLED";
     SecurityEvent["BIOMETRIC_DEVICE_REMOVED"] = "BIOMETRIC_DEVICE_REMOVED";
+    SecurityEvent["PASSKEY_REGISTERED"] = "PASSKEY_REGISTERED";
+    SecurityEvent["PASSKEY_REGISTRATION_FAILURE"] = "PASSKEY_REGISTRATION_FAILURE";
+    SecurityEvent["PASSKEY_LOGIN_SUCCESS"] = "PASSKEY_LOGIN_SUCCESS";
+    SecurityEvent["PASSKEY_LOGIN_FAILURE"] = "PASSKEY_LOGIN_FAILURE";
+    SecurityEvent["PASSKEY_COUNTER_REGRESSION"] = "PASSKEY_COUNTER_REGRESSION";
+    SecurityEvent["PASSKEY_RENAMED"] = "PASSKEY_RENAMED";
+    SecurityEvent["PASSKEY_REMOVED"] = "PASSKEY_REMOVED";
+    SecurityEvent["STEP_UP_SUCCESS"] = "STEP_UP_SUCCESS";
+    SecurityEvent["STEP_UP_FAILURE"] = "STEP_UP_FAILURE";
 })(SecurityEvent || (exports.SecurityEvent = SecurityEvent = {}));
 //# sourceMappingURL=auth-logger.interface.js.map

package/dist/interfaces/auth-logger.interface.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-logger.interface.js","sourceRoot":"","sources":["../../src/interfaces/auth-logger.interface.ts"],"names":[],"mappings":";;;AA2CA,IAAY,aAkFX;AAlFD,WAAY,aAAa;IAEvB,gDAA+B,CAAA;IAC/B,gDAA+B,CAAA;IAC/B,kCAAiB,CAAA;IACjB,kDAAiC,CAAA;IACjC,kDAAiC,CAAA;IACjC,kCAAiB,CAAA;IACjB,kDAAiC,CAAA;IACjC,0CAAyB,CAAA;IAQzB,kDAAiC,CAAA;IAGjC,gDAA+B,CAAA;IAC/B,gEAA+C,CAAA;IAC/C,gEAA+C,CAAA;IAC/C,8DAA6C,CAAA;IAG7C,sEAAqD,CAAA;IACrD,sEAAqD,CAAA;IAGrD,kDAAiC,CAAA;IACjC,sDAAqC,CAAA;IASrC,sEAAqD,CAAA;IAcrD,kEAAiD,CAAA;IAGjD,kEAAiD,CAAA;IACjD,4EAA2D,CAAA;IAC3D,sEAAqD,CAAA;IACrD,wEAAuD,CAAA;IACvD,oEAAmD,CAAA;IACnD,kDAAiC,CAAA;IACjC,oEAAmD,CAAA;IACnD,kDAAiC,CAAA;IACjC,gDAA+B,CAAA;IAG/B,oDAAmC,CAAA;IACnC,gDAA+B,CAAA;IAC/B,gDAA+B,CAAA;IAC/B,8DAA6C,CAAA;IAC7C,8DAA6C,CAAA;IAC7C,gEAA+C,CAAA;IAC/C,oEAAmD,CAAA;IAGnD,0DAAyC,CAAA;IACzC,oEAAmD,CAAA;IACnD,oEAAmD,CAAA;IACnD,0DAAyC,CAAA;IACzC,sEAAqD,CAAA;AACvD,CAAC,EAlFW,aAAa,6BAAb,aAAa,QAkFxB"}
+{"version":3,"file":"auth-logger.interface.js","sourceRoot":"","sources":["../../src/interfaces/auth-logger.interface.ts"],"names":[],"mappings":";;;AA2CA,IAAY,aAgGX;AAhGD,WAAY,aAAa;IAEvB,gDAA+B,CAAA;IAC/B,gDAA+B,CAAA;IAC/B,kCAAiB,CAAA;IACjB,kDAAiC,CAAA;IACjC,kDAAiC,CAAA;IACjC,kCAAiB,CAAA;IACjB,kDAAiC,CAAA;IACjC,0CAAyB,CAAA;IAQzB,kDAAiC,CAAA;IAGjC,gDAA+B,CAAA;IAC/B,gEAA+C,CAAA;IAC/C,gEAA+C,CAAA;IAC/C,8DAA6C,CAAA;IAG7C,sEAAqD,CAAA;IACrD,sEAAqD,CAAA;IAGrD,kDAAiC,CAAA;IACjC,sDAAqC,CAAA;IASrC,sEAAqD,CAAA;IAcrD,kEAAiD,CAAA;IAGjD,kEAAiD,CAAA;IACjD,4EAA2D,CAAA;IAC3D,sEAAqD,CAAA;IACrD,wEAAuD,CAAA;IACvD,oEAAmD,CAAA;IACnD,kDAAiC,CAAA;IACjC,oEAAmD,CAAA;IACnD,kDAAiC,CAAA;IACjC,gDAA+B,CAAA;IAG/B,oDAAmC,CAAA;IACnC,gDAA+B,CAAA;IAC/B,gDAA+B,CAAA;IAC/B,8DAA6C,CAAA;IAC7C,8DAA6C,CAAA;IAC7C,gEAA+C,CAAA;IAC/C,oEAAmD,CAAA;IAGnD,0DAAyC,CAAA;IACzC,oEAAmD,CAAA;IACnD,oEAAmD,CAAA;IACnD,0DAAyC,CAAA;IACzC,sEAAqD,CAAA;IAGrD,0DAAyC,CAAA;IACzC,8EAA6D,CAAA;IAC7D,gEAA+C,CAAA;IAC/C,gEAA+C,CAAA;IAE/C,0EAAyD,CAAA;IACzD,oDAAmC,CAAA;IACnC,oDAAmC,CAAA;IAGnC,oDAAmC,CAAA;IACnC,oDAAmC,CAAA;AACrC,CAAC,EAhGW,aAAa,6BAAb,aAAa,QAgGxB"}

package/dist/interfaces/biometric-verifier.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"biometric-verifier.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/biometric-verifier.interface.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,kBAAkB;IAQjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAc3B,MAAM,CAAC,KAAK,EAAE;QACZ,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAarB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxD"}
+{"version":3,"file":"biometric-verifier.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/biometric-verifier.interface.ts"],"names":[],"mappings":"AA2BA,MAAM,WAAW,kBAAkB;IAQjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAc3B,MAAM,CAAC,KAAK,EAAE;QACZ,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAarB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxD"}

package/dist/interfaces/email-service.interface.d.ts

@@ -2,5 +2,8 @@ export interface IEmailService {
     sendVerificationEmail(email: string, code: string, expiresInMinutes: number, verificationUrl?: string): Promise<void>;
     sendPasswordResetEmail(email: string, resetToken: string, resetUrl: string, expiresInMinutes?: number): Promise<void>;
     sendPasswordChangedEmail(email: string, changedAt: Date, ipAddress?: string): Promise<void>;
+    sendStepUpCodeEmail?(email: string, code: string, expiresInMinutes: number): Promise<void>;
+    sendPasskeyAddedEmail?(email: string, passkeyName: string, addedAt: Date): Promise<void>;
+    sendPasskeyRemovedEmail?(email: string, passkeyName: string, removedAt: Date): Promise<void>;
 }
 //# sourceMappingURL=email-service.interface.d.ts.map

package/dist/interfaces/email-service.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email-service.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/email-service.interface.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,aAAa;IAkB5B,qBAAqB,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,EACxB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CAAC;IAiBjB,sBAAsB,CACpB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,IAAI,CAAC,CAAC;IAQjB,wBAAwB,CACtB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,IAAI,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB"}
+{"version":3,"file":"email-service.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/email-service.interface.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,aAAa;IAkB5B,qBAAqB,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,EACxB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CAAC;IAiBjB,sBAAsB,CACpB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,IAAI,CAAC,CAAC;IAQjB,wBAAwB,CACtB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,IAAI,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAAC;IAiBjB,mBAAmB,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAgB3F,qBAAqB,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAOzF,uBAAuB,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9F"}

package/dist/interfaces/email-template-renderer.interface.d.ts

@@ -31,5 +31,20 @@ export interface IEmailTemplateRenderer {
         oldEmail: string;
         newEmail: string;
     }): Promise<RenderedEmail>;
+    renderStepUpCodeEmail?(params: {
+        email: string;
+        code: string;
+        expiresInMinutes: number;
+    }): Promise<RenderedEmail>;
+    renderPasskeyAddedEmail?(params: {
+        email: string;
+        passkeyName: string;
+        addedAt: Date;
+    }): Promise<RenderedEmail>;
+    renderPasskeyRemovedEmail?(params: {
+        email: string;
+        passkeyName: string;
+        removedAt: Date;
+    }): Promise<RenderedEmail>;
 }
 //# sourceMappingURL=email-template-renderer.interface.d.ts.map

package/dist/interfaces/email-template-renderer.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email-template-renderer.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/email-template-renderer.interface.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAWD,MAAM,WAAW,sBAAsB;IAMrC,uBAAuB,CAAC,MAAM,EAAE;QAC9B,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,eAAe,CAAC,EAAE,MAAM,CAAC;QAEzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3B,kBAAkB,CAAC,MAAM,EAAE;QACzB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAM3B,wBAAwB,CAAC,MAAM,EAAE;QAC/B,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAElB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3B,0BAA0B,CAAC,MAAM,EAAE;QACjC,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3B,wBAAwB,CAAC,MAAM,EAAE;QAC/B,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,IAAI,CAAC;KACpB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3B,uBAAuB,CAAC,MAAM,EAAE;QAC9B,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAC5B"}
+{"version":3,"file":"email-template-renderer.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/email-template-renderer.interface.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAWD,MAAM,WAAW,sBAAsB;IAMrC,uBAAuB,CAAC,MAAM,EAAE;QAC9B,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,eAAe,CAAC,EAAE,MAAM,CAAC;QAEzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3B,kBAAkB,CAAC,MAAM,EAAE;QACzB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAM3B,wBAAwB,CAAC,MAAM,EAAE;QAC/B,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAElB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3B,0BAA0B,CAAC,MAAM,EAAE;QACjC,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3B,wBAAwB,CAAC,MAAM,EAAE;QAC/B,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,IAAI,CAAC;KACpB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3B,uBAAuB,CAAC,MAAM,EAAE;QAC9B,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAU3B,qBAAqB,CAAC,CAAC,MAAM,EAAE;QAC7B,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,gBAAgB,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAO3B,uBAAuB,CAAC,CAAC,MAAM,EAAE;QAC/B,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,IAAI,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAG3B,yBAAyB,CAAC,CAAC,MAAM,EAAE;QACjC,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,IAAI,CAAC;KACjB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAC5B"}

package/dist/interfaces/index.d.ts

@@ -2,6 +2,7 @@ export * from './auth-lifecycle-hooks.interface';
 export * from './auth-logger.interface';
 export * from './auth-user.interface';
 export * from './biometric-repository.interface';
+export * from './passkey-repository.interface';
 export * from './brute-force-repository.interface';
 export * from './email-service.interface';
 export * from './email-template-renderer.interface';

package/dist/interfaces/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":"AAIA,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kCAAkC,CAAC;AACjD,cAAc,oCAAoC,CAAC;AACnD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qCAAqC,CAAC;AACpD,cAAc,0BAA0B,CAAC;AACzC,cAAc,mCAAmC,CAAC;AAClD,cAAc,sCAAsC,CAAC;AACrD,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qCAAqC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":"AAIA,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oCAAoC,CAAC;AACnD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qCAAqC,CAAC;AACpD,cAAc,0BAA0B,CAAC;AACzC,cAAc,mCAAmC,CAAC;AAClD,cAAc,sCAAsC,CAAC;AACrD,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qCAAqC,CAAC"}

package/dist/interfaces/index.js

@@ -18,6 +18,7 @@ __exportStar(require("./auth-lifecycle-hooks.interface"), exports);
 __exportStar(require("./auth-logger.interface"), exports);
 __exportStar(require("./auth-user.interface"), exports);
 __exportStar(require("./biometric-repository.interface"), exports);
+__exportStar(require("./passkey-repository.interface"), exports);
 __exportStar(require("./brute-force-repository.interface"), exports);
 __exportStar(require("./email-service.interface"), exports);
 __exportStar(require("./email-template-renderer.interface"), exports);

package/dist/interfaces/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIA,mEAAiD;AACjD,0DAAwC;AACxC,wDAAsC;AACtC,mEAAiD;AACjD,qEAAmD;AACnD,4DAA0C;AAC1C,sEAAoD;AACpD,2DAAyC;AACzC,oEAAkD;AAClD,uEAAqD;AACrD,0DAAwC;AACxC,8DAA4C;AAC5C,8DAA4C;AAC5C,sEAAoD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIA,mEAAiD;AACjD,0DAAwC;AACxC,wDAAsC;AACtC,mEAAiD;AACjD,iEAA+C;AAC/C,qEAAmD;AACnD,4DAA0C;AAC1C,sEAAoD;AACpD,2DAAyC;AACzC,oEAAkD;AAClD,uEAAqD;AACrD,0DAAwC;AACxC,8DAA4C;AAC5C,8DAA4C;AAC5C,sEAAoD"}

package/dist/interfaces/passkey-repository.interface.d.ts

@@ -0,0 +1,48 @@
+export interface PasskeyCredentialRecord {
+    credentialId: string;
+    userId: string;
+    realm?: string;
+    publicKey: string;
+    counter: number;
+    userHandle: string;
+    transports?: string[];
+    deviceType: 'singleDevice' | 'multiDevice';
+    backedUp: boolean;
+    aaguid?: string;
+    name: string;
+    createdAt: Date;
+    lastUsedAt: Date | null;
+    isActive: boolean;
+    metadata?: Record<string, unknown>;
+}
+export type PasskeyChallengePurpose = 'registration' | 'authentication' | 'step-up';
+export interface PasskeyChallengeRecord {
+    challengeId: string;
+    challenge: string;
+    purpose: PasskeyChallengePurpose;
+    userId?: string;
+    realm?: string;
+    userHandle?: string;
+    expiresAt: Date;
+}
+export declare class PasskeyCredentialExistsError extends Error {
+    constructor(credentialId?: string);
+}
+export interface IPasskeyRepository {
+    storeChallenge(input: Omit<PasskeyChallengeRecord, 'challengeId'>): Promise<string>;
+    consumeChallenge(challengeId: string): Promise<PasskeyChallengeRecord | null>;
+    deleteExpiredChallenges(): Promise<number>;
+    createCredential(record: PasskeyCredentialRecord): Promise<void>;
+    getCredential(credentialId: string, realm?: string): Promise<PasskeyCredentialRecord | null>;
+    listCredentials(userId: string, realm?: string): Promise<PasskeyCredentialRecord[]>;
+    updateCounter(input: {
+        credentialId: string;
+        expectedCounter: number;
+        newCounter: number;
+        backedUp: boolean;
+        lastUsedAt: Date;
+    }): Promise<boolean>;
+    renameCredential(credentialId: string, name: string): Promise<void>;
+    deactivateCredential(credentialId: string): Promise<void>;
+}
+//# sourceMappingURL=passkey-repository.interface.d.ts.map

package/dist/interfaces/passkey-repository.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-repository.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/passkey-repository.interface.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,uBAAuB;IAEtC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IAMf,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,SAAS,EAAE,MAAM,CAAC;IAMlB,OAAO,EAAE,MAAM,CAAC;IAEhB,UAAU,EAAE,MAAM,CAAC;IAEnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB,UAAU,EAAE,cAAc,GAAG,aAAa,CAAC;IAE3C,QAAQ,EAAE,OAAO,CAAC;IAElB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IAExB,QAAQ,EAAE,OAAO,CAAC;IAElB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAMD,MAAM,MAAM,uBAAuB,GAAG,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAGpF,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IAEpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,uBAAuB,CAAC;IAEjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IAMf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;CACjB;AAOD,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,YAAY,CAAC,EAAE,MAAM;CAQlC;AAoBD,MAAM,WAAW,kBAAkB;IAEjC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,sBAAsB,EAAE,aAAa,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAkBpF,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAG9E,uBAAuB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAU3C,gBAAgB,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAOjE,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAG7F,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAkBpF,aAAa,CAAC,KAAK,EAAE;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,EAAE,IAAI,CAAC;KAClB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAGrB,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGpE,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D"}

package/dist/interfaces/passkey-repository.interface.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasskeyCredentialExistsError = void 0;
+class PasskeyCredentialExistsError extends Error {
+    constructor(credentialId) {
+        super(credentialId
+            ? `Passkey credential ${credentialId} is already registered`
+            : 'Passkey credential is already registered');
+        this.name = 'PasskeyCredentialExistsError';
+    }
+}
+exports.PasskeyCredentialExistsError = PasskeyCredentialExistsError;
+//# sourceMappingURL=passkey-repository.interface.js.map

package/dist/interfaces/passkey-repository.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-repository.interface.js","sourceRoot":"","sources":["../../src/interfaces/passkey-repository.interface.ts"],"names":[],"mappings":";;;AA6EA,MAAa,4BAA6B,SAAQ,KAAK;IACrD,YAAY,YAAqB;QAC/B,KAAK,CACH,YAAY;YACV,CAAC,CAAC,sBAAsB,YAAY,wBAAwB;YAC5D,CAAC,CAAC,0CAA0C,CAC/C,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AATD,oEASC"}

package/dist/passkey/passkey-json.types.d.ts

@@ -0,0 +1,44 @@
+export interface PasskeyRegistrationResponseJSON {
+    id: string;
+    rawId: string;
+    type: 'public-key';
+    response: {
+        clientDataJSON: string;
+        attestationObject: string;
+        authenticatorData?: string;
+        transports?: string[];
+        publicKeyAlgorithm?: number;
+        publicKey?: string;
+    };
+    authenticatorAttachment?: string;
+    clientExtensionResults: Record<string, unknown>;
+}
+export interface PasskeyAuthenticationResponseJSON {
+    id: string;
+    rawId: string;
+    type: 'public-key';
+    response: {
+        clientDataJSON: string;
+        authenticatorData: string;
+        signature: string;
+        userHandle?: string;
+    };
+    authenticatorAttachment?: string;
+    clientExtensionResults: Record<string, unknown>;
+}
+export type PasskeyOptionsJSON = Readonly<Record<string, unknown>> & {
+    challenge: string;
+};
+export interface PasskeySummary {
+    credentialId: string;
+    name: string;
+    deviceType: 'singleDevice' | 'multiDevice';
+    backedUp: boolean;
+    createdAt: Date;
+    lastUsedAt: Date | null;
+}
+export interface PasskeyCeremonyOptions {
+    challengeId: string;
+    options: PasskeyOptionsJSON;
+}
+//# sourceMappingURL=passkey-json.types.d.ts.map

package/dist/passkey/passkey-json.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-json.types.d.ts","sourceRoot":"","sources":["../../src/passkey/passkey-json.types.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,+BAA+B;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE;QACR,cAAc,EAAE,MAAM,CAAC;QACvB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjD;AAGD,MAAM,WAAW,iCAAiC;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE;QACR,cAAc,EAAE,MAAM,CAAC;QACvB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjD;AASD,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAG3F,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,cAAc,GAAG,aAAa,CAAC;IAC3C,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAGD,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,kBAAkB,CAAC;CAC7B"}

package/dist/passkey/passkey-json.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=passkey-json.types.js.map

package/dist/passkey/passkey-json.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-json.types.js","sourceRoot":"","sources":["../../src/passkey/passkey-json.types.ts"],"names":[],"mappings":""}

package/dist/passkey/webauthn-adapter.d.ts

@@ -0,0 +1,104 @@
+import type { PasskeyAuthenticationResponseJSON, PasskeyOptionsJSON, PasskeyRegistrationResponseJSON } from './passkey-json.types';
+import type { ResolvedRelyingPartyValues as ResolvedRelyingParty } from '../utils/passkey-rp';
+export declare const PASSKEY_ALGORITHMS: readonly number[];
+interface WebAuthnLibrary {
+    generateRegistrationOptions(options: Record<string, unknown>): Promise<Record<string, unknown>>;
+    verifyRegistrationResponse(options: Record<string, unknown>): Promise<{
+        verified: boolean;
+        registrationInfo?: {
+            aaguid: string;
+            credential: {
+                id: string;
+                publicKey: Uint8Array;
+                counter: number;
+                transports?: string[];
+            };
+            userVerified: boolean;
+            credentialDeviceType: 'singleDevice' | 'multiDevice';
+            credentialBackedUp: boolean;
+        };
+    }>;
+    generateAuthenticationOptions(options: Record<string, unknown>): Promise<Record<string, unknown>>;
+    verifyAuthenticationResponse(options: Record<string, unknown>): Promise<{
+        verified: boolean;
+        authenticationInfo: {
+            credentialID: string;
+            newCounter: number;
+            userVerified: boolean;
+            credentialDeviceType: 'singleDevice' | 'multiDevice';
+            credentialBackedUp: boolean;
+        };
+    }>;
+}
+export type UserVerificationLevel = 'required' | 'preferred' | 'discouraged';
+export type VerificationOutcome<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    reason: string;
+};
+export interface RegisteredCredential {
+    credentialId: string;
+    publicKey: string;
+    counter: number;
+    transports?: string[];
+    deviceType: 'singleDevice' | 'multiDevice';
+    backedUp: boolean;
+    aaguid: string;
+}
+export interface AssertionResult {
+    newCounter: number;
+    backedUp: boolean;
+    userVerified: boolean;
+}
+export declare function loadWebAuthnLibrary(requireFn?: (id: string) => unknown, nodeVersion?: string): WebAuthnLibrary;
+export declare function parseRegistrationResponse(json: string): PasskeyRegistrationResponseJSON | null;
+export declare function parseAuthenticationResponse(json: string): PasskeyAuthenticationResponseJSON | null;
+export declare class WebAuthnAdapter {
+    private readonly lib;
+    constructor(lib: WebAuthnLibrary);
+    registrationOptions(input: {
+        rp: ResolvedRelyingParty;
+        challenge: Uint8Array;
+        userHandle: Uint8Array;
+        userName: string;
+        userDisplayName: string;
+        excludeCredentials: Array<{
+            id: string;
+            transports?: string[];
+        }>;
+        userVerification: UserVerificationLevel;
+        timeoutMs: number;
+    }): Promise<PasskeyOptionsJSON>;
+    authenticationOptions(input: {
+        rp: ResolvedRelyingParty;
+        challenge: Uint8Array;
+        allowCredentials: Array<{
+            id: string;
+            transports?: string[];
+        }>;
+        userVerification: UserVerificationLevel;
+        timeoutMs: number;
+    }): Promise<PasskeyOptionsJSON>;
+    verifyRegistration(input: {
+        response: PasskeyRegistrationResponseJSON;
+        expectedChallenge: string;
+        rp: ResolvedRelyingParty;
+        requireUserVerification: boolean;
+    }): Promise<VerificationOutcome<RegisteredCredential>>;
+    verifyAuthentication(input: {
+        response: PasskeyAuthenticationResponseJSON;
+        expectedChallenge: string;
+        rp: ResolvedRelyingParty;
+        requireUserVerification: boolean;
+        credential: {
+            credentialId: string;
+            publicKey: string;
+            counter: number;
+            transports?: string[];
+        };
+    }): Promise<VerificationOutcome<AssertionResult>>;
+}
+export {};
+//# sourceMappingURL=webauthn-adapter.d.ts.map

package/dist/passkey/webauthn-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn-adapter.d.ts","sourceRoot":"","sources":["../../src/passkey/webauthn-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iCAAiC,EACjC,kBAAkB,EAClB,+BAA+B,EAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,0BAA0B,IAAI,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAa9F,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAAmB,CAAC;AAQpE,UAAU,eAAe;IACvB,2BAA2B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChG,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QACpE,QAAQ,EAAE,OAAO,CAAC;QAClB,gBAAgB,CAAC,EAAE;YACjB,MAAM,EAAE,MAAM,CAAC;YACf,UAAU,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,UAAU,CAAC;gBAAC,OAAO,EAAE,MAAM,CAAC;gBAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;aAAE,CAAC;YAC1F,YAAY,EAAE,OAAO,CAAC;YACtB,oBAAoB,EAAE,cAAc,GAAG,aAAa,CAAC;YACrD,kBAAkB,EAAE,OAAO,CAAC;SAC7B,CAAC;KACH,CAAC,CAAC;IACH,6BAA6B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClG,4BAA4B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QACtE,QAAQ,EAAE,OAAO,CAAC;QAClB,kBAAkB,EAAE;YAClB,YAAY,EAAE,MAAM,CAAC;YACrB,UAAU,EAAE,MAAM,CAAC;YACnB,YAAY,EAAE,OAAO,CAAC;YACtB,oBAAoB,EAAE,cAAc,GAAG,aAAa,CAAC;YACrD,kBAAkB,EAAE,OAAO,CAAC;SAC7B,CAAC;KACH,CAAC,CAAC;CACJ;AAED,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;AAE7E,MAAM,MAAM,mBAAmB,CAAC,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5F,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,EAAE,cAAc,GAAG,aAAa,CAAC;IAC3C,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;CACvB;AAUD,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAiB,EAC5C,WAAW,GAAE,MAA8B,GAC1C,eAAe,CAwCjB;AASD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,+BAA+B,GAAG,IAAI,CAS9F;AAGD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,iCAAiC,GAAG,IAAI,CAelG;AASD,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,eAAe;IAE3C,mBAAmB,CAAC,KAAK,EAAE;QAC/B,EAAE,EAAE,oBAAoB,CAAC;QACzB,SAAS,EAAE,UAAU,CAAC;QACtB,UAAU,EAAE,UAAU,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;QACxB,kBAAkB,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;QACjE,gBAAgB,EAAE,qBAAqB,CAAC;QACxC,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAuBzB,qBAAqB,CAAC,KAAK,EAAE;QACjC,EAAE,EAAE,oBAAoB,CAAC;QACzB,SAAS,EAAE,UAAU,CAAC;QACtB,gBAAgB,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;QAC/D,gBAAgB,EAAE,qBAAqB,CAAC;QACxC,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAWzB,kBAAkB,CAAC,KAAK,EAAE;QAC9B,QAAQ,EAAE,+BAA+B,CAAC;QAC1C,iBAAiB,EAAE,MAAM,CAAC;QAC1B,EAAE,EAAE,oBAAoB,CAAC;QACzB,uBAAuB,EAAE,OAAO,CAAC;KAClC,GAAG,OAAO,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;IAqChD,oBAAoB,CAAC,KAAK,EAAE;QAChC,QAAQ,EAAE,iCAAiC,CAAC;QAC5C,iBAAiB,EAAE,MAAM,CAAC;QAC1B,EAAE,EAAE,oBAAoB,CAAC;QACzB,uBAAuB,EAAE,OAAO,CAAC;QACjC,UAAU,EAAE;YAAE,YAAY,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACjG,GAAG,OAAO,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC;CA8BlD"}