npm - @ambushsoftworks/nestjs-auth-graphql - Versions diffs - 0.16.0 → 0.17.0-rc.2 - Mend

@ambushsoftworks/nestjs-auth-graphql 0.16.0 → 0.17.0-rc.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (86) hide show

package/dist/resolvers/oauth.controller.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"oauth.controller.js","sourceRoot":"","sources":["../../src/resolvers/oauth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAWwB;AACxB,iDAA6C;AAE7C,qDAAuD;AACvD,2DAAuD;AACvD,mEAA+D;AAC/D,uEAAmE;AACnE,+FAAyF;AACzF,yFAAmF;AACnF,qEAA2E;AAC3E,qFAAgF;AAChF,+EAAiF;AAGjF,4CAA4D;AAC5D,8DAA4D;AAC5D,0DAA+D;AAC/D,0DAAyD;AACzD,qEAAgE;AAEhE,MAAa,eAAe;CAI3B;AAJD,0CAIC;AADC;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;gDACI;AAGnB,MAAa,iBAAiB;CAI7B;AAJD,8CAIC;AADC;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACQ;AAGvB,MAAa,oBAAoB;CAIhC;AAJD,oDAIC;AAMD,SAAS,mBAAmB;IAC1B,OAAO,IAAI,sBAAa,CACtB;QACE,OAAO,EAAE,4CAA4C;QACrD,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,mBAAU,CAAC,iBAAiB;KACzC,EACD,mBAAU,CAAC,iBAAiB,CAC7B,CAAC;AACJ,CAAC;AAgBM,IAAM,eAAe,uBAArB,MAAM,eAAe;IAG1B,YACU,WAAwB,EACxB,cAA8B,EAC9B,gBAAkC,EAClC,oBAAiD,EACjD,wBAAkD,EAE1D,cAAuC,EAEvC,cAAmC;QAR3B,gBAAW,GAAX,WAAW,CAAa;QACxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,yBAAoB,GAApB,oBAAoB,CAA6B;QACjD,6BAAwB,GAAxB,wBAAwB,CAA0B;QAElD,mBAAc,GAAd,cAAc,CAAiB;QAE/B,mBAAc,GAAd,cAAc,CAAa;QAXpB,WAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IAYxD,CAAC;IAcE,AAAN,KAAK,CAAC,YAAY,CACR,IAAqB,EACtB,OAAgB;QAIvB,MAAM,KAAK,GAAG,IAAA,+BAAe,EAC3B,OAAyC,EACzC,IAAI,CAAC,WAAW,CAAC,aAAa,CAC/B,CAAC;QACF,MAAM,SAAS,GAAG,IAAA,kCAAgB,EAAC,OAA6C,CAAC,CAAC;QAElF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,8CAA8C,IAAA,wBAAQ,EAAC,SAAS,CAAC,GAAG,CACrE,CAAC;QAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,eAAe,EAAE;YACrD,QAAQ,EAAE,QAAQ;YAClB,SAAS;SACV,CAAC,CAAC;QAGH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAC3D,IAAI,CAAC,OAAO,CACb,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,gDAAgD,IAAA,2BAAW,EAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CACpF,CAAC;QAGF,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAChF,MAAM,aAAa,GACjB,MAAM,IAAI,CAAC,oBAAoB,CAAC,uBAAuB,CACrD,aAAa,CAAC,KAAK,EACnB,KAAK,CACN,CAAC;YAEJ,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,sCAAsC,IAAA,2BAAW,EAAC,aAAa,CAAC,KAAK,CAAC,iBAAiB,aAAa,GAAG,CACxG,CAAC;YAEF,MAAM,IAAI,iDAAsB,CAAC,aAAa,CAAC,CAAC;QAClD,CAAC;QAGD,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8CAA8C,IAAA,wBAAQ,EAAC,SAAS,CAAC,GAAG,CACrE,CAAC;YAEF,MAAM,mBAAmB,EAAE,CAAC;QAC9B,CAAC;QAGD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAC/C,QAAQ,EACR,aAAa,EACb,SAAS,EACT,KAAK,CACN,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,0DAA0D,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAC3E,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;gBACnD,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;gBACtB,KAAK,EAAE,aAAa,CAAC,KAAK;gBAC1B,QAAQ,EAAE,QAAQ;gBAClB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YAExB,MAAM,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,aAAa,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,aAAa,IAAI,KAAK;gBACzF,CAAC,CAAE,KAAa,CAAC,WAAW,EAAE,EAAE;gBAChC,CAAC,CAAC,SAAS,CAAC;YAEd,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6CAA6C,IAAA,2BAAW,EAAC,aAAa,CAAC,KAAK,CAAC,MAAM,SAAS,EAAE,CAC/F,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,yCAAyC,IAAI,CAAC,SAAS,CAAC,aAAa,IAAI,YAAY,CAAC,EAAE,CACzF,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;gBACnD,KAAK,EAAE,aAAa,CAAC,KAAK;gBAC1B,QAAQ,EAAE,QAAQ;gBAClB,SAAS;gBACT,MAAM,EAAE,YAAY,IAAI,SAAS;aAClC,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC;QACd,CAAC;QAGD,MAAM,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAGhF,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,IAAI,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC;SAC/C,CAAC;IACJ,CAAC;IAOO,sBAAsB,CAAC,IAAqC;QAClE,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,IAAI,IAAI;YAC5D,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK;YAC1C,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,IAAI,IAAI;YAE5D,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;YACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YAErB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,KAAK;YAChD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,EAAE,IAAI,IAAI;YAClE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,EAAE,IAAI,IAAI;YAClE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YACvC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YAEvC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;YACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,IAAI;SACtD,CAAC;IACJ,CAAC;IAcK,AAAN,KAAK,CAAC,cAAc,CACV,IAAuB,EACxB,OAAgB;QAGvB,MAAM,KAAK,GAAG,IAAA,+BAAe,EAC3B,OAAyC,EACzC,IAAI,CAAC,WAAW,CAAC,aAAa,CAC/B,CAAC;QACF,MAAM,SAAS,GAAG,IAAA,kCAAgB,EAAC,OAA6C,CAAC,CAAC;QAElF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,gDAAgD,IAAA,wBAAQ,EAAC,SAAS,CAAC,GAAG,CACvE,CAAC;QAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,eAAe,EAAE;YACrD,QAAQ,EAAE,UAAU;YACpB,SAAS;SACV,CAAC,CAAC;QAGH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CACnE,IAAI,CAAC,WAAW,CACjB,CAAC;QAGF,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6DAA6D,eAAe,CAAC,UAAU,EAAE,CAC1F,CAAC;YAIF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAChE,UAAU,EACV,eAAe,CAAC,UAAU,EAC1B,KAAK,CACN,CAAC;YAEF,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,kEAAkE,YAAY,CAAC,EAAE,4BAA4B,CAC9G,CAAC;gBAGF,MAAM,sBAAsB,GAAG;oBAC7B,GAAG,eAAe;oBAClB,KAAK,EAAE,YAAY,CAAC,KAAK;oBACzB,aAAa,EAAE,YAAY,CAAC,aAAa;iBAC1C,CAAC;gBAGF,IAAI,MAAM,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAC/C,UAAU,EACV,sBAAsB,EACtB,SAAS,EACT,KAAK,CACN,CAAC;oBAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,qEAAqE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CACtF,CAAC;oBAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;wBACnD,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;wBACtB,KAAK,EAAE,YAAY,CAAC,KAAK;wBACzB,QAAQ,EAAE,UAAU;wBACpB,SAAS;qBACV,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,MAAM,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC9E,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAE5E,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gEAAgE,YAAY,CAAC,EAAE,KAAK,SAAS,EAAE,CAChG,CAAC;oBAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;wBACnD,KAAK,EAAE,YAAY,CAAC,KAAK;wBACzB,QAAQ,EAAE,UAAU;wBACpB,SAAS;wBACT,MAAM,EAAE,YAAY,IAAI,SAAS;qBAClC,CAAC,CAAC;oBAEH,MAAM,KAAK,CAAC;gBACd,CAAC;gBAGD,MAAM,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAG/E,OAAO;oBACL,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,IAAI,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC;iBAC/C,CAAC;YACJ,CAAC;YAGD,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,6DAA6D,eAAe,CAAC,UAAU,+BAA+B,CACvH,CAAC;YAGF,MAAM,aAAa,GACjB,IAAI,CAAC,wBAAwB,CAAC,kCAAkC,CAC9D,eAAe,CAAC,UAAU,CAC3B,CAAC;YAEJ,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,yDAAyD,eAAe,CAAC,UAAU,EAAE,CACtF,CAAC;YAGF,MAAM,IAAI,4CAAyB,CACjC,UAAU,EACV,OAAO,EACP,aAAa,EACb,eAAe,CAAC,UAAU,CAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,sDAAsD,IAAA,2BAAW,EAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAC5F,CAAC;QAGF,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAClF,MAAM,aAAa,GACjB,MAAM,IAAI,CAAC,oBAAoB,CAAC,uBAAuB,CACrD,eAAe,CAAC,KAAK,EACrB,KAAK,CACN,CAAC;YAEJ,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,sCAAsC,IAAA,2BAAW,EAAC,eAAe,CAAC,KAAK,CAAC,iBAAiB,aAAa,GAAG,CAC1G,CAAC;YAEF,MAAM,IAAI,iDAAsB,CAAC,aAAa,CAAC,CAAC;QAClD,CAAC;QAGD,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8CAA8C,IAAA,wBAAQ,EAAC,SAAS,CAAC,GAAG,CACrE,CAAC;YAEF,MAAM,mBAAmB,EAAE,CAAC;QAC9B,CAAC;QAID,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAC/C,UAAU,EACV;gBACE,GAAG,eAAe;gBAClB,KAAK,EAAE,eAAe,CAAC,KAAM;gBAC7B,aAAa,EAAE,eAAe,CAAC,aAAc;aAC9C,EACD,SAAS,EACT,KAAK,CACN,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,4DAA4D,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAC7E,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;gBACnD,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;gBACtB,KAAK,EAAE,eAAe,CAAC,KAAM;gBAC7B,QAAQ,EAAE,UAAU;gBACpB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YAExB,MAAM,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,aAAa,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,aAAa,IAAI,KAAK;gBACzF,CAAC,CAAE,KAAa,CAAC,WAAW,EAAE,EAAE;gBAChC,CAAC,CAAC,SAAS,CAAC;YAEd,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,+CAA+C,IAAA,2BAAW,EAAC,eAAe,CAAC,KAAK,CAAC,MAAM,SAAS,EAAE,CACnG,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,yCAAyC,IAAI,CAAC,SAAS,CAAC,aAAa,IAAI,YAAY,CAAC,EAAE,CACzF,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;gBACnD,KAAK,EAAE,eAAe,CAAC,KAAM;gBAC7B,QAAQ,EAAE,UAAU;gBACpB,SAAS;gBACT,MAAM,EAAE,YAAY,IAAI,SAAS;aAClC,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC;QACd,CAAC;QAGD,MAAM,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,eAAe,CAAC,KAAM,EAAE,KAAK,CAAC,CAAC;QAGnF,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,IAAI,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC;SAC/C,CAAC;IACJ,CAAC;CAKF,CAAA;AAxZY,0CAAe;AA2BpB;IAHL,IAAA,aAAI,EAAC,cAAc,CAAC;IACpB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qCADQ,eAAe;;mDA8G9B;AAiDK;IAHL,IAAA,aAAI,EAAC,gBAAgB,CAAC;IACtB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qCADQ,iBAAiB;;qDAuNhC;0BAnZU,eAAe;IAF3B,IAAA,mBAAU,EAAC,MAAM,CAAC;IAClB,IAAA,wBAAe,EAAC,6CAAoB,CAAC;IAUjC,WAAA,IAAA,eAAM,EAAC,2BAAe,CAAC,CAAA;IAEvB,WAAA,IAAA,eAAM,EAAC,uBAAW,CAAC,CAAA;qCAPC,0BAAW;QACR,gCAAc;QACZ,oCAAgB;QACZ,4DAA2B;QACvB,sDAAwB;GARjD,eAAe,CAwZ3B"}
1	+ {"version":3,"file":"oauth.controller.js","sourceRoot":"","sources":["../../src/resolvers/oauth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAWwB;AACxB,iDAA6C;AAE7C,qDAAuD;AACvD,2DAAuD;AACvD,mEAA+D;AAC/D,uEAAmE;AACnE,+FAAyF;AACzF,yFAAmF;AACnF,qEAA2E;AAC3E,qFAAgF;AAChF,+EAAiF;AAGjF,4CAA4D;AAC5D,8DAA4D;AAC5D,0DAA+D;AAC/D,0DAAyD;AACzD,qEAAgE;AAEhE,MAAa,eAAe;CAI3B;AAJD,0CAIC;AADC;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;gDACI;AAGnB,MAAa,iBAAiB;CAI7B;AAJD,8CAIC;AADC;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACQ;AAGvB,MAAa,oBAAoB;CAOhC;AAPD,oDAOC;AAGD,SAAS,YAAY,CAAC,MAAwD;IAI5E,OAAO,MAAM,CAAC,WAAW,KAAK,SAAS;QACrC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE;QAC7F,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAMD,SAAS,mBAAmB,CAAC,iBAA0B;IACrD,OAAO,IAAI,sBAAa,CACtB;QACE,OAAO,EAAE,4CAA4C;QACrD,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,mBAAU,CAAC,iBAAiB;QACxC,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,EACD,mBAAU,CAAC,iBAAiB,CAC7B,CAAC;AACJ,CAAC;AAgBM,IAAM,eAAe,uBAArB,MAAM,eAAe;IAG1B,YACU,WAAwB,EACxB,cAA8B,EAC9B,gBAAkC,EAClC,oBAAiD,EACjD,wBAAkD,EAE1D,cAAuC,EAEvC,cAAmC;QAR3B,gBAAW,GAAX,WAAW,CAAa;QACxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,yBAAoB,GAApB,oBAAoB,CAA6B;QACjD,6BAAwB,GAAxB,wBAAwB,CAA0B;QAElD,mBAAc,GAAd,cAAc,CAAiB;QAE/B,mBAAc,GAAd,cAAc,CAAa;QAXpB,WAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IAYxD,CAAC;IAcE,AAAN,KAAK,CAAC,YAAY,CACR,IAAqB,EACtB,OAAgB;QAIvB,MAAM,KAAK,GAAG,IAAA,+BAAe,EAC3B,OAAyC,EACzC,IAAI,CAAC,WAAW,CAAC,aAAa,CAC/B,CAAC;QACF,MAAM,SAAS,GAAG,IAAA,kCAAgB,EAAC,OAA6C,CAAC,CAAC;QAElF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,8CAA8C,IAAA,wBAAQ,EAAC,SAAS,CAAC,GAAG,CACrE,CAAC;QAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,eAAe,EAAE;YACrD,QAAQ,EAAE,QAAQ;YAClB,SAAS;SACV,CAAC,CAAC;QAGH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAC3D,IAAI,CAAC,OAAO,CACb,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,gDAAgD,IAAA,2BAAW,EAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CACpF,CAAC;QAGF,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAChF,MAAM,aAAa,GACjB,MAAM,IAAI,CAAC,oBAAoB,CAAC,uBAAuB,CACrD,aAAa,CAAC,KAAK,EACnB,KAAK,CACN,CAAC;YAEJ,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,sCAAsC,IAAA,2BAAW,EAAC,aAAa,CAAC,KAAK,CAAC,iBAAiB,aAAa,GAAG,CACxG,CAAC;YAEF,MAAM,IAAI,iDAAsB,CAAC,aAAa,CAAC,CAAC;QAClD,CAAC;QAGD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5F,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8CAA8C,IAAA,wBAAQ,EAAC,SAAS,CAAC,GAAG,CACrE,CAAC;YAEF,MAAM,mBAAmB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACvD,CAAC;QAGD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAC/C,QAAQ,EACR,aAAa,EACb,SAAS,EACT,KAAK,CACN,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,0DAA0D,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAC3E,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;gBACnD,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;gBACtB,KAAK,EAAE,aAAa,CAAC,KAAK;gBAC1B,QAAQ,EAAE,QAAQ;gBAClB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YAExB,MAAM,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,aAAa,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,aAAa,IAAI,KAAK;gBACzF,CAAC,CAAE,KAAa,CAAC,WAAW,EAAE,EAAE;gBAChC,CAAC,CAAC,SAAS,CAAC;YAEd,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6CAA6C,IAAA,2BAAW,EAAC,aAAa,CAAC,KAAK,CAAC,MAAM,SAAS,EAAE,CAC/F,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,yCAAyC,IAAI,CAAC,SAAS,CAAC,aAAa,IAAI,YAAY,CAAC,EAAE,CACzF,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;gBACnD,KAAK,EAAE,aAAa,CAAC,KAAK;gBAC1B,QAAQ,EAAE,QAAQ;gBAClB,SAAS;gBACT,MAAM,EAAE,YAAY,IAAI,SAAS;aAClC,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC;QACd,CAAC;QAGD,MAAM,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAGhF,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,GAAG,YAAY,CAAC,MAAM,CAAC;YACvB,IAAI,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC;SAC/C,CAAC;IACJ,CAAC;IAOO,sBAAsB,CAAC,IAAqC;QAClE,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,IAAI,IAAI;YAC5D,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK;YAC1C,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,IAAI,IAAI;YAE5D,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;YACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YAErB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,KAAK;YAChD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,EAAE,IAAI,IAAI;YAClE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,EAAE,IAAI,IAAI;YAClE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YACvC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YAEvC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;YACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,IAAI;SACtD,CAAC;IACJ,CAAC;IAcK,AAAN,KAAK,CAAC,cAAc,CACV,IAAuB,EACxB,OAAgB;QAGvB,MAAM,KAAK,GAAG,IAAA,+BAAe,EAC3B,OAAyC,EACzC,IAAI,CAAC,WAAW,CAAC,aAAa,CAC/B,CAAC;QACF,MAAM,SAAS,GAAG,IAAA,kCAAgB,EAAC,OAA6C,CAAC,CAAC;QAElF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,gDAAgD,IAAA,wBAAQ,EAAC,SAAS,CAAC,GAAG,CACvE,CAAC;QAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,eAAe,EAAE;YACrD,QAAQ,EAAE,UAAU;YACpB,SAAS;SACV,CAAC,CAAC;QAGH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CACnE,IAAI,CAAC,WAAW,CACjB,CAAC;QAGF,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6DAA6D,eAAe,CAAC,UAAU,EAAE,CAC1F,CAAC;YAIF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAChE,UAAU,EACV,eAAe,CAAC,UAAU,EAC1B,KAAK,CACN,CAAC;YAEF,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,kEAAkE,YAAY,CAAC,EAAE,4BAA4B,CAC9G,CAAC;gBAGF,MAAM,sBAAsB,GAAG;oBAC7B,GAAG,eAAe;oBAClB,KAAK,EAAE,YAAY,CAAC,KAAK;oBACzB,aAAa,EAAE,YAAY,CAAC,aAAa;iBAC1C,CAAC;gBAGF,IAAI,MAAM,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAC/C,UAAU,EACV,sBAAsB,EACtB,SAAS,EACT,KAAK,CACN,CAAC;oBAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,qEAAqE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CACtF,CAAC;oBAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;wBACnD,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;wBACtB,KAAK,EAAE,YAAY,CAAC,KAAK;wBACzB,QAAQ,EAAE,UAAU;wBACpB,SAAS;qBACV,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,MAAM,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC9E,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAE5E,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gEAAgE,YAAY,CAAC,EAAE,KAAK,SAAS,EAAE,CAChG,CAAC;oBAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;wBACnD,KAAK,EAAE,YAAY,CAAC,KAAK;wBACzB,QAAQ,EAAE,UAAU;wBACpB,SAAS;wBACT,MAAM,EAAE,YAAY,IAAI,SAAS;qBAClC,CAAC,CAAC;oBAEH,MAAM,KAAK,CAAC;gBACd,CAAC;gBAGD,MAAM,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAG/E,OAAO;oBACL,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,GAAG,YAAY,CAAC,MAAM,CAAC;oBACvB,IAAI,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC;iBAC/C,CAAC;YACJ,CAAC;YAGD,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,6DAA6D,eAAe,CAAC,UAAU,+BAA+B,CACvH,CAAC;YAGF,MAAM,aAAa,GACjB,IAAI,CAAC,wBAAwB,CAAC,kCAAkC,CAC9D,eAAe,CAAC,UAAU,CAC3B,CAAC;YAEJ,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,yDAAyD,eAAe,CAAC,UAAU,EAAE,CACtF,CAAC;YAGF,MAAM,IAAI,4CAAyB,CACjC,UAAU,EACV,OAAO,EACP,aAAa,EACb,eAAe,CAAC,UAAU,CAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,sDAAsD,IAAA,2BAAW,EAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAC5F,CAAC;QAGF,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAClF,MAAM,aAAa,GACjB,MAAM,IAAI,CAAC,oBAAoB,CAAC,uBAAuB,CACrD,eAAe,CAAC,KAAK,EACrB,KAAK,CACN,CAAC;YAEJ,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,sCAAsC,IAAA,2BAAW,EAAC,eAAe,CAAC,KAAK,CAAC,iBAAiB,aAAa,GAAG,CAC1G,CAAC;YAEF,MAAM,IAAI,iDAAsB,CAAC,aAAa,CAAC,CAAC;QAClD,CAAC;QAGD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5F,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8CAA8C,IAAA,wBAAQ,EAAC,SAAS,CAAC,GAAG,CACrE,CAAC;YAEF,MAAM,mBAAmB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACvD,CAAC;QAID,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAC/C,UAAU,EACV;gBACE,GAAG,eAAe;gBAClB,KAAK,EAAE,eAAe,CAAC,KAAM;gBAC7B,aAAa,EAAE,eAAe,CAAC,aAAc;aAC9C,EACD,SAAS,EACT,KAAK,CACN,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,4DAA4D,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAC7E,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;gBACnD,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;gBACtB,KAAK,EAAE,eAAe,CAAC,KAAM;gBAC7B,QAAQ,EAAE,UAAU;gBACpB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YAExB,MAAM,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,aAAa,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,aAAa,IAAI,KAAK;gBACzF,CAAC,CAAE,KAAa,CAAC,WAAW,EAAE,EAAE;gBAChC,CAAC,CAAC,SAAS,CAAC;YAEd,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,+CAA+C,IAAA,2BAAW,EAAC,eAAe,CAAC,KAAK,CAAC,MAAM,SAAS,EAAE,CACnG,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,yCAAyC,IAAI,CAAC,SAAS,CAAC,aAAa,IAAI,YAAY,CAAC,EAAE,CACzF,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,aAAa,EAAE;gBACnD,KAAK,EAAE,eAAe,CAAC,KAAM;gBAC7B,QAAQ,EAAE,UAAU;gBACpB,SAAS;gBACT,MAAM,EAAE,YAAY,IAAI,SAAS;aAClC,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC;QACd,CAAC;QAGD,MAAM,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,eAAe,CAAC,KAAM,EAAE,KAAK,CAAC,CAAC;QAGnF,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,GAAG,YAAY,CAAC,MAAM,CAAC;YACvB,IAAI,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC;SAC/C,CAAC;IACJ,CAAC;CAKF,CAAA;AA7ZY,0CAAe;AA2BpB;IAHL,IAAA,aAAI,EAAC,cAAc,CAAC;IACpB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qCADQ,eAAe;;mDAgH9B;AAiDK;IAHL,IAAA,aAAI,EAAC,gBAAgB,CAAC;IACtB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qCADQ,iBAAiB;;qDA0NhC;0BAxZU,eAAe;IAF3B,IAAA,mBAAU,EAAC,MAAM,CAAC;IAClB,IAAA,wBAAe,EAAC,6CAAoB,CAAC;IAUjC,WAAA,IAAA,eAAM,EAAC,2BAAe,CAAC,CAAA;IAEvB,WAAA,IAAA,eAAM,EAAC,uBAAW,CAAC,CAAA;qCAPC,0BAAW;QACR,gCAAc;QACZ,oCAAgB;QACZ,4DAA2B;QACvB,sDAAwB;GARjD,eAAe,CA6Z3B"}

package/dist/services/auth.service.d.ts CHANGED Viewed

@@ -1,4 +1,5 @@
 import { JwtService } from '@nestjs/jwt';
+import { StepUpMethod, StepUpTokenService } from './step-up-token.service';
 import { RefreshTokenService } from './refresh-token.service';
 import { BruteForceProtectionService } from './brute-force-protection.service';
 import { VerificationService } from './verification.service';
@@ -17,6 +18,13 @@ import { IPhoneVerificationUser } from '../dto/phone-verification-response.dto';
 import { IAuthUser } from '../interfaces/auth-user.interface';
 import { SocialProvider } from '../utils/provider-helpers';
 import type { AuthModuleOptions } from '../auth.module';
+export interface AuthSessionResult {
+    accessToken: string;
+    refreshToken: string;
+    user: IAuthUser;
+    stepUpToken?: string;
+    stepUpExpiresAt?: Date;
+}
 export declare class AuthService {
     private userRepository;
     private refreshTokenRepository;
@@ -31,6 +39,7 @@ export declare class AuthService {
     private emailService;
     private smsService;
     private rateLimiter;
+    private readonly stepUpTokens?;
     private readonly logger;
     private readonly passwordValidationService;
     private readonly bcryptRounds;
@@ -38,17 +47,9 @@ export declare class AuthService {
     private readonly jwtPayloadFactory;
     private readonly isUserActive;
     private static readonly DUMMY_HASH;
-    constructor(userRepository: IUserRepository<IAuthUser>, refreshTokenRepository: IRefreshTokenRepository, jwtService: JwtService, refreshTokenService: RefreshTokenService, bruteForceProtection: BruteForceProtectionService, verificationService: VerificationService, oauthLinkingTokenService: OAuthLinkingTokenService, facebookStrategy: FacebookStrategy, securityLogger: IAuthLogger, lifecycleHooks: IAuthLifecycleHooks<IAuthUser>, emailService: IEmailService, smsService: ISmsService, authModuleOptions: AuthModuleOptions, rateLimiter: IRateLimiter, jwtPayloadFactory?: IJwtPayloadFactory);
-    signup(email: string, password: string, realm?: string): Promise<{
-        accessToken: string;
-        refreshToken: string;
-        user: IAuthUser;
-    }>;
-    login(email: string, password: string, ipAddress?: string, realm?: string): Promise<{
-        accessToken: string;
-        refreshToken: string;
-        user: IAuthUser;
-    }>;
+    constructor(userRepository: IUserRepository<IAuthUser>, refreshTokenRepository: IRefreshTokenRepository, jwtService: JwtService, refreshTokenService: RefreshTokenService, bruteForceProtection: BruteForceProtectionService, verificationService: VerificationService, oauthLinkingTokenService: OAuthLinkingTokenService, facebookStrategy: FacebookStrategy, securityLogger: IAuthLogger, lifecycleHooks: IAuthLifecycleHooks<IAuthUser>, emailService: IEmailService, smsService: ISmsService, authModuleOptions: AuthModuleOptions, rateLimiter: IRateLimiter, jwtPayloadFactory?: IJwtPayloadFactory, stepUpTokens?: StepUpTokenService | undefined);
+    signup(email: string, password: string, realm?: string): Promise<AuthSessionResult>;
+    login(email: string, password: string, ipAddress?: string, realm?: string): Promise<AuthSessionResult>;
     refreshToken(refreshToken: string, ipAddress?: string, realm?: string): Promise<{
         accessToken: string;
         refreshToken: string;
@@ -69,6 +70,8 @@ export declare class AuthService {
         success: boolean;
         message: string;
     }>;
+    private enforceEmailCooldown;
+    private inBackground;
     sendPhoneVerification(userId: string, phoneNumber: string, countryCode?: string, realm?: string): Promise<{
         success: boolean;
         message: string;
@@ -98,16 +101,8 @@ export declare class AuthService {
         emailVerified: boolean;
         firstName?: string;
         lastName?: string;
-    }, _ipAddress?: string, realm?: string): Promise<{
-        accessToken: string;
-        refreshToken: string;
-        user: IAuthUser;
-    }>;
-    completeFacebookSignUp(fallbackToken: string, email: string, accessToken: string, realm?: string): Promise<{
-        accessToken: string;
-        refreshToken: string;
-        user: IAuthUser;
-    }>;
+    }, _ipAddress?: string, realm?: string): Promise<AuthSessionResult>;
+    completeFacebookSignUp(fallbackToken: string, email: string, accessToken: string, realm?: string): Promise<AuthSessionResult>;
     unlinkSocialAccount(userId: string, provider: SocialProvider): Promise<{
         success: boolean;
         message: string;
@@ -147,6 +142,11 @@ export declare class AuthService {
     maskPhoneNumber(phone: string): string;
     private generateToken;
     private assertUserActive;
+    private issueSessionWithStepUp;
+    stepUpForLogin(userId: string, realm: string | undefined, method: StepUpMethod): Promise<{
+        stepUpToken?: string;
+        stepUpExpiresAt?: Date;
+    }>;
     private generateTokenPairAndStore;
 }
 //# sourceMappingURL=auth.service.d.ts.map

package/dist/services/auth.service.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;~~AAWzC~~,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAkB,MAAM,yCAAyC,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAiB,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAIjF,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,SAAS,EAAgC,MAAM,mCAAmC,CAAC;AAC5F,OAAO,EAAE,cAAc,EAAqB,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;~~AAQxD~~,qBACa,WAAW;IAuBpB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,sBAAsB;IAC9B,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,oBAAoB;IAC5B,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,wBAAwB;IAChC,OAAO,CAAC,gBAAgB;IAExB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,YAAY;IAEpB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,WAAW;~~IA1CrB~~,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA4B;IACtE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IAMvD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA+B;IAO5D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAC+B;gBAIvD,cAAc,EAAE,eAAe,CAAC,SAAS,CAAC,EAE1C,sBAAsB,EAAE,uBAAuB,EAC/C,UAAU,EAAE,UAAU,EACtB,mBAAmB,EAAE,mBAAmB,EACxC,oBAAoB,EAAE,2BAA2B,EACjD,mBAAmB,EAAE,mBAAmB,EACxC,wBAAwB,EAAE,wBAAwB,EAClD,gBAAgB,EAAE,gBAAgB,EAElC,cAAc,EAAE,WAAW,EAE3B,cAAc,EAAE,mBAAmB,CAAC,SAAS,CAAC,EAE9C,YAAY,EAAE,aAAa,EAE3B,UAAU,EAAE,WAAW,EAE/B,iBAAiB,EAAE,iBAAiB,EAE5B,WAAW,EAAE,YAAY,EAGjC,iBAAiB,CAAC,EAAE,kBAAkB;~~IAgBlC~~,MAAM,CACV,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC~~;QAAE~~,~~WAAW~~,~~EAAE,MAAM,~~CAAC;~~QAAC~~,~~YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IA2GpE,~~KAAK,CACT,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC~~;QAAE~~,~~WAAW~~,~~EAAE,MAAM,~~CAAC;~~QAAC~~,YAAY,~~EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IA4HpE,YAAY,~~CAChB,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAkIpE,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAmBrD,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwC9D,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA6B1C,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;~~IAuE3C~~,WAAW,CACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;~~IAuC3C~~,uBAAuB,CAC3B,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;~~IA2E3C~~,qBAAqB,CACzB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,EACpB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IA4FI,WAAW,CACf,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,sBAAsB,CAAC;KAC/B,CAAC;IA0EI,uBAAuB,CAC3B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IAgFI,iBAAiB,CACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;KAC3B,CAAC;IAuEI,iBAAiB,CACrB,QAAQ,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,EACzC,OAAO,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACnJ,UAAU,CAAC,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC~~;QAAE~~,~~WAAW~~,~~EAAE,MAAM,~~CAAC;~~QAAC~~,~~YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAoKpE,~~sBAAsB,CAC1B,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC~~;QAAE~~,~~WAAW~~,~~EAAE,MAAM,~~CAAC;~~QAAC~~,~~YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAmOpE,~~mBAAmB,CACvB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAC;QAAC,eAAe,EAAE,OAAO,CAAA;KAAE,CAAC;~~IA4BtF~~,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;~~IA6KvE~~,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;~~IAgGlE~~,IAAI,iBAAiB,IAAI,OAAO,CAE/B;IAKD,IAAI,aAAa,IAAI,OAAO,CAE3B;IAcK,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAuBrD,uBAAuB,CAC3B,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAChD,OAAO,CAAC,OAAO,CAAC;IA2Eb,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,GAAG,CAAC,EAAE;QAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,EACzF,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IA6BzD,cAAc,CACZ,GAAG,EAAE;QAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,EACxF,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB,IAAI;IAwCP,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI;IAgB/E,gBAAgB,CACd,GAAG,EAAE;QAAE,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,GAC7E,IAAI;IAiCP,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAWtC,OAAO,CAAC,aAAa;IAyBrB,OAAO,CAAC,gBAAgB;~~YAgBV~~,yBAAyB;CAsBxC"}
1	+ {"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAYzC,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAU3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAkB,MAAM,yCAAyC,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAiB,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAIjF,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,SAAS,EAAgC,MAAM,mCAAmC,CAAC;AAC5F,OAAO,EAAE,cAAc,EAAqB,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAYxD,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,IAAI,CAAC;CACxB;AAED,qBACa,WAAW;IAuBpB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,sBAAsB;IAC9B,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,oBAAoB;IAC5B,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,wBAAwB;IAChC,OAAO,CAAC,gBAAgB;IAExB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,YAAY;IAEpB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IA/ChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA4B;IACtE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IAMvD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA+B;IAO5D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAC+B;gBAIvD,cAAc,EAAE,eAAe,CAAC,SAAS,CAAC,EAE1C,sBAAsB,EAAE,uBAAuB,EAC/C,UAAU,EAAE,UAAU,EACtB,mBAAmB,EAAE,mBAAmB,EACxC,oBAAoB,EAAE,2BAA2B,EACjD,mBAAmB,EAAE,mBAAmB,EACxC,wBAAwB,EAAE,wBAAwB,EAClD,gBAAgB,EAAE,gBAAgB,EAElC,cAAc,EAAE,WAAW,EAE3B,cAAc,EAAE,mBAAmB,CAAC,SAAS,CAAC,EAE9C,YAAY,EAAE,aAAa,EAE3B,UAAU,EAAE,WAAW,EAE/B,iBAAiB,EAAE,iBAAiB,EAE5B,WAAW,EAAE,YAAY,EAGjC,iBAAiB,CAAC,EAAE,kBAAkB,EAErB,YAAY,CAAC,EAAE,kBAAkB,YAAA;IAgB9C,MAAM,CACV,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC;IAuGvB,KAAK,CACT,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC;IA4HvB,YAAY,CAChB,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAkIpE,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAmBrD,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwC9D,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA6B1C,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IA4E3C,WAAW,CACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAsC3C,uBAAuB,CAC3B,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;YAgCnC,oBAAoB;IAgBlC,OAAO,CAAC,YAAY;IAuBd,qBAAqB,CACzB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,EACpB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IA4FI,WAAW,CACf,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,sBAAsB,CAAC;KAC/B,CAAC;IA0EI,uBAAuB,CAC3B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IAgFI,iBAAiB,CACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;KAC3B,CAAC;IAuEI,iBAAiB,CACrB,QAAQ,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,EACzC,OAAO,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACnJ,UAAU,CAAC,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC;IAwJvB,sBAAsB,CAC1B,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC;IA4NvB,mBAAmB,CACvB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAC;QAAC,eAAe,EAAE,OAAO,CAAA;KAAE,CAAC;IA+BtF,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA2FvE,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAsGlE,IAAI,iBAAiB,IAAI,OAAO,CAE/B;IAKD,IAAI,aAAa,IAAI,OAAO,CAE3B;IAcK,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAuBrD,uBAAuB,CAC3B,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAChD,OAAO,CAAC,OAAO,CAAC;IA2Eb,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,GAAG,CAAC,EAAE;QAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,EACzF,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IA6BzD,cAAc,CACZ,GAAG,EAAE;QAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,EACxF,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB,IAAI;IAwCP,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI;IAgB/E,gBAAgB,CACd,GAAG,EAAE;QAAE,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,GAC7E,IAAI;IAiCP,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAWtC,OAAO,CAAC,aAAa;IAyBrB,OAAO,CAAC,gBAAgB;YA2BV,sBAAsB;IAc9B,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,IAAI,CAAA;KAAE,CAAC;YAW9C,yBAAyB;CAsBxC"}

package/dist/services/auth.service.js CHANGED Viewed

@@ -50,6 +50,10 @@ exports.AuthService = void 0;
 const common_1 = require("@nestjs/common");
 const jwt_1 = require("@nestjs/jwt");
 const account_locked_exception_1 = require("../exceptions/account-locked.exception");
+const password_reset_exceptions_1 = require("../exceptions/password-reset.exceptions");
+const verification_exceptions_1 = require("../exceptions/verification.exceptions");
+const ip_hash_1 = require("../utils/ip-hash");
+const step_up_token_service_1 = require("./step-up-token.service");
 const coded_http_exception_1 = require("../exceptions/coded-http.exception");
 const account_inactive_exception_1 = require("../exceptions/account-inactive.exception");
 const cookies_1 = require("../utils/cookies");
@@ -71,7 +75,7 @@ const provider_helpers_1 = require("../utils/provider-helpers");
 const cookie_options_1 = require("../utils/cookie-options");
 const personal_data_1 = require("../utils/personal-data");
 let AuthService = AuthService_1 = class AuthService {
-    constructor(userRepository, refreshTokenRepository, jwtService, refreshTokenService, bruteForceProtection, verificationService, oauthLinkingTokenService, facebookStrategy, securityLogger, lifecycleHooks, emailService, smsService, authModuleOptions, rateLimiter, jwtPayloadFactory) {
+    constructor(userRepository, refreshTokenRepository, jwtService, refreshTokenService, bruteForceProtection, verificationService, oauthLinkingTokenService, facebookStrategy, securityLogger, lifecycleHooks, emailService, smsService, authModuleOptions, rateLimiter, jwtPayloadFactory, stepUpTokens) {
         this.userRepository = userRepository;
         this.refreshTokenRepository = refreshTokenRepository;
         this.jwtService = jwtService;
@@ -85,6 +89,7 @@ let AuthService = AuthService_1 = class AuthService {
         this.emailService = emailService;
         this.smsService = smsService;
         this.rateLimiter = rateLimiter;
+        this.stepUpTokens = stepUpTokens;
         this.logger = new common_1.Logger(AuthService_1.name);
         this.authModuleOptions = authModuleOptions;
         this.bcryptRounds = authModuleOptions?.bcryptRounds ?? 12;
@@ -153,16 +158,19 @@ let AuthService = AuthService_1 = class AuthService {
             const errorStack = error instanceof Error ? error.stack : undefined;
             this.logger.error(`Failed to send verification email for user ${user.id}`, errorStack);
         }
-        const { accessToken, refreshToken } = await this.generateTokenPairAndStore(user, realm);
-        return { accessToken, refreshToken, user };
+        return this.issueSessionWithStepUp(user, realm, 'password');
     }
     async login(email, password, ipAddress, realm) {
         this.logger.log(`[AUTH_SERVICE] Login started (${(0, personal_data_1.emailForLog)(email)})`);
-        if (ipAddress && (await this.bruteForceProtection.checkIpRateLimit(ipAddress, realm))) {
-            throw new coded_http_exception_1.CodedHttpException({
-                message: 'Too many login attempts from this IP address. Please try again later.',
-                code: 'RATE_LIMIT_EXCEEDED',
-            }, common_1.HttpStatus.TOO_MANY_REQUESTS);
+        if (ipAddress) {
+            const ipLimit = await this.bruteForceProtection.checkIpRateLimitWithRetry(ipAddress, realm);
+            if (ipLimit.limited) {
+                throw new coded_http_exception_1.CodedHttpException({
+                    message: 'Too many login attempts from this IP address. Please try again later.',
+                    code: 'RATE_LIMIT_EXCEEDED',
+                    retryAfterSeconds: ipLimit.retryAfterSeconds,
+                }, common_1.HttpStatus.TOO_MANY_REQUESTS);
+            }
         }
         const user = await this.userRepository.findByEmail(email, realm);
         if (user && await this.bruteForceProtection.isAccountLockedById(user.id)) {
@@ -213,8 +221,7 @@ let AuthService = AuthService_1 = class AuthService {
         if (this.lifecycleHooks.onLogin) {
             await this.lifecycleHooks.onLogin(user);
         }
-        const { accessToken, refreshToken } = await this.generateTokenPairAndStore(user, realm);
-        return { accessToken, refreshToken, user };
+        return this.issueSessionWithStepUp(user, realm, 'password');
     }
     async refreshToken(refreshToken, ipAddress, realm) {
         try {
@@ -369,16 +376,18 @@ let AuthService = AuthService_1 = class AuthService {
     }
     async verifyEmail(email, code, realm) {
         const user = await this.userRepository.findByEmail(email, realm);
-        if (!user) {
-            throw new common_1.UnauthorizedException('Invalid email address');
+        try {
+            if (!user || user.emailVerified) {
+                throw new verification_exceptions_1.EmailVerificationCodeInvalidException();
+            }
+            await this.verificationService.verifyCredential(email, 'email', code, realm);
         }
-        if (user.emailVerified) {
-            return {
-                success: true,
-                message: 'Email is already verified',
-            };
+        catch (error) {
+            if (error instanceof common_1.HttpException && error.getStatus() < 500) {
+                throw new verification_exceptions_1.EmailVerificationCodeInvalidException();
+            }
+            throw error;
         }
-        await this.verificationService.verifyCredential(email, 'email', code, realm);
         await this.userRepository.markEmailVerified(user.id);
         if (this.lifecycleHooks.onEmailVerified) {
             await this.lifecycleHooks.onEmailVerified(user);
@@ -390,43 +399,37 @@ let AuthService = AuthService_1 = class AuthService {
         };
     }
     async resendVerificationEmail(email, realm) {
+        await this.enforceEmailCooldown('email-verification', email, realm, (retryAfterSeconds) => new verification_exceptions_1.VerificationEmailRateLimitException(retryAfterSeconds));
         const user = await this.userRepository.findByEmail(email, realm);
-        if (!user) {
-            throw new common_1.UnauthorizedException('Invalid email address');
-        }
-        if (user.emailVerified) {
-            return {
-                success: true,
-                message: 'Email is already verified',
-            };
-        }
-        if (user.emailVerificationSentAt) {
-            const timeSinceLastSent = Date.now() - user.emailVerificationSentAt.getTime();
-            const cooldownMs = 60 * 1000;
-            if (timeSinceLastSent < cooldownMs) {
-                const retryAfterSeconds = Math.ceil((cooldownMs - timeSinceLastSent) / 1000);
-                const { VerificationEmailRateLimitException } = await Promise.resolve().then(() => __importStar(require('../exceptions/verification.exceptions')));
-                throw new VerificationEmailRateLimitException(retryAfterSeconds);
-            }
-        }
-        await this.verificationService.invalidateCode(email, 'email', realm);
-        const verification = await this.verificationService.issueCredential(email, 'email', realm);
-        try {
-            await this.emailService.sendVerificationEmail(email, verification.credential, verification.expiresInMinutes, verification.url);
-            await this.userRepository.update(user.id, {
-                emailVerificationSentAt: new Date(),
+        if (user && !user.emailVerified) {
+            this.inBackground(`resend verification email for user ${user.id}`, async () => {
+                await this.verificationService.invalidateCode(email, 'email', realm);
+                const verification = await this.verificationService.issueCredential(email, 'email', realm);
+                await this.emailService.sendVerificationEmail(email, verification.credential, verification.expiresInMinutes, verification.url);
+                await this.userRepository.update(user.id, { emailVerificationSentAt: new Date() });
+                this.logger.log(`Verification email resent for user ${user.id}`);
             });
-            this.logger.log(`Verification email resent for user ${user.id}`);
-            return {
-                success: true,
-                message: 'Verification email sent successfully',
-            };
-        }
-        catch (error) {
-            const errorStack = error instanceof Error ? error.stack : undefined;
-            this.logger.error(`Failed to resend verification email for user ${user.id}`, errorStack);
-            throw new common_1.HttpException('Failed to send verification email. Please try again later.', common_1.HttpStatus.INTERNAL_SERVER_ERROR);
         }
+        return {
+            success: true,
+            message: 'If this address needs verifying, a new verification email has been sent.',
+        };
+    }
+    async enforceEmailCooldown(kind, email, realm, refusal) {
+        const salt = process.env.AUTH_IP_HASH_SALT || this.authModuleOptions?.jwtSecret || '';
+        const key = `auth:${kind}:cooldown:${realm ? `${realm}:` : ''}${(0, ip_hash_1.hashIp)(email.toLowerCase(), salt)}`;
+        const { allowed, resetAt } = await this.rateLimiter.checkRateLimit(key, 1, 60_000);
+        if (!allowed) {
+            throw refusal(Math.max(1, Math.ceil((resetAt.getTime() - Date.now()) / 1000)));
+        }
+        await this.rateLimiter.recordAttempt(key, 60_000);
+    }
+    inBackground(what, work) {
+        Promise.resolve()
+            .then(work)
+            .catch((error) => {
+            this.securityLogger.error(`Background ${what} failed: ${error instanceof Error ? error.message : String(error)}`, error instanceof Error ? error.stack : String(error), 'AuthService');
+        });
     }
     async sendPhoneVerification(userId, phoneNumber, countryCode, realm) {
         const user = await this.userRepository.findById(userId);
@@ -628,8 +631,7 @@ let AuthService = AuthService_1 = class AuthService {
             if (this.lifecycleHooks.onLogin) {
                 await this.lifecycleHooks.onLogin(user);
             }
-            const { accessToken, refreshToken } = await this.generateTokenPairAndStore(user, realm);
-            return { accessToken, refreshToken, user };
+            return this.issueSessionWithStepUp(user, realm, 'oauth');
         }
         user = await this.userRepository.findByEmail(profile.email, realm);
         if (user) {
@@ -661,8 +663,7 @@ let AuthService = AuthService_1 = class AuthService {
             if (this.lifecycleHooks.onLogin) {
                 await this.lifecycleHooks.onLogin(user);
             }
-            const { accessToken, refreshToken } = await this.generateTokenPairAndStore(user, realm);
-            return { accessToken, refreshToken, user };
+            return this.issueSessionWithStepUp(user, realm, 'oauth');
         }
         this.logger.log(`[AUTH_SERVICE] Creating new OAuth user (${(0, personal_data_1.emailForLog)(profile.email)})`);
         const providerEnum = auth_user_interface_1.AuthProvider[provider.toUpperCase()];
@@ -680,8 +681,7 @@ let AuthService = AuthService_1 = class AuthService {
             await this.lifecycleHooks.onSignup(newUser);
         }
         this.logger.log(`[AUTH_SERVICE] Lifecycle hooks completed for user: ${newUser.id}`);
-        const { accessToken, refreshToken } = await this.generateTokenPairAndStore(newUser, realm);
-        return { accessToken, refreshToken, user: newUser };
+        return this.issueSessionWithStepUp(newUser, realm, 'oauth');
     }
     async completeFacebookSignUp(fallbackToken, email, accessToken, realm) {
         this.logger.log(`[AUTH_SERVICE] ===== COMPLETE FACEBOOK SIGN-UP =====`);
@@ -743,13 +743,9 @@ let AuthService = AuthService_1 = class AuthService {
             if (this.lifecycleHooks.onLogin) {
                 await this.lifecycleHooks.onLogin(linkedUser);
             }
-            const { accessToken: jwtAccessToken, refreshToken } = await this.generateTokenPairAndStore(linkedUser, realm);
+            const session = await this.issueSessionWithStepUp(linkedUser, realm, 'oauth');
             this.logger.log(`[AUTH_SERVICE] Facebook account linking complete for user: ${linkedUser.id}`);
-            return {
-                accessToken: jwtAccessToken,
-                refreshToken,
-                user: linkedUser,
-            };
+            return session;
         }
         this.logger.log(`[AUTH_SERVICE] Creating new Facebook user (${(0, personal_data_1.emailForLog)(email)})`);
         const newUser = await this.userRepository.create({
@@ -779,10 +775,10 @@ let AuthService = AuthService_1 = class AuthService {
             const errorStack = error instanceof Error ? error.stack : undefined;
             this.logger.error(`[AUTH_SERVICE] Failed to send verification email for user ${newUser.id}: ${errorMessage}`, errorStack);
         }
-        const { accessToken: jwtAccessToken, refreshToken } = await this.generateTokenPairAndStore(newUser, realm);
+        const session = await this.issueSessionWithStepUp(newUser, realm, 'oauth');
         this.logger.log(`[AUTH_SERVICE] Facebook sign-up complete for user: ${newUser.id}`);
         this.logger.log(`[AUTH_SERVICE] NOTE: Email verification required (check email for code)`);
-        return { accessToken: jwtAccessToken, refreshToken, user: newUser };
+        return session;
     }
     async unlinkSocialAccount(userId, provider) {
         this.logger.log(`[AUTH_SERVICE] Unlink ${provider} account for user: ${userId}`);
@@ -790,88 +786,70 @@ let AuthService = AuthService_1 = class AuthService {
     }
     async requestPasswordReset(email, ipAddress, realm) {
         const normalizedEmail = email.toLowerCase();
-        if (ipAddress && this.rateLimiter) {
+        const answer = {
+            success: true,
+            message: 'If an account exists with this email, a password reset code has been sent.',
+        };
+        if (ipAddress) {
             const ipRateLimitKey = realm ? `${realm}:password-reset:ip:${ipAddress}` : `password-reset:ip:${ipAddress}`;
-            const ipLimit = await this.rateLimiter.checkRateLimit(ipRateLimitKey, 5, 3600000);
+            const ipLimit = await this.rateLimiter.checkRateLimit(ipRateLimitKey, 5, 3_600_000);
             if (!ipLimit.allowed) {
-                const retryAfterSeconds = Math.ceil((ipLimit.resetAt.getTime() - Date.now()) / 1000);
                 this.securityLogger.warn(`IP rate limit exceeded for password reset (${(0, personal_data_1.ipForLog)(ipAddress)}), resetAt: ${ipLimit.resetAt.toISOString()}`, 'AuthService');
-                const { PasswordResetRateLimitException } = await Promise.resolve().then(() => __importStar(require('../exceptions/password-reset.exceptions')));
-                throw new PasswordResetRateLimitException(retryAfterSeconds);
+                throw new password_reset_exceptions_1.PasswordResetRateLimitException(Math.max(1, Math.ceil((ipLimit.resetAt.getTime() - Date.now()) / 1000)));
             }
-            await this.rateLimiter.recordAttempt(ipRateLimitKey, 3600000);
+            await this.rateLimiter.recordAttempt(ipRateLimitKey, 3_600_000);
         }
+        await this.enforceEmailCooldown('password-reset', normalizedEmail, realm, (retryAfterSeconds) => new password_reset_exceptions_1.PasswordResetRateLimitException(retryAfterSeconds));
         const user = await this.userRepository.findByEmail(normalizedEmail, realm);
-        if (!user) {
-            this.securityLogger.log(auth_logger_interface_1.SecurityEvent.PASSWORD_RESET_REQUESTED, {
-                email: normalizedEmail,
-                ipAddress,
-                result: 'EMAIL_NOT_FOUND',
-            });
-            return {
-                success: true,
-                message: 'If an account exists with this email, a password reset code has been sent.',
-            };
-        }
-        if (await this.bruteForceProtection.isAccountLocked(normalizedEmail, realm)) {
-            const remainingTime = await this.bruteForceProtection.getRemainingLockoutTime(normalizedEmail, realm);
-            throw new account_locked_exception_1.AccountLockedException(remainingTime);
-        }
-        if (user.passwordResetSentAt) {
-            const timeSinceLastReset = Date.now() - user.passwordResetSentAt.getTime();
-            const cooldownMs = 60 * 1000;
-            if (timeSinceLastReset < cooldownMs) {
-                const retryAfterSeconds = Math.ceil((cooldownMs - timeSinceLastReset) / 1000);
-                const { PasswordResetRateLimitException } = await Promise.resolve().then(() => __importStar(require('../exceptions/password-reset.exceptions')));
-                throw new PasswordResetRateLimitException(retryAfterSeconds);
-            }
-        }
-        if (!user.passwordHash && (0, provider_helpers_1.hasSocialIdentity)(user)) {
-            this.logger.warn(`Password reset requested for social-only user ${user.id}`);
+        const skip = !user
+            ? 'EMAIL_NOT_FOUND'
+            : await this.bruteForceProtection.isAccountLocked(normalizedEmail, realm)
+                ? 'SKIPPED_LOCKED'
+                :
+                    !user.passwordHash && (0, provider_helpers_1.hasSocialIdentity)(user)
+                        ? 'SKIPPED_SOCIAL_ONLY'
+                        : null;
+        if (!user || skip) {
             this.securityLogger.log(auth_logger_interface_1.SecurityEvent.PASSWORD_RESET_REQUESTED, {
-                userId: user.id,
+                ...(user ? { userId: user.id } : {}),
                 email: normalizedEmail,
                 ipAddress,
-                result: 'SKIPPED_SOCIAL_ONLY',
+                result: skip,
             });
-            return {
-                success: true,
-                message: 'If an account exists with this email, a password reset code has been sent.',
-            };
+            return answer;
         }
-        await this.verificationService.invalidateCode(normalizedEmail, 'password-reset', realm);
-        const reset = await this.verificationService.issueCredential(normalizedEmail, 'password-reset', realm);
-        try {
+        this.inBackground(`password reset email for user ${user.id}`, async () => {
+            await this.verificationService.invalidateCode(normalizedEmail, 'password-reset', realm);
+            const reset = await this.verificationService.issueCredential(normalizedEmail, 'password-reset', realm);
             await this.emailService.sendPasswordResetEmail(normalizedEmail, reset.credential, reset.url ?? '', reset.expiresInMinutes);
-            await this.userRepository.update(user.id, {
-                passwordResetSentAt: new Date(),
-            });
-            this.logger.log(`Password reset email sent for user ${user.id}`);
+            await this.userRepository.update(user.id, { passwordResetSentAt: new Date() });
             this.securityLogger.log(auth_logger_interface_1.SecurityEvent.PASSWORD_RESET_REQUESTED, {
                 userId: user.id,
                 email: normalizedEmail,
                 ipAddress,
                 result: 'SUCCESS',
             });
-            return {
-                success: true,
-                message: 'If an account exists with this email, a password reset code has been sent.',
-            };
-        }
-        catch (error) {
-            const errorStack = error instanceof Error ? error.stack : undefined;
-            this.logger.error(`Failed to send password reset email for user ${user.id}`, errorStack);
-            return {
-                success: true,
-                message: 'If an account exists with this email, a password reset code has been sent.',
-            };
-        }
+        });
+        return answer;
     }
     async resetPassword(email, code, newPassword, ipAddress, realm) {
         const normalizedEmail = email.toLowerCase();
+        const { isValid, errors } = await this.passwordValidationService.validatePassword(newPassword);
+        if (!isValid) {
+            throw new password_reset_exceptions_1.WeakPasswordException(errors);
+        }
         const user = await this.userRepository.findByEmail(normalizedEmail, realm);
-        if (!user) {
-            throw new common_1.UnauthorizedException('Invalid email or verification code');
+        try {
+            await this.verificationService.verifyCredential(normalizedEmail, 'password-reset', code, realm);
+            if (!user) {
+                throw new password_reset_exceptions_1.PasswordResetCodeInvalidException();
+            }
+        }
+        catch (error) {
+            if (error instanceof common_1.HttpException && error.getStatus() < 500) {
+                throw new password_reset_exceptions_1.PasswordResetCodeInvalidException();
+            }
+            throw error;
         }
         if (await this.bruteForceProtection.isAccountLocked(normalizedEmail, realm)) {
             const remainingTime = await this.bruteForceProtection.getRemainingLockoutTime(normalizedEmail, realm);
@@ -880,12 +858,6 @@ let AuthService = AuthService_1 = class AuthService {
         if (!user.passwordHash && (0, provider_helpers_1.hasSocialIdentity)(user)) {
             throw new common_1.BadRequestException('This account uses social login. Please sign in with Google, Facebook, or Apple.');
         }
-        const { isValid, errors } = await this.passwordValidationService.validatePassword(newPassword);
-        if (!isValid) {
-            const { WeakPasswordException } = await Promise.resolve().then(() => __importStar(require('../exceptions/password-reset.exceptions')));
-            throw new WeakPasswordException(errors);
-        }
-        await this.verificationService.verifyCredential(normalizedEmail, 'password-reset', code, realm);
         const passwordHash = await bcrypt.hash(newPassword, this.bcryptRounds);
         const updatedUser = await this.userRepository.updatePassword(user.id, passwordHash);
         await this.refreshTokenRepository.deleteByUserId(user.id);
@@ -1022,6 +994,20 @@ let AuthService = AuthService_1 = class AuthService {
         });
         throw new account_inactive_exception_1.AccountInactiveException();
     }
+    async issueSessionWithStepUp(user, realm, method) {
+        const { accessToken, refreshToken } = await this.generateTokenPairAndStore(user, realm);
+        return { accessToken, refreshToken, user, ...(await this.stepUpForLogin(user.id, realm, method)) };
+    }
+    async stepUpForLogin(userId, realm, method) {
+        if (!this.authModuleOptions?.stepUp?.issueOnLogin) {
+            return {};
+        }
+        if (!this.stepUpTokens) {
+            throw new Error('stepUp.issueOnLogin is set but StepUpTokenService is not available');
+        }
+        const { stepUpToken, expiresAt } = await this.stepUpTokens.mint(userId, realm, method);
+        return { stepUpToken, stepUpExpiresAt: expiresAt };
+    }
     async generateTokenPairAndStore(user, realm) {
         this.assertUserActive(user, 'issue');
         const accessToken = this.generateToken(user, realm);
@@ -1049,11 +1035,12 @@ exports.AuthService = AuthService = AuthService_1 = __decorate([
     __param(13, (0, common_1.Inject)('RATE_LIMITER')),
     __param(14, (0, common_1.Optional)()),
     __param(14, (0, common_1.Inject)(constants_1.JWT_PAYLOAD_FACTORY)),
+    __param(15, (0, common_1.Optional)()),
     __metadata("design:paramtypes", [Object, Object, jwt_1.JwtService,
         refresh_token_service_1.RefreshTokenService,
         brute_force_protection_service_1.BruteForceProtectionService,
         verification_service_1.VerificationService,
         oauth_linking_token_service_1.OAuthLinkingTokenService,
-        facebook_strategy_1.FacebookStrategy, Object, Object, Object, Object, Object, Object, Object])
+        facebook_strategy_1.FacebookStrategy, Object, Object, Object, Object, Object, Object, Object, step_up_token_service_1.StepUpTokenService])
 ], AuthService);
 //# sourceMappingURL=auth.service.js.map